Infection Qvo6, ZHPDiag lancé, demande d'aide pour ZHPFix

CoralieT · le 20 mai 2014

Bonsoir Apollo,

je me permets de revenir vers toi car le second PC que tu avais dépanné d'un virus en fin d'année est à nouveau infecté...

J'ai lancé le diag ZHP et te l'envoie dans le lien cjoint :

http://cjoint.com/?DEuvdl5LLUz

Peux-tu à nouveau m'aider pour le désinfecter ?

D'avance merci de ta réponse !

@+

Apollo · le 20 mai 2014

Bonsoir Coralie,

Mais euuuh, c'est pas infecté qu'il est, c'est mitraillé, ça ne m'étonne pas puisque tu as laissé IE6 (très dangereux) au lieu de le remplacer par IE8 (le dernier pour XP)

ZHPFix :

Ferme toutes les applications ouvertes
Double-clique sur ZHPFix, raccourci installé par ZHPDiag sur le Bureau
Important:
Sous Vista et Windows 7/8 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur.
Copie les lignes ci-dessous dans la fenêtre

sauf le mot citation.

Script ZHPFix

[MD5.E91C669DB45EC0F1D18185A9B7006E44] - (.Cherished Technololgy LIMITED - IePlugin Service.) -- C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe [705136] [PID.456] =>Trojan.SProtector
[MD5.6E8E51C109CA1B3D06DFC8C4F08F23A8] - (.Cherished Technololgy LIMITED - WPM Service.) -- C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe [549008] [PID.484] =>PUP.WpManager
[MD5.949A54971EF61E9D84B7C559B405A585] - (...) -- C:\Program Files\003\buuoujqmrk32.exe [541696] [PID.3916] =>PUP.AdPeak
[MD5.4F5C9DB427D298A204408AC7623D1A6B] - (.Pas de propriétaire - NewPlayerUpdaterService.) -- C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe [11776] [PID.2144] =>Adware.NewPlayer
[MD5.03E4769E69DA12C48253CF0E5FE3B440] - (.SecureAssist - Pas de description.) -- C:\Program Files\SupraSavings\SecureAssist.exe [1283616] [PID.2248] =>PUP.SupraSavings
[MD5.3FA7DA4AB480C9B747F3B98DDF65CDA0] - (...) -- C:\Program Files\webget\bin\utilwebget.exe [317720] [PID.3616] =>PUP.WebGet
[MD5.3E902906FB3786F2F7D8E594C1A6B53A] - (...) -- C:\Documents and Settings\jean claude\Application Data\VOPackage\VOsrv.exe [51712] [PID.1328] =>Adware.Downware
[MD5.B71F495188F5E3EDC2B5DB4B401C6F65] - (.Wajam Internet Technologies Inc. - Wajam Internet Enhancer Service.) -- C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe [217600] [PID.1480] =>PUP.Wajam
[MD5.137BFD62FFEF76E059890386065F22E4] - (.Wajam Internet Technologies Inc. - Wajam Internet Enhancer.) -- C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe [67072] [PID.5032] =>PUP.Wajam
[MD5.3FA7DA4AB480C9B747F3B98DDF65CDA0] - (...) -- C:\Program Files\webget\updatewebget.exe [317720] [PID.7536] =>PUP.WebGet
[MD5.A389D90851C725B1A63715E1C8003E7A] - (...) -- C:\Program Files\webget\bin\webget.PurBrowse.exe [239384] [PID.7040] =>PUP.WebGet
[MD5.99524CF7C2BD68B61638F33F41CC8EA9] - (...) -- C:\Program Files\webget\bin\webget.BrowserAdapter.exe [96536] [PID.2632] =>PUP.WebGet
G1 - GCS: Preference [user Data\Default] http://istart.webssearches.com =>Hijacker.WebsSearches
G0 - GCSP: Preference [user Data\Default][HomePage] http://istart.webssearches.com =>Hijacker.WebsSearches
G2 - GCE: Preference [user Data\Default] [dmgpbjjcdccinnndjdgmegndbmhbgglb] Freeven pro 1.2 v.1.26.29, (Activé) =>PUP.Freeven
G2 - GCE: Preference [user Data\Default] [majjphhgppkndjjkmhhnbgafooenebhd] MediaPlayerplus v.1.26.32, (Activé) =>PUP.CrossRider
G2 - GCE: Preference [user Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick Start v.3.2.3, (Activé) =>PUP.QuickStart
M3 - MFPP: Plugins - [jean claude] -- C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\searchplugins\default-search.xml =>Hijacker.Browsers
M0 - MFSP: prefs.js [jean claude - hxxw6v49.default] http://istart.webssearches.com =>Hijacker.WebsSearches
M2 - MFEP: prefs.js [jean claude - hxxw6v49.default\{35FB143E-3B2D-374D-E78E-3E8B20AB8C9C}] [] Settings Manager v5.0.0.12692 (..) =>PUP.SystemK
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net? =>Hijacker.Browsers
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.default-search.net? =>Hijacker.Browsers
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.default-search.net? =>Hijacker.Browsers
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.default-search.net? =>Hijacker.Browsers
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://istart.webssearches.com =>Hijacker.WebsSearches
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:4538;https=127.0.0.1:4538; =>Hijacker.Proxy
O2 - BHO: 2rs3 - {10AD2C61-0898-4348-8600-14A342F22AC3} . (...) -- C:\Program Files\SupraSavings\2rs3.dll =>PUP.SupraSavings
O2 - BHO: CrossriderApp0054246 - {11111111-1111-1111-1111-110511421146} . (.Freeven - MediaPlayerplus BHO.) -- C:\Program Files\MediaPlayerplus\MediaPlayerplus-bho.dll =>PUP.CrossRider
O2 - BHO: CrossriderApp0054253 - {11111111-1111-1111-1111-110511421153} . (.Freeven - Freeven pro 1.2 BHO.) -- C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll =>PUP.CrossRider
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files\SupTab\SupTab.dll =>PUP.SupTab
O4 - GS\Program [AllUsers]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - HKCU\..\Run: [Optimizer Pro] . (.PC Utilities Software Limited - Optimizer Pro Launcher.) -- C:\Program Files\Optimizer Pro\OptProLauncher.exe =>PUP.OptimizerPro
O4 - HKUS\S-1-5-21-1547161642-261903793-725345543-1004\..\Run: [Optimizer Pro] . (.PC Utilities Software Limited - Optimizer Pro Launcher.) -- C:\Program Files\Optimizer Pro\OptProLauncher.exe =>PUP.OptimizerPro
O20 - AppInit_DLLs: . (...) - C:\Program Files\Optimizer Pro\OptProCrash.dll =>PUP.OptimizerPro
O23 - Service: buuoujqmrk32 (buuoujqmrk32) . (...) - C:\Program Files\003\buuoujqmrk32.exe =>PUP.AdPeak
O23 - Service: Optimizer Pro Crash Monitor (ca82e1a5) . (...) - c:\Program Files\Optimizer Pro\OptProCrash.dll =>PUP.OptimizerPro
O23 - Service: IePlugin Service (IePluginService) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.SProtector
O23 - Service: NewPlayer Updater Service (NewPlayerUpdaterService) . (.Pas de propriétaire - NewPlayerUpdaterService.) - C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe =>Adware.NewPlayer
O23 - Service: SecureAssist (SecureAssist) . (.SecureAssist - Pas de description.) - C:\Program Files\SupraSavings\SecureAssist.exe =>PUP.SupraSavings
O23 - Service: Update webget (Update webget) . (...) - C:\Program Files\webget\updatewebget.exe =>PUP.WebGet
O23 - Service: Util webget (Util webget) . (...) - C:\Program Files\webget\bin\utilwebget.exe =>PUP.WebGet
O23 - Service: Service Component of VO (vosr) . (...) - C:\Documents and Settings\jean claude\Application Data\VOPackage\VOsrv.exe =>Adware.Downware
O23 - Service: Wajam Internet Enhancer Service (Wajam Internet Enhancer Service) . (.Wajam Internet Technologies Inc. - Wajam Internet Enhancer Service.) - C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe =>PUP.Wajam
O23 - Service: Wpm Service (Wpm) . (.Cherished Technololgy LIMITED - WPM Service.) - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager
O36 - AppCertDlls: (x64) . (...) -- c:\program files\settings manager\systemk\x64\sysapcrt.dll =>PUP.SystemK
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-1.job [1450] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-2.job [1424] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-3.job [3454] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-4.job [2198] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-5.job [1530] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-6.job [1454] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-7.job [1388] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-2.job [1394] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-3.job [3458] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-4.job [2156] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-7.job [1350] =>PUP.CrossRider
O39 - APT: - (..) -- C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job [278] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job [272] =>PUP.SpeedUpMyPC
O41 - Driver: ({9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt) . (.StdLib - StdLib.) - C:\WINDOWS\system32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys =>PUP.LinkiDoo
O42 - Logiciel: Freeven pro 1.2 - (.Freeven.) [HKLM] -- Freeven pro 1.2 =>PUP.Freeven
O42 - Logiciel: NewPlayer - (...) [HKLM] -- NewPlayer =>Adware.NewPlayer
O42 - Logiciel: SupraSavings - (.SupraSavings.) [HKLM] -- {E6B105B8-1F65-4428-9397-1DFD8A03B94D} =>PUP.SupraSavings
O42 - Logiciel: VO Package - (...) [HKLM] -- VOPackage =>Adware.Downware
O42 - Logiciel: WPM18.8.0.304 - (.Cherished Technololgy LIMITED.) [HKLM] -- WPM =>PUP.WpManager
O42 - Logiciel: Wajam - (.Wajam.) [HKLM] -- Wajam =>PUP.Wajam
O42 - Logiciel: fst_fr_179 - (.FreeSoftToday.) [HKLM] -- fst_fr_179_is1 =>Adware.FreeSoftToday
O42 - Logiciel: suprasavings - (.suprasavings.) [HKLM] -- suprasavings =>PUP.SupraSavings
O42 - Logiciel: webget - (.webget.) [HKLM] -- webget =>PUP.WebGet
O42 - Logiciel: webssearches uninstaller - (.webssearches.) [HKLM] -- webssearches uninstaller =>Hijacker.WebsSearches
[HKCU\Software\AnyProtect] =>PUP.AnyProtect
[HKCU\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\Freeven pro 1.2] =>PUP.Freeven
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\SupraSavings] =>PUP.SupraSavings
[HKCU\Software\SystemK] =>PUP.SystemK
[HKCU\Software\TBSB01620] => Adware. BullseyeToolbar*
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKCU\Software\Tutorials] =>PUP.AgenceExclusive
[HKCU\Software\Wajam] =>PUP.Wajam
[HKCU\Software\webget] =>PUP.WebGet
[HKLM\Software\BetterSurf] =>PUP.BetterSurf
[HKLM\Software\FreeSoftToday] =>Adware.FreeSoftToday
[HKLM\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKLM\Software\LevelQualityWatcher] =>PUP.LevelQualityWatcher
[HKLM\Software\Linkey] =>PUP.LinkeySearch
[HKLM\Software\Rr Savings] =>PUP.SupraSavings
[HKLM\Software\SystemK] =>PUP.SystemK
[HKLM\Software\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wpm] =>PUP.WpManager
[HKLM\Software\supTab] =>PUP.SupTab
[HKLM\Software\supWPM] =>PUP.WpManager
O43 - CFD: 19/05/2014 - 16:33:21 - [] ----D C:\Program Files\003 =>PUP.AdPeak
O43 - CFD: 20/05/2014 - 18:03:16 - [] ----D C:\Program Files\Freeven pro 1.2 =>PUP.Freeven
O43 - CFD: 19/05/2014 - 12:21:43 - [] ----D C:\Program Files\fst_fr_179 =>Adware.FreeSoftToday
O43 - CFD: 15/05/2014 - 14:42:44 - [] ----D C:\Program Files\Linkey =>PUP.LinkeySearch
O43 - CFD: 20/05/2014 - 19:59:34 - [] ----D C:\Program Files\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 19/05/2014 - 16:41:07 - [] ----D C:\Program Files\NewPlayer =>Adware.NewPlayer
O43 - CFD: 15/05/2014 - 14:41:32 - [] ----D C:\Program Files\Settings Manager =>PUP.SystemK
O43 - CFD: 19/05/2014 - 16:39:38 - [] ----D C:\Program Files\suprasavings =>PUP.SupraSavings
O43 - CFD: 15/05/2014 - 12:03:28 - [] ----D C:\Program Files\SupTab =>PUP.SupTab
O43 - CFD: 19/05/2014 - 16:33:50 - [] ----D C:\Program Files\Wajam =>PUP.Wajam
O43 - CFD: 15/05/2014 - 15:48:02 - [] ----D C:\Program Files\webget =>PUP.WebGet
O43 - CFD: 15/05/2014 - 12:03:38 - [] ----D C:\Documents and Settings\All Users\Application Data\IePluginService =>Trojan.SProtector
O43 - CFD: 19/05/2014 - 12:02:10 - [0] ----D C:\Documents and Settings\All Users\Application Data\systemk =>PUP.SystemK
O43 - CFD: 15/05/2014 - 12:03:09 - [] ----D C:\Documents and Settings\All Users\Application Data\WPM =>PUP.WpManager
O43 - CFD: 19/05/2014 - 16:37:45 - [0] ----D C:\Documents and Settings\jean claude\Application Data\Activeris =>PUP.Activeris
O43 - CFD: 15/05/2014 - 14:41:41 - [] ----D C:\Documents and Settings\jean claude\Application Data\Settings Manager =>PUP.SystemK
O43 - CFD: 15/05/2014 - 12:03:20 - [] ----D C:\Documents and Settings\jean claude\Application Data\SupTab =>PUP.SupTab
O43 - CFD: 19/05/2014 - 13:59:52 - [] ----D C:\Documents and Settings\jean claude\Application Data\VOPackage =>Adware.Downware
O43 - CFD: 15/05/2014 - 12:02:09 - [0] ----D C:\Documents and Settings\jean claude\Application Data\webssearches =>Hijacker.WebsSearches
O43 - CFD: 15/05/2014 - 18:38:45 - [] ----D C:\Documents and Settings\jean claude\Local Settings\Application Data\freeSOFTtoday =>Adware.FreeSoftToday
O43 - CFD: 19/05/2014 - 12:11:34 - [] ----D C:\Documents and Settings\jean claude\Local Settings\Application Data\fst_fr_179 =>Adware.FreeSoftToday
O43 - CFD: 19/05/2014 - 16:41:22 - [] ----D C:\Documents and Settings\jean claude\Local Settings\Application Data\newplayer =>Adware.NewPlayer
O44 - LFC:[MD5.A1F11338301F7D3DE433858E2FB3C937] - 12/05/2014 - 15:40:56 ---A- . (.StdLib - StdLib.) -- C:\WINDOWS\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys [55224] =>PUP.LinkiDoo
O44 - LFC:[MD5.72522DFF1EC02445B9DA5567C35F58EE] - 19/05/2014 - 15:39:41 ---A- . (...) -- C:\WINDOWS\system32\SecureAssist.ini [5544] =>PUP.SupraSavings
O44 - LFC:[MD5.6D6391C03B0243DDC36AD64C374FAC60] - 19/05/2014 - 15:39:41 ---A- . (...) -- C:\WINDOWS\system32\SecureAssistOff.ini [2496] =>PUP.SupraSavings
O44 - LFC:[MD5.DF39FA86C02C6DDBA5FC84742EDEF889] - 19/05/2014 - 15:39:44 ---A- . (.SecureAssist - Pas de description.) -- C:\WINDOWS\system32\SecureAssist.dll [295080] =>PUP.SupraSavings
O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard
O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard
O50 - IFEO:Image File Execution Options - dprotectsvc.exe - tasklist.exe =>Trojan.Staser
O50 - IFEO:Image File Execution Options - jumpflip - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch
O50 - IFEO:Image File Execution Options - searchinstaller.exe - tasklist.exe => PUP.Babylon
O50 - IFEO:Image File Execution Options - searchsettings.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - searchsettings64.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar
O50 - IFEO:Image File Execution Options - umbrella.exe - tasklist.exe =>Adware.IMBooster
O50 - IFEO:Image File Execution Options - utiljumpflip.exe - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - volaro - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - vonteera - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - websteroids.exe - tasklist.exe =>PUP.TubeDimmer
O50 - IFEO:Image File Execution Options - websteroidsservice.exe - tasklist.exe =>PUP.TubeDimmer
O58 - SDL:12/05/2014 - 15:40:56 ---A- . (.StdLib - StdLib.) -- C:\WINDOWS\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys [55224] =>PUP.LinkiDoo
O64 - Services: CurCS - 19/05/2014 - C:\Program Files\003\buuoujqmrk32.exe (buuoujqmrk32) .(...) - LEGACY_BUUOUJQMRK32 =>PUP.AdPeak
O64 - Services: CurCS - 19/05/2014 - c:\Program Files\Optimizer Pro\OptProCrash.dll (ca82e1a5) .(...) - LEGACY_CA82E1A5 =>PUP.OptimizerPro
O64 - Services: CurCS - 11/04/2014 - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe (IePluginService) .(.Cherished Technololgy LIMITED - IePlugin Service.) - LEGACY_IEPLUGINSERVICE =>Trojan.SProtector
O64 - Services: CurCS - 05/05/2014 - C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe (NewPlayerUpdaterService) .(.Pas de propriétaire - NewPlayerUpdaterService.) - LEGACY_NEWPLAYERUPDATERSERVICE =>Adware.NewPlayer
O64 - Services: CurCS - 12/03/2014 - C:\Program Files\SupraSavings\SecureAssist.exe (SecureAssist) .(.SecureAssist - Pas de description.) - LEGACY_SECUREASSIST =>PUP.SupraSavings
O64 - Services: CurCS - 20/05/2014 - C:\Program Files\webget\updatewebget.exe (Update webget) .(...) - LEGACY_UPDATE_WEBGET =>PUP.WebGet
O64 - Services: CurCS - 20/05/2014 - C:\Program Files\webget\bin\utilwebget.exe (Util webget) .(...) - LEGACY_UTIL_WEBGET =>PUP.WebGet
O64 - Services: CurCS - 15/05/2014 - C:\Documents and Settings\jean claude\Application Data\VOPackage\VOsrv.exe (vosr) .(...) - LEGACY_VOSR =>Adware.Downware
O64 - Services: CurCS - 15/05/2014 - C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe (Wajam Internet Enhancer Service) .(.Wajam Internet Technologies Inc. - Wajam Internet Enhancer Service.) - LEGACY_WAJAM_INTERNET_ENHANCER_SERVICE =>PUP.Wajam
O64 - Services: CurCS - 12/05/2014 - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe (Wpm) .(.Cherished Technololgy LIMITED - WPM Service.) - LEGACY_WPM =>PUP.WpManager
O64 - Services: CurCS - 12/05/2014 - C:\WINDOWS\system32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys ({9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt) .(.StdLib - StdLib.) - LEGACY_{9EDD0EA8-2819-47C2-8320-B007D5996F8A}GT =>PUP.LinkiDoo
O69 - SBI: prefs.js [jean claude - hxxw6v49.default] user_pref("extensions.crossrider.bic", "145ff59eb0e2363fcb49b95c672e7c87"); =>PUP.CrossRider
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} [DefaultScope] - (webssearches) - http://istart.webssearches.com =>Hijacker.WebsSearches
O90 - PUC: "8B501B6E56F182443979D1DFA8309BD4" . (.SupraSavings.) -- c:\WINDOWS\Installer\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}\icon64.ico =>PUP.SupraSavings
O90 - PUC: "9FEB8FB96CD4CF54A95AB4311193C2DA" . (.Boxore Client.) -- C:\WINDOWS\Installer\{9BF8BEF9-4DC6-45FC-9AA5-4B1311392CAD}\boxore.ico =>Adware.Boxore
O90 - PUC: "DF720937002023F49ACAE8048560C5A1" . (.SupraSavings.) -- c:\WINDOWS\Installer\{739027FD-0200-4F32-A9AC-8E4058065C1A}\icon64.ico =>PUP.SupraSavings
[MD5.4F66BD0B99AF7589822AAF08326C643E] [WIS][13/03/2013] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\2beb17.msi [24576] =>Adware.Boxore
[MD5.EF7C5A15564DC9E880CF72CCFF8C2439] [WIS][19/05/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\8d645d.msi [1868288] =>PUP.SupraSavings
[MD5.6B6A4EA3FDCA0B67976B3E89AE651734] [WIS][19/05/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\909554.msi [500224] =>PUP.SupraSavings
[MD5.BF36448E6BEE12BEC0377C5F13FFB8B3] [WIS][13/03/2013] (.Iminent - Iminent.) -- C:\Windows\Installer\f1a1ae.msi [1772032] =>Adware.IMBooster
[HKCR\CLSID\{11111111-1111-1111-1111-110511421146}] (MediaPlayerplus) =>PUP.CrossRider
[HKCR\CLSID\{11111111-1111-1111-1111-110511421153}] (Freeven pro 1.2) =>PUP.Freeven
[HKCR\CLSID\{22222222-2222-2222-2222-220522422246}] (CrossriderApp0054246.Sandbox) =>PUP.CrossRider
[HKCR\CLSID\{22222222-2222-2222-2222-220522422253}] (CrossriderApp0054253.Sandbox) =>PUP.CrossRider
[HKCR\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}] (Linkey) =>PUP.LinkeySearch
[HKCR\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}] (SystemK Module) =>PUP.SystemK
SR - | Auto 19/05/2014 541696 | (buuoujqmrk32) . (...) - C:\Program Files\003\buuoujqmrk32.exe =>PUP.AdPeak
SR - | Auto 19/05/2014 2900424 | (ca82e1a5) . (...) - c:\Program Files\Optimizer Pro\OptProCrash.dll =>PUP.OptimizerPro
SR - | Auto 11/04/2014 705136 | (IePluginService) . (.Cherished Technololgy LIMITED.) - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.SProtector
SR - | Auto 05/05/2014 11776 | (NewPlayerUpdaterService) . (...) - C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe =>Adware.NewPlayer
SR - | Auto 12/03/2014 1283616 | (SecureAssist) . (.SecureAssist.) - C:\Program Files\SupraSavings\SecureAssist.exe =>PUP.SupraSavings
SR - | Auto 20/05/2014 317720 | (Update webget) . (...) - C:\Program Files\webget\updatewebget.exe =>PUP.WebGet
SR - | Auto 20/05/2014 317720 | (Util webget) . (...) - C:\Program Files\webget\bin\utilwebget.exe =>PUP.WebGet
SR - | Auto 15/05/2014 51712 | (vosr) . (...) - C:\Documents and Settings\jean claude\Application Data\VOPackage\VOsrv.exe =>Adware.Downware
SR - | Auto 15/05/2014 217600 | (Wajam Internet Enhancer Service) . (.Wajam Internet Technologies Inc..) - C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe =>PUP.Wajam
SR - | Auto 12/05/2014 549008 | (Wpm) . (.Cherished Technololgy LIMITED.) - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager
[HKLM\Software\Google\Chrome\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb] =>PUP.Freeven^
[HKLM\Software\Google\Chrome\Extensions\majjphhgppkndjjkmhhnbgafooenebhd] =>PUP.CrossRider^
[HKLM\Software\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma] =>PUP.QuickStart^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}] =>PUP.SupraSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146}] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421153}] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] =>PUP.SupTab^
[HKLM\SYSTEM\CurrentControlSet\Services\buuoujqmrk32] =>PUP.AdPeak^
[HKLM\SYSTEM\CurrentControlSet\Services\ca82e1a5] =>PUP.OptimizerPro^
[HKLM\SYSTEM\CurrentControlSet\Services\IePluginService] =>Trojan.SProtector^
[HKLM\SYSTEM\CurrentControlSet\Services\NewPlayerUpdaterService] =>Adware.NewPlayer^
[HKLM\SYSTEM\CurrentControlSet\Services\SecureAssist] =>PUP.SupraSavings^
[HKLM\SYSTEM\CurrentControlSet\Services\Update webget] =>PUP.WebGet^
[HKLM\SYSTEM\CurrentControlSet\Services\Util webget] =>PUP.WebGet^
[HKLM\SYSTEM\CurrentControlSet\Services\vosr] =>Adware.Downware^
[HKLM\SYSTEM\CurrentControlSet\Services\Wajam Internet Enhancer Service] =>PUP.Wajam^
[HKLM\SYSTEM\CurrentControlSet\Services\Wpm] =>PUP.WpManager^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freeven pro 1.2] =>PUP.Freeven^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\NewPlayer] =>Adware.NewPlayer^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}] =>PUP.SupraSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage] =>Adware.Downware^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WPM] =>PUP.WpManager^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wajam] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\fst_fr_179_is1] =>Adware.FreeSoftToday^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\suprasavings] =>PUP.SupraSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\webget] =>PUP.WebGet^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller] =>Hijacker.WebsSearches^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}] =>Adware.Boxore
[HKLM\Software\Classes\Installer\Features\9FEB8FB96CD4CF54A95AB4311193C2DA] =>Adware.Boxore
[HKLM\Software\Classes\Installer\Products\9FEB8FB96CD4CF54A95AB4311193C2DA] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9FEB8FB96CD4CF54A95AB4311193C2DA] =>Adware.Boxore
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1] =>PUP.SpeedUpMyPC
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}] =>Adware.BrowseFox
[HKLM\Software\Classes\SpeedUpMyPC] =>PUP.SpeedUpMyPC
[HKLM\Software\Classes\CrossriderApp0054246.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054246.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054246.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054246.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054253.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054253.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054253.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0054253.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421146}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421153}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110511421146}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110511421153}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220522422246}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220522422253}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Wajam] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421146}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421153}] =>PUP.CrossRider
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Optimizer Pro =>PUP.OptimizerPro^
C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb =>PUP.Freeven^
C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd =>PUP.CrossRider^
C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma =>PUP.QuickStart^
C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\extensions\{35FB143E-3B2D-374D-E78E-3E8B20AB8C9C} =>PUP.SystemK^
C:\Program Files\003 =>PUP.AdPeak^
C:\Program Files\Freeven pro 1.2 =>PUP.Freeven^
C:\Program Files\fst_fr_179 =>Adware.FreeSoftToday^
C:\Program Files\Linkey =>PUP.LinkeySearch^
C:\Program Files\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files\NewPlayer =>Adware.NewPlayer^
C:\Program Files\Settings Manager =>PUP.SystemK^
C:\Program Files\suprasavings =>PUP.SupraSavings^
C:\Program Files\SupTab =>PUP.SupTab^
C:\Program Files\Wajam =>PUP.Wajam^
C:\Program Files\webget =>PUP.WebGet^
C:\Documents and Settings\All Users\Application Data\IePluginService =>Trojan.SProtector^
C:\Documents and Settings\All Users\Application Data\systemk =>PUP.SystemK^
C:\Documents and Settings\All Users\Application Data\WPM =>PUP.WpManager^
C:\Documents and Settings\jean claude\Application Data\Activeris =>PUP.Activeris^
C:\Documents and Settings\jean claude\Application Data\Settings Manager =>PUP.SystemK^
C:\Documents and Settings\jean claude\Application Data\SupTab =>PUP.SupTab^
C:\Documents and Settings\jean claude\Application Data\VOPackage =>Adware.Downware^
C:\Documents and Settings\jean claude\Application Data\webssearches =>Hijacker.WebsSearches^
C:\Documents and Settings\jean claude\Local Settings\Application Data\freeSOFTtoday =>Adware.FreeSoftToday^
C:\Documents and Settings\jean claude\Local Settings\Application Data\fst_fr_179 =>Adware.FreeSoftToday^
C:\Documents and Settings\jean claude\Local Settings\Application Data\newplayer =>Adware.NewPlayer^
C:\Program Files\Optimizer Pro =>PUP.OptimizerPro
C:\Documents and Settings\jean claude\Application Data\Optimizer Pro =>PUP.OptimizerPro
C:\Documents and Settings\jean claude\Local Settings\Application Data\Temp\Iminent =>Adware.IMBooster
C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.SProtector^
C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager^
C:\Program Files\003\buuoujqmrk32.exe =>PUP.AdPeak^
C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe =>Adware.NewPlayer^
C:\Program Files\SupraSavings\SecureAssist.exe =>PUP.SupraSavings^
C:\Program Files\webget\bin\utilwebget.exe =>PUP.WebGet^
C:\Documents and Settings\jean claude\Application Data\VOPackage\VOsrv.exe =>Adware.Downware^
C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe =>PUP.Wajam^
C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe =>PUP.Wajam^
C:\Program Files\webget\updatewebget.exe =>PUP.WebGet^
C:\Program Files\webget\bin\webget.PurBrowse.exe =>PUP.WebGet^
C:\Program Files\webget\bin\webget.BrowserAdapter.exe =>PUP.WebGet^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-1.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-2.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-3.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-4.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-5.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-6.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\2568f610-3405-41f8-94b2-fd06a5220075-7.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-2.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-3.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-4.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-7.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job =>PUP.SpeedUpMyPC^
C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job =>PUP.SpeedUpMyPC^
[HKCU\Software\AnyProtect] =>PUP.AnyProtect^
[HKCU\Software\Freeven pro 1.2] =>PUP.Freeven^
[HKCU\Software\SupraSavings] =>PUP.SupraSavings^
[HKCU\Software\SystemK] =>PUP.SystemK^
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive^
[HKCU\Software\Wajam] =>PUP.Wajam^
[HKCU\Software\webget] =>PUP.WebGet^
[HKLM\Software\BetterSurf] =>PUP.BetterSurf^
[HKLM\Software\FreeSoftToday] =>Adware.FreeSoftToday^
[HKLM\Software\LevelQualityWatcher] =>PUP.LevelQualityWatcher^
[HKLM\Software\Linkey] =>PUP.LinkeySearch^
[HKLM\Software\Rr Savings] =>PUP.SupraSavings^
[HKLM\Software\SystemK] =>PUP.SystemK^
[HKLM\Software\Wpm] =>PUP.WpManager^
[HKLM\Software\supTab] =>PUP.SupTab^
[HKLM\Software\supWPM] =>PUP.WpManager^
C:\Windows\Installer\2beb17.msi =>Adware.Boxore^
C:\Windows\Installer\8d645d.msi =>PUP.SupraSavings^
C:\Windows\Installer\909554.msi =>PUP.SupraSavings^
C:\Windows\Installer\f1a1ae.msi =>Adware.IMBooster^
[HKCR\CLSID\{11111111-1111-1111-1111-110511421146}] (MediaPlayerplus) =>PUP.CrossRider^
[HKCR\CLSID\{11111111-1111-1111-1111-110511421153}] (Freeven pro 1.2) =>PUP.Freeven^
[HKCR\CLSID\{22222222-2222-2222-2222-220522422246}] (CrossriderApp0054246.Sandbox) =>PUP.CrossRider^
[HKCR\CLSID\{22222222-2222-2222-2222-220522422253}] (CrossriderApp0054253.Sandbox) =>PUP.CrossRider^
[HKCR\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}] (Linkey) =>PUP.LinkeySearch^
[HKCR\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}] (SystemK Module) =>PUP.SystemK^
EmptyClsid
Ifeofix
Proxyfix
FirewallRaz
ShortcutFix
EmptyPrefetch
emptytemp
emptyflash

Cliquer sur IMPORTER., cela devrait coller le contenu du presse papier dans la fenêtre ZHPFix.

Le script doit automatiquement apparaitre dans ZHPFix.

Clique sur le bouton GO pour lancer le nettoyage

Valide par Oui la désinstallation des programmes si demandé.
Laisse l'outil travailler. Si un redémarrage est demandé, accepte et redémarre le PC
Le rapport ZHPFixReport.txt s'affiche. Copie-colle le contenu de ce rapport dans ta réponse.
Le rapport ZHPFixReport.txt est enregistré sous C:\ZHP\ZHPFix.txt

Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide.

CoralieT · le 20 mai 2014

ok merci,

je m'y attaque, en fait c'est le pc de mon père ! J'intervient à sa place car il est un peu moins au fait en informatique.

Apollo · le 20 mai 2014

Pour la suite, car je vais aller au dodo.

1) Télécharge Junkware Removal Tool sur le bureau: http://www.bleepingcomputer.com/download/junkware-removal-tool/

Site éditeur: http://thisisudax.org/

Sous XP, double-clique sur l'icône et presse une touche lorsque cela sera demandé.

Sous Vista/7/8, clic droit/exécuter en temps qu'administrateur.

L'outil peut demander si on souhaite vérifier la présence d'une nouvelle version Y/N >> taper Y.
S'il découvre une version obsolète, il le dira et devrez presser une touche. L'outil se fermera.

JRT_New sera créé sur le bureau;

Jette l'ancien JRT et renomme JRT_New en JRT .

Si c'est déjà la bonne version , il commencera sa recherche de malwares normalement. Patience svp.

Afin de ne pas fausser le rapport, ne passer l'outil qu'une seule fois svp!

Si l'antivirus fait des siennes: désactive-le provisoirement. Si tu ne sais pas comment faire, reporte-toi à cet article.

Poste le rapport généré à la fin de l'analyse.

NB: Le bureau disparaitra un instant, c'est normal.

>>>Si le rapport est long, l'héberger ici: http://cjoint.com ou http://dl.free.fr/

------------------------------
*** Si tu as une ancienne version d'AdwCleaner, lance-le et clique sur désinstaller.***

2) Télécharge AdwCleaner par Xplode: http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Enregistre-le sur le bureau (et pas ailleurs).

Afin de ne pas fausser le rapport, ne passer l'outil qu'une seule fois svp!

Si tu es sous XP double clique sur AdwCleaner pour lancer l'outil.
Si tu es sous Vista/Seven, clique droit sur AdwCleaner et choisis exécuter en temps qu'administrateur.

Clique sur Scanner et laisse travailler l'outil.

Cliquer sur Nettoyer, le bouton sera accessible.

Le rapport va s'ouvrir en fichier texte; copie la totalité de son contenu et colle-le dans ta réponse.

Le rapport est en outre sauvegardé sous C:\AdwCleaner[s0]

NB: Si l'outil "cale" en mode normal, le lancer en mode sans échec: http://www.vista-xp.fr/forum/topic93.html

A lire absolument: http://www.vista-xp.fr/forum/topic5482.html
http://www.vista-xp.fr/forum/topic10389.html

-------------------------

@++

CoralieT · le 20 mai 2014

Il me demande des droits d'administrateur et dit qu'il ne peut télécharger le point ZHP.exe...

Du coup le diag mouline mais n'avance pas !

@+

Apollo · le 20 mai 2014

L'as-tu lancé par clic droit/exécuter en temps qu'administrateur? Il faut parfois être patient avec ZHP.

Sinon, essaie en mode sans échec. Si ça coinçait encore, passe à la suite. (AdwCleaner + JRT)

@++

CoralieT · le 20 mai 2014

J'ai rééssayé et ça a fonctionné !

Je t'envoie le rapport et lance adw,

Merci encore et bonne nuit à toi

@+

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by jean claude at 20/05/2014 22:59:26
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Corbeille vidée (00mn 03s)
Dossier Prefetcher vidé
Réparation des raccourcis navigateur

========== Logiciels ==========
ABSENT Uninstall Process: c:\program files\freeven pro 1.2\uninstall.exe
ABSENT Uninstall Process: c:\program files\newplayer\uninstall.exe
SUPPRIMÉ: SupraSavings
ABSENT Uninstall Process: c:\documents and settings\jean claude\application data\vopackage\uninstall.exe
ABSENT Uninstall Process: c:\documents and settings\all users\application data\wpm\wprotectmanager.exe
ABSENT Uninstall Process: c:\program files\wajam\uninstall.exe
SUPPRIMÉ: fst_fr_179
ABSENT Uninstall Process: c:\program files\webget\webgetuninstall.exe
ABSENT Uninstall Process: -

========== Processus mémoire ==========
SUPPRIMÉ Redémarrage: Memory Process: C:\Program Files\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe

========== Etat des services ==========
BUUOUJQMRK32 Arrêté
CA82E1A5 Arrêté
IEPLUGINSERVICE Arrêté
NEWPLAYERUPDATERSERVICE Arrêté
SECUREASSIST Arrêté
UPDATE_WEBGET Arrêté
UTIL_WEBGET Arrêté
VOSR Arrêté
WAJAM_INTERNET_ENHANCER_SERVICE Arrêté
WPM Arrêté
{9EDD0EA8-2819-47C2-8320-B007D5996F8A}GT Arrêté

========== Clés du Registre ==========
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freeven pro 1.2]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewPlayer]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webget]
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller]
SUPPRIMÉ: CLSID BHO: {11111111-1111-1111-1111-110511421146}
SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421146}]
SUPPRIMÉ: CLSID BHO: {11111111-1111-1111-1111-110511421153}
SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}]
SUPPRIMÉ: CLSID BHO: {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
SUPPRIMÉ: Service: buuoujqmrk32
SUPPRIMÉ: Service: ca82e1a5
SUPPRIMÉ: Service: IePluginService
SUPPRIMÉ: Service: NewPlayerUpdaterService
SUPPRIMÉ: Service: Update webget
SUPPRIMÉ: Service: Util webget
SUPPRIMÉ: Service: vosr
SUPPRIMÉ: Service: Wpm
SUPPRIMÉ Driver Key: {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt
SUPPRIMÉ: HKCU\Software\AnyProtect
SUPPRIMÉ: HKCU\Software\Crossrider
SUPPRIMÉ: HKCU\Software\Freeven pro 1.2
SUPPRIMÉ: HKCU\Software\InstallCore
SUPPRIMÉ: HKCU\Software\InstalledBrowserExtensions
SUPPRIMÉ: HKCU\Software\SystemK
SUPPRIMÉ: HKCU\Software\TBSB01620
SUPPRIMÉ: HKCU\Software\TutoTag
SUPPRIMÉ: HKCU\Software\Wajam
SUPPRIMÉ: HKCU\Software\webget
SUPPRIMÉ: HKLM\Software\BetterSurf
SUPPRIMÉ: HKLM\Software\FreeSoftToday
SUPPRIMÉ: HKLM\Software\InstalledBrowserExtensions
SUPPRIMÉ: HKLM\Software\LevelQualityWatcher
SUPPRIMÉ: HKLM\Software\Linkey
SUPPRIMÉ: HKLM\Software\SystemK
SUPPRIMÉ: HKLM\Software\Tutorials
SUPPRIMÉ: HKLM\Software\Wpm
SUPPRIMÉ: HKLM\Software\supTab
SUPPRIMÉ: HKLM\Software\supWPM
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - dprotectsvc.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - jumpflip - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - searchinstaller.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - searchsettings.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - searchsettings64.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - umbrella.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - utiljumpflip.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - volaro - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - vonteera - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - websteroids.exe - tasklist.exe
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - websteroidsservice.exe - tasklist.exe
SUPPRIMÉ: SearchScopes :{33BB0A4E-99AF-4226-BDF6-49120163DE86}
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\9FEB8FB96CD4CF54A95AB4311193C2DA]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\9FEB8FB96CD4CF54A95AB4311193C2DA]
SUPPRIMÉ: HKCR\CLSID\{22222222-2222-2222-2222-220522422246}
SUPPRIMÉ: HKCR\CLSID\{22222222-2222-2222-2222-220522422253}
SUPPRIMÉ: HKCR\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
SUPPRIMÉ: HKCR\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
SUPPRIMÉ: Service: Wajam Internet Enhancer Service
SUPPRIMÉ: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
SUPPRIMÉ: HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9FEB8FB96CD4CF54A95AB4311193C2DA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A
SUPPRIMÉ: HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
SUPPRIMÉ: HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
SUPPRIMÉ: HKLM\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
SUPPRIMÉ: HKLM\Software\Classes\SpeedUpMyPC
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054246.BHO
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054246.BHO.1
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054246.Sandbox
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054246.Sandbox.1
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054253.BHO
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054253.BHO.1
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054253.Sandbox
SUPPRIMÉ: HKLM\Software\Classes\CrossriderApp0054253.Sandbox.1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421146}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421153}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Wajam
SUPPRIMÉ: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421146}
SUPPRIMÉ: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511421153}
Branche de Base de Registres IFEO non infectée !
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\bpsvc.exe]SUPPRIMÉ (bpsvc.exe)
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\searchprotection.exe]SUPPRIMÉ (searchprotection.exe)
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\searchprotector.exe]SUPPRIMÉ (searchprotector.exe)
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\stinst32.exe]SUPPRIMÉ (stinst32.exe)
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\stinst64.exe]SUPPRIMÉ (stinst64.exe)
[HKLM\SOFTWARE\Microsoft\...\Image File Execution Options\Your Image File Name Here without a path]SUPPRIMÉ (Your Image File Name Here without a path)

========== Valeurs du Registre ==========
SUPPRIMÉ RunValue: Optimizer Pro
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Eléments de donnée du Registre ==========
SUPPRIMÉ: R0 - Main,Start Page = KCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R1 Search Page =
SUPPRIMÉ AppInit: \Program Files\Optimizer Pro\OptProCrash.dll

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
SUPPRIMÉ Chrome Site: http://istart.webssearches.com
SUPPRIMÉ Chrome Site: http://istart.webssearches.com
SUPPRIMÉ Chrome Site: http://istart.webssearches.com
SUPPRIMÉ Chrome Site: http://istart.webssearches.com
SUPPRIMÉ Chrome Site: http://istart.webssearches.com
PRESENT Chrome File: C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: http://istart.webssearches.com
ABSENT Mozilla Pref: http://istart.webssearches.com
ABSENT Mozilla Pref: user_pref("extensions.crossrider.bic", "145ff59eb0e2363fcb49b95c672e7c87");

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIMÉS Temporaires Windows (219)
SUPPRIMÉS Flash Cookies (330)

========== Fichiers ==========
SUPPRIMÉ: c:\documents and settings\jean claude\local settings\application data\google\chrome\user data\default\preferences
SUPPRIMÉ: c:\documents and settings\jean claude\application data\mozilla\firefox\profiles\hxxw6v49.default\searchplugins\default-search.xml
SUPPRIMÉ: c:\program files\mediaplayerplus\mediaplayerplus-bho.dll
SUPPRIMÉ: c:\program files\freeven pro 1.2\freeven pro 1.2-bho.dll
SUPPRIMÉ: c:\program files\suptab\suptab.dll
SUPPRIMÉ: c:\documents and settings\all users\menu démarrer\programmes\mozilla firefox.lnk (http://istart.webssearches.com)
CRÉÉ: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk
SUPPRIMÉ: c:\program files\optimizer pro\optprolauncher.exe
SUPPRIMÉ Redémarrage: \program files\optimizer pro\optprocrash.dll
SUPPRIMÉ Redémarrage: c:\program files\003\buuoujqmrk32.exe
SUPPRIMÉ Redémarrage: c:\program files\optimizer pro\optprocrash.dll
SUPPRIMÉ Redémarrage: c:\documents and settings\all users\application data\iepluginservice\pluginservice.exe
SUPPRIMÉ Redémarrage: c:\program files\newplayer\newplayerupdaterservice.exe
SUPPRIMÉ Redémarrage: c:\program files\webget\updatewebget.exe
SUPPRIMÉ Redémarrage: c:\program files\webget\bin\utilwebget.exe
SUPPRIMÉ Redémarrage: c:\documents and settings\jean claude\application data\vopackage\vosrv.exe
SUPPRIMÉ Redémarrage: c:\program files\wajam\wajam internet enhancer\wajaminternetenhancerservice.exe
SUPPRIMÉ Redémarrage: c:\documents and settings\all users\application data\wpm\wprotectmanager.exe
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-1.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-2.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-3.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-4.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-5.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-6.job
SUPPRIMÉ: c:\windows\tasks\2568f610-3405-41f8-94b2-fd06a5220075-7.job
SUPPRIMÉ: c:\windows\tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-2.job
SUPPRIMÉ: c:\windows\tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-3.job
SUPPRIMÉ: c:\windows\tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-4.job
SUPPRIMÉ: c:\windows\tasks\3a5251b6-001c-41b9-abed-e5533a7352ad-7.job
SUPPRIMÉ: c:\windows\tasks\speedupmypc maintenance.job
SUPPRIMÉ: c:\windows\tasks\speedupmypc startup.job
SUPPRIMÉ: c:\windows\system32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}gt.sys
SUPPRIMÉ Redémarrage: c:\windows\system32\secureassist.dll
SUPPRIMÉ: c:\program files\optimizer pro\optprocrash.dll
SUPPRIMÉ: C:\Windows\Installer\2beb17.msi
SUPPRIMÉ: C:\Windows\Installer\f1a1ae.msi
SUPPRIMÉ: c:\documents and settings\jean claude\application data\microsoft\internet explorer\quick launch\démarrer internet explorer.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\jean claude\Application Data\Microsoft\Internet Explorer\Quick Launch\Démarrer Internet Explorer.lnk
SUPPRIMÉ: c:\documents and settings\jean claude\application data\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\jean claude\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
SUPPRIMÉ: c:\documents and settings\all users\bureau\mozilla firefox.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
SUPPRIMÉ: c:\documents and settings\jean claude\application data\microsoft\internet explorer\quick launch\mozilla firefox.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\jean claude\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
SUPPRIMÉ: c:\documents and settings\all users\bureau\google chrome.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk
SUPPRIMÉ: c:\documents and settings\jean claude\application data\microsoft\internet explorer\quick launch\google chrome.lnk ((http://istart.webssearches.com/?type=sc&ts=1400148097&from=tugs&uid=ST3200822AS_4LJ19597XXXX4LJ19597))
CRÉÉ: C:\Documents and Settings\jean claude\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
SUPPRIMÉS Temporaires Windows (593) (480 840 657 octets)
SUPPRIMÉS Flash Cookies (171) (52 374 octets)

========== Récapitulatif ==========
1 : Processus mémoire
97 : Clés du Registre
8 : Valeurs du Registre
4 : Eléments de donnée du Registre
3 : Dossiers
50 : Fichiers
9 : Logiciels
10 : Préférences navigateur
11 : Etat des services

End of clean in 04mn 19s

========== Chemin de fichier rapport ==========
C:\Documents and Settings\jean claude\Application Data\ZHP\ZHPFix[R1].txt - 20/05/2014 22:59:30 [14956]

CoralieT · le 20 mai 2014

Apollo,

Voici le JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Microsoft Windows XP x86
Ran by jean claude on 20/05/2014 at 23:25:54,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\optimizer pro
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wajam
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\optimizer pro_is1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550555425553}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660566426653}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544424453}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550555425553}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660566426653}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421153}

~~~ Files

Successfully deleted: [File] "C:\end"

~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\jean claude\Local Settings\Application Data\searchprotect"
Successfully deleted: [Folder] "C:\Program Files\pc speed maximizer"
Successfully deleted: [Folder] "C:\Program Files\wajam"

~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\jean claude\Application Data\mozilla\firefox\profiles\hxxw6v49.default\user.js
Successfully deleted the following from C:\Documents and Settings\jean claude\Application Data\mozilla\firefox\profiles\hxxw6v49.default\prefs.js

user_pref("extensions.a2ab9302c551a480499719932d6d5b0f92bfa4cf8298a479280d575352ee81de1com54253.54253.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A
user_pref("extensions.aa9719e64232b4695ae9ca89cd7f2aa84ca1279dfbc0d44a897ef19301c922b68com54246.54246.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A
user_pref("extensions.crossrider.bic", "1461b6f22db75c729bbec5c75449a25b");

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20/05/2014 at 23:32:58,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CoralieT · le 20 mai 2014

Et voici le rapport d'ADW,

à mon tour d'aller me coucher, il est déjà bien tard !

Je ne voulais pas trop traîner avec ces virus. Je profite d'avoir la machine sous la main pour régler un max de choses.

Déjà présents depuis plusieurs jours m'a dit mon père.

@+

--+*.
# AdwCleaner v3.210 - Rapport créé le 20/05/2014 à 23:46:38
# Mis à jour le 19/05/2014 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : jean claude - THUILLIE-LIJ2BJ
# Exécuté depuis : C:\Documents and Settings\jean claude\Mes documents\Téléchargements\AdwCleaner(1).exe
# Option : Nettoyer

***** [ Services ] *****

[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\2308189059
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Flash Player Pro
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\NewPlayer
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\optimizer pro v3.2
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Uniblue
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Wajam
Dossier Supprimé : C:\Program Files\Flash Player Pro
Dossier Supprimé : C:\Program Files\globalUpdate
Dossier Supprimé : C:\Program Files\MediaPlayerplus
Dossier Supprimé : C:\Program Files\Uniblue
Dossier Supprimé : C:\Program Files\Uninstaller
Dossier Supprimé : C:\DOCUME~1\JEANCL~1\LOCALS~1\Temp\webget
Dossier Supprimé : C:\Documents and Settings\jean claude\Local Settings\Application Data\globalUpdate
Dossier Supprimé : C:\Documents and Settings\jean claude\Application Data\Uniblue
Dossier Supprimé : C:\Documents and Settings\jean claude\Mes documents\Flash Player Pro
Dossier Supprimé : C:\Documents and Settings\jean claude\Mes documents\Optimizer Pro
Dossier Supprimé : C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\Extensions\quick_start@gmail.com
Dossier Supprimé : C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\Extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com
Dossier Supprimé : C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com
Fichier Supprimé : C:\Documents and Settings\All Users\Bureau\NewPlayer.lnk
Fichier Supprimé : C:\Documents and Settings\All Users\Bureau\speedupmypc.lnk
Fichier Supprimé : C:\Documents and Settings\jean claude\Local Settings\Application Data\AnyProtectScannerSetup.exe
Fichier Supprimé : C:\Documents and Settings\jean claude\Bureau\Optimizer Pro.lnk
Fichier Supprimé : C:\Program Files\Mozilla Firefox\browser\searchplugins\webssearches.xml
Fichier Supprimé : C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
Fichier Supprimé : C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job

***** [ Raccourcis ] *****

Raccourci Désinfecté : C:\Documents and Settings\jean claude\Menu Démarrer\Programmes\Accessoires\Outils système\Internet Explorer (sans module complémentaire).lnk

***** [ Registre ] *****

Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\wajam.com
Clé Supprimée : HKLM\SOFTWARE\Classes\Linkey.Linkey
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9863E762-BACC-46E4-8CAA-2A6ADA06B65B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Clé Supprimée : HKCU\Software\Linkey
Clé Supprimée : HKCU\Software\MediaPlayerplus
Clé Supprimée : HKCU\Software\AppDataLow\Software\Rr Savings
Clé Supprimée : HKCU\Software\AppDataLow\Software\Supra Savings
Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLM\Software\do-searchSoftware
Clé Supprimée : HKLM\Software\Freeven pro 1.2
Clé Supprimée : HKLM\Software\MediaPlayerplus
Clé Supprimée : HKLM\Software\NewPlayer
Clé Supprimée : HKLM\Software\suprasavings
Clé Supprimée : HKLM\Software\Uniblue
Clé Supprimée : HKLM\Software\webssearchesSoftware
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Linkey
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{9BF8BEF9-4DC6-45FC-9AA5-4B1311392CAD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DMUninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Freeven pro 1.2
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MediaPlayerplus
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\NewPlayer
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Settings Manager
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\suprasavings
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VOPackage
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\webget
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\webssearches uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wpm
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3

***** [ Navigateurs ] *****

-\\ Internet Explorer v6.0.2900.5512

-\\ Mozilla Firefox v29.0.1 (fr)

[ Fichier : C:\Documents and Settings\jean claude\Application Data\Mozilla\Firefox\Profiles\hxxw6v49.default\prefs.js ]

Ligne Supprimée : user_pref("extensions.a2ab9302c551a480499719932d6d5b0f92bfa4cf8298a479280d575352ee81de1com54253.54253.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Ligne Supprimée : user_pref("extensions.aa9719e64232b4695ae9ca89cd7f2aa84ca1279dfbc0d44a897ef19301c922b68com54246.54246.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Ligne Supprimée : user_pref("extensions.crossrider.bic", "1461b8dc956299daa8c5fdc80d16fc5f");

-\\ Google Chrome v

[ Fichier : C:\Documents and Settings\jean claude\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [17620 octets] - [20/11/2013 22:22:41]
AdwCleaner[R1].txt - [22678 octets] - [20/05/2014 23:45:58]
AdwCleaner[s0].txt - [17623 octets] - [20/11/2013 22:23:46]
AdwCleaner[s1].txt - [22301 octets] - [20/05/2014 23:46:38]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [22362 octets] ##########

Apollo · le 21 mai 2014

Bonjour,

1)

Télécharge Shortcut Cleaner sur le bureau: http://www.bleepingcomputer.com/download/shortcut-cleaner/

Double clique sur l'icône de l'outil (clic droit/exécuter en temps qu'administrateur sous Vista/7/8.)

Un rapport sera produit; poste-le svp.
Il se trouve également sur C:\sc-cleaner.txt

2)

Télécharger SFTGC.exe sur le Bureau >>>> il ne peut pas être ailleurs! L'y déplacer si nécessaire.

Ferme tes applications, navigateurs.

Sous XP, double cliquer sur le fichier.
Sous les autres versions de Windows, clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.

Après l'initialisation, cliquer sur Go pour lancer le nettoyage.

Un rapport va s'ouvrir à la fin.
Ce rapport est sur le bureau (SFTGC.txt)

Héberger sur http://cjoint.com pour ne pas planter le sujet. ou http://dl.free.fr/

3)

Téléchargez Malwarebytes Anti-Malware et enregistrez-le sur le Bureau.

http://fr.malwarebytes.org/mwb-download/

Faites un double clic sur mbam-setup-2.0.0.1000.exe et suivez les invites pour installer le programme.

A la fin, vérifiez que ces cases sont cochées:

Lancer Malwarebytes Anti-Malware

Un essai gratuit de 14 jours des fonctions de la version Premium est pré-sélectionné. Si vous le désirez, vous pouvez dé-cocher cette case, et cela ne diminuera pas les capacités d'analyse et de suppression du programme.

Examen "Menaces" + Recherche de Rootkits:

Dans l'onglet Paramètres > Sous-onglet Détection et Protection, Options de détection, cochez la case située devant Recherche de Rootkits.

Cliquez sur l'onglet Examen, puis cliquez sur Examiner maintenant >>. Si une mise à jour est disponible, cliquez sur le bouton Mettre à jour maintenant.

Un Examen "Menaces" va démarrer.

Avec certaines infections, vous pouvez voir l'affichage de ce message:

'Malwarebytes n'a pas pu charger le pilote Anti-Rootkit DDA'

Cliquez sur 'Oui' sur ce message, pour permettre le chargement du pilote après un redémarrage.

Laissez l'ordinateur redémarrer. Continuez avec le reste de ces instructions.

Quand l'examen est terminé, click Appliquer les actions.

Attendez l'affichage du message vous invitant à faire redémarrer le PC, puis cliquez sur Oui.

Le rapport de trouve dans l'Historique de MBAM, le prendre après le redémarrage.

@++

Connexion

Pas encore inscrit ?

Infection Qvo6, ZHPDiag lancé, demande d'aide pour ZHPFix

Messages recommandés

CoralieT

Apollo

CoralieT

Apollo

CoralieT

Apollo

CoralieT

CoralieT

CoralieT

Apollo

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer