supprimer awesomehpRésolu/Fermé

Question

Bonsoir
je vous contacte car j'ai attrapé awesomehp et je n'arrive pas à le supprimer de mon pc.
de plus j'ai enormement de pages de pub qui s'affichent.
j'ai essayé malwarebytes + adwcleaner + reinitialiser mozilla mais rien n'y fait.
je suis sous windows 8

merci d'avance pour votre aide

juju666 · Answer

Salut,

Suis ce tuto : http://www.security-helpzone.com/blog/shortcut_module_supprimer_les_raccourcis_infectes_du_bureau-news-18.html
Poste le rapport.

oliv2402 · Answer

ok merci je fais ca de suite

oliv2402 · Answer

j'ai reussi a le faire mais je n'ai pas de rapport a poster. peut etre est ce du a avast que j'ai du desactive pour activerton lien.
awesohmesp a l'air d'avoir disparu suite au redemarrage .Par contre j'ai toujours de la pub qui s'affiche

juju666 · Answer

Essaie ceci : 

&#9654 Télécharge ici : Junkware Removal Tool

 !!! Ne clique pas sur Download !!! , attends simplement que la fenetre de telechargement arrive pour confirmation

&#9654 Enregistre ce fichier sur le bureau.

&#9654 Ferme tout tes navigateurs 

Sous XP, double-clique sur l'icône et presse une touche lorsque cela sera demandé.
Sous Vista/7/8, clic droit et Exécuter en temps qu'administrateur.
    
&#9654 NB: Le bureau disparaitra un instant, c'est normal.
    
&#9654 Laisse le programme travailler ne touche plus à rien
    
&#9654 Poste le rapport généré à la fin de l'analyse. 

Tuto : http://hackinginterdit.blogspot.fr/2013/02/junkware-removal-tool.html

+ 

Poste les rapports AdwCleaner et Malwarebytes stp

marine62 · Answer

bonsoir j'ai le même problème, je suis sous vista j'ai essayer spyhunter et Malwarebytes sans succés

dans mon cas je peux suivre votre manip?

oliv2402 · Answer

Voici le rapport de jrt: 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8 x64
Ran by Emelyne on 28/01/2014 at 21:10:49,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] 70e6ca8c 
Successfully deleted: [Service] 70e6ca8c 
Successfully stopped: [Service] pcsuservice 
Successfully deleted: [Service] pcsuservice 
Successfully stopped: [Service] yontoo desktop updater 
Successfully deleted: [Service] yontoo desktop updater 



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\yontoo desktop



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2651329054-2773839316-1819568574-1003\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\softonic
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\delta chrome toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9DC07AE5-3D2A-4AEE-8792-4B8CE7FD10E7}



~~~ Files

Successfully deleted: [File] "C:\end"



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\software"
Successfully deleted: [Folder] "C:\Users\Emelyne\AppData\Roaming\babsolution"
Successfully deleted: [Folder] "C:\Users\Emelyne\AppData\Roaming\goforfiles"
Successfully deleted: [Folder] "C:\Users\Emelyne\AppData\Roaming\yontoo"
Successfully deleted: [Folder] "C:\Users\Emelyne\appdata\local\software"
Failed to delete: [Folder] "C:\Program Files (x86)\goforfiles"
Successfully deleted: [Folder] "C:\Program Files (x86)\software"
Successfully deleted: [Folder] "C:\Program Files (x86)\yontoo"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\umbrella"



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Emelyne\appdata\local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Successfully deleted: [Folder] C:\Users\Emelyne\appdata\local\Google\Chrome\User Data\Default\Extensions
iapdbllcanepiiimjjndipklodoedlc



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28/01/2014 at 21:18:31,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

oliv2402 · Answer

adw cleaner

# AdwCleaner v1.606 - Rapport créé le 28/01/2014 à 21:20:35
# Mis à jour le 10/05/2012 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : Emelyne - EMELYNE
# Exécuté depuis : C:\Users\Emelyne\Desktop\adwcleaner-1.606-en(1).exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****


***** [Registre] *****

[x64] Clé Présente : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

***** [Registre - GUID] *****


***** [Navigateurs] *****

-\ Internet Explorer v9.10.9200.16750

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v26.0 (fr)

Nom du profil : default-1390937387070 [Profil par défaut]
Fichier : C:\Users\Emelyne\AppData\Roaming\Mozilla\Firefox\Profiles\ozj8v7kj.default-1390937387070\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [41841 octets] - [28/01/2014 18:31:10]
AdwCleaner[R1].txt - [1762 octets] - [28/01/2014 20:20:43]
AdwCleaner[S2].txt - [1456 octets] - [28/01/2014 20:21:44]
AdwCleaner[R2].txt - [1453 octets] - [28/01/2014 20:48:00]
AdwCleaner[R3].txt - [1209 octets] - [28/01/2014 21:20:35]

########## EOF - C:\AdwCleaner[R3].txt - [1337 octets] ##########

juju666 · Answer

Tu l'as prise où cette version d'adwcleaner ? 
Elle est totalement obsolète ...

Lien officiel : http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

oliv2402 · Answer

oups 
je recommence alors*
heureusement que tu veilles  lol

juju666 · Answer

Je suis là pour ça Emy :D

oliv2402 · Answer

# AdwCleaner v3.018 - Rapport créé le 28/01/2014 à 21:25:03
# Mis à jour le 28/01/2014 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : Emelyne - EMELYNE
# Exécuté depuis : \EMELYNE\Users\Emelyne\Downloads\adwcleaner.exe
# Option : Scanner

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Présent : C:\Users\Emelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Dossier Présent C:\Program Files (x86)\Accelerer PC
Dossier Présent C:\Program Files (x86)\goforfiles
Dossier Présent C:\ProgramData\boost_interprocess
Dossier Présent C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accelerer PC
Dossier Présent C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accelerer PC
Fichier Présent : C:\Program Files (x86)\Mozilla Firefox\searchplugins\StartWeb.xml
Fichier Présent : C:\Users\Emelyne\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Présent : C:\Windows\System32\Tasks\EPUpdater
Fichier Présent : C:\Windows\System32\Tasks\GoforFilesUpdate
Fichier Présent : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Présente : HKCU\Software\5f2d8dee235e412
Clé Présente : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Présente : HKCU\Software\FreeSoftToday
Clé Présente : HKCU\Software\Tutorials
Clé Présente : HKCU\Software\TutoTag
Clé Présente : [x64] HKCU\Software\FreeSoftToday
Clé Présente : [x64] HKCU\Software\Tutorials
Clé Présente : [x64] HKCU\Software\TutoTag
Clé Présente : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Présente : HKLM\SOFTWARE\5f2d8dee235e412
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Clé Présente : HKLM\Software\Tutorials
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Donnée Présente : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL
Valeur Présente : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16537


-\ Mozilla Firefox v26.0 (fr)

[ Fichier : C:\Users\Emelyne\AppData\Roaming\Mozilla\Firefox\Profiles\ozj8v7kj.default-1390937387070\prefs.js ]


*************************

AdwCleaner[R0].txt - [2563 octets] - [28/01/2014 21:25:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2623 octets] ##########

juju666 · Answer

ok la suppression maintenant emy ^^

oliv2402 · Answer

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2014.01.28.07

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Emelyne :: EMELYNE [administrateur]

Protection: Activé

28/01/2014 21:22:39
mbam-log-2014-01-28 (21-22-39).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 245914
Temps écoulé: 4 minute(s), 9 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

juju666 · Answer

la suppression avec adwcleaner s'il te plait ^^

oliv2402 · Answer

la voici:

# AdwCleaner v3.018 - Rapport créé le 28/01/2014 à 21:29:46
# Mis à jour le 28/01/2014 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : Emelyne - EMELYNE
# Exécuté depuis : \EMELYNE\Users\Emelyne\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accelerer PC
Dossier Supprimé : C:\Program Files (x86)\Accelerer PC
Dossier Supprimé : C:\Program Files (x86)\goforfiles
Dossier Supprimé : C:\Users\Emelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\StartWeb.xml
Fichier Supprimé : C:\Users\Emelyne\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Supprimé : C:\Windows\System32\Tasks\EPUpdater
Fichier Supprimé : C:\Windows\System32\Tasks\GoforFilesUpdate
Fichier Supprimé : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKCU\Software\5f2d8dee235e412
Clé Supprimée : HKLM\SOFTWARE\5f2d8dee235e412
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Valeur Supprimée : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Clé Supprimée : HKCU\Software\FreeSoftToday
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\Tutorials
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16537


-\ Mozilla Firefox v26.0 (fr)

[ Fichier : C:\Users\Emelyne\AppData\Roaming\Mozilla\Firefox\Profiles\ozj8v7kj.default-1390937387070\prefs.js ]


*************************

AdwCleaner[R0].txt - [2723 octets] - [28/01/2014 21:25:03]
AdwCleaner[S0].txt - [2444 octets] - [28/01/2014 21:29:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2504 octets] ##########

juju666 · Answer

GE-NIAL :)

En principe c'est OK.

Passe un coup de delfix en cochant toutes cases : https://www.commentcamarche.net/telecharger/securite/7111-delfix/

~~

Attention à ce que tu installes à l'avenir :
Des logiciels additionnels sont proposés (barre d'outils, adwares) via l'installation de logiciel gratuit en général ou via certains sites de téléchargement comme S0ft0nic.
L'éditeur touche de l'argent à chaque installation réussie de ces programmes additionnels (un genre de sponsoring), ton PC se retrouve avec des barres d'outils qui ralentissent le navigateur ou des adwares qui ouvrent des popups de publicités.
Dès lors, lorsque tu installes un programme, lis bien ce qui est proposé car tu risques d'installé des barres d'outils sans le savoir.

Lire Les PUPs/LPIs : https://www.malekal.com/adwares-pup-protection/

Passe le mot à tes amis !

~~

Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html  

Bonne lecture et n'oublie pas d'indiquer que ton sujet est résolu :)

oliv2402 · Answer

j'ai toujours des fenetres intempestives qui s'ouvrent .

désolé je suis chiant lol

marine62 · Answer

il faut installer adwcleaner aprés JRT?

juju666 · Answer

Pour oliv : où (quel navigateur) et sous quelle forme (pop up, dans la page?)

Pour marine : vu, tu peux faire ca : https://forums.commentcamarche.net/forum/affich-29599917-supprimer-awesomehp#17

oliv2402 · Answer

salut juju666

j'utilise mozilla et ce sont des fenetres de pub qui s'ouvrent

juju666 · Answer

Sur Firefox : Menu Outils / Modules complémentaires
Onglet Extension.
Donne la liste.

oliv2402 · Answer

voici le genre de page qui s'affiche
hxxp://s.m2pub.com/player.html?a=21571100&context=c21601051&size=800x600&rt=popunder&ci=10

oliv2402 · Answer

y a juste adblock plus 2.4.1 activé et avast online security 9.0 .2006.53 qui lui est desactivé

juju666 · Answer

Dans ce cas faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections : 

&#9654 Télécharge ici :OTL

&#9654 Fais un double clic sur l'icône pour le lancer (clic droit executer en tant qu'administrateur sous Vista, Windows 7 ou Windows 8). Vérifier que toutes les autres fenêtres sont fermées afin qu'il s'exécute sans interruption.

&#9654 Clique ici pour voir la configuration

&#9654 Copie et colle le contenu de ce qui suit en gras dans la partie inférieure d'OTL "Personnalisation"


HKCU\Software
HKLM\Software
%Homedrive%\*
%Homedrive%\*.
%Userprofile%\*
%Userprofile%\*.
%Allusersprofile%\*
%Allusersprofile%\*.
%localappdata%\*
%localappdata%\*.
%Userprofile%\Local Settings\Application Data\*
%Userprofile%\Local Settings\Application Data\*.
%programFiles%\*
%programFiles%\*.
%Systemroot%\Temp\*.exe /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\Tasks\*
%systemroot%\Tasks\*.
%systemroot%\system32\Tasks\*
%systemroot%\system32\Tasks\*.
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys 
%temp%\*.exe /s 
%ALLUSERSPROFILE%\Application Data\*.exe /s 
%ALLUSERSPROFILE%\Application Data\*.
%APPDATA%\*.exe /s 
%SYSTEMDRIVE%\*.*
/md5start
explorer.exe
winlogon.exe
userinit.exe
svchost.exe
services.exe
winsock.*
/md5stop
msconfig 
netsvcs 
BASESERVICES
safebootminimal
safebootnetwork 
CREATERESTOREPOINT
SAVEMBR:0
HKLM\Software\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command
dir "%Homedrive%\*" /S /A:L /C 

&#9654 Clic sur Analyse.

A la fin du scan, 2 Bloc-Notes vont s'ouvrir avec les rapports (OTL.txt et extras.txt).

NE PAS COPIER/COLLER LE RAPPORT ICI - LIRE JUSQU'AU BOUT

Ces fichiers se trouvent à côté de l'exécutable OTL.exe

héberge OTL.txt et extra.txt sur FEC Upload et donne les liens obtenus en échange  

NE PAS COPIER/COLLER LE LIEN DE SUPPRESSION, CONSERVE-LE SI TU DESIRE ENSUITE SUPPRIMER LES RAPPORTS DE LA BASE DE DONNEES FEC

oliv2402 · Answer

ok je m'y mets

oliv2402 · Answer

https://forums-fec.be/upload/www/?a=d&i=2449842254

https://forums-fec.be/upload/www/?a=d&i=8633915030


qd dois je les supprimer

juju666 · Answer

Quand nous auront terminé.

Je lis les rapports et je reviens vers toi.

oliv2402 · Answer

ok merci

oliv2402 · Answer

je reviens d'ici 45 min
et encore une fois merci

oliv2402 · Answer

je suis de retour

juju666 · Answer

j'ai eu un contretemps hier soir désolé.

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


?Copie la liste qui se trouve en gras ci-dessous,

? colle-la dans la zone sous "Personnalisation" :

:OTL
PRC - [2014/01/27 16:01:19 | 000,063,168 | ---- | M] () -- C:\Program Files (x86)\Mobogenie\MgAssist.exe     
PRC - [2014/01/27 16:01:18 | 000,775,872 | ---- | M] () -- C:\Program Files (x86)\Mobogenie\DaemonProcess.exe     
PRC - [2014/01/16 10:49:12 | 003,153,904 | ---- | M] () -- C:\Users\Emelyne\AppData\Local\fst_fr_62\upfst_fr_62.exe 
PRC - [2014/01/14 10:04:32 | 000,508,016 | ---- | M] (Cherished Technololgy LIMITED) -- C:\ProgramData\IePluginService\PluginService.exe     
PRC - [2013/12/18 18:27:58 | 011,671,024 | ---- | M] () -- C:\Program Files (x86)\fst_fr_33\fst_fr_33.exe 
MOD - [2014/01/27 16:01:19 | 000,201,728 | ---- | M] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Program Files (x86)\Mobogenie\QtSql4.dll     
MOD - [2014/01/27 16:01:18 | 000,775,872 | ---- | M] () -- C:\Program Files (x86)\Mobogenie\DaemonProcess.exe     
MOD - [2014/01/27 16:01:18 | 000,471,040 | ---- | M] () -- C:\Program Files (x86)\Mobogenie\DCR.dll     
MOD - [2014/01/27 16:01:18 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Mobogenie\Device.dll     
MOD - [2014/01/16 10:49:12 | 003,153,904 | ---- | M] () -- C:\Users\Emelyne\AppData\Local\fst_fr_62\upfst_fr_62.exe 
MOD - [2013/12/18 18:27:58 | 011,671,024 | ---- | M] () -- C:\Program Files (x86)\fst_fr_33\fst_fr_33.exe 
MOD - [2013/12/16 04:40:29 | 013,126,656 | ---- | M] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Program Files (x86)\Mobogenie\QtWebKit4.dll     
MOD - [2013/11/14 09:46:16 | 002,576,384 | ---- | M] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Program Files (x86)\Mobogenie\QtCore4.dll     
MOD - [2013/09/11 10:05:31 | 000,269,824 | ---- | M] (The OpenSSL Project, https://www.openssl.org/ -- C:\Program Files (x86)\Mobogenie\ssleay32.dll     
MOD - [2013/09/11 10:05:28 | 001,178,624 | ---- | M] (The OpenSSL Project, https://www.openssl.org/ -- C:\Program Files (x86)\Mobogenie\libeay32.dll     
MOD - [2012/11/19 09:50:23 | 000,773,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Mobogenie\msvcr100.dll     
MOD - [2012/11/19 09:50:23 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Mobogenie\msvcp100.dll     
MOD - [2012/09/12 02:36:30 | 008,571,392 | ---- | M] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Program Files (x86)\Mobogenie\QtGui4.dll     
MOD - [2012/09/12 02:20:30 | 001,052,160 | ---- | M] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Program Files (x86)\Mobogenie\QtNetwork4.dll     
SRV - [2014/01/27 16:01:19 | 000,063,168 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Mobogenie\MgAssist.exe -- (MgAssistService)     
SRV - [2014/01/14 10:04:32 | 000,508,016 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginService\PluginService.exe -- (IePluginService)     
IE - HKU\S-1-5-21-2651329054-2773839316-1819568574-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.awesomehp.com/?type=hp&ts=1390842141&from=tt4u&uid=ST9500325AS_S2WMRR4MXXXXS2WMRR4M 
IE - HKU\S-1-5-21-2651329054-2773839316-1819568574-1003\..\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms} 
[2014/01/27 18:02:21 | 000,000,557 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml     
O1 - Hosts: 54.225.95.126 nikdaiaidiiiogaidkkekcmokcgcdeac 
O2 - BHO: (Discount Dragon BHO) - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} - C:\Program Files (x86)\Discount Dragon\FrameworkBHO64.dll ()     
O2 - BHO: (IETabPage Class) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)     
O2 - BHO: (Discount Dragon BHO) - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} - C:\Program Files (x86)\Discount Dragon\FrameworkBHO.dll ()     
O4 - HKLM\..\Run: [fst_fr_33] C:\Program Files (x86)\fst_fr_33\fst_fr_33.exe () 
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe ()     
O4 - HKLM\..\RunOnce: [Discount Dragon-repairJob] C:\Users\Emelyne\AppData\Local\Discount Dragon\repair.js  ()     
O4 - HKLM\..\RunOnce: [upfst_fr_62.exe] C:\Users\Emelyne\AppData\Local\fst_fr_62\upfst_fr_62.exe () 
[2014/01/28 18:55:57 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter     
[2014/01/28 18:55:56 | 000,000,000 | ---D | C] -- C:\sh4ldr 
[2014/01/28 18:31:05 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\Beamrise     
[2014/01/28 17:15:18 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\fst_fr_33 
[2014/01/28 17:15:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\fst_fr_33 
[2014/01/27 18:03:01 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginService     
[2014/01/27 18:03:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SupTab     
[2014/01/27 18:02:56 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM     
[2014/01/27 18:02:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Discount Dragon     
[2014/01/27 18:02:35 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Roaming\awesomehp 
[2014/01/27 18:02:30 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\Discount Dragon     
[2014/01/27 18:02:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bench     
[2014/01/25 20:21:58 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\genienext     
[2014/01/25 20:21:56 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\Documents\Mobogenie 
[2014/01/25 20:21:56 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\Mobogenie     
[2014/01/25 20:21:50 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie     
[2014/01/25 20:21:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mobogenie     
[2014/01/25 20:11:47 | 000,000,000 | ---D | C] -- C:\Users\Emelyne\AppData\Local\fst_fr_62 
[2014/01/25 20:11:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\fst_fr_62 
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] 
[2014/01/28 20:14:22 | 000,000,000 | ---D | M] -- C:\Users\Emelyne\AppData\Roaming\awesomehp 
[2014/01/27 18:03:01 | 000,000,000 | ---D | M] -- C:\ProgramData\IePluginService     

:Reg
[-HKEY_CURRENT_USER\Software\Beamrise]     
[-HKEY_CURRENT_USER\Software\Tutorials]     
[HKLM\Software]
"38900"=-
[-HKEY_LOCAL_MACHINE\Software\awesomehpSoftware]     
[-HKEY_LOCAL_MACHINE\Software\Bench]     
[-HKEY_LOCAL_MACHINE\Software\Discount Dragon]     
[-HKEY_LOCAL_MACHINE\Software\supTab]     
[-HKEY_LOCAL_MACHINE\Software\supWPM]     
[-HKEY_LOCAL_MACHINE\Software\Tutorials]     
[-HKEY_LOCAL_MACHINE\Software\Wpm]     

:Commands
[EMPTYTEMP]

? Clique sur "Correction" pour lancer la suppression.


? Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail apres le redemarrage.

oliv2402 · Answer

salut juju666

pas grave pour hier soir.
voici le rapport et en esperant que ma fille ne le contamine plus.


All processes killed
========== OTL ==========
Process MgAssist.exe killed successfully!
No active process named DaemonProcess.exe was found!
No active process named upfst_fr_62.exe was found!
Process PluginService.exe killed successfully!
No active process named fst_fr_33.exe was found!
Service MgAssistService stopped successfully!
Service MgAssistService deleted successfully!
C:\Program Files (x86)\Mobogenie\MgAssist.exe moved successfully.
Service IePluginService stopped successfully!
Service IePluginService deleted successfully!
C:\ProgramData\IePluginService\PluginService.exe moved successfully.
HKU\S-1-5-21-2651329054-2773839316-1819568574-1003\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2651329054-2773839316-1819568574-1003\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{460C3D19-B3D4-4964-A550-77D263B0CCCB}\ not found.
C:\Program Files (x86)\Mozilla Firefox\searchplugins\awesomehp.xml moved successfully.
54.225.95.126 nikdaiaidiiiogaidkkekcmokcgcdeac removed from HOSTS file successfully
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ deleted successfully.
C:\Program Files (x86)\Discount Dragon\FrameworkBHO64.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\ deleted successfully.
C:\Program Files (x86)\SupTab\SupTab.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ not found.
C:\Program Files (x86)\Discount Dragon\FrameworkBHO.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files (x86)\fst_fr_33\fst_fr_33.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
C:\Users\Emelyne\AppData\Local\Discount Dragonepair.js moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
C:\Users\Emelyne\AppData\Local\fst_fr_62\upfst_fr_62.exe moved successfully.
C:\Users\Emelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter folder moved successfully.
C:\sh4ldr folder moved successfully.
C:\Users\Emelyne\AppData\Local\Beamrise\Temp\source3976_10408 folder moved successfully.
C:\Users\Emelyne\AppData\Local\Beamrise\Temp folder moved successfully.
C:\Users\Emelyne\AppData\Local\Beamrise folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_33\fst_fr_33\1.10 folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_33\fst_fr_33 folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_33 folder moved successfully.
C:\Program Files (x86)\fst_fr_33 folder moved successfully.
C:\ProgramData\IePluginService\update folder moved successfully.
C:\ProgramData\IePluginService folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\zh-TW folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\zh-CN folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\vi-VI folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales	r-TR folder moved successfully.
C:\Program Files (x86)\SupTab\web\_localesu-MO folder moved successfully.
C:\Program Files (x86)\SupTab\web\_localesu folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\pt-BR folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\pl folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\it-IT folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\it-CH folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\fr-LU folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\fr-FR folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\fr-CH folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\fr-CA folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\fr-BE folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\es-ES folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\es-419 folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales\en-US folder moved successfully.
C:\Program Files (x86)\SupTab\web\_locales folder moved successfully.
C:\Program Files (x86)\SupTab\web\js folder moved successfully.
C:\Program Files (x86)\SupTab\web\img folder moved successfully.
C:\Program Files (x86)\SupTab\web folder moved successfully.
C:\Program Files (x86)\SupTab folder moved successfully.
C:\ProgramData\WPM\update folder moved successfully.
C:\ProgramData\WPM folder moved successfully.
C:\Program Files (x86)\Discount Dragon\icons folder moved successfully.
C:\Program Files (x86)\Discount Dragon\framework-ui	heme\bubble folder moved successfully.
C:\Program Files (x86)\Discount Dragon\framework-ui	heme folder moved successfully.
C:\Program Files (x86)\Discount Dragon\framework-ui folder moved successfully.
C:\Program Files (x86)\Discount Dragon\framework folder moved successfully.
C:\Program Files (x86)\Discount Dragon\CanvasFramework folder moved successfully.
C:\Program Files (x86)\Discount Dragon\AppFramework folder moved successfully.
C:\Program Files (x86)\Discount Dragon folder moved successfully.
C:\Users\Emelyne\AppData\Roaming\awesomehp folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox\icons folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox\framework-ui folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox\framework folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox\CanvasFramework folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox\AppFramework folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon\firefox folder moved successfully.
C:\Users\Emelyne\AppData\Local\Discount Dragon folder moved successfully.
C:\Program Files (x86)\Bench folder moved successfully.
C:\Users\Emelyne\AppData\Local\genienext folder moved successfully.
C:\Users\Emelyne\Documents\Mobogenie folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\info
otice folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\info\download folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\info\connect folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\info folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\iframe	ab_switch folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\iframe folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static\dialog folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_static folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\welcome folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\util folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_	pls folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\skin folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\pb folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\moduletemp folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\vedio folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\ui folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\subject folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\message folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\image folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\driver folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\download folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\contact folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module\app folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\module folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\lib folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\interface folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\vietna folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n	hai folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\spanish folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18nussian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\portuguese folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\poland folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\italian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\indonesian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\english folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\chinese folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n\arabic folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_\i18n folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\js_ folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\light_square folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\light_rounded folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\facebook folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\default folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\dark_square folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto\dark_rounded folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\prettyPhoto folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\photo folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images\debug folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\images folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\iframe folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\htmlTemp folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\vietna folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n	hai folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\spanish folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18nussian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\portuguese folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\poland folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\italian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\indonesian folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\english folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\chinese folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n\arabic folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_\i18n folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\js_ folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog\images folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\dialog folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web\css folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\web folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\skin\skin2 folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\skin\skin1 folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\skin\default folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\skin folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\page folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\libraries folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master	est folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master\examples\views folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master\examples folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master\bin folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master\benchmarks	emplating folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master\benchmarks folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript\doT-master folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\javascript folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates\css folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie	emplates folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\sqldrivers folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\phonon_backend folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\log folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\imageformats folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\OldVersion folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\NewVersion folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version\CacheVersion folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Version folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\driver folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Download\Video folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Download\Picture folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Download\Music folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Download\Apk folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Download folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\device folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\Data folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie\backup folder moved successfully.
C:\Users\Emelyne\AppData\Local\Mobogenie folder moved successfully.
C:\Users\Emelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\info
otice folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\info\download folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\info\connect folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\info folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\iframe	ab_switch folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\iframe folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static\dialog folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_static folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\welcome folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\util folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_	pls folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\skin folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\pb folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\moduletemp folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\vedio folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\ui folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\subject folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\message folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\image folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\driver folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\download folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\contact folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module\app folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\module folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\lib folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\interface folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\vietna folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n	hai folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\spanish folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18nussian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\portuguese folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\poland folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\italian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\indonesian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\english folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\chinese folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n\arabic folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_\i18n folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\js_ folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\light_square folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\light_rounded folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\facebook folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\default folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\dark_square folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto\dark_rounded folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\prettyPhoto folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\photo folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images\debug folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\images folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\iframe folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\htmlTemp folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\vietna folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n	hai folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\spanish folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18nussian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\portuguese folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\poland folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\italian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\indonesian folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\english folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\chinese folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n\arabic folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_\i18n folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\js_ folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog\images folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\dialog folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web\css folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\web folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\skin\skin2 folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\skin\skin1 folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\skin\default folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\skin folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\page folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\libraries folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master	est folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master\examples\views folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master\examples folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master\bin folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master\benchmarks	emplating folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master\benchmarks folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript\doT-master folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\javascript folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates\css folder moved successfully.
C:\Program Files (x86)\Mobogenie	emplates folder moved successfully.
C:\Program Files (x86)\Mobogenie\sqldrivers folder moved successfully.
C:\Program Files (x86)\Mobogenie\phonon_backend folder moved successfully.
C:\Program Files (x86)\Mobogenie\log folder moved successfully.
C:\Program Files (x86)\Mobogenie\imageformats folder moved successfully.
C:\Program Files (x86)\Mobogenie folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_62\fst_fr_62\1.10 folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_62\fst_fr_62 folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_62\Download folder moved successfully.
C:\Users\Emelyne\AppData\Local\fst_fr_62 folder moved successfully.
C:\Program Files (x86)\fst_fr_62 folder moved successfully.
C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP folder deleted successfully.
Folder C:\Users\Emelyne\AppData\Roaming\awesomehp\ not found.
Folder C:\ProgramData\IePluginService\ not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Beamrise\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Tutorials\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\38900 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\awesomehpSoftware\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Bench\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Discount Dragon\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\supTab\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\supWPM\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Tutorials\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Wpm\ deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temporary Internet Files folder emptied: 0 bytes
 
User: Emelyne
->Temp folder emptied: 5851875 bytes
->Temporary Internet Files folder emptied: 28623816 bytes
->Java cache emptied: 34630 bytes
->FireFox cache emptied: 34393307 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1088 bytes
 
User: olivier
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5257117 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 828280 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 72,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 01302014_183647

Files\Folders moved on Reboot...
C:\Users\Emelyne\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Emelyne\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows	emp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\Windows	emp\lm\Emelyne\aipflib.log scheduled to be moved on reboot.
File move failed. C:\Windows	emp\lm\Emelyne\LMutilps32.log scheduled to be moved on reboot.
File move failed. C:\Windows	emp\lm\dsiwmis.log scheduled to be moved on reboot.
C:\Windows	emp\chrome_installer.log moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

juju666 · Answer

Hello

Tu confirmes que c'est bon ?

oliv2402 · Answer

oui ca a l'air de fonctionner

petite question
quels sont les bon petit logiciel utile pour eviter ce genre de désagréments?

juju666 · Answer

On y vient ... :)

Passe un coup de delfix en cochant toutes cases : https://www.commentcamarche.net/telecharger/securite/7111-delfix/

~~

Fais des scans réguliers avec Malwarebytes,  il est efficace.

~~

Désactive Java de tes navigateurs WEB : https://www.commentcamarche.net/faq/35621-desactiver-java-sur-ses-navigateurs-web

~~

Attention à ce que tu installes à l'avenir :
Des logiciels additionnels sont proposés (barre d'outils, adwares) via l'installation de logiciel gratuit en général ou via certains sites de téléchargement comme S0ft0nic.
L'éditeur touche de l'argent à chaque installation réussie de ces programmes additionnels (un genre de sponsoring), ton PC se retrouve avec des barres d'outils qui ralentissent le navigateur ou des adwares qui ouvrent des popups de publicités.
Dès lors, lorsque tu installes un programme, lis bien ce qui est proposé car tu risques d'installé des barres d'outils sans le savoir.

Lire Les PUPs/LPIs : https://www.malekal.com/adwares-pup-protection/

Passe le mot à tes amis !

~~

Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html  

Bonne lecture et n'oublie pas d'indiquer que ton sujet est résolu :)

oliv2402 · Answer

merci beaucoup juju pour ton dépannage.

je viens de faire lire ton post a ma fille.
elle est enchantée de retrouver son pc

juju666 · Answer

C'est nickel alors :)

Faut prendre de bonnes habitudes de navigation, ne pas cliquer n'importe où, ne pas installer n'importe quoi.

Supprimer awesomehp

37 réponses

Newsletters