Sujet Précédent Sujet Suivant

Adw cleaner bloqué par administrateur

Fermé
Dory - Modifié le 4 nov. 2017 à 21:07
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 6 nov. 2017 à 09:59
Bonsoir,

Je suis sur l'ordinateur d'une amie qui a des soucis avec son ordinateur. Je suis dans l'incapacité d'utiliser adw cleaner. J'ai utilisé frst, voici le rapport.


Shorcut : https://pjjoint.malekal.com/files.php?id=20171104_y14e15d15v15t8
Additional : https://pjjoint.malekal.com/files.php?id=20171104_e8q14o13d10r6
FRST : https://pjjoint.malekal.com/files.php?id=FRST_20171104_s5j10b5n14y8

En espérant que l'un d'entre vous puisse m'aider. Merci d'avance

A voir également:

2 réponses

Réponse 1 / 2
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 628
5 nov. 2017 à 20:52
Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.

Ouvre le bloc-notes : Touche Windows + R,
Dans le champs "Exécuter", saisir notepad et OK.
Copie/Colle dedans ce qui suit : 

CreateRestorePoint:
CloseProcesses:
ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811008"
ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.booking.com/index.html?aid=398438&label=square
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FullHD Editeur Vidéo LoiLoScope Télécharger.lnk -> C:\Program Files (x86)\LoiLo\LoiLoScope Download\WebShortcut.exe () -> hxxp://loilo.tv/product/20?partner_id=14
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
 2017-11-03 11:54 - 2017-11-03 11:54 - 000023762 _____ C:\WINDOWS\System32\Tasks\{057E0A47-0A0B-0479-0D11-790F7A7A110F} 
 2017-11-03 11:54 - 2017-11-03 11:54 - 000004182 _____ C:\WINDOWS\System32\Tasks\{DD08C813-6AA3-7FB8-F433-BA450B2EC8A1} 
 2017-11-03 11:54 - 2017-11-03 11:54 - 000003882 _____ C:\WINDOWS\System32\Tasks\{6B976E81-E3FF-30E8-40F9-089325F68B2B} 
 2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\9308f940-0ae7-0 
 2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\50eadfd1 
2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{74803818-212c-0} 
 2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{43A66E61-F40D-D9CA-C89A-1F3A6F302D1E} 
2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{163919f3-212c-1} 
2017-10-30 20:41 - 2017-10-30 20:41 - 000003214 _____ C:\WINDOWS\System32\Tasks\zjwPaeaadZaNwF 
 2017-10-30 20:41 - 2017-10-30 20:41 - 000002864 _____ C:\WINDOWS\System32\Tasks\PjDfytumxbayONn2 
 2017-10-30 20:40 - 2017-11-01 21:25 - 000000000 ____D C:\Program Files (x86)\ProxyGate 
 2017-10-30 20:40 - 2017-10-30 20:44 - 000000320 _____ C:\WINDOWS\Tasks\PjDfytumxbayONn.job  
 2017-10-30 20:40 - 2017-10-30 20:40 - 000002640 _____ C:\WINDOWS\System32\Tasks\PjDfytumxbayONn 
 2017-10-30 20:40 - 2017-10-30 20:40 - 000000290 __RSH C:\ProgramData\ntuser.pol  
 2017-10-30 20:40 - 2017-10-30 20:40 - 000000000 ____D C:\Users\sainp\AppData\Roaming\ChromeHelper 
 2017-10-30 20:39 - 2017-11-02 06:58 - 000000000 ____D C:\Users\sainp\AppData\Local\WindowsSY 
 2017-10-30 20:39 - 2017-10-30 20:39 - 000016808 _____ C:\WINDOWS\System32\Tasks\CadisTide PC 
 2017-10-30 20:39 - 2017-10-30 20:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\WindowsSY 
 2017-10-30 20:38 - 2017-10-31 12:41 - 000003344 _____ C:\WINDOWS\System32\Tasks\IBUpd2 
 2017-10-29 15:49 - 2017-10-29 15:49 - 000766464 _____ () C:\WINDOWS\system32\bi3.exe  
 2017-10-29 12:14 - 2017-10-29 12:14 - 000016802 _____ C:\WINDOWS\System32\Tasks\MathPlugin 
 2017-10-29 12:07 - 2017-10-31 12:17 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware 
 2017-10-29 11:46 - 2017-10-29 11:46 - 000016840 _____ C:\WINDOWS\System32\Tasks\GurtCopyshog Tool 
 2017-10-29 11:40 - 2017-10-29 11:40 - 000000000 ____D C:\ProgramData\Microleaves 
 2017-10-29 11:38 - 2017-10-29 11:42 - 000000414 _____ C:\WINDOWS\Tasks\Updater_Online_Application.job  
 2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G3.job 
 2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G2.job 
 2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G1.job 
 2017-10-29 11:38 - 2017-10-29 11:38 - 000003308 _____ C:\WINDOWS\System32\Tasks\Updater_Online_Application 
 2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G3 
 2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G2 
 2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G1 
 2017-10-29 11:38 - 2017-10-29 11:38 - 000000000 ____D C:\Program Files (x86)\Microleaves 
 2017-10-29 11:37 - 2017-10-29 11:37 - 000031449 _____ C:\WINDOWS\2bf43438a3957268e2baf49ea37f540b.ps1  
 2017-10-29 11:37 - 2017-10-29 11:37 - 000000000 ____D C:\Users\sainp\AppData\Local\AdvinstAnalytics 
 2017-10-29 11:36 - 2017-11-04 18:50 - 000000000 ____D C:\Program Files\Common Files\Noobzo 
 2017-10-29 11:36 - 2017-10-29 11:36 - 000003674 _____ C:\WINDOWS\System32\Tasks\FastDataX Task 
 2017-10-29 11:36 - 2017-10-29 11:36 - 000000000 ____D C:\Users\sainp\AppData\Roaming\Microleaves 
 2017-10-29 11:35 - 2017-10-30 20:35 - 000187904 _____ C:\WINDOWS\rsrcs.dll  
 2017-10-29 11:35 - 2017-10-30 20:35 - 000004252 _____ C:\WINDOWS\System32\Tasks\SMW_P 
 2017-10-29 11:35 - 2017-10-29 11:36 - 000003300 _____ C:\WINDOWS\System32\Tasks\322467d30e22349d3b422fe073581bdc  
 2017-10-29 11:35 - 2017-10-29 11:35 - 000000000 ____D C:\WINDOWS\SysWOW64\SSL 
 2017-10-29 11:35 - 2017-10-29 11:35 - 000000000 ____D C:\Program Files (x86)\FastDataX 
 2017-10-29 11:32 - 2017-10-29 11:32 - 000016838 _____ C:\WINDOWS\System32\Tasks\Earth Excel to PDF 
 2017-10-29 11:24 - 2017-10-29 11:35 - 000000000 ____D C:\Users\sainp\AppData\Roaming\vnlgp 
 2017-10-29 11:23 - 2017-10-29 11:23 - 000016824 _____ C:\WINDOWS\System32\Tasks\Deer Day Stylus 
 2017-10-29 11:22 - 2017-10-29 11:31 - 000930816 _____ C:\Users\sainp\AppData\Local\po.db 
 2017-10-29 11:22 - 2017-10-29 11:22 - 000140800 _____ C:\Users\sainp\AppData\Local\installer.dat  
 2017-10-29 11:22 - 2017-10-29 11:22 - 000011568 _____ C:\Users\sainp\AppData\Local\InstallationConfiguration.xml  
 2017-10-29 11:22 - 2017-10-29 11:22 - 000000000 ____D C:\Users\Public\Documents\XMUpdate 
 2017-10-29 11:21 - 2017-10-31 20:57 - 000000000 ____D C:\Users\sainp\AppData\Local\AdService 
 2017-10-29 11:21 - 2017-10-29 11:54 - 000000000 ____D C:\Users\sainp\AppData\Roaming\Event Monitor 
 2017-10-29 11:20 - 2017-10-29 11:20 - 000000000 ____D C:\Program Files (x86)\pccleanplus 
 2017-10-27 00:13 - 2017-10-27 00:13 - 000109144 _____ (L00OHO) C:\WINDOWS\system32\Drivers\e2cc13fcac7e1da6f6298ac5fd8c1a22.sys  
 2017-10-27 00:13 - 2017-10-27 00:13 - 000039808 _____ C:\WINDOWS\uninstaller.dat  
R1 e2cc13fcac7e1da6f6298ac5fd8c1a22; C:\WINDOWS\system32\drivers\e2cc13fcac7e1da6f6298ac5fd8c1a22.sys [109144 2017-10-27] (L00OHO) <==== ATTENTION  
 R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [132992 2017-09-15] ()  
 S2 322467d30e22349d3b422fe073581bdc; C:\Program Files\322467d30e22349d3b422fe073581bdc\e9ffbc29729093cbe547ce25c4b972d4.exe [X]  
 S2 pgt_svc; C:\Program Files (x86)\ProxyGate\MainService.exe [X] <==== ATTENTION  
 HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [uTorrent] => C:\Users\sainp\AppData\Roaming\uTorrent\uTorrent.exe [1982144 2017-09-29] (BitTorrent Inc.)  
 HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [rtsnx1Nl45kY.exe] => C:\ProgramData\7c47632bfce0488aa1178aa27d05c4c4\rtsnx1Nl45kY.exe  
 HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [kMK0H1sA.exe] => C:\Users\sainp\AppData\Roaming\8bba71386c76494098da047567084ac5\kMK0H1sA.exe  
 HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\MountPoints2: {3ef8a486-b949-11e5-9bd7-dc4a3e138e05} - H:\PMCsetup.exe  
GroupPolicy: Restriction - Chrome <==== ATTENTION 
GroupPolicy\User: Restriction <==== ATTENTION 
HKLM\...\Run: [vnlgp] => C:\Users\sainp\AppData\Roaming\vnlgp\vnlgp\start.cmd [214 2016-04-04] () <==== ATTENTION 
 C:\Users\sainp\AppData\Roaming\vnlgp
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ATTENTION  
 HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ATTENTION  
 HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ATTENTION  
 HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ATTENTION  
 HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ATTENTION  
 HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ATTENTION  
 HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ATTENTION  
 HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ATTENTION  
 HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ATTENTION  
 HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ATTENTION  
 HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ATTENTION  
 HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ATTENTION  
 HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ATTENTION  
 HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ATTENTION  
 HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ATTENTION  
 HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ATTENTION  
 HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ATTENTION  
 HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ATTENTION  
Task: {01B43587-4EB4-4B4F-998D-2F7348D57DC4} - System32\Tasks\CadisTide PC => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\CadisTide PC\CadisTide PC.dll",ezhDQrsNP <==== ATTENTION
Task: {0B10B023-7B70-490C-911A-8E00D618EA87} - System32\Tasks\PjDfytumxbayONn => rundll32 "C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll",#1
Task: {15D248AB-6EF1-4CAF-9AE6-6F81BF96AA42} - System32\Tasks\GT-Adole => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\GT-Adole\GT-Adole.dll",oUpNJvWaToLg <==== ATTENTION
Task: {216CF197-C010-4693-AE8C-24A309E332DF} - System32\Tasks\Online Application V2G3 => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [2017-02-07] (Microleaves LTD) <==== ATTENTION
Task: {225DB607-32B4-451E-9138-9BEA40E38354} - System32\Tasks\Earth Excel to PDF => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\Earth Excel to PDF\Earth Excel to PDF.dll",FzqzZP <==== ATTENTION
Task: {37B32C67-1A2C-4079-B942-2F3FB0237A07} - System32\Tasks\Deer Day Stylus => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\Deer Day Stylus\Deer Day Stylus.dll",MpWfXlYE <==== ATTENTION
Task: {3DE291D2-3F21-48EC-9164-17A75B42E066} - System32\Tasks\Updater_Online_Application => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe [2017-06-18] (Microleaves) <==== 
Task: {4705E194-049F-4E18-BA9A-4FC51D87326D} - System32\Tasks\MathPlugin => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\MathPlugin\MathPlugin.dll",bqHRRBJfYbhy <==== ATTENTION
Task: {4BEDA75A-781F-4F38-A06D-D6A066501997} - System32\Tasks\{057E0A47-0A0B-0479-0D11-790F7A7A110F} => C:\WINDOWS\system32\WindowsPowershell\v1.0\powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand OwA7ACAAIAAgADsAIAA7ADsAOwA7ACAAIAAgADsAIAA7ADsAOwAgADsAIAAgACAAIAAkAEUAcgByAG8AcgBBAGMAdABpAG8AbgBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AIgBzAHQAbwBwACIAOwAkAHMAYwA9ACIAUwBpAGwAZQBuAHQAbAB5AEMAbwBuAHQAaQBuAHUAZQAiADsAJABXAGEA (l'élément de données a 9644 caractères en plus). <==== ATTENTION
Task: {50B5436A-9F27-4AE2-B2F7-16C175832D6D} - System32\Tasks\IBUpd2 => C:\Users\sainp\AppData\Local\BrowserAir\48.0.0.0\updater.exe <==== ATTENTION
Task: {53E74B29-AFB5-4986-843E-DB1513FE7EA6} - System32\Tasks\PjDfytumxbayONn2 => rundll32 "C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll",#1
Task: {5754F7A2-BABB-4A34-A56A-7897F6E8BC70} - System32\Tasks\{6B976E81-E3FF-30E8-40F9-089325F68B2B} => C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\50eadfd1\3c66db1f.dll" <==== ATTENTION
Task: {7EF7F727-0128-4580-A2B7-36EAE653D992} - System32\Tasks\SMW_P => C:\ProgramData\smp2.exe <==== ATTENTION
Task: {8C1AB99E-17F2-4FDB-B848-A35DC8C5132A} - System32\Tasks\GurtCopyshog Tool => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\GurtCopyshog Tool\GurtCopyshog Tool.dll",CQOsoKOxjI <==== ATTENTION
Task: {902034BC-6BD0-4793-87EF-CCC84D037214} - System32\Tasks\zjwPaeaadZaNwF => rundll32 "C:\Program Files (x86)\JIdcnntTvnKU2\vWkpOocgSKhzQ.dll",#1
Task: {91C06D22-D882-4978-8C8A-7F7D677FF45A} - System32\Tasks\WindowsSY\WindowsSY\WindowsSY => C:\Users\sainp\AppData\Local\WindowsSY\WindowsSY.exe [2017-10-23] () <==== ATTENTION
Task: {D32E7FD8-5082-4F2B-BC9D-BA7EFE0F779C} - System32\Tasks\322467d30e22349d3b422fe073581bdc => sc start 322467d30e22349d3b422fe073581bdc <==== ATTENTION
Task: {D843B665-05DF-4FCF-A024-41BD8DED5723} - System32\Tasks\FastDataX Task => C:\Program Files (x86)\FastDataX\fastdatax.exe [2017-10-27] () <==== ATTENTION
Task: C:\WINDOWS\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\PjDfytumxbayONn.job => C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll
Task: C:\WINDOWS\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdate.exe

EmptyTemp:
RemoveProxy:
Reboot:


Une fois, le texte collé dans le Bloc-notes,
Menu "Fichier" puis "Enregistrer sous",
A gauche, place toi sur le Bureau,
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clique sur "Enregistrer", cela va créer fixlist.txt sur le Bureau.

Relance FRST et clique sur le bouton "Corriger / Fix"
Un redémarrage sera peut-être nécessaire ( pas obligatoire )
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur.


2°)
Réinitialise/Répare les navigateurs WEB concernés par les problèmes :

3°)
Termine par un nettoyage Malwarebytes - Tutoriel Malwarebytes Anti-Malware version gratuite

4°)
Vois ce que cela donne et si des améliorations ont eu lieu.
Si ce n'est pas le cas, si tu as encore des pages de pubs intempestives, précise sur quel navigateur WEB.
Refais un scan FRST et donne les nouveaux rapports via pjjoint.




A désinstaller aussi, ça sert à rien ces programmes :
CyberLink
Jeux WildTangent
Trojan Remover
WildTangent Games App pour HP
0
Réponse 2 / 2
Dorybis
6 nov. 2017 à 09:58
Bonjour,
J'ai suivi l'étape du bloc notes et il me donne ça :
https://pjjoint.malekal.com/files.php?id=20171106_i10v9p12x8f14


Merci de ton aide.
0
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 628
6 nov. 2017 à 09:59
ok fais le reste de la procédure.
0

Discussions similaires

Mot de passe administrateur Freebox : où le trouver ?
Utilisateur anonyme -
Marie -

7 réponses