Sujet Précédent Sujet Suivant

Supprimer YTdownloader?

Résolu/Fermé
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015 - 20 juin 2015 à 20:15
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015 - 24 juin 2015 à 15:00
Bonjour,

Depuis quelques jours, j'ai YTdownloader sur mon ordinateur sans trop savoir comment... je voudrai le supprimer mais il semble difficile à éliminer. Est ce que quelqu'un peut m'aider?

ci joint le rapport OTL.txt
https://pjjoint.malekal.com/files.php?id=20150620_j14w12s9b10g11

En vous remerciant par avance.

Bociste


A voir également:

8 réponses

Réponse 1 / 8
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
20 juin 2015 à 20:34
Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
  • FRST.txt
  • Shortcut.txt
  • Additionnal.txt


Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.



0
Réponse 2 / 8
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015
20 juin 2015 à 21:09
Merci beaucoup pour la réponse rapide Malekal Morte,

voici le rapport adwcleaner:

# AdwCleaner v4.206 - Logfile created 20/06/2015 at 20:45:50
# Updated 01/06/2015 by Xplode
# Database : 2015-06-17.1 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : Administrateur - SWEET-28CF95473
# Running from : C:\Documents and Settings\Administrateur\Bureau\adwcleaner_4.206.exe
# Option : Cleaning
          • [ Services ] *****


[#] Service Deleted : BrowserDefendert
[#] Service Deleted : BrsHelper
Service Deleted : sbmntr
[#] Service Deleted : SPBIUpd
Service Deleted : SPBIUpdd
          • [ Files / Folders ] *****


Folder Deleted : C:\Documents and Settings\All Users\Application Data\Ask
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Application Data\BrowserDefender
Folder Deleted : C:\Documents and Settings\All Users\Application Data\ShopperPro
Folder Deleted : C:\Program Files\1ClickDownload
Folder Deleted : C:\Program Files\DAEMON Tools Toolbar
Folder Deleted : C:\Program Files\Delta
Folder Deleted : C:\Program Files\globalUpdate
Folder Deleted : C:\Program Files\ShopperPro
Folder Deleted : C:\Program Files\YTDownloader
Folder Deleted : C:\Program Files\Fichiers communs\Software Update Utility
Folder Deleted : C:\Documents and Settings\Administrateur\Local Settings\Application Data\globalUpdate
Folder Deleted : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Ilivid Player
Folder Deleted : C:\Documents and Settings\Administrateur\Application Data\nitionto
Folder Deleted : C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\YTDownloader
Folder Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\Extensions\{0B38152B-1B20-484D-A11F-5E04A9B0661F}
File Deleted : C:\Documents and Settings\Administrateur\Application Data\MSNMessengerAPI.dll
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.xpt
File Deleted : C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\aol-web-search.xml
File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\mngr.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml
File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\web-search.xml
File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\user.js
          • [ Scheduled tasks ] *****


Task Deleted : YTDownloader
Task Deleted : YTDownloaderUpd
Task Deleted : SPBIW_UpdateTask_Time_323836373533383930382d3437415a556c2a3223346c41
          • [ Shortcuts ] *****
          • [ Registry ] *****


Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
Key Deleted : HKCU\Software\586d78ce568b949
Key Deleted : HKLM\SOFTWARE\586d78ce568b949
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322712280}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E43339A0-34D3-49E1-8283-30E84DFFA195}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366716680}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C524C869-72F8-42E7-BC9C-E3022F089362}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Key Deleted : HKCU\Software\BABSOLUTION
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\dt soft\daemon tools toolbar
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKCU\Software\vShare.tv
Key Deleted : HKCU\Software\YTDownloader
Key Deleted : HKCU\Software\rttasks
Key Deleted : HKCU\Software\canortic
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\Crossrider
Key Deleted : HKLM\SOFTWARE\Delta
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\ShopperPro
Key Deleted : HKLM\SOFTWARE\SimplyGen
Key Deleted : HKLM\SOFTWARE\YTDownloader
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YTDownloader
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46d699b3-6a25-4071-6078-4e96aeed2e07}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\iWebar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Object Browser
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperPro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare.tv plugin
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{46d699b3-6a25-4071-6078-4e96aeed2e07}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SoftwareUpdate.exe
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:1070;hxxps=127.0.0.1:1070
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
          • [ Web browsers ] *****


-\\ Internet Explorer v7.0.6000.20861


-\\ Mozilla Firefox v10.0.2 (fr)

[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.date", "15");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastDate", "28");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastMonth", "2");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastYear", "2015");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.month", "15");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.prevMonth", "8");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.total", "82");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.week", "15");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.year", "15");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.winamp.com/search/search?query={searchTerms}&invocationType=winamp-ff&s_qt=sb&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-2012&query[...]
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&s_qt=ab&s_it=winamp-ff&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-2012&q=");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.date", "1315695774");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.finished", "1.0.0");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.fresh", "false");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.guid", "{9906254b-5bd9-4cdc-883e-41ef3a3ee138}");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.istoolbarhp", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.istoolbarsearch", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.newtab", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_33500;post_to_facebook_33511;post_to_AIM_33511;;facebook_45469");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.cookie.homepage", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.cookie.search", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.homepage.check", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.check", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.label", "AOL Search");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.url", "hxxp://search.winamp.com/search/search?query={searchTerms}&invocationType=winamp-ff&s_qt=sb&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-20[...]
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.firsttime.showwindow", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.guid", "{A79D9533-BB0A-3183-8DB5-EA3A32A5AB1B}");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.distroid", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.20.8949");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.lid", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.mtmhp", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.ncid", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampdate", "28");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampmonth", "2");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampyear", "2015");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.log", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalDate", "31");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalHours", "19");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalMinutes", "11");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalMonth", "12");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalSeconds", "6");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalYear", "2011");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.relatednews.enabled", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.remote..xml", "1427502358623");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.remote.publish.xml", "1427502358623");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.button", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.cid", "21-11-2012");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.instd", "20111226175152531");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.oid", "31-12-2011");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.placement", "left");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.populateoncomplete", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.savehistory", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.searchtype", "web");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.source", "winamp-ff");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.skin.custom", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.upgrade.showwindow", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.degc", "7");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.degf", "45");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.image", "chrome://winamptoolbar/skin/weather/26_n.png");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.locationid", "USNY0996");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.metric", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.tooltip", "New York , NY : Cloudy");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.update", "1427502358624");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.artist", "");
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.focus", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.forward", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.open", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.pause", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.play", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.rewind", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.stop", false);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.volume", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.ticker.show", true);
[qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.title", "-999999");

-\\ Google Chrome v


-\\ Chromium v


AdwCleaner[R0].txt - [18383 bytes] - [20/06/2015 20:38:07]
AdwCleaner[S0].txt - [19201 bytes] - [20/06/2015 20:45:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19261 bytes] ##########

le rapport FRST.txt : https://pjjoint.malekal.com/files.php?id=20150620_v15i15i14g5s8
le rapport shortcut.txt : https://pjjoint.malekal.com/files.php?id=20150620_f8p10l10y11e11
le rapport addition.txt : https://pjjoint.malekal.com/files.php?id=20150620_y6d8v15e11t7

Merci beaucoup.
Bociste
0
Réponse 3 / 8
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
21 juin 2015 à 10:42
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [not found]
FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com [not found]
2015-06-15 15:34 - 2015-06-20 00:57 - 00000000 _____ C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat
2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717
2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b
2015-06-15 14:23 - 2015-06-15 14:29 - 00000000 ____D C:\Program Files\Software
2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software
2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt
2011-05-09 07:15 - 2011-05-09 07:15 - 0519176 _____ () C:\Documents and Settings\Administrateur\Application Data\771.tmp
2011-05-09 08:58 - 2011-05-09 08:58 - 0040880 _____ () C:\Documents and Settings\Administrateur\Application Data\780.tmp
2011-05-10 16:54 - 2011-05-10 16:54 - 0000127 _____ () C:\Documents and Settings\Administrateur\Application Data\93.tmp
2005-09-25 20:21 - 2011-08-14 17:10 - 0000877 ____H () C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat
2011-09-10 21:44 - 2011-09-10 21:44 - 0002096 _____ () C:\Documents and Settings\Administrateur\Application Data\C4.tmp
2011-04-27 17:30 - 2011-09-02 00:17 - 0118784 _____ () C:\Documents and Settings\Administrateur\Application Data\chrtmp
2011-09-14 09:18 - 2011-09-14 09:18 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8
2011-09-02 05:32 - 2011-09-02 05:32 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6
2011-09-05 13:59 - 2011-09-05 13:59 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f
2011-09-14 09:19 - 2011-09-14 09:19 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ
2011-09-07 14:02 - 2011-09-07 14:02 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr
2011-09-02 00:25 - 2011-09-02 00:25 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft
2011-11-02 23:53 - 2011-11-02 23:53 - 0593408 _____ (Microsoft Corporation) C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe
2011-09-01 23:58 - 2011-09-01 23:58 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.

Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur


puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :


0
Réponse 4 / 8
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015
21 juin 2015 à 15:22
Bonjour Malekal morte,

voici le rapport fixlog.txt

Fix result of Farbar Recovery Scan Tool (x86) Version: 21-06-2015 01
Ran by Administrateur at 2015-06-21 15:08:09 Run:1
Running from C:\Documents and Settings\Administrateur\Bureau
Loaded Profiles: Administrateur (Available Profiles: Administrateur)
Boot Mode: Normal

==============================================

fixlist content:

FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [not found]
FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com [not found]
2015-06-15 15:34 - 2015-06-20 00:57 - 00000000 _____ C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat
2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717
2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b
2015-06-15 14:23 - 2015-06-15 14:29 - 00000000 ____D C:\Program Files\Software
2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software
2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt
2011-05-09 07:15 - 2011-05-09 07:15 - 0519176 _____ () C:\Documents and Settings\Administrateur\Application Data\771.tmp
2011-05-09 08:58 - 2011-05-09 08:58 - 0040880 _____ () C:\Documents and Settings\Administrateur\Application Data\780.tmp
2011-05-10 16:54 - 2011-05-10 16:54 - 0000127 _____ () C:\Documents and Settings\Administrateur\Application Data\93.tmp
2005-09-25 20:21 - 2011-08-14 17:10 - 0000877 ____H () C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat
2011-09-10 21:44 - 2011-09-10 21:44 - 0002096 _____ () C:\Documents and Settings\Administrateur\Application Data\C4.tmp
2011-04-27 17:30 - 2011-09-02 00:17 - 0118784 _____ () C:\Documents and Settings\Administrateur\Application Data\chrtmp
2011-09-14 09:18 - 2011-09-14 09:18 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8
2011-09-02 05:32 - 2011-09-02 05:32 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6
2011-09-05 13:59 - 2011-09-05 13:59 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f
2011-09-14 09:19 - 2011-09-14 09:19 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ
2011-09-07 14:02 - 2011-09-07 14:02 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr
2011-09-02 00:25 - 2011-09-02 00:25 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft
2011-11-02 23:53 - 2011-11-02 23:53 - 0593408 _____ (Microsoft Corporation) C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe
2011-09-01 23:58 - 2011-09-01 23:58 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK


C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com => not found.
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com => not found.
C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat => moved successfully.
C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717 => moved successfully.
C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b => moved successfully.
C:\Program Files\Software => moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software => moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\771.tmp => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\780.tmp => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\93.tmp => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\C4.tmp => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\chrtmp => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8 => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6 => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe => moved successfully.
C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK => moved successfully.

End of Fixlog 15:08:09

Je vais maintenant réinitialiser les navigateurs.

Merci beaucoup.

Bociste
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 8
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
21 juin 2015 à 18:10
vois ce qu'il reste comme problème.
0
Réponse 6 / 8
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015
22 juin 2015 à 19:45
Bonjour Malekal morte,

Tous me semble revenu à la normale... en tout cas, YTdownloader a disparu.
Y a t-il encore une procédure à suivre?

Merci encore pour l'assistance.


Bociste
0
Réponse 7 / 8
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
23 juin 2015 à 18:43
non =)

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :


Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html


0
Réponse 8 / 8
bociste Messages postés 5 Date d'inscription samedi 20 juin 2015 Statut Membre Dernière intervention 24 juin 2015
24 juin 2015 à 15:00
Bonjour Malekal Morte

super, tous cela est noté!

Merci encore pour le coup de main.

Bociste
0