FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[ggraindo]

Bonjour,

Je viens de m'inscrire sur le forum afin de me débarrasser de remarkit. J'ai trouvé un sujet m'indiquant d'utiliser AdwCleaner. Je l'ai installé et l'ai fait tourné.
Une fois mon ordinateur nettoyé par le logiciel,voici le rapport que j'ai obtenu :

# AdwCleaner v3.210 - Rapporto creato 23/05/2014 in 11:44:59
# Aggiornato 19/05/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nome utente : Ombeline - OMBELINE-PC
# In esecuzione da : C:\Users\Ombeline\Downloads\adwcleaner.exe
# Opzione : Pulisci

***** [ Servizi ] *****

Servizio Eliminato : IePluginService
[#] Servizio Eliminato : Re-markit
Servizio Eliminato : Wpm
Servizio Eliminato : wStLibG64

***** [ File / Cartelle ] *****

Cartella Eliminato : C:\ProgramData\apn
Cartella Eliminato : C:\ProgramData\IePluginService
Cartella Eliminato : C:\ProgramData\wincert
Cartella Eliminato : C:\ProgramData\WPM
Cartella Eliminato : C:\Program Files (x86)\AnyProtectEx
Cartella Eliminato : C:\Program Files (x86)\Mobogenie
Cartella Eliminato : C:\Program Files (x86)\Re-markit Corp
Cartella Eliminato : C:\Program Files (x86)\SupTab
Cartella Eliminato : C:\Users\Ombeline\AppData\Local\lollipop
Cartella Eliminato : C:\Users\Ombeline\AppData\Local\Temp\apn
Cartella Eliminato : C:\Users\Ombeline\AppData\Local\Temp\Mega Browse
Cartella Eliminato : C:\Users\Ombeline\AppData\Roaming\SupTab
Cartella Eliminato : C:\Users\Ombeline\AppData\Roaming\webssearches
Cartella Eliminato : C:\Users\Ombeline\Documents\Optimizer Pro
Cartella Eliminato : C:\Users\Ombeline\Documents\PC Speed Maximizer
Cartella Eliminato : C:\Users\Ombeline\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnkgiapbjhdboldbhkagdodklkphaip
File Eliminato : C:\Users\Ombeline\AppData\Roaming\aps.scan.quick.results
File Eliminato : C:\Users\Ombeline\AppData\Roaming\aps.scan.results
File Eliminato : C:\Users\Ombeline\AppData\Roaming\aps.uninstall.scan.results
File Eliminato : C:\Users\Ombeline\Desktop\Continue VuuPC Installation.lnk
File Eliminato : C:\Users\Ombeline\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
File Eliminato : C:\Windows\Tasks\APSnotifierPP1.job
File Eliminato : C:\Windows\System32\Tasks\APSnotifierPP1
File Eliminato : C:\Windows\Tasks\APSnotifierPP2.job
File Eliminato : C:\Windows\System32\Tasks\APSnotifierPP2
File Eliminato : C:\Windows\Tasks\APSnotifierPP3.job
File Eliminato : C:\Windows\System32\Tasks\APSnotifierPP3
File Eliminato : C:\Windows\Tasks\Re-markit Update.job
File Eliminato : C:\Windows\System32\Tasks\Re-markit Update
File Eliminato : C:\Windows\Tasks\Re-markit_wd.job
File Eliminato : C:\Windows\System32\Tasks\Re-markit_wd
File Eliminato : C:\Windows\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-2.job
File Eliminato : C:\Windows\System32\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-2
File Eliminato : C:\Windows\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-3.job
File Eliminato : C:\Windows\System32\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-3
File Eliminato : C:\Windows\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-4.job
File Eliminato : C:\Windows\System32\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-4
File Eliminato : C:\Windows\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-5.job
File Eliminato : C:\Windows\System32\Tasks\5e288e6b-fd13-4daf-baec-f0ff6da4c671-5

***** [ Collegamenti ] *****

Collegamento Disinfetatti : C:\Users\Public\Desktop\Google Chrome.lnk
Collegamento Disinfetatti : C:\Users\Ombeline\Desktop\Premier utilisateur - Chrome.lnk
Collegamento Disinfetatti : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Collegamento Disinfetatti : C:\Users\Ombeline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Collegamento Disinfetatti : C:\Users\Ombeline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Collegamento Disinfetatti : C:\Users\Ombeline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Registro ] *****

Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsemngr.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsermngr.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bundlesweetimsetup.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta babylon.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta tb.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta2.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltainstaller.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltasetup.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb_2501-c733154b.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iminentsetup.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweetimsetup.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tbdelta.exetoolbar783881609.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Chiave Eliminati : HKLM\SOFTWARE\Classes\CrossriderApp0053166.BHO
Chiave Eliminati : HKLM\SOFTWARE\Classes\CrossriderApp0053166.BHO.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\CrossriderApp0053166.Sandbox
Chiave Eliminati : HKLM\SOFTWARE\Classes\CrossriderApp0053166.Sandbox.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311166}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312266}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315566}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316666}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544314466}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311166}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511311166}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Chiave Eliminati : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311166}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312266}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315566}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316666}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311166}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Dato Ripristinati : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Chiave Eliminati : HKCU\Software\AnyProtect
Chiave Eliminati : HKCU\Software\InstallCore
Chiave Eliminati : HKCU\Software\installedbrowserextensions
Chiave Eliminati : HKCU\Software\Linkey
Chiave Eliminati : HKCU\Software\lollipop
Chiave Eliminati : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chiave Eliminati : HKCU\Software\AppDataLow\Software\Crossrider
Chiave Eliminati : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chiave Eliminati : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chiave Eliminati : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chiave Eliminati : HKLM\Software\DataMngr
Chiave Eliminati : HKLM\Software\IePlugin
Chiave Eliminati : HKLM\Software\installedbrowserextensions
Chiave Eliminati : HKLM\Software\SupTab
Chiave Eliminati : HKLM\Software\supWPM
Chiave Eliminati : HKLM\Software\SystemK
Chiave Eliminati : HKLM\Software\webssearchesSoftware
Chiave Eliminati : HKLM\Software\Wpm
Chiave Eliminati : [x64] HKLM\SOFTWARE\installedbrowserextensions
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rjatydimofu.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041

Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v34.0.1847.137

[ File : C:\Users\Ombeline\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Eliminati [Startup_urls] : hxxp://search.imesh.net
Eliminati [Startup_urls] : hxxp://search.iminent.com/
Eliminati [Startup_urls] : hxxp://start.funmoods.com/?f=1a=nv1chnl=nv1cd=2XzuyEtN2Y1L1Qzu0Czzzy0C0D0CyC0CtBtC0Ezy0EyD0A0BtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtBcr=812430852
Eliminati [Startup_urls] : hxxp://search.gboxapp.com/
Eliminati [Startup_urls] : hxxp://istart.webssearches.com/?type=hpts=1396352790from=tugsuid=ST31000524AS_6VPH1N26XXXX6VPH1N26
Eliminati [Startup_urls] : hxxp://www.default-search.net?sid=492aid=105it ... 304src=hmp
Eliminati [Extension] : olnkgiapbjhdboldbhkagdodklkphaip
Eliminati [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
Eliminati [Extension] : pljcgbedjplidkdjahbaalanadmjfgop

*************************

AdwCleaner[R0].txt - [20764 octets] - [23/05/2014 11:44:10]
AdwCleaner[S0].txt - [15592 octets] - [23/05/2014 11:44:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15653 octets] ##########

Que suis-je censée faire après?

Merci beaucoup par avance.

GG

[2011N2]

Bonjour,

Ton PC n'est pas en français ?

Passe Shortcut_Module et poste le rapport hébergé : http://www.forum-entraide-informatique. ... e-tutoriel

Gabriel.

[ggraindo]

Bonjour Gabriel,

Merci pour ton retour. En effet, mon PC est en italien.

Je viens de passer Shortcut_Module, voici le rapport en PJ.

Merci beaucoup pour ton aide.

GG

[2011N2]

Re,

Ton rapport n'a pas été envoyé avec la pièce jointe apparemment, sinon héberge-le sur cjoint.

Gabriel.

[ggraindo]

Le voici : http://cjoint.com/?3ExphcnhRKU

[2011N2]

Re,

Bien.

Fais un diagnostic de ton PC avec ZHPDiag et poste le rapport hébergé : http://www.forum-entraide-informatique. ... g-tutoriel

Gabriel.

[ggraindo]

Voici le lien pour le rapport : http://cjoint.com/?DExwzqqeoV2
Merci.

GG

[2011N2]

Bonjour,

Fais ZHPFix comme ceci avec ces lignes, et poste le rapport.

Gabriel.

[ggraindo]

Bonjour,

Voici le rapport :

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Ombeline at 25/05/2014 14:21:06
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 03s)
Dossier Prefetcher vidé

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉ Redémarrage: c:\windows\system32\drivers\wstlibg64.sys
SUPPRIMÉS Temporaires Windows (16) (380 970 octets)
SUPPRIMÉS Flash Cookies (0) (0 octets)

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
1 : Dossiers
3 : Fichiers
1 : Restauration Système


End of clean in 00mn 29s

========== Chemin de fichier rapport ==========
C:\Users\Ombeline\AppData\Roaming\ZHP\ZHPFix[R1].txt - 25/05/2014 14:21:10 [841]

Merci.

GG

[2011N2]

Re,

Passe MBAM et poste le rapport : http://www.forum-entraide-informatique. ... m-tutoriel

Gabriel.

[ggraindo]

Voici le rapport :

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Scan Date: 25/05/2014
Scan Time: 18:30:13
Logfile: Rapport Malwarebytes Anti-Malware.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.05.25.04
Rootkit Database: v2014.05.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Ombeline

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 451088
Time Elapsed: 2 hr, 45 min, 58 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 12
PUP.Optional.AdLyrics.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Re-markit Corp\ReMar.exe.vir, , [789731230c6f122417841825f20eab55],
PUP.Optional.SupTab.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir, , [808fb69e7902e74f85c6d46142bed030],
PUP.Optional.IePluginService.A, C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir, , [f31c490b33481d196a8398be09f8b24e],
PUP.Optional.WpManager, C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir, , [d13e2f256f0ceb4b1438d98815ec936d],
PUP.Optional.SupTab.A, C:\AdwCleaner\Quarantine\C\Users\Ombeline\AppData\Roaming\SupTab\SupTab.dll.vir, , [07089eb60c6f89ad3c0fe3521ae67a86],
PUP.Optional.CrossRider.A, C:\Shortcut_Module\Quarantine\C\Program Files (x86)\Plus-HD-9.5g.S_M\utils.exe, , [ad62e47093e8ba7c27ba340b9a66ab55],
PUP.Optional.SkyTech.A, C:\Shortcut_Module\Quarantine\C\Users\Ombeline\AppData\Local\Temp\01287cb2-0722-492b-a1db-d5a68a74014d\software\lly_webssearches.exe.S_M, , [709f66eee4973600bc11b89ecf32b44c],
PUP.Optional.Lollipop, C:\Shortcut_Module\Quarantine\C\Users\Ombeline\AppData\Local\Temp\01287cb2-0722-492b-a1db-d5a68a74014d\software\LollipopInstaller_uni.exe.S_M, , [f8179db748331c1a122622c454af23dd],
PUP.Optional.SilenceInstall, C:\Shortcut_Module\Quarantine\C\Users\Ombeline\AppData\Local\Temp\01287cb2-0722-492b-a1db-d5a68a74014d\software\VOPackage.exe.S_M, , [13fc3123700b999d9d31d66441bfff01],
PUP.Optional.IePluginService.A, C:\Shortcut_Module\Quarantine\C\Users\Ombeline\AppData\Local\Temp\fullpackage_temp1396352782\tmp\SupTab.exe.S_M, , [7b948cc893e88babe00d4d0926dbad53],
PUP.Optional.WpManager, C:\Shortcut_Module\Quarantine\C\Users\Ombeline\AppData\Local\Temp\fullpackage_temp1396352782\tmp\wpm.exe.S_M, , [a6699bb983f8d165f15b1f428c7519e7],
PUP.Optional.SkyTech.A, C:\Users\Ombeline\AppData\Local\Temp\fullpackage_temp1396352782\alilog.dll, , [749b84d02d4e8bab769f062cd42c926e],

Physical Sectors: 0
(No malicious items detected)


(end)

Merci.

GG

[2011N2]

Re,

Bien.

Comment se comporte le PC ?

Fais un nouveau rapport ZHPDiag.

Gabriel.

[ggraindo]

Bonjour,

Le PC se comporte bien, je n'ai plus de pubs intempestives lors de mes recherches sur le net. Néanmoins à l'ouverture de Google Chrome, une page continue d’apparaître sans mon consentement (http://search.gboxapp.com/).

Sinon voici le lien pour le nouveau rapport : http://cjoint.com/?DEAowCq0UGS.

Merci.

GG

[2011N2]

Bonjour,

Refais juste ZHPFix avec ces lignes et poste le rapport STP :

Script ZHPFix
O58 - SDL:01/04/2014 - 14:33:02 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\wStLibG64.sys  [61120]

Ensuite réinitialise Chrome et dis-moi si cette page continue de s'ouvrir : http://www.forum-entraide-informatique. ... gle-chrome

Gabriel.

[ggraindo]

Bonsoir Gabriel,

Voici le rapport :
Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Ombeline at 27/05/2014 15:21:18
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 02s)

========== Fichiers ==========
SUPPRIMÉ Redémarrage: c:\windows\system32\drivers\wstlibg64.sys


========== Récapitulatif ==========
1 : Fichiers


End of clean in 00mn 02s

========== Chemin de fichier rapport ==========
C:\Users\Ombeline\AppData\Roaming\ZHP\ZHPFix[R1].txt - 27/05/2014 13:21:10 [923]
C:\Users\Ombeline\AppData\Roaming\ZHP\ZHPFix[R2].txt - 27/05/2014 15:21:20 [589]

Par ailleurs, je viens de réinitialiser Chrome et je n'ai plus la page en question.

Merci.

GG

[2011N2]

Bonsoir,

Nickel.

Tu peux faire la finalisation : http://www.forum-entraide-informatique. ... nalisation
Tiens-moi au courant de ton avancée au fur et à mesure.

Gabriel.

[ggraindo]

Bonjour Gabriel,

Je viens de faire toute la procédure.

Voici les liens pour les 2 rapports : http://cjoint.com/?DEClBSlo9Iz
http://cjoint.com/?DEClCmTFStu

Merci beaucoup.

GG

[2011N2]

Bonjour,

Bien.

Mets Adobe Reader à jour : https://www.sosvirus.net/telecharger/adobe-flash-player/
Pense de décocher l'installation facultative avant de lancer le téléchargement.

Gabriel.