Besoin de votre aide :
Sous Mozilla Firefox j'ai une redirection vers "Yahoo! Search" lors de mes recherches.
J'ai fait :
1/ adwcleaner
2/ malwarebytes => mises à jour => analyse et le rapport qui est plus bas.
L'intégralité des objets infectés ont été mis en quarantaine et supprimé.
Mais au redémarrage l'infection est toujours présente ... :/
J'ai refais la même manip, adwcleaner et malwarebytes ne trouvent plus rien.
Je sais plus quoi faire pour le coup, vous avez des idées ?
Merci d'avance.
Elodie
Code : Tout sélectionner
Malwarebytes Anti-Malware
http://www.malwarebytes.org
Date de l'analyse: 29/05/2016
Heure de l'analyse: 11:55
Fichier journal: rapport.txt
Administrateur: Oui
Version: 2.2.1.1043
Base de données de programmes malveillants: v2016.05.29.03
Base de données de rootkits: v2016.05.27.01
Licence: Essai
Protection contre les programmes malveillants: Activé
Protection contre les sites Web malveillants: Activé
Autoprotection: Désactivé
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Nif
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 341123
Temps écoulé: 26 min, 52 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 0
(Aucun élément malveillant détecté)
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 28
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, En quarantaine, [a60114c74752181e5a8e185f04fedb25],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0c3ddfb7-4cdb-495b-b3e9-d59725b43dfc}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\TYPELIB\{920d90da-df4c-4891-b1e4-6ebc87cb924d}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\INTERFACE\{9D94A729-4EFA-4D30-B6C6-7B7BEFAF6985}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9D94A729-4EFA-4D30-B6C6-7B7BEFAF6985}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9D94A729-4EFA-4D30-B6C6-7B7BEFAF6985}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{920d90da-df4c-4891-b1e4-6ebc87cb924d}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{920d90da-df4c-4891-b1e4-6ebc87cb924d}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0C3DDFB7-4CDB-495B-B3E9-D59725B43DFC}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0C3DDFB7-4CDB-495B-B3E9-D59725B43DFC}, En quarantaine, [bee966756336a1952d32f3662ad8a957],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, En quarantaine, [8720c516e7b2ad899421b1cd35cdc63a],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}, En quarantaine, [693ea3389afffc3a5463f38bf40ed030],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, En quarantaine, [9a0ddcff17821323efd0e19d847eee12],
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32LDR, En quarantaine, [980f9a41f0a9989e6a6e653ab84b2bd5],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, En quarantaine, [d3d403d8e3b624123685b31151b2e61a],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, En quarantaine, [911624b77821290d536940848d76c63a],
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3530FD0A-69F2-4154-9CDD-5F269EB9989E}, Supprimer au redémarrage, [4a5d3ba0debb45f1446203d440c37d83],
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CB1E6C54-4A34-41E1-8500-BD73EF82DF5D}, Supprimer au redémarrage, [4265ca110b8e73c3990d34a3a95a8977],
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ProPCCleaner_Popup, Supprimer au redémarrage, [6d3aefecafeaea4cc4b73a5dab58a15f],
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ProPCCleaner_Start, Supprimer au redémarrage, [872086555742f6402259f3a42cd757a9],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, En quarantaine, [2d7a7269a8f179bdfadc9b2470939868],
PUP.Optional.MediaPlayer, HKLM\SOFTWARE\WOW6432NODE\MedPlayNVr3.3, En quarantaine, [9d0ab625f0a94ee878bb95fb8380e818],
PUP.Optional.MediaPlayer, HKLM\SOFTWARE\WOW6432NODE\MedPlayNVr3.3-nv-ie, En quarantaine, [1c8b0dcebcdda393c86b315f35ce7789],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, En quarantaine, [3374db003d5c7cba9b945a3922e19967],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, En quarantaine, [4463914a06934bebcf07536c21e28e72],
PUP.Optional.MediaPlayer, HKU\S-1-5-21-208193403-4132667856-2677808158-1001\SOFTWARE\MedPlayNVr3.3, En quarantaine, [7a2d9a41c8d10d29cb4e672947bcb54b],
PUP.Optional.MediaPlayer, HKU\S-1-5-21-208193403-4132667856-2677808158-1001\SOFTWARE\MedPlayNVr3.3-nv-ie, En quarantaine, [f3b42fac7a1f2c0ab267a0f02dd63bc5],
PUP.Optional.ProPCCleaner, HKU\S-1-5-21-208193403-4132667856-2677808158-1001\SOFTWARE\ProPCCleanerLanguage, En quarantaine, [b0f78c4f0099d56190e6fc9b0ef5f709],
Valeurs du Registre: 20
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [a8fffcdf7326f442c710811e2ed50ff1]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [17906c6fddbc33038d4ae0bf2dd619e7]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [4f58b922316812249245f9a68a7918e8]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [aff85487b1e8d16507d06a35a85b41bf]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\msiexec.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [02a5fbe02a6f46f00dcaf0af91729a66]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SearchProtectionSetup.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [fea98259ddbc2214e7f0eeb147bc7c84]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SearchProtectionStub.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [7f28f1ea9603b6805780821dbb48966a]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SettingsManagerSetup.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [8d1a77649dfc4fe77f585c4331d241bf]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMg.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [5b4ccb10663347eff3e4425ddf2419e7]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMngr_iLivid.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [f7b02caff6a396a0e0f7009fc83b9c64]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMngr_iMesh.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [0f986477c5d45bdbf3e47f20d82bbb45]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\software_removal_tool.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [edbae5f615848aacddfacfd0649fa759]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\software_reporter_tool.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [6740b12ad8c1f73ffadd2b74e122a25e]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130701432229302712, En quarantaine, [980f9a41f0a9989e6a6e653ab84b2bd5]
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3530FD0A-69F2-4154-9CDD-5F269EB9989E}|Path, \ProPCCleaner_Start, Supprimer au redémarrage, [4a5d3ba0debb45f1446203d440c37d83]
PUP.Optional.ProPCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CB1E6C54-4A34-41E1-8500-BD73EF82DF5D}|Path, \ProPCCleaner_Popup, Supprimer au redémarrage, [4265ca110b8e73c3990d34a3a95a8977]
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, En quarantaine, [2d7a7269a8f179bdfadc9b2470939868]
PUP.Optional.GamesDesktop, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_fr_285, En quarantaine, [4f586e6d1a7f4bebde34a1e939cadd23],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, En quarantaine, [4463914a06934bebcf07536c21e28e72]
PUP.Optional.NotChromeRun, HKU\S-1-5-21-208193403-4132667856-2677808158-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_66D8A72FBE514122CCEA77858670DD1C, "C:\Users\Nif\AppData\Local\Chromium\Application\chrome.exe" --no-startup-window, En quarantaine, [5d4a2fac5d3cfd39a69b4252ad5617e9]
Données du Registre: 0
(Aucun élément malveillant détecté)
Dossiers: 6
PUP.Optional.ConvertAd.Gen, C:\Users\Nif\AppData\Roaming\124120AF-1425688915-8C4A-BA3F-F079594B6247, En quarantaine, [287f16c585143df98034dc99b251bf41],
PUP.Optional.CrossRider, C:\Program Files (x86)\MedPlayNVr3.3, En quarantaine, [8126d3082c6db97d797c04809e6532ce],
PUP.Optional.ProPCCleaner, C:\Users\Nif\AppData\Local\Pro_PC_Cleaner, En quarantaine, [891e528919800a2cf958ecb7b34f738d],
PUP.Optional.ProPCCleaner, C:\Users\Nif\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue, En quarantaine, [891e528919800a2cf958ecb7b34f738d],
PUP.Optional.ProPCCleaner, C:\Users\Nif\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue\2.5.5.0, En quarantaine, [891e528919800a2cf958ecb7b34f738d],
PUP.Optional.ProPCCleaner, C:\Users\Nif\Documents\ProPCCleaner, En quarantaine, [416634a7227741f5b39f0d96ab579070],
Fichiers: 11
PUP.Optional.PullUpdate, C:\ProgramData\Browser\prompt.exe, En quarantaine, [8522f0ebf2a71b1b8c5c92963ac76898],
PUP.Optional.ConvertAd.Gen, C:\Users\Nif\AppData\Roaming\124120AF-1425688915-8C4A-BA3F-F079594B6247\vnsz2AC0.tmp, En quarantaine, [287f16c585143df98034dc99b251bf41],
PUP.Optional.Browser, C:\ProgramData\Browser\prompt.exe.config, En quarantaine, [4c5b79628d0cda5caa404f30877cde22],
PUP.Optional.CrossRider, C:\Program Files (x86)\MedPlayNVr3.3\bgNova.html, En quarantaine, [8126d3082c6db97d797c04809e6532ce],
PUP.Optional.ProPCCleaner, C:\Windows\System32\Tasks\ProPCCleaner_Popup, En quarantaine, [782fb6250f8a6cca5e128e09bf443ec2],
PUP.Optional.ProPCCleaner, C:\Windows\System32\Tasks\ProPCCleaner_Start, En quarantaine, [8522815aaeebde581a5651461de639c7],
PUP.Optional.Yontoo, C:\Users\Nif\Favorites\Links\Internet .url, En quarantaine, [5f48edee554453e3fa610ccd0df6af51],
PUP.Optional.ProPCCleaner, C:\Users\Nif\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue\2.5.5.0\user.config, En quarantaine, [891e528919800a2cf958ecb7b34f738d],
PUP.Optional.ProPCCleaner, C:\Users\Nif\Documents\ProPCCleaner\log.txt, En quarantaine, [416634a7227741f5b39f0d96ab579070],
PUP.Optional.ProPCCleaner, C:\Users\Nif\Documents\ProPCCleaner\logerror.txt, En quarantaine, [416634a7227741f5b39f0d96ab579070],
PUM.Optional.FireFoxSearchOverride, C:\Users\Nif\AppData\Roaming\Mozilla\Firefox\Profiles\yfbqvayr.default\user.js, En quarantaine, [6c3b904bfe9bb680f9193d3c45bfc13f],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)