Adware.EoRezo et PUP.Optional a la tonne

Aide à la désinfection pour supprimer les virus, adwares, ransomwares, trojans.

Modérateurs : Mods Windows, Helper

<<<Chris>>>

Adware.EoRezo et PUP.Optional a la tonne

par <<<Chris>>> »

Bonjour,


Et en premier lieu pardon pour les éventuelles fautes de frappe et d accentuation... je suis sur l ordinateur espagnol d un ami roumain... avec un clavier en qwerty donc...

Il est pas mal vérole, j ai réussi a supprimer un bon paquet de PUP et d adwares, plus un trojan, mais il me reste un gros lot de cochonneries...

Il a Avast, a jour, et j ai un peu nettoye avec MBAM en mode admin. MBAM me bloque 3 PUP ou 4 par minutes.

Voici le dernier rapport :


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 30.09.2014
Scan Time: 14:23:50
Logfile: rapport MBM.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.09.30.04
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: eugen

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 353851
Time Elapsed: 19 min, 53 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, 2016, , [6369c92a82f95bdba3894b5df1107d83]
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, 2076, , [6369c92a82f95bdba3894b5df1107d83]

Modules: 6
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],

Registry Keys: 34
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SmdmFService, , [6369c92a82f95bdba3894b5df1107d83],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, , [7c50ca29710aee489a196569ec16857b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [7c50ca29710aee489a196569ec16857b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [7c50ca29710aee489a196569ec16857b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [7c50ca29710aee489a196569ec16857b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [7c50ca29710aee489a196569ec16857b],
PUP.Optional.Babylon.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [0ac2dc17c0bb9a9ca821e1b039c9f40c],
PUP.Optional.Linkey.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, , [57756f8496e59e9817160b8a6f935ba5],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{345422e3-72fa-447a-9550-97803edfacf3}Gw64, , [38944fa49be065d11c48061308fbdc24],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{345422e3-72fa-447a-9550-97803edfacf3}w64, , [15b7ef040e6df442aa8d98e19173fc04],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, , [39931ed59fdc42f48d87a76e06fd4fb1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, , [5973e70c94e7cd69a9af8b8822e11fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\VideoDownloadConverter_4z, , [9b313ab934476cca91cde58f996b7789],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, , [a02c33c081fab4823e73de5822e102fe],
Adware.EoRezo, HKLM\SOFTWARE\WOW6432NODE\FREE_SOFT_TO_DAY\fst_es_100, , [a22a37bcabd00234dbc38ba720e305fb],
PUP.Optional.FreeSoftToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\fst_es_100_is1, , [00cce70c5229e94da93e39e31ee5c13f],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [0dbfcc276912cf67c98e19fac1428779],
PUP.Optional.ReMarkit.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Re_markit, , [bd0f26cdb4c789ad8c915db034cf04fc],
PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday, , [359792618cef2f07cb99106b7292da26],
PUP.Optional.SettingsManager.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmdmF, , [6e5eed065d1ef83e001356bf59aaed13],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, , [804c7b789fdc1f17eecbe696e61e4eb2],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\VideoDownloadConverter_4z, , [5c70b83b483361d5fe61690bbf459b65],
PUP.Optional.ReMarkit.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Re_markit, , [feced81bfc7f6acc44d99e6ff70c23dd],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, , [76567f74493260d63df29494c53ef808],
PUP.Optional.Softonic.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [399337bccab1ab8b8ac3ce64e023fe02],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AA760BA8-5862-4BC5-9263-4452CBC0B264}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AA760BA8-5862-4BC5-9263-4452CBC0B264}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Settings Manager, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\F06DEFF2-5B9C-490D-910F-35D3A9119622, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.Pedka.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\pgcchelper, , [9e2e2bc8f18af73f9094d42df11258a8],

Registry Values: 5
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tugs, , [0dbfcc276912cf67c98e19fac1428779]
PUP.Optional.SettingsManager, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x86, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [f0dc09ea7efd12243b61fa1efe05c040]
PUP.Optional.SettingsManager, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x64, C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll, , [3a925a99205ba78f801c53c5e91af30d]
PUP.Optional.Pedka.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|pgcchelper, C:\Users\eugen\AppData\Local\pgcchelper\pgcchelper.exe, , [c20a07ec423958de1d9aa0dcf4100af6]
PUP.Optional.ReMarkIT.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{5ae66703-77f8-4623-8c81-9ba769053c03}, C:\Program Files (x86)\Re-markit Corp\158.xpi, , [20aca350ccafb284400f142048bb966a]

Registry Data: 4
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://istart.webssearches.com/web/?typ ... earchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... earchTerms}),,[dcf03db60c6f211514267197fe07659b]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... X72D5YM96F, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... X72D5YM96F),,[ae1ee40f7b009e98a2961eeaf80d37c9]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... X72D5YM96F, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... X72D5YM96F),,[4d7ff201b6c5c37382ba9b6db84daa56]
PUP.Optional.DefaultSearch.A, HKU\S-1-5-21-1484255288-2366949096-1527470474-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.default-search.net?sid=476&a ... 83&src=hmp, Good: (www.google.com), Bad: (http://www.default-search.net?sid=476&a ... 83&src=hmp),,[507ce112f48779bd2aabe81f19ec5da3]

Folders: 19
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus, , [5775f4fffa81072f22c69b9a4bb8ab55],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.TornTV.A, C:\Program Files (x86)\TornTV.com, , [dbf110e3d3a876c0e7a607de3cc69b65],
PUP.Optional.Feven.A, C:\Program Files (x86)\Freeven pro, , [eae29360c3b8b581378d0bda9b67d828],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\Download, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\fst_es_100, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\fst_es_100\1.10, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Program Files (x86)\fst_es_100, , [4b81cf2491ea68ceda031add7e845fa1],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SupTab.A, C:\Users\eugen\AppData\Roaming\SupTab, , [6864faf9b5c690a6bc221ce01be7cd33],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf, , [25a7e80b4833b680089d48b859aa25db],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.Pedka.A, C:\Users\eugen\AppData\Local\pgcchelper, , [9e2e2bc8f18af73f9094d42df11258a8],
PUP.Optional.TornTV.A, C:\Users\eugen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com, , [418b19da0279f640368314f7aa59738d],

Files: 93
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe, , [6369c92a82f95bdba3894b5df1107d83],
PUP.Optional.SoftPulse, C:\Users\eugen\Downloads\Setup(1).exe, , [28a4a152d6a58fa7f8c533232fd142be],
PUP.Optional.Outbrowse, C:\Users\eugen\Downloads\setup.exe, , [d0fcd91ad7a454e2dd68751b000149b7],
PUP.Optional.Softonic, C:\Users\eugen\Downloads\SoftonicDownloader_para_easy-drive-data-recovery.exe, , [26a6a84b49322b0b163f1a9f8c750000],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{345422e3-72fa-447a-9550-97803edfacf3}Gw64.sys, , [38944fa49be065d11c48061308fbdc24],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\background.html, , [5775f4fffa81072f22c69b9a4bb8ab55],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\54246.crx, , [5775f4fffa81072f22c69b9a4bb8ab55],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\54246.xpi, , [5775f4fffa81072f22c69b9a4bb8ab55],
PUP.Optional.DefaultSearch.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\searchplugins\default-search.xml, , [8a42e112cbb038fed02648ed0ff47b85],
PUP.Optional.DefaultSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, , [ddef46ade9924ee8f8ff5dd8d82b36ca],
PUP.Optional.WebsSearches.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml, , [775514dfd0ab45f1e1d2f145ea196a96],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{345422e3-72fa-447a-9550-97803edfacf3}w64.sys, , [15b7ef040e6df442aa8d98e19173fc04],
PUP.Optional.Dsrlte.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1gxk3bua.default-1410568248583\searchplugins\dsrlte.xml, , [4686dd166d0ea2949e5e2a54bc482fd1],
PUP.Optional.Dsrlte.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\searchplugins\dsrlte.xml, , [4686985b06753ff79d5f027c46bede22],
PUP.Optional.Dsrlte.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\cc38hnv6.default-1410568296996\searchplugins\dsrlte.xml, , [d3f9fff492e91f17c03cd7a725dfb64a],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\158.crx, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\158.dat, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\a.db, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\b.db, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\Re-markit158.bin, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\Re-markit158.ini, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.ReMarkIt.A, C:\Program Files (x86)\Re-markit Corp\Sqlite3.dll, , [67658073ff7c1026684c28bc1be76898],
PUP.Optional.Feven.A, C:\Program Files (x86)\Freeven pro\54248.crx, , [eae29360c3b8b581378d0bda9b67d828],
PUP.Optional.Feven.A, C:\Program Files (x86)\Freeven pro\54248.xpi, , [eae29360c3b8b581378d0bda9b67d828],
PUP.Optional.Feven.A, C:\Program Files (x86)\Freeven pro\background.html, , [eae29360c3b8b581378d0bda9b67d828],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\upfst_es_100.cyp, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\user_profil.cyp, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\fst_es_100\1.10\cnf.cyl, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Users\eugen\AppData\Local\fst_es_100\fst_es_100\1.10\eorezo.cyl, , [884401f22457ac8ac21a1addbc4648b8],
PUP.Optional.FreeSoftToday.A, C:\Program Files (x86)\fst_es_100\unins000.dat, , [4b81cf2491ea68ceda031add7e845fa1],
PUP.Optional.FreeSoftToday.A, C:\Program Files (x86)\fst_es_100\unins000.exe, , [4b81cf2491ea68ceda031add7e845fa1],
PUP.Optional.FreeSoftToday.A, C:\Program Files (x86)\fst_es_100\unins000.msg, , [4b81cf2491ea68ceda031add7e845fa1],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll, , [e7e59f54b5c604328f6945b5ef1309f7],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\coordinator.cfg, , [25a7e80b4833b680089d48b859aa25db],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\general.cfg, , [25a7e80b4833b680089d48b859aa25db],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\S-1-5-21-1484255288-2366949096-1527470474-1001.cfg, , [25a7e80b4833b680089d48b859aa25db],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\chrome.manifest, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\install.rdf, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF.xpt, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\DnsBHO.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\Error404BHO.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\MainBHO.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NativeHelper.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NewTabBHO.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.xul, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RelatedSearch.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RequestPreserver.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SearchBHO.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.SettingsManager.A, C:\Users\eugen\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SettingManager.js, , [606c1bd8097264d2f0b6b34d5ca7916f],
PUP.Optional.Pedka.A, C:\Users\eugen\AppData\Local\pgcchelper\pgcchelper_uninstaller.exe, , [9e2e2bc8f18af73f9094d42df11258a8],
PUP.Optional.Dsrlte.A, C:\Users\eugen\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( }
,"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"startup_urls":["http://rts.dsrlte.com"],"startup_urls_migration_time":"13052504282548810","urls_to_restore_on_startup":["http://rts.dsrlte.com"]},"default_search_provider":{},"homepage":"http://rts.dsrlte.com","homepage_is_newtabpage":false}), ,[06c6668d2f4c6ec872d7df668a7b42be]
PUP.Optional.DefaultSearch.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.default-search.net?sid=476&a ... 83&src=hmp");), ,[04c86b88b1ca67cfa55804418184cd33]
PUP.Optional.CrossRider.A, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "1451c4c8cb7002060181e675876cf065");), ,[2f9da053fb80d06605fe5ee80302b44c]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.admin", false);), ,[3b914ea5f98236007b8d99ae8382e11f]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.aflt", "babsst");), ,[28a48a6968130234f51375d25ca9936d]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");), ,[d7f53fb4671475c147c1361133d2b54b]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.autoRvrt", "false");), ,[4c8021d25a21999dea1e0d3abf46c13f]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.dfltLng", "en");), ,[12bad81bd5a6e6502ade4007cd3827d9]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.excTlbr", false);), ,[a824db182754d3633bcd71d6fb0aa060]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.ffxUnstlRst", true);), ,[a62631c256250b2bb850b39455b0a25e]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.id", "904a1c8600000000000020689d3b34b8");), ,[be0e19da0e6db0863fc9a5a22cd941bf]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.instlDay", "16163");), ,[18b4747fbac1fa3c3dcbc186ed18e61a]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.instlRef", "sst");), ,[f9d329ca97e46bcbe721ab9c58ad1be5]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.newTab", false);), ,[3795b43f86f53402d137a2a5c144e719]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.prdct", "buenosearch");), ,[8e3ec231512ab97d62a60e39de2744bc]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.prtnrId", "buenosearch");), ,[8349e013443778bec1479fa8a4611ce4]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.rvrt", "false");), ,[765642b1afcc181e55b382c58580de22]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.smplGrp", "none");), ,[20ac658e5625152112f64cfb0afb19e7]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTe ... 1&tsp=5206");), ,[bb11f5fe2e4d300649bfad9a46bfbf41]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.tlbrId", "base");), ,[a923945f3348e353848496b18d7853ad]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTe ... 1&tsp=5206");), ,[9636eb087efd9f974dbb1b2cac5911ef]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.vrsn", "1.8.28.7");), ,[8b4172814437251157b1f453ed186f91]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.vrsnTs", "1.8.28.71:31:50");), ,[6c60ca299dde38fe27e171d6768fcd33]
PUP.Optional.BuenoSearch, C:\Users\eugen\AppData\Roaming\Mozilla\Firefox\Profiles\1szkogqk.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.vrsni", "1.8.28.7");), ,[e5e77e75e59683b3fc0cad9a749132ce]

Physical Sectors: 0
(No malicious items detected)


(end)


Si vous pouviez m aider un peu, ça m arrangerait... Merci d avance¡
Haut
<<<Chris>>>

Re: Adware.EoRezo et PUP.Optional a la tonne

par <<<Chris>>> »

Je viens de voir de le post it avec adw cleaner... dsl

je le telecharge et reviens vers vous.


Merci.
Haut
<<<Chris>>>

Re: Adware.EoRezo et PUP.Optional a la tonne

par <<<Chris>>> »

Tout a l air d être rentre dans l ordre... désolé encore de vous avoir embêté pour si peu, et un grand merci pour votre forum qui est une source de réconfort pour énormément de monde. Moi le premier!
Haut
<<<Chris>>>

Re: Adware.EoRezo et PUP.Optional a la tonne

par <<<Chris>>> »

Bon en fait, j ai parle trop vite... il reste quelques PUP, mais deja son ordi fonctionne nettement mieux :

http://pjjoint.malekal.com/files.php?id ... 5l6w8t10t7
Haut
Malekal_morte
Messages : 113189
Inscription : 10 sept. 2005 13:57

Re: Adware.EoRezo et PUP.Optional a la tonne

par Malekal_morte »

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
* Internet Explorer et modules complémentaires / moteurs de recherche : http://forum.malekal.com/
* Firefox : http://forum.malekal.com/firefox-extens ... 36057.html
* Google Chrome : http://forum.malekal.com/google-chrome- ... 35837.html


puis :


Faire un Scan OTL - Temps : Environ 40min
=====================
OTL permet de diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/2010/11/12/tutorial-otl/

* Télécharge http://oldtimer.geekstogo.com/OTL.exe sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)


* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :



netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.dll /s
%APPDATA%\*.
%PROGRAMFILES%\*.
%PROGRAMDATA%\*.
%APPDATA%\*.exe /s
%temp%\*.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\consrv.dll
%systemroot%\system32\*.dll /lockedfiles
%windir%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
services.exe
wininit.exe
/md5stop
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
CREATERESTOREPOINT
nslookup www.google.fr /c
ping www.google.fr /c
ipconfig /all /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs



* Clique sur le bouton Analyse.

**** Si durant le scan - OTL ne répond pas, ne touche à rien et laisse le scan se poursuivre ****

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

<gras>NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE</gras>
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
➔ Comment protéger son PC des virus
➔ Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
Haut
<<<Chris>>>

Re: Adware.EoRezo et PUP.Optional a la tonne

par <<<Chris>>> »

Merci de ta réponse et désole pour le délai, je n ai pas un accès aise a sa machine...

http://pjjoint.malekal.com/files.php?re ... r11p5l5m13
Haut
Malekal_morte
Messages : 113189
Inscription : 10 sept. 2005 13:57

Re: Adware.EoRezo et PUP.Optional a la tonne

par Malekal_morte »

Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:


:OTL
[2014.09.30 11:58:39 | 000,000,000 | ---D | C] -- C:\Users\eugen\AppData\Local\ToolwizCareFree
[2014.09.30 11:58:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ToolwizCareFree
[2014.03.31 21:54:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Freeven pro
[2014.01.05 18:41:39 | 000,000,000 | ---D | M] (Speed Test 131) -- C:\Users\eugen\AppData\Roaming\mozilla\Extensions\[email protected]


* poste le rapport ici


Redémarre l'ordinateur


Tu as bien réinitialise Firefox ? => http://forum.malekal.com/firefox-extens ... 36057.html
ou c'est qu'il n'est plus installé ?
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
➔ Comment protéger son PC des virus
➔ Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
Haut

Revenir à « Supprimer/Desinfecter les virus (Trojan, Adwares, Ransomwares, Backdoor, Spywares) »