je pense etre infecté virus

[fafa80]

bonjour
j 'ai actuellement mon ordi qui déconne sérieusement , les programmes sont long a arrivés , la connexion internet j 'ai du installé une clé wifi puisque apparemment suis connecté mais pas de page internet , la c'est ma clé wifi qui me permet d'etre sur le net , selon orange cela serait mon ordi qui bug , ,j ai voulut voir par adwcleaner malheureusement cela bug ayant frst je me permet d'envoyer le rapport si cela peux vous aidais , je garantie pas que j'arriverais aa me reconnecté car cela fais souvent impossible connexion
merci de votre aide
https://pjjoint.malekal.com/files.php?i ... 8n7e15c5i7
https://pjjoint.malekal.com/files.php?i ... u6i13n7h12
https://pjjoint.malekal.com/files.php?i ... c8d6r8q8y5
je vais re essayé malwarbytes c ton jamais que cela debug

[fafa80]

Code : Tout sélectionner

# AdwCleaner 7.0.8.0 - Logfile created on Fri Mar 02 12:46:24 2018
# Updated on 2018/08/02 by Malwarebytes 
# Database: 02-27-2018.1
# Running on Windows 7 Home Premium (X86)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare V8
PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced SystemCare V8
PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare V8
PUP.Optional.AdvancedSystemCare, C:\Users\fabrice\AppData\LocalLow\IObit\Advanced SystemCare V8
PUP.Optional.AdvancedSystemCare, C:\Users\fabrice\AppData\Roaming\IObit\Advanced SystemCare V8


***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.DriverDoc, [Key] - HKU\S-1-5-21-108997955-2209280662-3901345820-1000\Software\MimarSinan
PUP.Optional.DriverDoc, [Key] - HKCU\Software\MimarSinan


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C1].txt - [1240 B] - [2016/4/21 2:12:13]
C:/AdwCleaner/AdwCleaner[C2].txt - [1886 B] - [2016/5/25 14:46:37]
C:/AdwCleaner/AdwCleaner[C3].txt - [1728 B] - [2016/9/25 16:36:14]
C:/AdwCleaner/AdwCleaner[C4].txt - [2061 B] - [2016/11/1 19:3:6]
C:/AdwCleaner/AdwCleaner[C5].txt - [2316 B] - [2017/1/31 13:26:44]
C:/AdwCleaner/AdwCleaner[C6].txt - [2359 B] - [2017/5/10 10:36:48]
C:/AdwCleaner/AdwCleaner[S10].txt - [2422 B] - [2017/1/31 13:23:48]
C:/AdwCleaner/AdwCleaner[S11].txt - [2415 B] - [2017/2/19 16:49:32]
C:/AdwCleaner/AdwCleaner[S12].txt - [2887 B] - [2017/5/10 10:36:8]
C:/AdwCleaner/AdwCleaner[S13].txt - [2787 B] - [2017/7/15 22:0:54]
C:/AdwCleaner/AdwCleaner[S1].txt - [1041 B] - [2016/4/21 2:10:40]
C:/AdwCleaner/AdwCleaner[S2].txt - [1744 B] - [2016/5/25 14:44:52]
C:/AdwCleaner/AdwCleaner[S3].txt - [1270 B] - [2016/6/14 23:55:12]
C:/AdwCleaner/AdwCleaner[S4].txt - [1347 B] - [2016/6/25 13:16:46]
C:/AdwCleaner/AdwCleaner[S5].txt - [1418 B] - [2016/7/10 12:54:6]
C:/AdwCleaner/AdwCleaner[S6].txt - [1761 B] - [2016/9/25 16:34:43]
C:/AdwCleaner/AdwCleaner[S7].txt - [1873 B] - [2016/10/9 11:33:6]
C:/AdwCleaner/AdwCleaner[S8].txt - [2087 B] - [2016/10/9 11:34:30]
C:/AdwCleaner/AdwCleaner[S9].txt - [2171 B] - [2016/11/1 18:54:23]


########## EOF - C:\AdwCleaner\AdwCleaner[S13].txt ##########

[fafa80]

dois je cliquer sur nettoyer ? en attente de votre réponse merci.

[angelique]

Bonjour/Bonsoir


Désinstalle via programmes et fonctionnalités(exécuter➯appwiz.cpl):

Glary Utilities PRO 5.25 (HKLM\...\Glary Utilities 5) (Version: 5.25.0.44 - Glarysoft Ltd)

Orange Inside (HKU\S-1-5-21-108997955-2209280662-3901345820-1000\...\Orange Inside) (Version: 2.3.0.2 - Orange)

Orange Update (HKLM\...\Orange Update) (Version: 3.3.0.3 - Orange)

--------------------

• Télécharge à coté de FRST.EXE , PAS AILLEURS !!!!! le fichier fixlist.txt en pièce jointe en bas du message.
  
  Relance FRST(clic droit exécuter en tant qu'administrateur) et clic sur le bouton corriger/fix
  Un redémarrage peut être nécessaire (pas obligatoire).
  Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message avec ton commentaire.

[fafa80]

bonsoir
voici le fichier texte suivant mais avant j 'ai un message de frst suivant
autolt : error allocating memory

R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [69632 2009-08-24] (France Telecom SA) [Fichier non signé]
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [X]
S2 MBAMScheduler; "C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe" [X]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
Task: {051F5D2D-FAC8-4A93-9CD3-8F37ACC96D0E} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {0F2F482D-CB2D-4581-A664-26FD896990B4} - System32\Tasks\{0B74EBE2-6A2C-4DE2-AAC8-89075267A58C} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\Desktop\FreeRapid-0.9u4\frd.exe -d C:\Users\fabrice\Desktop\FreeRapid-0.9u4
Task: {10E5315B-7943-4E0E-8C9F-B3434D361586} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {1A9727FA-37A0-4A5F-A158-45E4854D7C6E} - System32\Tasks\{3DC57BCE-5355-46FC-AE09-1C515FCD20CD} => C:\Windows\system32\pcalua.exe -a "C:\Users\fabrice\Downloads\aide malekal\HijackThis.exe" -d "C:\Users\fabrice\Downloads\aide malekal"
Task: {21A3213D-62E2-45CD-8F85-3226088A20FE} - System32\Tasks\Driver Booster SkipUAC (fabrice) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: {23615C7E-0481-418D-AAAB-F468B3193B2D} - System32\Tasks\{391A0329-23B9-4BFA-82AE-D2D77151C6CE} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\Downloads\Plug-in_messagerie_vocale_888(1).exe -d C:\Users\fabrice\Downloads
Task: {241CE0E0-4A5B-42F6-B818-59EBCFAA6ECF} - System32\Tasks\{284234CD-A4DF-41C6-ABFB-FB748FEDA288} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe -d E:\
Task: {3A5D2540-7C93-4E00-9A2B-C6222B7B4259} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Install => C:\Program Files (x86)\Orange Update\install.bat <==== ATTENTION
Task: {3D125984-E91B-41B2-8E6E-2B8283AE0120} - System32\Tasks\{BC31B7CD-5DBD-4066-9D7B-A63EAAE91F3A} => C:\Windows\system32\pcalua.exe -a E:\Install.exe -d E:\
Task: {46402C75-97C3-417B-B2DC-61F268236D2B} - System32\Tasks\{F141A063-317D-46F0-BD24-FF9CA55CBF6C} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\FileServe Toolbar\uninstall.exe" -c bho /S
Task: {6DB3CCD3-097B-4F78-95DA-151F76F236E6} - System32\Tasks\{F50ED365-1224-41E2-A44C-3A826D698ED7} => C:\Windows\system32\pcalua.exe -a E:\Install.Exe -d E:\
Task: {7457B6B9-82AC-41B9-B5AA-ACD22CB19059} - System32\Tasks\GlaryInitialize 5 => C:\Program Files\Glary Utilities 5\Initialize.exe [2015-05-11] (Glarysoft Ltd)
Task: {76924433-9AC1-4CA4-9823-8F774AB8AD25} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {7BECB088-E2A8-4129-AED9-0A0CEF4DA170} - System32\Tasks\EPSON XP-235 Series Update {03BA15D7-D49A-4B34-B41C-A0020D82FA38} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TTSPFE.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {8475110E-3B4E-4F29-A205-4E8B8C86805D} - System32\Tasks\{F4FD8C8F-955F-4F00-8133-97803D1C8915} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\Downloads\Plug-in_messagerie_vocale_888(2).exe -d C:\Users\fabrice\Downloads
Task: {8ABEF95E-8C5D-4D10-AF8D-A18EAA5679A8} - System32\Tasks\{5373F0BB-A8C0-4B3A-86C3-814C8EFE5871} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\Downloads\AdobeReader_10.1.13_en-US_SPS.exe -d C:\Users\fabrice\Downloads
Task: {8C207D4B-9447-4F4F-9DF6-3D11CE148037} - System32\Tasks\{FB8D81FC-D52C-43B4-B687-7D0BE8A41366} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\Downloads\VirtualDub-1.9.9\auxsetup.exe -d C:\Users\fabrice\Downloads\VirtualDub-1.9.9
Task: {A85BA547-540F-4F73-A91D-1B81B4803601} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {BFADEB7F-00F7-4A20-B81D-8DAB694AAC00} - System32\Tasks\{BEE64342-1896-4D20-8E4B-6E4117BAC707} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Orange\ToolbarFR\uninst.exe"
Task: {C5A13873-80E5-472C-A209-2B7101E5C2E8} - System32\Tasks\{5761977C-4109-4A5E-B594-4DC0E2E2B5C1} => C:\Windows\system32\pcalua.exe -a "C:\Users\fabrice\Documents\My Downloads\Shockwave_Installer_Slim.exe" -d "C:\Users\fabrice\Documents\My Downloads"
Task: {E032C478-3688-4597-87F6-1157F80141EF} - System32\Tasks\{CFB96169-26BB-4ED8-A0D7-DA8C22192802} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\AVS4YOU\Uninstall.exe" -d "C:\Program Files\AVS4YOU"
Task: {E267E00F-7BC4-489D-9669-040E512ED325} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(1): Net -> stop "Orange Update Core Service"
Task: {E267E00F-7BC4-489D-9669-040E512ED325} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(2): Net -> start "Orange Update Core Service"
Task: {E2B9C0A1-E351-4D71-AA8F-B973AD730C81} - System32\Tasks\{4F738646-DE70-4248-BA35-80609AD71D97} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe" -d "C:\Program Files\ZHPDiag\ZHPFix"
Task: {E6044AB3-FD39-4F06-AC0F-CC988559EF4F} - System32\Tasks\{E39513DD-069D-4981-94D8-D55EE9BC5B60} => C:\Windows\system32\pcalua.exe -a C:\Users\fabrice\AppData\Local\Temp\nsm2012.tmp\50d19690-97d8-405e-bebb-08625bc06f2f.exe <==== ATTENTION
Task: {FD482549-06E3-46F8-9E79-2707F19B84A2} - System32\Tasks\Microsoft\Windows\orangeinside => C:\Users\fabrice\AppData\Roaming\Orange\OrangeInside\OrangeInside.exe
Task: C:\Windows\Tasks\Tweaking.com - Windows Repair Tray Icon.job => C:\Program Files\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe C:\Program Files\Tweaking.com\Windows Repair (All in One)Tweaking.com - Windows Repair)Created By Tweaking.com
ContextMenuHandlers1: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => -> Pas de fichier
HKU\S-1-5-21-108997955-2209280662-3901345820-1000\...\Run: [GUDelayStartup] => C:\Program Files\Glary Utilities 5\StartupManager.exe [37152 2015-05-11] (Glarysoft Ltd)
Startup: C:\Users\fabrice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-Suivi-.vbs [2018-01-31] ()
BHO: Pas de nom -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> Pas de fichier
Toolbar: HKLM - Pas de nom - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Pas de fichier
Toolbar: HKU\S-1-5-21-108997955-2209280662-3901345820-1000 -> Pas de nom - {D3028143-6145-4318-99D3-3EDCE54A95A9} - Pas de fichier
2018-03-02 13:04 - 2018-03-02 13:04 - 000000000 _____ C:\Users\fabrice\AppData\Local\{38AE5AE5-19F6-42E6-9F4F-23DAB14F324B}
2018-03-02 13:04 - 2018-03-02 13:04 - 000000000 _____ C:\Users\fabrice\AppData\Local\{0337510B-5757-4DEA-B544-8EB03182D516}
2018-03-02 12:35 - 2018-03-02 12:35 - 000000000 _____ C:\Users\fabrice\AppData\Local\{67524C17-6C0D-47D6-B645-FD6D5144A4EE}
2018-03-02 03:32 - 2018-03-02 03:32 - 000000000 _____ C:\Users\fabrice\AppData\Local\{67D83B33-622C-4332-987D-84F3E99162DE}
2018-03-02 03:30 - 2018-03-02 03:30 - 000000000 _____ C:\Users\fabrice\AppData\Local\{E5750033-D95D-4749-9224-2FB1EE07B3CD}
2018-02-28 14:44 - 2018-02-28 14:44 - 000000000 _____ C:\Users\fabrice\AppData\Local\{7552F096-D70F-4A9E-B193-5DCB4E4AAC41}
2018-02-28 10:51 - 2018-02-28 10:51 - 000000000 _____ C:\Users\fabrice\AppData\Local\{475FB0EB-80A8-4DCC-BE57-549E51EC7C4A}
2018-02-28 10:46 - 2018-02-28 10:46 - 000000000 _____ C:\Users\fabrice\AppData\Local\{663CF31E-2BEF-4FFE-ABEC-15A05DD4595C}
2018-02-28 09:07 - 2018-02-28 09:07 - 000000000 _____ C:\Users\fabrice\AppData\Local\{0D6B10C4-53B6-47EE-B1CD-672E1BFCA356}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ C:\Users\fabrice\AppData\Local\{F3A900E5-166D-422D-B652-9D53B037B73E}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ C:\Users\fabrice\AppData\Local\{5CABED1C-B74A-43DA-83B1-5086FBC28BB7}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ C:\Users\fabrice\AppData\Local\{5BA9A155-B67C-4685-BBC4-1B575D7260D9}
2018-02-27 13:25 - 2018-02-27 13:25 - 000000000 _____ C:\Users\fabrice\AppData\Local\{4356D62D-8462-430B-BB09-02FC83E5415C}
2018-02-27 13:18 - 2018-02-27 13:18 - 000000000 _____ C:\Users\fabrice\AppData\Local\{A2616882-AD25-40BF-A97B-5371A754F0DB}
2018-03-02 13:04 - 2018-03-02 13:04 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{0337510B-5757-4DEA-B544-8EB03182D516}
2018-02-28 09:07 - 2018-02-28 09:07 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{0D6B10C4-53B6-47EE-B1CD-672E1BFCA356}
2016-07-18 11:04 - 2016-07-18 11:04 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{151F2440-D767-422F-BE67-C2B67E2C72F2}
2017-02-20 18:57 - 2017-02-20 18:57 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{1E6A7A12-548E-4249-B3E9-7FDE29FEB0CA}
2017-02-18 11:41 - 2017-02-18 11:41 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{36BE6AF4-CEA6-442C-BB8A-CEFEDD74C538}
2018-03-02 13:04 - 2018-03-02 13:04 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{38AE5AE5-19F6-42E6-9F4F-23DAB14F324B}
2018-02-27 13:25 - 2018-02-27 13:25 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{4356D62D-8462-430B-BB09-02FC83E5415C}
2018-02-28 10:51 - 2018-02-28 10:51 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{475FB0EB-80A8-4DCC-BE57-549E51EC7C4A}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{5BA9A155-B67C-4685-BBC4-1B575D7260D9}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{5CABED1C-B74A-43DA-83B1-5086FBC28BB7}
2018-02-28 10:46 - 2018-02-28 10:46 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{663CF31E-2BEF-4FFE-ABEC-15A05DD4595C}
2018-03-02 12:35 - 2018-03-02 12:35 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{67524C17-6C0D-47D6-B645-FD6D5144A4EE}
2018-03-02 03:32 - 2018-03-02 03:32 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{67D83B33-622C-4332-987D-84F3E99162DE}
2018-02-28 14:44 - 2018-02-28 14:44 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{7552F096-D70F-4A9E-B193-5DCB4E4AAC41}
2018-02-27 13:18 - 2018-02-27 13:18 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{A2616882-AD25-40BF-A97B-5371A754F0DB}
2018-03-02 03:30 - 2018-03-02 03:30 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{E5750033-D95D-4749-9224-2FB1EE07B3CD}
2018-02-28 09:02 - 2018-02-28 09:02 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{F3A900E5-166D-422D-B652-9D53B037B73E}
2016-08-06 18:21 - 2016-08-06 18:21 - 000000000 _____ () C:\Users\fabrice\AppData\Local\{F85F0D48-EDD9-4160-B266-71DC13CB7563}
2018-02-04 14:39 - 2018-02-04 14:39 - 000000000 ____D C:\Rem-VBSqt
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpybotSD TeaTimer"
cmd: netsh winsock reset
EmptyTemp:

[angelique]

Le rapport de correction est incomplet.IL se trouve à coté de frst (fixlog)

[fafa80]

bonjour voici les rapports
fixlist et fixlog
fixlog:
https://pjjoint.malekal.com/files.php?i ... 15p10h9q12
fixlist:
https://pjjoint.malekal.com/files.php?i ... c11t11e711
merci de ton aide
j ai dut mis prendre a 2 fois pour te l'envoyé car a chaque fois il me dit temps connexion depassé

[angelique]

La correction a été réalisée, on a fait le tour

Supprime frst, ses rapports et C:\FRST

[fafa80]

ok merci de ton aide