Répondre à : Recycler (Virus USBiquement Transmissible) 2016-09-08T13:24:41+00:00
Photo du profil de Destrio5Destrio5
Participant
Post count: 211
  • Copie tout le texte présent en vert ci-dessous (Sélectionne-le, clique droit dessus et choisis “Copier”).

    Script ZHPFix
    SysRestore
    R1 – HKCUSOFTWAREMicrosoftInternet ExplorerMain,Search Page = http://www.searchs.at” onclick=”window.open(this.href);return false;
    R1 – HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.searchs.at” onclick=”window.open(this.href);return false;
    R1 – HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Search_URL = http://www.searchs.at/keyword/” onclick=”window.open(this.href);return false;
    R1 – HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Secondary_Page_URL = http://www.searchs.at” onclick=”window.open(this.href);return false;
    R1 – HKCUSOFTWAREMicrosoftInternet ExplorerMain,Search Bar = http://www.searchs.at” onclick=”window.open(this.href);return false;
    O87 – FAEL: “TCP Query User{5B9DE060-65D4-4EF7-BCB1-D933A258B5D2}C:usersthibaultappdatalocaltempc7c6fbcc787343bc9af9bf91ec8f24eerelicdownloader.exe” |In – Private – P6 – TRUE | .(…) — C:usersthibaultappdatalocaltempc7c6fbcc787343bc9af9bf91ec8f24eerelicdownloader.exe (.not file.)
    O87 – FAEL: “UDP Query User{17DED76C-822D-44E9-80C0-0E1B53A86564}C:usersthibaultappdatalocaltempc7c6fbcc787343bc9af9bf91ec8f24eerelicdownloader.exe” |In – Private – P17 – TRUE | .(…) — C:usersthibaultappdatalocaltempc7c6fbcc787343bc9af9bf91ec8f24eerelicdownloader.exe (.not file.)
    O87 – FAEL: “TCP Query User{7FD21FDB-0A4D-461A-A992-2491E114B13D}C:usersthibaultappdataroamingcacaowebcacaoweb.exe” |In – Private – P6 – TRUE | .(…) — C:usersthibaultappdataroamingcacaowebcacaoweb.exe (.not file.)
    O87 – FAEL: “UDP Query User{D33BABA7-7002-462B-97D8-41E404F2DE7E}C:usersthibaultappdataroamingcacaowebcacaoweb.exe” |In – Private – P17 – TRUE | .(…) — C:usersthibaultappdataroamingcacaowebcacaoweb.exe (.not file.)
    O87 – FAEL: “{CF191F31-9808-452B-9566-8DE8D31E2F06}” |In – Private – P6 – TRUE | .(…) — C:Program Files (x86)YourFileDownloaderDownloader.exe (.not file.)
    O87 – FAEL: “{BE9BAF20-CE73-4CF2-9888-403D50DD7E1A}” |In – Private – P17 – TRUE | .(…) — C:Program Files (x86)YourFileDownloaderDownloader.exe (.not file.)
    O87 – FAEL: “{E1CA07F9-E0E4-4CFB-BA2E-33AA617BB5D9}” |In – Private – P6 – TRUE | .(…) — C:Program Files (x86)YourFileDownloaderYourFile.exe (.not file.)
    O87 – FAEL: “{C6171E89-7B51-4354-9261-9FE76661286F}” |In – Private – P17 – TRUE | .(…) — C:Program Files (x86)YourFileDownloaderYourFile.exe (.not file.)
    O87 – FAEL: “TCP Query User{55E233A4-C890-4066-8321-6CE0544F1C22}C:usersthibaultappdataroamingcacaowebcacaoweb.exe” |In – Public – P6 – TRUE | .(…) — C:usersthibaultappdataroamingcacaowebcacaoweb.exe (.not file.)
    O87 – FAEL: “UDP Query User{2029B272-793D-4372-8846-051ABE4980BD}C:usersthibaultappdataroamingcacaowebcacaoweb.exe” |In – Public – P17 – TRUE | .(…) — C:usersthibaultappdataroamingcacaowebcacaoweb.exe (.not file.)
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUpgradeCodes1C875DDE39636004CA8CDAEC335B4160]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUpgradeCodesBA086F2D38A8E1A47912955A68B3AD24]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Products64A6E60055D801F4BB8AC269354B72B8]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Products9BB106980C8CD3949921DAF7159A813A]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components38D5CDD0A851B3940A43CC50ABBA251C]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBA71D41F6CC0B6247B05D473850A8AEA]
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCA0054A5AB3EFFE4CB5660E44A1E7DCC]
    C:UsersThibaultAppDataLocalSoftware
    C:WindowsInstaller204b49.msi
    C:UsersThibaultDownloadscacaoweb.exe
    F:RECYCLER
    EmptyFlash
    EmptyTemp

  • Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
  • Clique sur le bouton “IMPORTER”. Dans l’encadré principal, tu verras les lignes que tu as copié précédemment apparaître.
  • Clique sur “GO” pour lancer le nettoyage. Laisse l’outil travailler et ne touche à rien.
  • Une fois terminé, héberge le rapport ZHPFix.txt sur SosUpload et copie-colle le lien fourni dans ta prochaine réponse.