nb il ne va pas s'ennuyer vu qu'il n'est pas seul


Ferme toutes les fen�tres actives sur ton PC

Relance OTL > Clic droit dessus > "Ex�cuter en tant qu'Administrateur".

[g]v�rifie que la case "Rapport minimal" soit bien coch�e.[/g]


S�lectionnes les lignes suivantes de :otl jusqu'a emptytemp

*********************

:otl

IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} => Toolbar.AVGSearch
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={1ACC8615-05FD-4A38-9636-B1FD3A8FE069}&mid=f298dc6ff5ad47d0bff45188281673fc-353460921f343419f9e8d698 => Toolbar.AVGSearch
O4 - HKLM\..\Run: [HF_G_Jul] "C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe" /DoAction File not found => AVG%Secure Search Toolbar
PRC - C:\Program Files (x86)\tuto4pc_fr_63\tuto4pc_fr_63.exe ()
PRC - C:\Users\ziko\AppData\Local\tuto4pc_fr_63\upt4pc_fr_63.exe ()
PRC - C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe (Iminent)
MOD - C:\Program Files (x86)\tuto4pc_fr_63\tuto4pc_fr_63.exe ()
MOD - C:\Users\ziko\AppData\Local\tuto4pc_fr_63\upt4pc_fr_63.exe ()
SRV - (Software_update_m) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (The Software Group)
SRV - (Software_update) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (The Software Group)
SRV - (Update BrowseFox) -- C:\Program Files (x86)\BrowseFox\updateBrowseFox.exe (BrowseFox)
SRV - (SProtection) -- C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe (Iminent)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=hp&from=adks&uid=ST1000DM003-9YN162_S1D18N8C&ts=1379794575
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=hp&from=adks&uid=ST1000DM003-9YN162_S1D18N8C&ts=1379794575
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=ds&from=adks&uid=ST1000DM003-9YN162_S1D18N8C&ts=1379794575&type=default&q={searchTerms}
IE - HKLM\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://start.iminent.com/?appId=00000000-0000-0000-0000-000000000000&ref=toolbox&q={searchTerms}
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=hp&from=adks&uid=ST1000DM003-9YN162_S1D18N8C&ts=1379794575
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.iminent.com/?appId=5D19C2C7-D61F-4EA6-BB38-CED0C6110534/
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=ds&from=adks&uid=ST1000DM003-9YN162_S1D18N8C&ts=1
IE - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://start.iminent.com/?appId=00000000-0000-0000-0000-000000000000&ref=toolbox&q={searchTerms}
CHR - homepage: http://start.iminent.com/?appId=5D19C2C7-D61F-4EA6-BB38-CED0C6110534
CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage: http://start.iminent.com/?appId=5D19C2C7-D61F-4EA6-BB38-CED0C6110534
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon\1.0.0\
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.5.2\
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\7.36.1.1_0\
CHR - Extension: No name found = C:\Users\ziko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O2 - BHO: (BrowseFox) - {b9507101-e464-4b3b-a4cb-291aaedd94f2} - C:\Program Files (x86)\BrowseFox\BrowseFoxBHO.dll (Browse Fox)
O3 - HKU\S-1-5-21-3242741995-2810977786-4293671469-1001\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM\..\Run: [] File not found
O4 - HKLM\..\Run: [tuto4pc_fr_63] C:\Program Files (x86)\tuto4pc_fr_63\tuto4pc_fr_63.exe ()
O4 - HKLM\..\RunOnce: [upt4pc_fr_63.exe] C:\Users\ziko\AppData\Local\tuto4pc_fr_63\upt4pc_fr_63.exe ()
[2013/09/21 23:29:49 | 000,000,000 | ---D | C] -- C:\Users\ziko\AppData\Local\eorezo
[2013/09/21 23:26:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Umbrella
[2013/09/21 23:26:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BrowseFox
[2013/09/21 23:26:45 | 000,000,000 | ---D | C] -- C:\Users\ziko\AppData\Local\Software
[2013/09/21 23:26:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Software
[2013/09/21 10:50:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SoftwareUpdater
[2013/09/21 10:50:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2013/09/21 10:50:30 | 000,000,000 | ---D | C] -- C:\Users\ziko\AppData\Local\tuto4pc_fr_63
[2013/09/21 10:50:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\tuto4pc_fr_63
[2013/09/21 10:50:30 | 000,000,000 | ---D | C] -- C:\ProgramData\DSearchLink
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

[2013/09/22 10:31:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\SoftwareUpdateTaskMachineUA.job
[2013/09/21 22:32:07 | 000,000,000 | ---- | M] () -- C:\end
[2013/09/21 23:26:47 | 000,000,914 | ---- | C] () -- C:\Windows\tasks\SoftwareUpdateTaskMachineUA.job
[2013/09/21 23:26:46 | 000,000,910 | ---- | C] () -- C:\Windows\tasks\SoftwareUpdateTaskMachineCore.job
[2013/09/21 23:26:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BrowseFox
[2013/09/21 23:26:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Software
[2013/09/22 00:24:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SoftwareUpdater
[2013/09/21 10:50:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\tuto4pc_fr_63

:files

C:\Program Files (x86)\tuto4pc_fr_63\tuto4pc_fr_63.exe
C:\Users\ziko\AppData\Local\tuto4pc_fr_63\upt4pc_fr_63.exe
C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe
C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
C:\Program Files (x86)\BrowseFox\updateBrowseFox.exe
C:\Users\ziko\AppData\Local\eorezo
C:\Program Files (x86)\Common Files\Umbrella
C:\Program Files (x86)\BrowseFox
C:\Users\ziko\AppData\Local\Software
C:\Program Files (x86)\Software
C:\Program Files (x86)\SoftwareUpdater
C:\Windows\SysWow64\searchplugins
C:\Users\ziko\AppData\Local\tuto4pc_fr_63
C:\Program Files (x86)\tuto4pc_fr_63
C:\ProgramData\DSearchLink
C:\Windows\tasks\SoftwareUpdateTaskMachineUA.job
C:\Windows\tasks\SoftwareUpdateTaskMachineCore.job
C:\end




:Commands
[EmptyTemp]

*****************************



Clique sur le bouton [color=red]"Correction". [/color]

Ne touche plus au PC avant son red�marrage en mode normal.

A l'ouverture du PC un rapport va s'ouvrir --> 04212011_xxxxxx.log ... Si ce n'est le cas tu le retrouveras sous le m�me nom sur le Bureau ou alors dans son dossier --> C:\_OTL
h�berge moi sur www.cjoint.com en r�ponse le contenu de ce rapport


@++ http://cjoint.com/?CIpse7YbtDD