Avast WEBforum

Non-English Zone => Francais => Topic started by: REDACTED on January 28, 2015, 09:53:15 PM

Title: menace detecté avast
Post by: REDACTED on January 28, 2015, 09:53:15 PM
Bonsoir

Voici mon souci depuis ce soir je n arrete pas d avoir un message d avast toutes les 5/10min qui me dit qu une menace a été detecté et lorsque je lance un scan il ne trouve rien. Je ne sais pas quoi faire.
Voici le message d Avast:          L'agent web avast a bloqué un page web ou un fichier malveillant
                                                  Objet: http://xmlka.com/click?app=app
                                                  Infection: URL:Mal
                                                  Processus: C:\Windows\explorer.exe

Merci pour vos futures reponses
Title: Re: menace detecté avast
Post by: jefferson sant on January 29, 2015, 08:14:11 PM
Bonjour.

notifiée à suppression de logiciels malveillants, Attendez un moment, alors que l'information est transmise.
Title: Re: menace detecté avast
Post by: essexboy on January 29, 2015, 08:17:56 PM
Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
Title: Re: menace detecté avast
Post by: REDACTED on January 29, 2015, 09:22:35 PM
je viens de faire le log mais je n arrive pas a le mettre en piece jointe.
Title: Re: menace detecté avast
Post by: REDACTED on January 29, 2015, 09:25:28 PM
je viens de trouver voici mon log
Title: Re: menace detecté avast
Post by: essexboy on January 29, 2015, 10:07:22 PM
Could you attach the main FRST log please

Pourriez vous attachez le principal journal FRST s'il vous plaît
Title: Re: menace detecté avast
Post by: REDACTED on January 29, 2015, 10:52:03 PM
ce doit etre celui ci
Title: Re: menace detecté avast
Post by: essexboy on January 29, 2015, 10:56:15 PM
vous avez oublié d'attacher :)

you forgot to attach it :)
Title: Re: menace detecté avast
Post by: REDACTED on January 29, 2015, 10:57:18 PM
je vais y arriver lol
Title: Re: menace detecté avast
Post by: essexboy on January 30, 2015, 03:40:05 PM
Pourriez-vous me faire savoir si cela empêche les alertes

Could you let me know if this stops the alerts

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Code: [Select]
CreateRestorePoint:
AppInit_DLLs: P¼ => P¼ File Not Found
AppInit_DLLs-x32: 8"îí÷ => "8îí÷" File Not Found
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
2015-01-28 18:59 - 2015-01-29 18:28 - 00000000 ___HD () C:\ProgramData\{F66CB4EE-546F-4D54-9332-216DE189AAB0}
2015-01-28 18:59 - 2015-01-28 18:59 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
EmptyTemp:
CMD: bitsadmin /reset /allusers
 
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
Title: Re: menace detecté avast
Post by: REDACTED on January 30, 2015, 04:06:22 PM
voici le nouveau log
Title: Re: menace detecté avast
Post by: essexboy on January 30, 2015, 05:05:29 PM
Les alertes ont maintenant cessé ?

Have the alerts now ceased ?
Title: Re: menace detecté avast
Post by: REDACTED on January 30, 2015, 05:49:34 PM
oui je n ai rien eu aujourd hui.
merci pour le coup de main
 :)
Title: Re: menace detecté avast
Post by: essexboy on January 30, 2015, 07:34:50 PM
Subject to no further problems   :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Remove tools

Download and run Delfix (http://www.bleepingcomputer.com/download/delfix/)

(https://dl.dropboxusercontent.com/u/73555776/delfix.JPG)

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent (http://www.foolishit.com/vb6-projects/cryptoprevent/) install this programme to lock down and prevent crypto ransome ware

(https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG)

Malwarebytes (http://www.malwarebytes.org/mbam-download.php).

Update and run weekly to keep your system clean

Unchecky (http://unchecky.com/)

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme  ;)

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide  Best security practices  (http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/)Keep safe  :wave:
Title: Re: menace detecté avast
Post by: REDACTED on January 30, 2015, 08:02:25 PM
merci pour les conseils je viens de lancer delfix et d installer unchecky, pouvez vous me confirmer que cryptoprevent et malwarebytes sont payant?
Title: Re: menace detecté avast
Post by: jefferson sant on February 02, 2015, 10:36:10 PM
Quote from: yamakasi7 on January 30, 2015, 08:02:25 PM
merci pour les conseils je viens de lancer delfix et d installer unchecky, pouvez vous me confirmer que cryptoprevent et malwarebytes sont payant?

Quote from: essexboy on February 02, 2015, 10:33:00 PM
Cryptoprevent un MBAM les deux ont des versions gratuites, vous avez juste besoin de se rappeler de mettre à jour manuellement cryptoprevent environ une fois par mois.
Title: Re: menace detecté avast
Post by: REDACTED on February 09, 2015, 06:44:15 PM
Bonjour,

J'ai le même problème depuis plusieurs jours, des infections bloquées à répétition..J'ai fait plusieurs analyses avec avast et malwarebytes, mise à jour de windows, d'avast, consulté les forums et les menaces sont toujours présentes, je ne sais pas quoi faire...  :'(
Quelqu'un peut-il m'aider???????????
Je mets en pièces jointes 3 captures d'écran des infections bloquées...
MERCI! :D
Title: Re: menace detecté avast
Post by: jefferson sant on February 10, 2015, 12:21:50 AM
Quote from: carobodeau on February 09, 2015, 06:44:15 PM
Bonjour,

J'ai le même problème depuis plusieurs jours, des infections bloquées à répétition..J'ai fait plusieurs analyses avec avast et malwarebytes, mise à jour de windows, d'avast, consulté les forums et les menaces sont toujours présentes, je ne sais pas quoi faire...  :'(
Quelqu'un peut-il m'aider???????????
Je mets en pièces jointes 3 captures d'écran des infections bloquées...

Bonsoir.

Je aviserai d'experts qualifiés pour donner des instructions demain
votre problème sera envoyé à un assistant et formé pour ce travail.
Title: Re: menace detecté avast
Post by: essexboy on February 10, 2015, 04:42:25 PM
Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
Title: Re: menace detecté avast
Post by: REDACTED on February 10, 2015, 05:45:52 PM
Bonjour,

Je n'ai plus d'alertes depuis hier soir 21h... C'est peut être dû aux mises à jour..
J'attends quand même encore 2 jours pour être sûre, en attendant merci pour votre aide et si ça revient je vous contacte!

Merci beaucoup
Title: Re: menace detecté avast
Post by: jefferson sant on February 12, 2015, 01:19:49 AM
Quote from: carobodeau on February 10, 2015, 05:45:52 PM
Bonjour,
Je n'ai plus d'alertes depuis hier soir 21h... C'est peut être dû aux mises à jour..
J'attends quand même encore 2 jours pour être sûre, en attendant merci pour votre aide et si ça revient je vous contacte!

Remercier de commentaire
nous allons fermer pour l'instant,si le problème retourne au sujet.
Title: Re: menace detecté avast
Post by: REDACTED on February 16, 2015, 12:02:10 AM
Quote from: yamakasi7 on January 28, 2015, 09:53:15 PM
Bonsoir

Voici mon souci depuis ce soir je n arrete pas d avoir un message d avast a chaque ouverture de page web qui me dit qu une menace a été detecté et lorsque je lance un scan il ne trouve rien. Je ne sais pas quoi faire.
         j ai exactement le meme probleme

Merci pour vos futures reponses
Title: Re: menace detecté avast
Post by: REDACTED on February 16, 2015, 12:12:37 AM
 fichier addition txt
Title: Re: menace detecté avast
Post by: essexboy on February 16, 2015, 10:02:19 PM
Bonjour, la première chose que vous devez faire est de désinstaller Chrome, vous pouvez réinstaller une fois que nous avons terminé

Hello, the first thing you must do is uninstall Chrome, you can re-install once we have finished 

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3288123876-2543423256-3992127607-1002\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchy.easylifeapp.com/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutBtDtCyC0DzztD0E0Dzzzy0F0EtD0FyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=1082707522&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutBtDtCyC0DzztD0E0Dzzzy0F0EtD0FyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=1082707522&ir=
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutBtDtCyC0DzztD0E0Dzzzy0F0EtD0FyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=1082707522&ir=
BHO: uuniesalles -> {30486eb0-8f54-477b-a8af-c46af49ec59b} -> C:\Program Files (x86)\uuniesalles\VKdMZo0KwKFjFf.x64.dll ()
BHO: IIsaevver -> {42c7f61b-5dd8-49c4-92ba-ae02561f3603} -> C:\ProgramData\IIsaevver\jKGysn8yCU2jT1.x64.dll ()
BHO: JonIICouuponu -> {5d1d921e-2dd5-40d7-a9bb-0aec3b95da10} -> C:\Program Files (x86)\JonIICouuponu\OrTcYD1Vm4TqGs.x64.dll ()
BHO: No Name -> {696a51fb-49de-4358-966c-3fb4cc218f6b} ->  No File
BHO: GreatSave4oU -> {9e959fac-a776-445d-9409-50eb98043bf1} -> C:\ProgramData\GreatSave4oU\6fGaAxULkPkJva.x64.dll ()
BHO: SAveLiots -> {e5c825a7-42e4-489a-904b-95922d738800} -> C:\ProgramData\SAveLiots\Y0nvrvZWlRYphm.x64.dll ()
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
FF Homepage: hxxp://searchy.easylifeapp.com/
FF Extension: GreatSaave4U - C:\Users\vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5on2ew3y.default-1370806093810\Extensions\Bn@KBctKOIl.org [2015-01-19]
FF Extension: RegularDealss - C:\Users\vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5on2ew3y.default-1370806093810\Extensions\kNFZEs6B@u.net [2015-02-14]
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Profile: C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Documents Google) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-03]
CHR Extension: (Google Drive) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-03]
CHR Extension: (YouTube) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-03]
CHR Extension: (Recherche Google) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-03]
CHR Extension: (avast! Online Security) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-03]
CHR Extension: (Extreme User Agent Switcher) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilmdgdmjdkojpcchfiegejaihkopkhid [2015-01-14]
CHR Extension: (Awesome Facebook Widget ANTP) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpmobilbpcccgegofocnlfmallakegc [2015-02-14]
CHR Extension: (We Love Deals) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcfppbbhdoelgncohaijmhgkmcibioif [2015-01-19]
CHR Extension: (Google Wallet) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-19]
CHR Extension: (SEO Global For Google Search) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi [2015-01-30]
CHR Extension: (Gmail) - C:\Users\vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-03]
CHR Extension: (uunissaLes) - C:\ProgramData\olikoibonhaaeejjhabkhgocomcgkmfn\ [2013-06-03]
CHR Extension: (JoniCCoUpon) - C:\ProgramData\piocmdkpnjenknjadeejoiganoaoehcd\ [2013-06-03]
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\vincent\AppData\Local\mysearchdial-speeddial.crx [2013-10-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-14]
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx [Not Found]
R2 fc67e7a0; c:\Program Files (x86)\DeltaFix\DeltaFix.dll [4213760 2015-01-01] () [File not signed] <==== ATTENTION
2015-02-14 17:08 - 2015-02-14 17:08 - 00000000 ____D () C:\Program Files (x86)\RegularDealss
2015-02-14 17:07 - 2015-02-15 22:01 - 00000000 ____D () C:\Program Files (x86)\JonIICouuponu
2015-02-14 17:07 - 2015-02-14 17:07 - 00000000 ____D () C:\Program Files (x86)\Awesome Facebook Widget ANTP
2015-02-14 16:47 - 2015-02-14 16:47 - 00000000 ____D () C:\ProgramData\TheAdBlock
2015-01-30 20:34 - 2015-01-30 20:34 - 00000000 ____D () C:\Program Files (x86)\SEO Global For Google Search
2015-01-30 20:34 - 2015-01-30 20:34 - 00000000 ____D () C:\Program Files (x86)\EunnjooyyCCoeuponn
2015-01-30 20:33 - 2015-01-30 20:34 - 00000000 ____D () C:\Program Files (x86)\ExstraSaveingse
2015-01-21 19:49 - 2015-01-21 19:49 - 00000000 ____D () C:\ProgramData\Yellow AdBlocker
2015-01-19 00:30 - 2015-01-19 00:30 - 00000000 ____D () C:\ProgramData\DoownnSave
2015-02-15 22:01 - 2015-01-01 21:12 - 00000000 ____D () C:\Program Files (x86)\uuniesalles
2015-02-14 17:08 - 2015-01-01 21:12 - 00000000 ____D () C:\ProgramData\17096238431112808442
2013-10-28 16:45 - 2013-10-28 16:45 - 0351112 _____ () C:\Users\vincent\AppData\Local\mysearchdial-speeddial.crx
C:\Program Files (x86)\JonIICouuponu
C:\ProgramData\IIsaevver
C:\Program Files (x86)\uuniesalles
C:\ProgramData\GreatSave4oU
C:\ProgramData\SAveLiots
C:\Program Files (x86)\Google\Chrome
C:\Users\vincent\AppData\Local\Google\Chrome
c:\Program Files (x86)\DeltaFix\
C:\ProgramData\SetStretch.exe
Task: {3395823B-7AB4-4060-938C-FF0BD481596E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-03] (Google Inc.)
Task: {E9C1064F-2F6A-4D6F-8D4F-B14CDDAD04F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-03] (Google Inc.)
Task: {F5E973F7-3A45-4FFE-9BCF-1B6D60532DFB} - System32\Tasks\Updater19962.exe => C:\Users\vincent\AppData\Local\Updater19962\Updater19962.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner (http://www.bleepingcomputer.com/download/adwcleaner/) by Xplode onto your desktop.
Title: Re: menace detecté avast
Post by: REDACTED on February 19, 2015, 12:36:08 AM
merci beaucoup de votre aide  ca a l air de marcher
Title: Re: menace detecté avast
Post by: REDACTED on February 19, 2015, 12:37:06 AM
fixlog
Title: Re: menace detecté avast
Post by: essexboy on February 19, 2015, 04:34:21 PM
En quoi l'ordinateur maintenant, d'autres problèmes ?

How is the computer now, any further problems ?
Title: Re: menace detecté avast
Post by: REDACTED on August 16, 2016, 06:04:11 AM
Houm... je sens la réinstallation complète....  :'( J'ai connu ça,précisement dans ce cas.
Title: Re: menace detecté avast
Post by: jefferson sant on August 16, 2016, 09:50:21 PM
Quote from: philippe.bertieaux on August 16, 2016, 06:04:11 AM
Houm... je sens la réinstallation complète....  :'( J'ai connu ça,précisement dans ce cas.

Bonjour.

Je vous recommande de créer un nouveau sujet
pour aider si le problème est une infection ou si elle est vraiment une autre raison, donner plus de détails sur ce qui se passe réellement.

https://forum.avast.com/index.php?board=23.0