Invasion de publicités sur mon écran

davidm84 Messages postés 3 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour à tous,
Petit nouveau sur ce forum, je viens demander l'aide d'un (ou d'une) spécialiste dans les traitements d'invasion de pub.
Suite à un clic malheureux lors de surf sur internet, je me retrouve envahi de pub qui cachent une partie de mon écran et me font perdre un temps fou pour les fermer. Donc je me suis déjà penché sur les questions résolues antérieures et cela m'a permis de télécharger adwcleaner et de lancer un scan. Si j'ai bien compris je dois copier ici le rapport (je mets le dernier qui date de qq jours). Allez, je me lance ...

# AdwCleaner v4.109 - Rapport créé le 25/01/2015 à 17:45:56
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-25.1 [Live]
# Système d'exploitation : Windows 8 (64 bits)
# Nom d'utilisateur : david et isa - PCNOUS
# Exécuté depuis : C:\Users\david et isa\Downloads\adwcleaner_4.109 (2).exe
# Option : Scanner

***** [ Services ] *****

Service Présent : globalUpdate
Service Présent : globalUpdatem
Service Présent : ccnfd_1_10_0_6

***** [ Fichiers / Dossiers ] *****

Dossier Présent : C:\Program Files (x86)\globalUpdate
Dossier Présent : C:\Program Files (x86)\Object Browser
Dossier Présent : C:\Program Files (x86)\Object Browser
Dossier Présent : C:\ProgramData\Browser
Dossier Présent : C:\Users\david et isa\AppData\Local\CrashRpt
Dossier Présent : C:\Users\david et isa\AppData\Local\globalUpdate
Dossier Présent : C:\Users\david et isa\AppData\Local\ZombieNews
Dossier Présent : C:\Users\david et isa\AppData\LocalLow\Object Browser
Dossier Présent : C:\Users\david et isa\AppData\LocalLow\Object Browser
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Tâches planifiées ] *****

Tâche Présente : globalUpdateUpdateTaskMachineCore
Tâche Présente : globalUpdateUpdateTaskMachineUA
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-1
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-2
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-5
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-5_user
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-6
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-7

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Présente : HKCU\Software\AppDataLow\Software\Crossrider
Clé Présente : HKCU\Software\AppDataLow\Software\Object Browser
Clé Présente : HKCU\Software\AppDataLow\Software\Object Browser
Clé Présente : HKCU\Software\GlobalUpdate
Clé Présente : HKCU\Software\InstalledBrowserExtensions
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311281150}
Clé Présente : [x64] HKCU\Software\GlobalUpdate
Clé Présente : [x64] HKCU\Software\InstalledBrowserExtensions
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311281150}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Clé Présente : HKLM\SOFTWARE\GlobalUpdate
Clé Présente : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{109e4fb8-28b8-449b-9de7-3f8c0d40b566}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1824b74f-f317-40f6-821c-52cbe21ea124}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d5f2e83-76f2-4c48-95ee-e63aa4c8a92b}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d9c644cd-afc3-4e9b-912f-d9e80f0bbe6c}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser
Clé Présente : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Présente : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Présente : HKLM\SOFTWARE\Object Browser
Clé Présente : HKLM\SOFTWARE\Object Browser
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311281150}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Clé Présente : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{109e4fb8-28b8-449b-9de7-3f8c0d40b566}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1824b74f-f317-40f6-821c-52cbe21ea124}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d5f2e83-76f2-4c48-95ee-e63aa4c8a92b}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d9c644cd-afc3-4e9b-912f-d9e80f0bbe6c}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}
Donnée Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Donnée Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=localhost:44413
Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Selection Tools]

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.17183

-\\ Google Chrome v40.0.2214.91

*************************

AdwCleaner[R0].txt - [29054 octets] - [20/01/2015 17:48:29]
AdwCleaner[R1].txt - [11346 octets] - [25/01/2015 17:31:38]
AdwCleaner[R2].txt - [11411 octets] - [25/01/2015 17:39:08]
AdwCleaner[R3].txt - [11221 octets] - [25/01/2015 17:45:56]
AdwCleaner[S0].txt - [26027 octets] - [20/01/2015 17:51:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [11343 octets] ##########

et voilà !
Merci d'avance à ceux qui pourront m'indiquer comment faire maintenant pour supprimer toutes ces fenêtres.
Bonne journée à tous.
David

5 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Fais nettoyer sur AdwCleaner
    Donne le rapport puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    * FRST.txt
    * Shortcut.txt
    * Additionnal.txt

    Envoie comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    BHO: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll ()
    BHO-x32: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187.dll ()
    R2 mailUpdate; C:\ProgramData\MailUpdate\mailUpdate.exe [764416 2015-01-05] (Skytech Co., Ltd.) [File not signed]
    R2 ptcnBmD; C:\ProgramData\SUNEncoCu\ptcnBmD.exe [2733872 2015-01-20] (Time Lapse Solutions)
    S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
    R2 serverca; C:\Users\david et isa\AppData\Local\ConvertAd\CASrv.exe [92672 2015-01-30] () [File not signed]
    R2 servervo; C:\Users\david et isa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-30] () [File not signed] <==== ATTENTION
    R2 SWUpdater; C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-30] (SysTool PasSame LIMITED) [File not signed]
    R2 webinstrNHKT; C:\Windows\system32\Drivers\webinstrNHKT.sys [50264 2015-01-30] ()
    2015-01-30 10:53 - 2015-01-30 10:53 - 00001102 _____ () C:\Users\david et isa\Desktop\Continue Live Installation.lnk
    2015-01-30 10:43 - 2015-01-30 10:44 - 00040562 _____ () C:\Users\david et isa\Desktop\Addition.txt
    2015-01-30 10:41 - 2015-01-30 11:12 - 00029224 _____ () C:\Users\david et isa\Desktop\FRST.txt
    2015-01-30 10:38 - 2015-01-30 11:06 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
    2015-01-30 10:38 - 2015-01-30 11:06 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
    2015-01-30 10:38 - 2015-01-30 11:05 - 00001049 _____ () C:\Users\david et isa\Desktop\AnyProtect.lnk
    2015-01-30 10:38 - 2015-01-30 10:38 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
    2015-01-30 10:35 - 2015-01-30 10:38 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
    2015-01-30 10:35 - 2015-01-30 10:35 - 00613057 _____ (CMI Limited) C:\Users\david et isa\AppData\Local\nsb3FBB.tmp
    2015-01-30 10:35 - 2015-01-30 10:35 - 00000000 __SHD () C:\Users\david et isa\AppData\Roaming\AnyProtectEx
    2015-01-30 10:34 - 2015-01-30 10:53 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ConvertAd
    2015-01-30 10:34 - 2015-01-30 10:34 - 00050264 _____ () C:\Windows\system32\Drivers\webinstrNHKT.sys
    2015-01-30 10:34 - 2015-01-30 10:34 - 00003106 _____ () C:\Windows\System32\Tasks\BlockAndSurf Update
    2015-01-30 10:34 - 2015-01-30 10:34 - 00001678 _____ () C:\Windows\patsearch.bin
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000452 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____D () C:\Program Files (x86)\ver0BlockAndSurf
    2015-01-30 10:32 - 2015-01-30 11:11 - 00000000 ____D () C:\FRST
    2015-01-30 10:32 - 2015-01-30 10:36 - 00000000 ____D () C:\Users\david et isa\AppData\Local\gmsd_fr_163
    2015-01-30 10:32 - 2015-01-30 10:32 - 00004058 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
    2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Users\david et isa\AppData\Local\SmartWeb
    2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_163
    2015-01-30 10:30 - 2015-01-30 10:30 - 02130432 _____ (Farbar) C:\Users\david et isa\Desktop\FRST64.exe
    2015-01-30 10:21 - 2015-01-30 10:21 - 00000000 ____D () C:\Users\david et isa\AppData\Local\wincheck
    2015-01-30 10:19 - 2015-01-30 10:19 - 00001023 _____ () C:\Users\david et isa\Desktop\NZBPlayer.lnk
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000970 _____ () C:\Users\david et isa\Desktop\NZBMovies.lnk
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Program Files (x86)\NZBPlayer
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\VOPackage
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\omiga-plus
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\MailUpdate
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Local\Weather_Protector_LLC
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\MailUpdate
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Local\StormWatch
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Program Files (x86)\StormWatch
    2015-01-30 10:16 - 2015-01-30 10:16 - 00003782 _____ () C:\Windows\System32\Tasks\Selection Tools Update
    2015-01-30 10:16 - 2015-01-30 10:16 - 00003748 _____ () C:\Windows\System32\Tasks\WindApp Update
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.installation.log
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\WTools
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Store
    2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Nosibay
    2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
    2015-01-30 10:14 - 2015-01-30 10:16 - 00005813 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log
    2015-01-30 10:14 - 2015-01-30 10:16 - 00001253 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log
    2015-01-30 10:14 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6
    2015-01-30 10:14 - 2015-01-30 10:14 - 00005480 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5
    2015-01-30 10:14 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00000097 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log
    2015-01-30 10:13 - 2015-01-30 11:13 - 00005548 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job
    2015-01-30 10:13 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7
    2015-01-30 10:13 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job
    2015-01-30 10:13 - 2015-01-30 10:13 - 00008552 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6
    2015-01-30 10:13 - 2015-01-30 10:13 - 00008216 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7
    2015-01-30 10:13 - 2015-01-30 10:13 - 00005212 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job
    2015-01-30 10:13 - 2015-01-30 10:13 - 00000000 ____D () C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820
    2015-01-30 10:12 - 2015-01-30 11:13 - 00002142 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job
    2015-01-30 10:12 - 2015-01-30 10:17 - 00000990 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-01-30 10:12 - 2015-01-30 10:17 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-01-30 10:12 - 2015-01-30 10:14 - 00000000 ____D () C:\Program Files (x86)\HQCinema Pro 2.1V30.01
    2015-01-30 10:12 - 2015-01-30 10:12 - 01970136 _____ (HQ CinemaV30.01) C:\Users\david et isa\AppData\Roaming\GIZGA.exe
    2015-01-30 10:12 - 2015-01-30 10:12 - 00008218 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11
    2015-01-30 10:12 - 2015-01-30 10:12 - 00005214 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job
    2015-01-30 10:12 - 2015-01-30 10:12 - 00004394 _____ () C:\Windows\System32\Tasks\GIZGA
    2015-01-30 10:12 - 2015-01-30 10:12 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
    2015-01-30 10:12 - 2015-01-30 10:12 - 00003726 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
    2015-01-30 10:12 - 2015-01-30 10:12 - 00001378 _____ () C:\Windows\Tasks\GIZGA.job
    2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Users\david et isa\AppData\Local\globalUpdate
    2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2015-01-25 17:58 - 2015-01-30 10:06 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ZombieNews
    2015-01-25 17:58 - 2015-01-25 17:58 - 00000000 ____D () C:\ProgramData\Browser
    2015-01-22 07:36 - 2015-01-30 07:36 - 00001378 _____ () C:\Windows\Tasks\WJCWK.job
    2015-01-22 07:36 - 2015-01-22 07:37 - 00000000 ____D () C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd
    2015-01-22 07:36 - 2015-01-22 07:36 - 02020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
    2015-01-22 07:36 - 2015-01-22 07:36 - 00004394 _____ () C:\Windows\System32\Tasks\WJCWK
    2015-01-20 16:36 - 2015-01-20 20:05 - 00003288 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001
    2015-01-20 15:54 - 2015-01-30 10:18 - 00002402 _____ () C:\Users\david et isa\Desktop\chrome.lnk
    2015-01-20 14:53 - 2015-01-20 14:53 - 00003178 _____ () C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}
    2015-01-20 12:55 - 2015-01-20 12:55 - 00003112 _____ () C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}
    2015-01-20 12:50 - 2015-01-20 14:56 - 00000000 ____D () C:\Program Files (x86)\Setup Support for SearchProtect
    2015-01-20 12:12 - 2015-01-20 12:17 - 00000000 ____D () C:\ProgramData\SUNEncoCu
    2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\david et isa\AppData\Roaming\WJCWK
    2015-01-22 07:36 - 2015-01-22 07:36 - 2020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
    Task: {1709404D-EC00-4E4E-9176-4CE5221B978F} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3} - System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
    Task: {27614737-2DBC-4336-B2DB-09D60E4E890A} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
    Task: {296F6012-F246-4B8F-8F71-026E1002B89D} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
    Task: {2E73FDAB-A07C-4374-A957-25224AB6AE44} - System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => pcalua.exe -a "C:\Users\david et isa\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=amt
    Task: {4BE31162-BE93-4139-B857-E73EB42BFE9F} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\david et isa\AppData\Local\SmartWeb\SmartWebHelper.exe [2014-12-31] (SoftBrain Technologies Ltd.)
    Task: {4D809E02-6A32-47D7-90F4-CF64B6D3295C} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {5A20EF2E-4EB9-4CC8-970C-47CFB40A9853} - System32\Tasks\WJCWK => C:\Users\david et isa\AppData\Roaming\WJCWK.exe [2015-01-22] (ObjectB) <==== ATTENTION
    Task: {643F10DD-BBC0-46D6-B44C-3AACF725A4AD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-01-30] (AnyProtect.com) <==== ATTENTION
    Task: {A058289E-7723-40D0-B497-6FEB03FEB17A} - System32\Tasks\GIZGA => C:\Users\david et isa\AppData\Roaming\GIZGA.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {A77213A5-347A-4ADA-988A-02965808E024} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {B20E6615-6E11-447F-A579-81D8E67B4388} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {B7E9E8B0-1207-462B-A163-EF8443088B10} - System32\Tasks\WindApp Update => C:\Users\david et isa\AppData\Roaming\Store\WindApp\WindApp Update.exe [2014-11-28] (Nosibay) <==== ATTENTION
    Task: {B949BE6E-5B20-4CBC-9F41-2A03C1F623DC} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ
    Task: {EFFB0701-745E-4FDC-AE64-7DC1221C43E5} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe [2015-01-30] () <==== ATTENTION
    Task: {F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} - System32\Tasks\Selection Tools Update => C:\Users\david et isa\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2014-12-16] (Nosibay)
    Task: {FD7CC429-099A-45B5-B749-B085D820D175} - System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => pcalua.exe -a E:\MSWord\INSTMSIW.EXE -d E:\MSWord
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
    Task: C:\Windows\Tasks\GIZGA.job => C:\Users\david et isa\AppData\Roaming\GIZGA.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
    Task: C:\Windows\Tasks\WJCWK.job => C:\Users\david et isa\AppData\Roaming\WJCWK.exe <==== ATTENTION

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    0
  4. davidm84 Messages postés 3 Statut Membre
     
    me revoilà
    j'ai fait ce qui est indiqué ci dessus, sauf que l'ordi s'est relancé automatiquement apres avoir coller les éléments dans le notepad. Du coup je n'ai pas eu de texte qui est apparu à l'écran mais un fichier "fixlog" enregistré sur le bureau en lieu et place du "fixlist". Donc je vous colle ici ce fichier, vous me direz si c'est bon, je suis sceptique...

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-01-2015
    Ran by david et isa at 2015-01-30 18:06:09 Run:1
    Running from C:\Users\david et isa\Desktop
    Loaded Profiles: david et isa (Available profiles: david et isa)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    BHO: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll ()
    BHO-x32: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187.dll ()
    R2 mailUpdate; C:\ProgramData\MailUpdate\mailUpdate.exe [764416 2015-01-05] (Skytech Co., Ltd.) [File not signed]
    R2 ptcnBmD; C:\ProgramData\SUNEncoCu\ptcnBmD.exe [2733872 2015-01-20] (Time Lapse Solutions)
    S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
    R2 serverca; C:\Users\david et isa\AppData\Local\ConvertAd\CASrv.exe [92672 2015-01-30] () [File not signed]
    R2 servervo; C:\Users\david et isa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-30] () [File not signed] <==== ATTENTION
    R2 SWUpdater; C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-30] (SysTool PasSame LIMITED) [File not signed]
    R2 webinstrNHKT; C:\Windows\system32\Drivers\webinstrNHKT.sys [50264 2015-01-30] ()
    2015-01-30 10:53 - 2015-01-30 10:53 - 00001102 _____ () C:\Users\david et isa\Desktop\Continue Live Installation.lnk
    2015-01-30 10:43 - 2015-01-30 10:44 - 00040562 _____ () C:\Users\david et isa\Desktop\Addition.txt
    2015-01-30 10:41 - 2015-01-30 11:12 - 00029224 _____ () C:\Users\david et isa\Desktop\FRST.txt
    2015-01-30 10:38 - 2015-01-30 11:06 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
    2015-01-30 10:38 - 2015-01-30 11:06 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
    2015-01-30 10:38 - 2015-01-30 11:05 - 00001049 _____ () C:\Users\david et isa\Desktop\AnyProtect.lnk
    2015-01-30 10:38 - 2015-01-30 10:38 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
    2015-01-30 10:35 - 2015-01-30 10:38 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
    2015-01-30 10:35 - 2015-01-30 10:35 - 00613057 _____ (CMI Limited) C:\Users\david et isa\AppData\Local\nsb3FBB.tmp
    2015-01-30 10:35 - 2015-01-30 10:35 - 00000000 __SHD () C:\Users\david et isa\AppData\Roaming\AnyProtectEx
    2015-01-30 10:34 - 2015-01-30 10:53 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ConvertAd
    2015-01-30 10:34 - 2015-01-30 10:34 - 00050264 _____ () C:\Windows\system32\Drivers\webinstrNHKT.sys
    2015-01-30 10:34 - 2015-01-30 10:34 - 00003106 _____ () C:\Windows\System32\Tasks\BlockAndSurf Update
    2015-01-30 10:34 - 2015-01-30 10:34 - 00001678 _____ () C:\Windows\patsearch.bin
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000452 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
    2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____D () C:\Program Files (x86)\ver0BlockAndSurf
    2015-01-30 10:32 - 2015-01-30 11:11 - 00000000 ____D () C:\FRST
    2015-01-30 10:32 - 2015-01-30 10:36 - 00000000 ____D () C:\Users\david et isa\AppData\Local\gmsd_fr_163
    2015-01-30 10:32 - 2015-01-30 10:32 - 00004058 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
    2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Users\david et isa\AppData\Local\SmartWeb
    2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_163
    2015-01-30 10:30 - 2015-01-30 10:30 - 02130432 _____ (Farbar) C:\Users\david et isa\Desktop\FRST64.exe
    2015-01-30 10:21 - 2015-01-30 10:21 - 00000000 ____D () C:\Users\david et isa\AppData\Local\wincheck
    2015-01-30 10:19 - 2015-01-30 10:19 - 00001023 _____ () C:\Users\david et isa\Desktop\NZBPlayer.lnk
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000970 _____ () C:\Users\david et isa\Desktop\NZBMovies.lnk
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
    2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Program Files (x86)\NZBPlayer
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\VOPackage
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\omiga-plus
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\MailUpdate
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Local\Weather_Protector_LLC
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
    2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\MailUpdate
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Local\StormWatch
    2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Program Files (x86)\StormWatch
    2015-01-30 10:16 - 2015-01-30 10:16 - 00003782 _____ () C:\Windows\System32\Tasks\Selection Tools Update
    2015-01-30 10:16 - 2015-01-30 10:16 - 00003748 _____ () C:\Windows\System32\Tasks\WindApp Update
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.installation.log
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\WTools
    2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Store
    2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Nosibay
    2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
    2015-01-30 10:14 - 2015-01-30 10:16 - 00005813 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log
    2015-01-30 10:14 - 2015-01-30 10:16 - 00001253 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log
    2015-01-30 10:14 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6
    2015-01-30 10:14 - 2015-01-30 10:14 - 00005480 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5
    2015-01-30 10:14 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job
    2015-01-30 10:14 - 2015-01-30 10:14 - 00000097 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log
    2015-01-30 10:13 - 2015-01-30 11:13 - 00005548 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job
    2015-01-30 10:13 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7
    2015-01-30 10:13 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job
    2015-01-30 10:13 - 2015-01-30 10:13 - 00008552 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6
    2015-01-30 10:13 - 2015-01-30 10:13 - 00008216 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7
    2015-01-30 10:13 - 2015-01-30 10:13 - 00005212 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job
    2015-01-30 10:13 - 2015-01-30 10:13 - 00000000 ____D () C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820
    2015-01-30 10:12 - 2015-01-30 11:13 - 00002142 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job
    2015-01-30 10:12 - 2015-01-30 10:17 - 00000990 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-01-30 10:12 - 2015-01-30 10:17 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-01-30 10:12 - 2015-01-30 10:14 - 00000000 ____D () C:\Program Files (x86)\HQCinema Pro 2.1V30.01
    2015-01-30 10:12 - 2015-01-30 10:12 - 01970136 _____ (HQ CinemaV30.01) C:\Users\david et isa\AppData\Roaming\GIZGA.exe
    2015-01-30 10:12 - 2015-01-30 10:12 - 00008218 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11
    2015-01-30 10:12 - 2015-01-30 10:12 - 00005214 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job
    2015-01-30 10:12 - 2015-01-30 10:12 - 00004394 _____ () C:\Windows\System32\Tasks\GIZGA
    2015-01-30 10:12 - 2015-01-30 10:12 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
    2015-01-30 10:12 - 2015-01-30 10:12 - 00003726 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
    2015-01-30 10:12 - 2015-01-30 10:12 - 00001378 _____ () C:\Windows\Tasks\GIZGA.job
    2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Users\david et isa\AppData\Local\globalUpdate
    2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2015-01-25 17:58 - 2015-01-30 10:06 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ZombieNews
    2015-01-25 17:58 - 2015-01-25 17:58 - 00000000 ____D () C:\ProgramData\Browser
    2015-01-22 07:36 - 2015-01-30 07:36 - 00001378 _____ () C:\Windows\Tasks\WJCWK.job
    2015-01-22 07:36 - 2015-01-22 07:37 - 00000000 ____D () C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd
    2015-01-22 07:36 - 2015-01-22 07:36 - 02020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
    2015-01-22 07:36 - 2015-01-22 07:36 - 00004394 _____ () C:\Windows\System32\Tasks\WJCWK
    2015-01-20 16:36 - 2015-01-20 20:05 - 00003288 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001
    2015-01-20 15:54 - 2015-01-30 10:18 - 00002402 _____ () C:\Users\david et isa\Desktop\chrome.lnk
    2015-01-20 14:53 - 2015-01-20 14:53 - 00003178 _____ () C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}
    2015-01-20 12:55 - 2015-01-20 12:55 - 00003112 _____ () C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}
    2015-01-20 12:50 - 2015-01-20 14:56 - 00000000 ____D () C:\Program Files (x86)\Setup Support for SearchProtect
    2015-01-20 12:12 - 2015-01-20 12:17 - 00000000 ____D () C:\ProgramData\SUNEncoCu
    2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\david et isa\AppData\Roaming\WJCWK
    2015-01-22 07:36 - 2015-01-22 07:36 - 2020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
    Task: {1709404D-EC00-4E4E-9176-4CE5221B978F} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3} - System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
    Task: {27614737-2DBC-4336-B2DB-09D60E4E890A} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
    Task: {296F6012-F246-4B8F-8F71-026E1002B89D} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
    Task: {2E73FDAB-A07C-4374-A957-25224AB6AE44} - System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => pcalua.exe -a "C:\Users\david et isa\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=amt
    Task: {4BE31162-BE93-4139-B857-E73EB42BFE9F} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\david et isa\AppData\Local\SmartWeb\SmartWebHelper.exe [2014-12-31] (SoftBrain Technologies Ltd.)
    Task: {4D809E02-6A32-47D7-90F4-CF64B6D3295C} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {5A20EF2E-4EB9-4CC8-970C-47CFB40A9853} - System32\Tasks\WJCWK => C:\Users\david et isa\AppData\Roaming\WJCWK.exe [2015-01-22] (ObjectB) <==== ATTENTION
    Task: {643F10DD-BBC0-46D6-B44C-3AACF725A4AD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-01-30] (AnyProtect.com) <==== ATTENTION
    Task: {A058289E-7723-40D0-B497-6FEB03FEB17A} - System32\Tasks\GIZGA => C:\Users\david et isa\AppData\Roaming\GIZGA.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {A77213A5-347A-4ADA-988A-02965808E024} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {B20E6615-6E11-447F-A579-81D8E67B4388} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {B7E9E8B0-1207-462B-A163-EF8443088B10} - System32\Tasks\WindApp Update => C:\Users\david et isa\AppData\Roaming\Store\WindApp\WindApp Update.exe [2014-11-28] (Nosibay) <==== ATTENTION
    Task: {B949BE6E-5B20-4CBC-9F41-2A03C1F623DC} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
    Task: {DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ
    Task: {EFFB0701-745E-4FDC-AE64-7DC1221C43E5} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe [2015-01-30] () <==== ATTENTION
    Task: {F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} - System32\Tasks\Selection Tools Update => C:\Users\david et isa\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2014-12-16] (Nosibay)
    Task: {FD7CC429-099A-45B5-B749-B085D820D175} - System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => pcalua.exe -a E:\MSWord\INSTMSIW.EXE -d E:\MSWord
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
    Task: C:\Windows\Tasks\GIZGA.job => C:\Users\david et isa\AppData\Roaming\GIZGA.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
    Task: C:\Windows\Tasks\WJCWK.job => C:\Users\david et isa\AppData\Roaming\WJCWK.exe <==== ATTENTION

    *****************

    "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
    "HKCR\CLSID\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
    "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
    "HKCR\Wow6432Node\CLSID\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
    mailUpdate => Service not found.
    ptcnBmD => Unable to stop service
    ptcnBmD => Service deleted successfully.
    rpcapd => Service not found.
    serverca => Service not found.
    servervo => Service not found.
    SWUpdater => Service not found.
    WindowsMangerProtect => Unable to stop service
    WindowsMangerProtect => Service deleted successfully.
    webinstrNHKT => Unable to stop service
    webinstrNHKT => Service deleted successfully.
    "C:\Users\david et isa\Desktop\Continue Live Installation.lnk" => File/Directory not found.
    C:\Users\david et isa\Desktop\Addition.txt => Moved successfully.
    C:\Users\david et isa\Desktop\FRST.txt => Moved successfully.
    C:\Windows\System32\Tasks\APSnotifierPP1 => Moved successfully.
    C:\Windows\Tasks\APSnotifierPP1.job => Moved successfully.
    "C:\Users\david et isa\Desktop\AnyProtect.lnk" => File/Directory not found.
    "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup" => File/Directory not found.
    C:\Program Files (x86)\AnyProtectEx => Moved successfully.
    C:\Users\david et isa\AppData\Local\nsb3FBB.tmp => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\AnyProtectEx => Moved successfully.
    "C:\Users\david et isa\AppData\Local\ConvertAd" => File/Directory not found.
    C:\Windows\system32\Drivers\webinstrNHKT.sys => Moved successfully.
    C:\Windows\System32\Tasks\BlockAndSurf Update => Moved successfully.
    C:\Windows\patsearch.bin => Moved successfully.
    C:\Windows\Tasks\BlockAndSurf Update.job => Moved successfully.
    C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf => Moved successfully.

    "C:\Program Files (x86)\ver0BlockAndSurf" directory move:

    C:\Program Files (x86)\ver0BlockAndSurf\187.crx => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\187.dat => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\187.dll => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\187.xpi => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\BlockAndSurf.exe => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.dll => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\sqlite3.dll => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\x64\TandemRunner.exe => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\x64\WdfCoInstaller01009.dll => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\x64\webinstr.inf => Moved successfully.
    C:\Program Files (x86)\ver0BlockAndSurf\x64\webinstrNHKT.sys => Moved successfully.
    Could not move "C:\Program Files (x86)\ver0BlockAndSurf" directory. => Scheduled to move on reboot.

    "C:\FRST" directory move:

    C:\FRST\files => Moved successfully.
    C:\FRST\re => Moved successfully.
    C:\FRST\reb => Moved successfully.
    C:\FRST\users00 => Moved successfully.
    C:\FRST\Quarantine\C\Windows\patsearch.bin.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\Tasks\APSnotifierPP1.job.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\Tasks\BlockAndSurf Update.job.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\System32\Tasks\APSnotifierPP1.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\System32\Tasks\BlockAndSurf Update.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\System32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Windows\System32\Drivers\webinstrNHKT.sys.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\Desktop\Addition.txt.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\Desktop\FRST.txt.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\mov01.swf => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\swfTTi.swf => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\swfx7C.swf => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.quick.results => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.results => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\de.xml => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\en.xml => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\fr.xml => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\installer\ab.test.json => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\installer\tempfile.t => Moved successfully.
    C:\FRST\Quarantine\C\Users\david et isa\AppData\Local\nsb3FBB.tmp.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.crx.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.dat.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.dll.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.xpi.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187_x64.dll.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\BlockAndSurf.exe.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.dll.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\sqlite3.dll.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\TandemRunner.exe.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\WdfCoInstaller01009.dll.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\webinstr.inf.xBAD => Moved successfully.
    C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\webinstrNHKT.sys.xBAD => Moved successfully.
    C:\FRST\Logs\Addition_30-01-2015_10-44-39.txt => Moved successfully.
    C:\FRST\Logs\Addition_30-01-2015_11-15-05.txt => Moved successfully.
    C:\FRST\Logs\ct => Moved successfully.
    C:\FRST\Logs\FRST_30-01-2015_10-44-43.txt => Moved successfully.
    C:\FRST\Logs\FRST_30-01-2015_11-19-57.txt => Moved successfully.
    C:\FRST\Hives\BCD => Moved successfully.
    C:\FRST\Hives\default => Moved successfully.
    C:\FRST\Hives\ERDNT.CON => Moved successfully.
    C:\FRST\Hives\ERDNT.EXE => Moved successfully.
    C:\FRST\Hives\ERDNT.INF => Moved successfully.
    C:\FRST\Hives\ERDNTDOS.LOC => Moved successfully.
    C:\FRST\Hives\ERDNTWIN.LOC => Moved successfully.
    C:\FRST\Hives\sam => Moved successfully.
    C:\FRST\Hives\security => Moved successfully.
    C:\FRST\Hives\software => Moved successfully.
    C:\FRST\Hives\system => Moved successfully.
    C:\FRST\Hives\Users\00000002\UsrClass.dat => Moved successfully.
    C:\FRST\Hives\Users\00000001\ntuser.dat => Moved successfully.
    Could not move "C:\FRST" directory. => Scheduled to move on reboot.

    "C:\Users\david et isa\AppData\Local\gmsd_fr_163" => File/Directory not found.
    "C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task" => File/Directory not found.
    "C:\Users\david et isa\AppData\Local\SmartWeb" => File/Directory not found.
    "C:\Program Files (x86)\gmsd_fr_163" => File/Directory not found.
    C:\Users\david et isa\Desktop\FRST64.exe => Moved successfully.

    "C:\Users\david et isa\AppData\Local\wincheck" directory move:

    C:\Users\david et isa\AppData\Local\wincheck\wincheck.exe => Moved successfully.
    Could not move "C:\Users\david et isa\AppData\Local\wincheck" directory. => Scheduled to move on reboot.

    "C:\Users\david et isa\Desktop\NZBPlayer.lnk" => File/Directory not found.
    "C:\Users\david et isa\Desktop\NZBMovies.lnk" => File/Directory not found.
    "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer" => File/Directory not found.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer => Moved successfully.
    C:\Program Files (x86)\NZBPlayer => Moved successfully.
    "C:\Users\david et isa\AppData\Roaming\VOPackage" => File/Directory not found.
    C:\Users\david et isa\AppData\Roaming\omiga-plus => Moved successfully.
    "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage" => File/Directory not found.
    C:\Users\david et isa\AppData\Roaming\MailUpdate => Moved successfully.
    "C:\Users\david et isa\AppData\Local\Weather_Protector_LLC" => File/Directory not found.
    C:\ProgramData\WindowsMangerProtect => Moved successfully.
    C:\ProgramData\MailUpdate => Moved successfully.
    "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch" => File/Directory not found.
    "C:\Users\david et isa\AppData\Local\StormWatch" => File/Directory not found.
    "C:\Program Files (x86)\StormWatch" => File/Directory not found.
    "C:\Windows\System32\Tasks\Selection Tools Update" => File/Directory not found.
    "C:\Windows\System32\Tasks\WindApp Update" => File/Directory not found.
    C:\Users\david et isa\AppData\Roaming\WindApp.installation.log => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\WTools => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\Store => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\Nosibay => Moved successfully.
    "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock" => File/Directory not found.
    C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => Moved successfully.
    C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820 => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => Moved successfully.
    C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully.
    C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully.
    C:\Program Files (x86)\HQCinema Pro 2.1V30.01 => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\GIZGA.exe => Moved successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => Moved successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => Moved successfully.
    C:\Windows\System32\Tasks\GIZGA => Moved successfully.
    C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully.
    C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully.
    C:\Windows\Tasks\GIZGA.job => Moved successfully.
    C:\Users\david et isa\AppData\Local\globalUpdate => Moved successfully.
    C:\Program Files (x86)\globalUpdate => Moved successfully.
    C:\Users\david et isa\AppData\Local\ZombieNews => Moved successfully.
    C:\ProgramData\Browser => Moved successfully.
    C:\Windows\Tasks\WJCWK.job => Moved successfully.
    C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd => Moved successfully.
    C:\Users\david et isa\AppData\Roaming\WJCWK.exe => Moved successfully.
    C:\Windows\System32\Tasks\WJCWK => Moved successfully.
    C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001 => Moved successfully.
    C:\Users\david et isa\Desktop\chrome.lnk => Moved successfully.
    C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => Moved successfully.
    C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => Moved successfully.
    C:\Program Files (x86)\Setup Support for SearchProtect => Moved successfully.

    "C:\ProgramData\SUNEncoCu" directory move:

    Could not move "C:\ProgramData\SUNEncoCu\info.dat" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\ptcnBmD.dat" => Scheduled to move on reboot.
    C:\ProgramData\SUNEncoCu\ptcnBmD.exe => Moved successfully.
    C:\ProgramData\SUNEncoCu\ptcnBmD.exe.config => Moved successfully.
    Could not move "C:\ProgramData\SUNEncoCu\dat\KUvDuZfu.dll" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\dat\mddjUhcIOHj.exe" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\dat\mddjUhcIOHj.exe.config" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\dat\rPSuYIWKf.dll" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\dat\uSNOVRGZE.exe" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu\dat\uSNOVRGZE.exe.config" => Scheduled to move on reboot.
    Could not move "C:\ProgramData\SUNEncoCu" directory. => Scheduled to move on reboot.

    C:\Users\david et isa\AppData\Roaming\WJCWK => Moved successfully.
    "C:\Users\david et isa\AppData\Roaming\WJCWK.exe" => File/Directory not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1709404D-EC00-4E4E-9176-4CE5221B978F}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1709404D-EC00-4E4E-9176-4CE5221B978F}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-10_user" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3}" => Key deleted successfully.
    C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27614737-2DBC-4336-B2DB-09D60E4E890A}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27614737-2DBC-4336-B2DB-09D60E4E890A}" => Key deleted successfully.
    C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{296F6012-F246-4B8F-8F71-026E1002B89D}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{296F6012-F246-4B8F-8F71-026E1002B89D}" => Key deleted successfully.
    C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E73FDAB-A07C-4374-A957-25224AB6AE44}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E73FDAB-A07C-4374-A957-25224AB6AE44}" => Key deleted successfully.
    C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}" => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BE31162-BE93-4139-B857-E73EB42BFE9F} => Key not found.
    C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task not found.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartWeb Upgrade Trigger Task => Key not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4D809E02-6A32-47D7-90F4-CF64B6D3295C}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4D809E02-6A32-47D7-90F4-CF64B6D3295C}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-1-6" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-6" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5A20EF2E-4EB9-4CC8-970C-47CFB40A9853}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A20EF2E-4EB9-4CC8-970C-47CFB40A9853}" => Key deleted successfully.
    C:\Windows\System32\Tasks\WJCWK not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WJCWK" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{643F10DD-BBC0-46D6-B44C-3AACF725A4AD}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{643F10DD-BBC0-46D6-B44C-3AACF725A4AD}" => Key deleted successfully.
    C:\Windows\System32\Tasks\APSnotifierPP1 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A058289E-7723-40D0-B497-6FEB03FEB17A}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A058289E-7723-40D0-B497-6FEB03FEB17A}" => Key deleted successfully.
    C:\Windows\System32\Tasks\GIZGA not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GIZGA" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A77213A5-347A-4ADA-988A-02965808E024}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A77213A5-347A-4ADA-988A-02965808E024}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-7" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B20E6615-6E11-447F-A579-81D8E67B4388}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B20E6615-6E11-447F-A579-81D8E67B4388}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-5_user" => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7E9E8B0-1207-462B-A163-EF8443088B10} => Key not found.
    C:\Windows\System32\Tasks\WindApp Update not found.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update => Key not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B949BE6E-5B20-4CBC-9F41-2A03C1F623DC}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B949BE6E-5B20-4CBC-9F41-2A03C1F623DC}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-1-7" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-11" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A}" => Key deleted successfully.
    C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-5" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EFFB0701-745E-4FDC-AE64-7DC1221C43E5}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFFB0701-745E-4FDC-AE64-7DC1221C43E5}" => Key deleted successfully.
    C:\Windows\System32\Tasks\BlockAndSurf Update not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BlockAndSurf Update" => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} => Key not found.
    C:\Windows\System32\Tasks\Selection Tools Update not found.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update => Key not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD7CC429-099A-45B5-B749-B085D820D175}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD7CC429-099A-45B5-B749-B085D820D175}" => Key deleted successfully.
    C:\Windows\System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7068C6D2-E26B-44FB-BD08-39EE25CE4465}" => Key deleted successfully.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job not found.
    C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job not found.
    C:\Windows\Tasks\APSnotifierPP1.job not found.
    C:\Windows\Tasks\BlockAndSurf Update.job not found.
    C:\Windows\Tasks\GIZGA.job not found.
    C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
    C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.
    C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => Moved successfully.
    C:\Windows\Tasks\WJCWK.job not found.

    voilà, j'attends les consignes suivantes...
    Merci encore de m'aider.

    David
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Scan Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    0

Discussions similaires

Message "Un bloqueur de publicité empêche la lecture..."
pistouri -
pistouri -

0 réponse
jeux affichés sur le mauvais ecran
Julie22 -
Elia -

5 réponses