Invasion de publicités sur mon écran

davidm84 -  
Bonjour à tous,
Petit nouveau sur ce forum, je viens demander l'aide d'un (ou d'une) spécialiste dans les traitements d'invasion de pub.
Suite à un clic malheureux lors de surf sur internet, je me retrouve envahi de pub qui cachent une partie de mon écran et me font perdre un temps fou pour les fermer. Donc je me suis déjà penché sur les questions résolues antérieures et cela m'a permis de télécharger adwcleaner et de lancer un scan. Si j'ai bien compris je dois copier ici le rapport (je mets le dernier qui date de qq jours). Allez, je me lance ...

# AdwCleaner v4.109 - Rapport créé le 25/01/2015 à 17:45:56
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-25.1 [Live]
# Système d'exploitation : Windows 8 (64 bits)
# Nom d'utilisateur : david et isa - PCNOUS
# Exécuté depuis : C:\Users\david et isa\Downloads\adwcleaner_4.109 (2).exe
# Option : Scanner

***** [ Services ] *****

Service Présent : globalUpdate
Service Présent : globalUpdatem
Service Présent : ccnfd_1_10_0_6

***** [ Fichiers / Dossiers ] *****

Dossier Présent : C:\Program Files (x86)\globalUpdate
Dossier Présent : C:\Program Files (x86)\Object Browser
Dossier Présent : C:\Program Files (x86)\Object Browser
Dossier Présent : C:\ProgramData\Browser
Dossier Présent : C:\Users\david et isa\AppData\Local\CrashRpt
Dossier Présent : C:\Users\david et isa\AppData\Local\globalUpdate
Dossier Présent : C:\Users\david et isa\AppData\Local\ZombieNews
Dossier Présent : C:\Users\david et isa\AppData\LocalLow\Object Browser
Dossier Présent : C:\Users\david et isa\AppData\LocalLow\Object Browser
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Fichier Présent : C:\Users\david et isa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Tâches planifiées ] *****

Tâche Présente : globalUpdateUpdateTaskMachineCore
Tâche Présente : globalUpdateUpdateTaskMachineUA
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-1
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-2
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-5
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-5_user
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-6
Tâche Présente : 973ab9e7-0690-460d-9aba-a5201564b41e-7

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Présente : HKCU\Software\AppDataLow\Software\Crossrider
Clé Présente : HKCU\Software\AppDataLow\Software\Object Browser
Clé Présente : HKCU\Software\AppDataLow\Software\Object Browser
Clé Présente : HKCU\Software\GlobalUpdate
Clé Présente : HKCU\Software\InstalledBrowserExtensions
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311281150}
Clé Présente : [x64] HKCU\Software\GlobalUpdate
Clé Présente : [x64] HKCU\Software\InstalledBrowserExtensions
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311281150}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Présente : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Clé Présente : HKLM\SOFTWARE\GlobalUpdate
Clé Présente : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{109e4fb8-28b8-449b-9de7-3f8c0d40b566}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1824b74f-f317-40f6-821c-52cbe21ea124}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d5f2e83-76f2-4c48-95ee-e63aa4c8a92b}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d9c644cd-afc3-4e9b-912f-d9e80f0bbe6c}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser
Clé Présente : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Présente : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Présente : HKLM\SOFTWARE\Object Browser
Clé Présente : HKLM\SOFTWARE\Object Browser
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311281150}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Clé Présente : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{109e4fb8-28b8-449b-9de7-3f8c0d40b566}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1824b74f-f317-40f6-821c-52cbe21ea124}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d5f2e83-76f2-4c48-95ee-e63aa4c8a92b}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d9c644cd-afc3-4e9b-912f-d9e80f0bbe6c}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}
Donnée Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Donnée Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=localhost:44413
Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Selection Tools]

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.17183

-\\ Google Chrome v40.0.2214.91

*************************

AdwCleaner[R0].txt - [29054 octets] - [20/01/2015 17:48:29]
AdwCleaner[R1].txt - [11346 octets] - [25/01/2015 17:31:38]
AdwCleaner[R2].txt - [11411 octets] - [25/01/2015 17:39:08]
AdwCleaner[R3].txt - [11221 octets] - [25/01/2015 17:45:56]
AdwCleaner[S0].txt - [26027 octets] - [20/01/2015 17:51:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [11343 octets] ##########

et voilà !
Merci d'avance à ceux qui pourront m'indiquer comment faire maintenant pour supprimer toutes ces fenêtres.
Bonne journée à tous.
David

5 réponses

  1.  Malekal_morte- Modérateur
    Salut,

    Fais nettoyer sur AdwCleaner
    Donne le rapport puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    * FRST.txt
    * Shortcut.txt
    * Additionnal.txt

    Envoie comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

    0
    2. Malekal_morte- Modérateur
      Voici la correction à effectuer avec FRST.
      Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

      Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
      Copie/colle dedans ce qui suit :

      BHO: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll ()
      BHO-x32: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187.dll ()
      R2 mailUpdate; C:\ProgramData\MailUpdate\mailUpdate.exe [764416 2015-01-05] (Skytech Co., Ltd.) [File not signed]
      R2 ptcnBmD; C:\ProgramData\SUNEncoCu\ptcnBmD.exe [2733872 2015-01-20] (Time Lapse Solutions)
      S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
      R2 serverca; C:\Users\david et isa\AppData\Local\ConvertAd\CASrv.exe [92672 2015-01-30] () [File not signed]
      R2 servervo; C:\Users\david et isa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-30] () [File not signed] <==== ATTENTION
      R2 SWUpdater; C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
      R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-30] (SysTool PasSame LIMITED) [File not signed]
      R2 webinstrNHKT; C:\Windows\system32\Drivers\webinstrNHKT.sys [50264 2015-01-30] ()
      2015-01-30 10:53 - 2015-01-30 10:53 - 00001102 _____ () C:\Users\david et isa\Desktop\Continue Live Installation.lnk
      2015-01-30 10:43 - 2015-01-30 10:44 - 00040562 _____ () C:\Users\david et isa\Desktop\Addition.txt
      2015-01-30 10:41 - 2015-01-30 11:12 - 00029224 _____ () C:\Users\david et isa\Desktop\FRST.txt
      2015-01-30 10:38 - 2015-01-30 11:06 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
      2015-01-30 10:38 - 2015-01-30 11:06 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
      2015-01-30 10:38 - 2015-01-30 11:05 - 00001049 _____ () C:\Users\david et isa\Desktop\AnyProtect.lnk
      2015-01-30 10:38 - 2015-01-30 10:38 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
      2015-01-30 10:35 - 2015-01-30 10:38 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
      2015-01-30 10:35 - 2015-01-30 10:35 - 00613057 _____ (CMI Limited) C:\Users\david et isa\AppData\Local\nsb3FBB.tmp
      2015-01-30 10:35 - 2015-01-30 10:35 - 00000000 __SHD () C:\Users\david et isa\AppData\Roaming\AnyProtectEx
      2015-01-30 10:34 - 2015-01-30 10:53 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ConvertAd
      2015-01-30 10:34 - 2015-01-30 10:34 - 00050264 _____ () C:\Windows\system32\Drivers\webinstrNHKT.sys
      2015-01-30 10:34 - 2015-01-30 10:34 - 00003106 _____ () C:\Windows\System32\Tasks\BlockAndSurf Update
      2015-01-30 10:34 - 2015-01-30 10:34 - 00001678 _____ () C:\Windows\patsearch.bin
      2015-01-30 10:34 - 2015-01-30 10:34 - 00000452 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
      2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
      2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____D () C:\Program Files (x86)\ver0BlockAndSurf
      2015-01-30 10:32 - 2015-01-30 11:11 - 00000000 ____D () C:\FRST
      2015-01-30 10:32 - 2015-01-30 10:36 - 00000000 ____D () C:\Users\david et isa\AppData\Local\gmsd_fr_163
      2015-01-30 10:32 - 2015-01-30 10:32 - 00004058 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
      2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Users\david et isa\AppData\Local\SmartWeb
      2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_163
      2015-01-30 10:30 - 2015-01-30 10:30 - 02130432 _____ (Farbar) C:\Users\david et isa\Desktop\FRST64.exe
      2015-01-30 10:21 - 2015-01-30 10:21 - 00000000 ____D () C:\Users\david et isa\AppData\Local\wincheck
      2015-01-30 10:19 - 2015-01-30 10:19 - 00001023 _____ () C:\Users\david et isa\Desktop\NZBPlayer.lnk
      2015-01-30 10:19 - 2015-01-30 10:19 - 00000970 _____ () C:\Users\david et isa\Desktop\NZBMovies.lnk
      2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer
      2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
      2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Program Files (x86)\NZBPlayer
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\VOPackage
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\omiga-plus
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\MailUpdate
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Local\Weather_Protector_LLC
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
      2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\MailUpdate
      2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
      2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Local\StormWatch
      2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Program Files (x86)\StormWatch
      2015-01-30 10:16 - 2015-01-30 10:16 - 00003782 _____ () C:\Windows\System32\Tasks\Selection Tools Update
      2015-01-30 10:16 - 2015-01-30 10:16 - 00003748 _____ () C:\Windows\System32\Tasks\WindApp Update
      2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.installation.log
      2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log
      2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\WTools
      2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Store
      2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Nosibay
      2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
      2015-01-30 10:14 - 2015-01-30 10:16 - 00005813 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log
      2015-01-30 10:14 - 2015-01-30 10:16 - 00001253 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log
      2015-01-30 10:14 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6
      2015-01-30 10:14 - 2015-01-30 10:14 - 00005480 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5
      2015-01-30 10:14 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job
      2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job
      2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job
      2015-01-30 10:14 - 2015-01-30 10:14 - 00000097 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log
      2015-01-30 10:13 - 2015-01-30 11:13 - 00005548 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job
      2015-01-30 10:13 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7
      2015-01-30 10:13 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job
      2015-01-30 10:13 - 2015-01-30 10:13 - 00008552 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6
      2015-01-30 10:13 - 2015-01-30 10:13 - 00008216 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7
      2015-01-30 10:13 - 2015-01-30 10:13 - 00005212 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job
      2015-01-30 10:13 - 2015-01-30 10:13 - 00000000 ____D () C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820
      2015-01-30 10:12 - 2015-01-30 11:13 - 00002142 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job
      2015-01-30 10:12 - 2015-01-30 10:17 - 00000990 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
      2015-01-30 10:12 - 2015-01-30 10:17 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
      2015-01-30 10:12 - 2015-01-30 10:14 - 00000000 ____D () C:\Program Files (x86)\HQCinema Pro 2.1V30.01
      2015-01-30 10:12 - 2015-01-30 10:12 - 01970136 _____ (HQ CinemaV30.01) C:\Users\david et isa\AppData\Roaming\GIZGA.exe
      2015-01-30 10:12 - 2015-01-30 10:12 - 00008218 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11
      2015-01-30 10:12 - 2015-01-30 10:12 - 00005214 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job
      2015-01-30 10:12 - 2015-01-30 10:12 - 00004394 _____ () C:\Windows\System32\Tasks\GIZGA
      2015-01-30 10:12 - 2015-01-30 10:12 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
      2015-01-30 10:12 - 2015-01-30 10:12 - 00003726 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
      2015-01-30 10:12 - 2015-01-30 10:12 - 00001378 _____ () C:\Windows\Tasks\GIZGA.job
      2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Users\david et isa\AppData\Local\globalUpdate
      2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
      2015-01-25 17:58 - 2015-01-30 10:06 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ZombieNews
      2015-01-25 17:58 - 2015-01-25 17:58 - 00000000 ____D () C:\ProgramData\Browser
      2015-01-22 07:36 - 2015-01-30 07:36 - 00001378 _____ () C:\Windows\Tasks\WJCWK.job
      2015-01-22 07:36 - 2015-01-22 07:37 - 00000000 ____D () C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd
      2015-01-22 07:36 - 2015-01-22 07:36 - 02020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
      2015-01-22 07:36 - 2015-01-22 07:36 - 00004394 _____ () C:\Windows\System32\Tasks\WJCWK
      2015-01-20 16:36 - 2015-01-20 20:05 - 00003288 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001
      2015-01-20 15:54 - 2015-01-30 10:18 - 00002402 _____ () C:\Users\david et isa\Desktop\chrome.lnk
      2015-01-20 14:53 - 2015-01-20 14:53 - 00003178 _____ () C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}
      2015-01-20 12:55 - 2015-01-20 12:55 - 00003112 _____ () C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}
      2015-01-20 12:50 - 2015-01-20 14:56 - 00000000 ____D () C:\Program Files (x86)\Setup Support for SearchProtect
      2015-01-20 12:12 - 2015-01-20 12:17 - 00000000 ____D () C:\ProgramData\SUNEncoCu
      2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\david et isa\AppData\Roaming\WJCWK
      2015-01-22 07:36 - 2015-01-22 07:36 - 2020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
      Task: {1709404D-EC00-4E4E-9176-4CE5221B978F} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3} - System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
      Task: {27614737-2DBC-4336-B2DB-09D60E4E890A} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
      Task: {296F6012-F246-4B8F-8F71-026E1002B89D} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
      Task: {2E73FDAB-A07C-4374-A957-25224AB6AE44} - System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => pcalua.exe -a "C:\Users\david et isa\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=amt
      Task: {4BE31162-BE93-4139-B857-E73EB42BFE9F} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\david et isa\AppData\Local\SmartWeb\SmartWebHelper.exe [2014-12-31] (SoftBrain Technologies Ltd.)
      Task: {4D809E02-6A32-47D7-90F4-CF64B6D3295C} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {5A20EF2E-4EB9-4CC8-970C-47CFB40A9853} - System32\Tasks\WJCWK => C:\Users\david et isa\AppData\Roaming\WJCWK.exe [2015-01-22] (ObjectB) <==== ATTENTION
      Task: {643F10DD-BBC0-46D6-B44C-3AACF725A4AD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-01-30] (AnyProtect.com) <==== ATTENTION
      Task: {A058289E-7723-40D0-B497-6FEB03FEB17A} - System32\Tasks\GIZGA => C:\Users\david et isa\AppData\Roaming\GIZGA.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {A77213A5-347A-4ADA-988A-02965808E024} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {B20E6615-6E11-447F-A579-81D8E67B4388} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {B7E9E8B0-1207-462B-A163-EF8443088B10} - System32\Tasks\WindApp Update => C:\Users\david et isa\AppData\Roaming\Store\WindApp\WindApp Update.exe [2014-11-28] (Nosibay) <==== ATTENTION
      Task: {B949BE6E-5B20-4CBC-9F41-2A03C1F623DC} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
      Task: {DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ
      Task: {EFFB0701-745E-4FDC-AE64-7DC1221C43E5} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe [2015-01-30] () <==== ATTENTION
      Task: {F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} - System32\Tasks\Selection Tools Update => C:\Users\david et isa\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2014-12-16] (Nosibay)
      Task: {FD7CC429-099A-45B5-B749-B085D820D175} - System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => pcalua.exe -a E:\MSWord\INSTMSIW.EXE -d E:\MSWord
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe <==== ATTENTION
      Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe <==== ATTENTION
      Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
      Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
      Task: C:\Windows\Tasks\GIZGA.job => C:\Users\david et isa\AppData\Roaming\GIZGA.exe <==== ATTENTION
      Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
      Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
      Task: C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
      Task: C:\Windows\Tasks\WJCWK.job => C:\Users\david et isa\AppData\Roaming\WJCWK.exe <==== ATTENTION

      Une fois, le texte coller dans le bloc-note.
      Menu Fichier puis Enregistrer sous.
      A gauche, place toi sur le bureau.
      Dans le champs en bas, nom du fichier mets : fixlist.txt
      Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

      Relance FRST et clic sur le bouton Fix
      Selon comment un redémarrage est nécessaire (pas obligatoire).
      Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

      Redémarre l'ordinateur

      0
      1. davidm84 Auteur
        me revoilà
        j'ai fait ce qui est indiqué ci dessus, sauf que l'ordi s'est relancé automatiquement apres avoir coller les éléments dans le notepad. Du coup je n'ai pas eu de texte qui est apparu à l'écran mais un fichier "fixlog" enregistré sur le bureau en lieu et place du "fixlist". Donc je vous colle ici ce fichier, vous me direz si c'est bon, je suis sceptique...

        Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-01-2015
        Ran by david et isa at 2015-01-30 18:06:09 Run:1
        Running from C:\Users\david et isa\Desktop
        Loaded Profiles: david et isa (Available profiles: david et isa)
        Boot Mode: Normal
        ==============================================

        Content of fixlist:
        *****************
        BHO: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll ()
        BHO-x32: BlockAndSurf -> {C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB} -> C:\Program Files (x86)\ver0BlockAndSurf\187.dll ()
        R2 mailUpdate; C:\ProgramData\MailUpdate\mailUpdate.exe [764416 2015-01-05] (Skytech Co., Ltd.) [File not signed]
        R2 ptcnBmD; C:\ProgramData\SUNEncoCu\ptcnBmD.exe [2733872 2015-01-20] (Time Lapse Solutions)
        S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
        R2 serverca; C:\Users\david et isa\AppData\Local\ConvertAd\CASrv.exe [92672 2015-01-30] () [File not signed]
        R2 servervo; C:\Users\david et isa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-30] () [File not signed] <==== ATTENTION
        R2 SWUpdater; C:\Program Files (x86)\StormWatch\SWUpdaterSvc.exe [17584 2014-11-22] (Weather Protector LLC)
        R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-30] (SysTool PasSame LIMITED) [File not signed]
        R2 webinstrNHKT; C:\Windows\system32\Drivers\webinstrNHKT.sys [50264 2015-01-30] ()
        2015-01-30 10:53 - 2015-01-30 10:53 - 00001102 _____ () C:\Users\david et isa\Desktop\Continue Live Installation.lnk
        2015-01-30 10:43 - 2015-01-30 10:44 - 00040562 _____ () C:\Users\david et isa\Desktop\Addition.txt
        2015-01-30 10:41 - 2015-01-30 11:12 - 00029224 _____ () C:\Users\david et isa\Desktop\FRST.txt
        2015-01-30 10:38 - 2015-01-30 11:06 - 00002822 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
        2015-01-30 10:38 - 2015-01-30 11:06 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
        2015-01-30 10:38 - 2015-01-30 11:05 - 00001049 _____ () C:\Users\david et isa\Desktop\AnyProtect.lnk
        2015-01-30 10:38 - 2015-01-30 10:38 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
        2015-01-30 10:35 - 2015-01-30 10:38 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
        2015-01-30 10:35 - 2015-01-30 10:35 - 00613057 _____ (CMI Limited) C:\Users\david et isa\AppData\Local\nsb3FBB.tmp
        2015-01-30 10:35 - 2015-01-30 10:35 - 00000000 __SHD () C:\Users\david et isa\AppData\Roaming\AnyProtectEx
        2015-01-30 10:34 - 2015-01-30 10:53 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ConvertAd
        2015-01-30 10:34 - 2015-01-30 10:34 - 00050264 _____ () C:\Windows\system32\Drivers\webinstrNHKT.sys
        2015-01-30 10:34 - 2015-01-30 10:34 - 00003106 _____ () C:\Windows\System32\Tasks\BlockAndSurf Update
        2015-01-30 10:34 - 2015-01-30 10:34 - 00001678 _____ () C:\Windows\patsearch.bin
        2015-01-30 10:34 - 2015-01-30 10:34 - 00000452 _____ () C:\Windows\Tasks\BlockAndSurf Update.job
        2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
        2015-01-30 10:34 - 2015-01-30 10:34 - 00000000 ____D () C:\Program Files (x86)\ver0BlockAndSurf
        2015-01-30 10:32 - 2015-01-30 11:11 - 00000000 ____D () C:\FRST
        2015-01-30 10:32 - 2015-01-30 10:36 - 00000000 ____D () C:\Users\david et isa\AppData\Local\gmsd_fr_163
        2015-01-30 10:32 - 2015-01-30 10:32 - 00004058 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
        2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Users\david et isa\AppData\Local\SmartWeb
        2015-01-30 10:32 - 2015-01-30 10:32 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_163
        2015-01-30 10:30 - 2015-01-30 10:30 - 02130432 _____ (Farbar) C:\Users\david et isa\Desktop\FRST64.exe
        2015-01-30 10:21 - 2015-01-30 10:21 - 00000000 ____D () C:\Users\david et isa\AppData\Local\wincheck
        2015-01-30 10:19 - 2015-01-30 10:19 - 00001023 _____ () C:\Users\david et isa\Desktop\NZBPlayer.lnk
        2015-01-30 10:19 - 2015-01-30 10:19 - 00000970 _____ () C:\Users\david et isa\Desktop\NZBMovies.lnk
        2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer
        2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
        2015-01-30 10:19 - 2015-01-30 10:19 - 00000000 ____D () C:\Program Files (x86)\NZBPlayer
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\VOPackage
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\omiga-plus
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\MailUpdate
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\Users\david et isa\AppData\Local\Weather_Protector_LLC
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
        2015-01-30 10:18 - 2015-01-30 10:18 - 00000000 ____D () C:\ProgramData\MailUpdate
        2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
        2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Users\david et isa\AppData\Local\StormWatch
        2015-01-30 10:17 - 2015-01-30 10:17 - 00000000 ____D () C:\Program Files (x86)\StormWatch
        2015-01-30 10:16 - 2015-01-30 10:16 - 00003782 _____ () C:\Windows\System32\Tasks\Selection Tools Update
        2015-01-30 10:16 - 2015-01-30 10:16 - 00003748 _____ () C:\Windows\System32\Tasks\WindApp Update
        2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.installation.log
        2015-01-30 10:16 - 2015-01-30 10:16 - 00000078 _____ () C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log
        2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\WTools
        2015-01-30 10:16 - 2015-01-30 10:16 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Store
        2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Nosibay
        2015-01-30 10:15 - 2015-01-30 10:15 - 00000000 ____D () C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
        2015-01-30 10:14 - 2015-01-30 10:16 - 00005813 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log
        2015-01-30 10:14 - 2015-01-30 10:16 - 00001253 _____ () C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log
        2015-01-30 10:14 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6
        2015-01-30 10:14 - 2015-01-30 10:14 - 00005480 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5
        2015-01-30 10:14 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job
        2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job
        2015-01-30 10:14 - 2015-01-30 10:14 - 00002476 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job
        2015-01-30 10:14 - 2015-01-30 10:14 - 00000097 _____ () C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log
        2015-01-30 10:13 - 2015-01-30 11:13 - 00005548 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job
        2015-01-30 10:13 - 2015-01-30 10:14 - 00006172 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7
        2015-01-30 10:13 - 2015-01-30 10:14 - 00003168 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job
        2015-01-30 10:13 - 2015-01-30 10:13 - 00008552 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6
        2015-01-30 10:13 - 2015-01-30 10:13 - 00008216 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7
        2015-01-30 10:13 - 2015-01-30 10:13 - 00005212 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job
        2015-01-30 10:13 - 2015-01-30 10:13 - 00000000 ____D () C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820
        2015-01-30 10:12 - 2015-01-30 11:13 - 00002142 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job
        2015-01-30 10:12 - 2015-01-30 10:17 - 00000990 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
        2015-01-30 10:12 - 2015-01-30 10:17 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
        2015-01-30 10:12 - 2015-01-30 10:14 - 00000000 ____D () C:\Program Files (x86)\HQCinema Pro 2.1V30.01
        2015-01-30 10:12 - 2015-01-30 10:12 - 01970136 _____ (HQ CinemaV30.01) C:\Users\david et isa\AppData\Roaming\GIZGA.exe
        2015-01-30 10:12 - 2015-01-30 10:12 - 00008218 _____ () C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11
        2015-01-30 10:12 - 2015-01-30 10:12 - 00005214 _____ () C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job
        2015-01-30 10:12 - 2015-01-30 10:12 - 00004394 _____ () C:\Windows\System32\Tasks\GIZGA
        2015-01-30 10:12 - 2015-01-30 10:12 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
        2015-01-30 10:12 - 2015-01-30 10:12 - 00003726 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
        2015-01-30 10:12 - 2015-01-30 10:12 - 00001378 _____ () C:\Windows\Tasks\GIZGA.job
        2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Users\david et isa\AppData\Local\globalUpdate
        2015-01-30 10:12 - 2015-01-30 10:12 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
        2015-01-25 17:58 - 2015-01-30 10:06 - 00000000 ____D () C:\Users\david et isa\AppData\Local\ZombieNews
        2015-01-25 17:58 - 2015-01-25 17:58 - 00000000 ____D () C:\ProgramData\Browser
        2015-01-22 07:36 - 2015-01-30 07:36 - 00001378 _____ () C:\Windows\Tasks\WJCWK.job
        2015-01-22 07:36 - 2015-01-22 07:37 - 00000000 ____D () C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd
        2015-01-22 07:36 - 2015-01-22 07:36 - 02020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
        2015-01-22 07:36 - 2015-01-22 07:36 - 00004394 _____ () C:\Windows\System32\Tasks\WJCWK
        2015-01-20 16:36 - 2015-01-20 20:05 - 00003288 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001
        2015-01-20 15:54 - 2015-01-30 10:18 - 00002402 _____ () C:\Users\david et isa\Desktop\chrome.lnk
        2015-01-20 14:53 - 2015-01-20 14:53 - 00003178 _____ () C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}
        2015-01-20 12:55 - 2015-01-20 12:55 - 00003112 _____ () C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}
        2015-01-20 12:50 - 2015-01-20 14:56 - 00000000 ____D () C:\Program Files (x86)\Setup Support for SearchProtect
        2015-01-20 12:12 - 2015-01-20 12:17 - 00000000 ____D () C:\ProgramData\SUNEncoCu
        2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\david et isa\AppData\Roaming\WJCWK
        2015-01-22 07:36 - 2015-01-22 07:36 - 2020328 _____ (ObjectB) C:\Users\david et isa\AppData\Roaming\WJCWK.exe
        Task: {1709404D-EC00-4E4E-9176-4CE5221B978F} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3} - System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
        Task: {27614737-2DBC-4336-B2DB-09D60E4E890A} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
        Task: {296F6012-F246-4B8F-8F71-026E1002B89D} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-30] (globalUpdate) <==== ATTENTION
        Task: {2E73FDAB-A07C-4374-A957-25224AB6AE44} - System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => pcalua.exe -a "C:\Users\david et isa\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=amt
        Task: {4BE31162-BE93-4139-B857-E73EB42BFE9F} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\david et isa\AppData\Local\SmartWeb\SmartWebHelper.exe [2014-12-31] (SoftBrain Technologies Ltd.)
        Task: {4D809E02-6A32-47D7-90F4-CF64B6D3295C} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {5A20EF2E-4EB9-4CC8-970C-47CFB40A9853} - System32\Tasks\WJCWK => C:\Users\david et isa\AppData\Roaming\WJCWK.exe [2015-01-22] (ObjectB) <==== ATTENTION
        Task: {643F10DD-BBC0-46D6-B44C-3AACF725A4AD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-01-30] (AnyProtect.com) <==== ATTENTION
        Task: {A058289E-7723-40D0-B497-6FEB03FEB17A} - System32\Tasks\GIZGA => C:\Users\david et isa\AppData\Roaming\GIZGA.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {A77213A5-347A-4ADA-988A-02965808E024} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {B20E6615-6E11-447F-A579-81D8E67B4388} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {B7E9E8B0-1207-462B-A163-EF8443088B10} - System32\Tasks\WindApp Update => C:\Users\david et isa\AppData\Roaming\Store\WindApp\WindApp Update.exe [2014-11-28] (Nosibay) <==== ATTENTION
        Task: {B949BE6E-5B20-4CBC-9F41-2A03C1F623DC} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe [2015-01-30] (HQ CinemaV30.01) <==== ATTENTION
        Task: {DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A} - System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe [2015-01-30] (HQ
        Task: {EFFB0701-745E-4FDC-AE64-7DC1221C43E5} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe [2015-01-30] () <==== ATTENTION
        Task: {F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} - System32\Tasks\Selection Tools Update => C:\Users\david et isa\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2014-12-16] (Nosibay)
        Task: {FD7CC429-099A-45B5-B749-B085D820D175} - System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => pcalua.exe -a E:\MSWord\INSTMSIW.EXE -d E:\MSWord
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-6.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-1-7.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-10.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-11.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-5.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-6.exe <==== ATTENTION
        Task: C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => C:\Program Files (x86)\HQCinema Pro 2.1V30.01\921ff0a1-02ec-4964-b52f-27633c035372-7.exe <==== ATTENTION
        Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
        Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
        Task: C:\Windows\Tasks\GIZGA.job => C:\Users\david et isa\AppData\Roaming\GIZGA.exe <==== ATTENTION
        Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
        Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
        Task: C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
        Task: C:\Windows\Tasks\WJCWK.job => C:\Users\david et isa\AppData\Roaming\WJCWK.exe <==== ATTENTION

        *****************

        "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
        "HKCR\CLSID\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
        "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
        "HKCR\Wow6432Node\CLSID\{C330D4EC-AFE2-9A69-CAAD-C5E77FABCBCB}" => Key deleted successfully.
        mailUpdate => Service not found.
        ptcnBmD => Unable to stop service
        ptcnBmD => Service deleted successfully.
        rpcapd => Service not found.
        serverca => Service not found.
        servervo => Service not found.
        SWUpdater => Service not found.
        WindowsMangerProtect => Unable to stop service
        WindowsMangerProtect => Service deleted successfully.
        webinstrNHKT => Unable to stop service
        webinstrNHKT => Service deleted successfully.
        "C:\Users\david et isa\Desktop\Continue Live Installation.lnk" => File/Directory not found.
        C:\Users\david et isa\Desktop\Addition.txt => Moved successfully.
        C:\Users\david et isa\Desktop\FRST.txt => Moved successfully.
        C:\Windows\System32\Tasks\APSnotifierPP1 => Moved successfully.
        C:\Windows\Tasks\APSnotifierPP1.job => Moved successfully.
        "C:\Users\david et isa\Desktop\AnyProtect.lnk" => File/Directory not found.
        "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup" => File/Directory not found.
        C:\Program Files (x86)\AnyProtectEx => Moved successfully.
        C:\Users\david et isa\AppData\Local\nsb3FBB.tmp => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\AnyProtectEx => Moved successfully.
        "C:\Users\david et isa\AppData\Local\ConvertAd" => File/Directory not found.
        C:\Windows\system32\Drivers\webinstrNHKT.sys => Moved successfully.
        C:\Windows\System32\Tasks\BlockAndSurf Update => Moved successfully.
        C:\Windows\patsearch.bin => Moved successfully.
        C:\Windows\Tasks\BlockAndSurf Update.job => Moved successfully.
        C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf => Moved successfully.

        "C:\Program Files (x86)\ver0BlockAndSurf" directory move:

        C:\Program Files (x86)\ver0BlockAndSurf\187.crx => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\187.dat => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\187.dll => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\187.xpi => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\187_x64.dll => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\BlockAndSurf.exe => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.dll => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\sqlite3.dll => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\x64\TandemRunner.exe => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\x64\WdfCoInstaller01009.dll => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\x64\webinstr.inf => Moved successfully.
        C:\Program Files (x86)\ver0BlockAndSurf\x64\webinstrNHKT.sys => Moved successfully.
        Could not move "C:\Program Files (x86)\ver0BlockAndSurf" directory. => Scheduled to move on reboot.

        "C:\FRST" directory move:

        C:\FRST\files => Moved successfully.
        C:\FRST\re => Moved successfully.
        C:\FRST\reb => Moved successfully.
        C:\FRST\users00 => Moved successfully.
        C:\FRST\Quarantine\C\Windows\patsearch.bin.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\Tasks\APSnotifierPP1.job.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\Tasks\BlockAndSurf Update.job.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\System32\Tasks\APSnotifierPP1.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\System32\Tasks\BlockAndSurf Update.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\System32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Windows\System32\Drivers\webinstrNHKT.sys.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\Desktop\Addition.txt.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\Desktop\FRST.txt.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\mov01.swf => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\swfTTi.swf => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\swf\swfx7C.swf => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.quick.results => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.results => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\de.xml => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\en.xml => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\language\fr.xml => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\installer\ab.test.json => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Roaming\AnyProtectEx\installer\tempfile.t => Moved successfully.
        C:\FRST\Quarantine\C\Users\david et isa\AppData\Local\nsb3FBB.tmp.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.crx.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.dat.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.dll.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187.xpi.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\187_x64.dll.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\BlockAndSurf.exe.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.dll.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\sqlite3.dll.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\TandemRunner.exe.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\WdfCoInstaller01009.dll.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\webinstr.inf.xBAD => Moved successfully.
        C:\FRST\Quarantine\C\Program Files (x86)\ver0BlockAndSurf\x64\webinstrNHKT.sys.xBAD => Moved successfully.
        C:\FRST\Logs\Addition_30-01-2015_10-44-39.txt => Moved successfully.
        C:\FRST\Logs\Addition_30-01-2015_11-15-05.txt => Moved successfully.
        C:\FRST\Logs\ct => Moved successfully.
        C:\FRST\Logs\FRST_30-01-2015_10-44-43.txt => Moved successfully.
        C:\FRST\Logs\FRST_30-01-2015_11-19-57.txt => Moved successfully.
        C:\FRST\Hives\BCD => Moved successfully.
        C:\FRST\Hives\default => Moved successfully.
        C:\FRST\Hives\ERDNT.CON => Moved successfully.
        C:\FRST\Hives\ERDNT.EXE => Moved successfully.
        C:\FRST\Hives\ERDNT.INF => Moved successfully.
        C:\FRST\Hives\ERDNTDOS.LOC => Moved successfully.
        C:\FRST\Hives\ERDNTWIN.LOC => Moved successfully.
        C:\FRST\Hives\sam => Moved successfully.
        C:\FRST\Hives\security => Moved successfully.
        C:\FRST\Hives\software => Moved successfully.
        C:\FRST\Hives\system => Moved successfully.
        C:\FRST\Hives\Users\00000002\UsrClass.dat => Moved successfully.
        C:\FRST\Hives\Users\00000001\ntuser.dat => Moved successfully.
        Could not move "C:\FRST" directory. => Scheduled to move on reboot.

        "C:\Users\david et isa\AppData\Local\gmsd_fr_163" => File/Directory not found.
        "C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task" => File/Directory not found.
        "C:\Users\david et isa\AppData\Local\SmartWeb" => File/Directory not found.
        "C:\Program Files (x86)\gmsd_fr_163" => File/Directory not found.
        C:\Users\david et isa\Desktop\FRST64.exe => Moved successfully.

        "C:\Users\david et isa\AppData\Local\wincheck" directory move:

        C:\Users\david et isa\AppData\Local\wincheck\wincheck.exe => Moved successfully.
        Could not move "C:\Users\david et isa\AppData\Local\wincheck" directory. => Scheduled to move on reboot.

        "C:\Users\david et isa\Desktop\NZBPlayer.lnk" => File/Directory not found.
        "C:\Users\david et isa\Desktop\NZBMovies.lnk" => File/Directory not found.
        "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NZBPlayer" => File/Directory not found.
        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer => Moved successfully.
        C:\Program Files (x86)\NZBPlayer => Moved successfully.
        "C:\Users\david et isa\AppData\Roaming\VOPackage" => File/Directory not found.
        C:\Users\david et isa\AppData\Roaming\omiga-plus => Moved successfully.
        "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage" => File/Directory not found.
        C:\Users\david et isa\AppData\Roaming\MailUpdate => Moved successfully.
        "C:\Users\david et isa\AppData\Local\Weather_Protector_LLC" => File/Directory not found.
        C:\ProgramData\WindowsMangerProtect => Moved successfully.
        C:\ProgramData\MailUpdate => Moved successfully.
        "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch" => File/Directory not found.
        "C:\Users\david et isa\AppData\Local\StormWatch" => File/Directory not found.
        "C:\Program Files (x86)\StormWatch" => File/Directory not found.
        "C:\Windows\System32\Tasks\Selection Tools Update" => File/Directory not found.
        "C:\Windows\System32\Tasks\WindApp Update" => File/Directory not found.
        C:\Users\david et isa\AppData\Roaming\WindApp.installation.log => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\Selection Tools.installation.log => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\WTools => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\Store => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\Nosibay => Moved successfully.
        "C:\Users\david et isa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock" => File/Directory not found.
        C:\Users\david et isa\AppData\Roaming\Bubble Dock.installation.log => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\Bubble Dock.boostrap.log => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\WindApp.boostrap.log => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job => Moved successfully.
        C:\Program Files (x86)\774ae2b0-c33b-4e33-af65-2e2542f6f820 => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job => Moved successfully.
        C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully.
        C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully.
        C:\Program Files (x86)\HQCinema Pro 2.1V30.01 => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\GIZGA.exe => Moved successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 => Moved successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job => Moved successfully.
        C:\Windows\System32\Tasks\GIZGA => Moved successfully.
        C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully.
        C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully.
        C:\Windows\Tasks\GIZGA.job => Moved successfully.
        C:\Users\david et isa\AppData\Local\globalUpdate => Moved successfully.
        C:\Program Files (x86)\globalUpdate => Moved successfully.
        C:\Users\david et isa\AppData\Local\ZombieNews => Moved successfully.
        C:\ProgramData\Browser => Moved successfully.
        C:\Windows\Tasks\WJCWK.job => Moved successfully.
        C:\Program Files (x86)\8a8a0755-d96b-461d-be80-7ebf2bb401cd => Moved successfully.
        C:\Users\david et isa\AppData\Roaming\WJCWK.exe => Moved successfully.
        C:\Windows\System32\Tasks\WJCWK => Moved successfully.
        C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-4018433884-1041127222-2307352900-1001 => Moved successfully.
        C:\Users\david et isa\Desktop\chrome.lnk => Moved successfully.
        C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} => Moved successfully.
        C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} => Moved successfully.
        C:\Program Files (x86)\Setup Support for SearchProtect => Moved successfully.

        "C:\ProgramData\SUNEncoCu" directory move:

        Could not move "C:\ProgramData\SUNEncoCu\info.dat" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\ptcnBmD.dat" => Scheduled to move on reboot.
        C:\ProgramData\SUNEncoCu\ptcnBmD.exe => Moved successfully.
        C:\ProgramData\SUNEncoCu\ptcnBmD.exe.config => Moved successfully.
        Could not move "C:\ProgramData\SUNEncoCu\dat\KUvDuZfu.dll" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\dat\mddjUhcIOHj.exe" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\dat\mddjUhcIOHj.exe.config" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\dat\rPSuYIWKf.dll" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\dat\uSNOVRGZE.exe" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu\dat\uSNOVRGZE.exe.config" => Scheduled to move on reboot.
        Could not move "C:\ProgramData\SUNEncoCu" directory. => Scheduled to move on reboot.

        C:\Users\david et isa\AppData\Roaming\WJCWK => Moved successfully.
        "C:\Users\david et isa\AppData\Roaming\WJCWK.exe" => File/Directory not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1709404D-EC00-4E4E-9176-4CE5221B978F}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1709404D-EC00-4E4E-9176-4CE5221B978F}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user => Moved successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-10_user" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F3BEF5F-E0CF-46AD-8667-DCD5747B50B3}" => Key deleted successfully.
        C:\Windows\System32\Tasks\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942} not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E94C7F5A-D2C9-4219-8BA7-CB79C50BD942}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27614737-2DBC-4336-B2DB-09D60E4E890A}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27614737-2DBC-4336-B2DB-09D60E4E890A}" => Key deleted successfully.
        C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{296F6012-F246-4B8F-8F71-026E1002B89D}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{296F6012-F246-4B8F-8F71-026E1002B89D}" => Key deleted successfully.
        C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E73FDAB-A07C-4374-A957-25224AB6AE44}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E73FDAB-A07C-4374-A957-25224AB6AE44}" => Key deleted successfully.
        C:\Windows\System32\Tasks\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0} not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6DB868B6-FB38-41D1-8D37-F1DDDF6EACD0}" => Key deleted successfully.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BE31162-BE93-4139-B857-E73EB42BFE9F} => Key not found.
        C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task not found.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartWeb Upgrade Trigger Task => Key not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4D809E02-6A32-47D7-90F4-CF64B6D3295C}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4D809E02-6A32-47D7-90F4-CF64B6D3295C}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-1-6" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{58D11AD7-DC5D-46A2-B18F-8EBBF88A95A1}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-6" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5A20EF2E-4EB9-4CC8-970C-47CFB40A9853}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A20EF2E-4EB9-4CC8-970C-47CFB40A9853}" => Key deleted successfully.
        C:\Windows\System32\Tasks\WJCWK not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WJCWK" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{643F10DD-BBC0-46D6-B44C-3AACF725A4AD}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{643F10DD-BBC0-46D6-B44C-3AACF725A4AD}" => Key deleted successfully.
        C:\Windows\System32\Tasks\APSnotifierPP1 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A058289E-7723-40D0-B497-6FEB03FEB17A}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A058289E-7723-40D0-B497-6FEB03FEB17A}" => Key deleted successfully.
        C:\Windows\System32\Tasks\GIZGA not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GIZGA" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A77213A5-347A-4ADA-988A-02965808E024}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A77213A5-347A-4ADA-988A-02965808E024}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-7" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B20E6615-6E11-447F-A579-81D8E67B4388}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B20E6615-6E11-447F-A579-81D8E67B4388}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user => Moved successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-5_user" => Key deleted successfully.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7E9E8B0-1207-462B-A163-EF8443088B10} => Key not found.
        C:\Windows\System32\Tasks\WindApp Update not found.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update => Key not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B949BE6E-5B20-4CBC-9F41-2A03C1F623DC}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B949BE6E-5B20-4CBC-9F41-2A03C1F623DC}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-1-7" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D30F9FE3-6D9D-4B26-B7FB-1BC5D11B9644}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-11" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA2AE0A3-B015-44EC-94E9-EE5CA03BA77A}" => Key deleted successfully.
        C:\Windows\System32\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5 not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\921ff0a1-02ec-4964-b52f-27633c035372-5" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EFFB0701-745E-4FDC-AE64-7DC1221C43E5}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFFB0701-745E-4FDC-AE64-7DC1221C43E5}" => Key deleted successfully.
        C:\Windows\System32\Tasks\BlockAndSurf Update not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BlockAndSurf Update" => Key deleted successfully.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6C348B1-2D89-4C7F-97D4-22FFAF27AD47} => Key not found.
        C:\Windows\System32\Tasks\Selection Tools Update not found.
        HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update => Key not found.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD7CC429-099A-45B5-B749-B085D820D175}" => Key deleted successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD7CC429-099A-45B5-B749-B085D820D175}" => Key deleted successfully.
        C:\Windows\System32\Tasks\{7068C6D2-E26B-44FB-BD08-39EE25CE4465} => Moved successfully.
        "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7068C6D2-E26B-44FB-BD08-39EE25CE4465}" => Key deleted successfully.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-6.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-1-7.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-10_user.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-11.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-5_user.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-6.job not found.
        C:\Windows\Tasks\921ff0a1-02ec-4964-b52f-27633c035372-7.job not found.
        C:\Windows\Tasks\APSnotifierPP1.job not found.
        C:\Windows\Tasks\BlockAndSurf Update.job not found.
        C:\Windows\Tasks\GIZGA.job not found.
        C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
        C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.
        C:\Windows\Tasks\HPCeeScheduleFordavid et isa.job => Moved successfully.
        C:\Windows\Tasks\WJCWK.job not found.

        voilà, j'attends les consignes suivantes...
        Merci encore de m'aider.

        David
        0
        2. Malekal_morte- Modérateur
          Scan Malwarebytes (temps : environ 40min de scan):
          ==================================================
          Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
          Mets le à jour puis lance un examen.

          A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
          Redémarre l'ordinateur si besoin.
          Après redémarrage, relance Malwarebytes.
          Vas chercher le rapport dans l'onglet Historique.
          A gauche Journal des examens.
          Doube-clic sur l'examen dans la liste.
          Puis en bas Copier dans le presse papier
          Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
          Clic sur envoyer.
          Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

          0

          Discussions similaires

          Message "Un bloqueur de publicité empêche la lecture..."
          pistouri

          0 réponse
          Quel est le raccourci clavier pour le plein écran ?
          Carotte77

          19 réponses