Comment supprimer winservice86

Résolu

marmarmar -
fanou50750 Messages postés 4 Statut Membre - 3 mars 2015 à 13:38

Bonjour,
Depuis hier un virus s'est installé sur mon ordinateur, j'ai fais plusieurs tentatives d'antivirus comme adwcleaner et de désinstallations mais rien n'y fait il se réinstalle a chaque nouveau démarrage, j'ai cherché des solutions sur les forums mais étant très peu calée en informatique je n'y comprends rien quelqu'un pourrait-il m'aider s'il vous plait

Afficher la suite

4 réponses

Réponse 1 / 4
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712

Salut,

Suis ce tutorial : https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer deux rapports FRST.
Envoie comme expliqué, ces deux rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.
0
1. marmarmar
  
  http://pjjoint.malekal.com/files.php?id=FRST_20150226_y13p10g7d10k6
  
  http://pjjoint.malekal.com/files.php?id=20150226_m13k11n11e11s6
  
  voila les liens des rapports FRST et Addition
  
  0
  1. fanou50750 Messages postés 4 Statut Membre > marmarmar
    
    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
    Ran by stephane (administrator) on STEPHANE-PC on 03-03-2015 13:11:41
    Running from C:\Users\stephane\Downloads
    Loaded Profiles: stephane & UpdatusUser (Available profiles: stephane & UpdatusUser)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
    
    ==================== Processes (Whitelisted) =================
    
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
    
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
    (SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    () C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\jnskAAAF.tmp
    (ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
    (Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
    () C:\Users\stephane\AppData\Everything\ServiceEverything.exe
    (Acer) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
    () C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\nsf53B4.tmpfs
    () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
    () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
    () C:\Users\stephane\AppData\Everything\SearchBase.exe
    () C:\Users\stephane\AppData\Everything\Everything.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
    (Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe
    (iCinema) C:\Program Files (x86)\I - Cinema\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6.exe
    (Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-12.exe
    (Corporate Inc) C:\Program Files (x86)\winservice86\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6.exe
    (Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-10.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
    () C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
    (Orange) C:\Users\stephane\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-6.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
    () C:\Program Files (x86)\SupTab\HpUI.exe
    () C:\Program Files (x86)\SupTab\Loader64.exe
    () C:\Program Files (x86)\SupTab\Loader32.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    (Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    () C:\Users\stephane\AppData\Everything\EverythingLoadHookx64.exe
    (Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    (Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-10.exe
    
    ==================== Registry (Whitelisted) ==================
    
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
    
    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
    HKLM-x32\...\Run: [Tuto4pc] => [X]
    HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Google Update] => C:\Users\stephane\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-25] (Google Inc.)
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [OrangeInside] => C:\Users\stephane\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [1530520 2012-11-16] (Orange)
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Only-search] => C:\Users\stephane\AppData\Local\onlysearch\onlysearch\1.3.15.4\onlysearch.exe
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [WindApp] => "C:\Users\stephane\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Selection Tools] => "C:\Users\stephane\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1001\...\RunOnce: [ScrSav] => C:\Program Files (x86)\eMachines\Screensaver\run_eMachines.exe /default
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\eMachines.scr
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HD Writer.lnk
    ShortcutTarget: HD Writer.lnk -> C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (Panasonic Corporation)
    Startup: C:\Users\stephane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
    ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    
    ==================== Internet (Whitelisted) ====================
    
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
    
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:51237;https=127.0.0.1:51237
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=et1331&r=17361209sn06973755sk5rg731e91q
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=et1331&r=17361209sn06973755sk5rg731e91q
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5354&src=5354
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
    HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
    SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
    SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = https://fr.search.yahoo.com/yhs/?hspart=visicom&hsimp=yhs-mystartdefault1{searchTerms}
    SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
    SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = https://fr.search.yahoo.com/yhs/?hspart=visicom&hsimp=yhs-mystartdefault1{searchTerms}
    SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {58DBEB8E-5E19-41BB-B251-3B5A7AE00CBE} URL = https://www.google.com/webhp{searchTerms}
    BHO: MyStart Toolbar -> {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -> C:\Program Files (x86)\mystarttb\mystartDx64.dll ()
    BHO-x32: Aide pour le lien d'Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
    BHO-x32: No Name -> {1d970ed5-3eda-438d-bffd-715931e2775b} -> No File
    BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
    BHO-x32: MyStart Toolbar -> {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -> C:\Program Files (x86)\mystarttb\mystartDx.dll ()
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
    Toolbar: HKLM - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx64.dll ()
    Toolbar: HKLM-x32 - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll ()
    Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
    Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
    Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {D3028143-6145-4318-99D3-3EDCE54A95A9} - No File
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
    
    FireFox:
    ========
    FF ProfilePath: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default
    FF NewTab: hxxp://isearch.omiga-plus.com/newtab/?type=nt&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B
    FF DefaultSearchEngine: omiga-plus
    FF SearchEngineOrder.1: Web Search
    FF SelectedSearchEngine: omiga-plus
    FF Homepage: hxxp://isearch.omiga-plus.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B
    FF Keyword.URL:
    FF SelectedSearchEngine: Search The Web
    FF Homepage: hxxp://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5354&src=5354
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.Software.com/Software Update;version=3 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll No File
    FF Plugin-x32: @tools.Software.com/Software Update;version=9 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll No File
    FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: @tools.google.com/Google Update;version=3 -> C:\Users\stephane\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: @tools.google.com/Google Update;version=9 -> C:\Users\stephane\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: {@alibaba.com/alisetup;version=1.0} -> C:\Users\stephane\AppData\Local\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll (alibaba)
    FF Plugin ProgramFiles/Appdata: C:\Users\stephane\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
    FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\live-search.xml
    FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\MyOnlineSearch.xml
    FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\orange.xml
    FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\YouGoo.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\omiga-plus.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystarttb.xml
    FF Extension: Fast Start - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\faststartff@gmail.com [2014-12-24]
    FF Extension: jid0zs24wecdcQo0Lp18D7QOV4WSZFojetpack - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\jid0-zs24wecdcQo0Lp18D7QOV4WSZFo@jetpack [2014-11-06]
    FF Extension: MyStart Toolbar - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\{607b689f-7600-45e4-b8e5-887f72dab15c} [2015-03-03]
    FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\faststartff@gmail.com
    FF HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Firefox\Extensions: [lrcsTube@hansanddeta.com] - C:\Program Files (x86)\LyricsTube\FF
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\2e5f942f-4d3c-41b2-a5cd-82a16abe5ffb@1cc60b40-222e-43de-a4dc-6a6b10e51377.com [Not Found]
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\{86979d09-f746-4af6-bea4-fb72b1632ce1} [Not Found]
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\taylorralston@hotmail.com [Not Found]
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com [Not Found]
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com [Not Found]
    FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\3c8f3083-413b-4aa6-ad29-fb93d8982e80@gmail.com [Not Found]
    FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
    StartMenuInternet: FIREFOX.EXE - firefox.exe
    
    Chrome:
    =======
    CHR Profile: C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1
    CHR Extension: (Google Drive) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-26]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-26]
    CHR Extension: (YouTube) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-26]
    CHR Extension: (Google Search) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-26]
    CHR Extension: (Google Wallet) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-26]
    CHR Extension: (Gmail) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-26]
    CHR HKLM-x32\...\Chrome\Extension: [gfkbfjcbkhnmiignagpkiijohkcdkffb] - https://clients2.google.com/service/update2/crx
    StartMenuInternet: Google Chrome - C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
    
    ==================== Services (Whitelisted) =================
    
    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
    
    R2 bofimyvu; C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\jnskAAAF.tmp [131584 2015-02-19] () [File not signed]
    R2 ClaraUpdater; C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [328304 2015-02-23] (ClaraLabs)
    R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [625184 2009-04-19] ()
    S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-02] (globalUpdate) [File not signed]
    S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-02] (globalUpdate) [File not signed]
    R2 Greg_Service; C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe [1150496 2009-06-04] (Acer Incorporated)
    R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-12-24] (Cherished Technololgy LIMITED)
    S2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19720 2015-02-27] ()
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
    R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
    R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [207904 2009-04-19] ()
    R2 ServiceEverything; C:\Users\stephane\AppData\Everything\ServiceEverything.exe [233984 2015-01-09] () [File not signed]
    R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [240160 2009-07-04] (Acer)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [463872 2015-01-19] (SysTool PasSame LIMITED) [File not signed]
    S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [X] <==== ATTENTION
    S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]
    S3 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [X]
    S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
    S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
    R2 zutumuwy; C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\nsf53B4.tmpfs [X]
    
    ==================== Drivers (Whitelisted) ====================
    
    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
    
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
    R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
    S3 StarOpen; No ImagePath
    S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2013-04-24] (LG Electronics Inc.)
    S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2013-04-24] (LG Electronics Inc.)
    S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2013-04-24] (LG Electronics Inc.)
    S3 cpuz134; \??\C:\Users\stephane\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
    S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
    S3 nmwcdcx64; system32\drivers\nmwcdcx64.sys [X]
    S3 nmwcdx64; system32\drivers\nmwcdx64.sys [X]
    S3 PCAMPR4; \??\C:\Windows\system32\PCAMPR4.SYS [X]
    S3 PCANDIS4; \??\C:\Windows\system32\PCANDIS4.SYS [X]
    
    ==================== NetSvcs (Whitelisted) ===================
    
    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
    
    ==================== One Month Created Files and Folders ========
    
    (If an entry is included in the fixlist, the file\folder will be moved.)
    
    2015-03-03 13:01 - 2015-03-03 13:01 - 00013635 _____ () C:\Users\stephane\Desktop\fixlist.txt
    2015-03-03 12:53 - 2015-03-03 12:53 - 00063667 _____ () C:\Users\stephane\Desktop\erreur pc.txt
    2015-03-03 12:46 - 2015-03-03 12:47 - 00063667 _____ () C:\Users\stephane\Downloads\Addition.txt
    2015-03-03 12:45 - 2015-03-03 13:11 - 00022957 _____ () C:\Users\stephane\Downloads\FRST.txt
    2015-03-03 12:44 - 2015-03-03 13:11 - 00000000 ____D () C:\FRST
    2015-03-03 12:43 - 2015-03-03 12:44 - 02092544 _____ (Farbar) C:\Users\stephane\Downloads\FRST64.exe
    2015-03-03 12:42 - 2015-03-03 12:42 - 00001000 _____ () C:\Users\stephane\Desktop\Infigo.lnk
    2015-03-03 12:42 - 2015-03-03 12:42 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
    2015-03-03 12:42 - 2015-03-03 12:42 - 00000000 ____D () C:\Program Files (x86)\Infigo
    2015-03-03 12:41 - 2015-03-03 12:41 - 07780256 _____ () C:\Users\stephane\Downloads\Infigo_setup (1).exe
    2015-03-03 12:22 - 2015-03-03 12:22 - 07780256 _____ () C:\Users\stephane\Downloads\Infigo_setup.exe
    2015-03-03 08:02 - 2015-03-03 08:02 - 00000000 ____D () C:\ProgramData\EmailNotifier
    2015-03-03 08:01 - 2015-03-03 08:02 - 00000000 ____D () C:\Program Files (x86)\mystarttb
    2015-03-02 12:06 - 2015-03-03 13:06 - 00005506 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-6.job
    2015-03-02 12:06 - 2015-03-03 13:06 - 00003126 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-6.job
    2015-03-02 12:06 - 2015-03-03 13:06 - 00002100 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-10_user.job
    2015-03-02 12:06 - 2015-03-03 12:20 - 00005170 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-7.job
    2015-03-02 12:06 - 2015-03-03 12:20 - 00003462 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-7.job
    2015-03-02 12:06 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5_user.job
    2015-03-02 12:06 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5.job
    2015-03-02 12:06 - 2015-03-02 12:06 - 00008534 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-6
    2015-03-02 12:06 - 2015-03-02 12:06 - 00008200 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-7
    2015-03-02 12:06 - 2015-03-02 12:06 - 00006492 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-7
    2015-03-02 12:06 - 2015-03-02 12:06 - 00006154 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-6
    2015-03-02 12:06 - 2015-03-02 12:06 - 00005464 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5
    2015-03-02 12:06 - 2015-03-02 12:06 - 00000000 ____D () C:\Program Files (x86)\30215a2f-25e0-405c-b5a6-cabd1843ece0
    2015-03-02 12:05 - 2015-03-03 12:20 - 00004098 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-12.job
    2015-03-02 12:05 - 2015-03-02 12:05 - 00007128 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-12
    2015-03-01 10:36 - 2015-03-01 10:36 - 00002385 _____ () C:\Users\stephane\Desktop\Doctor pc.lnk
    2015-03-01 10:17 - 2015-03-01 10:17 - 00003286 _____ () C:\Windows\System32\Tasks\BOdQ8LkYb4c55qq
    2015-03-01 10:16 - 2015-03-01 10:17 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\gzLaPpR
    2015-03-01 10:16 - 2015-03-01 10:16 - 00003246 _____ () C:\Windows\System32\Tasks\wNBKHd4eEScji4q
    2015-03-01 10:16 - 2015-03-01 10:16 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\GEx53bN
    2015-02-28 13:24 - 2015-03-03 07:50 - 00000224 _____ () C:\Windows\setupact.log
    2015-02-28 13:24 - 2015-02-28 13:24 - 00000000 _____ () C:\Windows\setuperr.log
    2015-02-28 13:23 - 2015-02-28 13:23 - 00001224 _____ () C:\Windows\PFRO.log
    2015-02-27 15:29 - 2015-03-03 07:50 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
    2015-02-27 14:24 - 2015-02-27 14:24 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2015-02-25 22:47 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
    2015-02-25 22:47 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
    2015-02-23 22:01 - 2015-03-03 13:01 - 00005506 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-6.job
    2015-02-23 22:01 - 2015-03-03 13:01 - 00003126 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-6.job
    2015-02-23 22:01 - 2015-03-03 12:20 - 00005506 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-7.job
    2015-02-23 22:01 - 2015-03-03 12:20 - 00003462 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-7.job
    2015-02-23 22:01 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5_user.job
    2015-02-23 22:01 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5.job
    2015-02-23 22:01 - 2015-02-23 22:01 - 00008536 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-7
    2015-02-23 22:01 - 2015-02-23 22:01 - 00008534 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-6
    2015-02-23 22:01 - 2015-02-23 22:01 - 00006492 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-7
    2015-02-23 22:01 - 2015-02-23 22:01 - 00006154 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-6
    2015-02-23 22:01 - 2015-02-23 22:01 - 00005464 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5
    2015-02-23 22:00 - 2015-03-03 13:00 - 00002100 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-10_user.job
    2015-02-23 22:00 - 2015-03-03 12:20 - 00005172 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-11.job
    2015-02-23 22:00 - 2015-03-03 12:20 - 00004106 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-12.job
    2015-02-23 22:00 - 2015-02-23 22:00 - 00008202 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-11
    2015-02-23 22:00 - 2015-02-23 22:00 - 00007136 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-12
    2015-02-23 21:56 - 2015-03-03 12:56 - 00003458 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6.job
    2015-02-23 21:56 - 2015-03-03 12:20 - 00002774 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5_user.job
    2015-02-23 21:56 - 2015-03-03 12:20 - 00002774 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5.job
    2015-02-23 21:56 - 2015-02-23 21:56 - 00006486 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6
    2015-02-23 21:56 - 2015-02-23 21:56 - 00005804 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5
    2015-02-23 21:55 - 2015-03-03 12:55 - 00005846 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-6.job
    2015-02-23 21:55 - 2015-03-03 12:55 - 00002096 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-10_user.job
    2015-02-23 21:55 - 2015-03-03 12:20 - 00005502 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-7.job
    2015-02-23 21:55 - 2015-03-03 12:20 - 00005168 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-11.job
    2015-02-23 21:55 - 2015-03-03 12:20 - 00003458 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-7.job
    2015-02-23 21:55 - 2015-03-03 12:20 - 00000956 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-02-23 21:55 - 2015-03-03 12:20 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-02-23 21:55 - 2015-03-02 12:06 - 00003954 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
    2015-02-23 21:55 - 2015-03-02 12:06 - 00003700 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
    2015-02-23 21:55 - 2015-02-23 22:52 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
    2015-02-23 21:55 - 2015-02-23 21:55 - 00008874 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-6
    2015-02-23 21:55 - 2015-02-23 21:55 - 00008532 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-7
    2015-02-23 21:55 - 2015-02-23 21:55 - 00008198 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-11
    2015-02-23 21:55 - 2015-02-23 21:55 - 00006488 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-7
    2015-02-23 21:53 - 2015-02-23 21:53 - 00003836 _____ () C:\Windows\System32\Tasks\PostPoneInstall
    2015-02-23 21:53 - 2015-02-23 21:53 - 00003170 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
    2015-02-23 21:42 - 2015-02-23 21:42 - 00007609 _____ () C:\Users\stephane\AppData\Local\Resmon.ResmonCfg
    2015-02-23 21:40 - 2015-02-23 21:40 - 00000000 ____D () C:\Users\stephane\AppData\Local\Boxore
    2015-02-23 21:38 - 2015-03-03 12:43 - 00000922 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
    2015-02-23 21:38 - 2015-03-03 07:50 - 00000918 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
    2015-02-23 21:38 - 2015-02-23 23:04 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\WTools
    2015-02-23 21:38 - 2015-02-23 22:47 - 00000156 _____ () C:\Users\stephane\AppData\Roaming\Selection Tools.installation.log
    2015-02-23 21:38 - 2015-02-23 21:38 - 00003918 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
    2015-02-23 21:38 - 2015-02-23 21:38 - 00003666 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
    2015-02-23 21:35 - 2015-02-23 21:38 - 00001300 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.boostrap.log
    2015-02-22 12:46 - 2015-03-03 12:51 - 00002434 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5_user.job
    2015-02-22 12:46 - 2015-03-03 12:50 - 00005506 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-6.job
    2015-02-22 12:46 - 2015-03-03 12:50 - 00003462 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-7.job
    2015-02-22 12:46 - 2015-03-03 12:50 - 00003126 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6.job
    2015-02-22 12:46 - 2015-03-03 12:50 - 00002434 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5.job
    2015-02-22 12:46 - 2015-02-22 12:50 - 00008534 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-6
    2015-02-22 12:46 - 2015-02-22 12:50 - 00007206 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-7
    2015-02-22 12:46 - 2015-02-22 12:50 - 00006492 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-7
    2015-02-22 12:46 - 2015-02-22 12:50 - 00006154 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6
    2015-02-22 12:46 - 2015-02-22 12:50 - 00005464 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5
    2015-02-22 12:46 - 2015-02-22 12:50 - 00005170 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-7.job
    2015-02-22 12:45 - 2015-03-03 12:50 - 00004090 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-12.job
    2015-02-22 12:45 - 2015-02-22 12:50 - 00007120 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-12
    2015-02-20 13:33 - 2015-03-03 07:50 - 00003462 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-7.job
    2015-02-20 13:33 - 2015-03-03 07:50 - 00002434 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5_user.job
    2015-02-20 13:33 - 2015-03-03 07:50 - 00002434 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5.job
    2015-02-20 13:33 - 2015-02-20 13:39 - 00006492 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-7
    2015-02-20 13:33 - 2015-02-20 13:39 - 00005464 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5
    2015-02-20 13:33 - 2015-02-20 13:39 - 00005162 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-6
    2015-02-20 13:33 - 2015-02-20 13:39 - 00003126 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-6.job
    2015-02-20 13:32 - 2015-03-03 12:38 - 00005506 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-6.job
    2015-02-20 13:32 - 2015-03-03 07:50 - 00005170 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-7.job
    2015-02-20 13:32 - 2015-03-03 07:50 - 00004084 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-12.job
    2015-02-20 13:32 - 2015-03-02 12:06 - 00000000 ___HD () C:\Program Files (x86)\winservice86
    2015-02-20 13:32 - 2015-02-20 13:38 - 00008534 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-6
    2015-02-20 13:32 - 2015-02-20 13:38 - 00008200 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-7
    2015-02-20 13:32 - 2015-02-20 13:38 - 00007114 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-12
    2015-02-20 13:22 - 2015-02-20 13:22 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2015-02-19 13:57 - 2015-02-22 19:12 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
    2015-02-19 13:57 - 2015-02-20 13:20 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
    2015-02-19 13:57 - 2015-02-19 19:32 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
    2015-02-19 13:57 - 2015-02-19 19:12 - 00002834 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
    2015-02-19 13:57 - 2015-02-19 19:12 - 00002832 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
    2015-02-19 13:57 - 2015-02-19 19:12 - 00002832 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
    2015-02-19 13:54 - 2015-02-19 13:54 - 00628496 _____ (CMI Limited) C:\Users\stephane\AppData\Local\nskCC1D.tmp
    2015-02-19 13:54 - 2015-02-19 13:54 - 00000000 __SHD () C:\Users\stephane\AppData\Roaming\AnyProtectEx
    2015-02-19 13:24 - 2015-02-19 13:24 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2015-02-19 12:31 - 2015-02-19 12:32 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000
    2015-02-17 19:16 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
    2015-02-17 19:16 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
    2015-02-17 19:16 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
    2015-02-17 19:16 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
    2015-02-12 11:06 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2015-02-12 11:06 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-02-12 11:06 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2015-02-12 11:06 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2015-02-11 11:29 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-02-11 11:29 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2015-02-11 11:29 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2015-02-11 11:29 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2015-02-11 11:29 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2015-02-11 11:29 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-02-11 11:29 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2015-02-11 11:29 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2015-02-11 11:29 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2015-02-11 11:29 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-02-11 11:29 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-02-11 11:29 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2015-02-11 11:29 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2015-02-11 11:29 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2015-02-11 11:29 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2015-02-11 11:29 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2015-02-11 11:29 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2015-02-11 11:29 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2015-02-11 11:29 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2015-02-11 11:29 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2015-02-11 11:29 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2015-02-11 11:29 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2015-02-11 11:29 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2015-02-11 11:29 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2015-02-11 11:29 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2015-02-11 11:29 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2015-02-11 11:29 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2015-02-11 11:29 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2015-02-11 11:29 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2015-02-11 11:29 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2015-02-11 11:29 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2015-02-11 11:29 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2015-02-11 11:29 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2015-02-11 11:29 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2015-02-11 11:29 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2015-02-11 11:29 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2015-02-11 11:29 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2015-02-11 11:29 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2015-02-11 11:29 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2015-02-11 11:29 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2015-02-11 11:29 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-02-11 11:29 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2015-02-11 11:29 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2015-02-11 11:29 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2015-02-11 11:29 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2015-02-11 11:29 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-02-11 11:29 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2015-02-11 11:29 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2015-02-11 11:29 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2015-02-11 11:29 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2015-02-11 11:29 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2015-02-11 11:29 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2015-02-11 11:29 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2015-02-11 11:29 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2015-02-11 11:29 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-02-11 11:29 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2015-02-11 11:29 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2015-02-11 11:25 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-02-11 11:25 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-02-11 11:25 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-02-11 11:25 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-02-11 11:25 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-02-11 11:25 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-02-11 11:25 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-02-11 11:25 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-02-11 11:25 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-02-11 11:25 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-02-11 11:25 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-02-11 11:25 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2015-02-11 11:25 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2015-02-11 11:25 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2015-02-11 11:25 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2015-02-11 11:25 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2015-02-11 11:25 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2015-02-11 11:25 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2015-02-11 11:25 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-02-11 11:25 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-02-11 11:25 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-02-11 11:25 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-02-11 11:25 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-02-11 11:25 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-02-11 11:25 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-02-11 11:25 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2015-02-11 11:25 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2015-02-11 11:25 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2015-02-11 11:25 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2015-02-11 11:25 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2015-02-11 11:25 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2015-02-11 11:25 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2015-02-11 11:25 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2015-02-11 11:24 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-02-07 17:31 - 2015-02-07 17:31 - 00038400 _____ () C:\Users\stephane\Desktop\GT6QUICKTUNE-v4.3.xls
    2015-02-07 17:25 - 2015-02-07 17:25 - 00136704 _____ () C:\Users\stephane\Desktop\Quick-Tune-GT6-V4_3-Modif-STF1900-V2_0.xls
    
    ==================== One Month Modified Files and Folders =======
    
    (If an entry is included in the fixlist, the file\folder will be moved.)
    
    2015-03-03 13:04 - 2010-12-25 09:53 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000UA.job
    2015-03-03 12:55 - 2014-11-09 16:50 - 00003960 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{AB53DDEC-EA2C-460D-AA65-F2D8AEB9838F}
    2015-03-03 12:55 - 2010-01-29 17:59 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-03-03 12:36 - 2012-10-09 08:44 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-03-03 12:20 - 2009-09-21 07:35 - 01446420 _____ () C:\Windows\WindowsUpdate.log
    2015-03-03 12:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
    2015-03-03 09:04 - 2010-12-25 09:53 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000Core.job
    2015-03-03 08:39 - 2014-11-04 08:39 - 00001698 _____ () C:\Windows\Tasks\DKPPHHHJ.job
    2015-03-03 08:39 - 2014-11-04 08:39 - 00001352 _____ () C:\Windows\Tasks\BFXIYLA.job
    2015-03-03 08:16 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-03-03 08:16 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-03-03 08:11 - 2014-11-23 10:16 - 00000197 _____ () C:\Users\stephane\AppData\Local\recently-fix.db
    2015-03-03 07:50 - 2014-11-02 22:20 - 00001344 _____ () C:\Windows\Tasks\KQH.job
    2015-03-03 07:50 - 2010-05-03 13:23 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
    2015-03-03 07:50 - 2010-01-29 17:59 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-03-03 07:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-03-02 22:52 - 2015-01-19 10:19 - 00000000 ____D () C:\Users\stephane\AppData\Everything
    2015-03-02 12:08 - 2009-09-04 02:48 - 00747660 _____ () C:\Windows\system32\perfh00C.dat
    2015-03-02 12:08 - 2009-09-04 02:48 - 00150184 _____ () C:\Windows\system32\perfc00C.dat
    2015-03-02 12:08 - 2009-07-14 06:13 - 01669656 _____ () C:\Windows\system32\PerfStringBackup.INI
    2015-03-02 12:06 - 2010-01-03 17:54 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
    2015-03-01 10:17 - 2014-11-21 20:11 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\WkYr6jP
    2015-02-27 15:22 - 2012-02-06 10:45 - 00000000 ____D () C:\Users\stephane\Documents\doc reynard
    2015-02-27 15:21 - 2009-12-10 12:04 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Adobe
    2015-02-24 08:16 - 2014-08-14 10:33 - 00004026 _____ () C:\Windows\System32\Tasks\LaunchSignup
    2015-02-23 23:05 - 2014-11-02 21:22 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Store
    2015-02-23 22:49 - 2009-08-25 20:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
    2015-02-23 22:47 - 2014-11-02 22:22 - 00003346 _____ () C:\Windows\SysWOW64\${LOGFILE}
    2015-02-23 22:47 - 2014-11-02 21:21 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Nosibay
    2015-02-23 22:44 - 2014-11-02 21:31 - 00000449 _____ () C:\Windows\wininit.ini
    2015-02-23 21:37 - 2014-11-02 21:22 - 00000826 _____ () C:\Users\stephane\AppData\Roaming\WindApp.installation.log
    2015-02-23 21:37 - 2014-11-02 21:21 - 00017906 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.installation.log
    2015-02-23 21:36 - 2014-11-02 21:20 - 00000291 _____ () C:\Users\stephane\AppData\Roaming\WindApp.boostrap.log
    2015-02-22 15:33 - 2009-12-10 20:43 - 00000000 ____D () C:\Users\stephane\Documents\elodie
    2015-02-20 13:20 - 2009-08-25 20:50 - 00000000 ____D () C:\ProgramData\Adobe
    2015-02-19 13:26 - 2009-12-10 12:48 - 00000000 ____D () C:\Users\stephane\AppData\Local\Adobe
    2015-02-14 22:08 - 2010-03-25 22:01 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\vlc
    2015-02-14 13:09 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
    2015-02-12 10:54 - 2009-07-14 05:45 - 00360688 _____ () C:\Windows\system32\FNTCACHE.DAT
    2015-02-12 10:51 - 2014-12-12 08:36 - 00000000 ____D () C:\Windows\system32\appraiser
    2015-02-12 10:51 - 2014-05-06 21:57 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2015-02-11 23:17 - 2009-08-25 20:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2015-02-11 23:16 - 2011-12-16 21:53 - 00002126 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
    2015-02-11 23:16 - 2011-12-16 21:53 - 00001912 _____ () C:\Windows\epplauncher.mif
    2015-02-11 23:15 - 2013-07-27 20:33 - 00000000 ____D () C:\Windows\system32\MRT
    2015-02-11 23:15 - 2011-12-16 21:53 - 00000000 ____D () C:\Program Files\Microsoft Security Client
    2015-02-11 23:15 - 2011-12-16 21:53 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
    2015-02-11 23:09 - 2010-01-07 11:04 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-02-07 22:50 - 2010-01-29 17:59 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-02-07 22:50 - 2010-01-29 17:59 - 00003814 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-02-05 23:37 - 2012-10-09 08:44 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-02-05 23:37 - 2012-10-09 08:44 - 00003940 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-02-05 23:37 - 2011-05-14 19:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-02-04 08:59 - 2010-12-25 09:53 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000UA
    2015-02-04 08:59 - 2010-12-25 09:53 - 00003670 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000Core
    
    ==================== Files in the root of some directories =======
    
    2009-08-25 20:27 - 2008-04-29 14:04 - 0157442 _____ () C:\Program Files (x86)\Common Files\emachines.ico
    2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\stephane\AppData\Roaming\BFXIYLA
    2014-11-04 08:39 - 2014-11-04 08:39 - 1514928 _____ () C:\Users\stephane\AppData\Roaming\BFXIYLA.exe
    2015-02-23 21:35 - 2015-02-23 21:38 - 0001300 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.boostrap.log
    2014-11-02 21:21 - 2015-02-23 21:37 - 0017906 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.installation.log
    2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\stephane\AppData\Roaming\DKPPHHHJ
    2014-11-02 21:17 - 2014-11-02 21:17 - 1524656 _____ () C:\Users\stephane\AppData\Roaming\FAAOU.exe
    2014-11-02 21:16 - 2014-11-02 21:16 - 2012592 _____ () C:\Users\stephane\AppData\Roaming\KEHI.exe
    2014-11-02 22:19 - 2014-11-02 22:19 - 2001328 _____ () C:\Users\stephane\AppData\Roaming\KKTHHJ.exe
    2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\stephane\AppData\Roaming\KQH
    2015-02-23 21:38 - 2015-02-23 22:47 - 0000156 _____ () C:\Users\stephane\AppData\Roaming\Selection Tools.installation.log
    2014-11-02 21:20 - 2015-02-23 21:36 - 0000291 _____ () C:\Users\stephane\AppData\Roaming\WindApp.boostrap.log
    2014-11-02 21:22 - 2015-02-23 21:37 - 0000826 _____ () C:\Users\stephane\AppData\Roaming\WindApp.installation.log
    2009-12-10 12:49 - 2014-11-24 23:05 - 0002218 _____ () C:\Users\stephane\AppData\Roaming\wklnhst.dat
    2014-03-20 10:00 - 2013-12-06 10:04 - 0492208 _____ () C:\Users\stephane\AppData\Roaming\~srgbwoi.exe
    2014-08-14 10:37 - 2014-08-14 10:37 - 0667648 _____ () C:\Users\stephane\AppData\Roaming\~uqyudkj.exe
    2013-06-30 21:44 - 2013-06-30 21:50 - 0314328 _____ () C:\Users\stephane\AppData\Local\AddLyrics.exe
    2013-12-25 19:28 - 2013-12-25 19:40 - 0000790 _____ () C:\Users\stephane\AppData\Local\cookies.ini
    2010-07-25 11:54 - 2010-07-25 11:54 - 0003584 _____ () C:\Users\stephane\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2013-06-30 21:44 - 2013-06-30 21:50 - 0785904 _____ () C:\Users\stephane\AppData\Local\DeltaToolbar.exe
    2013-06-30 21:44 - 2013-06-30 21:50 - 0841871 _____ () C:\Users\stephane\AppData\Local\IminentMinibar.exe
    2015-02-19 13:54 - 2015-02-19 13:54 - 0628496 _____ (CMI Limited) C:\Users\stephane\AppData\Local\nskCC1D.tmp
    2013-06-30 21:44 - 2013-06-30 21:50 - 0635596 _____ () C:\Users\stephane\AppData\Local\PricePeep.exe
    2014-11-23 10:16 - 2015-03-03 08:11 - 0000197 _____ () C:\Users\stephane\AppData\Local\recently-fix.db
    2015-02-23 21:42 - 2015-02-23 21:42 - 0007609 _____ () C:\Users\stephane\AppData\Local\Resmon.ResmonCfg
    2010-03-25 19:50 - 2010-03-25 19:50 - 0000041 ___SH () C:\ProgramData\.zreglib
    2009-08-25 20:28 - 2009-07-18 02:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe
    2014-06-12 17:09 - 2014-07-28 09:48 - 0431104 _____ () C:\ProgramData\uninstall_Deeal.exe
    
    Files to move or delete:
    ====================
    C:\ProgramData\uninstall_Deeal.exe
    
    Some content of TEMP:
    ====================
    C:\Users\stephane\AppData\Local\Temp\dbcabfbbcdd.exe
    C:\Users\stephane\AppData\Local\Temp\mytmpinstaller.exe
    
    ==================== Bamital & volsnap Check =================
    
    (There is no automatic fix for files that do not pass verification.)
    
    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
    
    LastRegBack: 2015-01-24 15:33
    
    ==================== End Of Log ============================
    
    0
Réponse 2 / 4
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [GM4IE] => C:\Facemoi\facemoi.exe
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [fdcsqphf] => c:\users\maarwalaboss\appdata\local\lollipop\fdcsqphf.exe fdcsqphf
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [WindApp] => C:\Users\MaarwaLaBoss\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 nSfkjQSVXLu; C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe [2733552 2015-02-25] (Rational Thought Solutions)
R2 petonuve; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\jnsy537B.tmp [168960 2015-02-25] () [File not signed]
R2 pfsvc_1.10.0.8; C:\Program Files\PhraseFinder_1.10.0.8\Service\pfsvc.exe [278608 2015-01-21] (Phrase Finder)
R2 pysucode; C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD\snsk55B0.tmp [179712 2015-02-25] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-26] (SysTool PasSame LIMITED)
R2 sucoweti; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\nsj1982.tmpfs [X]
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
2015-02-26 13:15 - 2015-02-26 13:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\Documents\PC Speed Maximizer
2015-02-26 13:14 - 2015-02-26 13:14 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-26 13:13 - 2015-02-26 13:14 - 00000000 ____D () C:\Program Files\XTab
2015-02-26 13:13 - 2015-02-26 13:13 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-26 13:11 - 2015-02-26 13:11 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page
2015-02-26 13:10 - 2015-02-26 13:10 - 00001039 _____ () C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PhraseFinder_1.10.0.8
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PC Speed Maximizer
2015-02-26 13:06 - 2015-02-26 13:06 - 01129240 _____ () C:\Users\MaarwaLaBoss\Downloads\Setup.exe
2015-02-26 12:39 - 2015-02-26 13:16 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.installation.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.installation.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WTools
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Store
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2015-02-25 23:13 - 2015-02-25 23:15 - 00005757 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log
2015-02-25 23:12 - 2015-02-25 23:15 - 00001314 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log
2015-02-25 23:12 - 2015-02-25 23:12 - 00000097 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log
2015-02-25 23:11 - 2015-02-26 13:11 - 00003122 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job
2015-02-25 23:11 - 2015-02-26 12:37 - 00003458 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job
2015-02-25 23:10 - 2015-02-25 23:15 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-02-25 23:09 - 2015-02-26 13:09 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job
2015-02-25 23:09 - 2015-02-26 12:38 - 00000948 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-02-25 23:09 - 2015-02-26 12:37 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job
2015-02-25 23:09 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-25 23:08 - 2015-02-26 13:08 - 00002096 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job
2015-02-25 23:08 - 2015-02-26 12:38 - 00004064 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job
2015-02-25 23:08 - 2015-02-25 23:11 - 00000000 ____D () C:\Program Files\winservice86
2015-02-25 21:48 - 2015-02-25 22:10 - 00000000 ____D () C:\Program Files\NZBPlayer
2015-02-25 21:48 - 2015-02-25 21:48 - 00000888 _____ () C:\Users\Invité\Desktop\NZBMovies.lnk
2015-02-25 21:48 - 2015-02-25 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
2015-02-25 21:46 - 2015-02-26 12:37 - 00001362 _____ () C:\Windows\Tasks\MFLI.job
2015-02-25 21:46 - 2015-02-25 21:46 - 00000000 ____D () C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438
2015-02-25 21:45 - 2015-02-25 22:53 - 00000000 ____D () C:\Program Files\HQCinema Pro 2.1V25.02
2015-02-25 18:53 - 2015-02-25 18:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD
2015-02-25 17:26 - 2015-02-25 17:26 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD
2015-02-25 16:53 - 2015-02-25 16:45 - 00056515 _____ () C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt
2015-02-25 16:40 - 2015-02-25 16:40 - 00613057 _____ (CMI Limited) C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp
2015-02-25 16:31 - 2015-02-25 16:32 - 00000000 ____D () C:\ProgramData\TlNNEwgTvUH
2015-02-25 16:30 - 2015-02-26 12:38 - 00001366 _____ () C:\Windows\Tasks\XGKXWH.job
2015-02-25 16:30 - 2015-02-25 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf
2015-02-25 16:16 - 2015-02-26 12:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD
2015-02-25 16:14 - 2015-02-25 16:39 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD
2015-02-24 12:06 - 2015-02-24 12:06 - 00000000 ____D () C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t
2015-02-20 23:14 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381
2015-02-01 14:46 - 2015-02-01 14:48 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-02-24 11:53 - 2015-01-25 20:05 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR
2015-02-25 22:52 - 2014-11-21 21:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-12.exe:/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=59DC99022A1445AEA14117175CAA670FIE /verifier=7fe201effa46e8311470d93ce4c20d22 /installerversion=1_36_01_22 /installationtime=1424902086 /statsdomain=http://stats.ourinfoonlinestack.com /errorsdomain=http://errors.ourinfoonlinestack.com /url=http://update.ourinfoonlinestack.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='0_12582913_-2147483648_0' /processid='791EE243D3714672BFE37FD871001FA2PI' /installationtime='1424902086' /installername='C:\Users\MAARWA~1\AppData\Local\Temp\nsn121A.tmp\Ctijl.exe' /mac='342910909+498139398+64:31:50:65:B6:CD' /macs='572f25784f14e26d343ba42ddaa5e318' /sid='S-1-5-21-4139596143-1751265584-3382870510-1003' /jsmainfunc=main /ffid=taylorralston@hotmail.com /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=29672d50-4e4a-4825-b121-e34ecad7b2da /guid2=cc34cdb5-c607-4383-91d3-b191e4e7a6d9 /guid3=686e2d41-5a10-4cc8-ba90-fcbf6b11e320 /guid4=f8922a33-557c-4f6e-8995-dd4a0f2d095f /guid5=41887939-76d6-445d-bfa6-8d929e2612b3 /guid6=0fe4ccef-30d2-4b08-b05b-cee45bfba460 /guid7=fa848bbc-ff38-4406-a208-51065518b472 /guid8=c0194550-641c-4a9c-a0c6-bffd5741a694 /guid9=25f5dd48-a503-4e7c-accc-7cb5e4bb68a8 /guid10=adbbf8d7-0237-4d7e-9cd3-565ed2aa7f35 /guid11=45f3fb54-9acf-435e-a21a-5c5821b940ec /guid12=d441cbbd-06d8-4824-ac20-a004f6c55cfe /guid13=bacd83d0-cdd3-44b8-88d7-4ef43eb166bc /guid14=98a2d619-50dc-4e6e-a6ff-9af474e20801 /guid15=89b5168f-c3ad-4c7d-9cbf-8b26792cdbb0 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=529 /verifiertaskname='29672d50-4e4a-4825-b121-e34ecad7b2da-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\MFLI.job => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: C:\Windows\Tasks\XGKXWH.job => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {EAD95DF8-941F-43CA-B601-4CD090AC66E1} - System32\Tasks\MFLI => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: {ECA7983F-561B-4C7C-B5B9-500A5073A3B6} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files\PC Speed Maximizer\SPMSchedule.exe [2014-11-14] (Avanquest Software)
Task: {F3606A00-3C97-4FD0-BC44-0979CC6B5E4C} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\MaarwaLaBoss\AppData\Roaming\~swgghgh.exe
Task: {CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {DFC97F14-3140-4AF5-917B-6A444E4B907C} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {8D59EF2E-6BBA-4F07-9967-04994983132C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION
Task: {8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {A3111540-DC22-4B9F-B351-34446D496CDE} - System32\Tasks\WIN-statsAdmin => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~hsndvmv.exe <==== ATTENTION
Task: {2E7135B9-187A-44A2-95D6-60FE532AA1C5} - System32\Tasks\WIN-statsSystem => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~pewzffw.exe
Task: {33F8754B-AF21-4C91-B077-B027DFA3A778} - System32\Tasks\XGKXWH => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {04A54772-6972-48E9-BDC1-7DC917A797B2} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {0C3E0347-64B5-4EF3-AEF5-887188AAC928} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-06] (Google Inc.)
Task: {0C492543-A5CA-4709-B7AD-D1BDF719C3C2} - System32\Tasks\PjybSwsUh9KvOWv => C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t\4o5O3cu.exe [2015-02-24] ( )
Task: {0FA54608-C1CE-4CED-907E-0346B61B596C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.

Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
- Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
- Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
- Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
0
1. marmarmar
  
  Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-02-2015 01
  Ran by MaarwaLaBoss at 2015-02-26 16:02:24 Run:1
  Running from C:\Users\MaarwaLaBoss\Desktop
  Loaded Profiles: MaarwaLaBoss (Available profiles: MaarwaLaBoss & Invité)
  Boot Mode: Normal
  
  ==============================================
  
  Content of fixlist:
  
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [GM4IE] => C:\Facemoi\facemoi.exe
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [fdcsqphf] => c:\users\maarwalaboss\appdata\local\lollipop\fdcsqphf.exe fdcsqphf
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [WindApp] => C:\Users\MaarwaLaBoss\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
  
  C'est fait, voila le fichier texte
  
  0
2. Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712
  
  tu n'as as tout copié/collé.
  
  0
3. marmarmar
  
  Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-02-2015 01
  Ran by MaarwaLaBoss at 2015-02-26 16:02:24 Run:1
  Running from C:\Users\MaarwaLaBoss\Desktop
  Loaded Profiles: MaarwaLaBoss (Available profiles: MaarwaLaBoss & Invité)
  Boot Mode: Normal
  
  ==============================================
  
  Content of fixlist:
  
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [GM4IE] => C:\Facemoi\facemoi.exe
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [fdcsqphf] => c:\users\maarwalaboss\appdata\local\lollipop\fdcsqphf.exe fdcsqphf
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [WindApp] => C:\Users\MaarwaLaBoss\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
  R2 IHProtect Service; C:\PROGRAM Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
  R2 nSfkjQSVXLu; C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe [2733552 2015-02-25] (Rational Thought Solutions)
  R2 petonuve; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\jnsy537B.tmp [168960 2015-02-25] () [File not signed]
  R2 pfsvc_1.10.0.8; C:\Program Files\PhraseFinder_1.10.0.8\Service\pfsvc.exe [278608 2015-01-21] (Phrase Finder)
  R2 pysucode; C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD\snsk55B0.tmp [179712 2015-02-25] () [File not signed]
  R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-26] (SysTool PasSame LIMITED)
  R2 sucoweti; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\nsj1982.tmpfs [X]
  S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
  2015-02-26 13:15 - 2015-02-26 13:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\Documents\PC SPEED Maximizer
  2015-02-26 13:14 - 2015-02-26 13:14 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
  2015-02-26 13:13 - 2015-02-26 13:14 - 00000000 ____D () C:\Program Files\XTab
  2015-02-26 13:13 - 2015-02-26 13:13 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
  2015-02-26 13:11 - 2015-02-26 13:11 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page
  2015-02-26 13:10 - 2015-02-26 13:10 - 00001039 _____ () C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk
  2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
  2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PhraseFinder_1.10.0.8
  2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PC Speed Maximizer
  2015-02-26 13:06 - 2015-02-26 13:06 - 01129240 _____ () C:\Users\MaarwaLaBoss\DOWNLOADS\Setup.exe
  2015-02-26 12:39 - 2015-02-26 13:16 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert
  2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.INSTALLATION.log
  2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.INSTALLATION.log
  2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WTools
  2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Store
  2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
  2015-02-25 23:13 - 2015-02-25 23:15 - 00005757 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log
  2015-02-25 23:12 - 2015-02-25 23:15 - 00001314 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log
  2015-02-25 23:12 - 2015-02-25 23:12 - 00000097 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log
  2015-02-25 23:11 - 2015-02-26 13:11 - 00003122 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job
  2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job
  2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job
  2015-02-25 23:11 - 2015-02-26 12:37 - 00003458 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job
  2015-02-25 23:10 - 2015-02-25 23:15 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
  2015-02-25 23:09 - 2015-02-26 13:09 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job
  2015-02-25 23:09 - 2015-02-26 12:38 - 00000948 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
  2015-02-25 23:09 - 2015-02-26 12:37 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job
  2015-02-25 23:09 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694
  2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate
  2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Program Files\globalUpdate
  2015-02-25 23:08 - 2015-02-26 13:08 - 00002096 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job
  2015-02-25 23:08 - 2015-02-26 12:38 - 00004064 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job
  2015-02-25 23:08 - 2015-02-25 23:11 - 00000000 ____D () C:\Program Files\winservice86
  2015-02-25 21:48 - 2015-02-25 22:10 - 00000000 ____D () C:\Program Files\NZBPlayer
  2015-02-25 21:48 - 2015-02-25 21:48 - 00000888 _____ () C:\Users\Invité\Desktop\NZBMovies.lnk
  2015-02-25 21:48 - 2015-02-25 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
  2015-02-25 21:46 - 2015-02-26 12:37 - 00001362 _____ () C:\Windows\Tasks\MFLI.job
  2015-02-25 21:46 - 2015-02-25 21:46 - 00000000 ____D () C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438
  2015-02-25 21:45 - 2015-02-25 22:53 - 00000000 ____D () C:\Program Files\HQCinema Pro 2.1V25.02
  2015-02-25 18:53 - 2015-02-25 18:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD
  2015-02-25 17:26 - 2015-02-25 17:26 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD
  2015-02-25 16:53 - 2015-02-25 16:45 - 00056515 _____ () C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt
  2015-02-25 16:40 - 2015-02-25 16:40 - 00613057 _____ (CMI Limited) C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp
  2015-02-25 16:31 - 2015-02-25 16:32 - 00000000 ____D () C:\ProgramData\TlNNEwgTvUH
  2015-02-25 16:30 - 2015-02-26 12:38 - 00001366 _____ () C:\Windows\Tasks\XGKXWH.job
  2015-02-25 16:30 - 2015-02-25 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf
  2015-02-25 16:16 - 2015-02-26 12:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD
  2015-02-25 16:14 - 2015-02-25 16:39 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD
  2015-02-24 12:06 - 2015-02-24 12:06 - 00000000 ____D () C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52
  2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5
  2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t
  2015-02-20 23:14 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381
  2015-02-01 14:46 - 2015-02-01 14:48 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
  2015-02-24 11:53 - 2015-01-25 20:05 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR
  2015-02-25 22:52 - 2014-11-21 21:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-12.exe:/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=59DC99022A1445AEA14117175CAA670FIE /verifier=7fe201effa46e8311470d93ce4c20d22 /installerversion=1_36_01_22 /installationtime=1424902086 /statsdomain=http://stats.ourinfoonlinestack.com /errorsdomain=http://errors.ourinfoonlinestack.com /url=http://update.ourinfoonlinestack.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='0_12582913_-2147483648_0' /processid='791EE243D3714672BFE37FD871001FA2PI' /installationtime='1424902086' /installername='C:\Users\MAARWA~1\AppData\Local\Temp\nsn121A.tmp\Ctijl.exe' /mac='342910909+498139398+64:31:50:65:B6:CD' /macs='572f25784f14e26d343ba42ddaa5e318' /sid='S-1-5-21-4139596143-1751265584-3382870510-1003' /jsmainfunc=main /ffid=***@*** /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=29672d50-4e4a-4825-b121-e34ecad7b2da /guid2=cc34cdb5-c607-4383-91d3-b191e4e7a6d9 /guid3=686e2d41-5a10-4cc8-ba90-fcbf6b11e320 /guid4=f8922a33-557c-4f6e-8995-dd4a0f2d095f /guid5=41887939-76d6-445d-bfa6-8d929e2612b3 /guid6=0fe4ccef-30d2-4b08-b05b-cee45bfba460 /guid7=fa848bbc-ff38-4406-a208-51065518b472 /guid8=c0194550-641c-4a9c-a0c6-bffd5741a694 /guid9=25f5dd48-a503-4e7c-accc-7cb5e4bb68a8 /guid10=adbbf8d7-0237-4d7e-9cd3-565ed2aa7f35 /guid11=45f3fb54-9acf-435e-a21a-5c5821b940ec /guid12=d441cbbd-06d8-4824-ac20-a004f6c55cfe /guid13=bacd83d0-cdd3-44b8-88d7-4ef43eb166bc /guid14=98a2d619-50dc-4e6e-a6ff-9af474e20801 /guid15=89b5168f-c3ad-4c7d-9cbf-8b26792cdbb0 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=529 /verifiertaskname='29672d50-4e4a-4825-b121-e34ecad7b2da-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-6.exe <==== ATTENTION
  Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-7.exe <==== ATTENTION
  Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
  Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
  Task: C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
  Task: C:\Windows\Tasks\MFLI.job => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
  Task: C:\Windows\Tasks\XGKXWH.job => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
  Task: {EAD95DF8-941F-43CA-B601-4CD090AC66E1} - System32\Tasks\MFLI => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
  Task: {ECA7983F-561B-4C7C-B5B9-500A5073A3B6} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files\PC Speed Maximizer\SPMSchedule.exe [2014-11-14] (Avanquest Software)
  Task: {F3606A00-3C97-4FD0-BC44-0979CC6B5E4C} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\MaarwaLaBoss\AppData\Roaming\~swgghgh.exe
  Task: {CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
  Task: {DFC97F14-3140-4AF5-917B-6A444E4B907C} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
  Task: {8D59EF2E-6BBA-4F07-9967-04994983132C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION
  Task: {8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
  Task: {A3111540-DC22-4B9F-B351-34446D496CDE} - System32\Tasks\WIN-statsAdmin => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~hsndvmv.exe <==== ATTENTION
  Task: {2E7135B9-187A-44A2-95D6-60FE532AA1C5} - System32\Tasks\WIN-statsSystem => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~pewzffw.exe
  Task: {33F8754B-AF21-4C91-B077-B027DFA3A778} - System32\Tasks\XGKXWH => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
  Task: {04A54772-6972-48E9-BDC1-7DC917A797B2} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
  Task: {0C3E0347-64B5-4EF3-AEF5-887188AAC928} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-06] (Google Inc.)
  Task: {0C492543-A5CA-4709-B7AD-D1BDF719C3C2} - System32\Tasks\PjybSwsUh9KvOWv => C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t\4o5O3cu.exe [2015-02-24] ( )
  Task: {0FA54608-C1CE-4CED-907E-0346B61B596C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION
  
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\GM4IE => value deleted successfully.
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\fdcsqphf => value deleted successfully.
  HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\WindApp => value deleted successfully.
  IHProtect Service => Service stopped successfully.
  IHProtect Service => Service deleted successfully.
  nSfkjQSVXLu => Unable to stop service
  nSfkjQSVXLu => Service deleted successfully.
  petonuve => Service stopped successfully.
  petonuve => Service deleted successfully.
  pfsvc_1.10.0.8 => Service stopped successfully.
  pfsvc_1.10.0.8 => Service deleted successfully.
  pysucode => Service stopped successfully.
  pysucode => Service deleted successfully.
  WindowsMangerProtect => Service stopped successfully.
  WindowsMangerProtect => Service deleted successfully.
  sucoweti => Service stopped successfully.
  sucoweti => Service deleted successfully.
  qrnfd_1_10_0_9 => Service deleted successfully.
  C:\Users\MaarwaLaBoss\Documents\PC SPEED Maximizer => Moved successfully.
  C:\ProgramData\IHProtectUpDate => Moved successfully.
  C:\Program Files\XTab => Moved successfully.
  C:\ProgramData\WindowsMangerProtect => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page => Moved successfully.
  C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk => Moved successfully.
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer => Moved successfully.
  C:\Program Files\PhraseFinder_1.10.0.8 => Moved successfully.
  
  "C:\Program Files\PC Speed Maximizer" directory move:
  
  C:\Program Files\PC Speed Maximizer\CookiesException.txt => Moved successfully.
  C:\Program Files\PC Speed Maximizer\file_id.diz => Moved successfully.
  C:\Program Files\PC Speed Maximizer\French.ini => Moved successfully.
  C:\Program Files\PC Speed Maximizer\PCSpeedMaximizer.chm => Moved successfully.
  C:\Program Files\PC Speed Maximizer\PCSpeedMaximizer.exe => Moved successfully.
  C:\Program Files\PC Speed Maximizer\scanning.gif => Moved successfully.
  C:\Program Files\PC Speed Maximizer\SPMSchedule.exe => Moved successfully.
  C:\Program Files\PC Speed Maximizer\SPMUninstaller.exe => Moved successfully.
  C:\Program Files\PC Speed Maximizer\sqlite3.dll => Moved successfully.
  C:\Program Files\PC Speed Maximizer\StartupList.txt => Moved successfully.
  C:\Program Files\PC Speed Maximizer\unins000.dat => Moved successfully.
  C:\Program Files\PC Speed Maximizer\unins000.exe => Moved successfully.
  Could not move "C:\Program Files\PC Speed Maximizer" directory. => Scheduled to move on reboot.
  
  C:\Users\MaarwaLaBoss\DOWNLOADS\Setup.exe => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.INSTALLATION.log => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.INSTALLATION.log => Moved successfully.
  
  "C:\Users\MaarwaLaBoss\AppData\Roaming\WTools" directory move:
  
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\gdiplus.dll => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\History => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\MFC71.dll => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\msvcp71.dll => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\msvcr71.dll => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools Uninstall.exe => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\version.ini => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\tmp\commands.xml => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\tmp\log.txt => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\product.conf => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\apc.conf => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\manifest.xml => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\us\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\it\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\gb\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\fr\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\es\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\ca\alerter.country => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\layout.xml => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_click.jpg => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_default.jpg => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_focus.jpg => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_left.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_left_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_right.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_right_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_bottom.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_bottom_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_left.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_left_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_right.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_right_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_top.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_top_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_left.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_left_msk.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_right.png => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_right_msk.png => Moved successfully.
  Could not move "C:\Users\MaarwaLaBoss\AppData\Roaming\WTools" directory. => Scheduled to move on reboot.
  
  C:\Users\MaarwaLaBoss\AppData\Roaming\Store => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => Moved successfully.
  C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => Moved successfully.
  C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => Moved successfully.
  C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694 => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate => Moved successfully.
  C:\Program Files\globalUpdate => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => Moved successfully.
  C:\Program Files\winservice86 => Moved successfully.
  C:\Program Files\NZBPlayer => Moved successfully.
  C:\Users\Invité\Desktop\NZBMovies.lnk => Moved successfully.
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer => Moved successfully.
  C:\Windows\Tasks\MFLI.job => Moved successfully.
  C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438 => Moved successfully.
  C:\Program Files\HQCinema Pro 2.1V25.02 => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD => Moved successfully.
  C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp => Moved successfully.
  
  "C:\ProgramData\TlNNEwgTvUH" directory move:
  
  Could not move "C:\ProgramData\TlNNEwgTvUH\info.dat" => Scheduled to move on reboot.
  Could not move "C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.dat" => Scheduled to move on reboot.
  C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe => Moved successfully.
  C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe.config => Moved successfully.
  Could not move "C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe" => Scheduled to move on reboot.
  Could not move "C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe.config" => Scheduled to move on reboot.
  Could not move "C:\ProgramData\TlNNEwgTvUH\dat\JeCunu.dll" => Scheduled to move on reboot.
  Could not move "C:\ProgramData\TlNNEwgTvUH" directory. => Scheduled to move on reboot.
  
  C:\Windows\Tasks\XGKXWH.job => Moved successfully.
  C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD => Moved successfully.
  C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52 => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5 => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t => Moved successfully.
  C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381 => Moved successfully.
  C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR => Moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM => Moved successfully.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job not found.
  C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job not found.
  C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
  C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.
  C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => Moved successfully.
  C:\Windows\Tasks\MFLI.job not found.
  C:\Windows\Tasks\XGKXWH.job not found.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EAD95DF8-941F-43CA-B601-4CD090AC66E1}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EAD95DF8-941F-43CA-B601-4CD090AC66E1}" => Key deleted successfully.
  C:\Windows\System32\Tasks\MFLI => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MFLI" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ECA7983F-561B-4C7C-B5B9-500A5073A3B6}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECA7983F-561B-4C7C-B5B9-500A5073A3B6}" => Key deleted successfully.
  C:\Windows\System32\Tasks\PC Speed Maximizer Schedule => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PC Speed Maximizer Schedule" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F3606A00-3C97-4FD0-BC44-0979CC6B5E4C}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3606A00-3C97-4FD0-BC44-0979CC6B5E4C}" => Key deleted successfully.
  C:\Windows\System32\Tasks\WIN-fdfEfEfAfC => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-fdfEfEfAfC" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B}" => Key deleted successfully.
  C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DFC97F14-3140-4AF5-917B-6A444E4B907C}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFC97F14-3140-4AF5-917B-6A444E4B907C}" => Key deleted successfully.
  C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8D59EF2E-6BBA-4F07-9967-04994983132C}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D59EF2E-6BBA-4F07-9967-04994983132C}" => Key deleted successfully.
  C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E}" => Key deleted successfully.
  C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-5" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A3111540-DC22-4B9F-B351-34446D496CDE}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A3111540-DC22-4B9F-B351-34446D496CDE}" => Key deleted successfully.
  C:\Windows\System32\Tasks\WIN-statsAdmin => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsAdmin" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2E7135B9-187A-44A2-95D6-60FE532AA1C5}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E7135B9-187A-44A2-95D6-60FE532AA1C5}" => Key deleted successfully.
  C:\Windows\System32\Tasks\WIN-statsSystem => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsSystem" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{33F8754B-AF21-4C91-B077-B027DFA3A778}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33F8754B-AF21-4C91-B077-B027DFA3A778}" => Key deleted successfully.
  C:\Windows\System32\Tasks\XGKXWH => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XGKXWH" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{04A54772-6972-48E9-BDC1-7DC917A797B2}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{04A54772-6972-48E9-BDC1-7DC917A797B2}" => Key deleted successfully.
  C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C3E0347-64B5-4EF3-AEF5-887188AAC928}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C3E0347-64B5-4EF3-AEF5-887188AAC928}" => Key deleted successfully.
  C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C492543-A5CA-4709-B7AD-D1BDF719C3C2}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C492543-A5CA-4709-B7AD-D1BDF719C3C2}" => Key deleted successfully.
  C:\Windows\System32\Tasks\PjybSwsUh9KvOWv => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PjybSwsUh9KvOWv" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0FA54608-C1CE-4CED-907E-0346B61B596C}" => Key deleted successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FA54608-C1CE-4CED-907E-0346B61B596C}" => Key deleted successfully.
  C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully.
  "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully.
  > Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-26 16:06:28)<
  C:\Program Files\PC Speed Maximizer => Is moved successfully.
  C:\Users\MaarwaLaBoss\AppData\Roaming\WTools => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH\info.dat => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.dat => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe.config => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH\dat\JeCunu.dll => Is moved successfully.
  C:\ProgramData\TlNNEwgTvUH => Is moved successfully.
  End of Fixlog 16:06:28
  
  0
Réponse 3 / 4
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712

c'est mieux, fais la réinitialisation des navigateurs et vois ce que cela donne.
0
1. marmarmar
  
  je l'ai fais et tout va bien merci beaucoup
  
  0
Réponse 4 / 4
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712

=)

Quelques conseils :

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
0

Comment supprimer winservice86

4 réponses

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-26 16:06:28)<

End of Fixlog 16:06:28

Discussions similaires

Newsletters