Comment supprimer winservice86

Résolu/Fermé

marmarmar - 26 févr. 2015 à 12:53
fanou50750 Messages postés 4 Date d'inscription mardi 3 mars 2015 Statut Membre Dernière intervention 11 mars 2015 - 3 mars 2015 à 13:38

Bonjour,
Depuis hier un virus s'est installé sur mon ordinateur, j'ai fais plusieurs tentatives d'antivirus comme adwcleaner et de désinstallations mais rien n'y fait il se réinstalle a chaque nouveau démarrage, j'ai cherché des solutions sur les forums mais étant très peu calée en informatique je n'y comprends rien quelqu'un pourrait-il m'aider s'il vous plait

A voir également:

Comment supprimer winservice86
Comment supprimer une page sur word - Guide
Supprimer compte instagram - Guide
Comment supprimer bing - Guide
Supprimer edge - Guide
Comment supprimer un compte gmail - Guide

4 réponses

Réponse 1 / 4

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
26 févr. 2015 à 12:59

Salut,

Suis ce tutorial : https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer deux rapports FRST.
Envoie comme expliqué, ces deux rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

marmarmar
26 févr. 2015 à 13:36

http://pjjoint.malekal.com/files.php?id=FRST_20150226_y13p10g7d10k6

http://pjjoint.malekal.com/files.php?id=20150226_m13k11n11e11s6

voila les liens des rapports FRST et Addition

fanou50750 Messages postés 4 Date d'inscription mardi 3 mars 2015 Statut Membre Dernière intervention 11 mars 2015 > marmarmar
3 mars 2015 à 13:38

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by stephane (administrator) on STEPHANE-PC on 03-03-2015 13:11:41
Running from C:\Users\stephane\Downloads
Loaded Profiles: stephane & UpdatusUser (Available profiles: stephane & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\jnskAAAF.tmp
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
() C:\Users\stephane\AppData\Everything\ServiceEverything.exe
(Acer) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
() C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\nsf53B4.tmpfs
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
() C:\Users\stephane\AppData\Everything\SearchBase.exe
() C:\Users\stephane\AppData\Everything\Everything.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe
(iCinema) C:\Program Files (x86)\I - Cinema\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6.exe
(Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-12.exe
(Corporate Inc) C:\Program Files (x86)\winservice86\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6.exe
(Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-10.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
() C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
(Orange) C:\Users\stephane\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-6.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\stephane\AppData\Everything\EverythingLoadHookx64.exe
(Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe
(Corporate Inc) C:\Program Files (x86)\winservice86\57235478-55da-4ce4-9881-bb38d5bc62dc-10.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [Tuto4pc] => [X]
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Google Update] => C:\Users\stephane\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-25] (Google Inc.)
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [OrangeInside] => C:\Users\stephane\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [1530520 2012-11-16] (Orange)
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Only-search] => C:\Users\stephane\AppData\Local\onlysearch\onlysearch\1.3.15.4\onlysearch.exe
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [WindApp] => "C:\Users\stephane\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Run: [Selection Tools] => "C:\Users\stephane\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3880327527-1881455864-3875434641-1001\...\RunOnce: [ScrSav] => C:\Program Files (x86)\eMachines\Screensaver\run_eMachines.exe /default
HKU\S-1-5-21-3880327527-1881455864-3875434641-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\eMachines.scr
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HD Writer.lnk
ShortcutTarget: HD Writer.lnk -> C:\Program Files (x86)\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (Panasonic Corporation)
Startup: C:\Users\stephane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:51237;https=127.0.0.1:51237
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=et1331&r=17361209sn06973755sk5rg731e91q
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=et1331&r=17361209sn06973755sk5rg731e91q
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5354&src=5354
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B&aaa=aaa
HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = https://fr.search.yahoo.com/yhs/?hspart=visicom&hsimp=yhs-mystartdefault1{searchTerms}
SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = https://fr.search.yahoo.com/yhs/?hspart=visicom&hsimp=yhs-mystartdefault1{searchTerms}
SearchScopes: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> {58DBEB8E-5E19-41BB-B251-3B5A7AE00CBE} URL = https://www.google.com/webhp{searchTerms}
BHO: MyStart Toolbar -> {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -> C:\Program Files (x86)\mystarttb\mystartDx64.dll ()
BHO-x32: Aide pour le lien d'Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: No Name -> {1d970ed5-3eda-438d-bffd-715931e2775b} -> No File
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: MyStart Toolbar -> {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -> C:\Program Files (x86)\mystarttb\mystartDx.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx64.dll ()
Toolbar: HKLM-x32 - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll ()
Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-3880327527-1881455864-3875434641-1000 -> No Name - {D3028143-6145-4318-99D3-3EDCE54A95A9} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default
FF NewTab: hxxp://isearch.omiga-plus.com/newtab/?type=nt&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B
FF DefaultSearchEngine: omiga-plus
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: omiga-plus
FF Homepage: hxxp://isearch.omiga-plus.com/?type=hp&ts=1419415352&from=ill&uid=395049983_1052451_8664D30B
FF Keyword.URL:
FF SelectedSearchEngine: Search The Web
FF Homepage: hxxp://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5354&src=5354
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.Software.com/Software Update;version=3 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll No File
FF Plugin-x32: @tools.Software.com/Software Update;version=9 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: @tools.google.com/Google Update;version=3 -> C:\Users\stephane\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: @tools.google.com/Google Update;version=9 -> C:\Users\stephane\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3880327527-1881455864-3875434641-1000: {@alibaba.com/alisetup;version=1.0} -> C:\Users\stephane\AppData\Local\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll (alibaba)
FF Plugin ProgramFiles/Appdata: C:\Users\stephane\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\live-search.xml
FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\MyOnlineSearch.xml
FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\orange.xml
FF SearchPlugin: C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\searchplugins\YouGoo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\omiga-plus.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystarttb.xml
FF Extension: Fast Start - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\faststartff@gmail.com [2014-12-24]
FF Extension: jid0zs24wecdcQo0Lp18D7QOV4WSZFojetpack - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\jid0-zs24wecdcQo0Lp18D7QOV4WSZFo@jetpack [2014-11-06]
FF Extension: MyStart Toolbar - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\Extensions\{607b689f-7600-45e4-b8e5-887f72dab15c} [2015-03-03]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\faststartff@gmail.com
FF HKU\S-1-5-21-3880327527-1881455864-3875434641-1000\...\Firefox\Extensions: [lrcsTube@hansanddeta.com] - C:\Program Files (x86)\LyricsTube\FF
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\2e5f942f-4d3c-41b2-a5cd-82a16abe5ffb@1cc60b40-222e-43de-a4dc-6a6b10e51377.com [Not Found]
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\{86979d09-f746-4af6-bea4-fb72b1632ce1} [Not Found]
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\taylorralston@hotmail.com [Not Found]
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com [Not Found]
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com [Not Found]
FF Extension: No Name - C:\Users\stephane\AppData\Roaming\Mozilla\Firefox\Profiles\dyx59kyi.default\extensions\3c8f3083-413b-4aa6-ad29-fb93d8982e80@gmail.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR Profile: C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-26]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-26]
CHR Extension: (YouTube) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-26]
CHR Extension: (Google Search) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-26]
CHR Extension: (Google Wallet) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-26]
CHR Extension: (Gmail) - C:\Users\stephane\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [gfkbfjcbkhnmiignagpkiijohkcdkffb] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\stephane\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 bofimyvu; C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\jnskAAAF.tmp [131584 2015-02-19] () [File not signed]
R2 ClaraUpdater; C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [328304 2015-02-23] (ClaraLabs)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [625184 2009-04-19] ()
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-02] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-02] (globalUpdate) [File not signed]
R2 Greg_Service; C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe [1150496 2009-06-04] (Acer Incorporated)
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-12-24] (Cherished Technololgy LIMITED)
S2 InfigoOperator; C:\Program Files (x86)\Infigo\InfigoOperator.exe [19720 2015-02-27] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [207904 2009-04-19] ()
R2 ServiceEverything; C:\Users\stephane\AppData\Everything\ServiceEverything.exe [233984 2015-01-09] () [File not signed]
R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [240160 2009-07-04] (Acer)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [463872 2015-01-19] (SysTool PasSame LIMITED) [File not signed]
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [X] <==== ATTENTION
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]
S3 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [X]
S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
R2 zutumuwy; C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000\nsf53B4.tmpfs [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 StarOpen; No ImagePath
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2013-04-24] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2013-04-24] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2013-04-24] (LG Electronics Inc.)
S3 cpuz134; \??\C:\Users\stephane\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 nmwcdcx64; system32\drivers\nmwcdcx64.sys [X]
S3 nmwcdx64; system32\drivers\nmwcdx64.sys [X]
S3 PCAMPR4; \??\C:\Windows\system32\PCAMPR4.SYS [X]
S3 PCANDIS4; \??\C:\Windows\system32\PCANDIS4.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 13:01 - 2015-03-03 13:01 - 00013635 _____ () C:\Users\stephane\Desktop\fixlist.txt
2015-03-03 12:53 - 2015-03-03 12:53 - 00063667 _____ () C:\Users\stephane\Desktop\erreur pc.txt
2015-03-03 12:46 - 2015-03-03 12:47 - 00063667 _____ () C:\Users\stephane\Downloads\Addition.txt
2015-03-03 12:45 - 2015-03-03 13:11 - 00022957 _____ () C:\Users\stephane\Downloads\FRST.txt
2015-03-03 12:44 - 2015-03-03 13:11 - 00000000 ____D () C:\FRST
2015-03-03 12:43 - 2015-03-03 12:44 - 02092544 _____ (Farbar) C:\Users\stephane\Downloads\FRST64.exe
2015-03-03 12:42 - 2015-03-03 12:42 - 00001000 _____ () C:\Users\stephane\Desktop\Infigo.lnk
2015-03-03 12:42 - 2015-03-03 12:42 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Infigo
2015-03-03 12:42 - 2015-03-03 12:42 - 00000000 ____D () C:\Program Files (x86)\Infigo
2015-03-03 12:41 - 2015-03-03 12:41 - 07780256 _____ () C:\Users\stephane\Downloads\Infigo_setup (1).exe
2015-03-03 12:22 - 2015-03-03 12:22 - 07780256 _____ () C:\Users\stephane\Downloads\Infigo_setup.exe
2015-03-03 08:02 - 2015-03-03 08:02 - 00000000 ____D () C:\ProgramData\EmailNotifier
2015-03-03 08:01 - 2015-03-03 08:02 - 00000000 ____D () C:\Program Files (x86)\mystarttb
2015-03-02 12:06 - 2015-03-03 13:06 - 00005506 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-6.job
2015-03-02 12:06 - 2015-03-03 13:06 - 00003126 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-6.job
2015-03-02 12:06 - 2015-03-03 13:06 - 00002100 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-10_user.job
2015-03-02 12:06 - 2015-03-03 12:20 - 00005170 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-7.job
2015-03-02 12:06 - 2015-03-03 12:20 - 00003462 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-7.job
2015-03-02 12:06 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5_user.job
2015-03-02 12:06 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5.job
2015-03-02 12:06 - 2015-03-02 12:06 - 00008534 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-6
2015-03-02 12:06 - 2015-03-02 12:06 - 00008200 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-7
2015-03-02 12:06 - 2015-03-02 12:06 - 00006492 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-7
2015-03-02 12:06 - 2015-03-02 12:06 - 00006154 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-1-6
2015-03-02 12:06 - 2015-03-02 12:06 - 00005464 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-5
2015-03-02 12:06 - 2015-03-02 12:06 - 00000000 ____D () C:\Program Files (x86)\30215a2f-25e0-405c-b5a6-cabd1843ece0
2015-03-02 12:05 - 2015-03-03 12:20 - 00004098 _____ () C:\Windows\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-12.job
2015-03-02 12:05 - 2015-03-02 12:05 - 00007128 _____ () C:\Windows\System32\Tasks\57235478-55da-4ce4-9881-bb38d5bc62dc-12
2015-03-01 10:36 - 2015-03-01 10:36 - 00002385 _____ () C:\Users\stephane\Desktop\Doctor pc.lnk
2015-03-01 10:17 - 2015-03-01 10:17 - 00003286 _____ () C:\Windows\System32\Tasks\BOdQ8LkYb4c55qq
2015-03-01 10:16 - 2015-03-01 10:17 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\gzLaPpR
2015-03-01 10:16 - 2015-03-01 10:16 - 00003246 _____ () C:\Windows\System32\Tasks\wNBKHd4eEScji4q
2015-03-01 10:16 - 2015-03-01 10:16 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\GEx53bN
2015-02-28 13:24 - 2015-03-03 07:50 - 00000224 _____ () C:\Windows\setupact.log
2015-02-28 13:24 - 2015-02-28 13:24 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-28 13:23 - 2015-02-28 13:23 - 00001224 _____ () C:\Windows\PFRO.log
2015-02-27 15:29 - 2015-03-03 07:50 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-02-27 14:24 - 2015-02-27 14:24 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-02-25 22:47 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 22:47 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-23 22:01 - 2015-03-03 13:01 - 00005506 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-6.job
2015-02-23 22:01 - 2015-03-03 13:01 - 00003126 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-6.job
2015-02-23 22:01 - 2015-03-03 12:20 - 00005506 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-7.job
2015-02-23 22:01 - 2015-03-03 12:20 - 00003462 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-7.job
2015-02-23 22:01 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5_user.job
2015-02-23 22:01 - 2015-03-03 12:20 - 00002434 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5.job
2015-02-23 22:01 - 2015-02-23 22:01 - 00008536 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-7
2015-02-23 22:01 - 2015-02-23 22:01 - 00008534 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-6
2015-02-23 22:01 - 2015-02-23 22:01 - 00006492 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-7
2015-02-23 22:01 - 2015-02-23 22:01 - 00006154 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-1-6
2015-02-23 22:01 - 2015-02-23 22:01 - 00005464 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-5
2015-02-23 22:00 - 2015-03-03 13:00 - 00002100 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-10_user.job
2015-02-23 22:00 - 2015-03-03 12:20 - 00005172 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-11.job
2015-02-23 22:00 - 2015-03-03 12:20 - 00004106 _____ () C:\Windows\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-12.job
2015-02-23 22:00 - 2015-02-23 22:00 - 00008202 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-11
2015-02-23 22:00 - 2015-02-23 22:00 - 00007136 _____ () C:\Windows\System32\Tasks\af4814fd-f5f3-472b-9490-3ffb9a992d6c-12
2015-02-23 21:56 - 2015-03-03 12:56 - 00003458 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6.job
2015-02-23 21:56 - 2015-03-03 12:20 - 00002774 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5_user.job
2015-02-23 21:56 - 2015-03-03 12:20 - 00002774 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5.job
2015-02-23 21:56 - 2015-02-23 21:56 - 00006486 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-6
2015-02-23 21:56 - 2015-02-23 21:56 - 00005804 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-5
2015-02-23 21:55 - 2015-03-03 12:55 - 00005846 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-6.job
2015-02-23 21:55 - 2015-03-03 12:55 - 00002096 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-10_user.job
2015-02-23 21:55 - 2015-03-03 12:20 - 00005502 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-7.job
2015-02-23 21:55 - 2015-03-03 12:20 - 00005168 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-11.job
2015-02-23 21:55 - 2015-03-03 12:20 - 00003458 _____ () C:\Windows\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-7.job
2015-02-23 21:55 - 2015-03-03 12:20 - 00000956 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-02-23 21:55 - 2015-03-03 12:20 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-02-23 21:55 - 2015-03-02 12:06 - 00003954 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-02-23 21:55 - 2015-03-02 12:06 - 00003700 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-02-23 21:55 - 2015-02-23 22:52 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
2015-02-23 21:55 - 2015-02-23 21:55 - 00008874 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-6
2015-02-23 21:55 - 2015-02-23 21:55 - 00008532 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-7
2015-02-23 21:55 - 2015-02-23 21:55 - 00008198 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-11
2015-02-23 21:55 - 2015-02-23 21:55 - 00006488 _____ () C:\Windows\System32\Tasks\f357f436-c5ce-4c19-8475-ff458591eb6f-1-7
2015-02-23 21:53 - 2015-02-23 21:53 - 00003836 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-02-23 21:53 - 2015-02-23 21:53 - 00003170 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
2015-02-23 21:42 - 2015-02-23 21:42 - 00007609 _____ () C:\Users\stephane\AppData\Local\Resmon.ResmonCfg
2015-02-23 21:40 - 2015-02-23 21:40 - 00000000 ____D () C:\Users\stephane\AppData\Local\Boxore
2015-02-23 21:38 - 2015-03-03 12:43 - 00000922 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
2015-02-23 21:38 - 2015-03-03 07:50 - 00000918 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
2015-02-23 21:38 - 2015-02-23 23:04 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\WTools
2015-02-23 21:38 - 2015-02-23 22:47 - 00000156 _____ () C:\Users\stephane\AppData\Roaming\Selection Tools.installation.log
2015-02-23 21:38 - 2015-02-23 21:38 - 00003918 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
2015-02-23 21:38 - 2015-02-23 21:38 - 00003666 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
2015-02-23 21:35 - 2015-02-23 21:38 - 00001300 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.boostrap.log
2015-02-22 12:46 - 2015-03-03 12:51 - 00002434 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5_user.job
2015-02-22 12:46 - 2015-03-03 12:50 - 00005506 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-6.job
2015-02-22 12:46 - 2015-03-03 12:50 - 00003462 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-7.job
2015-02-22 12:46 - 2015-03-03 12:50 - 00003126 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6.job
2015-02-22 12:46 - 2015-03-03 12:50 - 00002434 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5.job
2015-02-22 12:46 - 2015-02-22 12:50 - 00008534 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-6
2015-02-22 12:46 - 2015-02-22 12:50 - 00007206 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-7
2015-02-22 12:46 - 2015-02-22 12:50 - 00006492 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-7
2015-02-22 12:46 - 2015-02-22 12:50 - 00006154 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-1-6
2015-02-22 12:46 - 2015-02-22 12:50 - 00005464 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-5
2015-02-22 12:46 - 2015-02-22 12:50 - 00005170 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-7.job
2015-02-22 12:45 - 2015-03-03 12:50 - 00004090 _____ () C:\Windows\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-12.job
2015-02-22 12:45 - 2015-02-22 12:50 - 00007120 _____ () C:\Windows\System32\Tasks\e688a564-76e7-44a9-b6da-ef8f55ca380c-12
2015-02-20 13:33 - 2015-03-03 07:50 - 00003462 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-7.job
2015-02-20 13:33 - 2015-03-03 07:50 - 00002434 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5_user.job
2015-02-20 13:33 - 2015-03-03 07:50 - 00002434 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5.job
2015-02-20 13:33 - 2015-02-20 13:39 - 00006492 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-7
2015-02-20 13:33 - 2015-02-20 13:39 - 00005464 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-5
2015-02-20 13:33 - 2015-02-20 13:39 - 00005162 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-6
2015-02-20 13:33 - 2015-02-20 13:39 - 00003126 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-1-6.job
2015-02-20 13:32 - 2015-03-03 12:38 - 00005506 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-6.job
2015-02-20 13:32 - 2015-03-03 07:50 - 00005170 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-7.job
2015-02-20 13:32 - 2015-03-03 07:50 - 00004084 _____ () C:\Windows\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-12.job
2015-02-20 13:32 - 2015-03-02 12:06 - 00000000 ___HD () C:\Program Files (x86)\winservice86
2015-02-20 13:32 - 2015-02-20 13:38 - 00008534 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-6
2015-02-20 13:32 - 2015-02-20 13:38 - 00008200 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-7
2015-02-20 13:32 - 2015-02-20 13:38 - 00007114 _____ () C:\Windows\System32\Tasks\8c6736a2-0446-4148-8f02-ca63eff37ec5-12
2015-02-20 13:22 - 2015-02-20 13:22 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-02-19 13:57 - 2015-02-22 19:12 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2015-02-19 13:57 - 2015-02-20 13:20 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2015-02-19 13:57 - 2015-02-19 19:32 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2015-02-19 13:57 - 2015-02-19 19:12 - 00002834 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2015-02-19 13:57 - 2015-02-19 19:12 - 00002832 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2015-02-19 13:57 - 2015-02-19 19:12 - 00002832 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2015-02-19 13:54 - 2015-02-19 13:54 - 00628496 _____ (CMI Limited) C:\Users\stephane\AppData\Local\nskCC1D.tmp
2015-02-19 13:54 - 2015-02-19 13:54 - 00000000 __SHD () C:\Users\stephane\AppData\Roaming\AnyProtectEx
2015-02-19 13:24 - 2015-02-19 13:24 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-19 12:31 - 2015-02-19 12:32 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\5B112500-1424349074-0920-0921-134444000000
2015-02-17 19:16 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-17 19:16 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-17 19:16 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-17 19:16 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-12 11:06 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 11:06 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 11:06 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 11:06 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 11:29 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 11:29 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 11:29 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 11:29 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 11:29 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 11:29 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 11:29 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 11:29 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 11:29 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 11:29 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 11:29 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 11:29 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 11:29 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 11:29 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 11:29 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 11:29 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 11:29 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 11:29 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 11:29 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 11:29 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 11:29 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 11:29 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 11:29 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 11:29 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 11:29 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 11:29 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 11:29 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 11:29 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 11:29 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 11:29 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 11:29 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 11:29 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 11:29 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 11:29 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 11:29 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 11:29 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 11:29 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 11:29 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 11:29 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 11:29 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 11:29 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 11:29 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 11:29 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 11:29 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 11:29 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 11:29 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 11:29 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 11:29 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 11:29 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 11:29 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 11:29 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 11:29 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 11:29 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 11:29 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 11:29 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 11:29 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 11:29 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 11:25 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 11:25 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 11:25 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 11:25 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 11:25 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 11:25 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 11:25 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 11:25 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 11:25 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 11:25 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 11:25 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 11:25 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 11:25 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 11:25 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 11:25 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 11:25 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 11:25 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 11:25 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 11:25 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 11:25 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 11:25 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 11:25 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 11:25 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 11:25 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 11:25 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 11:25 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 11:25 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 11:25 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 11:25 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 11:25 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 11:25 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 11:25 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 11:25 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 11:24 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-07 17:31 - 2015-02-07 17:31 - 00038400 _____ () C:\Users\stephane\Desktop\GT6QUICKTUNE-v4.3.xls
2015-02-07 17:25 - 2015-02-07 17:25 - 00136704 _____ () C:\Users\stephane\Desktop\Quick-Tune-GT6-V4_3-Modif-STF1900-V2_0.xls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 13:04 - 2010-12-25 09:53 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000UA.job
2015-03-03 12:55 - 2014-11-09 16:50 - 00003960 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{AB53DDEC-EA2C-460D-AA65-F2D8AEB9838F}
2015-03-03 12:55 - 2010-01-29 17:59 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-03 12:36 - 2012-10-09 08:44 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-03 12:20 - 2009-09-21 07:35 - 01446420 _____ () C:\Windows\WindowsUpdate.log
2015-03-03 12:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-03 09:04 - 2010-12-25 09:53 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000Core.job
2015-03-03 08:39 - 2014-11-04 08:39 - 00001698 _____ () C:\Windows\Tasks\DKPPHHHJ.job
2015-03-03 08:39 - 2014-11-04 08:39 - 00001352 _____ () C:\Windows\Tasks\BFXIYLA.job
2015-03-03 08:16 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-03 08:16 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-03 08:11 - 2014-11-23 10:16 - 00000197 _____ () C:\Users\stephane\AppData\Local\recently-fix.db
2015-03-03 07:50 - 2014-11-02 22:20 - 00001344 _____ () C:\Windows\Tasks\KQH.job
2015-03-03 07:50 - 2010-05-03 13:23 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-03-03 07:50 - 2010-01-29 17:59 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-03 07:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-02 22:52 - 2015-01-19 10:19 - 00000000 ____D () C:\Users\stephane\AppData\Everything
2015-03-02 12:08 - 2009-09-04 02:48 - 00747660 _____ () C:\Windows\system32\perfh00C.dat
2015-03-02 12:08 - 2009-09-04 02:48 - 00150184 _____ () C:\Windows\system32\perfc00C.dat
2015-03-02 12:08 - 2009-07-14 06:13 - 01669656 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-02 12:06 - 2010-01-03 17:54 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2015-03-01 10:17 - 2014-11-21 20:11 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\WkYr6jP
2015-02-27 15:22 - 2012-02-06 10:45 - 00000000 ____D () C:\Users\stephane\Documents\doc reynard
2015-02-27 15:21 - 2009-12-10 12:04 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Adobe
2015-02-24 08:16 - 2014-08-14 10:33 - 00004026 _____ () C:\Windows\System32\Tasks\LaunchSignup
2015-02-23 23:05 - 2014-11-02 21:22 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Store
2015-02-23 22:49 - 2009-08-25 20:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-23 22:47 - 2014-11-02 22:22 - 00003346 _____ () C:\Windows\SysWOW64\${LOGFILE}
2015-02-23 22:47 - 2014-11-02 21:21 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\Nosibay
2015-02-23 22:44 - 2014-11-02 21:31 - 00000449 _____ () C:\Windows\wininit.ini
2015-02-23 21:37 - 2014-11-02 21:22 - 00000826 _____ () C:\Users\stephane\AppData\Roaming\WindApp.installation.log
2015-02-23 21:37 - 2014-11-02 21:21 - 00017906 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.installation.log
2015-02-23 21:36 - 2014-11-02 21:20 - 00000291 _____ () C:\Users\stephane\AppData\Roaming\WindApp.boostrap.log
2015-02-22 15:33 - 2009-12-10 20:43 - 00000000 ____D () C:\Users\stephane\Documents\elodie
2015-02-20 13:20 - 2009-08-25 20:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-19 13:26 - 2009-12-10 12:48 - 00000000 ____D () C:\Users\stephane\AppData\Local\Adobe
2015-02-14 22:08 - 2010-03-25 22:01 - 00000000 ____D () C:\Users\stephane\AppData\Roaming\vlc
2015-02-14 13:09 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-02-12 10:54 - 2009-07-14 05:45 - 00360688 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 10:51 - 2014-12-12 08:36 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 10:51 - 2014-05-06 21:57 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 23:17 - 2009-08-25 20:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 23:16 - 2011-12-16 21:53 - 00002126 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 23:16 - 2011-12-16 21:53 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 23:15 - 2013-07-27 20:33 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 23:15 - 2011-12-16 21:53 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 23:15 - 2011-12-16 21:53 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 23:09 - 2010-01-07 11:04 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-07 22:50 - 2010-01-29 17:59 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-07 22:50 - 2010-01-29 17:59 - 00003814 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 23:37 - 2012-10-09 08:44 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 23:37 - 2012-10-09 08:44 - 00003940 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 23:37 - 2011-05-14 19:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 08:59 - 2010-12-25 09:53 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000UA
2015-02-04 08:59 - 2010-12-25 09:53 - 00003670 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3880327527-1881455864-3875434641-1000Core

==================== Files in the root of some directories =======

2009-08-25 20:27 - 2008-04-29 14:04 - 0157442 _____ () C:\Program Files (x86)\Common Files\emachines.ico
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\stephane\AppData\Roaming\BFXIYLA
2014-11-04 08:39 - 2014-11-04 08:39 - 1514928 _____ () C:\Users\stephane\AppData\Roaming\BFXIYLA.exe
2015-02-23 21:35 - 2015-02-23 21:38 - 0001300 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.boostrap.log
2014-11-02 21:21 - 2015-02-23 21:37 - 0017906 _____ () C:\Users\stephane\AppData\Roaming\Bubble Dock.installation.log
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\stephane\AppData\Roaming\DKPPHHHJ
2014-11-02 21:17 - 2014-11-02 21:17 - 1524656 _____ () C:\Users\stephane\AppData\Roaming\FAAOU.exe
2014-11-02 21:16 - 2014-11-02 21:16 - 2012592 _____ () C:\Users\stephane\AppData\Roaming\KEHI.exe
2014-11-02 22:19 - 2014-11-02 22:19 - 2001328 _____ () C:\Users\stephane\AppData\Roaming\KKTHHJ.exe
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\stephane\AppData\Roaming\KQH
2015-02-23 21:38 - 2015-02-23 22:47 - 0000156 _____ () C:\Users\stephane\AppData\Roaming\Selection Tools.installation.log
2014-11-02 21:20 - 2015-02-23 21:36 - 0000291 _____ () C:\Users\stephane\AppData\Roaming\WindApp.boostrap.log
2014-11-02 21:22 - 2015-02-23 21:37 - 0000826 _____ () C:\Users\stephane\AppData\Roaming\WindApp.installation.log
2009-12-10 12:49 - 2014-11-24 23:05 - 0002218 _____ () C:\Users\stephane\AppData\Roaming\wklnhst.dat
2014-03-20 10:00 - 2013-12-06 10:04 - 0492208 _____ () C:\Users\stephane\AppData\Roaming\~srgbwoi.exe
2014-08-14 10:37 - 2014-08-14 10:37 - 0667648 _____ () C:\Users\stephane\AppData\Roaming\~uqyudkj.exe
2013-06-30 21:44 - 2013-06-30 21:50 - 0314328 _____ () C:\Users\stephane\AppData\Local\AddLyrics.exe
2013-12-25 19:28 - 2013-12-25 19:40 - 0000790 _____ () C:\Users\stephane\AppData\Local\cookies.ini
2010-07-25 11:54 - 2010-07-25 11:54 - 0003584 _____ () C:\Users\stephane\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-30 21:44 - 2013-06-30 21:50 - 0785904 _____ () C:\Users\stephane\AppData\Local\DeltaToolbar.exe
2013-06-30 21:44 - 2013-06-30 21:50 - 0841871 _____ () C:\Users\stephane\AppData\Local\IminentMinibar.exe
2015-02-19 13:54 - 2015-02-19 13:54 - 0628496 _____ (CMI Limited) C:\Users\stephane\AppData\Local\nskCC1D.tmp
2013-06-30 21:44 - 2013-06-30 21:50 - 0635596 _____ () C:\Users\stephane\AppData\Local\PricePeep.exe
2014-11-23 10:16 - 2015-03-03 08:11 - 0000197 _____ () C:\Users\stephane\AppData\Local\recently-fix.db
2015-02-23 21:42 - 2015-02-23 21:42 - 0007609 _____ () C:\Users\stephane\AppData\Local\Resmon.ResmonCfg
2010-03-25 19:50 - 2010-03-25 19:50 - 0000041 ___SH () C:\ProgramData\.zreglib
2009-08-25 20:28 - 2009-07-18 02:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe
2014-06-12 17:09 - 2014-07-28 09:48 - 0431104 _____ () C:\ProgramData\uninstall_Deeal.exe

Files to move or delete:
====================
C:\ProgramData\uninstall_Deeal.exe

Some content of TEMP:
====================
C:\Users\stephane\AppData\Local\Temp\dbcabfbbcdd.exe
C:\Users\stephane\AppData\Local\Temp\mytmpinstaller.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-24 15:33

==================== End Of Log ============================

Réponse 2 / 4

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
26 févr. 2015 à 14:35

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [GM4IE] => C:\Facemoi\facemoi.exe
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [fdcsqphf] => c:\users\maarwalaboss\appdata\local\lollipop\fdcsqphf.exe fdcsqphf
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [WindApp] => C:\Users\MaarwaLaBoss\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 nSfkjQSVXLu; C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe [2733552 2015-02-25] (Rational Thought Solutions)
R2 petonuve; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\jnsy537B.tmp [168960 2015-02-25] () [File not signed]
R2 pfsvc_1.10.0.8; C:\Program Files\PhraseFinder_1.10.0.8\Service\pfsvc.exe [278608 2015-01-21] (Phrase Finder)
R2 pysucode; C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD\snsk55B0.tmp [179712 2015-02-25] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-26] (SysTool PasSame LIMITED)
R2 sucoweti; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\nsj1982.tmpfs [X]
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
2015-02-26 13:15 - 2015-02-26 13:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\Documents\PC Speed Maximizer
2015-02-26 13:14 - 2015-02-26 13:14 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-26 13:13 - 2015-02-26 13:14 - 00000000 ____D () C:\Program Files\XTab
2015-02-26 13:13 - 2015-02-26 13:13 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-26 13:11 - 2015-02-26 13:11 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page
2015-02-26 13:10 - 2015-02-26 13:10 - 00001039 _____ () C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PhraseFinder_1.10.0.8
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PC Speed Maximizer
2015-02-26 13:06 - 2015-02-26 13:06 - 01129240 _____ () C:\Users\MaarwaLaBoss\Downloads\Setup.exe
2015-02-26 12:39 - 2015-02-26 13:16 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.installation.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.installation.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WTools
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Store
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2015-02-25 23:13 - 2015-02-25 23:15 - 00005757 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log
2015-02-25 23:12 - 2015-02-25 23:15 - 00001314 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log
2015-02-25 23:12 - 2015-02-25 23:12 - 00000097 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log
2015-02-25 23:11 - 2015-02-26 13:11 - 00003122 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job
2015-02-25 23:11 - 2015-02-26 12:37 - 00003458 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job
2015-02-25 23:10 - 2015-02-25 23:15 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-02-25 23:09 - 2015-02-26 13:09 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job
2015-02-25 23:09 - 2015-02-26 12:38 - 00000948 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-02-25 23:09 - 2015-02-26 12:37 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job
2015-02-25 23:09 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-25 23:08 - 2015-02-26 13:08 - 00002096 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job
2015-02-25 23:08 - 2015-02-26 12:38 - 00004064 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job
2015-02-25 23:08 - 2015-02-25 23:11 - 00000000 ____D () C:\Program Files\winservice86
2015-02-25 21:48 - 2015-02-25 22:10 - 00000000 ____D () C:\Program Files\NZBPlayer
2015-02-25 21:48 - 2015-02-25 21:48 - 00000888 _____ () C:\Users\Invité\Desktop\NZBMovies.lnk
2015-02-25 21:48 - 2015-02-25 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
2015-02-25 21:46 - 2015-02-26 12:37 - 00001362 _____ () C:\Windows\Tasks\MFLI.job
2015-02-25 21:46 - 2015-02-25 21:46 - 00000000 ____D () C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438
2015-02-25 21:45 - 2015-02-25 22:53 - 00000000 ____D () C:\Program Files\HQCinema Pro 2.1V25.02
2015-02-25 18:53 - 2015-02-25 18:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD
2015-02-25 17:26 - 2015-02-25 17:26 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD
2015-02-25 16:53 - 2015-02-25 16:45 - 00056515 _____ () C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt
2015-02-25 16:40 - 2015-02-25 16:40 - 00613057 _____ (CMI Limited) C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp
2015-02-25 16:31 - 2015-02-25 16:32 - 00000000 ____D () C:\ProgramData\TlNNEwgTvUH
2015-02-25 16:30 - 2015-02-26 12:38 - 00001366 _____ () C:\Windows\Tasks\XGKXWH.job
2015-02-25 16:30 - 2015-02-25 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf
2015-02-25 16:16 - 2015-02-26 12:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD
2015-02-25 16:14 - 2015-02-25 16:39 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD
2015-02-24 12:06 - 2015-02-24 12:06 - 00000000 ____D () C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t
2015-02-20 23:14 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381
2015-02-01 14:46 - 2015-02-01 14:48 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-02-24 11:53 - 2015-01-25 20:05 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR
2015-02-25 22:52 - 2014-11-21 21:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-12.exe:/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=59DC99022A1445AEA14117175CAA670FIE /verifier=7fe201effa46e8311470d93ce4c20d22 /installerversion=1_36_01_22 /installationtime=1424902086 /statsdomain=http://stats.ourinfoonlinestack.com /errorsdomain=http://errors.ourinfoonlinestack.com /url=http://update.ourinfoonlinestack.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='0_12582913_-2147483648_0' /processid='791EE243D3714672BFE37FD871001FA2PI' /installationtime='1424902086' /installername='C:\Users\MAARWA~1\AppData\Local\Temp\nsn121A.tmp\Ctijl.exe' /mac='342910909+498139398+64:31:50:65:B6:CD' /macs='572f25784f14e26d343ba42ddaa5e318' /sid='S-1-5-21-4139596143-1751265584-3382870510-1003' /jsmainfunc=main /ffid=taylorralston@hotmail.com /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=29672d50-4e4a-4825-b121-e34ecad7b2da /guid2=cc34cdb5-c607-4383-91d3-b191e4e7a6d9 /guid3=686e2d41-5a10-4cc8-ba90-fcbf6b11e320 /guid4=f8922a33-557c-4f6e-8995-dd4a0f2d095f /guid5=41887939-76d6-445d-bfa6-8d929e2612b3 /guid6=0fe4ccef-30d2-4b08-b05b-cee45bfba460 /guid7=fa848bbc-ff38-4406-a208-51065518b472 /guid8=c0194550-641c-4a9c-a0c6-bffd5741a694 /guid9=25f5dd48-a503-4e7c-accc-7cb5e4bb68a8 /guid10=adbbf8d7-0237-4d7e-9cd3-565ed2aa7f35 /guid11=45f3fb54-9acf-435e-a21a-5c5821b940ec /guid12=d441cbbd-06d8-4824-ac20-a004f6c55cfe /guid13=bacd83d0-cdd3-44b8-88d7-4ef43eb166bc /guid14=98a2d619-50dc-4e6e-a6ff-9af474e20801 /guid15=89b5168f-c3ad-4c7d-9cbf-8b26792cdbb0 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=529 /verifiertaskname='29672d50-4e4a-4825-b121-e34ecad7b2da-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\MFLI.job => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: C:\Windows\Tasks\XGKXWH.job => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {EAD95DF8-941F-43CA-B601-4CD090AC66E1} - System32\Tasks\MFLI => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: {ECA7983F-561B-4C7C-B5B9-500A5073A3B6} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files\PC Speed Maximizer\SPMSchedule.exe [2014-11-14] (Avanquest Software)
Task: {F3606A00-3C97-4FD0-BC44-0979CC6B5E4C} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\MaarwaLaBoss\AppData\Roaming\~swgghgh.exe
Task: {CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {DFC97F14-3140-4AF5-917B-6A444E4B907C} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {8D59EF2E-6BBA-4F07-9967-04994983132C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION
Task: {8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {A3111540-DC22-4B9F-B351-34446D496CDE} - System32\Tasks\WIN-statsAdmin => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~hsndvmv.exe <==== ATTENTION
Task: {2E7135B9-187A-44A2-95D6-60FE532AA1C5} - System32\Tasks\WIN-statsSystem => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~pewzffw.exe
Task: {33F8754B-AF21-4C91-B077-B027DFA3A778} - System32\Tasks\XGKXWH => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {04A54772-6972-48E9-BDC1-7DC917A797B2} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {0C3E0347-64B5-4EF3-AEF5-887188AAC928} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-06] (Google Inc.)
Task: {0C492543-A5CA-4709-B7AD-D1BDF719C3C2} - System32\Tasks\PjybSwsUh9KvOWv => C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t\4o5O3cu.exe [2015-02-24] ( )
Task: {0FA54608-C1CE-4CED-907E-0346B61B596C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.

Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

marmarmar
26 févr. 2015 à 16:10

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-02-2015 01
Ran by MaarwaLaBoss at 2015-02-26 16:02:24 Run:1
Running from C:\Users\MaarwaLaBoss\Desktop
Loaded Profiles: MaarwaLaBoss (Available profiles: MaarwaLaBoss & Invité)
Boot Mode: Normal

==============================================

Content of fixlist:

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
26 févr. 2015 à 17:36

tu n'as as tout copié/collé.

marmarmar
26 févr. 2015 à 17:40

HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [GM4IE] => C:\Facemoi\facemoi.exe
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [fdcsqphf] => c:\users\maarwalaboss\appdata\local\lollipop\fdcsqphf.exe fdcsqphf
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\...\Run: [WindApp] => C:\Users\MaarwaLaBoss\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
R2 IHProtect Service; C:\PROGRAM Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 nSfkjQSVXLu; C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe [2733552 2015-02-25] (Rational Thought Solutions)
R2 petonuve; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\jnsy537B.tmp [168960 2015-02-25] () [File not signed]
R2 pfsvc_1.10.0.8; C:\Program Files\PhraseFinder_1.10.0.8\Service\pfsvc.exe [278608 2015-01-21] (Phrase Finder)
R2 pysucode; C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD\snsk55B0.tmp [179712 2015-02-25] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-26] (SysTool PasSame LIMITED)
R2 sucoweti; C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD\nsj1982.tmpfs [X]
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
2015-02-26 13:15 - 2015-02-26 13:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\Documents\PC SPEED Maximizer
2015-02-26 13:14 - 2015-02-26 13:14 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-26 13:13 - 2015-02-26 13:14 - 00000000 ____D () C:\Program Files\XTab
2015-02-26 13:13 - 2015-02-26 13:13 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-26 13:11 - 2015-02-26 13:11 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page
2015-02-26 13:10 - 2015-02-26 13:10 - 00001039 _____ () C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PhraseFinder_1.10.0.8
2015-02-26 13:10 - 2015-02-26 13:10 - 00000000 ____D () C:\Program Files\PC Speed Maximizer
2015-02-26 13:06 - 2015-02-26 13:06 - 01129240 _____ () C:\Users\MaarwaLaBoss\DOWNLOADS\Setup.exe
2015-02-26 12:39 - 2015-02-26 13:16 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.INSTALLATION.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000078 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.INSTALLATION.log
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WTools
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Store
2015-02-25 23:15 - 2015-02-25 23:15 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2015-02-25 23:13 - 2015-02-25 23:15 - 00005757 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log
2015-02-25 23:12 - 2015-02-25 23:15 - 00001314 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log
2015-02-25 23:12 - 2015-02-25 23:12 - 00000097 _____ () C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log
2015-02-25 23:11 - 2015-02-26 13:11 - 00003122 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job
2015-02-25 23:11 - 2015-02-26 12:38 - 00002430 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job
2015-02-25 23:11 - 2015-02-26 12:37 - 00003458 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job
2015-02-25 23:10 - 2015-02-25 23:15 - 00000952 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-02-25 23:09 - 2015-02-26 13:09 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job
2015-02-25 23:09 - 2015-02-26 12:38 - 00000948 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-02-25 23:09 - 2015-02-26 12:37 - 00005502 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job
2015-02-25 23:09 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate
2015-02-25 23:09 - 2015-02-25 23:09 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-25 23:08 - 2015-02-26 13:08 - 00002096 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job
2015-02-25 23:08 - 2015-02-26 12:38 - 00004064 _____ () C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job
2015-02-25 23:08 - 2015-02-25 23:11 - 00000000 ____D () C:\Program Files\winservice86
2015-02-25 21:48 - 2015-02-25 22:10 - 00000000 ____D () C:\Program Files\NZBPlayer
2015-02-25 21:48 - 2015-02-25 21:48 - 00000888 _____ () C:\Users\Invité\Desktop\NZBMovies.lnk
2015-02-25 21:48 - 2015-02-25 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer
2015-02-25 21:46 - 2015-02-26 12:37 - 00001362 _____ () C:\Windows\Tasks\MFLI.job
2015-02-25 21:46 - 2015-02-25 21:46 - 00000000 ____D () C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438
2015-02-25 21:45 - 2015-02-25 22:53 - 00000000 ____D () C:\Program Files\HQCinema Pro 2.1V25.02
2015-02-25 18:53 - 2015-02-25 18:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD
2015-02-25 17:26 - 2015-02-25 17:26 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD
2015-02-25 16:53 - 2015-02-25 16:45 - 00056515 _____ () C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt
2015-02-25 16:40 - 2015-02-25 16:40 - 00613057 _____ (CMI Limited) C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp
2015-02-25 16:31 - 2015-02-25 16:32 - 00000000 ____D () C:\ProgramData\TlNNEwgTvUH
2015-02-25 16:30 - 2015-02-26 12:38 - 00001366 _____ () C:\Windows\Tasks\XGKXWH.job
2015-02-25 16:30 - 2015-02-25 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf
2015-02-25 16:16 - 2015-02-26 12:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD
2015-02-25 16:14 - 2015-02-25 16:39 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD
2015-02-24 12:06 - 2015-02-24 12:06 - 00000000 ____D () C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5
2015-02-24 11:53 - 2015-02-24 11:53 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t
2015-02-20 23:14 - 2015-02-25 23:10 - 00000000 ____D () C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381
2015-02-01 14:46 - 2015-02-01 14:48 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-02-24 11:53 - 2015-01-25 20:05 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR
2015-02-25 22:52 - 2014-11-21 21:42 - 00000000 ____D () C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-12.exe:/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=59DC99022A1445AEA14117175CAA670FIE /verifier=7fe201effa46e8311470d93ce4c20d22 /installerversion=1_36_01_22 /installationtime=1424902086 /statsdomain=http://stats.ourinfoonlinestack.com /errorsdomain=http://errors.ourinfoonlinestack.com /url=http://update.ourinfoonlinestack.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='0_12582913_-2147483648_0' /processid='791EE243D3714672BFE37FD871001FA2PI' /installationtime='1424902086' /installername='C:\Users\MAARWA~1\AppData\Local\Temp\nsn121A.tmp\Ctijl.exe' /mac='342910909+498139398+64:31:50:65:B6:CD' /macs='572f25784f14e26d343ba42ddaa5e318' /sid='S-1-5-21-4139596143-1751265584-3382870510-1003' /jsmainfunc=main /ffid=***@*** /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=29672d50-4e4a-4825-b121-e34ecad7b2da /guid2=cc34cdb5-c607-4383-91d3-b191e4e7a6d9 /guid3=686e2d41-5a10-4cc8-ba90-fcbf6b11e320 /guid4=f8922a33-557c-4f6e-8995-dd4a0f2d095f /guid5=41887939-76d6-445d-bfa6-8d929e2612b3 /guid6=0fe4ccef-30d2-4b08-b05b-cee45bfba460 /guid7=fa848bbc-ff38-4406-a208-51065518b472 /guid8=c0194550-641c-4a9c-a0c6-bffd5741a694 /guid9=25f5dd48-a503-4e7c-accc-7cb5e4bb68a8 /guid10=adbbf8d7-0237-4d7e-9cd3-565ed2aa7f35 /guid11=45f3fb54-9acf-435e-a21a-5c5821b940ec /guid12=d441cbbd-06d8-4824-ac20-a004f6c55cfe /guid13=bacd83d0-cdd3-44b8-88d7-4ef43eb166bc /guid14=98a2d619-50dc-4e6e-a6ff-9af474e20801 /guid15=89b5168f-c3ad-4c7d-9cbf-8b26792cdbb0 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=529 /verifiertaskname='29672d50-4e4a-4825-b121-e34ecad7b2da-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\MFLI.job => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: C:\Windows\Tasks\XGKXWH.job => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {EAD95DF8-941F-43CA-B601-4CD090AC66E1} - System32\Tasks\MFLI => C:\Users\MaarwaLaBoss\AppData\Roaming\MFLI.exe <==== ATTENTION
Task: {ECA7983F-561B-4C7C-B5B9-500A5073A3B6} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files\PC Speed Maximizer\SPMSchedule.exe [2014-11-14] (Avanquest Software)
Task: {F3606A00-3C97-4FD0-BC44-0979CC6B5E4C} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\MaarwaLaBoss\AppData\Roaming\~swgghgh.exe
Task: {CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {DFC97F14-3140-4AF5-917B-6A444E4B907C} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {8D59EF2E-6BBA-4F07-9967-04994983132C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION
Task: {8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {A3111540-DC22-4B9F-B351-34446D496CDE} - System32\Tasks\WIN-statsAdmin => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~hsndvmv.exe <==== ATTENTION
Task: {2E7135B9-187A-44A2-95D6-60FE532AA1C5} - System32\Tasks\WIN-statsSystem => C:\Users\MaarwaLaBoss\AppData\Local\Microsoft\WinU\~pewzffw.exe
Task: {33F8754B-AF21-4C91-B077-B027DFA3A778} - System32\Tasks\XGKXWH => C:\Users\MaarwaLaBoss\AppData\Roaming\XGKXWH.exe <==== ATTENTION
Task: {04A54772-6972-48E9-BDC1-7DC917A797B2} - System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => C:\Program Files\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.exe [2015-02-25] (Corporate Inc) <==== ATTENTION
Task: {0C3E0347-64B5-4EF3-AEF5-887188AAC928} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-06] (Google Inc.)
Task: {0C492543-A5CA-4709-B7AD-D1BDF719C3C2} - System32\Tasks\PjybSwsUh9KvOWv => C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t\4o5O3cu.exe [2015-02-24] ( )
Task: {0FA54608-C1CE-4CED-907E-0346B61B596C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-02-25] (globalUpdate) <==== ATTENTION

HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\GM4IE => value deleted successfully.
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\fdcsqphf => value deleted successfully.
HKU\S-1-5-21-4139596143-1751265584-3382870510-1003\Software\Microsoft\Windows\CurrentVersion\Run\\WindApp => value deleted successfully.
IHProtect Service => Service stopped successfully.
IHProtect Service => Service deleted successfully.
nSfkjQSVXLu => Unable to stop service
nSfkjQSVXLu => Service deleted successfully.
petonuve => Service stopped successfully.
petonuve => Service deleted successfully.
pfsvc_1.10.0.8 => Service stopped successfully.
pfsvc_1.10.0.8 => Service deleted successfully.
pysucode => Service stopped successfully.
pysucode => Service deleted successfully.
WindowsMangerProtect => Service stopped successfully.
WindowsMangerProtect => Service deleted successfully.
sucoweti => Service stopped successfully.
sucoweti => Service deleted successfully.
qrnfd_1_10_0_9 => Service deleted successfully.
C:\Users\MaarwaLaBoss\Documents\PC SPEED Maximizer => Moved successfully.
C:\ProgramData\IHProtectUpDate => Moved successfully.
C:\Program Files\XTab => Moved successfully.
C:\ProgramData\WindowsMangerProtect => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\sweet-page => Moved successfully.
C:\Users\MaarwaLaBoss\Desktop\PC Speed Maximizer.lnk => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer => Moved successfully.
C:\Program Files\PhraseFinder_1.10.0.8 => Moved successfully.

"C:\Program Files\PC Speed Maximizer" directory move:

C:\Program Files\PC Speed Maximizer\CookiesException.txt => Moved successfully.
C:\Program Files\PC Speed Maximizer\file_id.diz => Moved successfully.
C:\Program Files\PC Speed Maximizer\French.ini => Moved successfully.
C:\Program Files\PC Speed Maximizer\PCSpeedMaximizer.chm => Moved successfully.
C:\Program Files\PC Speed Maximizer\PCSpeedMaximizer.exe => Moved successfully.
C:\Program Files\PC Speed Maximizer\scanning.gif => Moved successfully.
C:\Program Files\PC Speed Maximizer\SPMSchedule.exe => Moved successfully.
C:\Program Files\PC Speed Maximizer\SPMUninstaller.exe => Moved successfully.
C:\Program Files\PC Speed Maximizer\sqlite3.dll => Moved successfully.
C:\Program Files\PC Speed Maximizer\StartupList.txt => Moved successfully.
C:\Program Files\PC Speed Maximizer\unins000.dat => Moved successfully.
C:\Program Files\PC Speed Maximizer\unins000.exe => Moved successfully.
Could not move "C:\Program Files\PC Speed Maximizer" directory. => Scheduled to move on reboot.

C:\Users\MaarwaLaBoss\DOWNLOADS\Setup.exe => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Local\HealthAlert => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.INSTALLATION.log => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\Selection Tools.INSTALLATION.log => Moved successfully.

"C:\Users\MaarwaLaBoss\AppData\Roaming\WTools" directory move:

C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\gdiplus.dll => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\History => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\MFC71.dll => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\msvcp71.dll => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\msvcr71.dll => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools Uninstall.exe => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\version.ini => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\tmp\commands.xml => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\tmp\log.txt => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\product.conf => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\apc.conf => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\manifest.xml => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\us\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\it\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\gb\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\fr\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\es\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\ca\alerter.country => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\layout.xml => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_click.jpg => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_default.jpg => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\bt_close_focus.jpg => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_left.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_left_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_right.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_bottom_right_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_bottom.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_bottom_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_left.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_left_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_right.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_right_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_top.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_edge_top_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_left.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_left_msk.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_right.png => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\img\common\win_top_right_msk.png => Moved successfully.
Could not move "C:\Users\MaarwaLaBoss\AppData\Roaming\WTools" directory. => Scheduled to move on reboot.

C:\Users\MaarwaLaBoss\AppData\Roaming\Store => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.installation.log => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\Bubble Dock.boostrap.log => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WindApp.boostrap.log => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job => Moved successfully.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job => Moved successfully.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job => Moved successfully.
C:\Program Files\c0194550-641c-4a9c-a0c6-bffd5741a694 => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Local\globalUpdate => Moved successfully.
C:\Program Files\globalUpdate => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job => Moved successfully.
C:\Program Files\winservice86 => Moved successfully.
C:\Program Files\NZBPlayer => Moved successfully.
C:\Users\Invité\Desktop\NZBMovies.lnk => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NZBPlayer => Moved successfully.
C:\Windows\Tasks\MFLI.job => Moved successfully.
C:\Program Files\0e2c51eb-f0e8-4af1-a9fe-12e082265438 => Moved successfully.
C:\Program Files\HQCinema Pro 2.1V25.02 => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424890416-3136-3946-64315065B6CD => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424885181-3136-3946-64315065B6CD => Moved successfully.
C:\Users\MaarwaLaBoss\Documents\vas%20vis%20et%20deviens.odt_0odt => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Local\nsi7D1A.tmp => Moved successfully.

"C:\ProgramData\TlNNEwgTvUH" directory move:

Could not move "C:\ProgramData\TlNNEwgTvUH\info.dat" => Scheduled to move on reboot.
Could not move "C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.dat" => Scheduled to move on reboot.
C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe => Moved successfully.
C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.exe.config => Moved successfully.
Could not move "C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe" => Scheduled to move on reboot.
Could not move "C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe.config" => Scheduled to move on reboot.
Could not move "C:\ProgramData\TlNNEwgTvUH\dat\JeCunu.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\TlNNEwgTvUH" directory. => Scheduled to move on reboot.

C:\Windows\Tasks\XGKXWH.job => Moved successfully.
C:\Windows\system32\Drivers\Msft_Kernel_webTinstMK_01009.Wdf => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Local\30464E43-1424881010-3136-3946-64315065B6CD => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\30464E43-1424880855-3136-3946-64315065B6CD => Moved successfully.
C:\Program Files\c2a69466-1b6a-479d-a186-8814fde96b52 => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WHbbwf5 => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\SCL5q3t => Moved successfully.
C:\Program Files\93dabc92-2c3c-49f6-b30b-6fb9e1094381 => Moved successfully.
C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\5Nb9XyR => Moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\CXNHZBM => Moved successfully.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-7.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-12.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-6.job not found.
C:\Windows\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-7.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.
C:\Windows\Tasks\HPCeeScheduleForMaarwaLaBoss.job => Moved successfully.
C:\Windows\Tasks\MFLI.job not found.
C:\Windows\Tasks\XGKXWH.job not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EAD95DF8-941F-43CA-B601-4CD090AC66E1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EAD95DF8-941F-43CA-B601-4CD090AC66E1}" => Key deleted successfully.
C:\Windows\System32\Tasks\MFLI => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MFLI" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ECA7983F-561B-4C7C-B5B9-500A5073A3B6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECA7983F-561B-4C7C-B5B9-500A5073A3B6}" => Key deleted successfully.
C:\Windows\System32\Tasks\PC Speed Maximizer Schedule => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PC Speed Maximizer Schedule" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F3606A00-3C97-4FD0-BC44-0979CC6B5E4C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3606A00-3C97-4FD0-BC44-0979CC6B5E4C}" => Key deleted successfully.
C:\Windows\System32\Tasks\WIN-fdfEfEfAfC => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-fdfEfEfAfC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD05E6CB-7E1E-4C7B-A6D7-F43C53A9B39B}" => Key deleted successfully.
C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DFC97F14-3140-4AF5-917B-6A444E4B907C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFC97F14-3140-4AF5-917B-6A444E4B907C}" => Key deleted successfully.
C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8D59EF2E-6BBA-4F07-9967-04994983132C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D59EF2E-6BBA-4F07-9967-04994983132C}" => Key deleted successfully.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FBEAC28-22FC-4CEE-91B9-D8D39B8AB04E}" => Key deleted successfully.
C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-5" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A3111540-DC22-4B9F-B351-34446D496CDE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A3111540-DC22-4B9F-B351-34446D496CDE}" => Key deleted successfully.
C:\Windows\System32\Tasks\WIN-statsAdmin => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsAdmin" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2E7135B9-187A-44A2-95D6-60FE532AA1C5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E7135B9-187A-44A2-95D6-60FE532AA1C5}" => Key deleted successfully.
C:\Windows\System32\Tasks\WIN-statsSystem => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsSystem" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{33F8754B-AF21-4C91-B077-B027DFA3A778}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33F8754B-AF21-4C91-B077-B027DFA3A778}" => Key deleted successfully.
C:\Windows\System32\Tasks\XGKXWH => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XGKXWH" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{04A54772-6972-48E9-BDC1-7DC917A797B2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{04A54772-6972-48E9-BDC1-7DC917A797B2}" => Key deleted successfully.
C:\Windows\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\29672d50-4e4a-4825-b121-e34ecad7b2da-1-6" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C3E0347-64B5-4EF3-AEF5-887188AAC928}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C3E0347-64B5-4EF3-AEF5-887188AAC928}" => Key deleted successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C492543-A5CA-4709-B7AD-D1BDF719C3C2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C492543-A5CA-4709-B7AD-D1BDF719C3C2}" => Key deleted successfully.
C:\Windows\System32\Tasks\PjybSwsUh9KvOWv => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PjybSwsUh9KvOWv" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0FA54608-C1CE-4CED-907E-0346B61B596C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FA54608-C1CE-4CED-907E-0346B61B596C}" => Key deleted successfully.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully.

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-26 16:06:28)<

C:\Program Files\PC Speed Maximizer => Is moved successfully.
C:\Users\MaarwaLaBoss\AppData\Roaming\WTools => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH\info.dat => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH\nSfkjQSVXLu.dat => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH\dat\ibmfcHpv.exe.config => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH\dat\JeCunu.dll => Is moved successfully.
C:\ProgramData\TlNNEwgTvUH => Is moved successfully.

End of Fixlog 16:06:28

Réponse 3 / 4

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
26 févr. 2015 à 17:55

c'est mieux, fais la réinitialisation des navigateurs et vois ce que cela donne.

marmarmar
26 févr. 2015 à 17:57

je l'ai fais et tout va bien merci beaucoup

Réponse 4 / 4

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 627
26 févr. 2015 à 19:39

=)

Quelques conseils :

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Discussions similaires

Comment supprimer un compte Facebook sans email ni mot de passe ?

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-26 16:06:28)<

End of Fixlog 16:06:28

Discussions similaires

Newsletters