WinService86 et MyPCBackUp s'installe tout seul Résolu/Fermé

Question

Bonsoir,

Tous les jours sur mon pc, les logiciels winservice86 et mypcbackup s'installe tout seul... Je les désinstalles sans arrêt mais rien y fait ça revient tout le temps... j'en peu plus sincèrement c'est énervant... 
Je trouve également mon pc plus lent depuis quelques temps (plus qu'en temps normal), je le vois particulièrement avec YouTube (ça bloque très souvent sur ce site quand je le démarre et aussi sur la première vidéos que je lance elle se coupe  et je dois réactualiser pour que ça marche, ça me le fait depuis quelques jours alors que d'habitude ça marche très bien et c'est que sur mon pc) bref il est très lent et c'est très énervant.. J'ai nettoyé avec CCleaner, Adwcleaner, j'ai nettoyé le disque dur et défragmenté également.. 
Avez vous d'autres solutions pour le rendre moins lent mais surtout supprimer définitivement winservice86 et mypcbackup et qu'ils ne s'installent PLUS sur mon pc ? 

Merci d'avance pour votre aide

Fish66 · Answer

Bonjour, [*] Télécharge :Farbar Recovery Scan Tool (FRST) à partir ce lien : https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ [*] Enregistre le sur votre bureau ( Vous devez exécuter la version compatible avec votre système 32 bits ou 64 bits) ==> Comment savoir quelle version 32 bits ou 64 bits est exécutée sur mon système ? [*] Lance FRST, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista [*] Sur le menu principal, vérifie que la case "Addition.txt" soit cochée puis clique sur "Scan" et patiente le temps de l'analyse [*] Une fois le scan terminé rends toi sur le bureau, deux rapports FRST.txt et Addition.txt ont été créés. [*] Héberge les rapports FRST.txt et Addition.txt présent sur ton bureau sur : malekal.com [*] Fais copier/coller les liens fournis dans ta prochaine réponse. ==> Aide: <<>> @+

Fish66 · Answer

Bonjour, Ton PC est bien infecté, on continue alors : 1/ Voici la correction à effectuer avec FRST. [*] Appuies simultanément sur les touches Windows et R [*] Une fenêtre va s'ouvrir, tape ceci : notepad [*] Clic sur OK (Le bloc note va s'ouvrir) [*] Coller le script en gras ci-dessous dans votre bloc-notes start CreateRestorePoint: Task: {2348A2C2-3311-453F-A9F9-28557586F0CF} - System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-1 => C:\Program Files\iWebar\iWebar-codedownloader.exe <==== ATTENTION Task: {271254EE-2246-4F80-A004-20A531D67238} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {40FBE5F6-AE3B-44E0-B611-C2277DA47ED5} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {690F5223-394A-40F3-9B00-F5CBF9528C78} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {6CD9B0C0-0032-48DD-A7EA-2FD2E0722FAA} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {727314EB-5579-475C-B46E-15E346909A7C} - System32\Tasks\{124E92D5-4CEC-49D5-872F-8E12CAAA47D5} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=ill <==== ATTENTION Task: {783F0487-AD24-461C-A06A-BC82E79D744F} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-03-07] (globalUpdate) <==== ATTENTION Task: {88DB0253-D8E7-46DC-8FF6-D18DE16237A4} - System32\Tasks\{837E8EE1-65F6-4BB6-9011-CDDCF57CA792} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=ill <==== ATTENTION Task: {9294A54D-9318-4AFC-BBCA-D0CD01DBA77E} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {969ACE0E-35D0-491E-A672-153D95C12922} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {B3025D34-82D9-4408-9B39-7B964B80C6AE} - System32\Tasks\{BE750C20-E064-44A2-9A7F-0B7CEE3DE91D} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=nsbfr <==== ATTENTION Task: {D62A412F-19D6-44DA-ADAA-E758FF4F1BE9} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {EE3AB7AC-1F7E-43A1-B884-18B5C84E71FB} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-03-07] (globalUpdate) <==== ATTENTION Task: {EFEBC238-C8E9-4A78-ABF0-8A332E8484E1} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {F193016C-F92C-4DE2-8530-5A915FA1631F} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION Task: {FC4DB390-96DB-448E-AA29-98FE8BED9B8A} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe [2014-11-25] (MyPC Backup) <==== ATTENTION Task: {FE33A8BD-C9D7-4553-817D-ACE0E6C401EA} - System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5 => C:\Program Files\iWebar\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.exe9/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=DC872333146E4247B373ECC25E0ACCA0IE /verifier=b92ac7ec2ce2abbd7269c6c237890653 /installerversion=1_36_01_22 /installationtime=1425728253 /statsdomain=http://stats.ourinputdatastorage.com /errorsdomain=http://errors.ourinputdatastorage.com /url=http://update.ourinputdatastorage.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='8_-2147483643_536875008_0' /processid='C82A6667A2304DE3891DA46819661E9FPI' /installationtime='1425728253' /installername='C:\Users\audrey\AppData\Local\Temp sv316C.tmp\Anywn.exe' /mac='135694534+498139398+F0:7B:CB:04:34:A1' /macs='f69572c7f498d6c77d94d4985d03d535' /sid='S-1-5-21-4010989476-994339870-84556231-1000' /jsmainfunc=main /ffid=taylorralston@hotmail.com /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=c2874fda-eb8a-4a2c-85be-cdf611ff536d /guid2=70c6387b-0e23-4e42-a347-8875a9ad94ab /guid3=1d801748-29df-405e-a15d-e6022a545ae4 /guid4=00135fe2-8876-43bc-b296-f3d9b6ad6425 /guid5=f68ce621-056d-4ad6-909d-2dea0bb297bf /guid6=487c8985-a050-4b31-8777-4481181d4e08 /guid7=1479481e-df0d-4ccf-9d04-875497501c03 /guid8=dd6e59eb-82c3-42fe-b1d6-b98436d1112e /guid9=7a3ec5f5-5858-4424-b300-b36adb05114d /guid10=b353b199-2379-4035-8737-539f1c669de3 /guid11=c2b7c908-af00-454d-9b1c-3ce17d067a2a /guid12=f985ec53-63ff-43f1-8185-a33d85e3c026 /guid13=07ec0075-9f9d-473b-b2cb-04135f180414 /guid14=3cf6c1a0-5989-4db8-a579-aa661b37891c /guid15=817e767c-f8fa-4cf5-8810-72630f038aa3 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=593 /verifiertaskname='c2874fda-eb8a-4a2c-85be-cdf611ff536d-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION AlternateDataStreams: C:\ProgramData\TEMP:109734F6 (SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe () C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0\jnsi334F.tmp () C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0\jnstBFF4.tmp (XTab system) C:\Program Files\XTab\ProtectService.exe (SearchProtect) C:\Program Files\XTab\CmdShell.exe (XTab system) C:\Program Files\XTab\HPNotify.exe (SearchProtect) C:\Program Files\XTab\CmdShell.exe (XTab system) C:\Program Files\XTab\HPNotify.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe (MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe Startup: C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\XTab\SupTab.dll (Thinknice Co. Limited) FF NewTab: hxxp://www.istartsurf.com/newtab/?type=nt&ts=1425654514&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] FF Homepage: hxxp://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) <==== ATTENTION R2 bepygoqu; C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0\jnsi334F.tmp [132096 2015-02-19] () [File not signed] R2 hykobewi; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0\jnstBFF4.tmp [194048 2015-03-06] () [File not signed] R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [156160 2015-03-04] (XTab system) R2 ronojewe; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425216334-E211-8560-08606E8C3DD0\jnsz9230.tmp [174592 2015-03-01] () [File not signed] R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-06] (SysTool PasSame LIMITED) R2 xemetyhi; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 sk1E47.tmp [140800 2015-03-07] () [File not signed] R2 sulukevo; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425216334-E211-8560-08606E8C3DD0 seF38B.tmpfs [X] R2 wukytogo; C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0 snCF78.tmpfs [X] 2015-03-07 12:40 - 2015-03-07 12:40 - 00001913 _____ () C:\Users\audrey\Desktop\Sync Folder.lnk 2015-03-07 12:40 - 2015-03-07 12:40 - 00001025 _____ () C:\Users\audrey\Desktop\MyPC Backup.lnk 2015-03-07 12:40 - 2015-03-07 12:40 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup 2015-03-07 12:39 - 2015-03-07 12:40 - 00000000 ____D () C:\Program Files\MyPC Backup 2015-03-07 12:38 - 2015-03-07 12:38 - 00000000 ____D () C:\Program Files\dd6e59eb-82c3-42fe-b1d6-b98436d1112e 2015-03-07 12:37 - 2015-03-07 12:39 - 00000000 ____D () C:\Program Files\winservice86 2015-03-06 23:02 - 2015-03-07 12:43 - 00000940 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2015-03-06 23:02 - 2015-03-07 12:43 - 00000936 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2015-03-06 16:18 - 2015-03-06 23:02 - 00000000 ____D () C:\Program Files\globalUpdate 2015-03-06 16:18 - 2015-03-06 16:18 - 00000000 ____D () C:\Users\audrey\AppData\Local\globalUpdate 2015-03-06 16:15 - 2015-03-07 02:47 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 2015-03-06 16:12 - 2015-03-06 16:12 - 00000000 ____D () C:\ProgramData\IHProtectUpDate 2015-03-06 16:12 - 2015-03-06 16:12 - 00000000 ____D () C:\Program Files\XTab 2015-03-06 16:11 - 2015-03-06 16:11 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2015-03-06 16:39 - 2014-08-21 20:18 - 00001310 _____ () C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2015-02-26 01:43 - 2014-11-28 12:52 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\oyZ3ZDK 2014-07-13 16:49 - 2014-07-13 16:49 - 0000268 ___RH () C:\Users\audrey\AppData\Roaming\Limiter 2014-09-03 21:57 - 2014-09-03 21:57 - 0575544 _____ (ClickMeIn Limited) C:\Users\audrey\AppData\Local sh62B9.tmp end [*] Une fois, le texte coller dans le bloc-note. [*] Cliquez sur "Fichier" puis dans le menu déroulant sur "Enregistrer sous" [*] A cette fenêtre cliquez sur "Bureau" [*] Dans la zone de "Nom de fichier" tapez : fixlist puis validez en cliquant sur Enregistrer [*] Sur votre bureau vous avec le fichier texte (fixlist.txt & FRST.exe) [*] Lancez FRST, "exécuter en tant qu'administrateur" sous Windows Vista, Windows Seven et Windows 8/8.1 [*] Cliquez sur "Fix" [*] Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. [*] Redémarre l'ordinateur. [*] ===> Aide : <<>> 2/ Télécharge MBAM et installe le selon l'emplacement par défaut https://www.malwarebytes.com/mwb-download/ Mets le à jour puis lance un examen "Menaces". coche "Recherche de rootkits" (Paramètres -> Détection et protection) A la fin du scan, clic sur "Mettre tous en quarantaine" en bas à gauche. Redémarre l'ordinateur si besoin. Après redémarrage, relance Malwarebytes. Vas chercher le rapport dans l'onglet "Historique". Clic à gauche sur l'onglet Journaux de l'application. Double-clic sur le journal d'examen pour l'afficher. En bas à gauche choisis "Copier dans le presse papier" colle le rapport le contenu du journal ici ================================= Si tu as besoin d'aide tu peux voir ce tutoriel : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ @+

Demandeconseils · Answer

Voilà mon rapport. Le scan de Malwarebytes est en cours. Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 07-03-2015 Ran by audrey at 2015-03-07 16:07:34 Run:1 Running from C:\Users\audrey\Desktop Loaded Profiles: audrey (Available profiles: audrey & Loley & Invité) Boot Mode: Normal ============================================== Content of fixlist: start CreateRestorePoint: Task: {2348A2C2-3311-453F-A9F9-28557586F0CF} - System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-1 => C:\Program Files\iWebar\iWebar-codedownloader.exe <==== ATTENTION Task: {271254EE-2246-4F80-A004-20A531D67238} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {40FBE5F6-AE3B-44E0-B611-C2277DA47ED5} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {690F5223-394A-40F3-9B00-F5CBF9528C78} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {6CD9B0C0-0032-48DD-A7EA-2FD2E0722FAA} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {727314EB-5579-475C-B46E-15E346909A7C} - System32\Tasks\{124E92D5-4CEC-49D5-872F-8E12CAAA47D5} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=ill <==== ATTENTION Task: {783F0487-AD24-461C-A06A-BC82E79D744F} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-03-07] (globalUpdate) <==== ATTENTION Task: {88DB0253-D8E7-46DC-8FF6-D18DE16237A4} - System32\Tasks\{837E8EE1-65F6-4BB6-9011-CDDCF57CA792} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=ill <==== ATTENTION Task: {9294A54D-9318-4AFC-BBCA-D0CD01DBA77E} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {969ACE0E-35D0-491E-A672-153D95C12922} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {B3025D34-82D9-4408-9B39-7B964B80C6AE} - System32\Tasks\{BE750C20-E064-44A2-9A7F-0B7CEE3DE91D} => pcalua.exe -a C:\Users\audrey\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=nsbfr <==== ATTENTION Task: {D62A412F-19D6-44DA-ADAA-E758FF4F1BE9} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {EE3AB7AC-1F7E-43A1-B884-18B5C84E71FB} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2015-03-07] (globalUpdate) <==== ATTENTION Task: {EFEBC238-C8E9-4A78-ABF0-8A332E8484E1} - System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5 => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe [2015-03-07] (Corporate Inc) <==== ATTENTION Task: {F193016C-F92C-4DE2-8530-5A915FA1631F} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION Task: {FC4DB390-96DB-448E-AA29-98FE8BED9B8A} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe [2014-11-25] (MyPC Backup) <==== ATTENTION Task: {FE33A8BD-C9D7-4553-817D-ACE0E6C401EA} - System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5 => C:\Program Files\iWebar\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.exe9/agentregpath='winservice86' /appid=64755 /srcid='002201' /subid='0' /zdata='0' /bic=DC872333146E4247B373ECC25E0ACCA0IE /verifier=b92ac7ec2ce2abbd7269c6c237890653 /installerversion=1_36_01_22 /installationtime=1425728253 /statsdomain=http://stats.ourinputdatastorage.com /errorsdomain=http://errors.ourinputdatastorage.com /url=http://update.ourinputdatastorage.com/verify/index.html /crregname='winservice86' /torpedofilepath C:\Program Files\winservice86' /asw='8_-2147483643_536875008_0' /processid='C82A6667A2304DE3891DA46819661E9FPI' /installationtime='1425728253' /installername='C:\Users\audrey\AppData\Local\Temp sv316C.tmp\Anywn.exe' /mac='135694534+498139398+F0:7B:CB:04:34:A1' /macs='f69572c7f498d6c77d94d4985d03d535' /sid='S-1-5-21-4010989476-994339870-84556231-1000' /jsmainfunc=main /ffid=taylorralston@hotmail.com /chid=onhcengeacabehdkdhbdcigfolmmakof /guid1=c2874fda-eb8a-4a2c-85be-cdf611ff536d /guid2=70c6387b-0e23-4e42-a347-8875a9ad94ab /guid3=1d801748-29df-405e-a15d-e6022a545ae4 /guid4=00135fe2-8876-43bc-b296-f3d9b6ad6425 /guid5=f68ce621-056d-4ad6-909d-2dea0bb297bf /guid6=487c8985-a050-4b31-8777-4481181d4e08 /guid7=1479481e-df0d-4ccf-9d04-875497501c03 /guid8=dd6e59eb-82c3-42fe-b1d6-b98436d1112e /guid9=7a3ec5f5-5858-4424-b300-b36adb05114d /guid10=b353b199-2379-4035-8737-539f1c669de3 /guid11=c2b7c908-af00-454d-9b1c-3ce17d067a2a /guid12=f985ec53-63ff-43f1-8185-a33d85e3c026 /guid13=07ec0075-9f9d-473b-b2cb-04135f180414 /guid14=3cf6c1a0-5989-4db8-a579-aa661b37891c /guid15=817e767c-f8fa-4cf5-8810-72630f038aa3 /schedulereinstall=1 /useminfeatures=1 /crossrideragentinstallation=1 /compilationbot=1 /deployagent=0 /maxextfilename=1293297481.mxaddon /installto=593 /verifiertaskname='c2874fda-eb8a-4a2c-85be-cdf611ff536d-12' //fallbackurl='file://C:\Program Files\winservice86\vhf\index.htm <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.exe <==== ATTENTION Task: C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.job => C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION AlternateDataStreams: C:\ProgramData\TEMP:109734F6 (SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe () C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0\jnsi334F.tmp () C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0\jnstBFF4.tmp (XTab system) C:\Program Files\XTab\ProtectService.exe (SearchProtect) C:\Program Files\XTab\CmdShell.exe (XTab system) C:\Program Files\XTab\HPNotify.exe (SearchProtect) C:\Program Files\XTab\CmdShell.exe (XTab system) C:\Program Files\XTab\HPNotify.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe (MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe (Corporate Inc) C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe Startup: C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] SearchScopes: HKU\S-1-5-21-4010989476-994339870-84556231-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} [Pays US - 69.28.57.25] BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\XTab\SupTab.dll (Thinknice Co. Limited) FF NewTab: hxxp://www.istartsurf.com/newtab/?type=nt&ts=1425654514&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] FF Homepage: hxxp://www.istartsurf.com/?type=hppp&ts=1425654643&from=ill&uid=WDCXWD6400BEVT-22A0RT0_WD-WXA1A103558635586 [Pays US - 69.28.57.25] S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) <==== ATTENTION R2 bepygoqu; C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0\jnsi334F.tmp [132096 2015-02-19] () [File not signed] R2 hykobewi; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0\jnstBFF4.tmp [194048 2015-03-06] () [File not signed] R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [156160 2015-03-04] (XTab system) R2 ronojewe; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425216334-E211-8560-08606E8C3DD0\jnsz9230.tmp [174592 2015-03-01] () [File not signed] R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-06] (SysTool PasSame LIMITED) R2 xemetyhi; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 sk1E47.tmp [140800 2015-03-07] () [File not signed] R2 sulukevo; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425216334-E211-8560-08606E8C3DD0 seF38B.tmpfs [X] R2 wukytogo; C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0 snCF78.tmpfs [X] 2015-03-07 12:40 - 2015-03-07 12:40 - 00001913 _____ () C:\Users\audrey\Desktop\Sync Folder.lnk 2015-03-07 12:40 - 2015-03-07 12:40 - 00001025 _____ () C:\Users\audrey\Desktop\MyPC Backup.lnk 2015-03-07 12:40 - 2015-03-07 12:40 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup 2015-03-07 12:39 - 2015-03-07 12:40 - 00000000 ____D () C:\Program Files\MyPC Backup 2015-03-07 12:38 - 2015-03-07 12:38 - 00000000 ____D () C:\Program Files\dd6e59eb-82c3-42fe-b1d6-b98436d1112e 2015-03-07 12:37 - 2015-03-07 12:39 - 00000000 ____D () C:\Program Files\winservice86 2015-03-06 23:02 - 2015-03-07 12:43 - 00000940 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2015-03-06 23:02 - 2015-03-07 12:43 - 00000936 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2015-03-06 16:18 - 2015-03-06 23:02 - 00000000 ____D () C:\Program Files\globalUpdate 2015-03-06 16:18 - 2015-03-06 16:18 - 00000000 ____D () C:\Users\audrey\AppData\Local\globalUpdate 2015-03-06 16:15 - 2015-03-07 02:47 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 2015-03-06 16:12 - 2015-03-06 16:12 - 00000000 ____D () C:\ProgramData\IHProtectUpDate 2015-03-06 16:12 - 2015-03-06 16:12 - 00000000 ____D () C:\Program Files\XTab 2015-03-06 16:11 - 2015-03-06 16:11 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2015-03-06 16:39 - 2014-08-21 20:18 - 00001310 _____ () C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2015-02-26 01:43 - 2014-11-28 12:52 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\oyZ3ZDK 2014-07-13 16:49 - 2014-07-13 16:49 - 0000268 ___RH () C:\Users\audrey\AppData\Roaming\Limiter 2014-09-03 21:57 - 2014-09-03 21:57 - 0575544 _____ (ClickMeIn Limited) C:\Users\audrey\AppData\Local sh62B9.tmp end Restore point was successfully created. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2348A2C2-3311-453F-A9F9-28557586F0CF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2348A2C2-3311-453F-A9F9-28557586F0CF}" => Key deleted successfully. C:\Windows\System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-1 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-1" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{271254EE-2246-4F80-A004-20A531D67238} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40FBE5F6-AE3B-44E0-B611-C2277DA47ED5} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7 => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{690F5223-394A-40F3-9B00-F5CBF9528C78} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CD9B0C0-0032-48DD-A7EA-2FD2E0722FAA} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7 => Key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{727314EB-5579-475C-B46E-15E346909A7C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{727314EB-5579-475C-B46E-15E346909A7C}" => Key deleted successfully. C:\Windows\System32\Tasks\{124E92D5-4CEC-49D5-872F-8E12CAAA47D5} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{124E92D5-4CEC-49D5-872F-8E12CAAA47D5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{783F0487-AD24-461C-A06A-BC82E79D744F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{783F0487-AD24-461C-A06A-BC82E79D744F}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88DB0253-D8E7-46DC-8FF6-D18DE16237A4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88DB0253-D8E7-46DC-8FF6-D18DE16237A4}" => Key deleted successfully. C:\Windows\System32\Tasks\{837E8EE1-65F6-4BB6-9011-CDDCF57CA792} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{837E8EE1-65F6-4BB6-9011-CDDCF57CA792}" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9294A54D-9318-4AFC-BBCA-D0CD01DBA77E} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{969ACE0E-35D0-491E-A672-153D95C12922} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4 => Key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B3025D34-82D9-4408-9B39-7B964B80C6AE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3025D34-82D9-4408-9B39-7B964B80C6AE}" => Key deleted successfully. C:\Windows\System32\Tasks\{BE750C20-E064-44A2-9A7F-0B7CEE3DE91D} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BE750C20-E064-44A2-9A7F-0B7CEE3DE91D}" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D62A412F-19D6-44DA-ADAA-E758FF4F1BE9} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user => Key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EE3AB7AC-1F7E-43A1-B884-18B5C84E71FB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EE3AB7AC-1F7E-43A1-B884-18B5C84E71FB}" => Key deleted successfully. C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFEBC238-C8E9-4A78-ABF0-8A332E8484E1} => Key not found. C:\Windows\System32\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5 not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5 => Key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F193016C-F92C-4DE2-8530-5A915FA1631F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F193016C-F92C-4DE2-8530-5A915FA1631F}" => Key deleted successfully. C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FC4DB390-96DB-448E-AA29-98FE8BED9B8A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FC4DB390-96DB-448E-AA29-98FE8BED9B8A}" => Key deleted successfully. C:\Windows\System32\Tasks\LaunchSignup => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FE33A8BD-C9D7-4553-817D-ACE0E6C401EA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE33A8BD-C9D7-4553-817D-ACE0E6C401EA}" => Key deleted successfully. C:\Windows\System32\Tasks\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\7431a2ec-b65c-47ec-9ac2-85932f3e39d7-5" => Key deleted successfully. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-7.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user.job => Moved successfully. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-12.job => Moved successfully. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-4.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-5_user.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.job not found. C:\Windows\Tasks\c2874fda-eb8a-4a2c-85be-cdf611ff536d-7.job not found. C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully. C:\ProgramData\TEMP => ":109734F6" ADS removed successfully. [1560] C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe => Process closed successfully. C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe => Moved successfully. [2904] C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0\jnsi334F.tmp => Process closed successfully. [3028] C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0\jnstBFF4.tmp => Process closed successfully. [3064] C:\Program Files\XTab\ProtectService.exe => Process closed successfully. C:\Program Files\XTab\CmdShell.exe => No running process found C:\Program Files\XTab\HPNotify.exe => No running process found C:\Program Files\XTab\CmdShell.exe => No running process found C:\Program Files\XTab\HPNotify.exe => No running process found C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-6.exe => No running process found C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-1-6.exe => No running process found C:\Program Files\MyPC Backup\MyPC Backup.exe => No running process found C:\Program Files\winservice86\c2874fda-eb8a-4a2c-85be-cdf611ff536d-10.exe => No running process found C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk not found. C:\Program Files\MyPC Backup\MyPC Backup.exe not found. HKLM\Software\Microsoft\Internet Explorer\Main\Start Page => Value was restored successfully. HKLM\Software\Microsoft\Internet Explorer\Main\Search Page => Value was restored successfully. HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL => Value was restored successfully. HKLM\Software\Microsoft\Internet Explorer\Main\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main\Search Page => Value was restored successfully. HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main\Start Page => Value was restored successfully. HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main\Default_Page_URL => Value was restored successfully. HKU\S-1-5-21-4010989476-994339870-84556231-1000\Software\Microsoft\Internet Explorer\Main\Default_Search_URL => Value was restored successfully. HKU\S-1-5-21-4010989476-994339870-84556231-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => value deleted successfully. "HKU\S-1-5-21-4010989476-994339870-84556231-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => Key deleted successfully. HKCR\CLSID\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found. "HKU\S-1-5-21-4010989476-994339870-84556231-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => Key deleted successfully. HKCR\CLSID\{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully. "HKCR\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" => Key deleted successfully. Firefox newtab deleted successfully. Firefox homepage deleted successfully. BackupStack => Service not found. bepygoqu => Service deleted successfully. hykobewi => Service deleted successfully. IHProtect Service => Service deleted successfully. ronojewe => Service stopped successfully. ronojewe => Service deleted successfully. WindowsMangerProtect => Service deleted successfully. xemetyhi => Service not found. sulukevo => Service stopped successfully. sulukevo => Service deleted successfully. wukytogo => Service stopped successfully. wukytogo => Service deleted successfully. "C:\Users\audrey\Desktop\Sync Folder.lnk" => File/Directory not found. "C:\Users\audrey\Desktop\MyPC Backup.lnk" => File/Directory not found. "C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup" => File/Directory not found. "C:\Program Files\MyPC Backup" => File/Directory not found. C:\Program Files\dd6e59eb-82c3-42fe-b1d6-b98436d1112e => Moved successfully. C:\Program Files\winservice86 => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Moved successfully. C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Moved successfully. C:\Program Files\globalUpdate => Moved successfully. C:\Users\audrey\AppData\Local\globalUpdate => Moved successfully. C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 => Moved successfully. C:\ProgramData\IHProtectUpDate => Moved successfully. C:\Program Files\XTab => Moved successfully. C:\ProgramData\WindowsMangerProtect => Moved successfully. C:\Users\audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk => Moved successfully. C:\Users\audrey\AppData\Roaming\oyZ3ZDK => Moved successfully. C:\Users\audrey\AppData\Roaming\Limiter => Moved successfully. C:\Users\audrey\AppData\Local sh62B9.tmp => Moved successfully. End of Fixlog 16:08:44

Fish66 · Answer

Re,
Démarre  en Mode sans échec avec prise en charge réseau :
Pour cela, tu tapotes la touche F8 dès le début de l'allumage du pc sans t'arrêter
Une fenêtre va s'ouvrir tu te déplaces avec les flèches du clavier sur >> démarrer en Mode sans échec avec prise en charge réseau
puis tape entrée.
Une fois sur le bureau s'il n'y a pas toutes les couleurs et autres c'est normal !
(Si F8 ne marche pas utilise la touche F5)
----------------------------
Aide : https://www.commentcamarche.net/informatique/windows/113-demarrer-windows-10-en-mode-sans-echec/

-------------------------------------------
Dans ce mode relance Malwarebytes puis poste le rapport stp

Bonne soirée.

Fish66 · Answer

Tu vas faire ceci maintenant :
1/
Réinitialiser et refaire le paramétrage de  tes navigateurs puis supprimer/désactiver les extensions inutiles/parasites :
* Internet Explorer : modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
* Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
* Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= 

2/
Il me faut un nouveau rapport FRST
https://forums.commentcamarche.net/forum/affich-31667460-winservice86-et-mypcbackup-s-installe-tout-seul#1 

@+

Fish66 · Answer

Suivant l'ordre fais ceci stp 1/ Utilise revouninstaller (indiqué ci-dessous) pour désinstaller : winservice86 ------------ Télécharge Revo-uninstaller Exécute ce fichier pour installation *******Aide Revo-uninstaller******* 2/ Supprime ta version de ADWCleaner puis fais ceci stp : Télécharge : AdwCleaner (merci à Xplode) Lance AdwCleaner Clique sur Scanner patiente le temps du scan Poste le rapport qui apparait en fin de recherche. (Le rapport est sauvegardé aussi sous ) 3/ Tu as oublié de réinitialiser tes navigateurs, il existe encore des extensions parasites. Refais : cette procédure en 1/ 4/ Voici la correction à effectuer avec FRST. [*] Appuies simultanément sur les touches Windows et R [*] Une fenêtre va s'ouvrir, tape ceci : notepad [*] Clic sur OK (Le bloc note va s'ouvrir) [*] Coller le script en gras ci-dessous dans votre bloc-notes start GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION {3AB40D72-BA39-478B-AFF3-535EDD5D539D} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION Task: {2DFF26BE-183A-48EC-BB69-80CA2FC0A8AA} - System32\Tasks\WIN-statsAdmin => C:\Users\audrey\AppData\Local\Microsoft\WinU\~zglmlqu.exe <==== ATTENTION Task: {3AB40D72-BA39-478B-AFF3-535EDD5D539D} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION Task: {62ACAE2D-4B05-4A76-B844-4EE44264BB28} - \c2874fda-eb8a-4a2c-85be-cdf611ff536d-12 No Task File <==== ATTENTION Task: {94303B7B-A904-4AE1-ABE6-03E315630305} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION Task: {9F3D9765-DEB0-4AAD-B92C-CC295E45F224} - \c2874fda-eb8a-4a2c-85be-cdf611ff536d-10_user No Task File <==== ATTENTION Task: {0D176BE7-35D3-4CD8-9921-BE6DD7C8D7CF} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION HKU\S-1-5-21-4010989476-994339870-84556231-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION S2 byrisiwo; C:\Users\audrey\AppData\Roaming\B4D0C81B-1425654955-E211-8560-08606E8C3DD0 sf4516.tmp [X] 2015-03-01 13:31 - 2015-03-06 11:28 - 00000000 ____D () C:\Users\audrey\AppData\Local\B4D0C81B-1425216713-E211-8560-08606E8C3DD0 2015-03-01 13:25 - 2015-03-01 13:28 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1425216334-E211-8560-08606E8C3DD0 2015-02-26 01:43 - 2015-03-07 19:35 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\LyKqk5O 2015-02-26 01:43 - 2015-03-07 19:35 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\DNfjXw1 2015-02-23 12:14 - 2015-02-23 12:14 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1424693642-E211-8560-08606E8C3DD0 2015-02-22 20:37 - 2015-03-07 19:35 - 00000000 ____D () C:\Program Files\047fc8e8-b161-46e0-95f7-114842b19d33 2015-02-22 14:15 - 2015-03-07 19:35 - 00000000 ____D () C:\Program Files\7986795c-cb18-4799-a2be-917144dcd628 2015-02-19 13:30 - 2015-02-19 13:30 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1424352632-E211-8560-08606E8C3DD0 2015-02-19 10:40 - 2015-02-19 11:03 - 00000000 ____D () C:\Users\audrey\AppData\Roaming\B4D0C81B-1424342446-E211-8560-08606E8C3DD0 2015-03-07 19:35 - 2015-01-02 16:39 - 00000000 ____D () C:\Program Files\3abb0aeb-3e27-44ca-9085-89104ec81161 2015-03-07 19:35 - 2015-01-02 16:38 - 00000000 ____D () C:\Program Files\b4c6d058-f46e-4c83-907b-63c20aeba486 end [*] Une fois, le texte coller dans le bloc-note. [*] Cliquez sur "Fichier" puis dans le menu déroulant sur "Enregistrer sous" [*] A cette fenêtre cliquez sur "Bureau" [*] Dans la zone de "Nom de fichier" tapez : fixlist puis validez en cliquant sur Enregistrer [*] Sur votre bureau vous avec le fichier texte (fixlist.txt & FRST.exe) [*] Lancez FRST, "exécuter en tant qu'administrateur" sous Windows Vista, Windows Seven et Windows 8/8.1 [*] Cliquez sur "Fix" [*] Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. [*] Redémarre l'ordinateur. [*] ===> Aide : <<>> ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

Fish66 · Answer

Bonjour,
1/
Comment fonctionne ton PC maintenant ?

2/
[*] Relance en tant qu'administrateur FRST.
[*] Fais copier/coller dans la zone de recherche (search) la ligne en gras ci-dessous  :
 
WinService86;MyPC Backup

[*] Cliques sur le bouton Search Files
[*] La recherche se  lance , une barre de progression apparaît
[*] Un fichier rapport de recherche Search.txt est enregistré dans le dossier à partir duquel FRST.exe/FRST64.exe a été exécuté.
[*] Poste ce rapport stp

Bonne journée

Fish66 · Answer

Re,
D'accord!
1/
ZHPCleaner
[*] Télécharge et enregistre ZHPCleaner sur ton bureau à partir ce lien : https://nicolascoolman.eu
[*] Exécute le en cliquant sur le bouton droit de la souris et en choisissant "Exécuter en tant qu'administrateur"
[*]Accepte les conditions d'utilisation,
[*]Clique sur le bouton [Réparer]
[*]Accepte toutes les réparations proposées
[*]Un rapport ZHPCleaner.txt sera créé sur le bureau 
[*]Clique sur Rapport si tu ne vois pas le rapport, une copie (%appdata%\ZHP\ZHPCleaner.txt) s'ouvrira,
[*]Héberge ce rapport  sur : http://pjjoint.malekal.com/ ou https://www.cjoint.com/]cjoint.com
[*]Copie/Colle le lien généré dans ta réponse. 

2/
- Télécharge SFTGC.exe : http://www.archive-host.com 
- Enregistre le fichier sur le bureau. 
- Ouvre SFTGC.exe et patiente durant l'initialisation du logiciel. 
- Pour lancer le nettoyage, il suffit de cliquer sur Go. 
- À la fin du nettoyage, un rapport (présent sur le bureau) va s'ouvrir. Pour le poster, héberge-le sur :  FEC Upload ou : malekal.com 

3/
Fais la mise à jour d'adobe flash player.
Updatechecker :
Téléchage updatechecker pour t'indiquer les logiciels qui ne sont pas à jour et te permet aussi d'effectuer ces mises à jour  
Tu peux l'utiliser une fois par semaine   
	 
===========================================
Défragmentation :
Défragmente tes disques dur par defraggler
Tu peux lutiliser une fois par trimestre    
===========================================    

Nettoyage des fichiers et des clés de registre

 Télécharge et installe CCleaner version Slim          	 
 Lance-le.(clic droit "en tant qu'administrateur" pour Vista et Seven) Va dans Options puis    	 
 Avancé et décoche la case Effacer uniquement les fichiers etc....    	 
 Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.    	 
 Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse .    	 
 Aide ici : https://www.malekal.com/tutoriel-ccleaner/    	 
Tu peux utiliser Ccleaner une fois par semaine  
 
@+

Fish66 · Answer

Re,
1/
2/ Pour l'étape 2 on me dit que le fichier est malveillant......... je ne le fait pas. 3/ Une page s'ouvre et me dit " Le site web que vous allez ouvrir contient des programmes dangereux " ......... je ne le fait pas non plus.  
Tu peux les faire sans risque mais en désactivant temporairerement ton antivirus

2/
[*] Relance Malwarebytes. 
[*] Mets le à jour puis lance un examen "Menaces". 
[*] coche "Recherche de rootkits" (Paramètres -> Détection et protection) 
[*] A la fin du scan, clic sur "Mettre tous en quarantaine" en bas à gauche. 
[*] Redémarre l'ordinateur si besoin. 
[*] Après redémarrage, relance Malwarebytes. 
[*] Vas chercher le rapport dans l'onglet "Historique". 
[*] Clic à gauche sur l'onglet Journaux de l'application. 
[*] Double-clic sur le journal d'examen pour l'afficher. 
[*] En bas à gauche choisis "Copier dans le presse papier" 
[*] colle le rapport le contenu du journal ici 

3/
Télécharger Eset Nod32 :
http://download.eset.com/special/eos/esetsmartinstaller_fra.exe

 Lancer le fichier
 Accepter les conditions
 Autoriser le programme à accéder à Internet
 Cliquer sur paramètre avancées pour ouvrir le menu et sélectionner les options (par défaut le scanner analyse votre ordinateur entièrement)
 Téléchargement des signatures

Il est recommandé de désactiver votre antivirus afin de ne pas ralentir le scan et d'afficher des message d'alerte !

 Le scan débute dés la fin du téléchargement
 Générer le rapport
 Cliquer sur liste des menaces détectées puis sur exporter dans un fichier texte...
Vous pouvez l'enregistrer sur le bureau en lui donnant un nom. Poster le rapport sur le forum.
Si le rapport n'est pas sur le bureau regarde ici ==> C:\Program Files\EsetOnlineScanner\log.txt

Pour vous aider voici un tuto rédigé par dorgane :
https://www.commentcamarche.net/faq/29643-scanner-en-ligne-avec-eset-nod32

@+

WinService86 et MyPCBackUp s'installe tout seul

9 réponses

End of Fixlog 23:02:29

End Of Search

Discussions similaires