Pubs intempestives et virus.

Laeti4578 Messages postés 29 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour,

Depuis une quinzaine de jours j'ai des pubs qui s'ouvrent sur mon pc malgré l'installation de "Adblock" que ma fille m'avait mit début septembre dans mon pc pour empêcher les pubs. Les pubs avait effectivement disparues mais depuis une quinzaine de jours c'est revenu. De plus, depuis une semaine, je reçois tous les jours "un avertissement du navigateur" qui me bloque tout. Y'a un numéro vert à appeler mais je me méfie d'un piège éventuel. (Je vais essayer de vous poster la photo si je le peux). De plus, tous les jours mon antivirus Avast me dit que j'ai des fichiers infectés. Que puis-je faire ?

Merci d'avance à ceux qui me répondront.

10 réponses

Résumé de la discussion

La problématique centrale est la réapparition de pubs intrusives malgré Adblock, accompagnée d'avertissements du navigateur et de détections d'infections par Avast sur le PC depuis environ quinze jours. Des actions préconisées incluent la réinitialisation du catalogue Winsock (netsh winsock reset catalog) puis un redémarrage, afin de résoudre les blocages réseau et les redirections malveillantes. Puis un balayage avec Malwarebytes (mise à jour, examen, mise en quarantaine et nouveau redémarrage) et la consultation du rapport via un service de partage de fichiers est recommandé. D'autres éléments notent l'élévation des droits (exécuter en tant qu'administrateur) pour certaines commandes et évoquent des obstacles à la réinstallation d'Avast sans connexion Internet fonctionnelle.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0
    2. Laeti4578 Messages postés 29 Statut Membre
       
      Depuis le premier scan je n'arrive plus à me connecter à internet, je suis connectée à mon reseau, mais ça me dit "page web inaccessible" et le code d'erreur est : DNS_PROBE_FINISHED_BAD_CONFIG. C'est à n'y rien comprendre...
      0
    4. Laeti4578 Messages postés 29 Statut Membre
       
      Il n'y a pas l'option "exécuter en tant qu'administrateur" pourtant je suis sous Windows 7.
      0
    5. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Lance l'invite de commandes directement alors.
      0
  2. Laeti4578 Messages postés 29 Statut Membre
     
    Voici la photo de l'avertissement du navigateur.
    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok ce sont des publicités qui te font croire que le PC est infecté pour te faire téléphoner à un support qui va te faire acheter des logiciels :
    https://forum.malekal.com/viewtopic.php?t=48978&start=
    Ca existe depuis un moment aux USA, voir : http://malvertising.stopmalwares.com/2014/12/fake-phone-scam-support-malvertising/
    (d'ailleurs, tu verras qu'il y a la tienne mais en anglais).

    Soit c'est une pub sur un site en particulier et tu n'as cette page sur ce site,
    soit tu as des adwares qui ouvrent ces fausses pubs.
    Vu que tu dis avoir Adblock, je pense que tu as des adwares.

    Faudrait faire l'analyse demandée.

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Laeti4578 Messages postés 29 Statut Membre
     
    Par contre, je ne trouve pas comment réinstaller avast avec la clé de sécurité, ça me demande de payer.
    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      à l'installation, il t'a demandé le fichier de licences
      sinon dans l'onglet Maintenance > Enregistrement
      je regarde les rapports.
      0
      1. Laeti4578 Messages postés 29 Statut Membre > Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention  
         
        Ce matin,après la restauration faite hier soir, avast était réapparu mais en version d'essai 30 jours.Que dois-je faire?
        0
    2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      charger la licence comme tu as fait la première fois, plus voir dernier message ci-dessous.
      0
  7. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    En regardant ton rapport, j'ai compris pourquoi tu n'as plus eu internet après le nettoyage AdwCleaner, c'est à cause de ceci :

    Tcpip\..\Interfaces\{E8AB948E-7F2A-476B-ADE1-31E99D8DE07C}: [NameServer] 127.0.0.1 [Pays US - 127.0.0.1]

    Tes DNS ont été remplacés qui pointent vers un adware sur ton ordinateur.
    AdwCleaner a dû virer l'Adware mais pas remis les DNS.
    De ce fait, le programme n'étant plus là pour effectuer les résolutions DNS, internet ne fonctionnait plus.

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Note la procédure du paragraphe "Manuellement" pour remettre les serveurs de noms en automatiquement (ça va masquer le 127.0.0.1) https://forum.malekal.com/viewtopic.php?t=48312&start=

    Refais un nettoyage AdwCleaner.
    Mets les serveurs de noms en automatique.

    Internet devrait fonctionner après nettoyage AdwCleaner.
    0
    1. Laeti4578
       
      Bonjour, du coup, internet était revenu mais le problème reste les pubs intempestives.
      0
    2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Tu as refais un nettoyage AdwCleaner ?
      Tu peux donner le rapport?
      0
    3. Laeti4578 Messages postés 29 Statut Membre
       
      Bonjour, je viens de refaire un nettoyage adwcleaner et ça fait comme l'autre jour, plus d'internet, c'est à chaque fois que je fais un nettoyage que ça enlève internet. Je refais donc une restauration à hier comme la première fois et je vous envoie le rapport d'adwcleaner que j'ai fais avant qu'internet coupe.
      0
    4. Laeti4578 Messages postés 29 Statut Membre
       
      Après avoir fais une restauration comme la dernière fois, internet est revenu bien que mon pc ai indiqué que la restauration n'avait pas été faite correctement.
      Voici le rapport d'AdwCleaner :
      https://pjjoint.malekal.com/files.php?id=20150330_n7v6q14b14y5
      0
  9. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok, voici la suite :

    Scan Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0
    1. Laeti4578 Messages postés 29 Statut Membre
       
      J'ai fais le scan Malwrebytes (qui a duré deux fois plus de temps que prévu) mais il n'y a pas de "mettre en quarantaine" seulement "supprimer la sélection", je le fais ?
      0
  10. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    y a encore tous les adwares, donc je soupçonne que tu aies fait une restauration du système après le nettoyage AdwCleaner car internet ne fonctionnait plus alors qu'il fallait remettre les DNS en manuelle

    Note la procédure du paragraphe "Manuellement" pour remettre les serveurs de noms en automatiquement (ça va masquer le 127.0.0.1) https://forum.malekal.com/viewtopic.php?t=48312&start=

    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    HKLM-x32\...\Run: [fst_fr_35] => [X]
    HKLM-x32\...\Run: [FrameFox Extensions] => C:\Program Files (x86)\FrameFox\Extensions\InternetExplorer\framefox.exe [287216 2013-08-22] (Duuqu Group)
    HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988456 2014-12-24] (YTDownloader)
    HKLM-x32\...\Run: [gmsd_fr_53] => C:\Program Files (x86)\gmsd_fr_53\gmsd_fr_53.exe [3977896 2014-12-31] ()
    HKLM-x32\...\Run: [gmsd_fr_194] => C:\Program Files (x86)\gmsd_fr_194\gmsd_fr_194.exe [3977872 2015-02-09] ()
    HKLM-x32\...\Run: [gmsd_fr_321] => C:\Program Files (x86)\gmsd_fr_321\gmsd_fr_321.exe [3977896 2015-03-15] ()
    HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1551872 2015-03-20] (Boxore OU)
    HKLM-x32\...\Run: [gmsd_fr_340] => C:\Program Files (x86)\gmsd_fr_340\gmsd_fr_340.exe [3977896 2015-03-23] ()
    HKU\S-1-5-21-3970590994-2839938540-1866134015-1002\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988456 2014-12-24] (YTDownloader)
    AppInit_DLLs: C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll => C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll File Not Found
    AppInit_DLLs: _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [245056 2014-12-10] ()
    AppInit_DLLs: C:\PROGRA~2\SEARCH~2\Datamngr\x64\mgrldr.dll => C:\PROGRA~2\SEARCH~2\Datamngr\x64\mgrldr.dll File Not Found
    AppInit_DLLs: c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL File Not Found
    AppInit_DLLs-x32: C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb.dll => C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb.dll File Not Found
    AppInit_DLLs-x32: C:/PROGRA~3/{25ADC~1/171~1.0/mira.dll => C:\ProgramData\{25ADCD6E-752F-1CE8-C4A9-6C6A142BBFE4}\1.7.1.0\mira.dll [649216 2015-01-02] ()
    AppInit_DLLs-x32: _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [215360 2014-12-10] ()
    HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll [669200 2014-12-15] ()
    BHO-x32: Boxore Client -> {EFA7A511-B491-4312-BB35-4586B99E45ED} -> C:\Program Files (x86)\Boxore\Boxore Client\IE\AdRotate32.dll [2015-03-20] (Boxore)
    S2 dqupdate; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /svc [X]
    S3 dqupdatem; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /medsvc [X]
    S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
    S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
    S2 supdate; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
    S2 dqupdate; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /svc [X]
    S3 dqupdatem; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /medsvc [X]
    S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
    S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
    S2 supdate; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
    R2 YhZDBiw; C:\ProgramData\mmQvSlcVDx\YhZDBiw.exe [2726256 2014-12-22] (Acute Angle Solutions Ltd)
    R1 ccnfd_1_10_0_5; C:\Windows\System32\drivers\ccnfd_1_10_0_5.sys [58232 2014-12-12] (ClickCaption)
    R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58728 2014-12-24] (YTDownloader)
    R2 SPDRIVER_1.38.0.1451; C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1451\jsdrv.sys [52584 2015-01-31] ()
    R1 {dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64; C:\Windows\System32\drivers\{dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64.sys [48776 2014-11-27] (StdLib)
    2015-03-30 19:27 - 2015-03-31 16:52 - 00003090 _____ () C:\Windows\System32\Tasks\RegClean Pro
    2015-03-30 19:24 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Boxore
    2015-03-30 17:50 - 2015-03-30 17:50 - 00161094 _____ () C:\Users\laetitia\Documents\AdwCleaner[S0].txt
    2015-03-30 17:46 - 2015-03-31 21:16 - 00000000 ____D () C:\Users\laetitia\AppData\Local\SafeWeb
    2015-03-29 14:12 - 2015-03-29 14:12 - 00000000 ____D () C:\ProgramData\NetEngine
    2015-03-25 11:15 - 2015-03-11 06:05 - 00192000 ____N (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-03-24 17:57 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\gmsd_fr_340
    2015-03-24 17:57 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_340
    2015-03-22 16:08 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\Boxore
    2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Boxore
    2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Boxore
    2015-03-18 11:21 - 2015-03-18 11:21 - 00001107 _____ () C:\Users\Alexis\Downloads\Download-setup.website
    2015-03-18 11:10 - 2015-03-30 18:21 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Systweak
    2015-03-30 19:27 - 2015-03-31 16:52 - 00003090 _____ () C:\Windows\System32\Tasks\RegClean Pro
    2015-03-30 19:24 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Boxore
    2015-03-30 17:50 - 2015-03-30 17:50 - 00161094 _____ () C:\Users\laetitia\Documents\AdwCleaner[S0].txt
    2015-03-30 17:46 - 2015-03-31 21:16 - 00000000 ____D () C:\Users\laetitia\AppData\Local\SafeWeb
    2015-03-29 14:12 - 2015-03-29 14:12 - 00000000 ____D () C:\ProgramData\NetEngine
    2015-03-25 11:15 - 2015-03-11 06:05 - 00192000 ____N (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-03-24 17:57 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\gmsd_fr_340
    2015-03-24 17:57 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_340
    2015-03-22 16:08 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\Boxore
    2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Boxore
    2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Boxore
    2015-03-18 11:21 - 2015-03-18 11:21 - 00001107 _____ () C:\Users\Alexis\Downloads\Download-setup.website
    2015-03-18 11:10 - 2015-03-30 18:21 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Systweak
    2015-03-30 18:21 - 2014-10-23 19:15 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Systweak
    2015-03-30 18:21 - 2014-10-23 19:04 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
    2015-03-30 18:21 - 2014-10-23 19:04 - 00000000 ____D () C:\Users\Alexis\AppData\Local\Softonic
    2015-03-30 18:21 - 2014-09-08 16:52 - 00000000 ____D () C:\Users\laetitia\AppData\Local\onlysearch
    2015-03-30 18:21 - 2014-09-03 19:19 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\0V1L2Z2Z1T1I1L1T
    2015-03-30 18:21 - 2014-09-03 19:19 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
    2015-03-30 18:21 - 2014-09-03 19:17 - 00000000 ____D () C:\sweet-page
    2015-03-30 18:21 - 2014-04-23 12:56 - 00000000 ____D () C:\Users\laetitia\AppData\Local\TB
    2015-03-30 18:21 - 2014-03-25 17:10 - 00000000 ____D () C:\ProgramData\IePluginService
    2015-03-30 18:21 - 2014-03-25 17:10 - 00000000 ____D () C:\Program Files (x86)\SupTab
    2015-03-30 18:21 - 2014-02-20 15:26 - 00000000 ____D () C:\ProgramData\ApptoU
    2015-03-30 18:21 - 2014-01-29 16:15 - 00000000 ____D () C:\ProgramData\3f4613f63b6e8f94
    2015-03-30 18:21 - 2014-01-05 18:01 - 00000000 ____D () C:\Program Files (x86)\FrameFox
    2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\WhiteListing
    2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\TBHostSupport
    2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\NativeMessaging
    2015-03-30 18:21 - 2014-01-02 13:37 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-1.2
    2015-03-30 18:21 - 2014-01-02 13:30 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
    2015-03-30 18:21 - 2014-01-02 13:30 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Mobogenie
    2015-03-30 18:21 - 2014-01-02 13:29 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
    2015-03-30 18:21 - 2014-01-02 13:29 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
    2015-03-30 18:21 - 2013-10-28 11:00 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
    2015-03-30 18:21 - 2013-05-14 18:44 - 00000000 ____D () C:\Users\laetitia\AppData\Local\iLivid
    2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader
    2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
    2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Program Files (x86)\vGrabber-software
    2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Program Files (x86)\DealPly
    2015-03-30 18:21 - 2013-05-14 18:29 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Conduit
    2015-03-30 18:21 - 2013-05-14 18:29 - 00000000 ____D () C:\Program Files (x86)\Conduit
    2015-03-30 18:21 - 2013-04-11 17:42 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\BabSolution
    2015-03-30 18:21 - 2012-10-04 21:17 - 00000000 ____D () C:\ProgramData\SweetIM
    2015-03-30 18:21 - 2012-10-04 21:17 - 00000000 ____D () C:\Program Files (x86)\SweetIM
    2015-03-30 18:21 - 2012-10-04 21:16 - 00000000 ____D () C:\Program Files (x86)\PricePeep
    2015-03-30 18:21 - 2012-10-04 21:12 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\eType
    2015-03-30 18:21 - 2012-02-12 14:50 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities
    2015-03-30 18:21 - 2012-02-06 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin.com Games
    2015-03-30 18:21 - 2012-02-06 17:37 - 00000000 ____D () C:\Program Files (x86)\iWin.com Games
    2015-03-30 18:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
    2015-03-25 22:06 - 2011-11-25 01:41 - 01163430 _____ () C:\Windows\WindowsUpdate(38).log
    2015-03-25 22:05 - 2015-01-02 17:48 - 00000272 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
    2015-03-25 22:05 - 2015-01-02 17:48 - 00000264 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
    2015-03-17 20:48 - 2015-02-01 09:42 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
    2015-03-17 20:48 - 2014-12-30 12:04 - 00000000 ____D () C:\Program Files (x86)\4796b82e-83c6-4894-b0a5-18131850e578
    2015-03-17 20:48 - 2014-01-29 16:16 - 00000000 ____D () C:\ProgramData\GreatSaivingu
    2015-03-17 20:48 - 2014-01-29 16:15 - 00000000 ____D () C:\ProgramData\reoaLdeal
    2015-03-17 20:48 - 2014-01-07 21:18 - 00000000 ____D () C:\Program Files (x86)\fst_fr_33
    2012-07-27 01:05 - 2012-07-27 01:05 - 0000006 _____ () C:\Program Files (x86)\Common Files\WPVersion.txt
    2013-04-16 17:03 - 2013-02-09 23:55 - 0114176 _____ () C:\Users\laetitia\AppData\Roaming\BabMaint.exe
    2014-10-24 14:14 - 2015-01-02 17:39 - 0000128 _____ () C:\Users\laetitia\AppData\Roaming\WB.CFG
    2012-12-27 17:52 - 2012-12-30 18:35 - 0000581 _____ () C:\Users\laetitia\AppData\Local\cookies.ini
    2012-05-19 14:32 - 2013-12-27 11:55 - 0004608 _____ () C:\Users\laetitia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2014-12-22 22:00 - 2014-12-22 22:00 - 0000010 _____ () C:\Users\laetitia\AppData\Local\DSI.DAT
    2014-12-22 22:00 - 2014-12-22 22:00 - 0022528 _____ () C:\Users\laetitia\AppData\Local\dsisetup31832002.exe
    2015-03-17 17:04 - 2015-03-17 17:04 - 0613255 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsc904F.tmp
    2014-10-23 19:16 - 2014-10-23 19:16 - 0612241 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsgDD1A.tmp
    2014-10-23 20:15 - 2014-10-23 20:14 - 0627680 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsn949.tmp
    2014-10-23 20:16 - 2014-10-23 20:16 - 0612241 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nso1490.tmp
    2014-07-04 14:27 - 2014-07-04 14:28 - 0000000 _____ () C:\Users\laetitia\AppData\Local\{2DBD6E0F-927B-4005-96B5-CCDF759D3117}
    Task: {0C5CA854-CC87-4D67-9FD4-B63590585FE7} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
    Task: {13735565-43D3-439B-ADAA-B5EFB195386A} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe <==== ATTENTION
    Task: {1C534C7E-F91B-4042-A23C-415DAB6B0A03} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
    Task: {47C346E9-2F02-46AC-A5B3-C5F546142FCC} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
    Task: {50C87351-9FC8-4B0E-A808-C5F40F355D14} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
    Task: {5699A49A-EF3C-40E6-A6BF-E3A5FC295B68} - System32\Tasks\DuuquUpdateTaskMachineUA => C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe <==== ATTENTION
    Task: {5AA7AE61-8E1B-41A5-917B-F924B0FCFE86} - System32\Tasks\PenWes => C:\Program Files (x86)\PenWes\dnshelper.exe [2014-09-17] () <==== ATTENTION
    Task: {62224EE4-3C59-4632-A3F3-F1915F27BF32} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2014-12-24] (Goobzo) <==== ATTENTION
    Task: {65727060-4707-437A-9D84-3E1C24BDC5A9} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-12-08] () <==== ATTENTION
    Task: {68310D4F-F30D-4FAF-B11E-1E3C0F678CC0} - System32\Tasks\DuuquUpdateTaskMachineCore => C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe <==== ATTENTION
    Task: {7391C7C1-EC56-412C-8971-39E7BDBEC6EC} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-12-08] () <==== ATTENTION
    Task: {74759089-FEB0-4F3E-9A63-F58438E40978} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
    Task: {90648580-3738-4E4F-A9BA-31CF6CCBA111} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
    Task: {97B78AB2-25EF-473C-BFA3-C2C4CA225FCF} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2014-12-24] (YTDownloader) <==== ATTENTION
    Task: {A99955B4-619A-4BA3-BEE6-59777A7BDC39} - System32\Tasks\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6 => C:\Program Files (x86)\Ge-Force\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6.exe <==== ATTENTION
    Task: {ACBE4F75-4F47-46DF-9EAE-4D48B5F9D27F} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
    Task: {AF57DF0A-DE5D-47B7-BBE2-8A68507A434F} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    Si internet ne fonctionne plus, mets les serveurs de noms (DNS) en manuel.

    puis :

    Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

    0
    1. Laeti4578 Messages postés 29 Statut Membre
       
      Bonjour, voici le fichier texte qui est apparu :

      Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
      Ran by laetitia at 2015-04-09 15:52:25 Run:1
      Running from C:\Users\laetitia\Desktop
      Loaded Profiles: laetitia (Available profiles: laetitia & Alexis & Marine)
      Boot Mode: Normal
      ==============================================

      Content of fixlist:

      HKLM-x32\...\Run: [fst_fr_35] => [X]
      HKLM-x32\...\Run: [FrameFox Extensions] => C:\Program Files (x86)\FrameFox\Extensions\InternetExplorer\framefox.exe [287216 2013-08-22] (Duuqu Group)
      HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988456 2014-12-24] (YTDownloader)
      HKLM-x32\...\Run: [gmsd_fr_53] => C:\Program Files (x86)\gmsd_fr_53\gmsd_fr_53.exe [3977896 2014-12-31] ()
      HKLM-x32\...\Run: [gmsd_fr_194] => C:\Program Files (x86)\gmsd_fr_194\gmsd_fr_194.exe [3977872 2015-02-09] ()
      HKLM-x32\...\Run: [gmsd_fr_321] => C:\Program Files (x86)\gmsd_fr_321\gmsd_fr_321.exe [3977896 2015-03-15] ()
      HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1551872 2015-03-20] (Boxore OU)
      HKLM-x32\...\Run: [gmsd_fr_340] => C:\Program Files (x86)\gmsd_fr_340\gmsd_fr_340.exe [3977896 2015-03-23] ()
      HKU\S-1-5-21-3970590994-2839938540-1866134015-1002\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988456 2014-12-24] (YTDownloader)
      AppInit_DLLs: C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll => C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll File Not Found
      AppInit_DLLs: _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [245056 2014-12-10] ()
      AppInit_DLLs: C:\PROGRA~2\SEARCH~2\Datamngr\x64\mgrldr.dll => C:\PROGRA~2\SEARCH~2\Datamngr\x64\mgrldr.dll File Not Found
      AppInit_DLLs: c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL File Not Found
      AppInit_DLLs-x32: C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb.dll => C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb.dll File Not Found
      AppInit_DLLs-x32: C:/PROGRA~3/{25ADC~1/171~1.0/mira.dll => C:\ProgramData\{25ADCD6E-752F-1CE8-C4A9-6C6A142BBFE4}\1.7.1.0\mira.dll [649216 2015-01-02] ()
      AppInit_DLLs-x32: _C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [215360 2014-12-10] ()
      HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll [669200 2014-12-15] ()
      BHO-x32: Boxore Client -> {EFA7A511-B491-4312-BB35-4586B99E45ED} -> C:\Program Files (x86)\Boxore\Boxore Client\IE\AdRotate32.dll [2015-03-20] (Boxore)
      S2 dqupdate; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /svc [X]
      S3 dqupdatem; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /medsvc [X]
      S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
      S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
      S2 supdate; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
      S2 dqupdate; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /svc [X]
      S3 dqupdatem; C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe /medsvc [X]
      S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
      S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /medsvc [X]
      S2 supdate; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe /svc [X]
      R2 YhZDBiw; C:\ProgramData\mmQvSlcVDx\YhZDBiw.exe [2726256 2014-12-22] (Acute Angle Solutions Ltd)
      R1 ccnfd_1_10_0_5; C:\Windows\System32\drivers\ccnfd_1_10_0_5.sys [58232 2014-12-12] (ClickCaption)
      R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58728 2014-12-24] (YTDownloader)
      R2 SPDRIVER_1.38.0.1451; C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1451\jsdrv.sys [52584 2015-01-31] ()
      R1 {dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64; C:\Windows\System32\drivers\{dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64.sys [48776 2014-11-27] (StdLib)
      2015-03-30 19:27 - 2015-03-31 16:52 - 00003090 _____ () C:\Windows\System32\Tasks\RegClean Pro
      2015-03-30 19:24 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Boxore
      2015-03-30 17:50 - 2015-03-30 17:50 - 00161094 _____ () C:\Users\laetitia\Documents\AdwCleaner[S0].txt
      2015-03-30 17:46 - 2015-03-31 21:16 - 00000000 ____D () C:\Users\laetitia\AppData\Local\SafeWeb
      2015-03-29 14:12 - 2015-03-29 14:12 - 00000000 ____D () C:\ProgramData\NetEngine
      2015-03-25 11:15 - 2015-03-11 06:05 - 00192000 ____N (Microsoft Corporation) C:\Windows\system32\aepic.dll
      2015-03-24 17:57 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\gmsd_fr_340
      2015-03-24 17:57 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_340
      2015-03-22 16:08 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\Boxore
      2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Boxore
      2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Boxore
      2015-03-18 11:21 - 2015-03-18 11:21 - 00001107 _____ () C:\Users\Alexis\Downloads\Download-setup.website
      2015-03-18 11:10 - 2015-03-30 18:21 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Systweak
      2015-03-30 19:27 - 2015-03-31 16:52 - 00003090 _____ () C:\Windows\System32\Tasks\RegClean Pro
      2015-03-30 19:24 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Boxore
      2015-03-30 17:50 - 2015-03-30 17:50 - 00161094 _____ () C:\Users\laetitia\Documents\AdwCleaner[S0].txt
      2015-03-30 17:46 - 2015-03-31 21:16 - 00000000 ____D () C:\Users\laetitia\AppData\Local\SafeWeb
      2015-03-29 14:12 - 2015-03-29 14:12 - 00000000 ____D () C:\ProgramData\NetEngine
      2015-03-25 11:15 - 2015-03-11 06:05 - 00192000 ____N (Microsoft Corporation) C:\Windows\system32\aepic.dll
      2015-03-24 17:57 - 2015-03-30 19:24 - 00000000 ____D () C:\Users\laetitia\AppData\Local\gmsd_fr_340
      2015-03-24 17:57 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\gmsd_fr_340
      2015-03-22 16:08 - 2015-03-30 18:21 - 00000000 ____D () C:\Program Files (x86)\Boxore
      2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Boxore
      2015-03-20 15:08 - 2015-03-20 15:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Boxore
      2015-03-18 11:21 - 2015-03-18 11:21 - 00001107 _____ () C:\Users\Alexis\Downloads\Download-setup.website
      2015-03-18 11:10 - 2015-03-30 18:21 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Systweak
      2015-03-30 18:21 - 2014-10-23 19:15 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Systweak
      2015-03-30 18:21 - 2014-10-23 19:04 - 00000000 ____D () C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
      2015-03-30 18:21 - 2014-10-23 19:04 - 00000000 ____D () C:\Users\Alexis\AppData\Local\Softonic
      2015-03-30 18:21 - 2014-09-08 16:52 - 00000000 ____D () C:\Users\laetitia\AppData\Local\onlysearch
      2015-03-30 18:21 - 2014-09-03 19:19 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\0V1L2Z2Z1T1I1L1T
      2015-03-30 18:21 - 2014-09-03 19:19 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
      2015-03-30 18:21 - 2014-09-03 19:17 - 00000000 ____D () C:\sweet-page
      2015-03-30 18:21 - 2014-04-23 12:56 - 00000000 ____D () C:\Users\laetitia\AppData\Local\TB
      2015-03-30 18:21 - 2014-03-25 17:10 - 00000000 ____D () C:\ProgramData\IePluginService
      2015-03-30 18:21 - 2014-03-25 17:10 - 00000000 ____D () C:\Program Files (x86)\SupTab
      2015-03-30 18:21 - 2014-02-20 15:26 - 00000000 ____D () C:\ProgramData\ApptoU
      2015-03-30 18:21 - 2014-01-29 16:15 - 00000000 ____D () C:\ProgramData\3f4613f63b6e8f94
      2015-03-30 18:21 - 2014-01-05 18:01 - 00000000 ____D () C:\Program Files (x86)\FrameFox
      2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\WhiteListing
      2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\TBHostSupport
      2015-03-30 18:21 - 2014-01-02 13:57 - 00000000 ____D () C:\Users\laetitia\AppData\Local\NativeMessaging
      2015-03-30 18:21 - 2014-01-02 13:37 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-1.2
      2015-03-30 18:21 - 2014-01-02 13:30 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
      2015-03-30 18:21 - 2014-01-02 13:30 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Mobogenie
      2015-03-30 18:21 - 2014-01-02 13:29 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
      2015-03-30 18:21 - 2014-01-02 13:29 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
      2015-03-30 18:21 - 2013-10-28 11:00 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
      2015-03-30 18:21 - 2013-05-14 18:44 - 00000000 ____D () C:\Users\laetitia\AppData\Local\iLivid
      2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader
      2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
      2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Program Files (x86)\vGrabber-software
      2015-03-30 18:21 - 2013-05-14 18:31 - 00000000 ____D () C:\Program Files (x86)\DealPly
      2015-03-30 18:21 - 2013-05-14 18:29 - 00000000 ____D () C:\Users\laetitia\AppData\Local\Conduit
      2015-03-30 18:21 - 2013-05-14 18:29 - 00000000 ____D () C:\Program Files (x86)\Conduit
      2015-03-30 18:21 - 2013-04-11 17:42 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\BabSolution
      2015-03-30 18:21 - 2012-10-04 21:17 - 00000000 ____D () C:\ProgramData\SweetIM
      2015-03-30 18:21 - 2012-10-04 21:17 - 00000000 ____D () C:\Program Files (x86)\SweetIM
      2015-03-30 18:21 - 2012-10-04 21:16 - 00000000 ____D () C:\Program Files (x86)\PricePeep
      2015-03-30 18:21 - 2012-10-04 21:12 - 00000000 ____D () C:\Users\laetitia\AppData\Roaming\eType
      2015-03-30 18:21 - 2012-02-12 14:50 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities
      2015-03-30 18:21 - 2012-02-06 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin.com Games
      2015-03-30 18:21 - 2012-02-06 17:37 - 00000000 ____D () C:\Program Files (x86)\iWin.com Games
      2015-03-30 18:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
      2015-03-25 22:06 - 2011-11-25 01:41 - 01163430 _____ () C:\Windows\WindowsUpdate(38).log
      2015-03-25 22:05 - 2015-01-02 17:48 - 00000272 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
      2015-03-25 22:05 - 2015-01-02 17:48 - 00000264 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
      2015-03-17 20:48 - 2015-02-01 09:42 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
      2015-03-17 20:48 - 2014-12-30 12:04 - 00000000 ____D () C:\Program Files (x86)\4796b82e-83c6-4894-b0a5-18131850e578
      2015-03-17 20:48 - 2014-01-29 16:16 - 00000000 ____D () C:\ProgramData\GreatSaivingu
      2015-03-17 20:48 - 2014-01-29 16:15 - 00000000 ____D () C:\ProgramData\reoaLdeal
      2015-03-17 20:48 - 2014-01-07 21:18 - 00000000 ____D () C:\Program Files (x86)\fst_fr_33
      2012-07-27 01:05 - 2012-07-27 01:05 - 0000006 _____ () C:\Program Files (x86)\Common Files\WPVersion.txt
      2013-04-16 17:03 - 2013-02-09 23:55 - 0114176 _____ () C:\Users\laetitia\AppData\Roaming\BabMaint.exe
      2014-10-24 14:14 - 2015-01-02 17:39 - 0000128 _____ () C:\Users\laetitia\AppData\Roaming\WB.CFG
      2012-12-27 17:52 - 2012-12-30 18:35 - 0000581 _____ () C:\Users\laetitia\AppData\Local\cookies.ini
      2012-05-19 14:32 - 2013-12-27 11:55 - 0004608 _____ () C:\Users\laetitia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2014-12-22 22:00 - 2014-12-22 22:00 - 0000010 _____ () C:\Users\laetitia\AppData\Local\DSI.DAT
      2014-12-22 22:00 - 2014-12-22 22:00 - 0022528 _____ () C:\Users\laetitia\AppData\Local\dsisetup31832002.exe
      2015-03-17 17:04 - 2015-03-17 17:04 - 0613255 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsc904F.tmp
      2014-10-23 19:16 - 2014-10-23 19:16 - 0612241 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsgDD1A.tmp
      2014-10-23 20:15 - 2014-10-23 20:14 - 0627680 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nsn949.tmp
      2014-10-23 20:16 - 2014-10-23 20:16 - 0612241 _____ (CMI Limited) C:\Users\laetitia\AppData\Local\nso1490.tmp
      2014-07-04 14:27 - 2014-07-04 14:28 - 0000000 _____ () C:\Users\laetitia\AppData\Local\{2DBD6E0F-927B-4005-96B5-CCDF759D3117}
      Task: {0C5CA854-CC87-4D67-9FD4-B63590585FE7} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
      Task: {13735565-43D3-439B-ADAA-B5EFB195386A} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe <==== ATTENTION
      Task: {1C534C7E-F91B-4042-A23C-415DAB6B0A03} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
      Task: {47C346E9-2F02-46AC-A5B3-C5F546142FCC} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
      Task: {50C87351-9FC8-4B0E-A808-C5F40F355D14} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
      Task: {5699A49A-EF3C-40E6-A6BF-E3A5FC295B68} - System32\Tasks\DuuquUpdateTaskMachineUA => C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe <==== ATTENTION
      Task: {5AA7AE61-8E1B-41A5-917B-F924B0FCFE86} - System32\Tasks\PenWes => C:\Program Files (x86)\PenWes\dnshelper.exe [2014-09-17] () <==== ATTENTION
      Task: {62224EE4-3C59-4632-A3F3-F1915F27BF32} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2014-12-24] (Goobzo) <==== ATTENTION
      Task: {65727060-4707-437A-9D84-3E1C24BDC5A9} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-12-08] () <==== ATTENTION
      Task: {68310D4F-F30D-4FAF-B11E-1E3C0F678CC0} - System32\Tasks\DuuquUpdateTaskMachineCore => C:\Program Files (x86)\Duuqu\Update\DuuquUpdate.exe <==== ATTENTION
      Task: {7391C7C1-EC56-412C-8971-39E7BDBEC6EC} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-12-08] () <==== ATTENTION
      Task: {74759089-FEB0-4F3E-9A63-F58438E40978} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-10-23] (AnyProtect.com) <==== ATTENTION
      Task: {90648580-3738-4E4F-A9BA-31CF6CCBA111} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
      Task: {97B78AB2-25EF-473C-BFA3-C2C4CA225FCF} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2014-12-24] (YTDownloader) <==== ATTENTION
      Task: {A99955B4-619A-4BA3-BEE6-59777A7BDC39} - System32\Tasks\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6 => C:\Program Files (x86)\Ge-Force\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6.exe <==== ATTENTION
      Task: {ACBE4F75-4F47-46DF-9EAE-4D48B5F9D27F} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe <==== ATTENTION
      Task: {AF57DF0A-DE5D-47B7-BBE2-8A68507A434F} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION


      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_fr_35 => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\FrameFox Extensions => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\YTDownloader => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_53 => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_194 => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_321 => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Boxore Client => value deleted successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_340 => value deleted successfully.
      HKU\S-1-5-21-3970590994-2839938540-1866134015-1002\Software\Microsoft\Windows\CurrentVersion\Run\\YTDownloader => value deleted successfully.
      "C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll" => Value Data removed successfully.
      "_C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL" => Value Data removed successfully.
      "C:\PROGRA~2\SEARCH~2\Datamngr\x64\mgrldr.dll" => Value Data removed successfully.
      "c:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL" => Value Data removed successfully.
      "C:\Users\laetitia\AppData\Local\Linkey\IEEXTE~1\ietlb.dll" => Value Data removed successfully.
      "C:/PROGRA~3/{25ADC~1/171~1.0/mira.dll" => Value Data removed successfully.
      "_C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" => Value Data removed successfully.
      HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 => value deleted successfully.
      "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EFA7A511-B491-4312-BB35-4586B99E45ED}" => Key deleted successfully.
      "HKCR\Wow6432Node\CLSID\{EFA7A511-B491-4312-BB35-4586B99E45ED}" => Key deleted successfully.
      dqupdate => Service deleted successfully.
      dqupdatem => Service deleted successfully.
      Software_update => Service deleted successfully.
      Software_update_m => Service deleted successfully.
      supdate => Service deleted successfully.
      dqupdate => Service not found.
      dqupdatem => Service not found.
      Software_update => Service not found.
      Software_update_m => Service not found.
      supdate => Service not found.
      YhZDBiw => Service deleted successfully.
      ccnfd_1_10_0_5 => Service not found.
      sbmntr => Unable to stop service
      sbmntr => Service deleted successfully.
      SPDRIVER_1.38.0.1451 => Service stopped successfully.
      SPDRIVER_1.38.0.1451 => Service deleted successfully.
      {dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64 => Service stopped successfully.
      {dc19896d-a3e2-417d-be46-d18ebc99e240}Gw64 => Service deleted successfully.
      C:\Windows\System32\Tasks\RegClean Pro => Moved successfully.
      C:\Users\laetitia\AppData\Local\Boxore => Moved successfully.
      C:\Users\laetitia\Documents\AdwCleaner[S0].txt => Moved successfully.
      C:\Users\laetitia\AppData\Local\SafeWeb => Moved successfully.
      C:\ProgramData\NetEngine => Moved successfully.
      C:\Windows\system32\aepic.dll => Moved successfully.
      C:\Users\laetitia\AppData\Local\gmsd_fr_340 => Moved successfully.
      C:\Program Files (x86)\gmsd_fr_340 => Moved successfully.
      C:\Program Files (x86)\Boxore => Moved successfully.
      C:\Users\Default\AppData\Local\Boxore => Moved successfully.
      "C:\Users\Default User\AppData\Local\Boxore" => File/Directory not found.
      C:\Users\Alexis\Downloads\Download-setup.website => Moved successfully.
      C:\Users\Alexis\AppData\Roaming\Systweak => Moved successfully.
      "C:\Windows\System32\Tasks\RegClean Pro" => File/Directory not found.
      "C:\Users\laetitia\AppData\Local\Boxore" => File/Directory not found.
      "C:\Users\laetitia\Documents\AdwCleaner[S0].txt" => File/Directory not found.
      "C:\Users\laetitia\AppData\Local\SafeWeb" => File/Directory not found.
      "C:\ProgramData\NetEngine" => File/Directory not found.
      "C:\Windows\system32\aepic.dll" => File/Directory not found.
      "C:\Users\laetitia\AppData\Local\gmsd_fr_340" => File/Directory not found.
      "C:\Program Files (x86)\gmsd_fr_340" => File/Directory not found.
      "C:\Program Files (x86)\Boxore" => File/Directory not found.
      "C:\Users\Default\AppData\Local\Boxore" => File/Directory not found.
      "C:\Users\Default User\AppData\Local\Boxore" => File/Directory not found.
      "C:\Users\Alexis\Downloads\Download-setup.website" => File/Directory not found.
      "C:\Users\Alexis\AppData\Roaming\Systweak" => File/Directory not found.

      "C:\Users\laetitia\AppData\Roaming\Systweak" directory move:

      Could not move "C:\Users\laetitia\AppData\Roaming\Systweak" directory. => Scheduled to move on reboot.

      C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic => Moved successfully.
      C:\Users\Alexis\AppData\Local\Softonic => Moved successfully.
      C:\Users\laetitia\AppData\Local\onlysearch => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\0V1L2Z2Z1T1I1L1T => Moved successfully.
      C:\ProgramData\WindowsMangerProtect => Moved successfully.
      C:\sweet-page => Moved successfully.
      C:\Users\laetitia\AppData\Local\TB => Moved successfully.
      C:\ProgramData\IePluginService => Moved successfully.
      C:\Program Files (x86)\SupTab => Moved successfully.
      C:\ProgramData\ApptoU => Moved successfully.
      C:\ProgramData\3f4613f63b6e8f94 => Moved successfully.
      C:\Program Files (x86)\FrameFox => Moved successfully.
      C:\Users\laetitia\AppData\Local\WhiteListing => Moved successfully.
      C:\Users\laetitia\AppData\Local\TBHostSupport => Moved successfully.
      C:\Users\laetitia\AppData\Local\NativeMessaging => Moved successfully.
      C:\Program Files (x86)\Plus-HD-1.2 => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie => Moved successfully.
      C:\Users\laetitia\AppData\Local\Mobogenie => Moved successfully.
      C:\Program Files (x86)\MyPC Backup => Moved successfully.
      C:\Program Files (x86)\Mobogenie => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard => Moved successfully.
      C:\Users\laetitia\AppData\Local\iLivid => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Downloader => Moved successfully.
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly => Moved successfully.
      C:\Program Files (x86)\vGrabber-software => Moved successfully.
      C:\Program Files (x86)\DealPly => Moved successfully.
      C:\Users\laetitia\AppData\Local\Conduit => Moved successfully.
      C:\Program Files (x86)\Conduit => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\BabSolution => Moved successfully.
      C:\ProgramData\SweetIM => Moved successfully.
      C:\Program Files (x86)\SweetIM => Moved successfully.
      C:\Program Files (x86)\PricePeep => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\eType => Moved successfully.
      C:\Program Files (x86)\Glary Utilities => Moved successfully.
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin.com Games => Moved successfully.
      C:\Program Files (x86)\iWin.com Games => Moved successfully.
      C:\Windows\registration => Moved successfully.
      C:\Windows\WindowsUpdate(38).log => Moved successfully.
      C:\Windows\Tasks\RegClean Pro_UPDATES.job => Moved successfully.
      C:\Windows\Tasks\RegClean Pro_DEFAULT.job => Moved successfully.
      C:\Program Files\Common Files\ShopperPro => Moved successfully.
      C:\Program Files (x86)\4796b82e-83c6-4894-b0a5-18131850e578 => Moved successfully.
      C:\ProgramData\GreatSaivingu => Moved successfully.
      C:\ProgramData\reoaLdeal => Moved successfully.
      C:\Program Files (x86)\fst_fr_33 => Moved successfully.
      C:\Program Files (x86)\Common Files\WPVersion.txt => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\BabMaint.exe => Moved successfully.
      C:\Users\laetitia\AppData\Roaming\WB.CFG => Moved successfully.
      C:\Users\laetitia\AppData\Local\cookies.ini => Moved successfully.
      C:\Users\laetitia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => Moved successfully.
      C:\Users\laetitia\AppData\Local\DSI.DAT => Moved successfully.
      C:\Users\laetitia\AppData\Local\dsisetup31832002.exe => Moved successfully.
      C:\Users\laetitia\AppData\Local\nsc904F.tmp => Moved successfully.
      C:\Users\laetitia\AppData\Local\nsgDD1A.tmp => Moved successfully.
      C:\Users\laetitia\AppData\Local\nsn949.tmp => Moved successfully.
      C:\Users\laetitia\AppData\Local\nso1490.tmp => Moved successfully.
      C:\Users\laetitia\AppData\Local\{2DBD6E0F-927B-4005-96B5-CCDF759D3117} => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C5CA854-CC87-4D67-9FD4-B63590585FE7}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C5CA854-CC87-4D67-9FD4-B63590585FE7}" => Key deleted successfully.
      C:\Windows\System32\Tasks\APSnotifierPP3 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP3" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{13735565-43D3-439B-ADAA-B5EFB195386A}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13735565-43D3-439B-ADAA-B5EFB195386A}" => Key deleted successfully.
      C:\Windows\System32\Tasks\Advanced-System Protector_startup not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced-System Protector_startup" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C534C7E-F91B-4042-A23C-415DAB6B0A03}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C534C7E-F91B-4042-A23C-415DAB6B0A03}" => Key deleted successfully.
      C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{47C346E9-2F02-46AC-A5B3-C5F546142FCC}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47C346E9-2F02-46AC-A5B3-C5F546142FCC}" => Key deleted successfully.
      C:\Windows\System32\Tasks\APSnotifierPP1 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{50C87351-9FC8-4B0E-A808-C5F40F355D14}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{50C87351-9FC8-4B0E-A808-C5F40F355D14}" => Key deleted successfully.
      C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SoftwareUpdateTaskMachineUA" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5699A49A-EF3C-40E6-A6BF-E3A5FC295B68}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5699A49A-EF3C-40E6-A6BF-E3A5FC295B68}" => Key deleted successfully.
      C:\Windows\System32\Tasks\DuuquUpdateTaskMachineUA not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DuuquUpdateTaskMachineUA" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5AA7AE61-8E1B-41A5-917B-F924B0FCFE86}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5AA7AE61-8E1B-41A5-917B-F924B0FCFE86}" => Key deleted successfully.
      C:\Windows\System32\Tasks\PenWes => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PenWes" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{62224EE4-3C59-4632-A3F3-F1915F27BF32}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62224EE4-3C59-4632-A3F3-F1915F27BF32}" => Key deleted successfully.
      C:\Windows\System32\Tasks\YTDownloaderUpd => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloaderUpd" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65727060-4707-437A-9D84-3E1C24BDC5A9}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65727060-4707-437A-9D84-3E1C24BDC5A9}" => Key deleted successfully.
      C:\Windows\System32\Tasks\RegClean Pro_UPDATES => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro_UPDATES" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{68310D4F-F30D-4FAF-B11E-1E3C0F678CC0}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68310D4F-F30D-4FAF-B11E-1E3C0F678CC0}" => Key deleted successfully.
      C:\Windows\System32\Tasks\DuuquUpdateTaskMachineCore => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DuuquUpdateTaskMachineCore" => Key deleted successfully.
      HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7391C7C1-EC56-412C-8971-39E7BDBEC6EC} => Key not found.
      C:\Windows\System32\Tasks\RegClean Pro not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74759089-FEB0-4F3E-9A63-F58438E40978}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74759089-FEB0-4F3E-9A63-F58438E40978}" => Key deleted successfully.
      C:\Windows\System32\Tasks\APSnotifierPP2 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP2" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{90648580-3738-4E4F-A9BA-31CF6CCBA111}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90648580-3738-4E4F-A9BA-31CF6CCBA111}" => Key deleted successfully.
      C:\Windows\System32\Tasks\SMupdate1 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMupdate1" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{97B78AB2-25EF-473C-BFA3-C2C4CA225FCF}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97B78AB2-25EF-473C-BFA3-C2C4CA225FCF}" => Key deleted successfully.
      C:\Windows\System32\Tasks\YTDownloader => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloader" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A99955B4-619A-4BA3-BEE6-59777A7BDC39}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A99955B4-619A-4BA3-BEE6-59777A7BDC39}" => Key deleted successfully.
      C:\Windows\System32\Tasks\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6 not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b3a2de55-1200-4b64-80a2-8ac77e67cedf-6" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ACBE4F75-4F47-46DF-9EAE-4D48B5F9D27F}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ACBE4F75-4F47-46DF-9EAE-4D48B5F9D27F}" => Key deleted successfully.
      C:\Windows\System32\Tasks\BlockAndSurf Update not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BlockAndSurf Update" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AF57DF0A-DE5D-47B7-BBE2-8A68507A434F}" => Key deleted successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF57DF0A-DE5D-47B7-BBE2-8A68507A434F}" => Key deleted successfully.
      C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.

      > Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-09 15:57:49)<

      C:\Users\laetitia\AppData\Roaming\Systweak => Is moved successfully.

      End of Fixlog 15:57:49

      0
  11. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok réinitialise bien les navigateurs WEB puis :

    Scan Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0
    1. Laeti4578 Messages postés 29 Statut Membre
       
      Bonsoir, j'ai bien réinitialisé les navigateurs WEB puis lancé un scan mais après redémarrage, impossible d'ouvrir Malwarebytes pour trouver le rapport. Je clique dessus, mais rien ne s'ouvre.
      0
    2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      ok tant pis.

      Il reste quoi comme prob, si tu as encore des pubs, c'est sur quel navigateur WEB ?
      0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Erreur 0x800700E1
Didiervd -
Viktimz -

11 réponses
Virus dans filezilla
balnelius10 -
fabul -

9 réponses