Multiples fenêtres parasites [Résolu/Fermé]

Signaler
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
-
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
-
Bonjour à tous,
Je recherche de l'aide pour désinfecter un PC portable qu'on m'a confié car il se met à ouvrir plein de fenêtres publicitaires parasites. Il a surement besoin d'un décrassage complet car il a 7 ans. Je sais que cette opération doit être minutieuse si on veut qu'elle soit efficace et je préfère vous demander votre aide pour ne rien faire de travers.
Quelqu'un(s) d'entre vous saurait-il me guider ?
Merci.



16 réponses

Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
  • FRST.txt
  • Shortcut.txt
  • Additionnal.txt


Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
Merci Malekal_morte
La personne qui m'a confié le PC a déjà plusieurs fois effectué adwcleaner avant de me le donner. Veux-tu que je colle les rapports de ses actions aussi ? car lorsque je l'ai fait, il n'a pas trouvé grand chose...
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Donne tous les rapports demandés.
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
Je prépare les rapports mais la navigation est très lente car beaucoup de fenêtres s'ouvrent en même temps que je navigue...
J'ai presque terminé.
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :


2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_fr_576] => [X]
HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION



Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur


puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :



Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
je colle maintenant le rapport après l'étape FIXLIST :

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Dominique at 2015-04-06 00:43:07 Run:1
Running from C:\Users\Dominique\Desktop
Loaded Profiles: Dominique (Available profiles: Dominique)
Boot Mode: Normal
==============================================

Content of fixlist:

2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_fr_576] => [X]
HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION


C:\Users\Dominique\AppData\Local\msvcp100.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\msvcr100.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log => Moved successfully.
C:\Users\Dominique\AppData\Local\nsb2C30.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nseACD6.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsl63BA.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsm4BB4.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsn8F49.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsyD1F7.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsyF0F8.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\QtCore4.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\QtGui4.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\QtNetwork4.dll => Moved successfully.
"C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]" => File/Directory not found.
C:\Users\Dominique\AppData\Roaming\AZYFZOJ => Moved successfully.
C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\CWXI => Moved successfully.
C:\Users\Dominique\AppData\Roaming\CWXI.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\FXXND => Moved successfully.
C:\Users\Dominique\AppData\Roaming\FXXND.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\HVFGTX => Moved successfully.
C:\Users\Dominique\AppData\Roaming\HVFGTX.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\IPAKC => Moved successfully.
C:\Users\Dominique\AppData\Roaming\IPAKC.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\MUF => Moved successfully.
C:\Users\Dominique\AppData\Roaming\MUF.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\PUHKPUO => Moved successfully.
C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TAYB => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TAYB.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TYHHD => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TYHHD.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\UUKXC => Moved successfully.
C:\Users\Dominique\AppData\Roaming\UUKXC.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\WB.CFG => Moved successfully.
C:\Users\Dominique\AppData\Roaming\wklnhst.dat => Moved successfully.
C:\Users\Dominique\AppData\Roaming\XTAQVI => Moved successfully.
C:\Users\Dominique\AppData\Roaming\XTAQVI.exe => Moved successfully.
C:\Users\Dominique\AppData\Local\ContentAgent.exe => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\XTAQVI.exe" => File/Directory not found.
C:\Windows\System32\Tasks\XTAQVI => Moved successfully.
C:\Windows\Tasks\AZYFZOJ.job => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe" => File/Directory not found.
C:\Windows\System32\Tasks\AZYFZOJ => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Program Files (x86)\Cinema PlusV02.04-ntf => Moved successfully.
C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf => Moved successfully.
C:\Windows\System32\Tasks\Selection Tools Update => Moved successfully.
C:\Windows\System32\Tasks\WindApp Update => Moved successfully.
C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 => Moved successfully.
C:\Program Files (x86)\GUPlayer => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Windows\Tasks\MUF.job => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\MUF.exe" => File/Directory not found.
C:\Windows\System32\Tasks\MUF => Moved successfully.
C:\Windows\Tasks\TAYB.job => Moved successfully.
C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TAYB.exe" => File/Directory not found.
C:\Windows\System32\Tasks\TAYB => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Windows\Tasks\PUHKPUO.job => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe" => File/Directory not found.
C:\Windows\System32\Tasks\PUHKPUO => Moved successfully.
C:\Windows\Tasks\TYHHD.job => Moved successfully.
C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 => Moved successfully.
C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TYHHD.exe" => File/Directory not found.
C:\Windows\System32\Tasks\TYHHD => Moved successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Moved successfully.
C:\Users\Public\Documents\ShopperPro => Moved successfully.
C:\Program Files\Common Files\ShopperPro => Moved successfully.
C:\Windows\Tasks\CWXI.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\CWXI.exe" => File/Directory not found.
C:\Windows\System32\Tasks\CWXI => Moved successfully.
C:\Users\Dominique\AppData\Local\CrashRpt => Moved successfully.
C:\Windows\Tasks\IPAKC.job => Moved successfully.
C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\IPAKC.exe" => File/Directory not found.
C:\Windows\System32\Tasks\IPAKC => Moved successfully.
C:\ProgramData\12611355569204033277 => Moved successfully.
C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc => Moved successfully.

"C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory move:

Could not move "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory. => Scheduled to move on reboot.

C:\Program Files (x86)\app_setup => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TYHHD" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\IPAKC" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\FXXND" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\AZYFZOJ" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\XTAQVI" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\UUKXC" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\PUHKPUO" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\CWXI" => File/Directory not found.
C:\Users\Dominique\Desktop\dossier module 5 relu.odt => Moved successfully.
C:\Users\Dominique\Desktop\dossier module 5.odt => Moved successfully.
C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TAYB" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\HVFGTX" => File/Directory not found.
C:\Windows\Tasks\XTAQVI.job => Moved successfully.
C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} => Moved successfully.
C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap => Moved successfully.

"C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory move:

Could not move "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory. => Scheduled to move on reboot.

"C:\Users\Dominique\AppData\Local\nseACD6.tmp" => File/Directory not found.
C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn => Moved successfully.

"C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory move:

Could not move "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory. => Scheduled to move on reboot.

Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot.
"C:\Users\Dominique\AppData\Local\nsl63BA.tmp" => File/Directory not found.
C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsyD1F7.tmp" => File/Directory not found.
C:\Windows\Tasks\UUKXC.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\UUKXC.exe" => File/Directory not found.
C:\Windows\System32\Tasks\UUKXC => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\FXXND.exe" => File/Directory not found.
C:\Windows\System32\Tasks\FXXND => Moved successfully.
C:\Windows\Tasks\FXXND.job => Moved successfully.
C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 => Moved successfully.
C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsm4BB4.tmp" => File/Directory not found.
"C:\Users\Dominique\AppData\Local\nsyF0F8.tmp" => File/Directory not found.
C:\Windows\Tasks\HVFGTX.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\HVFGTX.exe" => File/Directory not found.
C:\Windows\System32\Tasks\HVFGTX => Moved successfully.
C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} => Moved successfully.
C:\Windows\SysWOW64\${LOGFILE} => Moved successfully.
C:\Program Files (x86)\Optimizer Pro 3.75 => Moved successfully.
C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} => Moved successfully.
C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsb2C30.tmp" => File/Directory not found.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => Moved successfully.
gikiwyle => Service stopped successfully.
gikiwyle => Service deleted successfully.
nixikubi => Service stopped successfully.
nixikubi => Service deleted successfully.
qumesuky => Service not found.
Update Mountain Bike => Service deleted successfully.
Util Mountain Bike => Service deleted successfully.
VCL => Service deleted successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk => Moved successfully.
C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk => Moved successfully.
C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe not found.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk => Moved successfully.
C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_576 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\StormWatch => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
C:\Windows\System32\Tasks\CWXI not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CWXI" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
C:\Windows\System32\Tasks\MUF not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MUF" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
C:\Windows\System32\Tasks\Selection Tools Update not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
C:\Windows\System32\Tasks\AZYFZOJ not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AZYFZOJ" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
C:\Windows\System32\Tasks\PUHKPUO not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PUHKPUO" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
C:\Windows\System32\Tasks\XTAQVI not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XTAQVI" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
C:\Windows\System32\Tasks\TYHHD not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TYHHD" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
C:\Windows\System32\Tasks\FXXND not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FXXND" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
C:\Windows\System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4BBD2CDA-9F84-4A5A-B751-783453E5725B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
C:\Windows\System32\Tasks\HVFGTX not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HVFGTX" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
C:\Windows\System32\Tasks\WindApp Update not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
C:\Windows\System32\Tasks\TAYB not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TAYB" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
C:\Windows\System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A20C8841-607D-4AE6-865D-FBFE2222FA16}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
C:\Windows\System32\Tasks\UUKXC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UUKXC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
C:\Windows\System32\Tasks\IPAKC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IPAKC" => Key deleted successfully.
C:\Windows\Tasks\AZYFZOJ.job not found.
C:\Windows\Tasks\CWXI.job not found.
C:\Windows\Tasks\FXXND.job not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\HVFGTX.job not found.
C:\Windows\Tasks\IPAKC.job not found.
C:\Windows\Tasks\MUF.job not found.
C:\Windows\Tasks\PUHKPUO.job not found.
C:\Windows\Tasks\TAYB.job not found.
C:\Windows\Tasks\TYHHD.job not found.
C:\Windows\Tasks\UUKXC.job not found.
C:\Windows\Tasks\XTAQVI.job not found.

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-06 00:45:31)<

C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} => Moved successfully.
C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} => Moved successfully.
C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} => Moved successfully.
C:\Windows\WindowsUpdate.log => Is moved successfully.

End of Fixlog 00:45:32

et je relance mes navigateurs.
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
C'est fait.
Reste-t-il d'autres étapes ?
Merci.
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
ok, voici la suite :


Scan Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour puis lance un examen.

A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
Redémarre l'ordinateur si besoin.
Après redémarrage, relance Malwarebytes.
Vas chercher le rapport dans l'onglet Historique.
A gauche Journal des examens.
Doube-clic sur l'examen dans la liste.
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.



Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
C'est parti.
Et merci pour le temps que vous consacrez à aider les nécessiteux comme moi...
Je ne sais pas combien vous aidez de personnes dans la journée mais vous devez faire des heureux.
Je poste à nouveau lorsque le scan est terminé.
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Ca doit quoi les pubs ?
S'il reste des pubs intempestives, indique sur quel navigateur WEB.
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
Non, il semble que l'opération avec FRST64 ait été bénéfique. Depuis, je n'ai plus d'ouvertures de fenêtres de pub à chaque clic. Par contre, le PC restait un peu lent... mais je ne suis pas sûr de la vitesse à laquelle m'attendre (il a sept ans...)
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Surtout qu'il n'y a pas énormément de programmes au démarrage.
Nettoye les ventilos.

Eventuellement pour les adwares, fais un nettoyage Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/


~~

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :



Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
je ne trouve pas l'extension de Blockulicius pour firefox, pensez vous que je puisse utiliser Ad Block ?
Et comment nettoyer les ventilos ? en démontant ?
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Elle est temporairement désactivée, apparemment...
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
Et que pensez vous d'Adblock Plus ?
Messages postés
46
Date d'inscription
samedi 21 juillet 2012
Statut
Membre
Dernière intervention
22 décembre 2020
4
bien, j'ai installé Adblock plus pour les trois navigateurs du PC.
Je vous remercie de votre aide.
Bonne soirée.
Messages postés
180265
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
26 mars 2021
23 742
Pas de soucis =)