Multiples fenêtres parasites Résolu/Fermé

Question

Bonjour à tous,
Je recherche de l'aide pour désinfecter un PC portable qu'on m'a confié car il se met à ouvrir plein de fenêtres publicitaires parasites. Il a surement besoin d'un décrassage complet car il a 7 ans. Je sais que cette opération doit être minutieuse si on veut qu'elle soit efficace et je préfère vous demander votre aide pour ne rien faire de travers.
Quelqu'un(s) d'entre vous saurait-il me guider ?
Merci.



Configuration: Windows 7 / Firefox 36.0

Malekal_morte- · Answer

Salut, 

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB. 
Voici la procédure à suivre pour les supprimer : 

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode ) 
Télécharge le sur ton bureau ou dossier de téléchargement.  
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Rand Al'Thor · Answer

Merci Malekal_morte
La personne qui m'a confié le PC a déjà plusieurs fois effectué adwcleaner avant de me le donner. Veux-tu que je colle les rapports de ses actions aussi ? car lorsque je l'ai fait, il n'a pas trouvé grand chose...

Rand Al'Thor · Answer

Je prépare les rapports mais la navigation est très lente car beaucoup de fenêtres s'ouvrent en même temps que je navigue...
J'ai presque terminé.

Rand Al'Thor · Answer

Voici donc les rapports d'adwcleaner :
https://pjjoint.malekal.com/files.php?id=20150405_f5l8w11m14r10
https://pjjoint.malekal.com/files.php?id=20150405_j10e13j5i11w5
https://pjjoint.malekal.com/files.php?id=20150405_f5f15j6p15t6
https://pjjoint.malekal.com/files.php?id=20150405_m8p12w9p10u5

et voici les liens suite à FRST
FRST.txt : https://pjjoint.malekal.com/files.php?id=20150405_b5d8v8r8o11
Addition.txt : https://pjjoint.malekal.com/files.php?id=20150405_y6x9c13t13j5
et shortcut.txt : https://pjjoint.malekal.com/files.php?id=20150405_m12y11p8z14x7

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : 2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll 2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll 2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log 2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sb2C30.tmp 2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local seACD6.tmp 2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sl63BA.tmp 2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sm4BB4.tmp 2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local sn8F49.tmp 2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syD1F7.tmp 2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syF0F8.tmp 2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll 2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll 2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll 2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234] 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ 2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI 2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND 2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe 2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX 2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC 2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe 2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF 2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO 2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe 2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB 2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD 2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC 2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe 2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG 2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI 2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe 2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe 2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe 2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI 2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job 2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB 2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe 2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ 2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB 2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf 2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf 2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update 2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update 2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer 2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB 2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job 2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB 2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe 2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF 2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job 2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe 2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB 2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB 2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job 2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB 2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe 2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO 2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job 2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe 2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD 2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro 2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job 2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe 2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI 2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt 2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job 2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae 2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe 2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC 2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277 2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc 2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} 2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI 2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt 2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt 2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} 2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB 2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX 2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job 2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} 2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData cajiggepkgnbdflfmkfnoiianjjneap 2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} 2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local seACD6.tmp 2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn 2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} 2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log 2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sl63BA.tmp 2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} 2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syD1F7.tmp 2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job 2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe 2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC 2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe 2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND 2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job 2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} 2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sm4BB4.tmp 2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syF0F8.tmp 2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job 2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe 2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX 2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} 2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE} 2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75 2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} 2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} 2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sb2C30.tmp 2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed] R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed] R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB sj668.tmp [205312 2015-04-05] () [File not signed] S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X] S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X] S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X] CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02] CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02] CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05] CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02] Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe () Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe () Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited) Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe () HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [mbot_fr_576] => [X] HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1 Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated) Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe" Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326 scc.exe" -d C:\Users\Dominique\Desktop Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION Une fois, le texte coller dans le bloc-note. Menu Fichier puis Enregistrer sous. A gauche, place toi sur le bureau. Dans le champs en bas, nom du fichier mets : fixlist.txt Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau. Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur puis réinitialise tes navigateurs: ================================== Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites : Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

Rand Al'Thor · Answer

je colle maintenant le rapport après l'étape FIXLIST : Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Dominique at 2015-04-06 00:43:07 Run:1 Running from C:\Users\Dominique\Desktop Loaded Profiles: Dominique (Available profiles: Dominique) Boot Mode: Normal ============================================== Content of fixlist: 2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll 2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll 2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log 2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sb2C30.tmp 2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local seACD6.tmp 2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sl63BA.tmp 2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sm4BB4.tmp 2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local sn8F49.tmp 2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syD1F7.tmp 2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syF0F8.tmp 2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll 2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll 2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll 2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234] 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ 2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI 2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND 2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe 2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX 2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC 2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe 2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF 2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO 2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe 2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB 2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD 2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC 2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe 2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG 2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat 2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI 2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe 2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe 2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe 2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI 2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job 2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB 2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe 2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ 2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB 2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf 2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf 2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update 2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update 2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer 2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB 2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job 2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB 2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe 2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF 2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job 2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe 2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB 2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB 2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job 2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB 2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe 2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO 2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job 2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe 2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD 2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro 2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job 2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe 2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI 2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt 2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job 2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae 2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe 2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC 2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277 2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc 2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} 2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO 2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI 2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt 2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt 2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} 2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB 2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX 2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job 2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} 2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData cajiggepkgnbdflfmkfnoiianjjneap 2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} 2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local seACD6.tmp 2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn 2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} 2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log 2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sl63BA.tmp 2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} 2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syD1F7.tmp 2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job 2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe 2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC 2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe 2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND 2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job 2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} 2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sm4BB4.tmp 2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local syF0F8.tmp 2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job 2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe 2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX 2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} 2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE} 2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75 2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} 2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} 2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local sb2C30.tmp 2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed] R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed] R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB sj668.tmp [205312 2015-04-05] () [File not signed] S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X] S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X] S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X] CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02] CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02] CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05] CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02] Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe () Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe () Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited) Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe () HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [mbot_fr_576] => [X] HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1 Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated) Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe" Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326 scc.exe" -d C:\Users\Dominique\Desktop Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION C:\Users\Dominique\AppData\Local\msvcp100.dll => Moved successfully. C:\Users\Dominique\AppData\Local\msvcr100.dll => Moved successfully. C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log => Moved successfully. C:\Users\Dominique\AppData\Local sb2C30.tmp => Moved successfully. C:\Users\Dominique\AppData\Local seACD6.tmp => Moved successfully. C:\Users\Dominique\AppData\Local sl63BA.tmp => Moved successfully. C:\Users\Dominique\AppData\Local sm4BB4.tmp => Moved successfully. C:\Users\Dominique\AppData\Local sn8F49.tmp => Moved successfully. C:\Users\Dominique\AppData\Local syD1F7.tmp => Moved successfully. C:\Users\Dominique\AppData\Local syF0F8.tmp => Moved successfully. C:\Users\Dominique\AppData\Local\QtCore4.dll => Moved successfully. C:\Users\Dominique\AppData\Local\QtGui4.dll => Moved successfully. C:\Users\Dominique\AppData\Local\QtNetwork4.dll => Moved successfully. "C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]" => File/Directory not found. C:\Users\Dominique\AppData\Roaming\AZYFZOJ => Moved successfully. C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\CWXI => Moved successfully. C:\Users\Dominique\AppData\Roaming\CWXI.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\FXXND => Moved successfully. C:\Users\Dominique\AppData\Roaming\FXXND.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\HVFGTX => Moved successfully. C:\Users\Dominique\AppData\Roaming\HVFGTX.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\IPAKC => Moved successfully. C:\Users\Dominique\AppData\Roaming\IPAKC.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\MUF => Moved successfully. C:\Users\Dominique\AppData\Roaming\MUF.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\PUHKPUO => Moved successfully. C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\TAYB => Moved successfully. C:\Users\Dominique\AppData\Roaming\TAYB.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\TYHHD => Moved successfully. C:\Users\Dominique\AppData\Roaming\TYHHD.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\UUKXC => Moved successfully. C:\Users\Dominique\AppData\Roaming\UUKXC.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\WB.CFG => Moved successfully. C:\Users\Dominique\AppData\Roaming\wklnhst.dat => Moved successfully. C:\Users\Dominique\AppData\Roaming\XTAQVI => Moved successfully. C:\Users\Dominique\AppData\Roaming\XTAQVI.exe => Moved successfully. C:\Users\Dominique\AppData\Local\ContentAgent.exe => Moved successfully. "C:\Users\Dominique\AppData\Roaming\XTAQVI.exe" => File/Directory not found. C:\Windows\System32\Tasks\XTAQVI => Moved successfully. C:\Windows\Tasks\AZYFZOJ.job => Moved successfully. C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB => Moved successfully. C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 => Moved successfully. "C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe" => File/Directory not found. C:\Windows\System32\Tasks\AZYFZOJ => Moved successfully. C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB => Moved successfully. C:\Program Files (x86)\Cinema PlusV02.04-ntf => Moved successfully. C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf => Moved successfully. C:\Windows\System32\Tasks\Selection Tools Update => Moved successfully. C:\Windows\System32\Tasks\WindApp Update => Moved successfully. C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 => Moved successfully. C:\Program Files (x86)\GUPlayer => Moved successfully. C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB => Moved successfully. C:\Windows\Tasks\MUF.job => Moved successfully. C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB => Moved successfully. "C:\Users\Dominique\AppData\Roaming\MUF.exe" => File/Directory not found. C:\Windows\System32\Tasks\MUF => Moved successfully. C:\Windows\Tasks\TAYB.job => Moved successfully. C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 => Moved successfully. "C:\Users\Dominique\AppData\Roaming\TAYB.exe" => File/Directory not found. C:\Windows\System32\Tasks\TAYB => Moved successfully. C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB => Moved successfully. C:\Windows\Tasks\PUHKPUO.job => Moved successfully. C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB => Moved successfully. "C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe" => File/Directory not found. C:\Windows\System32\Tasks\PUHKPUO => Moved successfully. C:\Windows\Tasks\TYHHD.job => Moved successfully. C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 => Moved successfully. C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 => Moved successfully. "C:\Users\Dominique\AppData\Roaming\TYHHD.exe" => File/Directory not found. C:\Windows\System32\Tasks\TYHHD => Moved successfully. C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Moved successfully. C:\Users\Public\Documents\ShopperPro => Moved successfully. C:\Program Files\Common Files\ShopperPro => Moved successfully. C:\Windows\Tasks\CWXI.job => Moved successfully. "C:\Users\Dominique\AppData\Roaming\CWXI.exe" => File/Directory not found. C:\Windows\System32\Tasks\CWXI => Moved successfully. C:\Users\Dominique\AppData\Local\CrashRpt => Moved successfully. C:\Windows\Tasks\IPAKC.job => Moved successfully. C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae => Moved successfully. "C:\Users\Dominique\AppData\Roaming\IPAKC.exe" => File/Directory not found. C:\Windows\System32\Tasks\IPAKC => Moved successfully. C:\ProgramData\12611355569204033277 => Moved successfully. C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc => Moved successfully. "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory move: Could not move "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory. => Scheduled to move on reboot. C:\Program Files (x86)\app_setup => Moved successfully. "C:\Users\Dominique\AppData\Roaming\TYHHD" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\IPAKC" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\FXXND" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\AZYFZOJ" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\XTAQVI" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\UUKXC" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\PUHKPUO" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\CWXI" => File/Directory not found. C:\Users\Dominique\Desktop\dossier module 5 relu.odt => Moved successfully. C:\Users\Dominique\Desktop\dossier module 5.odt => Moved successfully. C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} => Moved successfully. "C:\Users\Dominique\AppData\Roaming\TAYB" => File/Directory not found. "C:\Users\Dominique\AppData\Roaming\HVFGTX" => File/Directory not found. C:\Windows\Tasks\XTAQVI.job => Moved successfully. C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} => Moved successfully. C:\ProgramData cajiggepkgnbdflfmkfnoiianjjneap => Moved successfully. "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory move: Could not move "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory. => Scheduled to move on reboot. "C:\Users\Dominique\AppData\Local seACD6.tmp" => File/Directory not found. C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn => Moved successfully. "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory move: Could not move "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory. => Scheduled to move on reboot. Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot. "C:\Users\Dominique\AppData\Local sl63BA.tmp" => File/Directory not found. C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => Moved successfully. "C:\Users\Dominique\AppData\Local syD1F7.tmp" => File/Directory not found. C:\Windows\Tasks\UUKXC.job => Moved successfully. "C:\Users\Dominique\AppData\Roaming\UUKXC.exe" => File/Directory not found. C:\Windows\System32\Tasks\UUKXC => Moved successfully. "C:\Users\Dominique\AppData\Roaming\FXXND.exe" => File/Directory not found. C:\Windows\System32\Tasks\FXXND => Moved successfully. C:\Windows\Tasks\FXXND.job => Moved successfully. C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 => Moved successfully. C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => Moved successfully. "C:\Users\Dominique\AppData\Local sm4BB4.tmp" => File/Directory not found. "C:\Users\Dominique\AppData\Local syF0F8.tmp" => File/Directory not found. C:\Windows\Tasks\HVFGTX.job => Moved successfully. "C:\Users\Dominique\AppData\Roaming\HVFGTX.exe" => File/Directory not found. C:\Windows\System32\Tasks\HVFGTX => Moved successfully. C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} => Moved successfully. C:\Windows\SysWOW64\${LOGFILE} => Moved successfully. C:\Program Files (x86)\Optimizer Pro 3.75 => Moved successfully. C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} => Moved successfully. C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => Moved successfully. "C:\Users\Dominique\AppData\Local sb2C30.tmp" => File/Directory not found. C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully. C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => Moved successfully. gikiwyle => Service stopped successfully. gikiwyle => Service deleted successfully. nixikubi => Service stopped successfully. nixikubi => Service deleted successfully. qumesuky => Service not found. Update Mountain Bike => Service deleted successfully. Util Mountain Bike => Service deleted successfully. VCL => Service deleted successfully. C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb => Moved successfully. C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi => Moved successfully. C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll => Moved successfully. C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp => Moved successfully. C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk => Moved successfully. C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk => Moved successfully. C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe => Moved successfully. C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully. C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe not found. C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk => Moved successfully. C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\3D BubbleSound => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mbot_fr_576 => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\StormWatch => value deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully. C:\Windows\System32\Tasks\CWXI not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CWXI" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully. C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully. C:\Windows\System32\Tasks\MUF not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MUF" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully. C:\Windows\System32\Tasks\Selection Tools Update not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully. C:\Windows\System32\Tasks\AZYFZOJ not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AZYFZOJ" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully. C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully. C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully. C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully. C:\Windows\System32\Tasks\PUHKPUO not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PUHKPUO" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully. C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully. C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully. C:\Windows\System32\Tasks\XTAQVI not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XTAQVI" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully. C:\Windows\System32\Tasks\TYHHD not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TYHHD" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully. C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully. C:\Windows\System32\Tasks\FXXND not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FXXND" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully. C:\Windows\System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4BBD2CDA-9F84-4A5A-B751-783453E5725B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully. C:\Windows\System32\Tasks\HVFGTX not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HVFGTX" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully. C:\Windows\System32\Tasks\WindApp Update not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully. C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully. C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully. C:\Windows\System32\Tasks\TAYB not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TAYB" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully. C:\Windows\System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => Moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A20C8841-607D-4AE6-865D-FBFE2222FA16}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully. C:\Windows\System32\Tasks\UUKXC not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UUKXC" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully. C:\Windows\System32\Tasks\IPAKC not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IPAKC" => Key deleted successfully. C:\Windows\Tasks\AZYFZOJ.job not found. C:\Windows\Tasks\CWXI.job not found. C:\Windows\Tasks\FXXND.job not found. C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully. C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully. C:\Windows\Tasks\HVFGTX.job not found. C:\Windows\Tasks\IPAKC.job not found. C:\Windows\Tasks\MUF.job not found. C:\Windows\Tasks\PUHKPUO.job not found. C:\Windows\Tasks\TAYB.job not found. C:\Windows\Tasks\TYHHD.job not found. C:\Windows\Tasks\UUKXC.job not found. C:\Windows\Tasks\XTAQVI.job not found. > Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-06 00:45:31)< C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} => Moved successfully. C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} => Moved successfully. C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} => Moved successfully. C:\Windows\WindowsUpdate.log => Is moved successfully. End of Fixlog 00:45:32 et je relance mes navigateurs.

Rand Al'Thor · Answer

C'est fait. 
Reste-t-il d'autres étapes ?
Merci.

Malekal_morte- · Answer

ok, voici la suite :


Scan Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 
Mets le à jour puis lance un examen. 

A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche. 
Redémarre l'ordinateur si besoin. 
Après redémarrage, relance Malwarebytes. 
Vas chercher le rapport dans l'onglet Historique. 
A gauche Journal des examens. 
Doube-clic sur l'examen dans la liste. 
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

Rand Al'Thor · Answer

C'est parti. 
Et merci pour le temps que vous consacrez à aider les nécessiteux comme moi...
Je ne sais pas combien vous aidez de personnes dans la journée mais vous devez faire des heureux.
Je poste à nouveau lorsque le scan est terminé.

Rand Al'Thor · Answer

Voilà le rapport

https://pjjoint.malekal.com/files.php?id=20150406_h10h8d11s8y6

Malekal_morte- · Answer

Ca doit quoi les pubs ?
S'il reste des pubs intempestives, indique sur quel navigateur WEB.

Rand Al'Thor · Answer

Non, il semble que l'opération avec FRST64 ait été bénéfique. Depuis, je n'ai plus d'ouvertures de fenêtres de pub à chaque clic. Par contre, le PC restait un peu lent... mais je ne suis pas sûr de la vitesse à laquelle m'attendre (il a sept ans...)

Malekal_morte- · Answer

Surtout qu'il n'y a pas énormément de programmes au démarrage.
Nettoye les ventilos. 

Eventuellement pour les adwares, fais un nettoyage Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 


~~

Voila, c'est terminé, tu peux supprimer les programmes utilisés. 

Quelques conseils : 



Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start= 


Pour ne plus te faire avoir. 
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/ 


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Rand Al'Thor · Answer

je ne trouve pas l'extension de Blockulicius pour firefox, pensez vous que je puisse utiliser Ad Block ?
Et comment nettoyer les ventilos ? en démontant ?

Rand Al'Thor · Answer

Et que pensez vous d'Adblock Plus ?

Rand Al'Thor · Answer

bien, j'ai installé Adblock plus pour les trois navigateurs du PC. 
Je vous remercie de votre aide.
Bonne soirée.

Multiples fenêtres parasites

16 réponses

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-06 00:45:31)<

End of Fixlog 00:45:32

Discussions similaires