Multiples fenêtres parasites

Résolu
Bonjour à tous,
Je recherche de l'aide pour désinfecter un PC portable qu'on m'a confié car il se met à ouvrir plein de fenêtres publicitaires parasites. Il a surement besoin d'un décrassage complet car il a 7 ans. Je sais que cette opération doit être minutieuse si on veut qu'elle soit efficace et je préfère vous demander votre aide pour ne rien faire de travers.
Quelqu'un(s) d'entre vous saurait-il me guider ?
Merci.

16 réponses

  1. Modérateur
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    1. Merci Malekal_morte
      La personne qui m'a confié le PC a déjà plusieurs fois effectué adwcleaner avant de me le donner. Veux-tu que je colle les rapports de ses actions aussi ? car lorsque je l'ai fait, il n'a pas trouvé grand chose...
      1. Modérateur
        Donne tous les rapports demandés.
    2. Je prépare les rapports mais la navigation est très lente car beaucoup de fenêtres s'ouvrent en même temps que je navigue...
      J'ai presque terminé.
        1. Modérateur
          Voici la correction à effectuer avec FRST.
          Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

          Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
          Copie/colle dedans ce qui suit :

          2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
          2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
          2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
          2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
          2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
          2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
          2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
          2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
          2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
          2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
          2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
          2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
          2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
          2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
          2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
          2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
          2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
          2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
          2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
          2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
          2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
          2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
          2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
          2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
          2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
          2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
          2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
          2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
          2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
          2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
          2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
          2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
          2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
          2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
          2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
          2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
          2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
          2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
          2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
          2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
          2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
          2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
          2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
          2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
          2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
          2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
          2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
          2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
          2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
          2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
          2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
          2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
          2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
          2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
          2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
          2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
          2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
          2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
          2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
          2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
          2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
          2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
          2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
          2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
          2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
          2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
          2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
          2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
          2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
          2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
          2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
          2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
          2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
          2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
          2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
          2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
          2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
          2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
          2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
          2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
          2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
          2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
          2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
          2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
          2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
          2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
          2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
          2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
          2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
          2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
          2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
          2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
          2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
          2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
          2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
          2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
          2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
          2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
          2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
          2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
          2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
          2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
          2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
          2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
          2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
          2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
          2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
          2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
          2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
          2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
          2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
          2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
          2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
          2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
          2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
          2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
          2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
          2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
          2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
          2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
          2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
          2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
          2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
          2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
          2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
          2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
          2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
          R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
          R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
          R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
          S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
          S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
          S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
          CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
          CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
          CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
          CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
          Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
          ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
          Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
          ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
          Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
          ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
          Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
          ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
          HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
          HKLM-x32\...\Run: [] => [X]
          HKLM-x32\...\Run: [mbot_fr_576] => [X]
          HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
          Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
          Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
          Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
          Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
          Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
          Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
          Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
          Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
          Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
          Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
          Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
          Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
          Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
          Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
          Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
          Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
          Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
          Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
          Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
          Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
          Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
          Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
          Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
          Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
          Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
          Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
          Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
          Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
          Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
          Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
          Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
          Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
          Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
          Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
          Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
          Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
          Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION

          Une fois, le texte coller dans le bloc-note.
          Menu Fichier puis Enregistrer sous.
          A gauche, place toi sur le bureau.
          Dans le champs en bas, nom du fichier mets : fixlist.txt
          Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

          Relance FRST et clic sur le bouton Fix
          Selon comment un redémarrage est nécessaire (pas obligatoire).
          Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

          Redémarre l'ordinateur

          puis réinitialise tes navigateurs:
          ==================================
          Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

          1. je colle maintenant le rapport après l'étape FIXLIST :

            Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
            Ran by Dominique at 2015-04-06 00:43:07 Run:1
            Running from C:\Users\Dominique\Desktop
            Loaded Profiles: Dominique (Available profiles: Dominique)
            Boot Mode: Normal
            ==============================================

            Content of fixlist:
            2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
            2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
            2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
            2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
            2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
            2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
            2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
            2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
            2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
            2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
            2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
            2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
            2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
            2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
            2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
            2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
            2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
            2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
            2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
            2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
            2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
            2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
            2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
            2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
            2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
            2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
            2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
            2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
            2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
            2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
            2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
            2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
            2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
            2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
            2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
            2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
            2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
            2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
            2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
            2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
            2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
            2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
            2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
            2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
            2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
            2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
            2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
            2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
            2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
            2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
            2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
            2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
            2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
            2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
            2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
            2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
            2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
            2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
            2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
            2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
            2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
            2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
            2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
            2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
            2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
            2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
            2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
            2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
            2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
            2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
            2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
            2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
            2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
            2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
            2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
            2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
            2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
            2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
            2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
            2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
            2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
            2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
            2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
            2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
            2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
            2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
            2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
            2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
            2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
            2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
            2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
            2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
            2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
            2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
            2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
            2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
            2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
            2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
            2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
            2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
            2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
            2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
            2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
            2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
            2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
            2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
            2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
            2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
            2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
            2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
            2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
            2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
            2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
            2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
            2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
            2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
            2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
            2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
            2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
            2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
            2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
            2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
            2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
            2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
            2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
            2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
            2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
            R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
            R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
            R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
            S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
            S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
            S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
            CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
            CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
            CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
            CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
            Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
            ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
            Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
            ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
            Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
            ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
            Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
            ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
            HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
            HKLM-x32\...\Run: [] => [X]
            HKLM-x32\...\Run: [mbot_fr_576] => [X]
            HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
            Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
            Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
            Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
            Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
            Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
            Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
            Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
            Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
            Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
            Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
            Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
            Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
            Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
            Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
            Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
            Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
            Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
            Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
            Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
            Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
            Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
            Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
            Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
            Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
            Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
            Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
            Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
            Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
            Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
            Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
            Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
            Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
            Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
            Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
            Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION

            C:\Users\Dominique\AppData\Local\msvcp100.dll => Moved successfully.
            C:\Users\Dominique\AppData\Local\msvcr100.dll => Moved successfully.
            C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsb2C30.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nseACD6.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsl63BA.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsm4BB4.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsn8F49.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsyD1F7.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\nsyF0F8.tmp => Moved successfully.
            C:\Users\Dominique\AppData\Local\QtCore4.dll => Moved successfully.
            C:\Users\Dominique\AppData\Local\QtGui4.dll => Moved successfully.
            C:\Users\Dominique\AppData\Local\QtNetwork4.dll => Moved successfully.
            "C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]" => File/Directory not found.
            C:\Users\Dominique\AppData\Roaming\AZYFZOJ => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\CWXI => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\CWXI.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\FXXND => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\FXXND.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\HVFGTX => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\HVFGTX.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\IPAKC => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\IPAKC.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\MUF => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\MUF.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\PUHKPUO => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\TAYB => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\TAYB.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\TYHHD => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\TYHHD.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\UUKXC => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\UUKXC.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\WB.CFG => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\wklnhst.dat => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\XTAQVI => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\XTAQVI.exe => Moved successfully.
            C:\Users\Dominique\AppData\Local\ContentAgent.exe => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\XTAQVI.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\XTAQVI => Moved successfully.
            C:\Windows\Tasks\AZYFZOJ.job => Moved successfully.
            C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB => Moved successfully.
            C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\AZYFZOJ => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB => Moved successfully.
            C:\Program Files (x86)\Cinema PlusV02.04-ntf => Moved successfully.
            C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf => Moved successfully.
            C:\Windows\System32\Tasks\Selection Tools Update => Moved successfully.
            C:\Windows\System32\Tasks\WindApp Update => Moved successfully.
            C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 => Moved successfully.
            C:\Program Files (x86)\GUPlayer => Moved successfully.
            C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB => Moved successfully.
            C:\Windows\Tasks\MUF.job => Moved successfully.
            C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\MUF.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\MUF => Moved successfully.
            C:\Windows\Tasks\TAYB.job => Moved successfully.
            C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\TAYB.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\TAYB => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB => Moved successfully.
            C:\Windows\Tasks\PUHKPUO.job => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\PUHKPUO => Moved successfully.
            C:\Windows\Tasks\TYHHD.job => Moved successfully.
            C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 => Moved successfully.
            C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\TYHHD.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\TYHHD => Moved successfully.
            C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Moved successfully.
            C:\Users\Public\Documents\ShopperPro => Moved successfully.
            C:\Program Files\Common Files\ShopperPro => Moved successfully.
            C:\Windows\Tasks\CWXI.job => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\CWXI.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\CWXI => Moved successfully.
            C:\Users\Dominique\AppData\Local\CrashRpt => Moved successfully.
            C:\Windows\Tasks\IPAKC.job => Moved successfully.
            C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\IPAKC.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\IPAKC => Moved successfully.
            C:\ProgramData\12611355569204033277 => Moved successfully.
            C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc => Moved successfully.

            "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory move:

            Could not move "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory. => Scheduled to move on reboot.

            C:\Program Files (x86)\app_setup => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\TYHHD" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\IPAKC" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\FXXND" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\AZYFZOJ" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\XTAQVI" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\UUKXC" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\PUHKPUO" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\CWXI" => File/Directory not found.
            C:\Users\Dominique\Desktop\dossier module 5 relu.odt => Moved successfully.
            C:\Users\Dominique\Desktop\dossier module 5.odt => Moved successfully.
            C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\TAYB" => File/Directory not found.
            "C:\Users\Dominique\AppData\Roaming\HVFGTX" => File/Directory not found.
            C:\Windows\Tasks\XTAQVI.job => Moved successfully.
            C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} => Moved successfully.
            C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap => Moved successfully.

            "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory move:

            Could not move "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory. => Scheduled to move on reboot.

            "C:\Users\Dominique\AppData\Local\nseACD6.tmp" => File/Directory not found.
            C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn => Moved successfully.

            "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory move:

            Could not move "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory. => Scheduled to move on reboot.

            Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot.
            "C:\Users\Dominique\AppData\Local\nsl63BA.tmp" => File/Directory not found.
            C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => Moved successfully.
            "C:\Users\Dominique\AppData\Local\nsyD1F7.tmp" => File/Directory not found.
            C:\Windows\Tasks\UUKXC.job => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\UUKXC.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\UUKXC => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\FXXND.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\FXXND => Moved successfully.
            C:\Windows\Tasks\FXXND.job => Moved successfully.
            C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 => Moved successfully.
            C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => Moved successfully.
            "C:\Users\Dominique\AppData\Local\nsm4BB4.tmp" => File/Directory not found.
            "C:\Users\Dominique\AppData\Local\nsyF0F8.tmp" => File/Directory not found.
            C:\Windows\Tasks\HVFGTX.job => Moved successfully.
            "C:\Users\Dominique\AppData\Roaming\HVFGTX.exe" => File/Directory not found.
            C:\Windows\System32\Tasks\HVFGTX => Moved successfully.
            C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} => Moved successfully.
            C:\Windows\SysWOW64\${LOGFILE} => Moved successfully.
            C:\Program Files (x86)\Optimizer Pro 3.75 => Moved successfully.
            C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} => Moved successfully.
            C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => Moved successfully.
            "C:\Users\Dominique\AppData\Local\nsb2C30.tmp" => File/Directory not found.
            C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
            C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => Moved successfully.
            gikiwyle => Service stopped successfully.
            gikiwyle => Service deleted successfully.
            nixikubi => Service stopped successfully.
            nixikubi => Service deleted successfully.
            qumesuky => Service not found.
            Update Mountain Bike => Service deleted successfully.
            Util Mountain Bike => Service deleted successfully.
            VCL => Service deleted successfully.
            C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb => Moved successfully.
            C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi => Moved successfully.
            C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll => Moved successfully.
            C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk => Moved successfully.
            C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk => Moved successfully.
            C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe => Moved successfully.
            C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
            C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe not found.
            C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk => Moved successfully.
            C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe => Moved successfully.
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound => value deleted successfully.
            HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
            HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_576 => value deleted successfully.
            HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\StormWatch => value deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
            C:\Windows\System32\Tasks\CWXI not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CWXI" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
            C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
            C:\Windows\System32\Tasks\MUF not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MUF" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
            C:\Windows\System32\Tasks\Selection Tools Update not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
            C:\Windows\System32\Tasks\AZYFZOJ not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AZYFZOJ" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
            C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
            C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
            C:\Windows\System32\Tasks\PUHKPUO not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PUHKPUO" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
            C:\Windows\System32\Tasks\XTAQVI not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XTAQVI" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
            C:\Windows\System32\Tasks\TYHHD not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TYHHD" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
            C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
            C:\Windows\System32\Tasks\FXXND not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FXXND" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4BBD2CDA-9F84-4A5A-B751-783453E5725B}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
            C:\Windows\System32\Tasks\HVFGTX not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HVFGTX" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
            C:\Windows\System32\Tasks\WindApp Update not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
            C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
            C:\Windows\System32\Tasks\TAYB not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TAYB" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
            C:\Windows\System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => Moved successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A20C8841-607D-4AE6-865D-FBFE2222FA16}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
            C:\Windows\System32\Tasks\UUKXC not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UUKXC" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
            C:\Windows\System32\Tasks\IPAKC not found.
            "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IPAKC" => Key deleted successfully.
            C:\Windows\Tasks\AZYFZOJ.job not found.
            C:\Windows\Tasks\CWXI.job not found.
            C:\Windows\Tasks\FXXND.job not found.
            C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
            C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
            C:\Windows\Tasks\HVFGTX.job not found.
            C:\Windows\Tasks\IPAKC.job not found.
            C:\Windows\Tasks\MUF.job not found.
            C:\Windows\Tasks\PUHKPUO.job not found.
            C:\Windows\Tasks\TAYB.job not found.
            C:\Windows\Tasks\TYHHD.job not found.
            C:\Windows\Tasks\UUKXC.job not found.
            C:\Windows\Tasks\XTAQVI.job not found.

            > Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-06 00:45:31)<

            C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} => Moved successfully.
            C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} => Moved successfully.
            C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} => Moved successfully.
            C:\Windows\WindowsUpdate.log => Is moved successfully.

            End of Fixlog 00:45:32

            et je relance mes navigateurs.
            1. Modérateur
              ok, voici la suite :

              Scan Malwarebytes (temps : environ 40min de scan):
              ==================================================
              Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
              Mets le à jour puis lance un examen.

              A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
              Redémarre l'ordinateur si besoin.
              Après redémarrage, relance Malwarebytes.
              Vas chercher le rapport dans l'onglet Historique.
              A gauche Journal des examens.
              Doube-clic sur l'examen dans la liste.
              Puis en bas Copier dans le presse papier
              Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
              Clic sur envoyer.
              Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

              1. C'est parti.
                Et merci pour le temps que vous consacrez à aider les nécessiteux comme moi...
                Je ne sais pas combien vous aidez de personnes dans la journée mais vous devez faire des heureux.
                Je poste à nouveau lorsque le scan est terminé.
                1. Modérateur
                  Ca doit quoi les pubs ?
                  S'il reste des pubs intempestives, indique sur quel navigateur WEB.
                  1. Non, il semble que l'opération avec FRST64 ait été bénéfique. Depuis, je n'ai plus d'ouvertures de fenêtres de pub à chaque clic. Par contre, le PC restait un peu lent... mais je ne suis pas sûr de la vitesse à laquelle m'attendre (il a sept ans...)
                    1. Modérateur
                      Surtout qu'il n'y a pas énormément de programmes au démarrage.
                      Nettoye les ventilos.

                      Eventuellement pour les adwares, fais un nettoyage Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

                      ~~

                      Voila, c'est terminé, tu peux supprimer les programmes utilisés.

                      Quelques conseils :

                      Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

                      Pour ne plus te faire avoir.
                      A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

                      Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
                      1. je ne trouve pas l'extension de Blockulicius pour firefox, pensez vous que je puisse utiliser Ad Block ?
                        Et comment nettoyer les ventilos ? en démontant ?
                        1. Modérateur
                          Elle est temporairement désactivée, apparemment...
                      2. bien, j'ai installé Adblock plus pour les trois navigateurs du PC.
                        Je vous remercie de votre aide.
                        Bonne soirée.
                        1. Modérateur
                          Pas de soucis =)