Désinstaller Crossbrowser
SAWSAM912
Messages postés
2
Statut
Membre
-
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Bonjour à tous,
Je vous prie de m'aider, car en voulant télécharger une police pour photoshop je me suis retrouvée avec crossbrowser qui a ralenti mon pc comme jamais en plus de ça plein d'autres choses se sont insatllées avec du genre (Zombie.....)enfin voilà j'ai lu d'autres messages et ai suivi étape par étape la marche à suivre, et mainetnet je voudrais commnuiquer les liens
Le premier lien pour FRST
https://pjjoint.malekal.com/files.php?id=20150412_z6v5m6h12l15
Le deuxième lien pour "Addition"
https://pjjoint.malekal.com/files.php?id=20150412_z9f10i7h1113
Le troisième lien pour "Shortcut"
https://pjjoint.malekal.com/files.php?id=20150412_h11v13e8d7v9
Merci de m'aider et me dire quoi faire par la suite.
Je vous prie de m'aider, car en voulant télécharger une police pour photoshop je me suis retrouvée avec crossbrowser qui a ralenti mon pc comme jamais en plus de ça plein d'autres choses se sont insatllées avec du genre (Zombie.....)enfin voilà j'ai lu d'autres messages et ai suivi étape par étape la marche à suivre, et mainetnet je voudrais commnuiquer les liens
Le premier lien pour FRST
https://pjjoint.malekal.com/files.php?id=20150412_z6v5m6h12l15
Le deuxième lien pour "Addition"
https://pjjoint.malekal.com/files.php?id=20150412_z9f10i7h1113
Le troisième lien pour "Shortcut"
https://pjjoint.malekal.com/files.php?id=20150412_h11v13e8d7v9
Merci de m'aider et me dire quoi faire par la suite.
3 réponses
-
Salut,
Je regarde =)
-
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
HKU\S-1-5-21-989413040-1414339496-870702065-1000\...\Run: [GoogleChromeAutoLaunch_42AD6B334FD209D803B5D2071E7EC408] => "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
AppInit_DLLs: c:\program => c:\program File Not Found
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OptimizerPro-UNInstaller.lnk
ShortcutTarget: OptimizerPro-UNInstaller.lnk -> C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}\OptimizerPro-UNInstaller.exe (PCUtilities Software Limited)
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}\Priceless_310315.exe ()
S2 CoupoonService; C:\Program Files\coupoon\iiwjljrnpc.exe [X]
R2 ticutimo; C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B\nsn1252.tmpfs [X]
R2 cocywiso; C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B\jnsi421E.tmp [116224 2015-04-11] () [File not signed]
2015-04-12 00:05 - 2015-04-12 00:05 - 00000000 ____D () C:\Users\NGSi\AppData\Local\ZombieNews
2015-04-11 23:42 - 2015-04-11 23:42 - 00000000 ____D () C:\Users\NGSi\Documents\Optimizer Pro
2015-04-11 23:39 - 2015-04-12 00:24 - 00000000 ____D () C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}
2015-04-11 23:38 - 2015-04-11 23:38 - 00000000 ____D () C:\ProgramData\T122078ED
2015-04-11 23:36 - 2015-04-12 00:23 - 00000000 ____D () C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f}
2015-04-11 23:35 - 2015-04-11 23:50 - 00000000 ____D () C:\Program Files\Reg Pro Cleaner
2015-04-11 18:45 - 2015-04-11 18:45 - 00000000 ____D () C:\Program Files\Hatchiho
2015-04-11 18:43 - 2015-04-12 17:51 - 00001332 _____ () C:\Windows\Tasks\HEHXC.job
2015-04-11 18:43 - 2015-04-11 23:54 - 00008704 _____ () C:\Windows\system32\CCLOff.ini
2015-04-11 18:43 - 2015-04-11 18:46 - 01316352 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\HEHXC.exe
2015-04-11 18:42 - 2015-04-07 16:43 - 00341696 _____ (CC Corporation) C:\Windows\system32\CCL.dll
2015-04-11 18:41 - 2015-04-12 17:51 - 00001682 _____ () C:\Windows\Tasks\NKZRBOXF.job
2015-04-11 18:41 - 2015-04-11 18:45 - 01851904 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe
2015-04-11 18:01 - 2015-04-11 18:46 - 00000112 _____ () C:\ProgramData\oQF1pA0o.dat
2015-04-11 17:41 - 2015-04-11 23:17 - 00000004 _____ () C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-04-11 17:30 - 2015-04-11 17:30 - 00000000 ____D () C:\Users\NGSi\AppData\Roaming\E009C8F6-1428769857-DD11-80F1-001DBA21052B
2015-04-11 17:28 - 2015-04-12 17:51 - 00001332 _____ () C:\Windows\Tasks\ZHVBQ.job
2015-04-11 17:28 - 2015-04-12 17:51 - 00001328 _____ () C:\Windows\Tasks\HXG.job
2015-04-11 17:28 - 2015-04-11 17:28 - 01869824 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe
2015-04-11 17:28 - 2015-04-11 17:28 - 01325568 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\HXG.exe
2015-04-11 17:25 - 2015-04-11 17:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-11 17:20 - 2015-04-12 17:51 - 00001330 _____ () C:\Windows\Tasks\GNOK.job
2015-04-11 17:20 - 2015-04-11 17:20 - 01380352 _____ (Cinema PlusV16.03) C:\Users\NGSi\AppData\Roaming\GNOK.exe
2015-04-11 17:19 - 2015-04-12 17:51 - 00001682 _____ () C:\Windows\Tasks\BYAIAMUF.job
2015-04-11 17:19 - 2015-04-11 17:20 - 00000000 ____D () C:\Users\NGSi\AppData\Local\8AF575F0-46F4-144E-8D31-5F894DCAE284
2015-04-11 17:19 - 2015-04-11 17:19 - 02035200 _____ (Cinema PlusV16.03) C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe
2015-04-11 17:17 - 2015-04-11 17:23 - 00000000 ____D () C:\Users\NGSi\AppData\Local\E009C8F6-1428772669-DD11-80F1-001DBA21052B
2015-04-11 17:15 - 2015-04-11 17:15 - 00000000 ____D () C:\ProgramData\iljehjpmhkfmnmjidolkkgkhbkemmnlj
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\PastaLeadsAgent
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\b253b81131784e57ad68168e4c536585
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\3099c14c7f4d4d83ae6521057058036b
2015-04-11 17:09 - 2015-04-11 18:47 - 00000000 ____D () C:\Users\NGSi\Desktop\BOOK ANIME
2015-04-11 17:08 - 2015-04-11 17:08 - 00000000 ____D () C:\ProgramData\7758859783194979329
2015-04-11 17:07 - 2015-04-11 17:07 - 00000000 ____D () C:\ProgramData\ddamdebkigmdidlnefolfbpehhdhlgdg
2015-04-11 17:06 - 2015-04-11 23:55 - 00000000 ____D () C:\Program Files\10
2015-04-11 17:06 - 2015-04-11 18:00 - 00000000 ____D () C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}
2015-03-26 20:14 - 2015-03-26 20:14 - 00005542 _____ () C:\Users\NGSi\AppData\Roaming\ZHVBQ
2015-03-26 20:14 - 2015-03-26 20:14 - 00005542 _____ () C:\Users\NGSi\AppData\Roaming\NKZRBOXF
2015-03-26 20:14 - 2015-03-26 20:14 - 00004185 _____ () C:\Users\NGSi\AppData\Roaming\HXG
2015-03-26 20:14 - 2015-03-26 20:14 - 00004185 _____ () C:\Users\NGSi\AppData\Roaming\HEHXC
Task: C:\Windows\Tasks\BYAIAMUF.job => C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\GNOK.job => C:\Users\NGSi\AppData\Roaming\GNOK.exe <==== ATTENTION
Task: C:\Windows\Tasks\HEHXC.job => C:\Users\NGSi\AppData\Roaming\HEHXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\HXG.job => C:\Users\NGSi\AppData\Roaming\HXG.exe <==== ATTENTION
Task: C:\Windows\Tasks\NKZRBOXF.job => C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe <==== ATTENTION
Task: C:\Windows\Tasks\ZHVBQ.job => C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe <==== ATTENTION
Task: {2DD3B4F0-8CE7-4982-A9E0-30777ED1FCB3} - System32\Tasks\NKZRBOXF => C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {35BC636E-0ED6-4664-A6B6-B69590E70F16} - System32\Tasks\Runner for IC => %LOCALAPPDATA%\8AF575F0-46F4-144E-8D31-5F894DCAE284\Runner.exe
Task: {651D71B0-01C1-4334-9E5F-93001189658F} - System32\Tasks\HXG => C:\Users\NGSi\AppData\Roaming\HXG.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {760653C4-78C1-49D0-B444-4890521677ED} - System32\Tasks\ZHVBQ => C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {88D69ED3-B0A8-424F-96BB-A9EE1FB1AAE2} - System32\Tasks\GNOK => C:\Users\NGSi\AppData\Roaming\GNOK.exe [2015-04-11] (Cinema PlusV16.03) <==== ATTENTION
Task: {DECCD0F1-89CD-4255-B78F-F1E7D11053E0} - System32\Tasks\FQVCDXOEJ => C:\ProgramData\3099c14c7f4d4d83ae6521057058036b\3099c14c7f4d4d83ae6521057058036b.exe [2015-04-11] ()
Task: {DFF794BE-C742-4E5D-A0A9-5EC255DBD2D1} - System32\Tasks\{9515F024-65FD-437A-A777-8BBFFF9FDE93} => Iexplore.exe http://ui.skype.com/ui/0/6.18.73.106.456/fr/go/help.faq.installer?LastError=1618
Task: {EDA00E4B-358C-46F3-B54C-CA6275DBF2EF} - System32\Tasks\BYAIAMUF => C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe [2015-04-11] (Cinema PlusV16.03) <==== ATTENTION
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :- Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
- Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
- Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
-
-
Bonjour merci de votre aide
alors voila le message apparu sur bloc notes après "fix":
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-04-2015
Ran by NGSi at 2015-04-12 19:27:00 Run:1
Running from C:\Users\NGSi\Desktop
Loaded Profiles: NGSi (Available profiles: NGSi)
Boot Mode: Normal
==============================================
Content of fixlist:
HKU\S-1-5-21-989413040-1414339496-870702065-1000\...\Run: [GoogleChromeAutoLaunch_42AD6B334FD209D803B5D2071E7EC408] => "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
AppInit_DLLs: c:\program => c:\program File Not Found
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OptimizerPro-UNInstaller.lnk
ShortcutTarget: OptimizerPro-UNInstaller.lnk -> C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}\OptimizerPro-UNInstaller.exe (PCUtilities Software Limited)
Startup: C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}\Priceless_310315.exe ()
S2 CoupoonService; C:\Program Files\coupoon\iiwjljrnpc.exe [X]
R2 ticutimo; C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B\nsn1252.tmpfs [X]
R2 cocywiso; C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B\jnsi421E.tmp [116224 2015-04-11] () [File not signed]
2015-04-12 00:05 - 2015-04-12 00:05 - 00000000 ____D () C:\Users\NGSi\AppData\Local\ZombieNews
2015-04-11 23:42 - 2015-04-11 23:42 - 00000000 ____D () C:\Users\NGSi\Documents\Optimizer Pro
2015-04-11 23:39 - 2015-04-12 00:24 - 00000000 ____D () C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}
2015-04-11 23:38 - 2015-04-11 23:38 - 00000000 ____D () C:\ProgramData\T122078ED
2015-04-11 23:36 - 2015-04-12 00:23 - 00000000 ____D () C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f}
2015-04-11 23:35 - 2015-04-11 23:50 - 00000000 ____D () C:\Program Files\Reg Pro Cleaner
2015-04-11 18:45 - 2015-04-11 18:45 - 00000000 ____D () C:\Program Files\Hatchiho
2015-04-11 18:43 - 2015-04-12 17:51 - 00001332 _____ () C:\Windows\Tasks\HEHXC.job
2015-04-11 18:43 - 2015-04-11 23:54 - 00008704 _____ () C:\Windows\system32\CCLOff.ini
2015-04-11 18:43 - 2015-04-11 18:46 - 01316352 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\HEHXC.exe
2015-04-11 18:42 - 2015-04-07 16:43 - 00341696 _____ (CC Corporation) C:\Windows\system32\CCL.dll
2015-04-11 18:41 - 2015-04-12 17:51 - 00001682 _____ () C:\Windows\Tasks\NKZRBOXF.job
2015-04-11 18:41 - 2015-04-11 18:45 - 01851904 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe
2015-04-11 18:01 - 2015-04-11 18:46 - 00000112 _____ () C:\ProgramData\oQF1pA0o.dat
2015-04-11 17:41 - 2015-04-11 23:17 - 00000004 _____ () C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-04-11 17:30 - 2015-04-11 17:30 - 00000000 ____D () C:\Users\NGSi\AppData\Roaming\E009C8F6-1428769857-DD11-80F1-001DBA21052B
2015-04-11 17:28 - 2015-04-12 17:51 - 00001332 _____ () C:\Windows\Tasks\ZHVBQ.job
2015-04-11 17:28 - 2015-04-12 17:51 - 00001328 _____ () C:\Windows\Tasks\HXG.job
2015-04-11 17:28 - 2015-04-11 17:28 - 01869824 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe
2015-04-11 17:28 - 2015-04-11 17:28 - 01325568 _____ (Cinema PlusV11.04) C:\Users\NGSi\AppData\Roaming\HXG.exe
2015-04-11 17:25 - 2015-04-11 17:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-11 17:20 - 2015-04-12 17:51 - 00001330 _____ () C:\Windows\Tasks\GNOK.job
2015-04-11 17:20 - 2015-04-11 17:20 - 01380352 _____ (Cinema PlusV16.03) C:\Users\NGSi\AppData\Roaming\GNOK.exe
2015-04-11 17:19 - 2015-04-12 17:51 - 00001682 _____ () C:\Windows\Tasks\BYAIAMUF.job
2015-04-11 17:19 - 2015-04-11 17:20 - 00000000 ____D () C:\Users\NGSi\AppData\Local\8AF575F0-46F4-144E-8D31-5F894DCAE284
2015-04-11 17:19 - 2015-04-11 17:19 - 02035200 _____ (Cinema PlusV16.03) C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe
2015-04-11 17:17 - 2015-04-11 17:23 - 00000000 ____D () C:\Users\NGSi\AppData\Local\E009C8F6-1428772669-DD11-80F1-001DBA21052B
2015-04-11 17:15 - 2015-04-11 17:15 - 00000000 ____D () C:\ProgramData\iljehjpmhkfmnmjidolkkgkhbkemmnlj
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\PastaLeadsAgent
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\b253b81131784e57ad68168e4c536585
2015-04-11 17:13 - 2015-04-11 17:13 - 00000000 ____D () C:\ProgramData\3099c14c7f4d4d83ae6521057058036b
2015-04-11 17:09 - 2015-04-11 18:47 - 00000000 ____D () C:\Users\NGSi\Desktop\BOOK ANIME
2015-04-11 17:08 - 2015-04-11 17:08 - 00000000 ____D () C:\ProgramData\7758859783194979329
2015-04-11 17:07 - 2015-04-11 17:07 - 00000000 ____D () C:\ProgramData\ddamdebkigmdidlnefolfbpehhdhlgdg
2015-04-11 17:06 - 2015-04-11 23:55 - 00000000 ____D () C:\Program Files\10
2015-04-11 17:06 - 2015-04-11 18:00 - 00000000 ____D () C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}
2015-03-26 20:14 - 2015-03-26 20:14 - 00005542 _____ () C:\Users\NGSi\AppData\Roaming\ZHVBQ
2015-03-26 20:14 - 2015-03-26 20:14 - 00005542 _____ () C:\Users\NGSi\AppData\Roaming\NKZRBOXF
2015-03-26 20:14 - 2015-03-26 20:14 - 00004185 _____ () C:\Users\NGSi\AppData\Roaming\HXG
2015-03-26 20:14 - 2015-03-26 20:14 - 00004185 _____ () C:\Users\NGSi\AppData\Roaming\HEHXC
Task: C:\Windows\Tasks\BYAIAMUF.job => C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\GNOK.job => C:\Users\NGSi\AppData\Roaming\GNOK.exe <==== ATTENTION
Task: C:\Windows\Tasks\HEHXC.job => C:\Users\NGSi\AppData\Roaming\HEHXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\HXG.job => C:\Users\NGSi\AppData\Roaming\HXG.exe <==== ATTENTION
Task: C:\Windows\Tasks\NKZRBOXF.job => C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe <==== ATTENTION
Task: C:\Windows\Tasks\ZHVBQ.job => C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe <==== ATTENTION
Task: {2DD3B4F0-8CE7-4982-A9E0-30777ED1FCB3} - System32\Tasks\NKZRBOXF => C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {35BC636E-0ED6-4664-A6B6-B69590E70F16} - System32\Tasks\Runner for IC => %LOCALAPPDATA%\8AF575F0-46F4-144E-8D31-5F894DCAE284\Runner.exe
Task: {651D71B0-01C1-4334-9E5F-93001189658F} - System32\Tasks\HXG => C:\Users\NGSi\AppData\Roaming\HXG.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {760653C4-78C1-49D0-B444-4890521677ED} - System32\Tasks\ZHVBQ => C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe [2015-04-11] (Cinema PlusV11.04) <==== ATTENTION
Task: {88D69ED3-B0A8-424F-96BB-A9EE1FB1AAE2} - System32\Tasks\GNOK => C:\Users\NGSi\AppData\Roaming\GNOK.exe [2015-04-11] (Cinema PlusV16.03) <==== ATTENTION
Task: {DECCD0F1-89CD-4255-B78F-F1E7D11053E0} - System32\Tasks\FQVCDXOEJ => C:\ProgramData\3099c14c7f4d4d83ae6521057058036b\3099c14c7f4d4d83ae6521057058036b.exe [2015-04-11] ()
Task: {DFF794BE-C742-4E5D-A0A9-5EC255DBD2D1} - System32\Tasks\{9515F024-65FD-437A-A777-8BBFFF9FDE93} => Iexplore.exe http://ui.skype.com/ui/0/6.18.73.106.456/fr/go/help.faq.installer?LastError=1618
Task: {EDA00E4B-358C-46F3-B54C-CA6275DBF2EF} - System32\Tasks\BYAIAMUF => C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe [2015-04-11] (Cinema PlusV16.03) <==== ATTENTION
HKU\S-1-5-21-989413040-1414339496-870702065-1000\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_42AD6B334FD209D803B5D2071E7EC408 => value deleted successfully.
"c:\program" => Value Data removed successfully.
C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f}\hqghumeaylnlf.exe => Moved successfully.
C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OptimizerPro-UNInstaller.lnk => Moved successfully.
C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}\OptimizerPro-UNInstaller.exe => Moved successfully.
C:\Users\NGSi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk => Moved successfully.
C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}\Priceless_310315.exe => Moved successfully.
CoupoonService => Service deleted successfully.
ticutimo => Service stopped successfully.
ticutimo => Service deleted successfully.
cocywiso => Service stopped successfully.
cocywiso => Service deleted successfully.
C:\Users\NGSi\AppData\Local\ZombieNews => Moved successfully.
C:\Users\NGSi\Documents\Optimizer Pro => Moved successfully.
"C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}" directory move:
Could not move "C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0}" directory. => Scheduled to move on reboot.
C:\ProgramData\T122078ED => Moved successfully.
C:\ProgramData\{a294e95f-d92b-fa0e-a294-4e95fd92a57f} => Moved successfully.
C:\Program Files\Reg Pro Cleaner => Moved successfully.
C:\Program Files\Hatchiho => Moved successfully.
C:\Windows\Tasks\HEHXC.job => Moved successfully.
C:\Windows\system32\CCLOff.ini => Moved successfully.
C:\Users\NGSi\AppData\Roaming\HEHXC.exe => Moved successfully.
C:\Windows\system32\CCL.dll => Moved successfully.
C:\Windows\Tasks\NKZRBOXF.job => Moved successfully.
C:\Users\NGSi\AppData\Roaming\NKZRBOXF.exe => Moved successfully.
C:\ProgramData\oQF1pA0o.dat => Moved successfully.
C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Users\NGSi\AppData\Roaming\E009C8F6-1428769857-DD11-80F1-001DBA21052B => Moved successfully.
C:\Windows\Tasks\ZHVBQ.job => Moved successfully.
C:\Windows\Tasks\HXG.job => Moved successfully.
C:\Users\NGSi\AppData\Roaming\ZHVBQ.exe => Moved successfully.
C:\Users\NGSi\AppData\Roaming\HXG.exe => Moved successfully.
C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf => Moved successfully.
C:\Windows\Tasks\GNOK.job => Moved successfully.
C:\Users\NGSi\AppData\Roaming\GNOK.exe => Moved successfully.
C:\Windows\Tasks\BYAIAMUF.job => Moved successfully.
"C:\Users\NGSi\AppData\Local\8AF575F0-46F4-144E-8D31-5F894DCAE284" directory move:
Could not move "C:\Users\NGSi\AppData\Local\8AF575F0-46F4-144E-8D31-5F894DCAE284" directory. => Scheduled to move on reboot.
C:\Users\NGSi\AppData\Roaming\BYAIAMUF.exe => Moved successfully.
C:\Users\NGSi\AppData\Local\E009C8F6-1428772669-DD11-80F1-001DBA21052B => Moved successfully.
C:\ProgramData\iljehjpmhkfmnmjidolkkgkhbkemmnlj => Moved successfully.
C:\Users\NGSi\AppData\Roaming\E009C8F6-1428768795-DD11-80F1-001DBA21052B => Moved successfully.
C:\ProgramData\PastaLeadsAgent => Moved successfully.
C:\ProgramData\b253b81131784e57ad68168e4c536585 => Moved successfully.
C:\ProgramData\3099c14c7f4d4d83ae6521057058036b => Moved successfully.
C:\Users\NGSi\Desktop\BOOK ANIME => Moved successfully.
C:\ProgramData\7758859783194979329 => Moved successfully.
C:\ProgramData\ddamdebkigmdidlnefolfbpehhdhlgdg => Moved successfully.
C:\Program Files\10 => Moved successfully.
"C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}" directory move:
Could not move "C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438}" directory. => Scheduled to move on reboot.
C:\Users\NGSi\AppData\Roaming\ZHVBQ => Moved successfully.
C:\Users\NGSi\AppData\Roaming\NKZRBOXF => Moved successfully.
C:\Users\NGSi\AppData\Roaming\HXG => Moved successfully.
C:\Users\NGSi\AppData\Roaming\HEHXC => Moved successfully.
C:\Windows\Tasks\BYAIAMUF.job not found.
C:\Windows\Tasks\GNOK.job not found.
C:\Windows\Tasks\HEHXC.job not found.
C:\Windows\Tasks\HXG.job not found.
C:\Windows\Tasks\NKZRBOXF.job not found.
C:\Windows\Tasks\ZHVBQ.job not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2DD3B4F0-8CE7-4982-A9E0-30777ED1FCB3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DD3B4F0-8CE7-4982-A9E0-30777ED1FCB3}" => Key deleted successfully.
C:\Windows\System32\Tasks\NKZRBOXF => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NKZRBOXF" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{35BC636E-0ED6-4664-A6B6-B69590E70F16}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35BC636E-0ED6-4664-A6B6-B69590E70F16}" => Key deleted successfully.
C:\Windows\System32\Tasks\Runner for IC => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Runner for IC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{651D71B0-01C1-4334-9E5F-93001189658F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{651D71B0-01C1-4334-9E5F-93001189658F}" => Key deleted successfully.
C:\Windows\System32\Tasks\HXG => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HXG" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{760653C4-78C1-49D0-B444-4890521677ED}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{760653C4-78C1-49D0-B444-4890521677ED}" => Key deleted successfully.
C:\Windows\System32\Tasks\ZHVBQ => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ZHVBQ" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{88D69ED3-B0A8-424F-96BB-A9EE1FB1AAE2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88D69ED3-B0A8-424F-96BB-A9EE1FB1AAE2}" => Key deleted successfully.
C:\Windows\System32\Tasks\GNOK => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GNOK" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DECCD0F1-89CD-4255-B78F-F1E7D11053E0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DECCD0F1-89CD-4255-B78F-F1E7D11053E0}" => Key deleted successfully.
C:\Windows\System32\Tasks\FQVCDXOEJ => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FQVCDXOEJ" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DFF794BE-C742-4E5D-A0A9-5EC255DBD2D1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFF794BE-C742-4E5D-A0A9-5EC255DBD2D1}" => Key deleted successfully.
C:\Windows\System32\Tasks\{9515F024-65FD-437A-A777-8BBFFF9FDE93} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9515F024-65FD-437A-A777-8BBFFF9FDE93}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EDA00E4B-358C-46F3-B54C-CA6275DBF2EF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDA00E4B-358C-46F3-B54C-CA6275DBF2EF}" => Key deleted successfully.
C:\Windows\System32\Tasks\BYAIAMUF => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BYAIAMUF" => Key deleted successfully.> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-12 19:36:36)<
C:\ProgramData\{fdca53b4-3f39-5307-fdca-a53b43f34ed0} => Moved successfully.
C:\Users\NGSi\AppData\Local\8AF575F0-46F4-144E-8D31-5F894DCAE284 => Is moved successfully.
C:\ProgramData\{c4b5f50e-0f37-d125-c4b5-5f50e0f3d438} => Moved successfully.End of Fixlog 19:36:36
Merci de me dire c'est c'est fini et réglé, en tous cas je vous en remercie énormément!!! -
fais le reste et vois ce que cela donne =)
