Comment supprimer les pubs ads by name

http://pjjoint.malekal.com/files.php?id=20150701_i11p11m6w14m13
http://pjjoint.malekal.com/files.php?id=FRST_20150701_i11j14q8h7e5
http://pjjoint.malekal.com/files.php?id=20150701_u6b11w15q15q9

Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by MEKNASSI AMAL at 2015-07-01 18:49:02 Run:1
Running from C:\Users\MEKNASSI AMAL\Desktop
Loaded Profiles: MEKNASSI AMAL (Available Profiles: MEKNASSI AMAL)
Boot Mode: Normal
==============================================

fixlist content:

2015-04-02 21:41 - 2015-04-08 18:09 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 04:14 - 2015-03-31 04:14 - 00004387 _____ () C:\Users\Fred\AppData\Roaming\XnzxMl9t

"C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7" => File/Folder not found.
"C:\Users\Fred\AppData\Roaming\XnzxMl9t" => File/Folder not found.

End of Fixlog 18:49:02

Parfait, je vais faire ça et vous reviens, merci beaucoup de votre aide

Voici le message :

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-04-2015
Ran by Fred at 2015-04-13 12:48:48 Run:1
Running from C:\Users\Fred\Desktop
Loaded Profiles: Fred (Available profiles: Fred)
Boot Mode: Normal
==============================================

Content of fixlist:

2015-04-02 21:41 - 2015-04-08 18:09 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 04:14 - 2015-03-31 04:14 - 00004387 _____ () C:\Users\Fred\AppData\Roaming\XnzxMl9t

C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Users\Fred\AppData\Roaming\XnzxMl9t => Moved successfully.

End of Fixlog 12:48:48

fais le reste pour Firefox si encore des pubs "ads by name" dessus.

re-bonjour
il me demande un autorisation pour supprimer mozilla

j'ai redémarré l'ordinateur et ça fonctionné :)
Merci mille fois pour votre aide, je vous suis extrêmement reconnaissant.

c'est fait, merci encore :)

Bien, à mon tour, Malekal.

Juste avant, je tiens à dire que j'en ai chié pour poster cette simple réponse, encore heureux que tu es là !

Et vu que mon pc merde vraiment bien depuis que j'ai "Ads by name", je suis un peu dans l'impossibilité de poster le rapport d'AdwCleaner. En espérant qu'il ne soit pas important. Si besoin est, vis-à-bis du rapport d'AdwCleaner, je te le passerai dès que possible.

Rapport FRST : http://pjjoint.malekal.com/files.php?id=20150617_o7r15s11c15j14
Rapport Addition : http://pjjoint.malekal.com/files.php?id=20150617_o118z15v8b8
Rapport Shortcut : http://pjjoint.malekal.com/files.php?id=20150617_d9i12o6x8z5

Voilà, merci beaucoup de ton aide !

Bon, j'ai un petit souci avec FRST :

Quand je lance ce logiciel avec le bouton fix, j'ai le message suivant qui s'affiche :

"Warning

Looks you don't know what to do. To prevent damage to the system the tool will exit".

Pourtant, j'ai placé le logiciel et le fixlist sur le bureau, et le fichier .txt dans le même dossier du logiciel. Et de ce que j'ai vu, ce n'est pas normal. Y-t-il quelque chose qui blogue le programme, si ce n'est ce qui se situe entre la chaise et le pc ?

je pense que ton fichier fixlist.txt est vide.

vu le message, y a un truc qui est pas bon =)
fixlist.txt doit être dans le même dossier que le programme FRST.

Là, j'ai le fameux "No fixlist.txt found" qui s'affiche...

Pourtant, j'ai bien le fixlist à la fois sur le bureau et dans le même dossier de FRST.

Question... Où doit se trouver le fichier.txt dans le dossier FRST : quarantine, logs, ou l'autre... Le problème vient de là, aussi...

Tu es sûr que sur le bureau c'est bien le programme FRST.exe et pas un raccourci ?
Si tu as une flèche sur l'icône FRST, c'est un raccourci, donc pas bon
(ou clic droit / propriétés dessus pour savoir si c'est un raccourci).

Bingo, je vais rectifier le tir de suite XD

Et voilà le fixlog.

Bon, par manque de temps, je te le poste de suite ici :

Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Gennety n at 2015-06-17 19:19:31 Run:1
Running from C:\Users\Gennety n\Desktop
Loaded Profiles: Gennety n (Available Profiles: Gennety n)
Boot Mode: Normal
==============================================

fixlist content:

HKLM-x32\...\Run: [gmsd_fr_629] => [X]
HKLM-x32\...\Run: [gmsd_fr_640] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010002] => C:\Program Files (x86)\gmsd_fr_005010002\gmsd_fr_005010002.exe [3985576 2015-06-13] ()
HKLM-x32\...\RunOnce: [upgmsd_fr_005010002.exe] => C:\Users\Gennety n\AppData\Local\gmsd_fr_005010002\upgmsd_fr_005010002.exe [3319752 2015-06-13] ()
HKU\S-1-5-21-849078227-2656942280-1493532010-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe C:\Users\Gennety n\AppData\Roaming\newnext.me\nengine.dll,EntryPoint -m l
HKU\S-1-5-21-849078227-2656942280-1493532010-1001\...\Run: [WindApp] => C:\Users\Gennety n\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
S2 53a1c4d9; c:\Program Files (x86)\Optimizer Pro 3.96\OptProMon.dll [2985616 2015-06-11] () <==== ATTENTION
R2 CoupoonService64; C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe [172344 2015-04-03] ()
R2 fisuzepy; C:\Users\Gennety n\AppData\Roaming\4C4C4544-1433856997-4C10-8053-B3C04F59334A\knsu71EF.tmp [292352 2015-06-16] () [File not signed]
R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125056 2015-06-03] (XTab system)
R2 kysykiti; C:\Users\Gennety n\AppData\Local\4C4C4544-1433864462-4C10-8053-B3C04F59334A\snslF899.tmp [147456 2015-06-09] () [File not signed]
R2 UpdateCheck; C:\Program Files (x86)\Coupoon\UpdateCheck.exe [53040 2015-06-16] ()
R2 xoperoze; C:\Users\Gennety n\AppData\Roaming\4C4C4544-1433856997-4C10-8053-B3C04F59334A\jnspBA30.tmp [219136 2015-06-09] () [File not signed]
R2 zedepory; C:\Users\Gennety n\AppData\Roaming\4C4C4544-1433856997-4C10-8053-B3C04F59334A\hnsa6A3F.tmp [166912 2015-06-09] () [File not signed]
S1 cherimoya; system32\drivers\cherimoya.sys [X]
S1 innfd_1_10_0_14; system32\drivers\innfd_1_10_0_14.sys [X]
S1 scfd_1_10_0_16; system32\drivers\scfd_1_10_0_16.sys [X]
2015-06-15 17:20 - 2015-06-16 18:02 - 00000000 ____D C:\Users\Gennety n\AppData\Local\gmsd_fr_005010002
2015-06-15 17:20 - 2015-06-15 17:20 - 00000000 ____D C:\Program Files (x86)\gmsd_fr_005010002
2015-06-10 09:03 - 2015-06-10 15:14 - 00001096 _____ C:\Users\Gennety n\Desktop\Continue Live Installation.lnk
2015-06-09 17:12 - 2015-06-09 17:12 - 00003168 _____ C:\Windows\System32\Tasks\{596EDBFD-95BD-4840-B245-AB6DDDA58ACC}
2015-06-09 17:11 - 2015-06-09 17:11 - 00000000 ____D C:\Program Files (x86)\predm
2015-06-09 16:59 - 2015-06-12 10:08 - 00000000 ____D C:\ProgramData\Hsosusid
2015-06-09 16:17 - 2015-06-11 10:20 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
2015-06-09 16:17 - 2015-06-09 16:37 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
2015-06-09 16:17 - 2015-06-09 16:17 - 00002816 _____ C:\Windows\System32\Tasks\APSnotifierPP1
2015-06-09 16:17 - 2015-06-09 16:17 - 00002814 _____ C:\Windows\System32\Tasks\APSnotifierPP3
2015-06-09 16:17 - 2015-06-09 16:17 - 00002814 _____ C:\Windows\System32\Tasks\APSnotifierPP2
2015-06-09 16:17 - 2015-06-09 16:17 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
2015-06-09 16:13 - 2015-06-09 16:13 - 00613255 _____ (CMI Limited) C:\Users\Gennety n\AppData\Local\nscF75B.tmp
2015-06-09 16:13 - 2015-06-09 16:13 - 00000000 __SHD C:\Users\Gennety n\AppData\Roaming\AnyProtectEx
2015-06-09 16:11 - 2015-06-09 16:12 - 00000956 _____ C:\Windows\SysWOW64\${LOGFILE}
2015-06-09 16:07 - 2015-06-09 16:07 - 00000000 ____D C:\Users\Gennety n\AppData\Local\Crossbrowse
2015-06-09 16:00 - 2015-06-09 16:00 - 00000000 ____D C:\ProgramData\IHProtectUpDate
2015-06-09 15:59 - 2015-06-09 17:00 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-06-09 15:59 - 2015-06-09 15:59 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
2015-06-09 15:55 - 2015-06-16 11:59 - 00000000 ____D C:\Users\Gennety n\AppData\Local\SmartWeb
2015-06-09 15:55 - 2015-06-15 17:10 - 00004048 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-06-09 15:53 - 2015-06-09 17:17 - 00000000 ____D C:\Users\Gennety n\AppData\Roaming\Opera Software
2015-06-09 15:53 - 2015-06-09 17:17 - 00000000 ____D C:\Users\Gennety n\AppData\Local\Opera Software
2015-06-09 15:46 - 2015-06-09 17:18 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-09 15:43 - 2015-06-16 17:59 - 00004518 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-4.job
2015-06-09 15:43 - 2015-06-16 17:59 - 00003162 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-7.job
2015-06-09 15:43 - 2015-06-16 17:59 - 00003162 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-6.job
2015-06-09 15:43 - 2015-06-16 17:59 - 00002470 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5_user.job
2015-06-09 15:43 - 2015-06-16 17:59 - 00002470 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5.job
2015-06-09 15:43 - 2015-06-16 17:59 - 00002136 _____ C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-10_user.job
2015-06-09 15:43 - 2015-06-10 10:16 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-06-09 15:43 - 2015-06-09 17:04 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-09 15:43 - 2015-06-09 15:43 - 00007522 _____ C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-4
2015-06-09 15:43 - 2015-06-09 15:43 - 00006166 _____ C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-7
2015-06-09 15:43 - 2015-06-09 15:43 - 00006166 _____ C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-6
2015-06-09 15:43 - 2015-06-09 15:43 - 00005474 _____ C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5
2015-06-09 15:43 - 2015-06-09 15:43 - 00000000 ____D C:\Users\Gennety n\AppData\Local\globalUpdate
2015-06-09 15:41 - 2015-06-16 18:04 - 00000000 ____D C:\Users\Gennety n\AppData\Local\4C4C4544-1433864462-4C10-8053-B3C04F59334A
2015-06-09 15:41 - 2015-06-10 08:56 - 00000000 ____D C:\Users\Gennety n\AppData\Roaming\WTools
2015-06-09 15:41 - 2015-06-09 15:41 - 00000078 _____ C:\Users\Gennety n\AppData\Roaming\Selection Tools.installation.log
2015-06-09 15:40 - 2015-06-10 08:57 - 00000000 ____D C:\Users\Gennety n\AppData\Roaming\Store
2015-06-09 15:40 - 2015-06-09 15:40 - 00000078 _____ C:\Users\Gennety n\AppData\Roaming\WindApp.installation.log
2015-06-09 15:38 - 2015-06-09 15:40 - 00005736 _____ C:\Users\Gennety n\AppData\Roaming\Bubble Dock.installation.log
2015-06-09 15:38 - 2012-07-26 07:26 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-09 15:37 - 2015-06-09 15:37 - 00000097 _____ C:\Users\Gennety n\AppData\Roaming\WindApp.boostrap.log
2015-06-09 15:36 - 2015-06-16 13:59 - 00000000 ____D C:\Users\Gennety n\AppData\Roaming\4C4C4544-1433856997-4C10-8053-B3C04F59334A
2015-06-09 15:36 - 2015-06-09 15:42 - 00001254 _____ C:\Users\Gennety n\AppData\Roaming\Bubble Dock.boostrap.log

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_629 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_640 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_005010002 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\upgmsd_fr_005010002.exe => value removed successfully
HKU\S-1-5-21-849078227-2656942280-1493532010-1001\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive => value removed successfully
HKU\S-1-5-21-849078227-2656942280-1493532010-1001\Software\Microsoft\Windows\CurrentVersion\Run\\WindApp => value removed successfully
53a1c4d9 => Service removed successfully
CoupoonService64 => Service removed successfully
fisuzepy => Service not found.
IHProtect Service => Unable to stop service.
IHProtect Service => Service removed successfully
kysykiti => Unable to stop service.
kysykiti => Service removed successfully
UpdateCheck => Unable to stop service.
UpdateCheck => Service removed successfully
xoperoze => Unable to stop service.
xoperoze => Service removed successfully
zedepory => Unable to stop service.
zedepory => Service removed successfully
cherimoya => Service removed successfully
innfd_1_10_0_14 => Service removed successfully
scfd_1_10_0_16 => Service removed successfully
C:\Users\Gennety n\AppData\Local\gmsd_fr_005010002 => moved successfully.
C:\Program Files (x86)\gmsd_fr_005010002 => moved successfully.
C:\Users\Gennety n\Desktop\Continue Live Installation.lnk => moved successfully.
C:\Windows\System32\Tasks\{596EDBFD-95BD-4840-B245-AB6DDDA58ACC} => moved successfully.
C:\Program Files (x86)\predm => moved successfully.
C:\ProgramData\Hsosusid => moved successfully.
C:\Windows\Tasks\APSnotifierPP2.job => moved successfully.
C:\Windows\Tasks\APSnotifierPP1.job => moved successfully.
C:\Windows\System32\Tasks\APSnotifierPP1 => moved successfully.
C:\Windows\System32\Tasks\APSnotifierPP3 => moved successfully.
C:\Windows\System32\Tasks\APSnotifierPP2 => moved successfully.
C:\Windows\Tasks\APSnotifierPP3.job => moved successfully.
C:\Users\Gennety n\AppData\Local\nscF75B.tmp => moved successfully.
C:\Users\Gennety n\AppData\Roaming\AnyProtectEx => moved successfully.
C:\Windows\SysWOW64\${LOGFILE} => moved successfully.
C:\Users\Gennety n\AppData\Local\Crossbrowse => moved successfully.
C:\ProgramData\IHProtectUpDate => moved successfully.
C:\Program Files (x86)\MiuiTab => moved successfully.
C:\ProgramData\WindowsMangerProtect => moved successfully.

"C:\Users\Gennety n\AppData\Local\SmartWeb" folder move:

Could not move "C:\Users\Gennety n\AppData\Local\SmartWeb" folder => Scheduled to move on reboot.

C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task => moved successfully.
C:\Users\Gennety n\AppData\Roaming\Opera Software => moved successfully.
C:\Users\Gennety n\AppData\Local\Opera Software => moved successfully.
C:\Program Files (x86)\Opera => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-4.job => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-7.job => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-6.job => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5_user.job => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5.job => moved successfully.
C:\Windows\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-10_user.job => moved successfully.
C:\Program Files (x86)\globalUpdate => moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully.
C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-4 => moved successfully.
C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-7 => moved successfully.
C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-1-6 => moved successfully.
C:\Windows\System32\Tasks\c5a218b6-b008-4294-a1cc-2234c40a0f6f-5 => moved successfully.
C:\Users\Gennety n\AppData\Local\globalUpdate => moved successfully.
C:\Users\Gennety n\AppData\Local\4C4C4544-1433864462-4C10-8053-B3C04F59334A => moved successfully.
C:\Users\Gennety n\AppData\Roaming\WTools => moved successfully.
C:\Users\Gennety n\AppData\Roaming\Selection Tools.installation.log => moved successfully.
C:\Users\Gennety n\AppData\Roaming\Store => moved successfully.
C:\Users\Gennety n\AppData\Roaming\WindApp.installation.log => moved successfully.
C:\Users\Gennety n\AppData\Roaming\Bubble Dock.installation.log => moved successfully.
C:\Windows\system32\Drivers\etc\hp.bak => moved successfully.
C:\Users\Gennety n\AppData\Roaming\WindApp.boostrap.log => moved successfully.
C:\Users\Gennety n\AppData\Roaming\4C4C4544-1433856997-4C10-8053-B3C04F59334A => moved successfully.
C:\Users\Gennety n\AppData\Roaming\Bubble Dock.boostrap.log => moved successfully.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-17 19:21:09)<=

C:\Users\Gennety n\AppData\Local\SmartWeb => Is moved successfully

End of Fixlog 19:21:09

Salut TanQ,

Désinstalle Registry Dr

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

S2 d6b52028; c:\Program Files (x86)\couponight\couponight.dll [1738752 2015-06-10] () [File not signed]
c:\Program Files (x86)\couponight
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Little transparency.exe [2010-12-15] ()
Startup: C:\Users\TanQ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DomiNations Hack Tool.lnk [2015-04-09]
ShortcutTarget: DomiNations Hack Tool.lnk -> C:\ProgramData\{1b20a592-1bc7-06d0-1b20-0a5921bc9648}\DomiNations Hack Tool.exe ()
Startup: C:\Users\TanQ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tak.3.LibertyLand.TV.lnk [2015-04-07]
ShortcutTarget: Tak.3.LibertyLand.TV.lnk -> C:\ProgramData\{54ec4846-be9c-fbda-54ec-c4846be9211a}\Tak.3.LibertyLand.TV.exe ()
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:62995;https=127.0.0.1:62995
CHR Extension: (WhiteDealse) - C:\Users\TanQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpcoijoaooeohbdmmeoafodeiggiabbo [2015-06-10]
2015-06-11 03:00 - 2010-12-22 18:49 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 23:41 - 2015-05-15 00:26 - 00000000 ____D C:\Program Files (x86)\SystemContinue
2015-06-10 23:41 - 2015-04-11 19:14 - 00000000 ____D C:\ProgramData\{54ec4846-be9c-fbda-54ec-c4846be9211a}
2015-06-10 23:40 - 2015-06-03 06:49 - 00000000 ____D C:\Program Files (x86)\DeAlEXpresos
2015-06-10 23:40 - 2015-06-03 06:49 - 00000000 ____D C:\Program Files (x86)\DeAleExppress
2015-06-10 23:40 - 2015-04-07 22:53 - 00000000 ____D C:\ProgramData\15418569423772279489
2015-06-10 23:39 - 2015-04-09 14:17 - 00000000 ____D C:\ProgramData\{1b20a592-1bc7-06d0-1b20-0a5921bc9648}
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Users\TanQ\AppData\Roaming\3b20fck65nlL0WoIm
Task: C:\Windows\Tasks\3b20fck65nlL0WoIm.job => C:\Users\TanQ\AppData\Roaming\3b20fck65nlL0WoIm.exe <==== ATTENTION
Task: {7263C002-9F81-47BD-B7E3-7D3779D3BB62} - System32\Tasks\FindoutHow => c:\programdata\{e385b015-df0b-0f9d-e385-5b015df0c057}\3376539501867842525b.exe [2014-06-10] () <==== ATTENTION
Task: {7CAC5CE5-8EEC-4C72-ABA2-EC144893EB82} - System32\Tasks\Bidaily Synchronize Task[pr] => c:\programdata\{a370801f-ec4d-d5da-a370-0801fec4007f}\4947783733828108702s.exe [2014-05-17] () <==== ATTENTION
Task: {A41145F2-638D-431B-A8AC-EED9FCFFC206} - System32\Tasks\HP AR Program Upload - 727bf92e7bd94e7397af3c0b5af48d290d860521d0834426910b4ca81b7104c8 => C:\Program Files\HP\HP Officejet 6700\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {AAF15029-BD44-424E-AE40-04C590B794DA} - System32\Tasks\{8C4B66A8-80F1-455D-B8D1-D27F01C1E1E0} => pcalua.exe -a "C:\Program Files (x86)\HQPro-1\Uninstall.exe" -c /fcp=1
Task: C:\Windows\Tasks\Bidaily Synchronize Task[pr].job => c:\programdata\{a370801f-ec4d-d5da-a370-0801fec4007f}\4947783733828108702s.exe <==== ATTENTION
Task: C:\Windows\Tasks\FindoutHow.job => c:\programdata\{e385b015-df0b-0f9d-e385-5b015df0c057}\3376539501867842525b.exe <==== ATTENTION
Task: {6D59A60A-28C5-4C08-8D26-E871274F8B39} - System32\Tasks\{B656EFC7-0FB9-466F-B653-B424CB0E6B2B} => pcalua.exe -a C:\Users\TanQ\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
Task: {1AD55CAE-EE3F-426F-A274-194B46963CB0} - System32\Tasks\3b20fck65nlL0WoIm => C:\Users\TanQ\AppData\Roaming\3b20fck65nlL0WoIm.exe <==== ATTENTION
Task: {3D18FD24-10CB-4B6B-A2C6-45467E580F6F} - System32\Tasks\RegistryDr_Popup => C:\Program Files (x86)\Registry Dr\Splash.exe [2014-11-24] () <==== ATTENTION
Task: {48F6AF01-D3A4-4D65-84BB-4E1BB9458C07} - System32\Tasks\RegistryDr_Start => C:\Program Files (x86)\Registry Dr\RegistryDr.exe [2014-11-24] () <==== ATTENTION

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur


puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

• Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
• Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
• Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

et enfin :

installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

PS : si les pubs persistent sur Firefox, faire ceci : https://forums.commentcamarche.net/forum/affich-31831006-comment-supprimer-les-pubs-ads-by-name#29

La solution pour Firefox est donné là haut en message #29 : https://forums.commentcamarche.net/forum/affich-31831006-comment-supprimer-les-pubs-ads-by-name#29