Adwares : Oursurfing, Optimizer Pro, WinFix Protector
Résolu/Fermé
stevarora
Messages postés
5
Date d'inscription
jeudi 30 avril 2015
Statut
Membre
Dernière intervention
1 mai 2015
-
Modifié par Malekal_morte- le 30/04/2015 à 23:55
stevarora Messages postés 5 Date d'inscription jeudi 30 avril 2015 Statut Membre Dernière intervention 1 mai 2015 - 1 mai 2015 à 17:06
stevarora Messages postés 5 Date d'inscription jeudi 30 avril 2015 Statut Membre Dernière intervention 1 mai 2015 - 1 mai 2015 à 17:06
A voir également:
- Adwares : Oursurfing, Optimizer Pro, WinFix Protector
- Comment supprimer les adwares - Guide
4 réponses
choucaldia
Messages postés
3294
Date d'inscription
lundi 5 septembre 2011
Statut
Membre
Dernière intervention
23 août 2017
515
30 avril 2015 à 23:39
30 avril 2015 à 23:39
bonsoir,
avec ca deja je pense que c est bon si tout mis en quarantaine et pas d autres problemes particuliers c est ce que je fait une fois par semaine en principe rien trouve encore a ce jour depuis octobre 2010 je touche du bois
amclt a+
avec ca deja je pense que c est bon si tout mis en quarantaine et pas d autres problemes particuliers c est ce que je fait une fois par semaine en principe rien trouve encore a ce jour depuis octobre 2010 je touche du bois
amclt a+
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 658
Modifié par Malekal_morte- le 30/04/2015 à 23:54
Modifié par Malekal_morte- le 30/04/2015 à 23:54
Tu es infecté par OurSurfing
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-30]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe (No File)
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com [Not Found]
2015-04-30 20:44 - 2015-04-30 20:44 - 00003112 _____ () C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}
2015-04-30 20:39 - 2015-04-30 20:39 - 00003146 _____ () C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}
2015-04-30 20:37 - 2015-04-30 20:37 - 00003140 _____ () C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}
2015-04-30 20:33 - 2015-04-30 20:33 - 00002204 _____ () C:\Users\user\Desktop\Wikipedia.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002202 _____ () C:\Users\user\Desktop\Hotmail.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002200 _____ () C:\Users\user\Desktop\Search.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002198 _____ () C:\Users\user\Desktop\Amazon.lnk
2015-04-30 20:09 - 2015-04-30 22:27 - 00001010 _____ () C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job
2015-04-30 20:09 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o
2015-04-30 20:08 - 2015-04-30 22:28 - 00001010 _____ () C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job
2015-04-30 20:08 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j
2015-04-30 20:08 - 2015-04-30 20:08 - 00000000 ____D () C:\Users\user\Documents\Optimizer Pro
2015-04-30 20:05 - 2015-04-30 21:00 - 00000000 ____D () C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9
2015-04-30 20:05 - 2015-04-30 20:05 - 00004272 _____ () C:\Windows\System32\Tasks\WinFixUpdater
2015-04-30 20:05 - 2015-04-30 20:05 - 00003552 _____ () C:\Windows\System32\Tasks\LDIFNC
2015-04-30 20:03 - 2015-04-30 20:54 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-30 20:03 - 2015-04-30 20:03 - 00000000 ____D () C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7
2015-04-30 20:01 - 2015-04-30 20:01 - 00000000 ____D () C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4
2015-04-30 20:00 - 2015-04-30 20:03 - 63210976 _____ (Microsoft Corporation) C:\Users\user\Desktop\PowerPointViewer.exe
2015-04-30 19:59 - 2015-04-30 20:05 - 00000111 _____ () C:\Windows\winfix.ini
2015-04-30 19:58 - 2015-04-30 20:01 - 00006877 _____ () C:\claraInstaller.txt
2015-04-30 19:58 - 2015-04-30 19:59 - 00001615 _____ () C:\Users\user\Desktop\Continue PowerPoint.lnk
2015-04-30 19:57 - 2015-04-30 19:57 - 00544360 _____ ( ) C:\Users\user\Downloads\PowerPoint.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
Task: C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe <==== ATTENTION
Task: {6AD422DD-95FB-4AD2-8666-1AA6692806CF} - System32\Tasks\LDIFNC => C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7\7e22b7dba5ab442bb321e61097dca4a7.exe [2015-03-24] ()
Task: {7F1A3781-93DE-4F19-8151-FCB808F4CBE6} - System32\Tasks\WinFixUpdater => C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe
Task: {8494371C-171A-40AF-82C6-030F726FA966} - System32\Tasks\MPj2Il9ZhM1retYPWtd6j => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe [2015-04-20] () <==== ATTENTION
Task: {1D85F812-3865-4252-A164-F012C10AE6BB} - System32\Tasks\JowSkkkEkz5es1jtATc8o => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: {45EDD53A-5082-4DDA-99CF-0F9231922EFE} - System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => pcalua.exe -a C:\ProgramData\BreakingNewsAlert\uninstall.exe -c /kb=y /ic=1
Task: {52D50E32-1FD8-4FED-8434-AC086AEF3504} - System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => pcalua.exe -a C:\Users\user\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=ima
Task: {5869ABC4-9E70-4456-82B6-792DBCCE4C74} - System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => pcalua.exe -a C:\Users\user\AppData\Roaming\oursurfing\UninstallManager.exe -c -ptid=cmi
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-30]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe (No File)
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com [Not Found]
2015-04-30 20:44 - 2015-04-30 20:44 - 00003112 _____ () C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}
2015-04-30 20:39 - 2015-04-30 20:39 - 00003146 _____ () C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}
2015-04-30 20:37 - 2015-04-30 20:37 - 00003140 _____ () C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}
2015-04-30 20:33 - 2015-04-30 20:33 - 00002204 _____ () C:\Users\user\Desktop\Wikipedia.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002202 _____ () C:\Users\user\Desktop\Hotmail.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002200 _____ () C:\Users\user\Desktop\Search.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002198 _____ () C:\Users\user\Desktop\Amazon.lnk
2015-04-30 20:09 - 2015-04-30 22:27 - 00001010 _____ () C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job
2015-04-30 20:09 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o
2015-04-30 20:08 - 2015-04-30 22:28 - 00001010 _____ () C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job
2015-04-30 20:08 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j
2015-04-30 20:08 - 2015-04-30 20:08 - 00000000 ____D () C:\Users\user\Documents\Optimizer Pro
2015-04-30 20:05 - 2015-04-30 21:00 - 00000000 ____D () C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9
2015-04-30 20:05 - 2015-04-30 20:05 - 00004272 _____ () C:\Windows\System32\Tasks\WinFixUpdater
2015-04-30 20:05 - 2015-04-30 20:05 - 00003552 _____ () C:\Windows\System32\Tasks\LDIFNC
2015-04-30 20:03 - 2015-04-30 20:54 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-30 20:03 - 2015-04-30 20:03 - 00000000 ____D () C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7
2015-04-30 20:01 - 2015-04-30 20:01 - 00000000 ____D () C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4
2015-04-30 20:00 - 2015-04-30 20:03 - 63210976 _____ (Microsoft Corporation) C:\Users\user\Desktop\PowerPointViewer.exe
2015-04-30 19:59 - 2015-04-30 20:05 - 00000111 _____ () C:\Windows\winfix.ini
2015-04-30 19:58 - 2015-04-30 20:01 - 00006877 _____ () C:\claraInstaller.txt
2015-04-30 19:58 - 2015-04-30 19:59 - 00001615 _____ () C:\Users\user\Desktop\Continue PowerPoint.lnk
2015-04-30 19:57 - 2015-04-30 19:57 - 00544360 _____ ( ) C:\Users\user\Downloads\PowerPoint.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
Task: C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe <==== ATTENTION
Task: {6AD422DD-95FB-4AD2-8666-1AA6692806CF} - System32\Tasks\LDIFNC => C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7\7e22b7dba5ab442bb321e61097dca4a7.exe [2015-03-24] ()
Task: {7F1A3781-93DE-4F19-8151-FCB808F4CBE6} - System32\Tasks\WinFixUpdater => C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe
Task: {8494371C-171A-40AF-82C6-030F726FA966} - System32\Tasks\MPj2Il9ZhM1retYPWtd6j => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe [2015-04-20] () <==== ATTENTION
Task: {1D85F812-3865-4252-A164-F012C10AE6BB} - System32\Tasks\JowSkkkEkz5es1jtATc8o => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: {45EDD53A-5082-4DDA-99CF-0F9231922EFE} - System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => pcalua.exe -a C:\ProgramData\BreakingNewsAlert\uninstall.exe -c /kb=y /ic=1
Task: {52D50E32-1FD8-4FED-8434-AC086AEF3504} - System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => pcalua.exe -a C:\Users\user\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=ima
Task: {5869ABC4-9E70-4456-82B6-792DBCCE4C74} - System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => pcalua.exe -a C:\Users\user\AppData\Roaming\oursurfing\UninstallManager.exe -c -ptid=cmi
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
- Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
- Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
- Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
stevarora
Messages postés
5
Date d'inscription
jeudi 30 avril 2015
Statut
Membre
Dernière intervention
1 mai 2015
Modifié par stevarora le 1/05/2015 à 15:03
Modifié par stevarora le 1/05/2015 à 15:03
Bonjour,
Je vais tenter ta manip, je ne suis pas une super pro, sauf pour faire des bêtises !
Je vais tenter ta manip, je ne suis pas une super pro, sauf pour faire des bêtises !
stevarora
Messages postés
5
Date d'inscription
jeudi 30 avril 2015
Statut
Membre
Dernière intervention
1 mai 2015
1 mai 2015 à 15:21
1 mai 2015 à 15:21
Voici le message obtenu suite à tes manip
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-04-2015 01
Ran by user at 2015-05-01 15:17:36 Run:1
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: user)
Boot Mode: Normal
==============================================
Content of fixlist:
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-30]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe (No File)
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com [Not Found]
2015-04-30 20:44 - 2015-04-30 20:44 - 00003112 _____ () C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}
2015-04-30 20:39 - 2015-04-30 20:39 - 00003146 _____ () C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}
2015-04-30 20:37 - 2015-04-30 20:37 - 00003140 _____ () C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}
2015-04-30 20:33 - 2015-04-30 20:33 - 00002204 _____ () C:\Users\user\Desktop\Wikipedia.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002202 _____ () C:\Users\user\Desktop\Hotmail.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002200 _____ () C:\Users\user\Desktop\Search.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002198 _____ () C:\Users\user\Desktop\Amazon.lnk
2015-04-30 20:09 - 2015-04-30 22:27 - 00001010 _____ () C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job
2015-04-30 20:09 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o
2015-04-30 20:08 - 2015-04-30 22:28 - 00001010 _____ () C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job
2015-04-30 20:08 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j
2015-04-30 20:08 - 2015-04-30 20:08 - 00000000 ____D () C:\Users\user\Documents\Optimizer Pro
2015-04-30 20:05 - 2015-04-30 21:00 - 00000000 ____D () C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9
2015-04-30 20:05 - 2015-04-30 20:05 - 00004272 _____ () C:\Windows\System32\Tasks\WinFixUpdater
2015-04-30 20:05 - 2015-04-30 20:05 - 00003552 _____ () C:\Windows\System32\Tasks\LDIFNC
2015-04-30 20:03 - 2015-04-30 20:54 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-30 20:03 - 2015-04-30 20:03 - 00000000 ____D () C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7
2015-04-30 20:01 - 2015-04-30 20:01 - 00000000 ____D () C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4
2015-04-30 20:00 - 2015-04-30 20:03 - 63210976 _____ (Microsoft Corporation) C:\Users\user\Desktop\PowerPointViewer.exe
2015-04-30 19:59 - 2015-04-30 20:05 - 00000111 _____ () C:\Windows\winfix.ini
2015-04-30 19:58 - 2015-04-30 20:01 - 00006877 _____ () C:\claraInstaller.txt
2015-04-30 19:58 - 2015-04-30 19:59 - 00001615 _____ () C:\Users\user\Desktop\Continue PowerPoint.lnk
2015-04-30 19:57 - 2015-04-30 19:57 - 00544360 _____ ( ) C:\Users\user\Downloads\PowerPoint.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
Task: C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe <==== ATTENTION
Task: {6AD422DD-95FB-4AD2-8666-1AA6692806CF} - System32\Tasks\LDIFNC => C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7\7e22b7dba5ab442bb321e61097dca4a7.exe [2015-03-24] ()
Task: {7F1A3781-93DE-4F19-8151-FCB808F4CBE6} - System32\Tasks\WinFixUpdater => C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe
Task: {8494371C-171A-40AF-82C6-030F726FA966} - System32\Tasks\MPj2Il9ZhM1retYPWtd6j => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe [2015-04-20] () <==== ATTENTION
Task: {1D85F812-3865-4252-A164-F012C10AE6BB} - System32\Tasks\JowSkkkEkz5es1jtATc8o => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: {45EDD53A-5082-4DDA-99CF-0F9231922EFE} - System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => pcalua.exe -a C:\ProgramData\BreakingNewsAlert\uninstall.exe -c /kb=y /ic=1
Task: {52D50E32-1FD8-4FED-8434-AC086AEF3504} - System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => pcalua.exe -a C:\Users\user\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=ima
Task: {5869ABC4-9E70-4456-82B6-792DBCCE4C74} - System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => pcalua.exe -a C:\Users\user\AppData\Roaming\oursurfing\UninstallManager.exe -c -ptid=cmi
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com not found.
C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => Moved successfully.
C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => Moved successfully.
C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => Moved successfully.
"C:\Users\user\Desktop\Wikipedia.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Hotmail.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Search.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Amazon.lnk" => File/Directory not found.
C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => Moved successfully.
C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o => Moved successfully.
C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => Moved successfully.
C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j => Moved successfully.
C:\Users\user\Documents\Optimizer Pro => Moved successfully.
C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9 => Moved successfully.
C:\Windows\System32\Tasks\WinFixUpdater => Moved successfully.
C:\Windows\System32\Tasks\LDIFNC => Moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7 => Moved successfully.
C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4 => Moved successfully.
"C:\Users\user\Desktop\PowerPointViewer.exe" => File/Directory not found.
C:\Windows\winfix.ini => Moved successfully.
C:\claraInstaller.txt => Moved successfully.
"C:\Users\user\Desktop\Continue PowerPoint.lnk" => File/Directory not found.
"C:\Users\user\Downloads\PowerPoint.exe" => File/Directory not found.
C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe => Moved successfully.
C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j => Moved successfully.
C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o => Moved successfully.
"C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j" => File/Directory not found.
"C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe" => File/Directory not found.
C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job not found.
C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6AD422DD-95FB-4AD2-8666-1AA6692806CF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6AD422DD-95FB-4AD2-8666-1AA6692806CF}" => Key deleted successfully.
C:\Windows\System32\Tasks\LDIFNC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LDIFNC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7F1A3781-93DE-4F19-8151-FCB808F4CBE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F1A3781-93DE-4F19-8151-FCB808F4CBE6}" => Key deleted successfully.
C:\Windows\System32\Tasks\WinFixUpdater not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinFixUpdater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8494371C-171A-40AF-82C6-030F726FA966}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8494371C-171A-40AF-82C6-030F726FA966}" => Key deleted successfully.
C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MPj2Il9ZhM1retYPWtd6j" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D85F812-3865-4252-A164-F012C10AE6BB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D85F812-3865-4252-A164-F012C10AE6BB}" => Key deleted successfully.
C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\JowSkkkEkz5es1jtATc8o" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45EDD53A-5082-4DDA-99CF-0F9231922EFE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45EDD53A-5082-4DDA-99CF-0F9231922EFE}" => Key deleted successfully.
C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52D50E32-1FD8-4FED-8434-AC086AEF3504}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52D50E32-1FD8-4FED-8434-AC086AEF3504}" => Key deleted successfully.
C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5869ABC4-9E70-4456-82B6-792DBCCE4C74}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5869ABC4-9E70-4456-82B6-792DBCCE4C74}" => Key deleted successfully.
C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}" => Key deleted successfully.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-04-2015 01
Ran by user at 2015-05-01 15:17:36 Run:1
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: user)
Boot Mode: Normal
==============================================
Content of fixlist:
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-30]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe (No File)
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com [Not Found]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com [Not Found]
2015-04-30 20:44 - 2015-04-30 20:44 - 00003112 _____ () C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}
2015-04-30 20:39 - 2015-04-30 20:39 - 00003146 _____ () C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}
2015-04-30 20:37 - 2015-04-30 20:37 - 00003140 _____ () C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}
2015-04-30 20:33 - 2015-04-30 20:33 - 00002204 _____ () C:\Users\user\Desktop\Wikipedia.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002202 _____ () C:\Users\user\Desktop\Hotmail.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002200 _____ () C:\Users\user\Desktop\Search.lnk
2015-04-30 20:33 - 2015-04-30 20:33 - 00002198 _____ () C:\Users\user\Desktop\Amazon.lnk
2015-04-30 20:09 - 2015-04-30 22:27 - 00001010 _____ () C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job
2015-04-30 20:09 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o
2015-04-30 20:08 - 2015-04-30 22:28 - 00001010 _____ () C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job
2015-04-30 20:08 - 2015-04-30 20:09 - 00004032 _____ () C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j
2015-04-30 20:08 - 2015-04-30 20:08 - 00000000 ____D () C:\Users\user\Documents\Optimizer Pro
2015-04-30 20:05 - 2015-04-30 21:00 - 00000000 ____D () C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9
2015-04-30 20:05 - 2015-04-30 20:05 - 00004272 _____ () C:\Windows\System32\Tasks\WinFixUpdater
2015-04-30 20:05 - 2015-04-30 20:05 - 00003552 _____ () C:\Windows\System32\Tasks\LDIFNC
2015-04-30 20:03 - 2015-04-30 20:54 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-30 20:03 - 2015-04-30 20:03 - 00000000 ____D () C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7
2015-04-30 20:01 - 2015-04-30 20:01 - 00000000 ____D () C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4
2015-04-30 20:00 - 2015-04-30 20:03 - 63210976 _____ (Microsoft Corporation) C:\Users\user\Desktop\PowerPointViewer.exe
2015-04-30 19:59 - 2015-04-30 20:05 - 00000111 _____ () C:\Windows\winfix.ini
2015-04-30 19:58 - 2015-04-30 20:01 - 00006877 _____ () C:\claraInstaller.txt
2015-04-30 19:58 - 2015-04-30 19:59 - 00001615 _____ () C:\Users\user\Desktop\Continue PowerPoint.lnk
2015-04-30 19:57 - 2015-04-30 19:57 - 00544360 _____ ( ) C:\Users\user\Downloads\PowerPoint.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe
Task: C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe <==== ATTENTION
Task: {6AD422DD-95FB-4AD2-8666-1AA6692806CF} - System32\Tasks\LDIFNC => C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7\7e22b7dba5ab442bb321e61097dca4a7.exe [2015-03-24] ()
Task: {7F1A3781-93DE-4F19-8151-FCB808F4CBE6} - System32\Tasks\WinFixUpdater => C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe
Task: {8494371C-171A-40AF-82C6-030F726FA966} - System32\Tasks\MPj2Il9ZhM1retYPWtd6j => C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe [2015-04-20] () <==== ATTENTION
Task: {1D85F812-3865-4252-A164-F012C10AE6BB} - System32\Tasks\JowSkkkEkz5es1jtATc8o => C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o.exe <==== ATTENTION
Task: {45EDD53A-5082-4DDA-99CF-0F9231922EFE} - System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => pcalua.exe -a C:\ProgramData\BreakingNewsAlert\uninstall.exe -c /kb=y /ic=1
Task: {52D50E32-1FD8-4FED-8434-AC086AEF3504} - System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => pcalua.exe -a C:\Users\user\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=ima
Task: {5869ABC4-9E70-4456-82B6-792DBCCE4C74} - System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => pcalua.exe -a C:\Users\user\AppData\Roaming\oursurfing\UninstallManager.exe -c -ptid=cmi
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{bc2cdb87-9618-fda7-bc2c-cdb879616e1e}\hqghumeaylnlf.exe not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\quick_searchff@gmail.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\AVJYFVOD75109374@HCDE39471360.com not found.
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\1mlub56i.default\extensions\MGKN37049485@ACPSC11936960.com not found.
C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} => Moved successfully.
C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} => Moved successfully.
C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} => Moved successfully.
"C:\Users\user\Desktop\Wikipedia.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Hotmail.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Search.lnk" => File/Directory not found.
"C:\Users\user\Desktop\Amazon.lnk" => File/Directory not found.
C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job => Moved successfully.
C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o => Moved successfully.
C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job => Moved successfully.
C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j => Moved successfully.
C:\Users\user\Documents\Optimizer Pro => Moved successfully.
C:\Users\user\AppData\Local\00000000-1430424343-0000-0000-D43D7EFCAEA9 => Moved successfully.
C:\Windows\System32\Tasks\WinFixUpdater => Moved successfully.
C:\Windows\System32\Tasks\LDIFNC => Moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\ProgramData\7e22b7dba5ab442bb321e61097dca4a7 => Moved successfully.
C:\ProgramData\7a7f3ac5ed9f475d9c27d989ad9b1da4 => Moved successfully.
"C:\Users\user\Desktop\PowerPointViewer.exe" => File/Directory not found.
C:\Windows\winfix.ini => Moved successfully.
C:\claraInstaller.txt => Moved successfully.
"C:\Users\user\Desktop\Continue PowerPoint.lnk" => File/Directory not found.
"C:\Users\user\Downloads\PowerPoint.exe" => File/Directory not found.
C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe => Moved successfully.
C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j => Moved successfully.
C:\Users\user\AppData\Roaming\JowSkkkEkz5es1jtATc8o => Moved successfully.
"C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j" => File/Directory not found.
"C:\Users\user\AppData\Roaming\MPj2Il9ZhM1retYPWtd6j.exe" => File/Directory not found.
C:\Windows\Tasks\JowSkkkEkz5es1jtATc8o.job not found.
C:\Windows\Tasks\MPj2Il9ZhM1retYPWtd6j.job not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6AD422DD-95FB-4AD2-8666-1AA6692806CF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6AD422DD-95FB-4AD2-8666-1AA6692806CF}" => Key deleted successfully.
C:\Windows\System32\Tasks\LDIFNC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LDIFNC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7F1A3781-93DE-4F19-8151-FCB808F4CBE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F1A3781-93DE-4F19-8151-FCB808F4CBE6}" => Key deleted successfully.
C:\Windows\System32\Tasks\WinFixUpdater not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinFixUpdater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8494371C-171A-40AF-82C6-030F726FA966}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8494371C-171A-40AF-82C6-030F726FA966}" => Key deleted successfully.
C:\Windows\System32\Tasks\MPj2Il9ZhM1retYPWtd6j not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MPj2Il9ZhM1retYPWtd6j" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D85F812-3865-4252-A164-F012C10AE6BB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D85F812-3865-4252-A164-F012C10AE6BB}" => Key deleted successfully.
C:\Windows\System32\Tasks\JowSkkkEkz5es1jtATc8o not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\JowSkkkEkz5es1jtATc8o" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45EDD53A-5082-4DDA-99CF-0F9231922EFE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45EDD53A-5082-4DDA-99CF-0F9231922EFE}" => Key deleted successfully.
C:\Windows\System32\Tasks\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5EE49AE6-2CDC-4864-9A6F-846D597A4D4D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52D50E32-1FD8-4FED-8434-AC086AEF3504}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52D50E32-1FD8-4FED-8434-AC086AEF3504}" => Key deleted successfully.
C:\Windows\System32\Tasks\{A8E93CD6-3D8E-4583-AFEB-717B722CB415} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A8E93CD6-3D8E-4583-AFEB-717B722CB415}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5869ABC4-9E70-4456-82B6-792DBCCE4C74}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5869ABC4-9E70-4456-82B6-792DBCCE4C74}" => Key deleted successfully.
C:\Windows\System32\Tasks\{80E4B1D6-6D76-4934-B7B7-93ED0F699988} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{80E4B1D6-6D76-4934-B7B7-93ED0F699988}" => Key deleted successfully.
End of Fixlog 15:17:38
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 658
1 mai 2015 à 15:39
1 mai 2015 à 15:39
ok fais la suite et vois quels problèmes restent.
stevarora
Messages postés
5
Date d'inscription
jeudi 30 avril 2015
Statut
Membre
Dernière intervention
1 mai 2015
>
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
1 mai 2015 à 16:19
1 mai 2015 à 16:19
J'avais déjà réinitialisé mes navigateurs donc j'ai redémarré mon PC et depuis un moment je navigue sans problème.
Apparemment tout est rentré dans l'ordre.
Je te remercie de m'avoir consacré de ton temps.
Bon week-end
Apparemment tout est rentré dans l'ordre.
Je te remercie de m'avoir consacré de ton temps.
Bon week-end
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 658
1 mai 2015 à 16:38
1 mai 2015 à 16:38
=)
Voila, c'est terminé, tu peux supprimer les programmes utilisés.
Quelques conseils :
Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=
Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
(notamment active les détections LPIs/PUP sur ton antivirus comme cela est conseillé)
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
Voila, c'est terminé, tu peux supprimer les programmes utilisés.
Quelques conseils :
Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=
Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
(notamment active les détections LPIs/PUP sur ton antivirus comme cela est conseillé)
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
stevarora
Messages postés
5
Date d'inscription
jeudi 30 avril 2015
Statut
Membre
Dernière intervention
1 mai 2015
1 mai 2015 à 17:06
1 mai 2015 à 17:06
Merci pour ces dernières infos
30 avril 2015 à 23:41
tes liens bloquer la je sais pas ou que tu vas rien a voir avec ci-joint mais avec ca plus de problemes je pense
amclta+
30 avril 2015 à 23:49
Je regarde les rapports FRST.