Comment désinstaller crossbrowse, cinemaplus, reimage..

pompomt Messages postés 1 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour, depuis quelques temps, j'ai dû télécharger crossbrowse, cinemaplus, reimage... à mon insu et je ne parviens pas à m'en défaire. Pourriez-vous m'aider à me sortir de ce "merdier" svp.. j'ai les nerfs qui lâchent !!
Ps : je ne me suis pas inscrit de l'ordinateur malade et mon message ne parvient pas non plus de l'ordinateur malade.
J'ai téléchargé Adwcleaner, j'ai scanné et sauvegardé le fichier sur
https://pjjoint.malekal.com/files.php?id=20150504_l10o12t6h9g10
Un grand merci à l'avance pour votre aide.

2 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0
    1. pompomt
       
      Merci à vous pour la rèponse rapide. J'aurais bien aimè répondre aussi rapidement mais avec cet ordi "paralysè" pas facile ;-) Voici les liens
      http://pjjoint.malekal.com/files.php?id=FRST_20150505_j612c9i9v9
      http://pjjoint.malekal.com/files.php?id=20150505_o6v15j99n7
      http://pjjoint.malekal.com/files.php?id=20150505_m13j9l15o9z7
      Bon courage, j'espère que j'ai bien réalisé le scan.
      0
  2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Beaucoup de mauvais programmes.
    Ca doit ramer sec.

    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    BHO: Search Assistant BHO -> {00e2c623-e999-4b80-8ae1-f64f299f564c} -> C:\Program Files\MergeDocsOnline_ew\bar\1.bin\ewSrcAs.dll [2015-05-04] (Mindspark)
    BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\XTab\SupTab.dll [2015-04-20] (Thinknice Co. Limited)
    BHO: shopperz -> {5081D2D4-1637-404c-B74F-50526718257D} -> C:\Program Files\shopperz\mseff32.dll [2015-04-26] ()
    BHO: Toolbar BHO -> {7954f122-e29b-41f3-b5c0-3c40a553cc37} -> C:\Program Files\MergeDocsOnline_ew\bar\1.bin\ewbar.dll [2015-05-04] (Mindspark)
    Toolbar: HKLM - No Name - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - No File
    Toolbar: HKLM - MergeDocsOnline - {8a52e7db-87b4-4a41-8bba-3d7459a92d3d} - C:\Program Files\MergeDocsOnline_ew\bar\1.bin\ewbar.dll [2015-05-04] (Mindspark)
    HKLM\...\Run: [MergeDocsOnline EPM Support] => C:\Program Files\MergeDocsOnline_ew\bar\1.bin\ewmedint.exe [12872 2015-05-04] (Mindspark)
    HKLM\...\Run: [MergeDocsOnline AppIntegrator 32-bit] => C:\Program Files\MergeDocsOnline_ew\bar\1.bin\AppIntegrator.exe [225864 2015-05-04] (Mindspark)
    HKLM\...\Run: [MergeDocsOnline Search Scope Monitor] => C:\PROGRA~1\MERGED~2\bar\1.bin\ewsrchmn.exe /m=2 /w /h
    HKLM\...\Run: [gmsd_fr_495] => C:\Program Files\gmsd_fr_495\gmsd_fr_495.exe [3980744 2015-05-03] ()
    HKLM\...\Run: [SmartWeb] => C:\Users\eric\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
    HKLM\...\RunOnce: [upgmsd_fr_495.exe] => C:\Users\eric\AppData\Local\gmsd_fr_495\upgmsd_fr_495.exe [3316904 2015-05-03] ()
    HKU\S-1-5-21-2099818963-1758612042-598509747-1000\...\Run: [UnicoBrowser] => C:\Users\eric\AppData\Local\UnicoBrowser\Application\unicobrowser.exe [1047176 2015-04-21] (The Unico Browser Authors)
    Startup: C:\Users\eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-13]
    ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{62b802ea-76b4-dd8b-62b8-802ea76b0ba9}\hqghumeaylnlf.exe (No File)
    Startup: C:\Users\eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-05-04]
    ShortcutTarget: SmartWeb.lnk -> C:\Users\eric\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
    CHR Extension: (I - Cinema) - C:\Users\eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk [2015-05-05]
    CHR Extension: (No Name) - C:\Users\eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfghefomandejfcfhcindgbnfogdgjj [2015-03-15]
    CHR HKLM\...\Chrome\Extension: [nefjmimdbenblggkaehibhabbmdidpbf] - https://clients2.google.com/service/update2/crx
    CHR Extension: (Proofread Bot Grammar and Style Checker) - C:\Users\eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjnnmmjgjaaomkcjibnncokikbianjap [2015-04-13]
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [337064 2015-05-04] (SysTool PasSame LIMITED) <==== ATTENTION
    S2 acb0da58; C:\Windows\system32\rundll32.exe c:\Program Files\IndepthGeneration\IndepthGeneration.dll,serv
    S2 SGUpdater; C:\Program Files\SafeGuard\SGUpdaterSvc.exe [X]
    R2 shopperz Updater; C:\Program Files\shopperz\nseven.exe [256872 2015-04-26] ()
    R2 MergeDocsOnline_ewService; C:\Program Files\MergeDocsOnline_ew\bar\1.bin\ewbarsvc.exe [90696 2015-05-04] (Mindspark)
    R2 mofutipe; C:\Users\eric\AppData\Roaming\A002145B-1430072001-DB11-A70E-00A0D169A42C\jnsa5E9.tmp [122880 2015-04-26] () [File not signed]
    S2 globalUpdate; C:\Program Files\globalUpdate\Update\globalupdate.exe [68608 2015-05-05] (globalUpdate) [File not signed] <==== ATTENTION
    S3 globalUpdatem; C:\Program Files\globalUpdate\Update\globalupdate.exe [68608 2015-05-05] (globalUpdate) [File not signed] <==== ATTENTION
    R2 goxyheve; C:\Users\eric\AppData\Roaming\A002145B-1430072001-DB11-A70E-00A0D169A42C\nsl2618.tmp [134144 2015-04-30] () [File not signed]
    R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158816 2015-04-20] (XTab system)
    R2 233d520f; c:\Program Files\SustainerPlus\SustainerPlus.dll [2333184 2015-05-04] () [File not signed]
    R2 ClaraUpdater; C:\Program Files\Common Files\ClaraUpdater\ClaraUpdater.exe [887376 2015-05-05] (ClaraLabs)
    R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1445736 2015-04-26] ()
    2015-05-05 01:13 - 2015-05-05 02:39 - 00002754 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5_user.job
    2015-05-05 01:13 - 2015-05-05 02:39 - 00002754 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.job
    2015-05-05 01:12 - 2015-05-05 02:39 - 00005826 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-6.job
    2015-05-05 01:12 - 2015-05-05 02:39 - 00005482 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-7.job
    2015-05-05 01:12 - 2015-05-05 02:39 - 00003438 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-7.job
    2015-05-05 01:12 - 2015-05-05 02:39 - 00003102 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-6.job
    2015-05-05 01:12 - 2015-05-05 01:12 - 00000000 ____D () C:\Program Files\dd46d1d6-8419-4e3a-8d94-fdd32799f513
    2015-05-05 01:11 - 2015-05-05 02:39 - 00004458 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-3.job
    2015-05-05 01:11 - 2015-05-05 02:39 - 00002076 _____ () C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-10_user.job
    2015-05-05 01:11 - 2015-05-05 02:39 - 00000896 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-05-05 01:11 - 2015-05-05 01:16 - 00000900 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-05-05 01:11 - 2015-05-05 01:13 - 00000000 ____D () C:\Program Files\I - Cinema
    2015-05-05 01:11 - 2015-05-05 01:11 - 00000000 ____D () C:\Users\eric\AppData\Local\globalUpdate
    2015-05-05 01:11 - 2015-05-05 01:11 - 00000000 ____D () C:\Program Files\globalUpdate
    2015-05-05 01:08 - 2015-05-05 01:09 - 00000000 ____D () C:\Users\eric\AppData\Local\UnicoBrowser
    2015-05-05 01:08 - 2015-05-05 01:08 - 00000000 ____D () C:\Program Files\Common Files\ClaraUpdater
    2015-05-05 01:06 - 2015-05-05 01:09 - 00008369 _____ () C:\claraInstaller.txt
    2015-05-05 01:06 - 2015-05-05 01:06 - 00000000 ____D () C:\Program Files\shopperz
    2015-05-05 01:06 - 2015-04-26 13:41 - 00031704 _____ () C:\Windows\system32\Drivers\bsdriver.sys
    2015-05-05 01:06 - 2015-04-13 10:49 - 00051672 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
    2015-05-05 00:34 - 2015-05-05 00:34 - 00000000 ____D () C:\Users\eric\AppData\Roaming\MergeDocsOnline_ew
    2015-05-04 23:36 - 2015-05-04 23:36 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
    2015-05-04 23:35 - 2015-05-05 02:42 - 00000000 ____D () C:\Users\eric\AppData\Local\gmsd_fr_495
    2015-05-04 23:35 - 2015-05-04 23:36 - 00000000 ____D () C:\Program Files\XTab
    2015-05-04 23:35 - 2015-05-04 23:35 - 00000000 ____D () C:\Users\eric\AppData\Local\SmartWeb
    2015-05-04 23:35 - 2015-05-04 23:35 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
    2015-05-04 23:34 - 2015-05-05 01:06 - 00000000 ____D () C:\Program Files\gmsd_fr_495
    2015-05-04 23:34 - 2015-05-04 23:34 - 00000000 ____D () C:\Users\eric\AppData\Roaming\oursurfing
    2015-05-04 23:28 - 2015-05-04 23:28 - 00000000 ____D () C:\Program Files\MergeDocsOnline_ew
    2015-05-04 22:33 - 2015-05-04 22:34 - 00000000 ____D () C:\Users\eric\AppData\Local\avabvyxvdy
    2015-05-04 18:08 - 2015-05-04 18:08 - 00000000 ____D () C:\Program Files\SustainerPlus
    2015-04-26 23:21 - 2015-04-26 23:21 - 00613255 _____ (CMI Limited) C:\Users\eric\AppData\Local\nskD09C.tmp
    2015-04-26 22:37 - 2015-04-26 22:38 - 01179085 _____ () C:\Users\eric\Downloads\7_Zip_(32bit)_v9.34_alpha.exe
    2015-04-26 20:51 - 2015-04-26 20:51 - 00613255 _____ (CMI Limited) C:\Users\eric\AppData\Local\nszCE4B.tmp
    2015-04-26 20:44 - 2015-05-04 19:26 - 00001010 _____ () C:\Windows\Tasks\hwJTaKhbhLwJRB1ll8gOn.job
    2015-04-26 20:42 - 2015-05-05 01:12 - 00000000 ____D () C:\Program Files\61214fee-1eb3-44ba-9806-6f54e868183d
    2015-04-26 20:17 - 2015-04-26 21:17 - 00000000 ____D () C:\Users\eric\AppData\Local\A002145B-1430079459-DB11-A70E-00A0D169A42C
    2015-04-26 20:13 - 2015-05-02 03:00 - 00000000 ____D () C:\Users\eric\AppData\Roaming\A002145B-1430072001-DB11-A70E-00A0D169A42C
    2015-04-20 15:45 - 2015-04-20 15:45 - 01579520 _____ () C:\Users\eric\AppData\Roaming\hwJTaKhbhLwJRB1ll8gOn.exe
    2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\eric\AppData\Roaming\hwJTaKhbhLwJRB1ll8gOn
    2015-04-24 23:43 - 2015-04-24 23:45 - 00768512 _____ (Reimage®) C:\Users\eric\Downloads\ReimageRepair.exe
    2015-04-24 22:14 - 2015-04-24 22:14 - 00776792 _____ (Reimage®) C:\Users\eric\Downloads\eFixPro.exe
    2015-04-13 23:33 - 2015-04-13 23:33 - 00000000 ____D () C:\Users\eric\Documents\Optimizer Pro
    2015-04-13 21:35 - 2015-05-04 18:10 - 00000000 ____D () C:\ProgramData\10690124854928504948
    2015-05-04 19:26 - 2015-03-15 18:16 - 00001332 _____ () C:\Windows\Tasks\XIJZB.job
    2015-05-04 19:26 - 2015-03-15 18:16 - 00001332 _____ () C:\Windows\Tasks\LCAWL.job
    2015-05-04 19:26 - 2015-03-15 18:16 - 00001328 _____ () C:\Windows\Tasks\IBC.job
    2015-05-04 19:26 - 2015-03-15 18:14 - 00001680 _____ () C:\Windows\Tasks\RNROAJL.job
    2015-05-04 19:26 - 2015-03-15 18:13 - 00001682 _____ () C:\Windows\Tasks\ORLCDRFT.job
    2015-05-04 19:26 - 2015-03-15 18:13 - 00001682 _____ () C:\Windows\Tasks\IGBRHOYX.job
    2015-05-04 19:26 - 2015-03-15 18:13 - 00001680 _____ () C:\Windows\Tasks\DCMRXRA.job
    ask: {03B184D9-88FD-42DD-A674-4F9A601E4353} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-3 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-3.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {08DA6716-C16C-433C-BB41-8607D62B0A3C} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {2A4FA662-DD16-4FE0-B8DC-0389403AB309} - \CPU Grid Computing No Task File <==== ATTENTION
    Task: {2FD4D15B-A6A2-454F-A850-4EB698DE6A24} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-6 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-6.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {311327E2-5878-4FCC-B172-2C678C8E1F2E} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\globalupdate.exe [2015-05-05] (globalUpdate) <==== ATTENTION
    Task: {42DF3298-DF87-4B49-90DF-95C09697955E} - System32\Tasks\avabvyxvdy => C:\Users\eric\AppData\Local\avabvyxvdy\avabvyxvdy.exe [2015-04-28] () <==== ATTENTION
    Task: {432CBB6C-A0BE-48A1-91A6-0C4F3C4A5071} - System32\Tasks\RNROAJL => C:\Users\eric\AppData\Roaming\RNROAJL.exe <==== ATTENTION
    Task: {509DF67B-2ABE-4CBB-A912-80076EF345BB} - System32\Tasks\IGBRHOYX => C:\Users\eric\AppData\Roaming\IGBRHOYX.exe <==== ATTENTION
    Task: {5CED43B6-D400-4B8A-BC53-521EF29C99EC} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-10_user => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-10.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {5F4BD828-E703-4417-87D2-0C478BC36EA1} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\eric\AppData\Local\SmartWeb\SmartWebHelper.exe [2015-02-17] (SoftBrain Technologies Ltd.) <==== ATTENTION
    Task: {601E2552-8BA2-41FE-8E16-1A941D9FEB54} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-7 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-7.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {68B40657-152C-4293-A963-9304986BD536} - \DealPlyLiveUpdateTaskMachineUA No Task File <==== ATTENTION
    Task: {6EA5FB5A-A469-4043-89CA-B7081863E45D} - System32\Tasks\ORLCDRFT => C:\Users\eric\AppData\Roaming\ORLCDRFT.exe <==== ATTENTION
    Task: {7C9C9D23-7F09-49EA-893A-43E61EF9ABA3} - System32\Tasks\hwJTaKhbhLwJRB1ll8gOn => C:\Users\eric\AppData\Roaming\hwJTaKhbhLwJRB1ll8gOn.exe [2015-04-20] () <==== ATTENTION
    Task: {8A44FEAA-AD9A-45AA-B7FF-179CFB879C85} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-7 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-7.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {8CEAB112-7808-44B1-8433-8B5F5EECD0B1} - System32\Tasks\Run_Browser => C:\Users\eric\AppData\Local\UnicoBrowser\Application\unicobrowser.exe [2015-04-21] (The Unico Browser Authors) <==== ATTENTION
    Task: {92338381-BD01-44DD-98A0-2B2A5B8F6B33} - \Dealply No Task File <==== ATTENTION
    Task: {9B0E8EEF-23CF-40EE-84FF-93408F7F6E5B} - System32\Tasks\LCAWL => C:\Users\eric\AppData\Roaming\LCAWL.exe <==== ATTENTION
    Task: {A04962B4-3837-4F19-9851-42B4293926C4} - \DealPlyLiveUpdateTaskMachineCore No Task File <==== ATTENTION
    Task: {D260EC8C-ADD6-46EF-A909-027CFA29357D} - System32\Tasks\PostPoneInstall => C:\Users\eric\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
    Task: {E9FDCAF5-D4D6-44D6-B3D1-85FE1C7296BF} - System32\Tasks\IBC => C:\Users\eric\AppData\Roaming\IBC.exe <==== ATTENTION
    Task: {F7F89A9E-C7E0-44A0-9DEF-F2475216859F} - System32\Tasks\XIJZB => C:\Users\eric\AppData\Roaming\XIJZB.exe <==== ATTENTION
    Task: {FA139F50-F39E-46AE-9583-485346D79966} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-6 => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-6.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: {FBBFD304-FD1E-4483-A08F-6F8E2767CF45} - System32\Tasks\DCMRXRA => C:\Users\eric\AppData\Roaming\DCMRXRA.exe <==== ATTENTION
    Task: {FC53B635-9E0B-42C8-BBF6-131E5CE262B0} - System32\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5_user => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.exe [2015-05-05] (iCinema) <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-6.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-7.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-10_user.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-10.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-3.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-3.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5_user.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-6.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-7.job => C:\Program Files\I - Cinema\61a7c86f-e8ed-4ee1-b8c5-3fda07b049ce-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\DCMRXRA.job => C:\Users\eric\AppData\Roaming\DCMRXRA.exe <==== ATTENTION
    Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files\Glary Utilities 5\Initialize.exe
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\hwJTaKhbhLwJRB1ll8gOn.job => C:\Users\eric\AppData\Roaming\hwJTaKhbhLwJRB1ll8gOn.exe <==== ATTENTION
    Task: C:\Windows\Tasks\IBC.job => C:\Users\eric\AppData\Roaming\IBC.exe <==== ATTENTION
    Task: C:\Windows\Tasks\IGBRHOYX.job => C:\Users\eric\AppData\Roaming\IGBRHOYX.exe <==== ATTENTION
    Task: C:\Windows\Tasks\LCAWL.job => C:\Users\eric\AppData\Roaming\LCAWL.exe <==== ATTENTION
    Task: C:\Windows\Tasks\ORLCDRFT.job => C:\Users\eric\AppData\Roaming\ORLCDRFT.exe <==== ATTENTION
    Task: C:\Windows\Tasks\RNROAJL.job => C:\Users\eric\AppData\Roaming\RNROAJL.exe <==== ATTENTION
    Task: C:\Windows\Tasks\XIJZB.job => C:\Users\eric\AppData\Roaming\XIJZB.exe <==== ATTENTION
    R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [51672 2015-04-13] (Cherimoya Ltd)
    C:\Windows\System32\drivers\cherimoya.sys

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    puis réinitialise tes navigateurs:
    ==================================
    Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

    ~~

    Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/
    (Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0