Pages pub intempestif

# AdwCleaner v4.204 - Rapport créé le 18/05/2015 à 09:22:50
# Mis à jour le 12/05/2015 par Xplode
# Base de données : 2015-05-12.2 [Serveur]
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 1 (x86)
# Nom d'utilisateur : user - PC-DE-USER
# Exécuté depuis : c:\Users\user\Downloads\adwcleaner_4.204.exe
# Option : Nettoyer

• • • • • [ Services ] *****
        • [ Fichiers / Dossiers ] *****

[!] Dossier Supprimé : C:\ProgramData\NetEngine

• • • • • [ Tâches planifiées ] *****

Tâche Supprimée : NetEngine

• • • • • [ Raccourcis ] *****
        • [ Registre ] *****

Donnée Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

• • • • • [ Navigateurs ] *****

-\\ Internet Explorer v7.0.6001.18639


-\\ Mozilla Firefox v37.0.2 (x86 fr)

[76de5sbq.default\prefs.js] - Ligne Supprimée : user_pref("***@***l-event-fired", true);
[76de5sbq.default\prefs.js] - Ligne Supprimée : user_pref("extensions.xpiState", "{\"app-profile\":{\"***@***\":{\"d\":\"C:\\\\Users\\\\user\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\76de5sbq.default\\\\extension[...]

-\\ Google Chrome v42.0.2311.152

AdwCleaner[R0].txt - [17732 octets] - [17/05/2015 16:45:27]
AdwCleaner[R1].txt - [2404 octets] - [17/05/2015 17:27:07]
AdwCleaner[R2].txt - [1629 octets] - [17/05/2015 21:02:47]
AdwCleaner[R3].txt - [1749 octets] - [18/05/2015 09:20:26]
AdwCleaner[S0].txt - [16435 octets] - [17/05/2015 16:47:23]
AdwCleaner[S1].txt - [2518 octets] - [17/05/2015 17:28:07]
AdwCleaner[S2].txt - [1719 octets] - [17/05/2015 21:04:32]
AdwCleaner[S3].txt - [1702 octets] - [18/05/2015 09:22:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1762 octets] ##########

j'avais utilisé ADW pour istratuf et ça avait bien marché , j'ai tenté 5 scans /suppressions pour les pages pub mais apparemment ça n'est pas suffisant .

les pages pub se présentent sous la forme de "sondage" soit de firefox mozilla ou du site sur lequel je navigue + une série de petites fenêtre qui clignote m'indiquant un problème de mémoire etc

enfin voila

Re,

 j'ai tenté 5 scans /suppressions

1 suffisant! :-)
-----------
Il reste les procédures 2/ puis 3/
===> : https://forums.commentcamarche.net/forum/affich-31987797-pages-pub-intempestif#1

FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-05-2015 02
Ran by user (administrator) on PC-DE-USER on 18-05-2015 16:54:52
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available profiles: user & Kader)
Platform: Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 1 (X86) OS Language: Français (France)
Internet Explorer Version 7 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\ProgramData\NetEngine\bin\D10\netengine.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Rational Thought Solutions) C:\ProgramData\ucDBObsWLC\vhkpgGivsmB.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Aeria Games & Entertainment) C:\Program Files\Aeria Games\Ignite\aeriaignite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Akamai Technologies, Inc.) C:\Users\user\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Akamai Technologies, Inc.) C:\Users\user\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
() C:\ProgramData\NetEngine\bin\D10\netengine.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Aeria Ignite] => C:\Program Files\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\Run: [Akamai NetSession Interface] => C:\Users\user\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\MountPoints2: {ce96b670-df41-11e2-8efc-806e6f6e6963} - D:\SETUP.EXE
HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\MountPoints2: {f74db2af-afa8-11e4-b8ff-90e6bac711b7} - F:\LaunchU3.exe -a
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-17]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{c90ac8ca-5d30-c9f4-c90a-ac8ca5d32329}\hqghumeaylnlf.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2011-04-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2011-04-21] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\76de5sbq.default
FF SearchEngineOrder.1: Ask Search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-08] (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-06-07] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Extension: Flash and Video Download - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\76de5sbq.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2015-05-16]
FF Extension: Ask Toolbar - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\76de5sbq.default\Extensions\***@*** [2013-10-15]
FF Extension: Sale Charger - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\76de5sbq.default\Extensions\{85788c43-d871-40cf-9365-686173d382bb}.xpi [2015-05-17]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-06-27]

Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-17]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-02]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915784 2014-09-17] (NVIDIA Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] ()
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-05-10] ()
R2 vhkpgGivsmB; C:\ProgramData\ucDBObsWLC\vhkpgGivsmB.exe [2731504 2015-05-17] (Rational Thought Solutions)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 nvsmu; C:\Windows\System32\DRIVERS\nvsmu.sys [18944 2010-03-22] (NVIDIA Corporation) [File not signed]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 vtany; \??\C:\Windows\vtany.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 16:54 - 2015-05-18 16:55 - 00010651 _____ () C:\Users\user\Downloads\FRST.txt
2015-05-18 16:54 - 2015-05-18 16:54 - 00000000 ____D () C:\FRST
2015-05-18 16:53 - 2015-05-18 16:53 - 01146368 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2015-05-18 16:52 - 2015-05-18 16:52 - 02107392 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2015-05-18 16:29 - 2015-05-18 16:53 - 00000000 ____D () C:\Users\user\AppData\Local\CouponAlert
2015-05-18 16:21 - 2015-05-18 16:28 - 00003857 _____ () C:\Users\user\Desktop\ZHPCleaner.txt
2015-05-18 16:06 - 2015-05-18 16:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\ZHP
2015-05-18 16:06 - 2015-05-18 16:09 - 00000735 _____ () C:\Users\user\Desktop\ZHPCleaner.lnk
2015-05-18 16:06 - 2015-05-18 16:06 - 01835008 _____ () C:\Users\user\Downloads\ZHPCleaner.exe
2015-05-18 09:30 - 2015-05-18 09:30 - 00000000 ____D () C:\ProgramData\NetEngine
2015-05-17 17:31 - 2015-05-17 17:31 - 00061096 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-17 17:29 - 2015-05-17 17:29 - 00282968 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-17 17:29 - 2015-05-17 17:29 - 00003208 _____ () C:\Windows\PFRO.log
2015-05-17 17:14 - 2015-05-17 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avanquest
2015-05-17 17:14 - 2015-05-17 17:14 - 00000000 ____D () C:\ProgramData\Avanquest
2015-05-17 17:14 - 2015-05-17 17:14 - 00000000 ____D () C:\Program Files\Avanquest
2015-05-17 16:44 - 2015-05-18 16:09 - 00000000 ____D () C:\AdwCleaner
2015-05-17 16:44 - 2015-05-17 16:44 - 02209792 _____ () C:\Users\user\Downloads\adwcleaner_4.204.exe
2015-05-17 16:29 - 2015-05-17 16:30 - 00000000 ____D () C:\ProgramData\ucDBObsWLC
2015-05-17 16:26 - 2015-05-17 16:26 - 00000036 _____ () C:\ProgramData\suguid.txt
2015-05-17 16:25 - 2015-05-17 16:25 - 01152432 _____ (Igor Pavlov) C:\Users\user\Downloads\Setup.exe
2015-05-17 16:25 - 2015-05-17 16:25 - 01152432 _____ (Igor Pavlov) C:\Users\user\Downloads\Setup(1).exe
2015-05-10 22:36 - 2015-05-13 20:43 - 00000000 ____D () C:\Users\user\Downloads\Combiné à bois robland x260 Outillage - Matériaux 2nd-oeuvre Gard - leboncoin.fr_fichiers
2015-05-10 22:36 - 2015-05-10 22:36 - 00110937 _____ () C:\Users\user\Downloads\Combiné à bois robland x260 Outillage - Matériaux 2nd-oeuvre Gard - leboncoin.fr.htm
2015-04-22 08:27 - 2015-04-22 08:27 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-21 18:30 - 2015-04-21 18:30 - 00000000 _____ () C:\Users\user\AppData\Local\{DDE3D266-E0EC-4B06-86C5-3C26D1D81248}

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 16:53 - 2006-11-02 14:47 - 00003760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-18 16:53 - 2006-11-02 14:47 - 00003760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-18 16:34 - 2013-07-05 21:40 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-18 16:04 - 2014-06-02 17:27 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-18 11:55 - 2014-06-02 17:27 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-18 11:47 - 2008-01-21 10:41 - 01606634 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 11:45 - 2008-01-21 03:35 - 01266299 _____ () C:\Windows\WindowsUpdate.log
2015-05-18 11:42 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-18 09:38 - 2006-11-02 15:01 - 00032528 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-17 17:30 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-05-17 17:14 - 2013-06-27 11:36 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-05-17 16:47 - 2014-06-02 17:30 - 00001073 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-17 16:47 - 2014-06-02 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-17 16:47 - 2013-06-27 11:17 - 00000858 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-17 16:47 - 2013-06-27 11:17 - 00000846 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-17 16:47 - 2013-06-27 11:13 - 00000993 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-17 16:39 - 2013-08-09 19:02 - 00000000 ____D () C:\Program Files\Steam
2015-05-17 16:29 - 2006-11-02 12:23 - 00000246 _____ () C:\Windows\win.ini
2015-05-14 03:09 - 2013-06-27 11:28 - 00002155 _____ () C:\Windows\epplauncher.mif
2015-05-14 03:09 - 2013-06-27 11:27 - 00001826 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-14 03:08 - 2013-08-14 09:55 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 03:08 - 2013-06-27 11:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-05-14 03:01 - 2006-11-02 12:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-04-24 20:43 - 2013-06-27 11:17 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2013-06-27 11:45 - 2013-06-27 11:45 - 4167680 _____ () C:\Program Files\GUTD441.tmp
2013-07-07 08:21 - 2014-05-10 14:52 - 0138904 _____ () C:\Users\user\AppData\Roaming\PnkBstrK.sys
2013-06-27 11:13 - 2014-05-10 14:53 - 0001356 _____ () C:\Users\user\AppData\Local\d3d9caps.dat
2014-07-16 15:20 - 2014-07-16 15:20 - 0006144 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-21 18:30 - 2015-04-21 18:30 - 0000000 _____ () C:\Users\user\AppData\Local\{DDE3D266-E0EC-4B06-86C5-3C26D1D81248}
2015-05-17 16:26 - 2015-05-17 16:26 - 0000036 _____ () C:\ProgramData\suguid.txt

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\f9865b9dc3ed4edb954338aeaa02da09132527.exe
C:\Users\user\AppData\Local\Temp\optprosetup.exe
C:\Users\user\AppData\Local\Temp\Quarantine.exe
C:\Users\user\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 11:57

==================== End Of Log ============================

ADDITION


Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2006-12-09 04:54 - 2006-12-09 04:54 - 00022723 _____ () C:\Windows\System32\sugg1l3.dll
2015-05-18 09:30 - 2015-05-18 09:30 - 00075776 _____ () C:\ProgramData\NetEngine\bin\D10\netengine.exe
2013-07-07 08:21 - 2014-05-10 14:51 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2013-06-27 16:56 - 2010-01-21 01:52 - 00370792 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
2013-06-27 16:56 - 2010-01-21 01:51 - 00062568 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll
2013-06-27 16:56 - 2010-01-21 01:52 - 00565864 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll
2013-06-27 16:56 - 2010-01-21 01:52 - 00167528 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
2015-04-15 09:34 - 2015-04-15 09:34 - 16863920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2808820622-2385743912-3553601756-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\Wallpaper\img24.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: Nvtmru => "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [{7C533751-6F02-42E9-AE0C-F5AF12BF78E7}] => (Allow) LPort=48113
FirewallRules: [{F8086C5A-3EDD-47C4-8EC9-274653AD94BD}] => (Allow) LPort=48114
FirewallRules: [{17769807-BE1F-439B-8C86-3A588BB63DF2}] => (Allow) LPort=80
FirewallRules: [{AD6889CB-6C86-4F59-9E73-83CEB91EBCAD}] => (Allow) LPort=80
FirewallRules: [{87A94AB3-A659-4E5C-864C-B6FC5E66955E}] => (Allow) LPort=80
FirewallRules: [{109A08C1-25C9-4421-8D0F-A696D84E73DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{1FDCE1FA-0F87-407D-BA24-8956B8D763B0}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{0EE54854-572F-4D3C-BC5C-33F42662CE61}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{23AF16D7-547B-4D7B-9FF3-6FB0C4E53F97}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe
FirewallRules: [UDP Query User{22843EB3-B1DD-4408-BC33-90781AA1FBD4}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe
FirewallRules: [{DAE011BB-0A64-4A79-8B39-AB3598A09D26}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{34C60FDF-C1DF-404D-917B-A8F06D5F9E0C}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{30BF5C20-1347-4409-B3BD-555E2B55C0E6}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [{01A89CFE-4A13-4096-AD49-A0F453B75621}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [TCP Query User{F1D6BE18-F4DE-48F8-9F0D-F4F1B411483A}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [UDP Query User{F96C43BC-BC1C-4CC3-B255-7B81CBF9CB9D}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [TCP Query User{089FCF94-967F-4D32-9A54-10656D3334EE}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_dcaf1d5f83ef35d0\launcher.exe] => (Block) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_dcaf1d5f83ef35d0\launcher.exe
FirewallRules: [UDP Query User{967EDC34-C0EC-4078-BA21-09C9AB9D9CD2}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_dcaf1d5f83ef35d0\launcher.exe] => (Block) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_dcaf1d5f83ef35d0\launcher.exe
FirewallRules: [TCP Query User{3B1EB138-6EDF-49C3-A66E-46856F197075}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe
FirewallRules: [UDP Query User{6FCF7CD1-C2E4-4123-87A1-960AE70D609C}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe
FirewallRules: [TCP Query User{FBC9BAAA-A0C8-4F0F-A88B-A56DB9E3450A}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f1e11c361d677310\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f1e11c361d677310\launcher.exe
FirewallRules: [UDP Query User{85101543-3954-49DE-8D4C-E1638733104E}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f1e11c361d677310\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f1e11c361d677310\launcher.exe
FirewallRules: [{3E2903C4-FCBC-4ECB-ACEF-1B2C216B7FC3}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{FA9978EE-4164-472A-A9A5-E7F31B47F5BD}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [TCP Query User{94C6029C-853A-4A83-B2C3-A66053394C3D}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe
FirewallRules: [UDP Query User{C8870991-1868-4AEB-957F-56348E9309C2}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe
FirewallRules: [TCP Query User{3DA16E1C-1C97-4AF5-BBD5-777C5527BA33}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_b730792b8eef7c50\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_b730792b8eef7c50\launcher.exe
FirewallRules: [UDP Query User{A264EAC6-AF10-4251-87F1-322A41EF72E7}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_b730792b8eef7c50\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_b730792b8eef7c50\launcher.exe
FirewallRules: [TCP Query User{745667DE-AF0D-469B-9A02-2D0E96DA6FB6}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_af672cd4a96cf990\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_af672cd4a96cf990\launcher.exe
FirewallRules: [UDP Query User{9A6A6AE0-8BF4-4605-9093-037D1CEF60C3}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_af672cd4a96cf990\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_af672cd4a96cf990\launcher.exe
FirewallRules: [TCP Query User{169BC10D-37E0-4D78-BBA9-69D5AA8A77CA}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9b05f8bc24ab37d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9b05f8bc24ab37d0\launcher.exe
FirewallRules: [UDP Query User{5DD0D0D4-6FDC-4FB0-9176-32344C9B307B}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9b05f8bc24ab37d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9b05f8bc24ab37d0\launcher.exe
FirewallRules: [TCP Query User{26805754-A1D4-4E1C-8AC5-980D61A0BC4D}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [UDP Query User{BACC18EF-37AF-4018-B773-709D9300F89A}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [TCP Query User{CF905D38-13B2-4502-86C4-93FEF520BBBB}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [UDP Query User{5E729BC9-D5E8-4408-B706-2321B9989006}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [TCP Query User{45281134-4276-4AA7-BB2E-D2C2E8E58BB0}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f9d8be0016c48dd0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f9d8be0016c48dd0\launcher.exe
FirewallRules: [UDP Query User{E7BF55F3-74CD-4170-B782-9FDEF9D90E35}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f9d8be0016c48dd0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_f9d8be0016c48dd0\launcher.exe
FirewallRules: [TCP Query User{35C23285-D4BB-475F-A7FE-30D162D2B66F}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9f7cbe9b4d1932d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9f7cbe9b4d1932d0\launcher.exe
FirewallRules: [UDP Query User{5B76A2E3-A0A4-46F0-88D6-F49AF264C5DF}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9f7cbe9b4d1932d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_9f7cbe9b4d1932d0\launcher.exe
FirewallRules: [TCP Query User{819B668F-9A2B-4859-AAB6-03FB4AE657E8}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_833b8f081ed3c4d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_833b8f081ed3c4d0\launcher.exe
FirewallRules: [UDP Query User{FB3A2C68-BC59-4850-A8E1-C6BAE1B3C8A9}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_833b8f081ed3c4d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_833b8f081ed3c4d0\launcher.exe
FirewallRules: [{1B1E02E8-986D-49DA-AB29-409014ED083F}] => (Allow) C:\Program Files\Steam\SteamApps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{B270616A-F260-4288-84AD-476244137E47}] => (Allow) C:\Program Files\Steam\SteamApps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{AF8F838B-6498-46C7-B849-2389525D0BCA}] => (Allow) C:\Program Files\Steam\SteamApps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{A669BFE4-1449-43A5-8EAA-953162F930F0}] => (Allow) C:\Program Files\Steam\SteamApps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{984530F4-519E-43FC-AA7E-47DF93DE6461}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{F5E64F8E-3219-49E8-9E0C-B328D92C2001}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{D22FEA85-5F4F-44E5-9A24-A99FE074E1EB}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{83486173-473C-42F4-A399-491B2C939B60}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{B73F4E77-386B-442D-81BA-061EAB2E4EC0}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{E36088B0-2E66-4C0C-BD08-E4CA2966F614}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{61CD82C8-6F12-4672-A496-ED2F00153670}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A8A0BEBF-12EE-4859-80BF-FDD6C2AF8D38}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{27FF30D7-2E14-4F03-947F-E9F365A7CA89}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{9EF77150-0233-4098-8A4F-17FF8957FF10}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{AD23EB2A-ABB9-4CCE-8494-9B79C2FE0088}] => (Allow) C:\Program Files\Steam\SteamApps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [{19D5C44D-5558-4C7A-A18C-2031F0696D4B}] => (Allow) C:\Program Files\Steam\SteamApps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [{2159770C-7AB5-4850-B932-77D4CA2DC46D}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{03E45C32-403A-4D46-8095-6857F1FF1E21}] => (Allow) C:\Program Files\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{C274F214-A4E7-45DB-A821-7DA1A4393538}] => (Allow) C:\Program Files\Steam\SteamApps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [{81E2286B-FCAB-40C6-A78C-C56904549040}] => (Allow) C:\Program Files\Steam\SteamApps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [TCP Query User{3F243553-8197-4364-9EB0-68AE588F0707}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_89a06d60c22f20d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_89a06d60c22f20d0\launcher.exe
FirewallRules: [UDP Query User{92943076-8578-4B38-9228-CC31274DE41E}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_89a06d60c22f20d0\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_89a06d60c22f20d0\launcher.exe
FirewallRules: [TCP Query User{3416AD87-BB6F-4CC3-AC8E-0535B6E00959}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_77e4377272a13690\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_77e4377272a13690\launcher.exe
FirewallRules: [UDP Query User{D3C63607-7E6D-46AE-AA72-19E69DF2FBAA}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_77e4377272a13690\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0022_77e4377272a13690\launcher.exe
FirewallRules: [TCP Query User{F95E6DA6-AB90-4C4D-9819-5A85CBE1773E}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0023_389eea987ebce690\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0023_389eea987ebce690\launcher.exe
FirewallRules: [UDP Query User{19086393-8B61-4AA8-B278-46801616A56D}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0023_389eea987ebce690\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0023_389eea987ebce690\launcher.exe
FirewallRules: [TCP Query User{F322E781-F5F1-4A8B-8DD0-DD8AC31B35BA}C:\ubisoft\ghost recon online\pdc-live\ghostreconphantoms.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{4B2B812B-7055-43BC-B172-942BED62D0C7}C:\ubisoft\ghost recon online\pdc-live\ghostreconphantoms.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostreconphantoms.exe
FirewallRules: [TCP Query User{56E550C4-D418-42B5-9C97-3BA7E6C157B5}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{0977E640-C8E7-40D8-871E-2C7042AA1DED}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{37355488-9B69-45A2-9073-C8AFD9FC1FC9}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe
FirewallRules: [UDP Query User{1D3E3D8F-4493-46BB-B2C3-00AED00D2BD0}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe
FirewallRules: [TCP Query User{F5F49428-78CF-4685-946A-13AC7B69A4C5}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_2e973cc213891be7_0001.0024_9f9aa5f68597c3c2\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_2e973cc213891be7_0001.0024_9f9aa5f68597c3c2\launcher.exe
FirewallRules: [UDP Query User{1E78A52E-61C1-4DC4-814C-44D67FDFA156}C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_2e973cc213891be7_0001.0024_9f9aa5f68597c3c2\launcher.exe] => (Allow) C:\users\user\appdata\local\apps\2.0\vakq55vq.jqc\3z310qnj.78g\laun...app_2e973cc213891be7_0001.0024_9f9aa5f68597c3c2\launcher.exe
FirewallRules: [{CC1398F1-8621-4E61-B337-4AACDB2BA303}] => (Allow) C:\Program Files\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{DF1B2579-7494-4CA5-8E56-BE682A83C493}] => (Allow) C:\Program Files\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{C7053C5B-A512-46C0-ABCA-A9DDB13D73B8}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{19512BEE-0DDE-4140-992F-63581408BEF0}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{8A9C73E9-F9EE-4294-9F85-608221530F5E}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CDC2A394-CBCC-41B7-BF17-B2913EA41964}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ACAAAC5E-A2B4-48DD-991A-6056B4BFBAD7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{E802A55F-A35C-48CB-A6B4-E7B5ED152A68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{EFAFB16F-D7B2-4F02-980D-50216763A37B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{EEE1B684-4473-41B7-A8AC-D78884FFC2C0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{63B923B5-B06C-4DB1-B6B7-8CE8C06D6D35}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2015 11:43:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/18/2015 09:26:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 09:07:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 05:30:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Impossible d'initialiser l'application.

Contexte : Application Windows

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Impossible d'initialiser l'objet rassembleur.

Contexte : Application Windows, Catalogue SystemIndex

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Impossible d'initialiser le plug-in dans <Search.TripoliIndexer>.

Contexte : Application Windows, Catalogue SystemIndex

Détails :
Élément introuvable. (0x80070490)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Impossible d'initialiser le plug-in dans <Search.JetPropStore>.

Contexte : Application Windows, Catalogue SystemIndex

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Le service Windows Search ne peut pas charger les informations de la banque de propriétés.

Contexte : Application Windows, Catalogue SystemIndex

Détails :
0x%08x (0xc0041800 - Impossible de lire l'index du contenu. )

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Le service de recherche a détecté des fichiers de données corrompus dans l'index. Le service tentera de corriger automatiquement ce problème en recréant l'index.

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)


System errors:
=============
Error: (05/18/2015 11:43:32 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: i8042prt

Error: (05/18/2015 11:42:41 AM) (Source: HTTP) (EventID: 15016) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (05/18/2015 09:38:15 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Windows Update

Error: (05/18/2015 09:26:37 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: i8042prt

Error: (05/18/2015 09:24:55 AM) (Source: HTTP) (EventID: 15016) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (05/18/2015 09:23:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Search2300001Redémarrer le service

Error: (05/18/2015 09:23:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Cache de police de Windows Presentation Foundation 4.0.0.0201Redémarrer le service

Error: (05/18/2015 09:23:20 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: 1Redémarrer le serviceWindows Search%%1056

Error: (05/18/2015 09:23:20 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (05/18/2015 09:22:50 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Search1300001Redémarrer le service


Microsoft Office Sessions:
=========================
Error: (05/18/2015 11:43:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/18/2015 09:26:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 09:07:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 05:30:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Contexte : Application Windows

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Contexte : Application Windows, Catalogue SystemIndex

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Contexte : Application Windows, Catalogue SystemIndex

Détails :
Élément introuvable. (0x80070490)
Search.TripoliIndexer

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Contexte : Application Windows, Catalogue SystemIndex

Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)
Search.JetPropStore

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Contexte : Application Windows, Catalogue SystemIndex

Détails :
0x%08x (0xc0041800 - Impossible de lire l'index du contenu. )

Error: (05/17/2015 05:28:08 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Détails :
Impossible de lire les métadonnées de l'index du contenu. (0xc0041801)


CodeIntegrity Errors:
===================================
Date: 2015-05-18 16:55:10.514
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:10.423
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:10.331
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:10.241
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:10.116
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:10.022
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:09.931
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:55:09.842
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:13:29.847
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.

Date: 2015-05-18 16:13:29.769
Description: Le module d'intégrité du code ne peut pas vérifier l'intégrité image du fichier \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys car le jeu de hachages d'images par page n'a pas été trouvé sur le système.


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+
Percentage of memory in use: 55%
Total physical RAM: 2046.5 MB
Available physical RAM: 916.15 MB
Total Pagefile: 4996.98 MB
Available Pagefile: 3561.83 MB
Total Virtual: 2047.88 MB
Available Virtual: 1888.97 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:298.09 GB) (Free:143.16 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (HOMEFRONT) (CDROM) (Total:7.59 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 83716B04)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================

merci fish .

voila j'ai bien suivi tes instruction , mais je rencontre un problème sur la dernière opération lorsque je veux lancer le "scan " de FRST , une fenêtre s'ouvre m'indiquant fixlist .txt not found .................

- aussi je n'est pas un fichier FRST exe et fixlist txt mais bien deux fichier bien disting , que je retrouve via la barre de recherche des programmes de window sur le " bureau écran de veille " ne s'affiche en direct que les rapports

Bonjour,
Les deux fichiers FRST et fixlist.txt doivent être au même endroit ( sur le bureau de ton PC).ce ne sont les rapports.
------------
Si tu n'as pas trouvé FRST, retélécharge le de nouveau ( 32 bits) et enregistre le sur le bureau de ton PC.
Ensuite tu termines les procédures demandées de fixlist et Malwarebytes.
J'attends alors deux rapports : Fixlog.txt (procédure de fixlist) et Malwarebytes

@+

bonjour Fish

j'ai tenté x fois de télécharger et de relancer l'opération mais rien n'y fait le fichier dit FRST&fixlist ne s'affiche pas sur le bureau et je reste sur un not found ..... j'amènerais le pc en réparation dans la semaine ...

encore merci de l'aide fourni

https://pjjoint.malekal.com/files.php?read=ZHPDiag_20150520_h5u14u11k14s8

http://cjoint.com/?EEvlxvvQQsu le lien de ZPHFIX

Bonjour,
Il manque le rapport de mbam..

@+

mille excuse .... je n'ais le récupérer dans le presse papier je l'ai en format TXT c'est valable ?

Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 20/05/2015 09:05:03, SYSTEM, PC-DE-USER, Scheduler, Failed, Unable to access update server,
Update, 20/05/2015 09:17:04, SYSTEM, PC-DE-USER, Scheduler, Malware Database, 2015.5.19.4, 2015.5.20.1,
Protection, 20/05/2015 09:17:05, SYSTEM, PC-DE-USER, Protection, Refresh, Starting,
Protection, 20/05/2015 09:17:05, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopping,
Protection, 20/05/2015 09:17:07, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopped,
Protection, 20/05/2015 09:18:28, SYSTEM, PC-DE-USER, Protection, Refresh, Success,
Protection, 20/05/2015 09:18:28, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Starting,
Protection, 20/05/2015 09:18:29, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Started,
Update, 20/05/2015 12:10:03, SYSTEM, PC-DE-USER, Scheduler, Malware Database, 2015.5.20.1, 2015.5.20.2,
Protection, 20/05/2015 12:10:04, SYSTEM, PC-DE-USER, Protection, Refresh, Starting,
Protection, 20/05/2015 12:10:04, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopping,
Protection, 20/05/2015 12:10:04, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopped,
Protection, 20/05/2015 12:10:35, SYSTEM, PC-DE-USER, Protection, Refresh, Success,
Protection, 20/05/2015 12:10:35, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Starting,
Protection, 20/05/2015 12:10:35, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Started,
Update, 20/05/2015 19:11:35, SYSTEM, PC-DE-USER, Scheduler, Malware Database, 2015.5.20.2, 2015.5.20.4,
Protection, 20/05/2015 19:11:35, SYSTEM, PC-DE-USER, Protection, Refresh, Starting,
Protection, 20/05/2015 19:11:35, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopping,
Protection, 20/05/2015 19:11:36, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopped,
Protection, 20/05/2015 19:11:45, SYSTEM, PC-DE-USER, Protection, Refresh, Success,
Protection, 20/05/2015 19:11:46, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Starting,
Protection, 20/05/2015 19:11:48, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Started,
Scan, 20/05/2015 23:13:45, SYSTEM, PC-DE-USER, Context, Départ: 20/05/2015 09:05:01, Durée: 17 minutes 4 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants 1,
Update, 20/05/2015 23:21:51, SYSTEM, PC-DE-USER, Scheduler, Malware Database, 2015.5.20.4, 2015.5.20.5,
Protection, 20/05/2015 23:21:52, SYSTEM, PC-DE-USER, Protection, Refresh, Starting,
Protection, 20/05/2015 23:21:52, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopping,
Protection, 20/05/2015 23:21:53, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Stopped,
Protection, 20/05/2015 23:23:30, SYSTEM, PC-DE-USER, Protection, Refresh, Success,
Protection, 20/05/2015 23:23:31, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Starting,
Protection, 20/05/2015 23:23:32, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Started,
Scan, 20/05/2015 23:27:44, SYSTEM, PC-DE-USER, Manual, Départ: 20/05/2015 23:13:56, Durée: 13 minutes 39 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants de 2,
Protection, 20/05/2015 23:30:40, SYSTEM, PC-DE-USER, Protection, Malware Protection, Starting,
Protection, 20/05/2015 23:30:40, SYSTEM, PC-DE-USER, Protection, Malware Protection, Started,
Protection, 20/05/2015 23:30:40, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Starting,
Protection, 20/05/2015 23:30:54, SYSTEM, PC-DE-USER, Protection, Malicious Website Protection, Started,
Scan, 20/05/2015 23:58:50, SYSTEM, PC-DE-USER, Manual, Départ: 20/05/2015 23:34:16, Durée: 24 minutes 33 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants de 0,

(end)

salut Fish

encore merci de ton aide .

Je vais passer pour un gl..d , mais je n'arrive pas a désactiver mon anti virus qui est pourtant bien basique ( il s'agit de microsoft essential sécurity ) , je suis aller dans paramètres , j'ai désactiver la protections en temps réel mais le pc me bloque le chargement d'archivhost . et lorsque je le lance via internet explorer je ne tombe que sur des liens forum etc .

Autant je suis très manuel et arrive a peut près a tout dans la construction et la réparation "physique" , autan le langage informatique relève pour moi du paranormale ......

enfaite depuis le lancement du logiciel anti malwar ( du 19 mai ) je n'ai plus eu de problème de page de pub etc " tout est revenue a la normal " il me semble

bonsoir voici le rapport :


# DelFix v1.010 - Rapport créé le 24/05/2015 à 21:32:39
# Mis à jour le 26/04/2015 par Xplode
# Nom d'utilisateur : user - PC-DE-USER
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 1 (32 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\FRST
Supprimé : C:\AdwCleaner
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\user\Desktop\FRST.lnk
Supprimé : C:\Users\user\Desktop\ZHPCleaner.lnk
Supprimé : C:\Users\user\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\user\Desktop\ZHPDiag.txt
Supprimé : C:\Users\user\Desktop\ZHPFix.lnk
Supprimé : C:\Users\user\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\user\Downloads\Addition.txt
Supprimé : C:\Users\user\Downloads\adwcleaner_4.204.exe
Supprimé : C:\Users\user\Downloads\FRST(1).exe
Supprimé : C:\Users\user\Downloads\FRST(2).exe
Supprimé : C:\Users\user\Downloads\FRST(3).exe
Supprimé : C:\Users\user\Downloads\FRST(4).exe
Supprimé : C:\Users\user\Downloads\FRST(5).exe
Supprimé : C:\Users\user\Downloads\FRST(6).exe
Supprimé : C:\Users\user\Downloads\FRST.exe
Supprimé : C:\Users\user\Downloads\FRST.txt
Supprimé : C:\Users\user\Downloads\TFC.exe
Supprimé : C:\Users\user\Downloads\ZHPCleaner.exe
Supprimé : C:\Users\user\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Purge de la restauration système ...

Supprimé : RP #949 [Point de contrôle planifié | 05/06/2015 16:11:12]
Supprimé : RP #950 [Windows Update | 05/07/2015 09:35:04]
Supprimé : RP #951 [Windows Update | 05/08/2015 18:02:09]
Supprimé : RP #952 [Point de contrôle planifié | 05/10/2015 08:00:58]
Supprimé : RP #953 [Windows Update | 05/10/2015 08:02:48]
Supprimé : RP #954 [Windows Update | 05/10/2015 17:54:34]
Supprimé : RP #955 [Point de contrôle planifié | 05/11/2015 12:24:41]
Supprimé : RP #956 [Windows Update | 05/11/2015 19:05:02]
Supprimé : RP #957 [Point de contrôle planifié | 05/12/2015 14:20:30]
Supprimé : RP #958 [Windows Update | 05/12/2015 15:36:32]
Supprimé : RP #959 [Point de contrôle planifié | 05/13/2015 12:55:03]
Supprimé : RP #960 [Windows Update | 05/13/2015 18:29:42]
Supprimé : RP #961 [Windows Update | 05/14/2015 01:00:40]
Supprimé : RP #962 [Windows Update | 05/15/2015 05:59:26]
Supprimé : RP #963 [Windows Update | 05/15/2015 12:27:39]
Supprimé : RP #964 [Windows Update | 05/17/2015 06:25:13]
Supprimé : RP #965 [Point de contrôle planifié | 05/17/2015 20:00:55]
Supprimé : RP #966 [Windows Update | 05/18/2015 06:56:48]
Supprimé : RP #967 [Point de contrôle planifié | 05/19/2015 06:25:55]
Supprimé : RP #968 [Windows Update | 05/19/2015 11:55:45]
Supprimé : RP #969 [Point de contrôle planifié | 05/20/2015 08:10:28]
Supprimé : RP #970 [Windows Update | 05/20/2015 16:53:39]
Supprimé : RP #971 [Point de contrôle planifié | 05/21/2015 10:35:30]
Supprimé : RP #972 [Windows Update | 05/22/2015 07:06:13]
Supprimé : RP #973 [Point de contrôle planifié | 05/22/2015 22:00:03]
Supprimé : RP #974 [Windows Update | 05/23/2015 07:41:01]
Supprimé : RP #975 [Windows Update | 05/24/2015 02:12:18]

Nouveau point de restauration créé !

########## - EOF - ##########

Et bien un grand merci pour ton aide et ta patience Fish .

j'éviterais les 01net / télécharger .com etc a l'avenir .

Bonne journée