Programmes et pubs qui reviennent

nicosolo62 Messages postés 166 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
bonjour, j'ai depuis quelques temps des programmes qui s'ouvrent seuls sur mon ordinateur avec comme effet l'arrêt de chrome, mon navigateur, cela fait deux jours de suite que j'utilise adwcleaner, il regle le probleme, mais temporairement uniquement, les programmes reviennent au bout d'une journée,

voici le rapport d'adwcleaner, en espérant que quelqu'un puisse m'aider à résoudre durablement le probleme, par avance, merci

# AdwCleaner v4.206 - Rapport créé le 07/06/2015 à 10:15:26
# Mis à jour le 01/06/2015 par Xplode
# Base de données : 2015-06-05.1 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (x64)
# Nom d'utilisateur : user - ZALMAN
# Exécuté depuis : C:\Users\user\Downloads\AdwCleaner-4.206.exe
# Option : Nettoyer
          • [ Services ] *****


[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem
[#] Service Supprimé : IHProtect Service
[#] Service Supprimé : WindowsMangerProtect
Service Supprimé : webTinstMKTN84
          • [ Fichiers / Dossiers ] *****


Dossier Supprimé : C:\ProgramData\WindowsMangerProtect
Dossier Supprimé : C:\ProgramData\IHProtectUpDate
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
Dossier Supprimé : C:\Program Files (x86)\AnyProtectEx
Dossier Supprimé : C:\Program Files (x86)\globalUpdate
Dossier Supprimé : C:\Program Files (x86)\Crossbrowse
Dossier Supprimé : C:\Program Files (x86)\CinemaPlus-3.2cV06.06
Dossier Supprimé : C:\Program Files (x86)\version43SpeedCheck
Dossier Supprimé : C:\Program Files (x86)\gmsd_fr_610
Dossier Supprimé : C:\users\user\AppData\Local\globalUpdate
Dossier Supprimé : C:\users\user\AppData\Local\SmartWeb
Dossier Supprimé : C:\users\user\AppData\Local\Crossbrowse
Dossier Supprimé : C:\users\user\AppData\Local\gmsd_fr_610
Dossier Supprimé : C:\users\user\AppData\LocalLow\SmartWeb
Dossier Supprimé : C:\users\user\AppData\Roaming\AnyProtectEx
Dossier Supprimé : C:\users\user\AppData\Roaming\istartsurf
Dossier Supprimé : C:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
Dossier Supprimé : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\u1eaz71w.default\Extensions\sweetsearch@gmail.com
Dossier Supprimé : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\u1eaz71w.default\Extensions\searchffv2@gmail.com
Dossier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gfnkhcooecjmgnbcigmnhealjobfoapd
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage-journal
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
Fichier Supprimé : C:\Users\Public\Desktop\crossbrowse.lnk
Fichier Supprimé : C:\Users\Public\Desktop\Youtube.lnk
Fichier Supprimé : C:\Windows\patsearch.bin
Fichier Supprimé : C:\Windows\System32\drivers\webTinstMKTN84.sys
Fichier Supprimé : C:\users\user\AppData\Roaming\WDxEYtJCNZEKJ08O7OFpcl
Fichier Supprimé : C:\users\user\AppData\Roaming\WDxEYtJCNZEKJ08O7OFpcl.exe
Fichier Supprimé : C:\users\user\AppData\Roaming\wIb3bFc2zK
Fichier Supprimé : C:\users\user\AppData\Roaming\wIb3bFc2zK.exe
Fichier Supprimé : C:\users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\crossbrowse.lnk
Fichier Supprimé : C:\users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user Pinned\TaskBar\crossbrowse.lnk
Fichier Supprimé : C:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk
Fichier Supprimé : C:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk
Fichier Supprimé : C:\users\user\Desktop\AnyProtect.lnk
Fichier Supprimé : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\u1eaz71w.default\searchplugins\istartsurf.xml
Fichier Supprimé : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\u1eaz71w.default\user.js
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
Fichier Supprimé : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
          • [ Tâches planifiées ] *****


Tâche Supprimée : APSnotifierPP1
Tâche Supprimée : APSnotifierPP2
Tâche Supprimée : APSnotifierPP3
Tâche Supprimée : Crossbrowse
Tâche Supprimée : globalUpdateUpdateTaskMachineCore
Tâche Supprimée : globalUpdateUpdateTaskMachineUA
Tâche Supprimée : SmartWeb Upgrade Trigger Task
Tâche Supprimée : WDxEYtJCNZEKJ08O7OFpcl
Tâche Supprimée : wIb3bFc2zK
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-1-6
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-1-7
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-10_user
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-3
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-4
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-5
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-5_user
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-6
Tâche Supprimée : 1dcda3f3-bab9-4e56-b1f0-4f9fa61b82c9-7
Tâche Supprimée : SpeedCheck Update
          • [ Raccourcis ] *****


Raccourci Désinfecté : C:\Users\user\Desktop\Google Chrome.lnk
Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk
          • [ Registre ] *****


Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchffv2@gmail.com]
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Clé Supprimée : HKCU\Software\Mozilla\Extends
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SmartWeb]
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\CRSBRWSHTML
Clé Supprimée : HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
Valeur Supprimée : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
Valeur Supprimée : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
Valeur Supprimée : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_fr_610]
Clé Supprimée : HKLM\SOFTWARE\76090931-5073-4d48-b552-1c9aebd2d8ea
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clé Supprimée : HKCU\Software\AnyProtect
Clé Supprimée : HKCU\Software\APN PIP
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\HomeTab
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\simplytech
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\TNT2
Clé Supprimée : HKCU\Software\WajIntEnhance
Clé Supprimée : HKCU\Software\CrossBrowser
Clé Supprimée : HKCU\Software\SearchProtectWS
Clé Supprimée : HKCU\Software\Crossbrowse
Clé Supprimée : HKCU\Software\Linkey
Clé Supprimée : HKCU\Software\YorkNewCin
Clé Supprimée : HKCU\Software\HighDefAction
Clé Supprimée : HKCU\Software\ArenaHD
Clé Supprimée : HKCU\Software\CinemaPlus-3.2cV06.06
Clé Supprimée : HKCU\Software\CinemaPlus-3.2cV06.06-nv
Clé Supprimée : HKCU\Software\CinemaPlus-3.2cV06.06-nv-ie
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartWeb
Clé Supprimée : HKLM\SOFTWARE\AskPartnerNetwork
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\GlobalUpdate
Clé Supprimée : HKLM\SOFTWARE\Iminent
Clé Supprimée : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : HKLM\SOFTWARE\istartsurfSoftware
Clé Supprimée : HKLM\SOFTWARE\SearchProtect
Clé Supprimée : HKLM\SOFTWARE\SupDp
Clé Supprimée : HKLM\SOFTWARE\SupTab
Clé Supprimée : HKLM\SOFTWARE\supWindowsMangerProtect
Clé Supprimée : HKLM\SOFTWARE\Tutorials
Clé Supprimée : HKLM\SOFTWARE\GAMESDESKTOP
Clé Supprimée : HKLM\SOFTWARE\IHProtect
Clé Supprimée : HKLM\SOFTWARE\WajIntEnhance
Clé Supprimée : HKLM\SOFTWARE\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\SpeedBit
Clé Supprimée : HKLM\SOFTWARE\AIM Toolbar
Clé Supprimée : HKLM\SOFTWARE\YorkNewCin
Clé Supprimée : HKLM\SOFTWARE\HighDefAction
Clé Supprimée : HKLM\SOFTWARE\ArenaHD
Clé Supprimée : HKLM\SOFTWARE\FFPluginHp
Clé Supprimée : HKLM\SOFTWARE\CinemaPlus-3.2cV06.06
Clé Supprimée : HKLM\SOFTWARE\CinemaPlus-3.2cV06.06-nv
Clé Supprimée : HKLM\SOFTWARE\CinemaPlus-3.2cV06.06-nv-ie
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AnyProtect
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV06.06
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\73138B2D-50A6-C0E1-DD33-55E75E92E25A
Clé Supprimée : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : [x64] HKLM\SOFTWARE\YorkNewCin
Clé Supprimée : [x64] HKLM\SOFTWARE\HighDefAction
Clé Supprimée : [x64] HKLM\SOFTWARE\ArenaHD
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:50194;hxxps=127.0.0.1:50194
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
          • [ Navigateurs ] *****


-\\ Internet Explorer v11.0.9600.17801

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v36.0.4 (x86 fr)

[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.newtab.url", "hxxp://www.istartsurf.com/newtab/?type=nt&ts=1433663865&z=50a91da98840ab9a8967822gezec6c3q8q1c7b3qag&from=face&uid=MaxtorX6G160E0_G20X110G");
[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.search.searchengine.alias", "istartsurf");
[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.search.searchengine.iconURL", "hxxp://www.istartsurf.com/favicon.ico");
[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.search.searchengine.name", "istartsurf");
[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.search.searchengine.url", "hxxp://www.istartsurf.com/web/?type=ds&ts=1433663865&z=50a91da98840ab9a8967822gezec6c3q8q1c7b3qag&from=face&uid=MaxtorX6G160E0_G20X110G&q={searchTerms}");
[u1eaz71w.default\prefs.js] - Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.istartsurf.com/?type=hp&ts=1433663865&z=50a91da98840ab9a8967822gezec6c3q8q1c7b3qag&from=face&uid=MaxtorX6G160E0_G20X110G");

-\\ Google Chrome v34.0.1847.131

[C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Supprimée [Homepage] : hxxp://www.istartsurf.com/?type=hp&ts=1433663865&z=50a91da98840ab9a8967822gezec6c3q8q1c7b3qag&from=face&uid=MaxtorX6G160E0_G20X110G
[C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Supprimée [Startup_URLs] : hxxp://www.istartsurf.com/?type=hp&ts=1433663865&z=50a91da98840ab9a8967822gezec6c3q8q1c7b3qag&from=face&uid=MaxtorX6G160E0_G20X110G

-\\ Comodo Dragon v

-\\ Chrome Canary v

AdwCleaner[R0].txt - [4035 octets] - [05/02/2014 15:02:55]
AdwCleaner[R10].txt - [23923 octets] - [17/09/2014 14:36:42]
AdwCleaner[R11].txt - [20838 octets] - [24/10/2014 11:06:46]
AdwCleaner[R12].txt - [11659 octets] - [23/12/2014 12:26:53]
AdwCleaner[R13].txt - [8128 octets] - [15/01/2015 16:14:38]
AdwCleaner[R14].txt - [24738 octets] - [02/04/2015 19:45:10]
AdwCleaner[R15].txt - [43279 octets] - [05/06/2015 12:32:10]
AdwCleaner[R16].txt - [74534 octets] - [05/06/2015 12:53:28]
AdwCleaner[R1].txt - [1238 octets] - [05/02/2014 19:24:02]
AdwCleaner[R2].txt - [1295 octets] - [11/03/2014 11:34:52]
AdwCleaner[R3].txt - [2027 octets] - [21/04/2014 20:35:56]
AdwCleaner[R4].txt - [8732 octets] - [05/05/2014 17:19:42]
AdwCleaner[R5].txt - [6264 octets] - [17/05/2014 17:04:59]
AdwCleaner[R6].txt - [8232 octets] - [18/06/2014 13:06:52]
AdwCleaner[R7].txt - [21835 octets] - [01/07/2014 20:37:15]
AdwCleaner[R8].txt - [4030 octets] - [09/07/2014 11:58:51]
AdwCleaner[R9].txt - [15784 octets] - [29/07/2014 16:30:28]
AdwCleaner[S0].txt - [3584 octets] - [05/02/2014 15:04:51]
AdwCleaner[S10].txt - [21371 octets] - [17/09/2014 14:38:01]
AdwCleaner[S11].txt - [20214 octets] - [24/10/2014 11:10:09]
AdwCleaner[S12].txt - [12781 octets] - [23/12/2014 12:28:58]
AdwCleaner[S13].txt - [8534 octets] - [15/01/2015 16:16:36]
AdwCleaner[S14].txt - [22225 octets] - [02/04/2015 19:56:42]
AdwCleaner[S15].txt - [74923 octets] - [05/06/2015 13:28:48]
AdwCleaner[S16].txt - [21655 octets] - [07/06/2015 10:15:26]
AdwCleaner[S1].txt - [1301 octets] - [05/02/2014 19:24:36]
AdwCleaner[S2].txt - [1362 octets] - [11/03/2014 11:35:40]
AdwCleaner[S3].txt - [1978 octets] - [21/04/2014 20:37:23]
AdwCleaner[S4].txt - [7259 octets] - [05/05/2014 17:21:53]
AdwCleaner[S5].txt - [6300 octets] - [17/05/2014 17:05:48]
AdwCleaner[S6].txt - [7187 octets] - [18/06/2014 13:07:50]
AdwCleaner[S7].txt - [18363 octets] - [01/07/2014 20:37:56]
AdwCleaner[S8].txt - [4025 octets] - [09/07/2014 11:59:41]
AdwCleaner[S9].txt - [14371 octets] - [29/07/2014 16:31:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S16].txt - [22259 octets] ##########

3 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0
    1. nicosolo62 Messages postés 166 Statut Membre 77
       
      Je suis en train de le faire, mais l'ordinateur est lent, merci pour ta réponse rapide
      0
  2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    Task: {0766DBC9-B5A0-4284-80CF-FB5A604C6024} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
    Task: {0A6B8E2D-492B-428B-8701-F6CE8ECF3BDD} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-3 No Task File <==== ATTENTION
    Task: {169134D1-B4D2-4987-8584-EA8345AECDB3} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-4 No Task File <==== ATTENTION
    Task: {1A686553-DBB9-46B8-B826-2DD577D28383} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-6 No Task File <==== ATTENTION
    Task: {233E0DE2-3807-4DE3-A791-323EBEC52079} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-7 No Task File <==== ATTENTION
    Task: {2631FD1B-DF01-45F9-8B31-581EC4AC22AB} - \fec3efde-451b-433b-805b-d4e7bfd155d6-3 No Task File <==== ATTENTION
    Task: {2D27699E-190C-4A2F-871A-69BF969C8406} - System32\Tasks\WIN-statsAdmin => C:\Users\user\AppData\Local\Microsoft\WinU\~kgpnkrt.exe <==== ATTENTION
    Task: {2F6F369D-7F33-4807-9037-B814877C394D} - System32\Tasks\gWFhPFdnmGDLp2i => C:\Users\user\AppData\Roaming\xcnqflQ\jSCV2gK.exe [2015-03-25] ( )
    Task: {3EC01E6E-4D01-40CC-B84B-0A73BAFDD4DB} - \fec3efde-451b-433b-805b-d4e7bfd155d6-4 No Task File <==== ATTENTION
    Task: {44E7BBDC-3B74-430E-B36E-511C87383BFB} - System32\Tasks\{2BF05830-84FF-43AE-8691-DACB13B5F7B6} => pcalua.exe -a C:\AMD\Support\12-6-legacy_vista_win7_64_dd_ccc_whql\Setup.exe -d C:\AMD\Support\12-6-legacy_vista_win7_64_dd_ccc_whql
    Task: {5195CBE4-EB68-4048-93AE-BEE8F42C4CB8} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
    Task: {6609A9D0-AF92-4A80-8B2B-42CADDBCF81D} - System32\Tasks\WIN-statsSystem => C:\Users\user\AppData\Local\Microsoft\WinU\~qwmlxmb.exe
    Task: {6D84EC69-0CF8-4D9A-BF47-2209738A80B4} - System32\Tasks\KfoBYMZrc5ES38K => C:\Users\user\AppData\Roaming\SJigBEE\3CTqqlN.exe [2015-05-25] ( )
    Task: {6E183DBD-9DB7-4AD0-80A1-42DC2B566E56} - \fec3efde-451b-433b-805b-d4e7bfd155d6-7 No Task File <==== ATTENTION
    Task: {75C8FA5E-941C-46C7-989D-3EC2DA91F7FD} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2015-06-07] (The Software Group) <==== ATTENTION
    Task: {7701983A-F07C-4958-91D6-39E1AC86699F} - \fec3efde-451b-433b-805b-d4e7bfd155d6-1 No Task File <==== ATTENTION
    Task: {78D7BBC4-2321-4CA0-B47F-7091142DC27F} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
    Task: {7A351E7D-925E-456A-B75A-74C8FD469BD1} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-1 No Task File <==== ATTENTION
    Task: {7B4E0F2A-F3D7-40CA-985A-B07ED7C9E1A8} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
    Task: {85D50402-1013-4F94-BEAD-391B46EF47A0} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\user\AppData\Roaming\~xkteqys.exe
    Task: {931BA18F-0749-482E-9A9E-6BF122427EF1} - System32\Tasks\SoftwareUpdateTaskMachineCore => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2015-06-07] (The Software Group) <==== ATTENTION
    Task: {9C94BEB1-80B5-44CB-8224-E7DCB7F086A0} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-2 No Task File <==== ATTENTION
    Task: {ABEEABE5-75E2-44F8-9C9E-87BFF34E2A0A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-680176068-2888743289-239216100-1000Core => C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-07] (Facebook Inc.)
    Task: {BBDA397E-971C-4072-B40E-6B5D9104FAA7} - System32\Tasks\Xgcslobzh => C:\Program Files\shopperz\Qoreab.bat [2015-06-03] ()
    Task: {BEB7084B-2A86-41E1-8EA7-4574EFA8B643} - System32\Tasks\Feiyer => C:\Program Files\shopperz\Jbceu.bat
    Task: {CD3871EB-660B-4E08-9671-B589CB2DE460} - \SW-Booster-S-5415902620 No Task File <==== ATTENTION
    Task: {D0A20C3E-7A94-4450-87D4-A6E31020BE3B} - System32\Tasks\PenWes => C:\Program Files (x86)\PenWes\dnshelper.exe <==== ATTENTION
    Task: {D4C91F46-574B-4EAB-97DF-17DC41A077A4} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
    Task: {D8EC3787-4278-409B-8F34-EB8BD86C42D1} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-11 No Task File <==== ATTENTION
    Task: {DA2E8D91-8C02-4210-A94D-CA9407076C2B} - \fec3efde-451b-433b-805b-d4e7bfd155d6-5 No Task File <==== ATTENTION
    Task: {E2845060-5ABD-4644-B902-510E891F4A9D} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe [2015-02-17] (SoftBrain Technologies Ltd.) <==== ATTENTION
    Task: {E8094B9B-0F1C-41CE-8ABF-20B4BE22ED53} - System32\Tasks\avaavaevy => C:\Users\user\AppData\Local\avaavaevy\avaavaevy.exe [2015-04-12] () <==== ATTENTION
    Task: {E9A13159-FC12-44C8-B349-766B04029CDF} - \fec3efde-451b-433b-805b-d4e7bfd155d6-2 No Task File <==== ATTENTION
    Task: {F1E463C4-1388-49ED-B470-30942B4A0764} - System32\Tasks\OYI67V18erAqCQz => C:\Users\user\AppData\Roaming\zSytbXp\i2xs7EO.exe [2015-05-25] ( )
    Task: {F6A2A6A3-154C-4062-BA0A-29FD47DC558F} - System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => C:\Users\user\AppData\Roaming\~ickmqvz.exe
    Task: {F8AE6CFC-AEE7-4173-9701-89B09AFBEB59} - \fec3efde-451b-433b-805b-d4e7bfd155d6-6 No Task File <==== ATTENTION
    Task: {F9C647CE-138B-4849-80BD-4710C41B645B} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-5 No Task File <==== ATTENTION
    Task: {FD21ABA1-876A-4342-B6C8-C43E77BFA2A6} - System32\Tasks\avabvbxvh => C:\Users\user\AppData\Local\avabvbxvh\avabvbxvh.exe [2015-05-13] () <==== ATTENTION
    Task: {FF010620-F6FE-4F73-BA11-2AAA724AE5B4} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-5_user No Task File <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
    HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Ernqk.exe [434024 2015-06-03] ()
    HKLM\...\Run: [shopperz64] => C:\Program Files\shopperz\Ernqk64.exe [464744 2015-06-03] ()
    HKLM-x32\...\Run: [fst_fr_269] => [X]
    HKLM-x32\...\Run: [fst_fr_390] => [X]
    HKLM-x32\...\Run: [SmartWeb] => C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
    HKLM-x32\...\Run: [gmsd_fr_610] => C:\Program Files (x86)\gmsd_fr_610\gmsd_fr_610.exe [3984552 2015-06-05] ()
    HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1527808 2015-05-07] (Boxore OU)
    HKLM-x32\...\RunOnce: [upgmsd_fr_610.exe] => C:\Users\user\AppData\Local\gmsd_fr_610\upgmsd_fr_610.exe [3295688 2015-06-05] ()
    HKU\S-1-5-21-680176068-2888743289-239216100-1000\...\Run: [GoogleChromeAutoLaunch_100535F106431A9BDA15E8895BE69FFB] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
    Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-06-07]
    ShortcutTarget: SmartWeb.lnk -> C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
    BHO: shopperz -> {21186475-d4df-43e2-9bba-0b52c00e0e27} -> C:\Program Files\shopperz\Tepuwhae64.dll No File
    BHO: shopperz -> {c3357769-3570-481c-9554-97865d9054e4} -> C:\Program Files\shopperz\Okeirorua64.dll [2015-06-03] ()
    BHO-x32: shopperz -> {21186475-d4df-43e2-9bba-0b52c00e0e27} -> C:\Program Files\shopperz\Tepuwhae.dll No File
    BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-06-03] (Thinknice Co. Limited)
    BHO-x32: shopperz -> {c3357769-3570-481c-9554-97865d9054e4} -> C:\Program Files\shopperz\Okeirorua.dll [2015-06-03] ()
    BHO-x32: Boxore Client -> {EFA7A511-B491-4312-BB35-4586B99E45ED} -> C:\Program Files (x86)\Boxore\Boxore Client\IE\AdRotate32.dll [2015-03-20] (Boxore)
    R2 077f19c1-a039-4690-8ee6-f656f7c1d981; C:\Program Files\shopperz\Hmbtyhc.exe [285544 2015-06-03] ()
    R2 bofimyvu; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\jnsx2A60.tmp [131584 2015-02-19] () [File not signed]
    R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1448808 2015-06-03] ()
    S3 FlashGamesRockstar Update Service; C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarSrv.exe [599000 2015-05-27] ()
    R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125056 2015-06-03] (XTab system)
    CHR Extension: (Omega Buyer) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkmkefpehlolmdiloilglfcojbomaoii [2015-06-03]
    CHR Extension: (Yahoo!) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfkbfjcbkhnmiignagpkiijohkcdkffb [2015-01-08]
    CHR Extension: (mkaaneppndljkmpgdcglnpfagfhjhipc) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkaaneppndljkmpgdcglnpfagfhjhipc [2015-05-29]
    CHR Extension: (Deals4U) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\monpennifgclhopkmgdbcnaagkgdemch [2015-05-29]
    S2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [X]
    S2 Util Edu App; C:\Program Files (x86)\Edu App\bin\utilEduApp.exe [X]
    R2 zutumuwy; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\nsmDC1B.tmpfs [X]
    R2 shopperz Updater; C:\Program Files\shopperz\Gvdenngoe.exe [174440 2015-06-03] ()
    S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2015-06-07] (The Software Group)
    S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2015-06-07] (The Software Group)
    R2 UpdateDustTool; C:\Windows\Provider\UpdaterToolService.exe [111616 2015-04-03] (VIS without Co) [File not signed]
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [695976 2015-06-07] (DTools LIMITED) <==== ATTENTION
    R2 077f19c1-a039-4690-8ee6-f656f7c1d981; C:\Program Files\shopperz\Hmbtyhc.exe [285544 2015-06-03] ()
    R2 bofimyvu; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\jnsx2A60.tmp [131584 2015-02-19] () [File not signed]
    R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1448808 2015-06-03] ()
    S3 FlashGamesRockstar Update Service; C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarSrv.exe [599000 2015-05-27] ()
    R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125056 2015-06-03] (XTab system)
    R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61336 2015-05-31] (Cherimoya Ltd)
    2015-06-07 11:07 - 2015-06-07 11:07 - 00000000 ____D C:\Users\user\SupTab
    2015-06-07 11:05 - 2015-06-07 11:05 - 00002826 _____ C:\Windows\System32\Tasks\APSnotifierPP1
    2015-06-07 11:05 - 2015-06-07 11:05 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP3
    2015-06-07 11:05 - 2015-06-07 11:05 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP2
    2015-06-07 11:05 - 2015-06-07 11:05 - 00001045 _____ C:\Users\user\Desktop\AnyProtect.lnk
    2015-06-07 11:05 - 2015-06-07 11:05 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
    2015-06-07 11:05 - 2015-06-07 11:05 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
    2015-06-07 11:05 - 2015-06-07 11:05 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
    2015-06-07 11:05 - 2015-06-07 11:05 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
    2015-06-07 11:01 - 2015-06-07 11:05 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
    2015-06-07 11:01 - 2015-06-07 11:01 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsoAF63.tmp
    2015-06-07 11:01 - 2015-06-07 11:01 - 00000000 __SHD C:\Users\user\AppData\Roaming\AnyProtectEx
    2015-06-07 11:00 - 2015-06-07 11:00 - 00000000 ____D C:\Program Files (x86)\Edu App
    2015-06-07 10:59 - 2015-06-07 10:59 - 00000000 ____D C:\Users\user\AppData\Local\Boxore
    2015-06-07 10:58 - 2015-06-07 10:58 - 00000000 ____D C:\Program Files (x86)\Boxore
    2015-06-07 10:56 - 2015-06-07 11:00 - 00000000 ____D C:\Users\user\AppData\Local\gmsd_fr_610
    2015-06-07 10:56 - 2015-06-07 10:57 - 00000000 ____D C:\Program Files (x86)\gmsd_fr_610
    2015-06-07 10:56 - 2015-06-07 10:56 - 00000000 ____D C:\ProgramData\IHProtectUpDate
    2015-06-07 10:55 - 2015-06-07 11:00 - 00000914 _____ C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
    2015-06-07 10:55 - 2015-06-07 11:00 - 00000910 _____ C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
    2015-06-07 10:55 - 2015-06-07 10:55 - 00004026 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
    2015-06-07 10:55 - 2015-06-07 10:55 - 00003910 _____ C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
    2015-06-07 10:55 - 2015-06-07 10:55 - 00003658 _____ C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
    2015-06-07 10:55 - 2015-06-07 10:55 - 00003620 _____ C:\Windows\System32\Tasks\Xgcslobzh
    2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Roaming\istartsurf
    2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Local\Software
    2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
    2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Program Files\shopperz
    2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Program Files (x86)\Software
    2015-06-07 10:55 - 2015-05-31 10:37 - 00061336 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
    2015-06-07 10:54 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Local\SmartWeb
    2015-06-07 10:22 - 2015-06-07 10:22 - 00274640 _____ C:\Windows\Minidump\060715-125578-01.dmp
    2015-06-07 10:08 - 2015-06-07 10:07 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nst7582.tmp
    2015-06-07 10:06 - 2015-06-07 10:06 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
    2015-06-07 10:02 - 2015-06-07 10:02 - 00000000 ____D C:\Program Files (x86)\dd23d375-e857-4755-b0b0-43759ba6dff0
    2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\Invité\AppData\Local\Crossbrowse
    2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Crossbrowse
    2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\Administrateur\AppData\Local\Crossbrowse
    2015-06-07 09:59 - 2015-06-07 10:56 - 00000000 ____D C:\Program Files (x86)\MiuiTab
    µ 2015-06-04 16:39 - 2015-06-06 19:06 - 00000000 ____D C:\Users\user\AppData\Local\avabvbyvyc
    2015-06-02 22:22 - 2015-06-02 22:22 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsf1CAC.tmp
    2015-06-02 22:17 - 2015-06-02 22:17 - 00000012 _____ C:\Windows\SysWOW64\0
    2015-06-02 22:17 - 2015-06-02 22:17 - 00000000 ____D C:\Program Files (x86)\Bin
    2015-06-02 22:16 - 2015-06-07 02:24 - 00000000 ____D C:\Windows\Provider32
    2015-06-02 22:12 - 2015-06-07 10:02 - 00000000 ____D C:\Program Files (x86)\506fe46b-bfc9-4a13-b13a-3246a75d1a01
    2015-06-02 22:06 - 2015-06-06 09:53 - 00000000 ____D C:\Users\user\AppData\Local\FlashGamesRockstar
    2015-06-02 22:04 - 2015-06-02 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashGamesRockstar
    2015-06-02 22:04 - 2015-06-02 22:08 - 00000000 ____D C:\Program Files (x86)\FlashGamesRockstar
    2015-06-02 21:58 - 2015-06-02 21:58 - 00003618 _____ C:\Windows\System32\Tasks\Feiyer
    2015-06-02 21:55 - 2015-06-02 21:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results
    2015-06-02 20:43 - 2015-06-02 20:43 - 00532424 _____ C:\Windows\Minidump\060215-51765-01.dmp
    2015-06-02 20:10 - 2015-06-02 20:10 - 00558192 _____ C:\Windows\Minidump\060215-57156-01.dmp
    2015-05-31 11:26 - 2015-05-31 11:26 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsjD702.tmp
    2015-05-31 10:10 - 2015-06-03 05:47 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV30.05
    2015-05-30 10:31 - 2015-05-30 10:31 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsmC43D.tmp
    2015-05-29 15:13 - 2015-05-29 15:13 - 00000000 ____D C:\Program Files (x86)\Deals4U
    2015-05-28 21:46 - 2015-05-28 21:46 - 00000000 ____D C:\Users\user\Documents\Optimizer Pro
    2015-05-28 21:46 - 2015-05-28 21:46 - 00000000 ____D C:\Users\user\AppData\Roaming\Optimizer Pro
    2015-05-28 21:38 - 2015-05-29 19:23 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 3.95
    2015-05-28 17:25 - 2015-05-29 19:23 - 00000000 ____D C:\ProgramData\FXEwAZaDxy
    2015-05-28 16:51 - 2015-05-28 16:51 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsc7D4A.tmp
    2015-05-28 16:15 - 2015-05-29 19:24 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV28.05
    2015-05-26 15:23 - 2015-06-06 11:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2015-05-26 09:40 - 2015-05-29 09:39 - 00003448 _____ C:\Windows\System32\Tasks\avabvbxvh
    2015-05-25 04:08 - 2015-05-25 04:08 - 00003278 _____ C:\Windows\System32\Tasks\KfoBYMZrc5ES38K
    2015-05-25 04:08 - 2015-05-25 04:08 - 00003238 _____ C:\Windows\System32\Tasks\OYI67V18erAqCQz
    2015-05-25 04:08 - 2015-05-25 04:08 - 00000000 ____D C:\Users\user\AppData\Roaming\zSytbXp
    2015-05-25 04:08 - 2015-05-25 04:08 - 00000000 ____D C:\Users\user\AppData\Roaming\SJigBEE
    2015-05-20 12:06 - 2015-06-06 19:06 - 00000000 ____D C:\Users\user\AppData\Local\avabvbxvh
    2015-05-14 03:23 - 2015-05-14 03:26 - 00000000 ____D C:\dc2f987447c4e51e47703ee359
    HKLM-x32\...\Run: [FlashGamesRockstar] => C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarApp.exe [1634264 2015-05-27] ()
    2015-05-25 04:08 - 2015-03-25 05:08 - 00000000 ____D C:\Users\user\AppData\Roaming\xcnqflQ
    2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\DY5rzqUXjAPAe
    2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\MMH2fuQfKR7equWgzMwdh
    2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\SJgj3G2
    2015-05-28 16:51 - 2015-05-28 16:51 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsc7D4A.tmp
    2015-06-02 22:22 - 2015-06-02 22:22 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsf1CAC.tmp
    2015-05-31 11:26 - 2015-05-31 11:26 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsjD702.tmp
    2014-09-16 17:53 - 2014-09-16 17:53 - 0617369 _____ (ClickMeIn Limited) C:\Users\user\AppData\Local\nsk8BDE.tmp
    2015-05-30 10:31 - 2015-05-30 10:31 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsmC43D.tmp
    2014-07-01 18:05 - 2014-07-01 18:05 - 0623672 _____ (Click Me In Limited) C:\Users\user\AppData\Local\nso7A76.tmp
    2015-06-07 11:01 - 2015-06-07 11:01 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsoAF63.tmp
    2015-06-07 10:08 - 2015-06-07 10:07 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nst7582.tmp
    2015-02-19 15:58 - 2015-02-19 15:58 - 0628496 _____ (CMI Limited) C:\Users\user\AppData\Local\nsy6999.tmp

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    puis réinitialise tes navigateurs:
    ==================================
    Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

    0
    1. nicosolo62 Messages postés 166 Statut Membre 77
       
      Fix result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
      Ran by user at 2015-06-07 12:22:07 Run:1
      Running from C:\Users\user\Desktop
      Loaded Profiles: user (Available Profiles: user)
      Boot Mode: Normal
      ==============================================

      fixlist content:

      Task: {0766DBC9-B5A0-4284-80CF-FB5A604C6024} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
      Task: {0A6B8E2D-492B-428B-8701-F6CE8ECF3BDD} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-3 No Task File <==== ATTENTION
      Task: {169134D1-B4D2-4987-8584-EA8345AECDB3} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-4 No Task File <==== ATTENTION
      Task: {1A686553-DBB9-46B8-B826-2DD577D28383} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-6 No Task File <==== ATTENTION
      Task: {233E0DE2-3807-4DE3-A791-323EBEC52079} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-7 No Task File <==== ATTENTION
      Task: {2631FD1B-DF01-45F9-8B31-581EC4AC22AB} - \fec3efde-451b-433b-805b-d4e7bfd155d6-3 No Task File <==== ATTENTION
      Task: {2D27699E-190C-4A2F-871A-69BF969C8406} - System32\Tasks\WIN-statsAdmin => C:\Users\user\AppData\Local\Microsoft\WinU\~kgpnkrt.exe <==== ATTENTION
      Task: {2F6F369D-7F33-4807-9037-B814877C394D} - System32\Tasks\gWFhPFdnmGDLp2i => C:\Users\user\AppData\Roaming\xcnqflQ\jSCV2gK.exe [2015-03-25] ( )
      Task: {3EC01E6E-4D01-40CC-B84B-0A73BAFDD4DB} - \fec3efde-451b-433b-805b-d4e7bfd155d6-4 No Task File <==== ATTENTION
      Task: {44E7BBDC-3B74-430E-B36E-511C87383BFB} - System32\Tasks\{2BF05830-84FF-43AE-8691-DACB13B5F7B6} => pcalua.exe -a C:\AMD\Support\12-6-legacy_vista_win7_64_dd_ccc_whql\Setup.exe -d C:\AMD\Support\12-6-legacy_vista_win7_64_dd_ccc_whql
      Task: {5195CBE4-EB68-4048-93AE-BEE8F42C4CB8} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
      Task: {6609A9D0-AF92-4A80-8B2B-42CADDBCF81D} - System32\Tasks\WIN-statsSystem => C:\Users\user\AppData\Local\Microsoft\WinU\~qwmlxmb.exe
      Task: {6D84EC69-0CF8-4D9A-BF47-2209738A80B4} - System32\Tasks\KfoBYMZrc5ES38K => C:\Users\user\AppData\Roaming\SJigBEE\3CTqqlN.exe [2015-05-25] ( )
      Task: {6E183DBD-9DB7-4AD0-80A1-42DC2B566E56} - \fec3efde-451b-433b-805b-d4e7bfd155d6-7 No Task File <==== ATTENTION
      Task: {75C8FA5E-941C-46C7-989D-3EC2DA91F7FD} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2015-06-07] (The Software Group) <==== ATTENTION
      Task: {7701983A-F07C-4958-91D6-39E1AC86699F} - \fec3efde-451b-433b-805b-d4e7bfd155d6-1 No Task File <==== ATTENTION
      Task: {78D7BBC4-2321-4CA0-B47F-7091142DC27F} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
      Task: {7A351E7D-925E-456A-B75A-74C8FD469BD1} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-1 No Task File <==== ATTENTION
      Task: {7B4E0F2A-F3D7-40CA-985A-B07ED7C9E1A8} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
      Task: {85D50402-1013-4F94-BEAD-391B46EF47A0} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\user\AppData\Roaming\~xkteqys.exe
      Task: {931BA18F-0749-482E-9A9E-6BF122427EF1} - System32\Tasks\SoftwareUpdateTaskMachineCore => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2015-06-07] (The Software Group) <==== ATTENTION
      Task: {9C94BEB1-80B5-44CB-8224-E7DCB7F086A0} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-2 No Task File <==== ATTENTION
      Task: {ABEEABE5-75E2-44F8-9C9E-87BFF34E2A0A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-680176068-2888743289-239216100-1000Core => C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-07] (Facebook Inc.)
      Task: {BBDA397E-971C-4072-B40E-6B5D9104FAA7} - System32\Tasks\Xgcslobzh => C:\Program Files\shopperz\Qoreab.bat [2015-06-03] ()
      Task: {BEB7084B-2A86-41E1-8EA7-4574EFA8B643} - System32\Tasks\Feiyer => C:\Program Files\shopperz\Jbceu.bat
      Task: {CD3871EB-660B-4E08-9671-B589CB2DE460} - \SW-Booster-S-5415902620 No Task File <==== ATTENTION
      Task: {D0A20C3E-7A94-4450-87D4-A6E31020BE3B} - System32\Tasks\PenWes => C:\Program Files (x86)\PenWes\dnshelper.exe <==== ATTENTION
      Task: {D4C91F46-574B-4EAB-97DF-17DC41A077A4} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-06-07] (AnyProtect.com) <==== ATTENTION
      Task: {D8EC3787-4278-409B-8F34-EB8BD86C42D1} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-11 No Task File <==== ATTENTION
      Task: {DA2E8D91-8C02-4210-A94D-CA9407076C2B} - \fec3efde-451b-433b-805b-d4e7bfd155d6-5 No Task File <==== ATTENTION
      Task: {E2845060-5ABD-4644-B902-510E891F4A9D} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe [2015-02-17] (SoftBrain Technologies Ltd.) <==== ATTENTION
      Task: {E8094B9B-0F1C-41CE-8ABF-20B4BE22ED53} - System32\Tasks\avaavaevy => C:\Users\user\AppData\Local\avaavaevy\avaavaevy.exe [2015-04-12] () <==== ATTENTION
      Task: {E9A13159-FC12-44C8-B349-766B04029CDF} - \fec3efde-451b-433b-805b-d4e7bfd155d6-2 No Task File <==== ATTENTION
      Task: {F1E463C4-1388-49ED-B470-30942B4A0764} - System32\Tasks\OYI67V18erAqCQz => C:\Users\user\AppData\Roaming\zSytbXp\i2xs7EO.exe [2015-05-25] ( )
      Task: {F6A2A6A3-154C-4062-BA0A-29FD47DC558F} - System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => C:\Users\user\AppData\Roaming\~ickmqvz.exe
      Task: {F8AE6CFC-AEE7-4173-9701-89B09AFBEB59} - \fec3efde-451b-433b-805b-d4e7bfd155d6-6 No Task File <==== ATTENTION
      Task: {F9C647CE-138B-4849-80BD-4710C41B645B} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-5 No Task File <==== ATTENTION
      Task: {FD21ABA1-876A-4342-B6C8-C43E77BFA2A6} - System32\Tasks\avabvbxvh => C:\Users\user\AppData\Local\avabvbxvh\avabvbxvh.exe [2015-05-13] () <==== ATTENTION
      Task: {FF010620-F6FE-4F73-BA11-2AAA724AE5B4} - \8f4914dd-2e05-48a1-a01c-453ac6d977e3-5_user No Task File <==== ATTENTION
      Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
      Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
      Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
      Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
      Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
      HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Ernqk.exe [434024 2015-06-03] ()
      HKLM\...\Run: [shopperz64] => C:\Program Files\shopperz\Ernqk64.exe [464744 2015-06-03] ()
      HKLM-x32\...\Run: [fst_fr_269] => [X]
      HKLM-x32\...\Run: [fst_fr_390] => [X]
      HKLM-x32\...\Run: [SmartWeb] => C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
      HKLM-x32\...\Run: [gmsd_fr_610] => C:\Program Files (x86)\gmsd_fr_610\gmsd_fr_610.exe [3984552 2015-06-05] ()
      HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1527808 2015-05-07] (Boxore OU)
      HKLM-x32\...\RunOnce: [upgmsd_fr_610.exe] => C:\Users\user\AppData\Local\gmsd_fr_610\upgmsd_fr_610.exe [3295688 2015-06-05] ()
      HKU\S-1-5-21-680176068-2888743289-239216100-1000\...\Run: [GoogleChromeAutoLaunch_100535F106431A9BDA15E8895BE69FFB] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
      Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-06-07]
      ShortcutTarget: SmartWeb.lnk -> C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
      BHO: shopperz -> {21186475-d4df-43e2-9bba-0b52c00e0e27} -> C:\Program Files\shopperz\Tepuwhae64.dll No File
      BHO: shopperz -> {c3357769-3570-481c-9554-97865d9054e4} -> C:\Program Files\shopperz\Okeirorua64.dll [2015-06-03] ()
      BHO-x32: shopperz -> {21186475-d4df-43e2-9bba-0b52c00e0e27} -> C:\Program Files\shopperz\Tepuwhae.dll No File
      BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-06-03] (Thinknice Co. Limited)
      BHO-x32: shopperz -> {c3357769-3570-481c-9554-97865d9054e4} -> C:\Program Files\shopperz\Okeirorua.dll [2015-06-03] ()
      BHO-x32: Boxore Client -> {EFA7A511-B491-4312-BB35-4586B99E45ED} -> C:\Program Files (x86)\Boxore\Boxore Client\IE\AdRotate32.dll [2015-03-20] (Boxore)
      R2 077f19c1-a039-4690-8ee6-f656f7c1d981; C:\Program Files\shopperz\Hmbtyhc.exe [285544 2015-06-03] ()
      R2 bofimyvu; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\jnsx2A60.tmp [131584 2015-02-19] () [File not signed]
      R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1448808 2015-06-03] ()
      S3 FlashGamesRockstar Update Service; C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarSrv.exe [599000 2015-05-27] ()
      R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125056 2015-06-03] (XTab system)
      CHR Extension: (Omega Buyer) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkmkefpehlolmdiloilglfcojbomaoii [2015-06-03]
      CHR Extension: (Yahoo!) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfkbfjcbkhnmiignagpkiijohkcdkffb [2015-01-08]
      CHR Extension: (mkaaneppndljkmpgdcglnpfagfhjhipc) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkaaneppndljkmpgdcglnpfagfhjhipc [2015-05-29]
      CHR Extension: (Deals4U) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\monpennifgclhopkmgdbcnaagkgdemch [2015-05-29]
      S2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [X]
      S2 Util Edu App; C:\Program Files (x86)\Edu App\bin\utilEduApp.exe [X]
      R2 zutumuwy; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\nsmDC1B.tmpfs [X]
      R2 shopperz Updater; C:\Program Files\shopperz\Gvdenngoe.exe [174440 2015-06-03] ()
      S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2015-06-07] (The Software Group)
      S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2015-06-07] (The Software Group)
      R2 UpdateDustTool; C:\Windows\Provider\UpdaterToolService.exe [111616 2015-04-03] (VIS without Co) [File not signed]
      R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [695976 2015-06-07] (DTools LIMITED) <==== ATTENTION
      R2 077f19c1-a039-4690-8ee6-f656f7c1d981; C:\Program Files\shopperz\Hmbtyhc.exe [285544 2015-06-03] ()
      R2 bofimyvu; C:\Users\user\AppData\Roaming\543A5444-1424353353-11D5-B47F-F3B4B54E51D8\jnsx2A60.tmp [131584 2015-02-19] () [File not signed]
      R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1448808 2015-06-03] ()
      S3 FlashGamesRockstar Update Service; C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarSrv.exe [599000 2015-05-27] ()
      R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125056 2015-06-03] (XTab system)
      R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61336 2015-05-31] (Cherimoya Ltd)
      2015-06-07 11:07 - 2015-06-07 11:07 - 00000000 ____D C:\Users\user\SupTab
      2015-06-07 11:05 - 2015-06-07 11:05 - 00002826 _____ C:\Windows\System32\Tasks\APSnotifierPP1
      2015-06-07 11:05 - 2015-06-07 11:05 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP3
      2015-06-07 11:05 - 2015-06-07 11:05 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP2
      2015-06-07 11:05 - 2015-06-07 11:05 - 00001045 _____ C:\Users\user\Desktop\AnyProtect.lnk
      2015-06-07 11:05 - 2015-06-07 11:05 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
      2015-06-07 11:05 - 2015-06-07 11:05 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
      2015-06-07 11:05 - 2015-06-07 11:05 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
      2015-06-07 11:05 - 2015-06-07 11:05 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
      2015-06-07 11:01 - 2015-06-07 11:05 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
      2015-06-07 11:01 - 2015-06-07 11:01 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsoAF63.tmp
      2015-06-07 11:01 - 2015-06-07 11:01 - 00000000 __SHD C:\Users\user\AppData\Roaming\AnyProtectEx
      2015-06-07 11:00 - 2015-06-07 11:00 - 00000000 ____D C:\Program Files (x86)\Edu App
      2015-06-07 10:59 - 2015-06-07 10:59 - 00000000 ____D C:\Users\user\AppData\Local\Boxore
      2015-06-07 10:58 - 2015-06-07 10:58 - 00000000 ____D C:\Program Files (x86)\Boxore
      2015-06-07 10:56 - 2015-06-07 11:00 - 00000000 ____D C:\Users\user\AppData\Local\gmsd_fr_610
      2015-06-07 10:56 - 2015-06-07 10:57 - 00000000 ____D C:\Program Files (x86)\gmsd_fr_610
      2015-06-07 10:56 - 2015-06-07 10:56 - 00000000 ____D C:\ProgramData\IHProtectUpDate
      2015-06-07 10:55 - 2015-06-07 11:00 - 00000914 _____ C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
      2015-06-07 10:55 - 2015-06-07 11:00 - 00000910 _____ C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
      2015-06-07 10:55 - 2015-06-07 10:55 - 00004026 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
      2015-06-07 10:55 - 2015-06-07 10:55 - 00003910 _____ C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
      2015-06-07 10:55 - 2015-06-07 10:55 - 00003658 _____ C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
      2015-06-07 10:55 - 2015-06-07 10:55 - 00003620 _____ C:\Windows\System32\Tasks\Xgcslobzh
      2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Roaming\istartsurf
      2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Local\Software
      2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
      2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Program Files\shopperz
      2015-06-07 10:55 - 2015-06-07 10:55 - 00000000 ____D C:\Program Files (x86)\Software
      2015-06-07 10:55 - 2015-05-31 10:37 - 00061336 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
      2015-06-07 10:54 - 2015-06-07 10:55 - 00000000 ____D C:\Users\user\AppData\Local\SmartWeb
      2015-06-07 10:22 - 2015-06-07 10:22 - 00274640 _____ C:\Windows\Minidump\060715-125578-01.dmp
      2015-06-07 10:08 - 2015-06-07 10:07 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nst7582.tmp
      2015-06-07 10:06 - 2015-06-07 10:06 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
      2015-06-07 10:02 - 2015-06-07 10:02 - 00000000 ____D C:\Program Files (x86)\dd23d375-e857-4755-b0b0-43759ba6dff0
      2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\Invité\AppData\Local\Crossbrowse
      2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Crossbrowse
      2015-06-07 10:00 - 2015-06-07 10:00 - 00000000 ____D C:\Users\Administrateur\AppData\Local\Crossbrowse
      2015-06-07 09:59 - 2015-06-07 10:56 - 00000000 ____D C:\Program Files (x86)\MiuiTab
      µ 2015-06-04 16:39 - 2015-06-06 19:06 - 00000000 ____D C:\Users\user\AppData\Local\avabvbyvyc
      2015-06-02 22:22 - 2015-06-02 22:22 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsf1CAC.tmp
      2015-06-02 22:17 - 2015-06-02 22:17 - 00000012 _____ C:\Windows\SysWOW64\0
      2015-06-02 22:17 - 2015-06-02 22:17 - 00000000 ____D C:\Program Files (x86)\Bin
      2015-06-02 22:16 - 2015-06-07 02:24 - 00000000 ____D C:\Windows\Provider32
      2015-06-02 22:12 - 2015-06-07 10:02 - 00000000 ____D C:\Program Files (x86)\506fe46b-bfc9-4a13-b13a-3246a75d1a01
      2015-06-02 22:06 - 2015-06-06 09:53 - 00000000 ____D C:\Users\user\AppData\Local\FlashGamesRockstar
      2015-06-02 22:04 - 2015-06-02 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashGamesRockstar
      2015-06-02 22:04 - 2015-06-02 22:08 - 00000000 ____D C:\Program Files (x86)\FlashGamesRockstar
      2015-06-02 21:58 - 2015-06-02 21:58 - 00003618 _____ C:\Windows\System32\Tasks\Feiyer
      2015-06-02 21:55 - 2015-06-02 21:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results
      2015-06-02 20:43 - 2015-06-02 20:43 - 00532424 _____ C:\Windows\Minidump\060215-51765-01.dmp
      2015-06-02 20:10 - 2015-06-02 20:10 - 00558192 _____ C:\Windows\Minidump\060215-57156-01.dmp
      2015-05-31 11:26 - 2015-05-31 11:26 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsjD702.tmp
      2015-05-31 10:10 - 2015-06-03 05:47 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV30.05
      2015-05-30 10:31 - 2015-05-30 10:31 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsmC43D.tmp
      2015-05-29 15:13 - 2015-05-29 15:13 - 00000000 ____D C:\Program Files (x86)\Deals4U
      2015-05-28 21:46 - 2015-05-28 21:46 - 00000000 ____D C:\Users\user\Documents\Optimizer Pro
      2015-05-28 21:46 - 2015-05-28 21:46 - 00000000 ____D C:\Users\user\AppData\Roaming\Optimizer Pro
      2015-05-28 21:38 - 2015-05-29 19:23 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 3.95
      2015-05-28 17:25 - 2015-05-29 19:23 - 00000000 ____D C:\ProgramData\FXEwAZaDxy
      2015-05-28 16:51 - 2015-05-28 16:51 - 00613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsc7D4A.tmp
      2015-05-28 16:15 - 2015-05-29 19:24 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV28.05
      2015-05-26 15:23 - 2015-06-06 11:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
      2015-05-26 09:40 - 2015-05-29 09:39 - 00003448 _____ C:\Windows\System32\Tasks\avabvbxvh
      2015-05-25 04:08 - 2015-05-25 04:08 - 00003278 _____ C:\Windows\System32\Tasks\KfoBYMZrc5ES38K
      2015-05-25 04:08 - 2015-05-25 04:08 - 00003238 _____ C:\Windows\System32\Tasks\OYI67V18erAqCQz
      2015-05-25 04:08 - 2015-05-25 04:08 - 00000000 ____D C:\Users\user\AppData\Roaming\zSytbXp
      2015-05-25 04:08 - 2015-05-25 04:08 - 00000000 ____D C:\Users\user\AppData\Roaming\SJigBEE
      2015-05-20 12:06 - 2015-06-06 19:06 - 00000000 ____D C:\Users\user\AppData\Local\avabvbxvh
      2015-05-14 03:23 - 2015-05-14 03:26 - 00000000 ____D C:\dc2f987447c4e51e47703ee359
      HKLM-x32\...\Run: [FlashGamesRockstar] => C:\Program Files (x86)\FlashGamesRockstar\FlashGamesRockstarApp.exe [1634264 2015-05-27] ()
      2015-05-25 04:08 - 2015-03-25 05:08 - 00000000 ____D C:\Users\user\AppData\Roaming\xcnqflQ
      2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\DY5rzqUXjAPAe
      2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\user\AppData\Roaming\MMH2fuQfKR7equWgzMwdh
      2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\user\AppData\Roaming\SJgj3G2
      2015-05-28 16:51 - 2015-05-28 16:51 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsc7D4A.tmp
      2015-06-02 22:22 - 2015-06-02 22:22 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsf1CAC.tmp
      2015-05-31 11:26 - 2015-05-31 11:26 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsjD702.tmp
      2014-09-16 17:53 - 2014-09-16 17:53 - 0617369 _____ (ClickMeIn Limited) C:\Users\user\AppData\Local\nsk8BDE.tmp
      2015-05-30 10:31 - 2015-05-30 10:31 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsmC43D.tmp
      2014-07-01 18:05 - 2014-07-01 18:05 - 0623672 _____ (Click Me In Limited) C:\Users\user\AppData\Local\nso7A76.tmp
      2015-06-07 11:01 - 2015-06-07 11:01 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nsoAF63.tmp
      2015-06-07 10:08 - 2015-06-07 10:07 - 0613255 _____ (CMI Limited) C:\Users\user\AppData\Local\nst7582.tmp
      2015-02-19 15:58 - 2015-02-19 15:58 - 0628496 _____ (CMI Limited) C:\Users\user\AppData\Local\nsy6999.tmp


      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0766DBC9-B5A0-4284-80CF-FB5A604C6024}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0766DBC9-B5A0-4284-80CF-FB5A604C6024}" => key removed successfully
      C:\Windows\System32\Tasks\APSnotifierPP1 => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0A6B8E2D-492B-428B-8701-F6CE8ECF3BDD}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A6B8E2D-492B-428B-8701-F6CE8ECF3BDD}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-3" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{169134D1-B4D2-4987-8584-EA8345AECDB3}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{169134D1-B4D2-4987-8584-EA8345AECDB3}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-4" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1A686553-DBB9-46B8-B826-2DD577D28383}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A686553-DBB9-46B8-B826-2DD577D28383}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-6" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{233E0DE2-3807-4DE3-A791-323EBEC52079}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{233E0DE2-3807-4DE3-A791-323EBEC52079}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-7" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2631FD1B-DF01-45F9-8B31-581EC4AC22AB}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2631FD1B-DF01-45F9-8B31-581EC4AC22AB}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-3" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2D27699E-190C-4A2F-871A-69BF969C8406}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D27699E-190C-4A2F-871A-69BF969C8406}" => key removed successfully
      C:\Windows\System32\Tasks\WIN-statsAdmin => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsAdmin" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2F6F369D-7F33-4807-9037-B814877C394D}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F6F369D-7F33-4807-9037-B814877C394D}" => key removed successfully
      C:\Windows\System32\Tasks\gWFhPFdnmGDLp2i => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\gWFhPFdnmGDLp2i" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3EC01E6E-4D01-40CC-B84B-0A73BAFDD4DB}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3EC01E6E-4D01-40CC-B84B-0A73BAFDD4DB}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-4" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44E7BBDC-3B74-430E-B36E-511C87383BFB}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44E7BBDC-3B74-430E-B36E-511C87383BFB}" => key removed successfully
      C:\Windows\System32\Tasks\{2BF05830-84FF-43AE-8691-DACB13B5F7B6} => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2BF05830-84FF-43AE-8691-DACB13B5F7B6}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5195CBE4-EB68-4048-93AE-BEE8F42C4CB8}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5195CBE4-EB68-4048-93AE-BEE8F42C4CB8}" => key removed successfully
      C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6609A9D0-AF92-4A80-8B2B-42CADDBCF81D}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6609A9D0-AF92-4A80-8B2B-42CADDBCF81D}" => key removed successfully
      C:\Windows\System32\Tasks\WIN-statsSystem => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsSystem" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6D84EC69-0CF8-4D9A-BF47-2209738A80B4}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D84EC69-0CF8-4D9A-BF47-2209738A80B4}" => key removed successfully
      C:\Windows\System32\Tasks\KfoBYMZrc5ES38K => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KfoBYMZrc5ES38K" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E183DBD-9DB7-4AD0-80A1-42DC2B566E56}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E183DBD-9DB7-4AD0-80A1-42DC2B566E56}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-7" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{75C8FA5E-941C-46C7-989D-3EC2DA91F7FD}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75C8FA5E-941C-46C7-989D-3EC2DA91F7FD}" => key removed successfully
      C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SoftwareUpdateTaskMachineUA" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7701983A-F07C-4958-91D6-39E1AC86699F}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7701983A-F07C-4958-91D6-39E1AC86699F}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-1" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{78D7BBC4-2321-4CA0-B47F-7091142DC27F}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78D7BBC4-2321-4CA0-B47F-7091142DC27F}" => key removed successfully
      C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7A351E7D-925E-456A-B75A-74C8FD469BD1}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A351E7D-925E-456A-B75A-74C8FD469BD1}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-1" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7B4E0F2A-F3D7-40CA-985A-B07ED7C9E1A8}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7B4E0F2A-F3D7-40CA-985A-B07ED7C9E1A8}" => key removed successfully
      C:\Windows\System32\Tasks\APSnotifierPP3 => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP3" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{85D50402-1013-4F94-BEAD-391B46EF47A0}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85D50402-1013-4F94-BEAD-391B46EF47A0}" => key removed successfully
      C:\Windows\System32\Tasks\WIN-fdfEfEfAfC => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-fdfEfEfAfC" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{931BA18F-0749-482E-9A9E-6BF122427EF1}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{931BA18F-0749-482E-9A9E-6BF122427EF1}" => key removed successfully
      C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SoftwareUpdateTaskMachineCore" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9C94BEB1-80B5-44CB-8224-E7DCB7F086A0}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C94BEB1-80B5-44CB-8224-E7DCB7F086A0}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-2" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ABEEABE5-75E2-44F8-9C9E-87BFF34E2A0A}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABEEABE5-75E2-44F8-9C9E-87BFF34E2A0A}" => key removed successfully
      C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-680176068-2888743289-239216100-1000Core => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-680176068-2888743289-239216100-1000Core" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BBDA397E-971C-4072-B40E-6B5D9104FAA7}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BBDA397E-971C-4072-B40E-6B5D9104FAA7}" => key removed successfully
      C:\Windows\System32\Tasks\Xgcslobzh => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Xgcslobzh" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BEB7084B-2A86-41E1-8EA7-4574EFA8B643}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEB7084B-2A86-41E1-8EA7-4574EFA8B643}" => key removed successfully
      C:\Windows\System32\Tasks\Feiyer => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Feiyer" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CD3871EB-660B-4E08-9671-B589CB2DE460}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD3871EB-660B-4E08-9671-B589CB2DE460}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SW-Booster-S-5415902620" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0A20C3E-7A94-4450-87D4-A6E31020BE3B}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0A20C3E-7A94-4450-87D4-A6E31020BE3B}" => key removed successfully
      C:\Windows\System32\Tasks\PenWes => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PenWes" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D4C91F46-574B-4EAB-97DF-17DC41A077A4}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D4C91F46-574B-4EAB-97DF-17DC41A077A4}" => key removed successfully
      C:\Windows\System32\Tasks\APSnotifierPP2 => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP2" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D8EC3787-4278-409B-8F34-EB8BD86C42D1}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8EC3787-4278-409B-8F34-EB8BD86C42D1}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-11" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA2E8D91-8C02-4210-A94D-CA9407076C2B}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA2E8D91-8C02-4210-A94D-CA9407076C2B}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-5" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E2845060-5ABD-4644-B902-510E891F4A9D}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2845060-5ABD-4644-B902-510E891F4A9D}" => key removed successfully
      C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartWeb Upgrade Trigger Task" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E8094B9B-0F1C-41CE-8ABF-20B4BE22ED53}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E8094B9B-0F1C-41CE-8ABF-20B4BE22ED53}" => key removed successfully
      C:\Windows\System32\Tasks\avaavaevy => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avaavaevy" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E9A13159-FC12-44C8-B349-766B04029CDF}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9A13159-FC12-44C8-B349-766B04029CDF}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-2" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F1E463C4-1388-49ED-B470-30942B4A0764}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1E463C4-1388-49ED-B470-30942B4A0764}" => key removed successfully
      C:\Windows\System32\Tasks\OYI67V18erAqCQz => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OYI67V18erAqCQz" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F6A2A6A3-154C-4062-BA0A-29FD47DC558F}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6A2A6A3-154C-4062-BA0A-29FD47DC558F}" => key removed successfully
      C:\Windows\System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-GGfIfEGCfEGbGffIfCfEGC" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F8AE6CFC-AEE7-4173-9701-89B09AFBEB59}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F8AE6CFC-AEE7-4173-9701-89B09AFBEB59}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fec3efde-451b-433b-805b-d4e7bfd155d6-6" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F9C647CE-138B-4849-80BD-4710C41B645B}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9C647CE-138B-4849-80BD-4710C41B645B}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-5" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD21ABA1-876A-4342-B6C8-C43E77BFA2A6}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD21ABA1-876A-4342-B6C8-C43E77BFA2A6}" => key removed successfully
      C:\Windows\System32\Tasks\avabvbxvh => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avabvbxvh" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF010620-F6FE-4F73-BA11-2AAA724AE5B4}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF010620-F6FE-4F73-BA11-2AAA724AE5B4}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\8f4914dd-2e05-48a1-a01c-453ac6d977e3-5_user" => key removed successfully
      C:\Windows\Tasks\APSnotifierPP1.job => moved successfully.
      C:\Windows\Tasks\APSnotifierPP2.job => moved successfully.
      C:\Windows\Tasks\APSnotifierPP3.job => moved successfully.
      C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job => moved successfully.
      C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job => moved successfully.
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\shopperz => value removed successfully
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\shopperz64 => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_fr_269 => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_fr_390 => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SmartWeb => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_610 => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Boxore Client => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\upgmsd_fr_610.exe => value removed successfully
      HKU\S-1-5-21-680176068-2888743289-239216100-1000\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_100535F106431A9BDA15E8895BE69FFB => value removed successfully
      C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk => moved successfully.
      C:\Users\user\AppData\Local\SmartWeb\SmartWebHelper.exe => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21186475-d4df-43e2-9bba-0b52c00e0e27}" => key removed successfully
      "HKCR\CLSID\{21186475-d4df-43e2-9bba-0b52c00e0e27}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3357769-3570-481c-9554-97865d9054e4}" => key removed successfully
      "HKCR\CLSID\{c3357769-3570-481c-9554-97865d9054e4}" => key removed successfully
      "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21186475-d4df-43e2-9bba-0b52c00e0e27}" => key removed successfully
      "HKCR\Wow6432Node\CLSID\{21186475-d4df-43e2-9bba-0b52c00e0e27}" => key removed successfully
      "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}" => key removed successfully
      "HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}" => key removed successfully
      "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3357769-3570-481c-9554-97865d9054e4}" => key removed successfully
      "HKCR\Wow6432Node\CLSID\{c3357769-3570-481c-9554-97865d9054e4}" => key removed successfully
      "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EFA7A511-B491-4312-BB35-4586B99E45ED}" => key removed successfully
      "HKCR\Wow6432Node\CLSID\{EFA7A511-B491-4312-BB35-4586B99E45ED}" => key removed successfully
      077f19c1-a039-4690-8ee6-f656f7c1d981 => Service stopped successfully.
      077f19c1-a039-4690-8ee6-f656f7c1d981 => Service removed successfully
      bofimyvu => Service stopped successfully.
      bofimyvu => Service removed successfully
      csrcc => Service stopped successfully.
      csrcc => Service removed successfully
      FlashGamesRockstar Update Service => Service removed successfully
      IHProtect Service => Service stopped successfully.
      IHProtect Service => Service removed successfully
      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkmkefpehlolmdiloilglfcojbomaoii => moved successfully.
      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfkbfjcbkhnmiignagpkiijohkcdkffb => moved successfully.
      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkaaneppndljkmpgdcglnpfagfhjhipc => moved successfully.
      C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\monpennifgclhopkmgdbcnaagkgdemch => moved successfully.
      insvc_1.10.0.14 => Service removed successfully
      Util Edu App => Service removed successfully
      zutumuwy => Unable to stop service.
      zutumuwy => Service removed successfully
      shopperz Updater => Service stopped successfully.
      shopperz Updater => Service removed successfully
      Software_update => Service removed successfully
      Software_update_m => Service removed successfully
      UpdateDustTool => Service stopped successfully.
      UpdateDustTool => Service removed successfully
      WindowsMangerProtect => Service stopped successfully.
      WindowsMangerProtect => Service removed successfully
      077f19c1-a039-4690-8ee6-f656f7c1d981 => Service not found.
      bofimyvu => Service not found.
      csrcc => Service not found.
      FlashGamesRockstar Update Service => Service not found.
      IHProtect Service => Service not found.
      cherimoya => Unable to stop service.
      cherimoya => Service removed successfully
      C:\Users\user\SupTab => moved successfully.
      "C:\Windows\System32\Tasks\APSnotifierPP1" => File/Folder not found.
      "C:\Windows\System32\Tasks\APSnotifierPP3" => File/Folder not found.
      "C:\Windows\System32\Tasks\APSnotifierPP2" => File/Folder not found.
      C:\Users\user\Desktop\AnyProtect.lnk => moved successfully.
      "C:\Windows\Tasks\APSnotifierPP1.job" => File/Folder not found.
      "C:\Windows\Tasks\APSnotifierPP3.job" => File/Folder not found.
      "C:\Windows\Tasks\APSnotifierPP2.job" => File/Folder not found.
      C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup => moved successfully.
      C:\Program Files (x86)\AnyProtectEx => moved successfully.
      C:\Users\user\AppData\Local\nsoAF63.tmp => moved successfully.
      C:\Users\user\AppData\Roaming\AnyProtectEx => moved successfully.
      C:\Program Files (x86)\Edu App => moved successfully.
      C:\Users\user\AppData\Local\Boxore => moved successfully.

      "C:\Program Files (x86)\Boxore" folder move:

      Could not move "C:\Program Files (x86)\Boxore" folder => Scheduled to move on reboot.


      "C:\Users\user\AppData\Local\gmsd_fr_610" folder move:

      Could not move "C:\Users\user\AppData\Local\gmsd_fr_610" folder => Scheduled to move on reboot.


      "C:\Program Files (x86)\gmsd_fr_610" folder move:

      Could not move "C:\Program Files (x86)\gmsd_fr_610" folder => Scheduled to move on reboot.

      C:\ProgramData\IHProtectUpDate => moved successfully.
      "C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job" => File/Folder not found.
      "C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job" => File/Folder not found.
      "C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task" => File/Folder not found.
      "C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA" => File/Folder not found.
      "C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore" => File/Folder not found.
      "C:\Windows\System32\Tasks\Xgcslobzh" => File/Folder not found.
      C:\Users\user\AppData\Roaming\istartsurf => moved successfully.
      C:\Users\user\AppData\Local\Software => moved successfully.
      C:\ProgramData\WindowsMangerProtect => moved successfully.

      "C:\Program Files\shopperz" folder move:

      Could not move "C:\Program Files\shopperz" folder => Scheduled to move on reboot.

      C:\Program Files (x86)\Software => moved successfully.
      C:\Windows\system32\Drivers\cherimoya.sys => moved successfully.

      "C:\Users\user\AppData\Local\SmartWeb" folder move:

      Could not move "C:\Users\user\AppData\Local\SmartWeb" folder => Scheduled to move on reboot.

      C:\Windows\Minidump\060715-125578-01.dmp => moved successfully.
      C:\Users\user\AppData\Local\nst7582.tmp => moved successfully.
      C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf => moved successfully.
      C:\Program Files (x86)\dd23d375-e857-4755-b0b0-43759ba6dff0 => moved successfully.
      C:\Users\Invité\AppData\Local\Crossbrowse => moved successfully.
      C:\Users\HomeGroupUser$\AppData\Local\Crossbrowse => moved successfully.
      C:\Users\Administrateur\AppData\Local\Crossbrowse => moved successfully.
      C:\Program Files (x86)\MiuiTab => moved successfully.
      µ 2015-06-04 16:39 - 2015-06-06 19:06 - 00000000 ____D C:\Users\user\AppData\Local\avabvbyvyc => Error: No automatic fix found for this entry.
      C:\Users\user\AppData\Local\nsf1CAC.tmp => moved successfully.
      C:\Windows\SysWOW64\0 => moved successfully.
      C:\Program Files (x86)\Bin => moved successfully.
      C:\Windows\Provider32 => moved successfully.
      C:\Program Files (x86)\506fe46b-bfc9-4a13-b13a-3246a75d1a01 => moved successfully.
      C:\Users\user\AppData\Local\FlashGamesRockstar => moved successfully.
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashGamesRockstar => moved successfully.
      C:\Program Files (x86)\FlashGamesRockstar => moved successfully.
      "C:\Windows\System32\Tasks\Feiyer" => File/Folder not found.
      C:\Windows\SysWOW64\Number of results => moved successfully.
      C:\Windows\Minidump\060215-51765-01.dmp => moved successfully.
      C:\Windows\Minidump\060215-57156-01.dmp => moved successfully.
      C:\Users\user\AppData\Local\nsjD702.tmp => moved successfully.
      C:\Program Files (x86)\CinemaPlus-3.2cV30.05 => moved successfully.
      C:\Users\user\AppData\Local\nsmC43D.tmp => moved successfully.
      C:\Program Files (x86)\Deals4U => moved successfully.
      C:\Users\user\Documents\Optimizer Pro => moved successfully.
      C:\Users\user\AppData\Roaming\Optimizer Pro => moved successfully.
      C:\Program Files (x86)\Optimizer Pro 3.95 => moved successfully.
      C:\ProgramData\FXEwAZaDxy => moved successfully.
      C:\Users\user\AppData\Local\nsc7D4A.tmp => moved successfully.
      C:\Program Files (x86)\CinemaPlus-3.2cV28.05 => moved successfully.
      C:\Program Files (x86)\Mozilla Firefox => moved successfully.
      "C:\Windows\System32\Tasks\avabvbxvh" => File/Folder not found.
      "C:\Windows\System32\Tasks\KfoBYMZrc5ES38K" => File/Folder not found.
      "C:\Windows\System32\Tasks\OYI67V18erAqCQz" => File/Folder not found.
      C:\Users\user\AppData\Roaming\zSytbXp => moved successfully.
      C:\Users\user\AppData\Roaming\SJigBEE => moved successfully.
      C:\Users\user\AppData\Local\avabvbxvh => moved successfully.
      C:\dc2f987447c4e51e47703ee359 => moved successfully.
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\FlashGamesRockstar => value removed successfully
      C:\Users\user\AppData\Roaming\xcnqflQ => moved successfully.
      C:\Users\user\AppData\Roaming\DY5rzqUXjAPAe => moved successfully.
      C:\Users\user\AppData\Roaming\MMH2fuQfKR7equWgzMwdh => moved successfully.
      C:\Users\user\AppData\Roaming\SJgj3G2 => moved successfully.
      "C:\Users\user\AppData\Local\nsc7D4A.tmp" => File/Folder not found.
      "C:\Users\user\AppData\Local\nsf1CAC.tmp" => File/Folder not found.
      "C:\Users\user\AppData\Local\nsjD702.tmp" => File/Folder not found.
      C:\Users\user\AppData\Local\nsk8BDE.tmp => moved successfully.
      "C:\Users\user\AppData\Local\nsmC43D.tmp" => File/Folder not found.
      C:\Users\user\AppData\Local\nso7A76.tmp => moved successfully.
      "C:\Users\user\AppData\Local\nsoAF63.tmp" => File/Folder not found.
      "C:\Users\user\AppData\Local\nst7582.tmp" => File/Folder not found.
      C:\Users\user\AppData\Local\nsy6999.tmp => moved successfully.

      Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-07 12:32:49)<=

      C:\Program Files (x86)\Boxore => Is moved successfully
      C:\Users\user\AppData\Local\gmsd_fr_610 => Is moved successfully
      C:\Program Files (x86)\gmsd_fr_610 => Is moved successfully
      C:\Program Files\shopperz => Is moved successfully
      C:\Users\user\AppData\Local\SmartWeb => moved successfully

      End of Fixlog 12:32:50

      0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok, voici la suite :

    Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    0
    1. nicosolo62 Messages postés 166 Statut Membre 77
       
      j'ai pas eu de possibilité de" mettre tout en quarantaine", j'ai juste droit à "supprimer sélection" je comprends pas
      0
    3. avion81 Messages postés 28 Statut Membre 2 > nicosolo62 Messages postés 166 Statut Membre
       
      un conseil telecharge AVG !! et apres un logiciel qui fait plains de chose!! AdvancedSystemCare 8)
      0
    4. nicosolo62 Messages postés 166 Statut Membre 77
       
      les éléments en quarantaine, je les supprime?
      0
    5. avion81 Messages postés 28 Statut Membre 2 > nicosolo62 Messages postés 166 Statut Membre
       
      moi je ne suprimerais pas!!car ce truc la ne fait aucune difference, entre ce qui est a suprimer ou pas!!!donc il risque de te manquer des bout de logiciel a la sortie!!
      0

Discussions similaires

Mails supprimés qui reviennent
ostin -
ostin -

3 réponses
Sous-titres qui s'affichent en permanence sur TV LG 43UJ635V UHD
Edie78 -
untel -

15 réponses
Mail supprimé et dans la corbeille revient toujours
MmeKarose58 -
Louisem -

3 réponses
comment enlever le sous titrage sur tv LG 47LN5400
catarinabella -
darda -

13 réponses
télé LG 42LF652V problème de sous titres
astronome1960 -
astronome -

12 réponses