Comment se débarasser de Cinema Plus et Crossbrowse?

Résolu
ISA -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour,
Mon PC est infecté par ces 2 logiciels. Je suis sous W7 édition familiale.
Pouvez-vous m'aider à les supprimer définitivement?
Merci.

6 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0
  2. ISA
     
    # AdwCleaner v3.005 - Rapport créé le 24/06/2015 à 09:26:11
    # Mis à jour le 22/09/2013 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Nom d'utilisateur : Portable Famille - PORTABLEFAMILLE
    # Exécuté depuis : C:\Users\Portable Famille\Downloads\adwcleaner-3.005.exe
    # Option : Nettoyer
            • [ Services ] *****


    Voici le rapport
            • [ Fichiers / Dossiers ] *****


    Fichier Supprimé : C:\Users\PORTAB~1\AppData\Local\Temp\Uninstall.exe
            • [ Raccourcis ] *****
            • [ Registre ] *****


    Clé Supprimée : HKCU\Software\Tutorials
    Clé Supprimée : HKCU\Software\TutoTag
            • [ Navigateurs ] *****


    -\\ Internet Explorer v11.0.9600.17840

    AdwCleaner[R0].txt - [18513 octets] - [28/09/2013 20:40:01]
    AdwCleaner[R10].txt - [2459 octets] - [24/06/2015 08:51:05]
    AdwCleaner[R11].txt - [2295 octets] - [24/06/2015 09:25:42]
    AdwCleaner[R1].txt - [29345 octets] - [20/05/2014 21:56:01]
    AdwCleaner[R2].txt - [1036 octets] - [23/12/2014 02:07:20]
    AdwCleaner[R3].txt - [5851 octets] - [23/06/2015 20:17:43]
    AdwCleaner[R4].txt - [1193 octets] - [23/06/2015 20:26:31]
    AdwCleaner[R5].txt - [1253 octets] - [23/06/2015 20:44:05]
    AdwCleaner[R6].txt - [1792 octets] - [23/06/2015 21:24:49]
    AdwCleaner[R7].txt - [1684 octets] - [23/06/2015 21:50:43]
    AdwCleaner[R8].txt - [2385 octets] - [23/06/2015 22:59:51]
    AdwCleaner[R9].txt - [1882 octets] - [23/06/2015 23:11:25]
    AdwCleaner[S0].txt - [16129 octets] - [28/09/2013 20:40:28]
    AdwCleaner[S1].txt - [25178 octets] - [20/05/2014 21:57:41]
    AdwCleaner[S2].txt - [1053 octets] - [23/12/2014 02:08:25]
    AdwCleaner[S3].txt - [4077 octets] - [23/06/2015 20:18:25]
    AdwCleaner[S4].txt - [1315 octets] - [23/06/2015 20:44:49]
    AdwCleaner[S5].txt - [1607 octets] - [23/06/2015 21:51:16]
    AdwCleaner[S6].txt - [2162 octets] - [23/06/2015 23:00:54]
    AdwCleaner[S7].txt - [1856 octets] - [23/06/2015 23:11:49]
    AdwCleaner[S8].txt - [2323 octets] - [24/06/2015 08:51:43]
    AdwCleaner[S9].txt - [1988 octets] - [24/06/2015 09:26:11]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S9].txt - [2048 octets] ##########
    0
  3. ISA
     
    Voici les liens

    • FRST.txt http://pjjoint.malekal.com/files.php?id=20150624_n9c12l14s14t6
    • Shortcut.txt http://pjjoint.malekal.com/files.php?id=20150624_7v12b9b11f15
    • Additionnal.txt http://pjjoint.malekal.com/files.php?id=20150624_w5d6v8c5b5
    0
  4. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
    HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [gmsd_fr_002010010] => [X]
    HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot
    HKLM-x32\...\Run: [gmsd_fr_005010009] => [X]
    HKLM-x32\...\Run: [OfferBoulevard] => C:\Program Files (x86)\OfferBoulevard\OfferBoulevardW.exe
    HKLM-x32\...\Run: [gmsd_fr_005010011] => C:\Program Files (x86)\gmsd_fr_005010011\gmsd_fr_005010011.exe [3984552 2015-06-23] ()
    HKLM-x32\...\Run: [SmartWeb] => C:\Users\Portable Famille\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
    HKLM-x32\...\RunOnce: [upgmsd_fr_005010011.exe] => C:\Users\Portable Famille\AppData\Local\gmsd_fr_005010011\upgmsd_fr_005010011.exe [3298984 2015-06-23] ()
    HKU\S-1-5-21-1442972477-1472198176-961755032-1002\...\Run: [WindApp] => C:\Users\Portable Famille\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
    HKU\S-1-5-21-1442972477-1472198176-961755032-1002\...\Run: [Selection Tools] => C:\Users\Portable Famille\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe /winstartup
    HKU\S-1-5-21-1442972477-1472198176-961755032-1002\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot
    HKU\S-1-5-21-1442972477-1472198176-961755032-1002\...\Run: [EasySpeedCheck] => C:\Program Files (x86)\Easy Speed Check\easyspeedcheck.exe [195424 2014-12-19] (Probit Software LTD)
    HKU\S-1-5-21-1442972477-1472198176-961755032-1002\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.97\OptProLauncher.exe [148112 2015-06-22] ()
    AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-06-21] (Client Connect LTD)
    AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-06-21] (Client Connect LTD)
    AppInit_DLLs-x32: c:\progra~3\{65c58~1\1173~1.1\nalo.dll => c:\progra~3\{65c58~1\1173~1.1\nalo.dll File not found
    AppInit_DLLs-x32: c:\progra~3\epsand~1\epsand~1.dll => c:\ProgramData\EpsanDrive\EpsanDrive32.dll [628736 2015-06-03] (EpsanDrive)
    Startup: C:\Users\Portable Famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-06-23]
    ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
    Startup: C:\Users\Portable Famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-06-24]
    ShortcutTarget: SmartWeb.lnk -> C:\Users\Portable Famille\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
    ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
    ProxyServer: [.DEFAULT] => http=127.0.0.1:52289;https=127.0.0.1:52289 [Attention - Possible Proxy Malicieux]
    ProxyEnable: [S-1-5-21-1442972477-1472198176-961755032-1002] => Internet Explorer proxy is enabled
    ProxyServer: [S-1-5-21-1442972477-1472198176-961755032-1002] => http=127.0.0.1:52289;https=127.0.0.1:52289 [Attention - Possible Proxy Malicieux]
    R2 24a6f44f; c:\Program Files (x86)\Optimizer Pro 3.97\OptProMon.dll [2988688 2015-06-24] () <==== ATTENTION
    R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3285264 2015-06-21] (Client Connect LTD)
    R2 f063af40; c:\Program Files (x86)\PragmaModulator\PragmaModulator.dll [2624000 2015-06-23] () [File not signed]
    S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-06-24] (globalUpdate) [File not signed] <==== ATTENTION
    S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-06-24] (globalUpdate) [File not signed] <==== ATTENTION
    R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-06-16] (XTab system)
    R2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [278600 2015-04-10] (Infonaut)
    R2 mund; c:\windows\mund.exe [408576 2015-06-23] () [File not signed]
    R2 und; c:\windows\und.exe [417792 2015-06-23] () [File not signed]
    R2 vojoqiti; C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435046296-E111-BB0A-DC0EA11495D9\knsjD5C.tmp [349696 2015-06-24] () [File not signed]
    R2 WInterEnhancer Service; C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560 2015-06-21] () [File not signed]
    R2 WTouxjqFf; C:\ProgramData\oChlHwPwk\WTouxjqFf.exe [2730984 2015-06-24] (Time Lapse Solutions)
    R2 xoperoze; C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435046296-E111-BB0A-DC0EA11495D9\jnszD816.tmp [219136 2015-06-23] () [File not signed]
    R2 zedepory; C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435046296-E111-BB0A-DC0EA11495D9\hnstF2C8.tmp [166912 2015-06-23] () [File not signed]
    S2 WinFixRealTimeProtector; C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe [X]
    R1 innfd_1_10_0_14; C:\Windows\System32\drivers\innfd_1_10_0_14.sys [58224 2015-04-10] (Infonaut)
    R1 {20d6f77b-435b-432b-a683-f9ccaf9e8ca6}Gw64; C:\Windows\System32\drivers\{20d6f77b-435b-432b-a683-f9ccaf9e8ca6}Gw64.sys [48776 2015-06-22] (StdLib)
    R1 {b1007ea9-fe16-43fb-816d-e98a79398757}Gw64; C:\Windows\System32\drivers\{b1007ea9-fe16-43fb-816d-e98a79398757}Gw64.sys [48792 2015-06-22] (StdLib)
    R1 {c57599e1-597d-4396-872f-6d1cf108a5de}Gw64; C:\Windows\System32\drivers\{c57599e1-597d-4396-872f-6d1cf108a5de}Gw64.sys [48776 2015-06-23] (StdLib)
    S1 cherimoya; system32\drivers\cherimoya.sys [X]
    S3 cpuz134; \??\C:\Users\PORTAB~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
    S1 fbrksqdc; \??\C:\Windows\system32\drivers\fbrksqdc.sys [X]
    S1 scfd_1_10_0_16; system32\drivers\scfd_1_10_0_16.sys [X]
    R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
    2015-06-24 10:15 - 2015-06-24 10:16 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Optimizer Pro
    2015-06-24 10:15 - 2015-06-24 10:15 - 00003312 _____ C:\Windows\System32\Tasks\Optimizer Pro Schedule
    2015-06-24 10:15 - 2015-06-24 10:15 - 00000000 ____D C:\Users\Portable Famille\Documents\Optimizer Pro
    2015-06-24 10:10 - 2015-06-24 10:10 - 00001063 _____ C:\Users\Portable Famille\Desktop\Optimizer Pro.lnk
    2015-06-24 10:10 - 2015-06-24 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
    2015-06-24 10:10 - 2015-06-24 10:10 - 00000000 ____D C:\ProgramData\{c51fa257-c181-f175-c51f-fa257c18895f}
    2015-06-24 10:10 - 2015-06-24 10:10 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 3.97
    2015-06-24 10:07 - 2015-06-24 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer
    2015-06-24 10:06 - 2015-06-24 10:07 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer
    2015-06-24 10:06 - 2015-06-24 10:06 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\ZombieNews
    2015-06-24 10:06 - 2015-06-24 10:06 - 00000000 ____D C:\ProgramData\ZombieNews
    2015-06-24 10:06 - 2015-06-24 10:06 - 00000000 ____D C:\ProgramData\oChlHwPwk
    2015-06-24 10:06 - 2015-06-24 10:06 - 00000000 ____D C:\Program Files (x86)\Wajam
    2015-06-24 10:05 - 2015-06-24 10:11 - 00000000 ____D C:\Program Files (x86)\SearchProtect
    2015-06-24 10:05 - 2015-06-24 10:05 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\SearchProtect
    2015-06-24 09:24 - 2015-06-24 09:59 - 00000000 ____D C:\Program Files (x86)\gmsd_fr_005010011
    2015-06-24 09:24 - 2015-06-24 09:24 - 00000000 ____D C:\Program Files (x86)\Infonaut_1.10.0.14
    2015-06-24 08:53 - 2015-06-24 09:56 - 00001433 _____ C:\Users\Portable Famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-06-24 08:46 - 2015-06-24 08:46 - 00002084 _____ C:\Users\Portable Famille\Desktop\Continue GamesDesktop Uninstaller.lnk
    2015-06-24 08:44 - 2015-06-24 08:44 - 00000000 ____D C:\Program Files (x86)\globalUpdate
    2015-06-24 08:43 - 2015-06-24 08:43 - 00002356 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
    2015-06-23 22:44 - 2015-06-24 09:56 - 00002468 _____ C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5_user.job
    2015-06-23 22:44 - 2015-06-24 09:56 - 00002468 _____ C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5.job
    2015-06-23 22:44 - 2015-06-24 08:44 - 00005498 _____ C:\Windows\System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5
    2015-06-23 22:43 - 2015-06-24 09:56 - 00003496 _____ C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7.job
    2015-06-23 22:43 - 2015-06-24 09:56 - 00003160 _____ C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6.job
    2015-06-23 22:43 - 2015-06-24 09:56 - 00002134 _____ C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-10_user.job
    2015-06-23 22:43 - 2015-06-24 08:44 - 00006526 _____ C:\Windows\System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7
    2015-06-23 22:43 - 2015-06-24 08:44 - 00006188 _____ C:\Windows\System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6
    2015-06-23 22:43 - 2015-06-23 22:44 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV23.06
    2015-06-23 22:41 - 2015-06-24 09:56 - 00001078 _____ C:\Windows\Tasks\Crossbrowse.job
    2015-06-23 22:41 - 2015-06-24 08:44 - 00004140 _____ C:\Windows\System32\Tasks\Crossbrowse
    2015-06-23 22:41 - 2015-06-23 22:41 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\Crossbrowse
    2015-06-23 22:24 - 2015-06-23 22:24 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
    2015-06-23 21:33 - 2015-06-23 21:33 - 00000000 _____ C:\Users\Portable Famille\AppData\Local\Temp.dat
    2015-06-23 21:18 - 2015-06-24 10:05 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\gmsd_fr_005010011
    2015-06-23 17:31 - 2015-06-23 17:31 - 00613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nshF6.tmp
    2015-06-23 17:30 - 2015-06-23 17:30 - 00003360 _____ C:\Windows\System32\Tasks\ASP
    2015-06-23 17:29 - 2015-06-23 17:29 - 00000000 ____D C:\Program Files (x86)\Linkey
    2015-06-23 16:21 - 2015-06-23 16:24 - 00004020 _____ C:\Windows\System32\Tasks\LaunchPreSignup
    2015-06-23 16:20 - 2015-06-23 16:20 - 00000000 ____D C:\Program Files (x86)\Simple for You
    2015-06-23 16:10 - 2015-06-23 16:10 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\ICSharpCode.net
    2015-06-23 16:03 - 2015-06-22 18:51 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{b1007ea9-fe16-43fb-816d-e98a79398757}Gw64.sys
    2015-06-23 16:02 - 2015-06-23 16:20 - 00003694 _____ C:\Windows\System32\Tasks\Play Now Radio
    2015-06-23 15:57 - 2015-06-23 15:57 - 00613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsy46DE.tmp
    2015-06-23 15:55 - 2015-06-23 15:55 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435067734-E111-BB0A-DC0EA11495D9
    2015-06-23 15:53 - 2015-06-24 09:24 - 00004092 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
    2015-06-23 15:23 - 2015-06-23 05:51 - 00048776 _____ (StdLib) C:\Windows\system32\Drivers\{c57599e1-597d-4396-872f-6d1cf108a5de}Gw64.sys
    2015-06-23 15:22 - 2015-06-23 15:22 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\One System Care
    2015-06-23 15:22 - 2015-06-23 15:22 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-06-23 14:35 - 2015-06-23 14:35 - 00000000 ____D C:\ProgramData\53c44d4400001018
    2015-06-23 14:16 - 2015-06-23 14:16 - 00613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsd355A.tmp
    2015-06-23 14:16 - 2015-06-23 14:16 - 00003330 _____ C:\Windows\System32\Tasks\Easy Speed PC Schedule
    2015-06-23 14:16 - 2015-06-23 14:16 - 00000000 ____D C:\Users\Portable Famille\Documents\Easy Speed PC
    2015-06-23 14:16 - 2015-06-23 14:16 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Easy Speed PC
    2015-06-23 14:16 - 2015-06-23 14:16 - 00000000 ____D C:\Program Files (x86)\Easy Speed Check
    2015-06-23 14:15 - 2015-06-23 14:15 - 00000000 ____D C:\Program Files (x86)\Probit Software
    2015-06-23 13:49 - 2015-06-23 13:49 - 00000000 ____D C:\Program Files (x86)\PragmaModulator
    2015-06-23 13:46 - 2015-06-23 13:47 - 00000000 ____D C:\ProgramData\3864872266581242478
    2015-06-23 13:45 - 2015-06-24 08:43 - 00000354 _____ C:\Windows\Tasks\Bidaily Synchronize Task[973b].job
    2015-06-23 13:45 - 2015-06-23 20:13 - 00000000 ____D C:\ProgramData\{cd92cc24-bf34-b865-cd92-2cc24bf33092}
    2015-06-23 13:45 - 2015-06-23 13:45 - 00003288 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[973b]
    2015-06-23 13:28 - 2015-06-23 20:19 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
    2015-06-23 13:28 - 2015-06-23 20:19 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
    2015-06-23 13:28 - 2015-06-23 17:52 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
    2015-06-23 13:28 - 2015-06-23 17:32 - 00002850 _____ C:\Windows\System32\Tasks\APSnotifierPP1
    2015-06-23 13:28 - 2015-06-23 17:32 - 00002848 _____ C:\Windows\System32\Tasks\APSnotifierPP3
    2015-06-23 13:28 - 2015-06-23 17:32 - 00002848 _____ C:\Windows\System32\Tasks\APSnotifierPP2
    2015-06-23 13:27 - 2015-06-23 16:05 - 00000000 ____D C:\Users\Portable Famille\SupTab
    2015-06-23 13:27 - 2015-06-23 13:27 - 00613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsv2736.tmp
    2015-06-23 13:27 - 2015-06-23 13:27 - 00000000 __SHD C:\Users\Portable Famille\AppData\Roaming\AnyProtectEx
    2015-06-23 13:26 - 2015-06-23 13:26 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\Windesk_Winsearch
    2015-06-23 13:24 - 2015-06-23 15:57 - 00000000 ____D C:\Users\Public\Documents\GOOBZO
    2015-06-23 13:24 - 2015-06-23 13:24 - 00001110 _____ C:\Users\UpdatusUser\Desktop\YouTube Accelerator.lnk
    2015-06-23 13:24 - 2015-06-23 13:24 - 00001110 _____ C:\Users\Famille\Desktop\YouTube Accelerator.lnk
    2015-06-23 13:22 - 2015-06-23 13:22 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\SysWOW64\AniGIF.ocx [Pays US - 31.170.163.238]
    2015-06-23 13:20 - 2015-06-23 13:20 - 00002212 _____ C:\Users\UpdatusUser\Desktop\AppsHat.lnk
    2015-06-23 13:20 - 2015-06-23 13:20 - 00002212 _____ C:\Users\Famille\Desktop\AppsHat.lnk
    2015-06-23 13:14 - 2015-06-23 16:00 - 00000000 ____D C:\Program Files\shopperz
    2015-06-23 13:14 - 2015-06-23 15:53 - 00000045 _____ C:\user.js
    2015-06-23 13:14 - 2015-06-23 13:20 - 00000000 ____D C:\Program Files (x86)\MiuiTab
    2015-06-23 13:14 - 2015-06-23 13:14 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
    2015-06-23 13:14 - 2015-06-23 13:14 - 00000000 ____D C:\ProgramData\IHProtectUpDate
    2015-06-23 13:14 - 2015-06-23 13:14 - 00000000 _____ C:\Windows\prleth.sys
    2015-06-23 13:14 - 2015-06-23 13:14 - 00000000 _____ C:\Windows\hgfs.sys
    2015-06-23 13:13 - 2015-06-24 09:24 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\SmartWeb
    2015-06-23 12:38 - 2015-06-22 16:48 - 00048776 _____ (StdLib) C:\Windows\system32\Drivers\{20d6f77b-435b-432b-a683-f9ccaf9e8ca6}Gw64.sys
    2015-06-23 12:30 - 2015-06-24 09:30 - 00000320 _____ C:\Windows\Tasks\Run_dregol.job
    2015-06-23 12:30 - 2015-06-23 12:30 - 00003296 _____ C:\Windows\System32\Tasks\Run_dregol
    2015-06-23 12:29 - 2015-06-23 16:29 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Nico Mak Computing
    2015-06-23 12:28 - 2015-06-23 15:30 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\StormFall
    2015-06-23 12:28 - 2015-06-23 12:28 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\StormFall
    2015-06-23 11:14 - 2015-06-23 11:14 - 00000000 ____D C:\Program Files (x86)\predm
    2015-06-23 11:11 - 2015-06-23 11:11 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435050696-E111-BB0A-DC0EA11495D9
    2015-06-23 11:07 - 2015-06-23 11:07 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435050442-E111-BB0A-DC0EA11495D9
    2015-06-23 10:42 - 2015-06-23 10:45 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\BrowserHelper
    2015-06-23 10:42 - 2015-06-23 10:42 - 00003758 _____ C:\Windows\System32\Tasks\SMupdate1
    2015-06-23 10:41 - 2015-06-23 10:41 - 00000000 ____D C:\Users\Public\Documents\ShopperPro
    2015-06-23 10:40 - 2015-06-24 09:56 - 00001382 _____ C:\Windows\Tasks\HVFGTX.job
    2015-06-23 10:40 - 2015-06-23 10:40 - 02052096 _____ (Com NotificationV25.03) C:\Users\Portable Famille\AppData\Roaming\HVFGTX.exe
    2015-06-23 10:40 - 2015-06-23 10:40 - 00004444 _____ C:\Windows\System32\Tasks\HVFGTX
    2015-06-23 10:40 - 2015-06-23 10:40 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\CrashRpt
    2015-06-23 10:39 - 2015-06-24 10:10 - 00003296 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6]
    2015-06-23 10:39 - 2015-06-24 10:10 - 00000362 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job
    2015-06-23 10:39 - 2015-06-23 16:39 - 00000000 ____D C:\ProgramData\{cc2cdb1e-c7d1-18b0-cc2c-cdb1ec7d6c7b}
    2015-06-23 10:28 - 2015-06-24 09:56 - 00000358 _____ C:\Windows\Tasks\VQLLDDHK1.job
    2015-06-23 10:28 - 2015-06-23 16:22 - 00000000 ____D C:\ProgramData\EpsanDrive
    2015-06-23 10:28 - 2015-06-23 10:28 - 00003616 _____ C:\Windows\System32\Tasks\XLQDOZ
    2015-06-23 10:28 - 2015-06-23 10:28 - 00002880 _____ C:\Windows\System32\Tasks\VQLLDDHK1
    2015-06-23 10:28 - 2015-06-23 10:28 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Opera Software
    2015-06-23 10:28 - 2015-06-23 10:28 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\Opera Software
    2015-06-23 10:28 - 2015-06-23 10:28 - 00000000 ____D C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066
    2015-06-23 10:28 - 2015-06-23 10:28 - 00000000 ____D C:\ProgramData\2fc7ad4981e44e5e9cd938c744ee5bc0
    2015-06-23 10:27 - 2015-06-23 14:04 - 00000000 ____D C:\Program Files (x86)\Opera
    2015-06-23 10:27 - 2015-06-23 10:27 - 00003882 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1435048077
    2015-06-23 10:26 - 2015-06-23 16:21 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\Store
    2015-06-23 10:26 - 2015-06-23 16:03 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\WTools
    2015-06-23 10:26 - 2015-06-23 10:26 - 00000078 _____ C:\Users\Portable Famille\AppData\Roaming\WindApp.installation.log
    2015-06-23 10:26 - 2015-06-23 10:26 - 00000078 _____ C:\Users\Portable Famille\AppData\Roaming\Selection Tools.installation.log
    2015-06-23 10:25 - 2015-06-23 10:26 - 00001294 _____ C:\Users\Portable Famille\AppData\Roaming\Bubble Dock.boostrap.log
    2015-06-23 10:25 - 2015-06-23 10:25 - 00000097 _____ C:\Users\Portable Famille\AppData\Roaming\WindApp.boostrap.log
    2015-06-23 10:21 - 2015-06-23 10:21 - 00003218 _____ C:\Windows\System32\Tasks\{4B60CBB4-6357-49B8-8F19-90CE78EA7040}
    2015-06-23 10:21 - 2015-06-23 10:21 - 00003210 _____ C:\Windows\System32\Tasks\Run_Bobby_Browser
    2015-06-23 10:15 - 2015-06-23 10:15 - 00003110 _____ C:\Windows\System32\Tasks\sol3007
    2015-06-23 10:15 - 2015-05-24 09:24 - 00341040 _____ (Abengine) C:\Windows\SysWOW64\abengine.dll
    2015-06-23 10:10 - 2015-06-24 10:11 - 00003440 _____ C:\Windows\System32\Tasks\Sonuujewli
    2015-06-23 10:10 - 2015-06-23 10:10 - 00000000 ____D C:\ProgramData\Sonuujewli
    2015-06-23 10:08 - 2015-06-24 09:56 - 00000992 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-06-23 10:08 - 2015-06-24 09:56 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
    2015-06-23 10:08 - 2015-06-24 08:49 - 00000996 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-06-23 10:08 - 2015-06-24 08:44 - 00003994 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
    2015-06-23 10:08 - 2015-06-24 08:44 - 00003740 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
    2015-06-23 10:08 - 2015-06-23 10:08 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\globalUpdate
    2015-06-23 10:02 - 2015-06-24 10:02 - 00000362 _____ C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job
    2015-06-23 10:02 - 2015-06-23 10:02 - 00003296 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7]
    2015-06-23 10:01 - 2015-06-23 19:04 - 00000000 ___HD C:\ProgramData\und
    2015-06-23 10:01 - 2015-06-23 16:02 - 00000000 ____D C:\ProgramData\{02a44ae6-5c68-4f45-02a4-44ae65c62b99}
    2015-06-23 10:01 - 2015-06-23 13:46 - 00000000 ____D C:\Users\Portable Famille\AppData\Local\D5F33F93-1435053708-E111-BB0A-DC0EA11495D9
    2015-06-23 10:00 - 2015-06-23 10:00 - 00004312 _____ C:\Windows\System32\Tasks\WinFixUpdater
    2015-06-23 09:58 - 2015-06-24 08:51 - 00000000 ____D C:\Users\Portable Famille\AppData\Roaming\D5F33F93-1435046296-E111-BB0A-DC0EA11495D9
    2015-06-23 09:58 - 2015-06-23 17:45 - 00000165 _____ C:\Windows\Reimage.ini
    2015-06-23 09:58 - 2015-06-23 10:00 - 00000072 _____ C:\Windows\winfix.ini
    2015-06-23 09:58 - 2015-06-23 09:58 - 00631808 _____ C:\Windows\und.dat
    2015-06-23 09:58 - 2015-06-23 09:58 - 00417792 _____ C:\Windows\und.exe
    2015-06-23 09:58 - 2015-06-23 09:58 - 00408576 _____ C:\Windows\mund.exe
    2015-06-23 09:58 - 2015-06-23 09:58 - 00000983 _____ C:\Users\UpdatusUser\Desktop\PepperZip.lnk
    2015-06-23 09:58 - 2015-06-23 09:58 - 00000983 _____ C:\Users\Famille\Desktop\PepperZip.lnk
    2015-06-23 09:58 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
    2015-06-23 09:57 - 2015-06-23 11:12 - 00000000 ____D C:\Program Files (x86)\ControlThis Parental Control
    2015-06-23 10:25 - 2015-06-23 10:26 - 0001294 _____ () C:\Users\Portable Famille\AppData\Roaming\Bubble Dock.boostrap.log
    2013-11-24 09:45 - 2015-06-23 10:26 - 0050348 _____ () C:\Users\Portable Famille\AppData\Roaming\Bubble Dock.installation.log
    2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Portable Famille\AppData\Roaming\HVFGTX
    2015-06-23 10:40 - 2015-06-23 10:40 - 2052096 _____ (Com NotificationV25.03) C:\Users\Portable Famille\AppData\Roaming\HVFGTX.exe
    2015-06-23 10:26 - 2015-06-23 10:26 - 0000078 _____ () C:\Users\Portable Famille\AppData\Roaming\Selection Tools.installation.log
    2014-05-08 10:26 - 2015-06-23 14:30 - 0000123 _____ () C:\Users\Portable Famille\AppData\Roaming\WB.CFG
    2015-06-23 10:25 - 2015-06-23 10:25 - 0000097 _____ () C:\Users\Portable Famille\AppData\Roaming\WindApp.boostrap.log
    2015-06-23 10:26 - 2015-06-23 10:26 - 0000078 _____ () C:\Users\Portable Famille\AppData\Roaming\WindApp.installation.log
    2013-11-24 20:38 - 2013-11-24 20:38 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~jkmkxfs.exe
    2014-02-20 00:16 - 2014-02-20 00:16 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~ljromzq.exe
    2013-11-24 20:58 - 2013-11-24 20:58 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~noiylqi.exe
    2013-11-24 09:43 - 2013-11-24 09:43 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~vadrymj.exe
    2013-11-24 21:29 - 2013-11-24 21:29 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~ybikwcs.exe
    2013-11-24 09:42 - 2013-11-24 09:42 - 0493272 _____ () C:\Users\Portable Famille\AppData\Roaming\~zrbckco.exe
    2014-10-18 11:51 - 2014-10-18 11:51 - 0004608 _____ () C:\Users\Portable Famille\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2013-04-08 20:49 - 2013-04-08 20:49 - 0004096 ____H () C:\Users\Portable Famille\AppData\Local\keyfile3.drm
    2015-06-23 14:16 - 2015-06-23 14:16 - 0613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsd355A.tmp
    2015-06-23 17:31 - 2015-06-23 17:31 - 0613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nshF6.tmp
    2015-06-23 13:27 - 2015-06-23 13:27 - 0613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsv2736.tmp
    2015-06-23 15:57 - 2015-06-23 15:57 - 0613255 _____ (CMI Limited) C:\Users\Portable Famille\AppData\Local\nsy46DE.tmp
    2013-01-10 22:51 - 2013-01-10 22:51 - 0000017 _____ () C:\Users\Portable Famille\AppData\Local\resmon.resmoncfg
    Task: {12192013-B80A-447D-AA8E-1E71A8C72711} - System32\Tasks\WinFixUpdater => C:\Program Files\WinFix\WinFix Protector\WinFixGuard.exe <==== ATTENTION
    Task: {1693947A-7A71-4254-9144-3C9D96B08079} - System32\Tasks\Opera scheduled Autoupdate 1435048077 => C:\Program Files (x86)\Opera\launcher.exe
    Task: {1C0C6616-7177-49AC-B5D4-976E651521C5} - System32\Tasks\sol3007 => C:\PROGRA~2\FASTSE~1\sol3007.exe
    Task: {21889191-6167-44FC-9E8F-3C24B1ABA746} - System32\Tasks\VQLLDDHK1 => C:\ProgramData\EpsanDrive\EpsanDrive.exe <==== ATTENTION
    Task: {37430EA8-B9DB-429E-A3B9-B894AF490827} - System32\Tasks\XLQDOZ => C:\ProgramData\2fc7ad4981e44e5e9cd938c744ee5bc0\2fc7ad4981e44e5e9cd938c744ee5bc0.exe [2015-06-03] () <==== ATTENTION
    Task: {3D9BB146-608E-4D5E-AEDB-75FF0BB8B365} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
    Task: {3E001DD1-7331-48A4-9CA0-D321B884C76F} - \PriceMeterLiveUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
    Task: {3F5F8924-E1AD-4FE2-961A-B4003DB2F7B0} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: {437978CD-0A4B-4911-BFD2-BC6B19B5F398} - System32\Tasks\HVFGTX => C:\Users\Portable Famille\AppData\Roaming\HVFGTX.exe [2015-06-23] (Com NotificationV25.03) <==== ATTENTION
    Task: {4F5FE030-1003-42B0-975B-232AFD28E8F4} - System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7.exe [2015-06-24] (Cinema PlusV23.06) <==== ATTENTION
    Task: {55EE51A8-878E-4456-97CA-AE15A1F5E41F} - System32\Tasks\{4B60CBB4-6357-49B8-8F19-90CE78EA7040} => pcalua.exe -a "C:\Users\Portable Famille\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=slbnew
    Task: {5A3025A1-FB22-4925-9160-7E890885109F} - System32\Tasks\Run_dregol => C:\Users\PORTAB~1\AppData\Roaming\RUN_DR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
    Task: {5ED519DB-057E-4EA2-9AC4-8C9661F23E15} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\Portable Famille\AppData\Local\SmartWeb\SmartWebHelper.exe [2015-02-17] (SoftBrain Technologies Ltd.) <==== ATTENTION
    Task: {61F8089F-D6C5-4666-899D-5266E53BC3A4} - System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-5.exe [2015-06-24] (Cinema PlusV23.06) <==== ATTENTION
    Task: {657A5E05-8785-436F-8172-1E32560908A5} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-06-24] (globalUpdate) <==== ATTENTION
    Task: {659068A4-1E59-4624-8175-FFF6AD0E0D54} - \pricemeterwatcher No Task File <==== ATTENTION
    Task: {68B3BA0D-3AE4-466A-BAEE-E61613CFC1A2} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
    Task: {6C3D7D85-69FC-42E0-9341-D716A3809CDF} - System32\Tasks\Bidaily Synchronize Task[74c7] => c:\programdata\{02a44ae6-5c68-4f45-02a4-44ae65c62b99}\hqghumeaylnlf.exe [2014-06-23] (Super PC Tools Ltd) <==== ATTENTION
    Task: {74E9DF32-23EE-4DAE-92D8-9DD13E200412} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: {790EF566-4187-4294-9C0E-C42F7F20A21A} - \PriceMeterLiveUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
    Task: {84C24450-2871-4E1E-AF28-A08A78EE0550} - System32\Tasks\Play Now Radio => C:\Users\Portable <==== ATTENTION
    Task: {8B2DA7C6-7469-4D05-98B6-E5B7CA904A55} - System32\Tasks\{23F645AD-22C2-493D-A9C6-CCA16FAAA16A} => pcalua.exe -a C:\Windows\SysWOW64\ISUSPM.cpl -c Software Updates
    Task: {8B86B73D-14E6-49ED-A502-E760AEA693CB} - \pricemeterdownloader No Task File <==== ATTENTION
    Task: {8E69398A-C92E-4998-B11B-8E6B91BA8757} - System32\Tasks\Run_Bobby_Browser => C:\Users\Portable Famille\AppData\Local\BoBrowser\Application\bobrowser.exe <==== ATTENTION
    Task: {924273D5-4647-4DF6-827F-21A15FC60E8F} - \PriceMeterUpdater No Task File <==== ATTENTION
    Task: {9C3FD607-F701-4936-8097-B8C84D4B2023} - System32\Tasks\Easy Speed PC Schedule => C:\Program Files (x86)\Probit Software\Easy Speed PC\ESPCSchedule.exe [2015-05-07] (Probit Software LTD)
    Task: {9F794A94-7FBC-4034-8A04-40BCC7789480} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION
    Task: {A3116215-13C2-48A1-AD24-B10B11B253D6} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-06-23] () <==== ATTENTION
    Task: {A767CAA4-5F9C-4639-8606-7B37CFD97E3C} - \pricemetertask No Task File <==== ATTENTION
    Task: {A997FF23-C143-46FF-A35F-081005112608} - System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6.exe [2015-06-23] (Cinema PlusV23.06) <==== ATTENTION
    Task: {B01B2FC2-C6E4-4F7B-897E-75E7C66B1AC3} - System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5 => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-5.exe [2015-06-24] (Cinema PlusV23.06) <==== ATTENTION
    Task: {C3100138-887D-4F8C-96EA-3F204826FBE2} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
    Task: {CB0325A7-1D50-46C6-9157-057ACDEAFE0E} - System32\Tasks\avabvdxvy => C:\Users\Portable Famille\AppData\Local\avabvdxvy\avabvdxvy.exe [2015-06-21] () <==== ATTENTION
    Task: {CBE3D0C1-471D-4999-B3D4-1C8C4A08D33C} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro 3.97\OptProLauncher.exe [2015-06-22] () <==== ATTENTION
    Task: {D1072A31-BB0A-4EF3-BA9E-68ECE001B22C} - System32\Tasks\4812 => Wscript.exe C:\Users\PORTAB~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
    Task: {D263CCEE-4701-428C-9284-6C0031A6B04D} - System32\Tasks\Sonuujewli => C:\ProgramData\Sonuujewli\1.0.1.0\ivfroiol.exe [2015-06-23] ()
    Task: {D78FEC3E-CC87-47C5-A636-5B185711B636} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{c51fa257-c181-f175-c51f-fa257c18895f}\hqghumeaylnlf.exe [2014-06-24] (PC Utilities Software Limited) <==== ATTENTION
    Task: {DCE5C491-4915-439A-B70D-37687316D19E} - System32\Tasks\Bidaily Synchronize Task[973b] => c:\programdata\{cd92cc24-bf34-b865-cd92-2cc24bf33092}\setup_668.exe [2014-06-23] () <==== ATTENTION
    Task: {E01077A8-1782-4FED-84C1-E9FF77B36AAC} - System32\Tasks\ASP => C:\Program Files (x86)\RCP\systweakasp.exe
    Task: {E8DABF58-1178-41B7-B984-71353CA3611D} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-06-24] (globalUpdate) <==== ATTENTION
    Task: {F24C0062-714F-40B9-A8EA-A07F1EA84DBD} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: {FD85224C-9AF3-43DD-818D-A0FD255187A1} - System32\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-10_user => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-10.exe [2015-06-23] (Cinema PlusV23.06) <==== ATTENTION
    Task: C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-10.exe <==== ATTENTION
    Task: C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\a29ae816-7ab5-4b8d-877c-843683a25b72-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV23.06\a29ae816-7ab5-4b8d-877c-843683a25b72-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => c:\programdata\{02a44ae6-5c68-4f45-02a4-44ae65c62b99}\hqghumeaylnlf.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{c51fa257-c181-f175-c51f-fa257c18895f}\hqghumeaylnlf.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => c:\programdata\{cd92cc24-bf34-b865-cd92-2cc24bf33092}\setup_668.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Portable Famille\AppData\Roaming\HVFGTX.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Run_dregol.job => C:\Users\PORTAB~1\AppData\Roaming\RUN_DR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
    Task: C:\Windows\Tasks\VQLLDDHK1.job => C:\ProgramData\EpsanDrive\EpsanDrive.exe <==== ATTENTION

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.

    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    puis réinitialise tes navigateurs:
    ==================================
    Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

    ~~

    Remets/vérifie que tous les serveurs de noms (DNS) sont automatiques : https://forum.malekal.com/viewtopic.php?t=48312&start=
    PUIS ensuite vide le cache DNS et internet.
    Les 3 étapes sont importantes et à faire sinon les pubs vont continuer.

    Like the angel you are, you laugh creating a lightness in my chest,
    Your eyes they penetrate me,
    (Your answer's always 'maybe')
    That's when I got up and left
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Je te conseille de finir par un nettoyage Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    ~~

    Voila, c'est terminé, tu peux supprimer les programmes utilisés.

    Quelques conseils :

    Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

    Pour ne plus te faire avoir.
    A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
    (Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

    Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

    0