Wajam et WINDESKWINSEARCH : Ordi très lent.
Résolu
jo13200
Messages postés
18
Date d'inscription
Statut
Membre
Dernière intervention
-
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Bonjour,
Mon ordi est infecté par des virus. J'ai fait plusieurs scann avec AD ccleanner, j'ai supprimer des fichiers infectés avec anti Malware etc.... Malgré toutes mes tentatives, mon ordi est toujours très lent et des logiciels s'installent sans que je le veuille. WAJAM et WINDESKWINSEARCH.
Merci de votre aide,sachez, je ne suis pas du tout douée en informatique.
Mon ordi est infecté par des virus. J'ai fait plusieurs scann avec AD ccleanner, j'ai supprimer des fichiers infectés avec anti Malware etc.... Malgré toutes mes tentatives, mon ordi est toujours très lent et des logiciels s'installent sans que je le veuille. WAJAM et WINDESKWINSEARCH.
Merci de votre aide,sachez, je ne suis pas du tout douée en informatique.
18 réponses
-
Salut,
Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :
Commence par ceci :
Suis le tutorial AdwCleaner( d'Xplode )
Ce programme permet de supprimer les adwares et programmes parasites :- Télécharge le sur ton bureau ou dossier de téléchargement.
- Lance AdwCleaner, clique sur [Scanner].
- L'analyse peux durer plusieurs minutes, patiente.
- Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]
- Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
puis :
Suis le tutoriel FRST.
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :- FRST.txt
- Shortcut.txt
- Additionnal.txt
Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.
-
Merci beaucoup pour votre aide. J'ai tenté de suivre vos conseils. J'ai fait les scans mais je n'ai pas reussi à les envoyé sur le site que vous m'avez indiqué. Je ne suis vraiment pas douée!!!! j'ai enregistré les scans sur mon bureau si vous le pouvez je peux en faire une copie et vous les montrer. Encore merci à vous.
-
-
Re bonjour,
j'ai finalement réussi à héberger mes rapports sur http://pjjoint.malekal.com, mais je ne sais pas ce que j'ai fait, j'ai 4 rapports FRST..., voici les liens plus le rapport adwcleaner :
rapport FRST : https://pjjoint.malekal.com/files.php?id=FRST_20150726_v11k14m6c8t5
rapport FRST 1 : https://pjjoint.malekal.com/files.php?id=FRST_20150726_t12o10o5e10j15
rapport FRS 2 : https://pjjoint.malekal.com/files.php?id=20150726_s11b13s12b5u11
rapport FRS 3 : https://pjjoint.malekal.com/files.php?id=20150726_t10j9m11p6p10
rapport FRS 4 : https://pjjoint.malekal.com/files.php?id=20150726_u8q6b12k5x5
rapport Adwcleaner : https://pjjoint.malekal.com/files.php?id=20150726_x5p11e7k10s10
j'espère qu'avec ça vous pourrez m'aider.
Merci d'avance, -
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch)
HKLM-x32\...\Run: [mpck_fr_017010028] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010030] => [X]
HKLM-x32\...\Run: [rec_fr_47] => [X]
R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed]
R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X]
S4 vicoqudu; [X]
S4 zejytose; [X]
2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn
2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log
2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log
2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log
2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd
2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job
2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6]
2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}
2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef
2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521
2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp
2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp
2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log
2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results
2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews
2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm
2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1}
2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8}
2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData\ntuser.pol
2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job
2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job
2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349
2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews
2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk
2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log
2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE}
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate
2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe
2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job
2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask
2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe
2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe
22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx
2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe
2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan
2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat
2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf
2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log
2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys
2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq
2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj
Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE
Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION
Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION
Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION
Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX\registrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop
Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION
Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION
Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION
Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\UpdateTask.job => 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
Task: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :- Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
- Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
- Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left -
désolée,
voilà, cette fois, ça devrait être bon :
"Fix result of Farbar Recovery Scan Tool (x64) Version:26-07-2015
Ran by cojo at 2015-07-27 12:16:42 Run:1
Running from C:\Users\cojo\Downloads
Loaded Profiles: cojo (Available Profiles: cojo)
Boot Mode: Normal
==============================================
fixlist content:
HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch)
HKLM-x32\...\Run: [mpck_fr_017010028] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010030] => [X]
HKLM-x32\...\Run: [rec_fr_47] => [X]
R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed]
R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X]
S4 vicoqudu; [X]
S4 zejytose; [X]
2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn
2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log
2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log
2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log
2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd
2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job
2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6]
2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}
2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef
2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521
2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp
2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp
2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log
2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results
2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews
2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm
2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1}
2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8}
2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData\ntuser.pol
2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job
2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job
2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349
2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews
2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk
2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log
2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE}
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate
2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe
2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job
2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask
2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe
2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe
22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx
2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe
2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan
2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat
2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf
2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log
2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys
2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq
2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj
Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE
Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION
Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION
Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION
Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX\registrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop
Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION
Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION
Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION
Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\UpdateTask.job => 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
Task: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Windesk Winsearch => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mpck_fr_017010028 => value removed successfully"
merci de votre patience -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
effectivement, il en manquait un morceau.... le voici en entier cette fois :
"Fix result of Farbar Recovery Scan Tool (x64) Version:26-07-2015
Ran by cojo at 2015-07-27 12:16:42 Run:1
Running from C:\Users\cojo\Downloads
Loaded Profiles: cojo (Available Profiles: cojo)
Boot Mode: Normal
==============================================
fixlist content:
HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch)
HKLM-x32\...\Run: [mpck_fr_017010028] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010030] => [X]
HKLM-x32\...\Run: [rec_fr_47] => [X]
R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed]
R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X]
S4 vicoqudu; [X]
S4 zejytose; [X]
2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch
2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn
2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn
2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log
2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log
2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log
2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd
2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job
2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6]
2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}
2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef
2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521
2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp
2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp
2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log
2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results
2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews
2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm
2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1}
2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8}
2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData\ntuser.pol
2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job
2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job
2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349
2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews
2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk
2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log
2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log
2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE}
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys
2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate
2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe
2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job
2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask
2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe
2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe
22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx
2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe
2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan
2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat
2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf
2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log
2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys
2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq
2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local\nsv4CEA.tmp
2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj
Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE
Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION
Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION
Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION
Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX\registrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop
Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION
Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION
Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION
Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\UpdateTask.job => 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
Task: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Windesk Winsearch => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mpck_fr_017010028 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_005010030 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\rec_fr_47 => value removed successfully
WajIEn Monitor => Service stopped successfully.
WajIEn Monitor => service removed successfully
qifixyke => Service stopped successfully.
qifixyke => service removed successfully
vicoqudu => service removed successfully
zejytose => service removed successfully
C:\Users\Public\Desktop\WindeskWinsearch.lnk => moved successfully.
C:\Users\cojo\AppData\Local\Windesk_Winsearch => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch => moved successfully.
C:\Program Files (x86)\WindeskWinsearch => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn => moved successfully.
C:\Program Files\WajIEn => moved successfully.
C:\Windows\PFRO.log => moved successfully.
C:\Windows\setupact.log => moved successfully.
C:\Windows\setuperr.log => moved successfully.
C:\Program Files (x86)\FriendlyError => moved successfully.
C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd => moved successfully.
C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => moved successfully.
C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] => moved successfully.
"C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}" => File/Folder not found.
C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef => moved successfully.
C:\Users\cojo\AppData\Local\12521 => moved successfully.
C:\Program Files (x86)\GUMD670.tmp => moved successfully.
C:\Program Files (x86)\GUTD671.tmp => moved successfully.
Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot.
C:\Users\cojo\AppData\Local\nsv4CEA.tmp => moved successfully.
C:\Windows\SysWOW64\Number of results => moved successfully.
C:\ZombieNews => moved successfully.
C:\dummy.htm => moved successfully.
C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => moved successfully.
C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => moved successfully.
C:\ProgramData\ntuser.pol => moved successfully.
C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => moved successfully.
C:\Windows\Tasks\A4crvbx.job => moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully.
C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349 => moved successfully.
C:\Users\cojo\AppData\Local\ZombieNews => moved successfully.
C:\Users\cojo\Desktop\GUPlayer.lnk => moved successfully.
C:\Windows\system32\Drivers\etc\hp.bak => moved successfully.
C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349 => moved successfully.
C:\Windows\SysWOW64\8A785A62pctlsp.log => moved successfully.
C:\Windows\SysWOW64\89FD28A7pctlsp.log => moved successfully.
C:\Windows\SysWOW64\${LOGFILE} => moved successfully.
C:\Windows\prleth.sys => moved successfully.
C:\Windows\hgfs.sys => moved successfully.
C:\Users\cojo\AppData\Roaming\GoldenGate => moved successfully.
C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z => moved successfully.
C:\Users\cojo\Downloads\FirefoxSetup [1].exe => moved successfully.
C:\Windows\Tasks\UpdateTask.job => moved successfully.
C:\Windows\System32\Tasks\UpdateTask => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X => moved successfully.
C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe => moved successfully.
"C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe" => File/Folder not found.
22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp => Error: No automatic fix found for this entry.
C:\Users\cojo\AppData\Roaming\A4crvbx => moved successfully.
C:\Users\cojo\AppData\Roaming\inst.exe => moved successfully.
C:\Users\cojo\AppData\Roaming\mbam.context.scan => moved successfully.
C:\Users\cojo\AppData\Roaming\pcouffin.cat => moved successfully.
C:\Users\cojo\AppData\Roaming\pcouffin.inf => moved successfully.
C:\Users\cojo\AppData\Roaming\pcouffin.log => moved successfully.
C:\Users\cojo\AppData\Roaming\pcouffin.sys => moved successfully.
C:\Users\cojo\AppData\Roaming\wklnhst.dat => moved successfully.
C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq => moved successfully.
"C:\Users\cojo\AppData\Local\nsv4CEA.tmp" => File/Folder not found.
C:\ProgramData\oafcpcef.qqj => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0488AFD6-B433-4D66-87BD-27B2DCB1A1D8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0488AFD6-B433-4D66-87BD-27B2DCB1A1D8}" => key removed successfully
C:\Windows\System32\Tasks\UpdateTask not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UpdateTask" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{065E0812-B371-4BE6-9DC6-9F4654FEC689}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{065E0812-B371-4BE6-9DC6-9F4654FEC689}" => key removed successfully
C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0757D406-27DA-457C-BA28-3D35CDAD5160}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0757D406-27DA-457C-BA28-3D35CDAD5160}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\A4crvbx" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\xuTxo6w4mD5PKuSq" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{35606946-55A3-4C83-84EE-0565AD6B793B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35606946-55A3-4C83-84EE-0565AD6B793B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D}" => key removed successfully
C:\Windows\System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{46086C68-1028-41AA-AEA6-B466BC229E6A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5AD7494F-C291-4E7C-B4C9-92DD432A45C3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5AD7494F-C291-4E7C-B4C9-92DD432A45C3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6B566E47-0C3C-40F9-AE24-866BB2B5AB66}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B566E47-0C3C-40F9-AE24-866BB2B5AB66}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73C78214-D898-4A38-A554-27ED71BC0AB5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73C78214-D898-4A38-A554-27ED71BC0AB5}" => key removed successfully
C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[8da6]" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B34C4391-204F-4382-B7A7-84D4F7EA7B84}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B34C4391-204F-4382-B7A7-84D4F7EA7B84}" => key removed successfully
C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8}" => key removed successfully
C:\Windows\Tasks\A4crvbx.job not found.
C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully.
C:\Windows\Tasks\UpdateTask.job not found.
C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job not found.
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-27 13:10:49)<=
"C:\Windows\WindowsUpdate.log" => Could not move
==== End of Fixlog 13:10:49 ===="
Par contre, pour information, je viens à nouveau de désinstaller WINDESKWINSEARCH et pendant que le fix de FRST travaillait un truc "panda antivirus" s'est installé, mais je n'ai pas retrouvé "panda" dans la liste des programmes...
je n'y comprends plus rien...
Encore merci pour votre aide -
ok, voici la suite :
Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour puis lance un examen.
A la fin du scan, clic sur "Supprimer Selection" en bas à gauche.
Redémarre l'ordinateur si besoin.
Après redémarrage, relance Malwarebytes.
Vas chercher le rapport dans l'onglet Historique.
A gauche Journal des examens.
Doube-clic sur l'examen dans la liste.
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.
-
bonsoir,
voici le lien du journal d'analyse :
https://pjjoint.malekal.com/files.php?id=20150727_v12i9r11n8j5
merci d'avance et bonne soirée, -
Reste quel problème ?
-
Bonsoir,
restent encore quelques problèmes malheureusement :
l'ordinateur reste lent et certaines pages internet que je consulte se ferment toutes seules.
Au redémarrage, parfois l'ordinateur reste bloqué sur le logo acer : empowering et je suis obligée de l'éteindre et de le redémarrer.
Aujourd'hui, au redémarrage, j'ai eu le message suivant : ACER. Please download la test version Flash Player et si je clique sur ok, la fenêtre revient quand même...
désolée d'abuser de votre temps, mais tout cela m'inquiète.
Grand merci pour votre patience,
bonne soirée,-
Tu surfs avec quel navigateur WEB ?
fais ça pour voir :
Passe un coup de SFC (System File Check) :
=> https://forum.malekal.com/viewtopic.php?t=50094&start=
Fais passer le rapport CBS.log via http://pjjoint.malekal.com
-
-
bonjour,
je surfe sous firefox.
voici le lien vers le rapport cbs.log :
https://pjjoint.malekal.com/files.php?id=20150728_w7x7k15h10k12
Merci -
Suis ce tutorial : https://forum.malekal.com/viewtopic.php?t=51899&start=
Fais passer le rapport SFCFix qui s'ouvre à la fin du scan (il se trouve sur le bureau : SFCFix.txt).
puis : Relance un scan SFC et vérifie que ce dernier ne rapporte plus d'erreur irréparable.
-
bonsoir,
je ne parviens pas à désinstaller les 2 mises à jour en cause : je les vois bien dans la liste des mises à jour, mais lorsque je passe par l'historique des mises à jour, le système m'indique : aucune mise à jour installée.
Je vais essayer de trouver une solution et je reviens vers vous dès que possible.
A propos, les programmes Wajam et WINDESKWINSEARCH sont de nouveau là...
bonne soirée, -
Bonjour,
ok, je passe le fix.
Concernant wajam notamment, Hier, j'ai l'ai vu dans la barre de tâche en haut de l'écran. Il tournait comme quand je vais une recherche sur Google par exemple. Hum!!! Je ne sais pas si je suis très claire.
Aujourd'hui, je ne le vois plus.... bizarre
je relance un scan malwarebytes pour voir si il les détecte encore et je reviens avec le rapport du fix également.
Bonne journée, -
bonsoir,
comme convenu, voici le lien vers le fix et le rapport malwarebytes :
https://pjjoint.malekal.com/files.php?id=20150730_z13z9k5u5z8
https://pjjoint.malekal.com/files.php?id=20150730_j10c5y7f14h13
Merci et bonne soirée -
bonjour,
voici le résultat du scan SFC :
"Microsoft Windows [version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Tous droits réservés.
C:\Windows\system32>sfc/scannow
Début de l'analyse du système. Cette opération peut nécessiter un certain temps.
Démarrage de la phase de vérification de l'analyse du système.
La vérification 100% est terminée.
Le programme de protection des ressources Windows n'a trouvé aucune violation d'
intégrité.
C:\Windows\system32>"
cela me semble pas mal... Pour l'instant l'ordinateur se comporte très bien, plus de problèmes et plus de traces de Wajam et WindeskWinsearch
Merci beaucoup pour votre aide, et votre patience à mon égard.
Bonne fin de journée et bon week-end également. -
bonjour,
voici le lien vers le rapport :
https://pjjoint.malekal.com/files.php?id=20150731_t14j9h11l9u12
ce devrait être bon cette fois-ci.
Merci -
Bonsoir
Oui une nette amélioration effectivement. Je suis ravie, merci beaucoup pour votre aide.
Passez un bon week end. -
=)
à toi aussi!
Voila, c'est terminé, tu peux supprimer les programmes utilisés.
Quelques conseils :
Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=
Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
