"Votre administrateur réseau a appliqué une stratégie de groupe qui empêche

Start:
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [AnonymizerGadget] => C:\Users\raich\AppData\Roaming\AGData\bin\AnonymizerLauncher.exe [10394792 2019-09-03] (OOO Albreht I Vitte -> ) <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKU\S-1-5-18\...\Run: [WallpaperHd] => "C:\Users\Hp\AppData\Local\WallpaperHd\WallpaperHd.exe" /regrun
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files\internet explorer\iexplore.exe -restart /WERRESTART <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files\internet explorer\iexplore.exe -restart /WERRESTART <==== ATTENTION
AppInit_DLLs: C:\ProgramData\Quoteex\Tameco.dll => Pas de fichier
AppInit_DLLs-x32: C:\ProgramData\Quoteex\DripKeytop.dll => Pas de fichier
Startup: C:\Users\raich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jadjdaca.lnk [2019-04-24]
Startup: C:\Users\teche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ahwecgtg.lnk [2019-04-18]
ShortcutAndArgument: ahwecgtg.lnk -> C:\Windows\System32\cmd.exe => /c start "" "C:\Users\teche\AppData\Roaming\Microsoft\Windows\ahwecgtg\trritdjw.exe"
Startup: C:\Users\teche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jadjdaca.lnk [2019-04-18]
ShortcutAndArgument: jadjdaca.lnk -> C:\Windows\System32\cmd.exe => /c start "" "C:\Users\teche\AppData\Roaming\Microsoft\Windows\jadjdaca\trritdjw.exe"
Startup: C:\Users\teche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\undersigned.lnk [2019-04-17]
ShortcutTarget: undersigned.lnk -> C:\Program Files (x86)\Calypso\Reeder.exe (Pas de fichier)
Startup: C:\Users\teche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\undersignedundersigned.lnk [2019-04-17]
ShortcutTarget: undersignedundersigned.lnk -> C:\Program Files (x86)\agglutination\Tabacco.exe (Pas de fichier)
Task: {0E5FD477-8E00-4F33-A289-EAFF74F24C7A} - System32\Tasks\psv_Medla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Freshcore.reg" & del "C:\ProgramData\Quoteex\Freshcore.reg" & SCHTASKS /Delete /TN "psv_Medla" /F <==== ATTENTION
Task: {1F37A0C3-F19A-42E0-AF56-6A4376CB1B8F} - System32\Tasks\psv_Sao-Tone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Bioin.reg" & del "C:\ProgramData\Quoteex\Bioin.reg" & SCHTASKS /Delete /TN "psv_Sao-Tone" /F <==== ATTENTION
Task: {24EA4AB8-B27F-4C82-B0A1-AD3CDED9CB32} - System32\Tasks\evaluatedevaluated => C:\Program Files (x86)\trap\trap.exe [9216 2019-04-16] () [Fichier non signé]
Task: {270D6DA1-C634-4FEA-B537-DA26C26452B1} - System32\Tasks\psv_Toptex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Statsing.reg" & del "C:\ProgramData\Quoteex\Statsing.reg" & SCHTASKS /Delete /TN "psv_Toptex" /F <==== ATTENTION
Task: {27EA935D-09B8-43CE-8D8A-E2CB174B2071} - System32\Tasks\psv_Jobtam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Hayex.reg" & del "C:\ProgramData\Quoteex\Hayex.reg" & SCHTASKS /Delete /TN "psv_Jobtam" /F <==== ATTENTION
Task: {3727F675-0075-4D60-B997-D51330894DE6} - System32\Tasks\HoverZoom => "cmd" /c sc stop HoverZoom & sc start HoverZoom"
Task: {3E54C5CF-38F3-41D7-B343-4DD563C2BF11} - System32\Tasks\psv_Canlab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Bamis.reg" & del "C:\ProgramData\Quoteex\Bamis.reg" & SCHTASKS /Delete /TN "psv_Canlab" /F <==== ATTENTION
Task: {470B42F1-7517-479A-A743-B92F1F7A0212} - System32\Tasks\psv_Ozertough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Sonla.reg" & del "C:\ProgramData\Quoteex\Sonla.reg" & SCHTASKS /Delete /TN "psv_Ozertough" /F <==== ATTENTION
Task: {5237893E-D646-4F70-9377-456B9CB07A72} - System32\Tasks\Updater_Online_Application => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe [908144 2017-11-02] (MICROLEAVES LTD -> Microleaves) <==== ATTENTION
Task: {58B6C37F-1147-40F2-BD1B-B5FE1C0F13B5} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2862032 2019-01-30] (Corel Corporation -> Corel Corporation)
Task: {5C376B25-2729-4269-BCD7-61B5CE852866} - System32\Tasks\psv_Plussing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\FreshJayit.reg" & del "C:\ProgramData\Quoteex\FreshJayit.reg" & SCHTASKS /Delete /TN "psv_Plussing" /F <==== ATTENTION
Task: {5CD92D91-1ECF-446D-96BF-11F5BF30C854} - System32\Tasks\psv_Trisdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Kinflex.reg" & del "C:\ProgramData\Quoteex\Kinflex.reg" & SCHTASKS /Delete /TN "psv_Trisdox" /F <==== ATTENTION
Task: {61FBDA9B-EF70-4220-A845-F57E0562AAA8} - System32\Tasks\Start WinZip Registry Optimizer for DESKTOP-3BN9H0H@Hp(logon) => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [29371176 2018-12-12] (Corel Corporation -> Corel Corporation)
Task: {6256BBAC-811B-410F-B420-10184CEC9E91} - System32\Tasks\psv_Duolam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Subcansoft.reg" & del "C:\ProgramData\Quoteex\Subcansoft.reg" & SCHTASKS /Delete /TN "psv_Duolam" /F <==== ATTENTION
Task: {6999D7E3-74C6-4F8B-9BFC-B7F98DA45FC0} - System32\Tasks\Start WinZip Registry Optimizer Update => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [29371176 2018-12-12] (Corel Corporation -> Corel Corporation)
Task: {712B41E6-F199-4DB0-AF72-4569A2E94915} - System32\Tasks\psv_Stocklux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Kanphase.reg" & del "C:\ProgramData\Quoteex\Kanphase.reg" & SCHTASKS /Delete /TN "psv_Stocklux" /F <==== ATTENTION
Task: {74879814-ED2A-4EBB-A88E-E968B691FE16} - System32\Tasks\Start WinZip Registry Optimizer Schedule => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [29371176 2018-12-12] (Corel Corporation -> Corel Corporation)
Task: {74D549B7-751D-413E-8353-F20A319897B9} - System32\Tasks\psv_Doublesoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\SilverDanstock.reg" & del "C:\ProgramData\Quoteex\SilverDanstock.reg" & SCHTASKS /Delete /TN "psv_Doublesoft" /F <==== ATTENTION
Task: {781B6012-1762-487E-ADD2-684E42474818} - System32\Tasks\psv_Quadtone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Ventozenlax.reg" & del "C:\ProgramData\Quoteex\Ventozenlax.reg" & SCHTASKS /Delete /TN "psv_Quadtone" /F <==== ATTENTION
Task: {85AE3F63-25F5-484D-BA5A-EFC31E26C2D0} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2862032 2019-01-30] (Corel Corporation -> Corel Corporation)
Task: {899C42A3-D2CC-4235-AB81-BDA9BA105A13} - System32\Tasks\psv_Unieco => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Apfix.reg" & del "C:\ProgramData\Quoteex\Apfix.reg" & SCHTASKS /Delete /TN "psv_Unieco" /F <==== ATTENTION
Task: {8CD40174-6C2D-4AC3-A57B-52118C902128} - System32\Tasks\AGProxyCheck => C:\Program [Argument = Files (x86)\AnonymizerGadget\AGService.exe /recove] <==== ATTENTION
Task: {8D4CC3FF-86D9-404D-8F91-4E8215E8CCC8} - System32\Tasks\psv_Scottax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Kanredfix.reg" & del "C:\ProgramData\Quoteex\Kanredfix.reg" & SCHTASKS /Delete /TN "psv_Scottax" /F <==== ATTENTION
Task: {8DC6B5F6-5268-43DD-BB10-94F53EC1E930} - System32\Tasks\Start WinZip Driver Updater Update => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe [33315624 2018-10-30] (Corel Corporation -> Corel Corporation)
Task: {94ACAC0E-D8B2-439C-97E3-048C8049DA81} - System32\Tasks\Start WinZip Driver Updater for DESKTOP-3BN9H0H@Hp(logon) => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe [33315624 2018-10-30] (Corel Corporation -> Corel Corporation)
Task: {B944C003-7910-4AE9-85E6-99AF2C81D72F} - System32\Tasks\One System Care Delayed => C:\Program Files (x86)\OneSystemCare\OneSystemCare.exe <==== ATTENTION
Task: {C55DD41C-40FE-46E9-A297-9F3E2E975C37} - System32\Tasks\psv_Donglight => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Quotezozdax.reg" & del "C:\ProgramData\Quoteex\Quotezozdax.reg" & SCHTASKS /Delete /TN "psv_Donglight" /F <==== ATTENTION
Task: {C8E6ADA0-80C2-4430-8652-F3AA291F4E11} - System32\Tasks\One System Care Monitor => C:\Program Files (x86)\OneSystemCare\CleanupConsole.exe <==== ATTENTION
Task: {D88C1711-8AF4-4C57-BEFD-12704928A64B} - System32\Tasks\psv_Voltdax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Scotex.reg" & del "C:\ProgramData\Quoteex\Scotex.reg" & SCHTASKS /Delete /TN "psv_Voltdax" /F <==== ATTENTION
Task: {DAEC5D26-42E9-447D-854B-22E93EB4CEAE} - System32\Tasks\Opera scheduled Autoupdate 1553571594 => C:\Users\teche\AppData\Local\Programs\Opera\launcher.exe [1465432 2019-03-28] (Opera Software AS -> Opera Software)
Task: {DFB6FFCB-38A8-4252-8270-168229C1F001} - System32\Tasks\psv_RanSaoron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Blackfax.reg" & del "C:\ProgramData\Quoteex\Blackfax.reg" & SCHTASKS /Delete /TN "psv_RanSaoron" /F <==== ATTENTION
Task: {E3D0C007-200E-4077-AA7B-F9B0FA95B0E1} - System32\Tasks\psv_BetaGosing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Santough.reg" & del "C:\ProgramData\Quoteex\Santough.reg" & SCHTASKS /Delete /TN "psv_BetaGosing" /F <==== ATTENTION
Task: {EAE17EA3-6361-4361-B49B-BA54D5E7EFEA} - System32\Tasks\Opera scheduled Autoupdate 1551260023 => C:\Users\Hp\AppData\Local\Programs\Opera\launcher.exe [1465432 2019-03-13] (Opera Software AS -> Opera Software)
Task: {EC5EE371-9994-419E-BA74-793332A7B86F} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {F45C16D7-744C-4590-9C6F-207DFAAA2D4D} - System32\Tasks\psv_ZerJoytone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quoteex\Free-Job.reg" & del "C:\ProgramData\Quoteex\Free-Job.reg" & SCHTASKS /Delete /TN "psv_ZerJoytone" /F <==== ATTENTION
S3 wuauserv; C:\Windows\system32\svchost.exe [51696 2018-09-15] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL)
S3 wuauserv; C:\Windows\SysWOW64\svchost.exe [45448 2018-09-15] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL)
S2 rcdll; C:\Users\teche\AppData\Local\Temp\rcdll.exe [60928 2019-04-17] (Microsoft Corporation) [Fichier non signé] <==== ATTENTION
R2 Remotr Service; C:\Program Files (x86)\Remotr\RemotrService.exe [207480 2017-02-27] (RemoteMyApp sp. z o.o. -> RemoteMyApp sp. z o.o.)
R2 backlh; C:\ProgramData\Logic Cramble\set.exe [3780096 2019-04-17] () [Fichier non signé] <==== ATTENTION
2019-04-17 04:06 - 2019-04-17 04:06 - 011395584 _____ () C:\Users\teche\vyggecgp.exe
EmptyTemp:
RemoveProxy:
Hosts:
Reboot:
End:

• Réparer Mozilla Firefox (premier paragraphe)
• Réparer Google Chrome (seulement le premier paragraphe).
• Réinitialiser et réparer Internet Explorer