Impossible de se débarasser de SpeedCheck

:)

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.
(sauf si tu es sur un netbook)

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Plus aucun soucis ! J'ai rien compris, mais merci beaucoup !!!

Plus de soucis ?

Voila le message :

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-01-2015
Ran by Ridlaid at 2015-01-10 16:17:29 Run:1
Running from C:\Users\Ridlaid\Desktop
Loaded Profiles: UpdatusUser & Ridlaid (Available profiles: UpdatusUser & Ridlaid)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [gmsd_fr_74] => [X]
HKLM-x32\...\Run: [WinCheck] => C:\Users\Ridlaid\AppData\Local\wincheck\wincheck.exe
S2 serversu; C:\Users\Ridlaid\AppData\Roaming\SoftwareUpdater\SUsrv.exe [X]
R2 webinstrNHK; C:\WINDOWS\system32\Drivers\webinstrNHK.sys [56432 2015-01-09] (Corsica)
2015-01-10 12:08 - 2015-01-10 12:08 - 00000000 ____D () C:\Users\Ridlaid\AppData\Local\TVWizard
2015-01-09 22:30 - 2015-01-09 22:30 - 00000008 _____ () C:\Users\Ridlaid\AppData\Roaming\Syshandle.txt
2015-01-09 22:29 - 2015-01-10 10:17 - 00001364 _____ () C:\WINDOWS\Tasks\GRPB.job
2015-01-09 22:29 - 2015-01-10 10:16 - 00001716 _____ () C:\WINDOWS\Tasks\YOWPUEBB.job
2015-01-09 22:29 - 2015-01-09 22:30 - 00000000 ____D () C:\Users\Ridlaid\AppData\Roaming\SystClean
2015-01-09 22:29 - 2015-01-09 22:29 - 02051552 _____ (HQProVideoV09.01) C:\Users\Ridlaid\AppData\Roaming\YOWPUEBB.exe
2015-01-09 22:29 - 2015-01-09 22:29 - 01837024 _____ (Enter) C:\Users\Ridlaid\AppData\Roaming\GRPB.exe
2015-01-09 22:29 - 2015-01-09 22:29 - 00004730 _____ () C:\WINDOWS\System32\Tasks\YOWPUEBB
2015-01-09 22:29 - 2015-01-09 22:29 - 00004380 _____ () C:\WINDOWS\System32\Tasks\GRPB
2015-01-09 22:28 - 2015-01-09 22:29 - 00000000 ____D () C:\ProgramData\BIhWiGc
2015-01-09 22:28 - 2015-01-09 22:28 - 00056432 _____ (Corsica) C:\WINDOWS\system32\Drivers\webinstrNHK.sys
2015-01-09 22:28 - 2015-01-09 22:28 - 00002281 _____ () C:\WINDOWS\patsearch.bin
2015-01-09 22:28 - 2015-01-09 22:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_74 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\WinCheck => value deleted successfully.
serversu => Service deleted successfully.
webinstrNHK => Unable to stop service
webinstrNHK => Service deleted successfully.
C:\Users\Ridlaid\AppData\Local\TVWizard => Moved successfully.
C:\Users\Ridlaid\AppData\Roaming\Syshandle.txt => Moved successfully.
C:\WINDOWS\Tasks\GRPB.job => Moved successfully.
C:\WINDOWS\Tasks\YOWPUEBB.job => Moved successfully.
C:\Users\Ridlaid\AppData\Roaming\SystClean => Moved successfully.
C:\Users\Ridlaid\AppData\Roaming\YOWPUEBB.exe => Moved successfully.
C:\Users\Ridlaid\AppData\Roaming\GRPB.exe => Moved successfully.
C:\WINDOWS\System32\Tasks\YOWPUEBB => Moved successfully.
C:\WINDOWS\System32\Tasks\GRPB => Moved successfully.

"C:\ProgramData\BIhWiGc" directory move:

Could not move "C:\ProgramData\BIhWiGc\hFwSusaffuE.dat" => Scheduled to move on reboot.
C:\ProgramData\BIhWiGc\hFwSusaffuE.exe => Moved successfully.
C:\ProgramData\BIhWiGc\hFwSusaffuE.exe.config => Moved successfully.
Could not move "C:\ProgramData\BIhWiGc\info.dat" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\ESeXiymB.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\LwEaSpjoA.exe" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\LwEaSpjoA.exe.config" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\rGzRsLrYl.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\wMwpAJu.exe" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc\dat\wMwpAJu.exe.config" => Scheduled to move on reboot.
Could not move "C:\ProgramData\BIhWiGc" directory. => Scheduled to move on reboot.

C:\WINDOWS\system32\Drivers\webinstrNHK.sys => Moved successfully.
C:\WINDOWS\patsearch.bin => Moved successfully.
C:\WINDOWS\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf => Moved successfully.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-10 16:21:23)<=

C:\ProgramData\BIhWiGc\hFwSusaffuE.dat => Is moved successfully.
C:\ProgramData\BIhWiGc\info.dat => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\ESeXiymB.dll => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\LwEaSpjoA.exe => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\LwEaSpjoA.exe.config => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\rGzRsLrYl.dll => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\wMwpAJu.exe => Is moved successfully.
C:\ProgramData\BIhWiGc\dat\wMwpAJu.exe.config => Is moved successfully.
C:\ProgramData\BIhWiGc => Is moved successfully.

==== End of Fixlog 16:21:23 ====

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKLM-x32\...\Run: [gmsd_fr_74] => [X]
HKLM-x32\...\Run: [WinCheck] => C:\Users\Ridlaid\AppData\Local\wincheck\wincheck.exe
S2 serversu; C:\Users\Ridlaid\AppData\Roaming\SoftwareUpdater\SUsrv.exe [X]
R2 webinstrNHK; C:\WINDOWS\system32\Drivers\webinstrNHK.sys [56432 2015-01-09] (Corsica)
2015-01-10 12:08 - 2015-01-10 12:08 - 00000000 ____D () C:\Users\Ridlaid\AppData\Local\TVWizard
2015-01-09 22:30 - 2015-01-09 22:30 - 00000008 _____ () C:\Users\Ridlaid\AppData\Roaming\Syshandle.txt
2015-01-09 22:29 - 2015-01-10 10:17 - 00001364 _____ () C:\WINDOWS\Tasks\GRPB.job
2015-01-09 22:29 - 2015-01-10 10:16 - 00001716 _____ () C:\WINDOWS\Tasks\YOWPUEBB.job
2015-01-09 22:29 - 2015-01-09 22:30 - 00000000 ____D () C:\Users\Ridlaid\AppData\Roaming\SystClean
2015-01-09 22:29 - 2015-01-09 22:29 - 02051552 _____ (HQProVideoV09.01) C:\Users\Ridlaid\AppData\Roaming\YOWPUEBB.exe
2015-01-09 22:29 - 2015-01-09 22:29 - 01837024 _____ (Enter) C:\Users\Ridlaid\AppData\Roaming\GRPB.exe
2015-01-09 22:29 - 2015-01-09 22:29 - 00004730 _____ () C:\WINDOWS\System32\Tasks\YOWPUEBB
2015-01-09 22:29 - 2015-01-09 22:29 - 00004380 _____ () C:\WINDOWS\System32\Tasks\GRPB
2015-01-09 22:28 - 2015-01-09 22:29 - 00000000 ____D () C:\ProgramData\BIhWiGc
2015-01-09 22:28 - 2015-01-09 22:28 - 00056432 _____ (Corsica) C:\WINDOWS\system32\Drivers\webinstrNHK.sys
2015-01-09 22:28 - 2015-01-09 22:28 - 00002281 _____ () C:\WINDOWS\patsearch.bin
2015-01-09 22:28 - 2015-01-09 22:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

Waouh, merci pour la rapidité de la réponse !^^

Donc :
-FRST : https://pjjoint.malekal.com/files.php?id=20150110_u12k12q15h14u11
-Shortcut : https://pjjoint.malekal.com/files.php?id=20150110_m15i8l6b8z7
-Additionnal : https://pjjoint.malekal.com/files.php?id=20150110_b9m10e6g13h6

Salut,

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer trois rapports FRST :
* FRST.txt
* Shortcut.txt
* Additionnal.txt

Envoie comme expliqué, ces trois rapports sur le site pjjoint et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.