Multiples fenêtres parasites
Résolu
Bonjour à tous,
Je recherche de l'aide pour désinfecter un PC portable qu'on m'a confié car il se met à ouvrir plein de fenêtres publicitaires parasites. Il a surement besoin d'un décrassage complet car il a 7 ans. Je sais que cette opération doit être minutieuse si on veut qu'elle soit efficace et je préfère vous demander votre aide pour ne rien faire de travers.
Quelqu'un(s) d'entre vous saurait-il me guider ?
Merci.
Je recherche de l'aide pour désinfecter un PC portable qu'on m'a confié car il se met à ouvrir plein de fenêtres publicitaires parasites. Il a surement besoin d'un décrassage complet car il a 7 ans. Je sais que cette opération doit être minutieuse si on veut qu'elle soit efficace et je préfère vous demander votre aide pour ne rien faire de travers.
Quelqu'un(s) d'entre vous saurait-il me guider ?
Merci.
16 réponses
-
bien, j'ai installé Adblock plus pour les trois navigateurs du PC.
Je vous remercie de votre aide.
Bonne soirée. -
Et que pensez vous d'Adblock Plus ?
-
je ne trouve pas l'extension de Blockulicius pour firefox, pensez vous que je puisse utiliser Ad Block ?
Et comment nettoyer les ventilos ? en démontant ? -
ModérateurSurtout qu'il n'y a pas énormément de programmes au démarrage.
Nettoye les ventilos.
Eventuellement pour les adwares, fais un nettoyage Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
~~
Voila, c'est terminé, tu peux supprimer les programmes utilisés.
Quelques conseils :
Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=
Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
-
Non, il semble que l'opération avec FRST64 ait été bénéfique. Depuis, je n'ai plus d'ouvertures de fenêtres de pub à chaque clic. Par contre, le PC restait un peu lent... mais je ne suis pas sûr de la vitesse à laquelle m'attendre (il a sept ans...)
-
ModérateurCa doit quoi les pubs ?
S'il reste des pubs intempestives, indique sur quel navigateur WEB.
-
-
C'est parti.
Et merci pour le temps que vous consacrez à aider les nécessiteux comme moi...
Je ne sais pas combien vous aidez de personnes dans la journée mais vous devez faire des heureux.
Je poste à nouveau lorsque le scan est terminé. -
Modérateurok, voici la suite :
Scan Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour puis lance un examen.
A la fin du scan, clic sur "Mettre tout en quarantaine" en bas à gauche.
Redémarre l'ordinateur si besoin.
Après redémarrage, relance Malwarebytes.
Vas chercher le rapport dans l'onglet Historique.
A gauche Journal des examens.
Doube-clic sur l'examen dans la liste.
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.
-
C'est fait.
Reste-t-il d'autres étapes ?
Merci. -
je colle maintenant le rapport après l'étape FIXLIST :
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Dominique at 2015-04-06 00:43:07 Run:1
Running from C:\Users\Dominique\Desktop
Loaded Profiles: Dominique (Available profiles: Dominique)
Boot Mode: Normal
==============================================
Content of fixlist:
2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_fr_576] => [X]
HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION
C:\Users\Dominique\AppData\Local\msvcp100.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\msvcr100.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log => Moved successfully.
C:\Users\Dominique\AppData\Local\nsb2C30.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nseACD6.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsl63BA.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsm4BB4.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsn8F49.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsyD1F7.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\nsyF0F8.tmp => Moved successfully.
C:\Users\Dominique\AppData\Local\QtCore4.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\QtGui4.dll => Moved successfully.
C:\Users\Dominique\AppData\Local\QtNetwork4.dll => Moved successfully.
"C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]" => File/Directory not found.
C:\Users\Dominique\AppData\Roaming\AZYFZOJ => Moved successfully.
C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\CWXI => Moved successfully.
C:\Users\Dominique\AppData\Roaming\CWXI.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\FXXND => Moved successfully.
C:\Users\Dominique\AppData\Roaming\FXXND.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\HVFGTX => Moved successfully.
C:\Users\Dominique\AppData\Roaming\HVFGTX.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\IPAKC => Moved successfully.
C:\Users\Dominique\AppData\Roaming\IPAKC.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\MUF => Moved successfully.
C:\Users\Dominique\AppData\Roaming\MUF.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\PUHKPUO => Moved successfully.
C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TAYB => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TAYB.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TYHHD => Moved successfully.
C:\Users\Dominique\AppData\Roaming\TYHHD.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\UUKXC => Moved successfully.
C:\Users\Dominique\AppData\Roaming\UUKXC.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\WB.CFG => Moved successfully.
C:\Users\Dominique\AppData\Roaming\wklnhst.dat => Moved successfully.
C:\Users\Dominique\AppData\Roaming\XTAQVI => Moved successfully.
C:\Users\Dominique\AppData\Roaming\XTAQVI.exe => Moved successfully.
C:\Users\Dominique\AppData\Local\ContentAgent.exe => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\XTAQVI.exe" => File/Directory not found.
C:\Windows\System32\Tasks\XTAQVI => Moved successfully.
C:\Windows\Tasks\AZYFZOJ.job => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe" => File/Directory not found.
C:\Windows\System32\Tasks\AZYFZOJ => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Program Files (x86)\Cinema PlusV02.04-ntf => Moved successfully.
C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf => Moved successfully.
C:\Windows\System32\Tasks\Selection Tools Update => Moved successfully.
C:\Windows\System32\Tasks\WindApp Update => Moved successfully.
C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994 => Moved successfully.
C:\Program Files (x86)\GUPlayer => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Windows\Tasks\MUF.job => Moved successfully.
C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\MUF.exe" => File/Directory not found.
C:\Windows\System32\Tasks\MUF => Moved successfully.
C:\Windows\Tasks\TAYB.job => Moved successfully.
C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TAYB.exe" => File/Directory not found.
C:\Windows\System32\Tasks\TAYB => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB => Moved successfully.
C:\Windows\Tasks\PUHKPUO.job => Moved successfully.
C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe" => File/Directory not found.
C:\Windows\System32\Tasks\PUHKPUO => Moved successfully.
C:\Windows\Tasks\TYHHD.job => Moved successfully.
C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800 => Moved successfully.
C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60 => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TYHHD.exe" => File/Directory not found.
C:\Windows\System32\Tasks\TYHHD => Moved successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Moved successfully.
C:\Users\Public\Documents\ShopperPro => Moved successfully.
C:\Program Files\Common Files\ShopperPro => Moved successfully.
C:\Windows\Tasks\CWXI.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\CWXI.exe" => File/Directory not found.
C:\Windows\System32\Tasks\CWXI => Moved successfully.
C:\Users\Dominique\AppData\Local\CrashRpt => Moved successfully.
C:\Windows\Tasks\IPAKC.job => Moved successfully.
C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\IPAKC.exe" => File/Directory not found.
C:\Windows\System32\Tasks\IPAKC => Moved successfully.
C:\ProgramData\12611355569204033277 => Moved successfully.
C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc => Moved successfully.
"C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory move:
Could not move "C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}" directory. => Scheduled to move on reboot.
C:\Program Files (x86)\app_setup => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TYHHD" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\IPAKC" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\FXXND" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\AZYFZOJ" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\XTAQVI" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\UUKXC" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\PUHKPUO" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\CWXI" => File/Directory not found.
C:\Users\Dominique\Desktop\dossier module 5 relu.odt => Moved successfully.
C:\Users\Dominique\Desktop\dossier module 5.odt => Moved successfully.
C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF} => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\TAYB" => File/Directory not found.
"C:\Users\Dominique\AppData\Roaming\HVFGTX" => File/Directory not found.
C:\Windows\Tasks\XTAQVI.job => Moved successfully.
C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1} => Moved successfully.
C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap => Moved successfully.
"C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory move:
Could not move "C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}" directory. => Scheduled to move on reboot.
"C:\Users\Dominique\AppData\Local\nseACD6.tmp" => File/Directory not found.
C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn => Moved successfully.
"C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory move:
Could not move "C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}" directory. => Scheduled to move on reboot.
Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot.
"C:\Users\Dominique\AppData\Local\nsl63BA.tmp" => File/Directory not found.
C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsyD1F7.tmp" => File/Directory not found.
C:\Windows\Tasks\UUKXC.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\UUKXC.exe" => File/Directory not found.
C:\Windows\System32\Tasks\UUKXC => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\FXXND.exe" => File/Directory not found.
C:\Windows\System32\Tasks\FXXND => Moved successfully.
C:\Windows\Tasks\FXXND.job => Moved successfully.
C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534 => Moved successfully.
C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsm4BB4.tmp" => File/Directory not found.
"C:\Users\Dominique\AppData\Local\nsyF0F8.tmp" => File/Directory not found.
C:\Windows\Tasks\HVFGTX.job => Moved successfully.
"C:\Users\Dominique\AppData\Roaming\HVFGTX.exe" => File/Directory not found.
C:\Windows\System32\Tasks\HVFGTX => Moved successfully.
C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd} => Moved successfully.
C:\Windows\SysWOW64\${LOGFILE} => Moved successfully.
C:\Program Files (x86)\Optimizer Pro 3.75 => Moved successfully.
C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1} => Moved successfully.
C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => Moved successfully.
"C:\Users\Dominique\AppData\Local\nsb2C30.tmp" => File/Directory not found.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => Moved successfully.
gikiwyle => Service stopped successfully.
gikiwyle => Service deleted successfully.
nixikubi => Service stopped successfully.
nixikubi => Service deleted successfully.
qumesuky => Service not found.
Update Mountain Bike => Service deleted successfully.
Util Mountain Bike => Service deleted successfully.
VCL => Service deleted successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll => Moved successfully.
C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk => Moved successfully.
C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk => Moved successfully.
C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe => Moved successfully.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe not found.
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk => Moved successfully.
C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_576 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\StormWatch => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11E1AE23-2173-4366-9875-2468AEE269F2}" => Key deleted successfully.
C:\Windows\System32\Tasks\CWXI not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CWXI" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{163F5C9C-7305-41C7-8B6D-9D5592A55480}" => Key deleted successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C66112C-3907-402E-805D-A3450C5925CD}" => Key deleted successfully.
C:\Windows\System32\Tasks\MUF not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MUF" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{258B3220-DA80-4C97-9948-8F6167A58480}" => Key deleted successfully.
C:\Windows\System32\Tasks\Selection Tools Update not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Selection Tools Update" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{279174BD-69B1-4BE9-B93E-81DDAA31E523}" => Key deleted successfully.
C:\Windows\System32\Tasks\AZYFZOJ not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AZYFZOJ" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37498F1D-05E0-4289-AF69-4DA8E899D8A4}" => Key deleted successfully.
C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38137C2A-2E28-4625-8CBC-5D21FACCA488}" => Key deleted successfully.
C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E529869-9A93-432C-BB5F-57BBD78653CC}" => Key deleted successfully.
C:\Windows\System32\Tasks\PUHKPUO not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PUHKPUO" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F877953-82D8-47D1-B2BD-A3D6170FD1EA}" => Key deleted successfully.
C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40734B6E-F4B8-43E5-862C-CF99D1988897}" => Key deleted successfully.
C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76D3399A-D3FF-41CC-8806-9491E11AB7A0}" => Key deleted successfully.
C:\Windows\System32\Tasks\XTAQVI not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XTAQVI" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84}" => Key deleted successfully.
C:\Windows\System32\Tasks\TYHHD not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TYHHD" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87}" => Key deleted successfully.
C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8023BA3F-8482-4995-9BBC-0350CCDF7E27}" => Key deleted successfully.
C:\Windows\System32\Tasks\FXXND not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FXXND" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{840DB2A1-005C-4DC1-AE59-6728BB7F8BB9}" => Key deleted successfully.
C:\Windows\System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4BBD2CDA-9F84-4A5A-B751-783453E5725B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848A302F-6552-428B-95B7-609C09B40DE1}" => Key deleted successfully.
C:\Windows\System32\Tasks\HVFGTX not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HVFGTX" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{870B374F-77BA-4009-8A5D-DAA2A6D98BDF}" => Key deleted successfully.
C:\Windows\System32\Tasks\WindApp Update not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindApp Update" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95}" => Key deleted successfully.
C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA422A78-42CA-4C51-94D4-CAD9720189CB}" => Key deleted successfully.
C:\Windows\System32\Tasks\TAYB not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TAYB" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE4C7F7E-1900-4D48-9A8F-DA35F68B907C}" => Key deleted successfully.
C:\Windows\System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A20C8841-607D-4AE6-865D-FBFE2222FA16}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE87469B-692D-465F-A0A4-D549D236AB72}" => Key deleted successfully.
C:\Windows\System32\Tasks\UUKXC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UUKXC" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F72A565A-3EDF-4CB9-95BB-1BA9947A70A6}" => Key deleted successfully.
C:\Windows\System32\Tasks\IPAKC not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IPAKC" => Key deleted successfully.
C:\Windows\Tasks\AZYFZOJ.job not found.
C:\Windows\Tasks\CWXI.job not found.
C:\Windows\Tasks\FXXND.job not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\HVFGTX.job not found.
C:\Windows\Tasks\IPAKC.job not found.
C:\Windows\Tasks\MUF.job not found.
C:\Windows\Tasks\PUHKPUO.job not found.
C:\Windows\Tasks\TAYB.job not found.
C:\Windows\Tasks\TYHHD.job not found.
C:\Windows\Tasks\UUKXC.job not found.
C:\Windows\Tasks\XTAQVI.job not found.> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-06 00:45:31)<
C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381} => Moved successfully.
C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e} => Moved successfully.
C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e} => Moved successfully.
C:\Windows\WindowsUpdate.log => Is moved successfully.End of Fixlog 00:45:32
et je relance mes navigateurs. -
ModérateurVoici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
2013-12-26 17:26 - 2011-06-11 01:58 - 0421200 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcp100.dll
2013-12-26 17:26 - 2011-06-11 01:58 - 0773968 _____ (Microsoft Corporation) C:\Users\Dominique\AppData\Local\msvcr100.dll
2015-02-28 18:13 - 2015-02-28 18:15 - 0006087 _____ () C:\Users\Dominique\AppData\Local\MyWinLockerInstaller.txt-20150228.log
2015-04-02 16:47 - 2015-04-02 16:46 - 0628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-03 17:11 - 2015-04-03 17:11 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 13:05 - 2015-04-03 13:05 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-02 20:36 - 2015-04-02 20:36 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2014-07-10 10:16 - 2014-07-10 10:16 - 0591520 _____ (ClickMeIn Limited) C:\Users\Dominique\AppData\Local\nsn8F49.tmp
2015-04-03 12:57 - 2015-04-03 12:57 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 0613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2013-12-26 17:26 - 2013-08-07 16:32 - 2598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtCore4.dll
2013-12-26 17:26 - 2013-06-27 11:16 - 8581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtGui4.dll
2013-12-26 17:26 - 2013-06-27 11:10 - 1053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Dominique\AppData\Local\QtNetwork4.dll
2013-12-26 17:26 - 2013-03-18 18:45 - 0274432 _____ (The OpenSSL Project, https://www.openssl.org/ C:\Users\Dominique\AppData\Local\ssleay32.dll [Pays DE - 194.97.150.234]
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 1916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 1508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 1755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 19:26 - 2015-04-02 19:26 - 2052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-04-02 15:24 - 2015-04-02 15:24 - 1911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Dominique\AppData\Roaming\MUF
2015-04-02 15:34 - 2015-04-02 15:34 - 1380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-04-02 15:28 - 2015-04-02 15:28 - 1545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-04-02 15:33 - 2015-04-02 15:33 - 2035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 1956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-04-03 12:19 - 2015-04-03 12:51 - 1360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2014-04-28 07:52 - 2014-04-28 07:52 - 0000043 _____ () C:\Users\Dominique\AppData\Roaming\WB.CFG
2010-01-31 17:33 - 2010-10-14 21:56 - 0001866 _____ () C:\Users\Dominique\AppData\Roaming\wklnhst.dat
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-04-02 15:54 - 2015-04-02 15:54 - 1519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2013-12-26 17:26 - 2013-11-19 13:23 - 0109568 _____ () C:\Users\Dominique\AppData\Local\ContentAgent.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 01519104 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\XTAQVI.exe
2015-04-02 15:54 - 2015-04-02 15:54 - 00004396 _____ () C:\Windows\System32\Tasks\XTAQVI
2015-04-02 15:52 - 2015-04-05 22:13 - 00001700 _____ () C:\Windows\Tasks\AZYFZOJ.job
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427989960-DE11-B21A-FED31E34A9CB
2015-04-02 15:52 - 2015-04-02 15:53 - 00000000 ____D () C:\Program Files (x86)\c617f0be-3767-406d-b870-a56f11c52426
2015-04-02 15:52 - 2015-04-02 15:52 - 01916416 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe
2015-04-02 15:52 - 2015-04-02 15:52 - 00004742 _____ () C:\Windows\System32\Tasks\AZYFZOJ
2015-04-02 15:52 - 2015-04-02 15:52 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427982753-DE11-B21A-FED31E34A9CB
2015-04-02 15:51 - 2015-04-03 12:18 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV02.04-ntf
2015-04-02 15:50 - 2015-04-02 15:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-02 15:49 - 2015-04-02 15:49 - 00003776 _____ () C:\Windows\System32\Tasks\Selection Tools Update
2015-04-02 15:49 - 2015-04-02 15:49 - 00003742 _____ () C:\Windows\System32\Tasks\WindApp Update
2015-04-02 15:47 - 2015-04-02 15:48 - 00000000 ____D () C:\Program Files (x86)\ac742627-36b0-4897-8e10-387b0c342994
2015-04-02 15:45 - 2015-04-03 19:59 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-02 15:35 - 2015-04-02 19:55 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988906-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-05 21:46 - 00001348 _____ () C:\Windows\Tasks\MUF.job
2015-04-02 15:34 - 2015-04-02 15:35 - 00000000 ____D () C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB
2015-04-02 15:34 - 2015-04-02 15:34 - 01380352 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\MUF.exe
2015-04-02 15:34 - 2015-04-02 15:34 - 00004390 _____ () C:\Windows\System32\Tasks\MUF
2015-04-02 15:33 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\TAYB.job
2015-04-02 15:33 - 2015-04-02 15:34 - 00000000 ____D () C:\Program Files (x86)\ce6636ec-810d-4103-88f5-b8640dd9a6a3
2015-04-02 15:33 - 2015-04-02 15:33 - 02035200 _____ (Cinema PlusV16.03) C:\Users\Dominique\AppData\Roaming\TAYB.exe
2015-04-02 15:33 - 2015-04-02 15:33 - 00004392 _____ () C:\Windows\System32\Tasks\TAYB
2015-04-02 15:32 - 2015-04-02 15:32 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981571-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-05 22:24 - 00001356 _____ () C:\Windows\Tasks\PUHKPUO.job
2015-04-02 15:28 - 2015-04-05 16:01 - 00000000 ____D () C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB
2015-04-02 15:28 - 2015-04-02 15:28 - 01545216 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe
2015-04-02 15:28 - 2015-04-02 15:28 - 00004398 _____ () C:\Windows\System32\Tasks\PUHKPUO
2015-04-02 15:27 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\TYHHD.job
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\c136503f-316c-41bd-b28b-e55872e5e800
2015-04-02 15:27 - 2015-04-02 15:28 - 00000000 ____D () C:\Program Files (x86)\06d341e8-09b8-4cd3-b0e1-8f9d05feee60
2015-04-02 15:27 - 2015-04-02 15:27 - 01956352 _____ (ObjectB) C:\Users\Dominique\AppData\Roaming\TYHHD.exe
2015-04-02 15:27 - 2015-04-02 15:27 - 00004394 _____ () C:\Windows\System32\Tasks\TYHHD
2015-04-02 15:27 - 2015-04-02 15:27 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-02 15:27 - 2015-04-02 15:27 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-04-02 15:25 - 2015-04-05 21:46 - 00001350 _____ () C:\Windows\Tasks\CWXI.job
2015-04-02 15:25 - 2015-04-02 15:25 - 01508864 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\CWXI.exe
2015-04-02 15:25 - 2015-04-02 15:25 - 00004392 _____ () C:\Windows\System32\Tasks\CWXI
2015-04-02 15:25 - 2015-04-02 15:25 - 00000000 ____D () C:\Users\Dominique\AppData\Local\CrashRpt
2015-04-02 15:24 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\IPAKC.job
2015-04-02 15:24 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\7701c693-3c37-49a1-93d8-a9a5ac6b9eae
2015-04-02 15:24 - 2015-04-02 15:24 - 01911808 _____ (Ci2.4iPlusV02.04) C:\Users\Dominique\AppData\Roaming\IPAKC.exe
2015-04-02 15:24 - 2015-04-02 15:24 - 00004394 _____ () C:\Windows\System32\Tasks\IPAKC
2015-04-02 15:23 - 2015-04-02 15:23 - 00000000 ____D () C:\ProgramData\12611355569204033277
2015-04-02 15:22 - 2015-04-02 15:22 - 00000000 ____D () C:\ProgramData\fpdelkephkodiogaijfncjdhfjglafnc
2015-04-02 15:21 - 2015-04-02 18:11 - 00000000 ____D () C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}
2015-04-02 15:16 - 2015-04-02 15:16 - 00000000 ____D () C:\Program Files (x86)\app_setup
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\TYHHD
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\IPAKC
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\FXXND
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Dominique\AppData\Roaming\AZYFZOJ
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\XTAQVI
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\UUKXC
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\PUHKPUO
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Dominique\AppData\Roaming\CWXI
2015-03-23 19:36 - 2015-03-24 17:05 - 00095689 _____ () C:\Users\Dominique\Desktop\dossier module 5 relu.odt
2015-03-22 21:49 - 2015-03-19 19:56 - 00099769 _____ () C:\Users\Dominique\Desktop\dossier module 5.odt
2015-03-15 10:33 - 2015-03-15 10:33 - 00000000 ____D () C:\Users\Dominique\AppData\Local\{33D4B504-DEB7-4C6B-898C-B9F6FF645FEF}
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\TAYB
2015-03-09 23:30 - 2015-03-09 23:30 - 00005487 _____ () C:\Users\Dominique\AppData\Roaming\HVFGTX
2015-04-02 15:54 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\XTAQVI.job
2015-04-03 19:04 - 2015-04-03 20:00 - 00000000 ____D () C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}
2015-04-03 18:43 - 2015-04-03 18:43 - 00000000 ____D () C:\ProgramData\ncajiggepkgnbdflfmkfnoiianjjneap
2015-04-03 18:42 - 2015-04-04 07:50 - 00000000 ____D () C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}
2015-04-03 17:11 - 2015-04-03 17:11 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nseACD6.tmp
2015-04-03 17:03 - 2015-04-03 17:03 - 00000000 ____D () C:\ProgramData\ijaldoamkjljjnpaemojhobpocnjhedn
2015-04-03 17:02 - 2015-04-03 17:18 - 00000000 ____D () C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}
2015-04-03 17:00 - 2015-04-05 21:50 - 02069749 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 13:05 - 2015-04-03 13:05 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsl63BA.tmp
2015-04-03 13:02 - 2015-04-03 13:02 - 00003118 _____ () C:\Windows\System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097}
2015-04-03 12:57 - 2015-04-03 12:57 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyD1F7.tmp
2015-04-03 12:19 - 2015-04-05 21:46 - 00001352 _____ () C:\Windows\Tasks\UUKXC.job
2015-04-03 12:19 - 2015-04-03 12:51 - 01360384 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\UUKXC.exe
2015-04-03 12:19 - 2015-04-03 12:51 - 00004394 _____ () C:\Windows\System32\Tasks\UUKXC
2015-04-03 12:18 - 2015-04-03 12:50 - 01755136 _____ (Cinema PlusV02.04) C:\Users\Dominique\AppData\Roaming\FXXND.exe
2015-04-03 12:18 - 2015-04-03 12:50 - 00003400 _____ () C:\Windows\System32\Tasks\FXXND
2015-04-03 12:18 - 2015-04-03 12:50 - 00001352 _____ () C:\Windows\Tasks\FXXND.job
2015-04-03 12:18 - 2015-04-03 12:19 - 00000000 ____D () C:\Program Files (x86)\cc965dac-09c9-4805-95b6-6037ab119534
2015-04-02 21:16 - 2015-04-02 21:16 - 00003172 _____ () C:\Windows\System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506}
2015-04-02 20:36 - 2015-04-02 20:36 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsm4BB4.tmp
2015-04-02 19:41 - 2015-04-02 19:41 - 00613255 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsyF0F8.tmp
2015-04-02 19:26 - 2015-04-05 21:46 - 00001354 _____ () C:\Windows\Tasks\HVFGTX.job
2015-04-02 19:26 - 2015-04-02 19:26 - 02052096 _____ (Com NotificationV25.03) C:\Users\Dominique\AppData\Roaming\HVFGTX.exe
2015-04-02 19:26 - 2015-04-02 19:26 - 00004396 _____ () C:\Windows\System32\Tasks\HVFGTX
2015-04-02 19:23 - 2015-04-02 19:51 - 00000000 ____D () C:\ProgramData\{9046a7bf-5cee-4c5b-9046-6a7bf5ce9efd}
2015-04-02 19:16 - 2015-04-02 19:28 - 00001634 _____ () C:\Windows\SysWOW64\${LOGFILE}
2015-04-02 18:25 - 2015-04-03 19:05 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.75
2015-04-02 18:24 - 2015-04-02 18:53 - 00000000 ____D () C:\ProgramData\{d5cedeec-5eb0-296c-d5ce-edeec5eb7bb1}
2015-04-02 18:16 - 2015-04-02 18:16 - 00003168 _____ () C:\Windows\System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF}
2015-04-02 16:47 - 2015-04-02 16:46 - 00628688 _____ (CMI Limited) C:\Users\Dominique\AppData\Local\nsb2C30.tmp
2015-04-02 16:23 - 2015-04-03 17:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-03 20:07 - 2015-04-03 20:07 - 00003176 _____ () C:\Windows\System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F}
R2 gikiwyle; C:\Users\Dominique\AppData\Local\20A6C7EA-1427988891-DE11-B21A-FED31E34A9CB\cnsp4E4B.tmp [152064 2015-04-02] () [File not signed]
R2 nixikubi; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\jnsd79AA.tmp [154112 2015-04-02] () [File not signed]
R2 qumesuky; C:\Users\Dominique\AppData\Roaming\20A6C7EA-1427981327-DE11-B21A-FED31E34A9CB\nsj668.tmp [205312 2015-04-05] () [File not signed]
S2 Update Mountain Bike; C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe [X]
S2 Util Mountain Bike; C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe [X]
S2 VCL; C:\Program Files (x86)\IGS\VCL.exe [X]
CHR Extension: (Cinema-Plus-1.7cV16.03) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\acklnhgjphbhhomkneonohbjnbmkclfb [2015-04-02]
CHR Extension: (CinPlus-2.4icV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-02]
CHR Extension: (pajecklcmiegagoelbbjldmfcbcpdpll) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pajecklcmiegagoelbbjldmfcbcpdpll [2015-04-05]
CHR Extension: (Cinema PlusV02.04) - C:\Users\Dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-04-02]
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AC0.lnk
ShortcutTarget: AC0.lnk -> C:\ProgramData\{f06932cf-9676-ed2a-f069-932cf967cb3e}\AC0.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E80.lnk
ShortcutTarget: E80.lnk -> C:\ProgramData\{c344c6a3-842c-1fff-c344-4c6a38421a8e}\E80.exe ()
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{8805af70-454a-e60e-8805-5af70454bdc1}\hqghumeaylnlf.exe (PC Utilities Software Limited)
Startup: C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Priceless_310315.lnk
ShortcutTarget: Priceless_310315.lnk -> C:\ProgramData\{3bef08e0-4997-b04c-3bef-f08e04992381}\Priceless_310315.exe ()
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_fr_576] => [X]
HKLM-x32\...\Run: [StormWatch] => C:\Program Files (x86)\StormWatch\StormWatchApp.exe
Task: {11E1AE23-2173-4366-9875-2468AEE269F2} - System32\Tasks\CWXI => C:\Users\Dominique\AppData\Roaming\CWXI.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: {163F5C9C-7305-41C7-8B6D-9D5592A55480} - System32\Tasks\SPBIW_UpdateTask_Time_323936323133363931312d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {1C66112C-3907-402E-805D-A3450C5925CD} - System32\Tasks\MUF => C:\Users\Dominique\AppData\Roaming\MUF.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {258B3220-DA80-4C97-9948-8F6167A58480} - System32\Tasks\Selection Tools Update => C:\Users\Dominique\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe
Task: {279174BD-69B1-4BE9-B93E-81DDAA31E523} - System32\Tasks\AZYFZOJ => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {2F5B60F9-6C7D-457A-A18A-EBD468BC1AA7} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {37498F1D-05E0-4289-AF69-4DA8E899D8A4} - System32\Tasks\Test TimeTrigger => C:\Users\DOMINI~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {38137C2A-2E28-4625-8CBC-5D21FACCA488} - System32\Tasks\{5BD5ECDB-AFE8-4CE4-9D84-CADFE3DD9506} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {3E529869-9A93-432C-BB5F-57BBD78653CC} - System32\Tasks\PUHKPUO => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {3F877953-82D8-47D1-B2BD-A3D6170FD1EA} - System32\Tasks\{DC294F94-7499-49D7-9D6D-1CDE16CB9097} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
Task: {40734B6E-F4B8-43E5-862C-CF99D1988897} - System32\Tasks\{C560E18C-69B6-41B6-BD96-7F5D3C2C291F} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=fsf
Task: {76D3399A-D3FF-41CC-8806-9491E11AB7A0} - System32\Tasks\XTAQVI => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe [2015-04-02] (Cinema PlusV02.04) <==== ATTENTION
Task: {7DEDD634-4AA3-4AB7-A0EB-F6B532F96F84} - System32\Tasks\TYHHD => C:\Users\Dominique\AppData\Roaming\TYHHD.exe [2015-04-02] (ObjectB) <==== ATTENTION
Task: {7F3BD1B1-DFE3-4A7A-BB51-1DFE100ECB87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {8023BA3F-8482-4995-9BBC-0350CCDF7E27} - System32\Tasks\FXXND => C:\Users\Dominique\AppData\Roaming\FXXND.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {840DB2A1-005C-4DC1-AE59-6728BB7F8BB9} - System32\Tasks\{4BBD2CDA-9F84-4A5A-B751-783453E5725B} => pcalua.exe -a "C:\Program Files (x86)\Fronimo\Uninstal.exe"
Task: {848A302F-6552-428B-95B7-609C09B40DE1} - System32\Tasks\HVFGTX => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe [2015-04-02] (Com NotificationV25.03) <==== ATTENTION
Task: {870B374F-77BA-4009-8A5D-DAA2A6D98BDF} - System32\Tasks\WindApp Update => C:\Users\Dominique\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION
Task: {AC9D6B5F-1CAA-4A6C-BB70-D7E6AAED3D95} - System32\Tasks\{E1DA1AE3-4265-4CBC-85A2-18A3AB9CC9AF} => pcalua.exe -a C:\Users\Dominique\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {BF3F419D-5860-41D8-88FF-C3E1A8DBC5DE} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {DA422A78-42CA-4C51-94D4-CAD9720189CB} - System32\Tasks\TAYB => C:\Users\Dominique\AppData\Roaming\TAYB.exe [2015-04-02] (Cinema PlusV16.03) <==== ATTENTION
Task: {DE4C7F7E-1900-4D48-9A8F-DA35F68B907C} - System32\Tasks\{A20C8841-607D-4AE6-865D-FBFE2222FA16} => pcalua.exe -a "C:\Users\Dominique\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH1CZ326\tscc.exe" -d C:\Users\Dominique\Desktop
Task: {DE87469B-692D-465F-A0A4-D549D236AB72} - System32\Tasks\UUKXC => C:\Users\Dominique\AppData\Roaming\UUKXC.exe [2015-04-03] (Cinema PlusV02.04) <==== ATTENTION
Task: {F72A565A-3EDF-4CB9-95BB-1BA9947A70A6} - System32\Tasks\IPAKC => C:\Users\Dominique\AppData\Roaming\IPAKC.exe [2015-04-02] (Ci2.4iPlusV02.04) <==== ATTENTION
Task: C:\Windows\Tasks\AZYFZOJ.job => C:\Users\Dominique\AppData\Roaming\AZYFZOJ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CWXI.job => C:\Users\Dominique\AppData\Roaming\CWXI.exe <==== ATTENTION
Task: C:\Windows\Tasks\FXXND.job => C:\Users\Dominique\AppData\Roaming\FXXND.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HVFGTX.job => C:\Users\Dominique\AppData\Roaming\HVFGTX.exe <==== ATTENTION
Task: C:\Windows\Tasks\IPAKC.job => C:\Users\Dominique\AppData\Roaming\IPAKC.exe <==== ATTENTION
Task: C:\Windows\Tasks\MUF.job => C:\Users\Dominique\AppData\Roaming\MUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PUHKPUO.job => C:\Users\Dominique\AppData\Roaming\PUHKPUO.exe <==== ATTENTION
Task: C:\Windows\Tasks\TAYB.job => C:\Users\Dominique\AppData\Roaming\TAYB.exe <==== ATTENTION
Task: C:\Windows\Tasks\TYHHD.job => C:\Users\Dominique\AppData\Roaming\TYHHD.exe <==== ATTENTION
Task: C:\Windows\Tasks\UUKXC.job => C:\Users\Dominique\AppData\Roaming\UUKXC.exe <==== ATTENTION
Task: C:\Windows\Tasks\XTAQVI.job => C:\Users\Dominique\AppData\Roaming\XTAQVI.exe <==== ATTENTION
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :- Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
- Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
- Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
-
Voici donc les rapports d'adwcleaner :
https://pjjoint.malekal.com/files.php?id=20150405_f5l8w11m14r10
https://pjjoint.malekal.com/files.php?id=20150405_j10e13j5i11w5
https://pjjoint.malekal.com/files.php?id=20150405_f5f15j6p15t6
https://pjjoint.malekal.com/files.php?id=20150405_m8p12w9p10u5
et voici les liens suite à FRST
FRST.txt : https://pjjoint.malekal.com/files.php?id=20150405_b5d8v8r8o11
Addition.txt : https://pjjoint.malekal.com/files.php?id=20150405_y6x9c13t13j5
et shortcut.txt : https://pjjoint.malekal.com/files.php?id=20150405_m12y11p8z14x7 -
Je prépare les rapports mais la navigation est très lente car beaucoup de fenêtres s'ouvrent en même temps que je navigue...
J'ai presque terminé. -
Merci Malekal_morte
La personne qui m'a confié le PC a déjà plusieurs fois effectué adwcleaner avant de me le donner. Veux-tu que je colle les rapports de ses actions aussi ? car lorsque je l'ai fait, il n'a pas trouvé grand chose... -
ModérateurSalut,
Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :
Commence par ceci :
Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]
Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
puis :
Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :- FRST.txt
- Shortcut.txt
- Additionnal.txt
Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.
