Désinstaller Crossbrowse. Résolu

Question

Bonjour, 
J'ai eu un nouvel ordinateur avec Win 8 , et j'ai souhaité charger Chrome. Depuis ça, j'ai comme une sorte de navigateur, qui s'appelle "Croosbrowser", qui prend toute la place, qui est en Anglais et je souhaitais le désinstaller en espérant retrouver le confort que j'avais avant avec win 7. Mais dès lors que je veux le désinstaller dans le panneau de configuration, ça m'indique que je dois fermer toutes les fenètres, et je ne peux en fermer plus , car je n'ai que le panneau de config ouvert...
Y a t il quelqu'un qui pourrait m'indiquer comment procéder ? 
D'avance, merci.



Configuration: Windows / Chrome 39.4.2171.95

Malekal_morte- · Answer

Salut, 

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB. 
Voici la procédure à suivre pour les supprimer : 

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode ) 
Télécharge le sur ton bureau ou dossier de téléchargement.  
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKU\S-1-5-21-3890241590-2999524543-3268099448-1001\...\Run: [GoogleChromeAutoLaunch_AB92BDE58FA4AB6DDEE8571E30EC2EFB] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:64757;https=127.0.0.1:64757 [Attention - Possible Proxy Malicieux]
ProxyEnable: [S-1-5-21-3890241590-2999524543-3268099448-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-3890241590-2999524543-3268099448-1001] => http=127.0.0.1:64757;https=127.0.0.1:64757 [Attention - Possible Proxy Malicieux]
R2 WaNetEnhance Service; C:\Program Files (x86)\WaNetEnhance\WaNetEnhance Internet Enhancer\InternetEnhancerService.exe [666624 2015-04-01] () [File not signed]
2015-04-12 20:52 - 2015-04-12 20:53 - 00000000 ____D () C:\Program Files (x86)\80e692b5-7500-49ee-997a-109fc16e7816
2015-04-12 20:52 - 2015-04-12 20:52 - 00000000 ____D () C:\Program Files (x86)\91b7c297-ff08-4945-abcb-bfcd2569689b
2015-04-12 20:44 - 2015-04-12 20:51 - 00000000 ____D () C:\Users\UTILISATEUR\AppData\Local\Google
2015-04-12 20:44 - 2015-04-12 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetEnhance
2015-04-12 20:44 - 2015-04-12 20:44 - 00000000 ____D () C:\Program Files (x86)\WaNetEnhance
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\UTILISATEUR\AppData\Roaming\VVYZ
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\UTILISATEUR\AppData\Roaming\MCKILZS
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA1d075522b52d6cd.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: {D7517026-0AD0-4861-B692-4272AF06FBE7} - System32\Tasks\globalUpdateUpdateTaskMachineUA1d075522b52d6cd => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

Eccl75 · Answer

Bonjour, 

Voici les liens : 

- https://pjjoint.malekal.com/files.php?id=20150627_l9m12y6v11i13 (AdwCleaner)

- https://pjjoint.malekal.com/files.php?id=FRST_20150627_u5e8w9u10t6 (FRST)
- https://pjjoint.malekal.com/files.php?id=20150627_u13u14j12c9r11 (Addition)
- https://pjjoint.malekal.com/files.php?id=20150627_u13e12l5t6x12 (Shortcut) 

Merci !

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [DesktopSearch] => C:\ProgramData\DesktopSearch\DesktopSearch.exe [153056 2015-06-27] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe [2011-10-11] (CineForm)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux]
ProxyEnable: [S-1-5-21-1950117177-844656073-2298298385-1001] => Internet Explorer proxy is enabled
ProxyServer: [S-1-5-21-1950117177-844656073-2298298385-1001] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux]
BHO-x32: On Stage -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> C:\Program Files (x86)\On Stage\Extensions\9771c444-42b0-4e23-a7fb-ff707123ab30.dll No File
FF Extension: On Stage - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi [2015-06-27]
FF HKLM\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox
FF Extension: Lightshot (screenshot tool) - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2015-05-30]
R2 DRrJul; C:\ProgramData\fmCEuWAyppG\DRrJul.exe [2731488 2015-06-27] (Unique Solutions)
R2 WInterEnhancer Service; C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560 2015-06-21] () [File not signed]
R2 xoperoze; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\jnsp9DE6.tmp [219136 2015-06-22] () [File not signed]
R2 zedepory; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\hnszC880.tmp [166912 2015-06-22] () [File not signed]
R2 widimisi; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\knsu7183.tmpfs [X]
S2 wssvc_1.10.0.19; C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe [X]
2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C:\Windows\System32\Tasks\Orvsaoivbo
2015-06-27 21:11 - 2015-06-27 21:11 - 00000000 ____D C:\ProgramData\Orvsaoivbo
2015-06-27 21:01 - 2015-06-27 21:12 - 00000000 ____D C:\Users\Eglantine\AppData\Local\DesktopSearch
2015-06-27 21:00 - 2015-06-27 21:00 - 00000000 ____D C:\ProgramData\fmCEuWAyppG
2015-06-27 20:59 - 2015-06-27 20:59 - 00001911 _____ C:\Users\Eglantine\Desktop\Desktop Search.lnk
2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search
2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\ProgramData\DesktopSearch
2015-06-27 20:22 - 2015-06-27 20:23 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
2015-06-27 19:51 - 2015-06-27 19:51 - 00243592 _____ C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe
2015-06-27 19:30 - 2015-06-27 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer
2015-06-27 19:29 - 2015-06-27 19:30 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer
2015-06-27 19:29 - 2015-06-27 19:29 - 00003502 _____ C:\Windows\System32\Tasks\avabvdxvy
2015-06-27 19:29 - 2015-06-27 19:29 - 00000000 ____D C:\Users\Eglantine\AppData\Local\avabvdxvy
2015-06-23 22:54 - 2015-06-23 22:54 - 00003118 _____ C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4}
2015-06-22 23:27 - 2015-06-22 23:27 - 00000000 ____D C:\Program Files (x86)\Product Deals
2015-06-22 22:39 - 2015-06-22 22:39 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF
2015-06-22 22:38 - 2012-03-17 20:56 - 00002037 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-22 22:37 - 2015-06-27 20:19 - 00000000 ____D C:\Program Files (x86)\Software
2015-06-22 22:37 - 2015-06-22 22:38 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF
2015-06-22 22:27 - 2015-06-25 22:27 - 00000348 _____ C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job
2015-06-22 22:27 - 2015-06-22 22:27 - 00003268 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7]
2015-06-22 22:16 - 2015-06-23 22:47 - 00000000 ____D C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b
2015-06-22 22:16 - 2015-06-23 22:41 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-22 22:14 - 2015-06-22 22:14 - 00226304 _____ C:\Users\Eglantine\Downloads\f6f.exe
2015-06-22 22:13 - 2015-06-22 22:13 - 00226304 _____ C:\Users\Eglantine\Downloads\145.exe
2015-06-22 22:12 - 2015-06-22 22:12 - 00683296 _____ C:\Users\Eglantine\Downloads\Setup.exe
2015-06-16 00:27 - 2015-06-16 00:27 - 00061312 _____ (WS) C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys
2015-06-12 10:13 - 2015-06-12 10:13 - 00000000 ____D C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4}
Task: {369D354A-0423-45E4-9ABC-AEFC9193C26E} - System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe
Task: {A616BE34-CCB3-41C4-A0D2-F8501EFE0A95} - System32\Tasks\Orvsaoivbo => C:\ProgramData\Orvsaoivbo\1.0.1.0\creweait.exe [2015-06-27] ()
Task: {E932A675-508A-4FD8-99AF-63F2466591DA} - System32\Tasks\avabvdxvy => C:\Users\Eglantine\AppData\Local\avabvdxvy\avabvdxvy.exe [2015-06-21] () <==== ATTENTION
Task: {EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7} - System32\Tasks\Bidaily Synchronize Task[74c7] => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaà®t, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

et enfin :

Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/
Surtout active les détections LPIs.

Malekal_morte- · Answer

=)

Voila, c'est terminé, tu peux supprimer les programmes utilisés. 

Quelques conseils : 


Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start= 


Pour ne plus te faire avoir. 
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/ 
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Eccl75 · Answer

Le fixlog de FRST.
Merci !

Fix result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Eglantine at 2015-06-28 16:39:16 Run:1
Running from C:\Users\Eglantine\Desktop
Loaded Profiles: Eglantine (Available Profiles: Eglantine)
Boot Mode: Normal
==============================================

fixlist content:
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [DesktopSearch] => C:\ProgramData\DesktopSearch\DesktopSearch.exe [153056 2015-06-27] ()
Startup: C:\ProgramData\Microsoft WINDOWS\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe [2011-10-11] (CineForm)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux]
ProxyEnable: [S-1-5-21-1950117177-844656073-2298298385-1001] => Internet Explorer proxy is enabled
ProxyServer: [S-1-5-21-1950117177-844656073-2298298385-1001] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux]
BHO-x32: On Stage -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> C:\Program Files (x86)\On Stage\Extensions\9771c444-42b0-4e23-a7fb-ff707123ab30.dll No File
FF Extension: On Stage - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi [2015-06-27]
FF HKLM\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox
FF Extension: Lightshot (screenshot tool) - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2015-05-30]
R2 DRrJul; C:\ProgramData\fmCEuWAyppG\DRrJul.exe [2731488 2015-06-27] (Unique Solutions)
R2 WInterEnhancer Service; C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560 2015-06-21] () [File not signed]
R2 xoperoze; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\jnsp9DE6.tmp [219136 2015-06-22] () [File not signed]
R2 zedepory; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\hnszC880.tmp [166912 2015-06-22] () [File not signed]
R2 widimisi; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\knsu7183.tmpfs [X]
S2 wssvc_1.10.0.19; C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe [X]
2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C: WINDOWS\System32\Tasks\Orvsaoivbo
2015-06-27 21:11 - 2015-06-27 21:11 - 00000000 ____D C:\ProgramData\Orvsaoivbo
2015-06-27 21:01 - 2015-06-27 21:12 - 00000000 ____D C:\Users\Eglantine\AppData\Local\DesktopSearch
2015-06-27 21:00 - 2015-06-27 21:00 - 00000000 ____D C:\ProgramData\fmCEuWAyppG
2015-06-27 20:59 - 2015-06-27 20:59 - 00001911 _____ C:\Users\Eglantine\Desktop\Desktop Search.lnk
2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search
2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\ProgramData\DesktopSearch
2015-06-27 20:22 - 2015-06-27 20:23 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
2015-06-27 19:51 - 2015-06-27 19:51 - 00243592 _____ C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe
2015-06-27 19:30 - 2015-06-27 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer
2015-06-27 19:29 - 2015-06-27 19:30 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer
2015-06-27 19:29 - 2015-06-27 19:29 - 00003502 _____ C:\Windows\System32\Tasks\avabvdxvy
2015-06-27 19:29 - 2015-06-27 19:29 - 00000000 ____D C:\Users\Eglantine\AppData\Local\avabvdxvy
2015-06-23 22:54 - 2015-06-23 22:54 - 00003118 _____ C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4}
2015-06-22 23:27 - 2015-06-22 23:27 - 00000000 ____D C:\Program Files (x86)\Product Deals
2015-06-22 22:39 - 2015-06-22 22:39 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF
2015-06-22 22:38 - 2012-03-17 20:56 - 00002037 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-22 22:37 - 2015-06-27 20:19 - 00000000 ____D C:\Program Files (x86)\Software
2015-06-22 22:37 - 2015-06-22 22:38 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF
2015-06-22 22:27 - 2015-06-25 22:27 - 00000348 _____ C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job
2015-06-22 22:27 - 2015-06-22 22:27 - 00003268 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7]
2015-06-22 22:16 - 2015-06-23 22:47 - 00000000 ____D C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b
2015-06-22 22:16 - 2015-06-23 22:41 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-22 22:14 - 2015-06-22 22:14 - 00226304 _____ C:\Users\Eglantine\Downloads\f6f.exe
2015-06-22 22:13 - 2015-06-22 22:13 - 00226304 _____ C:\Users\Eglantine\Downloads\145.exe
2015-06-22 22:12 - 2015-06-22 22:12 - 00683296 _____ C:\Users\Eglantine\Downloads\Setup.exe
2015-06-16 00:27 - 2015-06-16 00:27 - 00061312 _____ (WS) C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys
2015-06-12 10:13 - 2015-06-12 10:13 - 00000000 ____D C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4}
Task: {369D354A-0423-45E4-9ABC-AEFC9193C26E} - System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe
Task: {A616BE34-CCB3-41C4-A0D2-F8501EFE0A95} - System32\Tasks\Orvsaoivbo => C:\ProgramData\Orvsaoivbo\1.0.1.0\creweait.exe [2015-06-27] ()
Task: {E932A675-508A-4FD8-99AF-63F2466591DA} - System32\Tasks\avabvdxvy => C:\Users\Eglantine\AppData\Local\avabvdxvy\avabvdxvy.exe [2015-06-21] () <==== ATTENTION
Task: {EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7} - System32\Tasks\Bidaily Synchronize Task[74c7] => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound => value removed successfully
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD => value removed successfully
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DesktopSearch => value removed successfully
C:\ProgramData\Microsoft WINDOWS\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9771c444-42b0-4e23-a7fb-ff707123ab30}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{9771c444-42b0-4e23-a7fb-ff707123ab30}" => key removed successfully
C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi => moved successfully.
HKLM\Software\Mozilla\Firefox\Extensions\\{535b69cf-44f6-4c9f-96b1-b5adb65c582d} => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{535b69cf-44f6-4c9f-96b1-b5adb65c582d} => value removed successfully
C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} => moved successfully.
DRrJul => Unable to stop service.
DRrJul => Service removed successfully
WInterEnhancer Service => Service stopped successfully.
WInterEnhancer Service => Service removed successfully
xoperoze => Service stopped successfully.
xoperoze => Service removed successfully
zedepory => Service stopped successfully.
zedepory => Service removed successfully
widimisi => Service stopped successfully.
widimisi => Service removed successfully
wssvc_1.10.0.19 => Service removed successfully
"2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C: WINDOWS\System32\Tasks\Orvsaoivbo" => File/Folder not found.
C:\ProgramData\Orvsaoivbo => moved successfully.
C:\Users\Eglantine\AppData\Local\DesktopSearch => moved successfully.

"C:\ProgramData\fmCEuWAyppG" folder move:

Could not move "C:\ProgramData\fmCEuWAyppG" folder => Scheduled to move on reboot.

C:\Users\Eglantine\Desktop\Desktop Search.lnk => moved successfully.
C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search => moved successfully.
C:\ProgramData\DesktopSearch => moved successfully.
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8 => moved successfully.
C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe => moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer => moved successfully.
C:\Program Files (x86)\WInterEnhancer => moved successfully.
C:\Windows\System32\Tasks\avabvdxvy => moved successfully.
C:\Users\Eglantine\AppData\Local\avabvdxvy => moved successfully.
C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4} => moved successfully.
C:\Program Files (x86)\Product Deals => moved successfully.
C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF => moved successfully.
C:\Windows\system32\Drivers\etc\hp.bak => moved successfully.
C:\Program Files (x86)\Software => moved successfully.
C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF => moved successfully.
C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => moved successfully.
C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] => moved successfully.
C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b => moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully.
C:\Users\Eglantine\Downloads\f6f.exe => moved successfully.
C:\Users\Eglantine\Downloads\145.exe => moved successfully.
C:\Users\Eglantine\Downloads\Setup.exe => moved successfully.
C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys => moved successfully.
C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{369D354A-0423-45E4-9ABC-AEFC9193C26E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{369D354A-0423-45E4-9ABC-AEFC9193C26E}" => key removed successfully
C:\Windows\System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.19 Core" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A616BE34-CCB3-41C4-A0D2-F8501EFE0A95}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A616BE34-CCB3-41C4-A0D2-F8501EFE0A95}" => key removed successfully
C:\Windows\System32\Tasks\Orvsaoivbo => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Orvsaoivbo" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E932A675-508A-4FD8-99AF-63F2466591DA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E932A675-508A-4FD8-99AF-63F2466591DA}" => key removed successfully
C:\Windows\System32\Tasks\avabvdxvy not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avabvdxvy" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7}" => key removed successfully
C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[74c7]" => key removed successfully
C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job not found.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-28 16:47:43)<=

C:\ProgramData\fmCEuWAyppG => Is moved successfully

End of Fixlog 16:47:43

Flora243 · Answer

Bonjour, 
j'ai le même soucis que présenté précédemment. J'ai déjà commencé les procédures et voici les liens.

http://pjjoint.malekal.com/files.php?read=20150803_l7l8z14q6y5 (Adwcleaner)



http://pjjoint.malekal.com/files.php?read=FRST_20150803_m57w8b9x11 
(FRST)

http://pjjoint.malekal.com/files.php?read=20150803_j11p7m6x11l8
(Addition)

http://pjjoint.malekal.com/files.php?read=20150803_8g15l14w14s11
(Shotcut)

Merci d'avance !

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe
HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
HKLM-x32\...\Run: [mbot_fr_014010048] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010049] => [X]
HKLM-x32\...\Run: [gmsd_fr_002020047] => [X]
HKLM-x32\...\Run: [gmsd_en_6] => [X]
HKLM-x32\...\Run: [mbot_fr_003010050] => [X]
HKLM-x32\...\Run: [gmsd_fr_005010050] => [X]
HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [WindApp] => C:\Users\Proprietaire\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup
HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [Selection Tools] => C:\Users\Proprietaire\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe /winstartup
HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [GoogleChromeAutoLaunch_E2A8721B832B77B47A1D4F17681D0BEE] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-05-12] (Crossbrowse)
Startup: C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-08-03]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50729;https=127.0.0.1:50729 [Attention - Possible Proxy Malicieux]
CHR HKLM-x32\...\Chrome\Extension: [kbjlipmgfoamgjaogmbihaffnpkpjajp] - C:\Program Files (x86)\Nosibay\Bubble Dock\extensions\GCSurfMatch.crx [Not Found]
R2 7eb89871; c:\Program Files (x86)\PragmaInstance\PragmaInstance.dll [3071488 2015-08-02] () [File not signed]
R2 ljz; c:\windows\ljz.exe [417792 2015-08-03] () [File not signed]
R2 mljz; c:\windows\mljz.exe [408576 2015-08-03] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\eWinManProe\ProtectWindowsManager.exe [708264 2015-08-03] (DTools LIMITED) <==== ATTENTION
S2 comyninu; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\hnsm965B.tmp [X]
S2 copiheze; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\knsfD348.tmp [X]
S2 hyverumu; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\jnsi71AB.tmp [X]
S4 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [X]
S2 Update Box Green; C:\Program Files (x86)\Box Green\updateBoxGreen.exe [X]
S2 Util Coupon Time; C:\Program Files (x86)\Coupon Time\bin\utilCouponTime.exe [X]
2015-08-03 16:56 - 2015-08-03 16:56 - 00000000 ____D C:\ProgramData\7ac3e1d200002e51
2015-08-03 16:54 - 2015-08-03 16:54 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsr559E.tmp
2015-08-03 15:25 - 2015-08-03 15:25 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsz26FB.tmp
2015-08-03 15:23 - 2015-08-03 16:16 - 00000364 _____ C:\WINDOWS\Tasks\Superclean.job
2015-08-03 15:23 - 2015-08-03 15:23 - 00003264 _____ C:\WINDOWS\System32\Tasks\Superclean
2015-08-03 15:23 - 2015-08-03 15:23 - 00000000 ____D C:\ProgramData\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e}
2015-08-03 15:21 - 2015-08-03 15:21 - 00000000 ____D C:\ProgramData\3WinManPro3
2015-08-03 14:55 - 2015-08-03 14:55 - 00003102 _____ C:\WINDOWS\System32\Tasks\sab3009
2015-08-03 14:47 - 2015-08-03 17:09 - 00019024 _____ C:\WINDOWS\PFRO.log
2015-08-03 14:47 - 2015-08-03 17:09 - 00000231 _____ C:\WINDOWS\setupact.log
2015-08-03 14:47 - 2015-08-03 14:47 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-08-03 14:35 - 2015-08-03 14:35 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\BreakingNewsAlert
2015-08-03 14:26 - 2015-08-03 14:26 - 00003990 _____ C:\WINDOWS\System32\Tasks\LaunchPreSignup
2015-08-03 14:26 - 2015-08-03 14:26 - 00000000 ____D C:\ProgramData\db64535f00000475
2015-08-03 14:12 - 2015-08-03 14:12 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nse6F15.tmp
2015-08-03 11:05 - 2015-08-03 15:50 - 00000000 ___HD C:\ProgramData\ljz
2015-08-03 11:05 - 2015-08-03 11:05 - 00000000 ____D C:\ProgramData\4WinManPro4
2015-08-03 11:00 - 2015-08-03 11:01 - 00631808 _____ C:\WINDOWS\ljz.dat
2015-08-03 11:00 - 2015-08-03 11:00 - 00408576 _____ C:\WINDOWS\mljz.exe
2015-08-03 10:58 - 2015-08-03 11:00 - 00417792 _____ C:\WINDOWS\ljz.exe
2015-08-03 10:58 - 2015-08-03 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
2015-08-03 10:37 - 2015-08-03 10:37 - 00003174 _____ C:\WINDOWS\System32\Tasks\{88D9EECC-A601-48E7-BE42-C0F8BBE8F739}
2015-08-03 10:12 - 2015-08-03 10:12 - 00034712 _____ () C:\WINDOWS\system32\Drivers\bsdriver.sys
2015-08-03 10:10 - 2015-08-03 10:10 - 00003172 _____ C:\WINDOWS\System32\Tasks\{CA6B9B7B-FF95-4BE7-8EF7-299B63F7B33A}
2015-08-03 10:08 - 2015-08-03 10:36 - 00000000 ____D C:\Program Files\shopperz02082015
2015-08-03 10:08 - 2015-08-03 10:08 - 00000000 ____D C:\ProgramData\1WinManPro1
2015-08-03 10:08 - 2015-06-18 12:08 - 00061336 _____ (Cherimoya Ltd) C:\WINDOWS\system32\Drivers\cherimoya.sys
2015-08-03 10:05 - 2015-08-03 16:50 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-03 09:45 - 2015-08-03 17:10 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-03 09:45 - 2015-08-03 16:50 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-03 09:45 - 2015-08-03 09:45 - 00931408 _____ (Google Inc.) C:\Users\Proprietaire\Downloads\ChromeSetup.exe
2015-08-03 09:45 - 2015-08-03 09:45 - 00004062 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-03 09:45 - 2015-08-03 09:45 - 00003826 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-03 09:25 - 2015-08-03 17:10 - 00001080 _____ C:\WINDOWS\Tasks\Crossbrowse.job
2015-08-03 09:25 - 2015-08-03 09:25 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\Crossbrowse
2015-08-03 09:25 - 2015-08-03 09:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-08-03 09:24 - 2015-08-03 09:24 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-08-03 00:26 - 2015-08-03 00:26 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
2015-08-02 23:04 - 2015-08-03 09:25 - 00004086 _____ C:\WINDOWS\System32\Tasks\Crossbrowse
2015-08-02 22:51 - 2015-08-02 22:51 - 00000024 _____ C:\Users\Proprietaire\AppData\Roaming\appdataFr25.bin
2015-08-02 22:40 - 2015-08-02 22:40 - 00225792 _____ C:\WINDOWS\SysWOW64\807.exe
2015-08-02 22:40 - 2015-08-02 22:40 - 00225792 _____ C:\WINDOWS\SysWOW64\202aa53.exe
2015-08-02 22:39 - 2015-08-02 22:39 - 00003396 _____ C:\WINDOWS\System32\Tasks\Inst_Rep
2015-08-02 22:39 - 2015-08-02 22:39 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\CrashRpt
2015-08-02 22:01 - 2015-08-02 22:09 - 00003454 _____ C:\WINDOWS\System32\Tasks\Ovovwooorpauu
2015-08-02 22:00 - 2015-08-02 22:01 - 00000000 ____D C:\ProgramData\Ovovwooorpauu
2015-08-02 21:59 - 2015-08-02 23:44 - 00000995 _____ C:\WINDOWS\SysWOW64\${LOGFILE}
2015-08-02 21:57 - 2015-08-02 21:57 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsi1153.tmp
2015-08-02 21:56 - 2015-08-02 21:56 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\Windesk_Winsearch
2015-08-02 21:48 - 2015-08-03 17:10 - 00001050 _____ C:\WINDOWS\Tasks\YAlBD8pN0pdseg61gDwn.job
2015-08-02 21:48 - 2015-08-02 21:48 - 00004064 _____ C:\WINDOWS\System32\Tasks\YAlBD8pN0pdseg61gDwn
2015-08-02 21:47 - 2015-08-02 22:03 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-02 21:47 - 2015-08-02 21:47 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\globalUpdate
2015-08-02 21:45 - 2015-08-02 21:45 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsu2D6E.tmp
2015-08-02 21:37 - 2015-08-03 10:10 - 00004720 _____ C:\WINDOWS\SysWOW64\Shjencueit.ini
2015-08-02 21:37 - 2015-08-03 10:10 - 00002440 _____ C:\WINDOWS\SysWOW64\ShjencueitOff.ini
2015-08-02 21:37 - 2015-08-03 10:10 - 00002440 _____ C:\WINDOWS\system32\ShjencueitOff.ini
2015-08-02 21:37 - 2015-07-29 14:21 - 00353608 _____ C:\WINDOWS\system32\Shjencueit64.dll
2015-08-02 21:37 - 2015-07-29 14:20 - 00283464 _____ C:\WINDOWS\SysWOW64\Shjencueit.dll
2015-08-02 21:35 - 2015-08-02 21:36 - 00000000 ____D C:\Users\Proprietaire\Documents\CleanerPro
2015-08-02 21:35 - 2015-08-02 21:35 - 00003190 _____ C:\WINDOWS\System32\Tasks\CleanerPro_Start
2015-08-02 21:35 - 2015-08-02 21:35 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\CleanerPro
2015-08-02 21:32 - 2015-08-02 05:35 - 00048776 _____ (StdLib) C:\WINDOWS\system32\Drivers\{62dc5e25-b1a4-4bef-b130-001732d3585f}Gw64.sys
2015-08-02 21:31 - 2015-08-03 10:08 - 00000045 _____ C:\user.js
2015-08-02 21:28 - 2015-08-02 22:10 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\{88B2BEEE-AC1A-D256-C182-F7BEE5EA0B26}
2015-08-02 21:23 - 2015-08-02 21:23 - 00000000 ____D C:\ProgramData\OWinManProO
2015-08-02 21:19 - 2015-08-02 21:19 - 00000000 ____D C:\Program Files (x86)\PragmaInstance
2015-08-02 21:11 - 2015-08-02 23:07 - 00000000 ____D C:\ProgramData\2337805153652121619
2015-08-02 21:05 - 2015-08-03 15:05 - 00000360 _____ C:\WINDOWS\Tasks\HyperDock.job
2015-08-02 21:05 - 2015-08-02 21:05 - 00003260 _____ C:\WINDOWS\System32\Tasks\HyperDock
2015-08-02 21:05 - 2015-08-02 21:05 - 00000000 ____D C:\ProgramData\9WinManPro9
2015-08-02 21:05 - 2015-08-02 21:05 - 00000000 ____D C:\ProgramData\{9b1febaa-363a-95d9-9b1f-febaa363aea8}
2015-08-02 21:04 - 2015-08-02 21:04 - 00000000 _____ C:\dummy.htm
2015-08-02 21:02 - 2015-08-03 16:57 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\SmartWeb
2015-08-02 20:56 - 2015-08-02 09:54 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{5663c04f-f294-4115-9114-b62be60538cb}Gw64.sys
2015-08-02 20:52 - 2015-08-02 21:56 - 00000000 ____D C:\Users\Proprietaire\AppData\Roaming\WTools
2015-08-02 20:52 - 2015-08-02 20:52 - 00000078 _____ C:\Users\Proprietaire\AppData\Roaming\Selection Tools.installation.log
2015-08-02 20:51 - 2015-08-02 22:21 - 00000000 ____D C:\Users\Proprietaire\AppData\Roaming\Store
2015-08-02 20:51 - 2015-08-02 20:51 - 00000078 _____ C:\Users\Proprietaire\AppData\Roaming\WindApp.installation.log
2015-08-02 20:46 - 2015-08-02 22:08 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\00000011-1438548397-0000-0000-50465D961051
2015-08-02 20:46 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-08-02 20:45 - 2015-08-02 20:45 - 00000097 _____ C:\Users\Proprietaire\AppData\Roaming\WindApp.boostrap.log
2015-08-02 20:41 - 2015-08-02 20:42 - 00000000 ____D C:\ProgramData\lWinManProl
2015-08-02 20:41 - 2015-08-02 20:41 - 00000000 ____D C:\ProgramData\IHProtectUpDate
2015-08-02 20:40 - 2015-08-02 20:40 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-08-02 20:40 - 2015-08-02 20:40 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-08-02 22:51 - 2015-08-02 22:51 - 0000024 _____ () C:\Users\Proprietaire\AppData\Roaming\appdataFr25.bin
2014-05-13 15:55 - 2015-08-02 20:50 - 0018957 _____ () C:\Users\Proprietaire\AppData\Roaming\Bubble Dock.installation.log
2015-08-02 20:52 - 2015-08-02 20:52 - 0000078 _____ () C:\Users\Proprietaire\AppData\Roaming\Selection Tools.installation.log
2012-12-20 20:54 - 2015-08-03 17:10 - 0000409 _____ () C:\Users\Proprietaire\AppData\Roaming\sp_data.sys
2015-08-02 20:45 - 2015-08-02 20:45 - 0000097 _____ () C:\Users\Proprietaire\AppData\Roaming\WindApp.boostrap.log
2015-08-02 20:51 - 2015-08-02 20:51 - 0000078 _____ () C:\Users\Proprietaire\AppData\Roaming\WindApp.installation.log
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe
2015-08-03 14:12 - 2015-08-03 14:12 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nse6F15.tmp
2015-08-02 21:57 - 2015-08-02 21:57 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsi1153.tmp
2015-08-03 16:54 - 2015-08-03 16:54 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsr559E.tmp
2015-08-02 21:45 - 2015-08-02 21:45 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsu2D6E.tmp
2015-08-03 15:25 - 2015-08-03 15:25 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local\nsz26FB.tmp
Task: C:\WINDOWS\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\HyperDock.job => c:\programdata\{9b1febaa-363a-95d9-9b1f-febaa363aea8}\nsd108f.tmp.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\schedule!3036567561.job => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exeK/schedule /profile c:\programdata\bettersoft\optimizerpro\3036567561.ini <==== ATTENTION
Task: C:\WINDOWS\Tasks\Superclean.job => c:\programdata\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e}\hqghumeaylnlf.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\YAlBD8pN0pdseg61gDwn.job => C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe <==== ATTENTION
Task: {14595D88-C9C0-4FA8-A145-2261D621ABFD} - System32\Tasks\{CA6B9B7B-FF95-4BE7-8EF7-299B63F7B33A} => pcalua.exe -a C:\Users\Proprietaire\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {28ACA332-38ED-45EB-A612-621BC11BFDB2} - System32\Tasks\{88D9EECC-A601-48E7-BE42-C0F8BBE8F739} => pcalua.exe -a "C:\Program Files\shopperz02082015\unins000.exe" -d "C:\Program Files\shopperz02082015"
Task: {6172C2AF-1EE6-4FC8-9FB1-FAFD3DEE5203} - System32\Tasks\sab3009 => C:\PROGRA~2\FASTSE~1\sab3009.exe
Task: {67A47794-4585-4592-8B13-E0821C17EA22} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {6A83AF4A-93A0-46E2-BF89-09085327B8A1} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION
Task: {84FF5FFE-ACAA-4967-B543-41AA3543EEFE} - \APSnotifierPP2 No Task File <==== ATTENTION
Task: {8D676158-CCAC-491D-A354-C7EA54153348} - System32\Tasks\YAlBD8pN0pdseg61gDwn => C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe [2015-04-20] () <==== ATTENTION
Task: {962B4359-1C0B-411F-9B69-B39AFDF1EBC7} - System32\Tasks\schedule!3036567561 => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe <==== ATTENTION
Task: {98A34E98-775C-4098-8D14-BF1FEF26E5F7} - System32\Tasks\HyperDock => c:\programdata\{9b1febaa-363a-95d9-9b1f-febaa363aea8}\nsd108f.tmp.exe [2014-08-02] () <==== ATTENTION
Task: {99440DA3-D9CE-487A-A007-6C46E6CCACAE} - System32\Tasks\Ovovwooorpauu => C:\ProgramData\Ovovwooorpauu\1.0.4.1\uvamveko.exe [2015-08-02] ()
Task: {D73FA5A3-BDA5-4A14-B244-123A8AB36543} - System32\Tasks\Inst_Rep => C:\Users\Proprietaire\AppData\Local\Installer\Install_26987\DCYTDownloader.exe [2015-08-02] ()
Task: {D845E5B0-7057-4D01-8184-C54083E087DE} - System32\Tasks\Superclean => c:\programdata\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e}\hqghumeaylnlf.exe [2014-08-03] (Super PC Tools Ltd) <==== ATTENTION
Task: {E7ABD7D0-5F32-4964-A8BB-43B8FE823186} - System32\Tasks\CleanerPro_Start => C:\Program Files (x86)\Cleaner Pro\CleanerPro.exe
Task: {F4004A0C-5958-4A88-A9B3-F164C295B597} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: {FD332A4F-2F45-4E97-AA82-6AB876AA9B12} - \APSnotifierPP1 No Task File <==== ATTENTION

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

et enfin :

Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/
Désactive Windows Defender : https://forum.malekal.com/viewtopic.php?t=52282&start=
et Surtout active les détections LPIs.

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

Désinstaller Crossbrowse.

8 réponses

End of Fixlog 16:47:43

Discussions similaires

Newsletters