Un écran noir avec paramètre de Windows script host

Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 19-06-2016 01
Exécuté par Responsable (2016-06-20 12:18:32) Run:1
Exécuté depuis C:\Users\Responsable\Desktop\Nouveau dossier (4)
Profils chargés: Responsable (Profils disponibles: Responsable & Jeune)
Mode d'amorçage: Normal
==============================================

fixlist contenu:

• • • • • • • • • • • • • • • • • CreateRestorePoint:CloseProcesses: HKLM\...\Winlogon: [Userinit] wscript, *****************Le Point de restauration a été créé avec succès.Processus fermé avec succès.HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => valeur restauré(es) avec succèsLe système a dû redémarrer.==== Fin de Fixlog 12:19:20 ====

CreateRestorePoint:
CloseProcesses:
HKLM\...\Winlogon: [Userinit] wscript, 
 S2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [X]  
2016-06-15 14:48 - 2016-06-15 15:59 - 00000000 ____D C:\Users\Anton\AppData\Local\app 
 2016-06-15 14:47 - 2016-06-15 16:01 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner  
 2016-06-15 14:47 - 2016-06-15 14:47 - 00014040 ____N C:\WINDOWS\system32\Drivers\MPCKpt.sys  
 2016-06-15 14:46 - 2016-06-15 15:53 - 00000000 ____D C:\Program Files (x86)\CleanBrowser 
 2016-06-15 14:40 - 2016-06-15 14:41 - 00000884 _____ C:\WINDOWS\SysWOW64\${LOGFILE} 
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

CreateRestorePoint:
CloseProcesses:
HKLM\...\Winlogon: [Userinit] wscript, 
HKLM-x32\...\Winlogon: [Userinit] wscript, [X] 
 2016-06-15 00:36 - 2016-06-15 02:24 - 00000000 ____D C:\Users\Philippe\AppData\Local\app 
 2016-06-15 00:33 - 2016-06-15 00:39 - 00000000 ____D C:\Program Files (x86)\Wutaingjlaph_ 
 2016-06-14 19:46 - 2016-06-15 02:26 - 00000000 ____D C:\Program Files\3433c62728efb3ea0079c60bdfde5f88  
 2016-06-14 19:46 - 2016-06-15 00:42 - 00000000 ____D C:\Users\Philippe\AppData\Roaming\Store  
 2016-06-14 19:46 - 2016-06-15 00:36 - 00000000 ____D C:\Users\Philippe\AppData\Roaming\WTools  
 2016-06-02 23:05 - 2016-06-02 23:05 - 00142495 _____ C:\Windows\be0d27e0e1f9219c66f6914db2399a9c.exe  
 2016-05-23 23:57 - 2016-04-11 13:21 - 00000000 ____D C:\Users\Philippe\AppData\Roaming\stremio 
2016-05-18 23:25 - 2011-10-07 18:44 - 00000000 ____D C:\Users\UpdatusUser 
Task: C:\Windows\Tasks\KbvS5ceSa631RI6dHaWYs4VZh5y.job => C:\Users\Philippe\AppData\Roaming\KbvS5ceSa631RI6dHaWYs4VZh5y.exe <==== ATTENTION
 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Philippe\AppData\Roaming\4JIwmw9WYOyS7Syx7EsTm 
 2012-02-25 18:56 - 2012-02-25 18:56 - 0000132 _____ () C:\Users\Philippe\AppData\Roaming\Adobe GIF Format CS5 Prefs 
 2015-04-19 14:20 - 2015-05-27 01:34 - 0000626 _____ () C:\Users\Philippe\AppData\Roaming\KbvS5ceSa631RI6dHaWYs4VZh5y 
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

• Réinitialiser et réparer Mozilla Firefox
• Réinitialiser et réparer Google Chrome
• Réinitialiser et réparer Internet Explorer

CreateRestorePoint:
CloseProcesses:
HKLM\...\Winlogon: [Userinit] wscript, 
HKLM-x32\...\Winlogon: [Userinit] wscript, [X] 
 FF Plugin HKU\S-1-5-21-2527917199-2689606349-356490286-1003: vitzo.com/VDownloader -> C:\Program Files (x86)\VDownloader\Addons\npVDownloader.dll [Pas de fichier]  
Task: {82857318-6995-432B-87F9-49797CAF0179} - System32\Tasks\AteredomkefispCchtask => C:\Program Files (x86)\Ateredomkefisp\AteredomkefispCchtask.exe
 C:\Program Files (x86)\Ateredomkefisp
Reboot:

CreateRestorePoint:
Task: {44A082BD-AB6A-415F-80B0-6E2A2624D5C0} - System32\Tasks\{1A45DA61-5474-4769-895C-C28B0D7D9D2D} => pcalua.exe -a "C:\Program Files (x86)\MPC Cleaner\UninstDelete.exe" -d "C:\Program Files (x86)\MPC Cleaner"
Task: {57DD7D20-FD05-4DAF-AD69-B664824A7052} - System32\Tasks\{9F4C2702-C5EB-4768-B836-460629801F1A} => pcalua.exe -a C:\Users\Michel\Downloads\sp41611.exe -d C:\Users\Michel\Downloads
Task: {794A86B1-3687-44D6-B9D6-482922C9B822} - System32\Tasks\{80B18AC0-051D-4EC1-B12D-F724FC590B16} => pcalua.exe -a "C:\Program Files (x86)\MPC Cleaner\Uninstall.exe" -d "C:\Program Files (x86)\MPC Cleaner"
ShortcutWithArgument: C:\Users\Michel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G2Ezftpbl2,2d68b886-4372-491a-a1e1-1070ab5cdbc0,
ShortcutWithArgument: C:\Users\Michel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G2Ezftpbl2,2d68b886-4372-491a-a1e1-1070ab5cdbc0,
ShortcutWithArgument: C:\Users\Michel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G2Ezftpbl2,2d68b886-4372-491a-a1e1-1070ab5cdbc0,
ShortcutWithArgument: C:\Users\Michel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=G2Ezftpbl2,2d68b886-4372-491a-a1e1-1070ab5cdbc0,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk -> C:\Program Files\AVAST Software\SZBrowser\launcher.exe (Avast Software) -> "hxxp://esurf.biz/?ssid=1456867967&a=1003679&src=sh&uuid=a529d971-5dc5-49e3-a5b7-fbbe7f2995df"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://esurf.biz/?ssid=1456867967&a=1003679&src=sh&uuid=a529d971-5dc5-49e3-a5b7-fbbe7f2995df"
HKLM\...\Winlogon: [Userinit] wscript,
HKLM-x32\...\Winlogon: [Userinit] wscript, [X]
 2016-05-07 12:16 - 2016-02-14 14:57 - 00000000 ____D C:\Program Files (x86)\38464E43-1455454664-4632-4451-001E68BF1094 

• Réinitialiser et réparer Google Chrome