Désinstaller Crossbrowse.Résolu/Fermé

Question

Bonjour, 
J'ai eu un nouvel ordinateur avec Win 8 , et j'ai souhaité charger Chrome. Depuis ça, j'ai comme une sorte de navigateur, qui s'appelle "Croosbrowser", qui prend toute la place, qui est en Anglais et je souhaitais le désinstaller en espérant retrouver le confort que j'avais avant avec win 7. Mais dès lors que je veux le désinstaller dans le panneau de configuration, ça m'indique que je dois fermer toutes les fenètres, et je ne peux en fermer plus , car je n'ai que le panneau de config ouvert...
Y a t il quelqu'un qui pourrait m'indiquer comment procéder ? 
D'avance, merci.



Configuration: Windows / Chrome 39.4.2171.95

Malekal_morte- · Answer

Salut, 

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB. 
Voici la procédure à suivre pour les supprimer : 

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode ) 
Télécharge le sur ton bureau ou dossier de téléchargement.  
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : HKU\S-1-5-21-3890241590-2999524543-3268099448-1001\...\Run: [GoogleChromeAutoLaunch_AB92BDE58FA4AB6DDEE8571E30EC2EFB] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:64757;https=127.0.0.1:64757 [Attention - Possible Proxy Malicieux] ProxyEnable: [S-1-5-21-3890241590-2999524543-3268099448-1001] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-3890241590-2999524543-3268099448-1001] => http=127.0.0.1:64757;https=127.0.0.1:64757 [Attention - Possible Proxy Malicieux] R2 WaNetEnhance Service; C:\Program Files (x86)\WaNetEnhance\WaNetEnhance Internet Enhancer\InternetEnhancerService.exe [666624 2015-04-01] () [File not signed] 2015-04-12 20:52 - 2015-04-12 20:53 - 00000000 ____D () C:\Program Files (x86)\80e692b5-7500-49ee-997a-109fc16e7816 2015-04-12 20:52 - 2015-04-12 20:52 - 00000000 ____D () C:\Program Files (x86)\91b7c297-ff08-4945-abcb-bfcd2569689b 2015-04-12 20:44 - 2015-04-12 20:51 - 00000000 ____D () C:\Users\UTILISATEUR\AppData\Local\Google 2015-04-12 20:44 - 2015-04-12 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetEnhance 2015-04-12 20:44 - 2015-04-12 20:44 - 00000000 ____D () C:\Program Files (x86)\WaNetEnhance 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\UTILISATEUR\AppData\Roaming\VVYZ 2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\UTILISATEUR\AppData\Roaming\MCKILZS Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA1d075522b52d6cd.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: {D7517026-0AD0-4861-B692-4272AF06FBE7} - System32\Tasks\globalUpdateUpdateTaskMachineUA1d075522b52d6cd => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Une fois, le texte coller dans le bloc-note. Menu Fichier puis Enregistrer sous. A gauche, place toi sur le bureau. Dans le champs en bas, nom du fichier mets : fixlist.txt Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau. Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur puis réinitialise tes navigateurs: ================================== Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites : Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

Eccl75 · Answer

Bonjour, 

Voici les liens : 

- https://pjjoint.malekal.com/files.php?id=20150627_l9m12y6v11i13 (AdwCleaner)

- https://pjjoint.malekal.com/files.php?id=FRST_20150627_u5e8w9u10t6 (FRST)
- https://pjjoint.malekal.com/files.php?id=20150627_u13u14j12c9r11 (Addition)
- https://pjjoint.malekal.com/files.php?id=20150627_u13e12l5t6x12 (Shortcut) 

Merci !

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [DesktopSearch] => C:\ProgramData\DesktopSearch\DesktopSearch.exe [153056 2015-06-27] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe [2011-10-11] (CineForm) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled ProxyServer: [.DEFAULT] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux] ProxyEnable: [S-1-5-21-1950117177-844656073-2298298385-1001] => Internet Explorer proxy is enabled ProxyServer: [S-1-5-21-1950117177-844656073-2298298385-1001] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux] BHO-x32: On Stage -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> C:\Program Files (x86)\On Stage\Extensions\9771c444-42b0-4e23-a7fb-ff707123ab30.dll No File FF Extension: On Stage - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi [2015-06-27] FF HKLM\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox FF HKLM-x32\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox FF Extension: Lightshot (screenshot tool) - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2015-05-30] R2 DRrJul; C:\ProgramData\fmCEuWAyppG\DRrJul.exe [2731488 2015-06-27] (Unique Solutions) R2 WInterEnhancer Service; C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560 2015-06-21] () [File not signed] R2 xoperoze; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\jnsp9DE6.tmp [219136 2015-06-22] () [File not signed] R2 zedepory; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\hnszC880.tmp [166912 2015-06-22] () [File not signed] R2 widimisi; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\knsu7183.tmpfs [X] S2 wssvc_1.10.0.19; C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe [X] 2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C:\Windows\System32\Tasks\Orvsaoivbo 2015-06-27 21:11 - 2015-06-27 21:11 - 00000000 ____D C:\ProgramData\Orvsaoivbo 2015-06-27 21:01 - 2015-06-27 21:12 - 00000000 ____D C:\Users\Eglantine\AppData\Local\DesktopSearch 2015-06-27 21:00 - 2015-06-27 21:00 - 00000000 ____D C:\ProgramData\fmCEuWAyppG 2015-06-27 20:59 - 2015-06-27 20:59 - 00001911 _____ C:\Users\Eglantine\Desktop\Desktop Search.lnk 2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search 2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\ProgramData\DesktopSearch 2015-06-27 20:22 - 2015-06-27 20:23 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8 2015-06-27 19:51 - 2015-06-27 19:51 - 00243592 _____ C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe 2015-06-27 19:30 - 2015-06-27 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer 2015-06-27 19:29 - 2015-06-27 19:30 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer 2015-06-27 19:29 - 2015-06-27 19:29 - 00003502 _____ C:\Windows\System32\Tasks\avabvdxvy 2015-06-27 19:29 - 2015-06-27 19:29 - 00000000 ____D C:\Users\Eglantine\AppData\Local\avabvdxvy 2015-06-23 22:54 - 2015-06-23 22:54 - 00003118 _____ C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4} 2015-06-22 23:27 - 2015-06-22 23:27 - 00000000 ____D C:\Program Files (x86)\Product Deals 2015-06-22 22:39 - 2015-06-22 22:39 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF 2015-06-22 22:38 - 2012-03-17 20:56 - 00002037 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-06-22 22:37 - 2015-06-27 20:19 - 00000000 ____D C:\Program Files (x86)\Software 2015-06-22 22:37 - 2015-06-22 22:38 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF 2015-06-22 22:27 - 2015-06-25 22:27 - 00000348 _____ C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job 2015-06-22 22:27 - 2015-06-22 22:27 - 00003268 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] 2015-06-22 22:16 - 2015-06-23 22:47 - 00000000 ____D C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b 2015-06-22 22:16 - 2015-06-23 22:41 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-06-22 22:14 - 2015-06-22 22:14 - 00226304 _____ C:\Users\Eglantine\Downloads\f6f.exe 2015-06-22 22:13 - 2015-06-22 22:13 - 00226304 _____ C:\Users\Eglantine\Downloads\145.exe 2015-06-22 22:12 - 2015-06-22 22:12 - 00683296 _____ C:\Users\Eglantine\Downloads\Setup.exe 2015-06-16 00:27 - 2015-06-16 00:27 - 00061312 _____ (WS) C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys 2015-06-12 10:13 - 2015-06-12 10:13 - 00000000 ____D C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4} Task: {369D354A-0423-45E4-9ABC-AEFC9193C26E} - System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe Task: {A616BE34-CCB3-41C4-A0D2-F8501EFE0A95} - System32\Tasks\Orvsaoivbo => C:\ProgramData\Orvsaoivbo\1.0.1.0\creweait.exe [2015-06-27] () Task: {E932A675-508A-4FD8-99AF-63F2466591DA} - System32\Tasks\avabvdxvy => C:\Users\Eglantine\AppData\Local\avabvdxvy\avabvdxvy.exe [2015-06-21] () <==== ATTENTION Task: {EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7} - System32\Tasks\Bidaily Synchronize Task[74c7] => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION Une fois, le texte coller dans le bloc-note. Menu Fichier puis Enregistrer sous. A gauche, place toi sur le bureau. Dans le champs en bas, nom du fichier mets : fixlist.txt Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau. Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaà®t, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur puis réinitialise tes navigateurs: ================================== Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites : Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start= Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= et enfin : Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/ Surtout active les détections LPIs.

Malekal_morte- · Answer

=)

Voila, c'est terminé, tu peux supprimer les programmes utilisés. 

Quelques conseils : 


Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start= 


Pour ne plus te faire avoir. 
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/ 
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Eccl75 · Answer

Le fixlog de FRST. Merci ! Fix result of Farbar Recovery Scan Tool (x64) Version:24-06-2015 Ran by Eglantine at 2015-06-28 16:39:16 Run:1 Running from C:\Users\Eglantine\Desktop Loaded Profiles: Eglantine (Available Profiles: Eglantine) Boot Mode: Normal ============================================== fixlist content: HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window HKU\S-1-5-21-1950117177-844656073-2298298385-1001\...\Run: [DesktopSearch] => C:\ProgramData\DesktopSearch\DesktopSearch.exe [153056 2015-06-27] () Startup: C:\ProgramData\Microsoft WINDOWS\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe [2011-10-11] (CineForm) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled ProxyServer: [.DEFAULT] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux] ProxyEnable: [S-1-5-21-1950117177-844656073-2298298385-1001] => Internet Explorer proxy is enabled ProxyServer: [S-1-5-21-1950117177-844656073-2298298385-1001] => http=127.0.0.1:64586;https=127.0.0.1:64586 [Attention - Possible Proxy Malicieux] BHO-x32: On Stage -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> C:\Program Files (x86)\On Stage\Extensions\9771c444-42b0-4e23-a7fb-ff707123ab30.dll No File FF Extension: On Stage - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi [2015-06-27] FF HKLM\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox FF HKLM-x32\...\Firefox\Extensions: [{535b69cf-44f6-4c9f-96b1-b5adb65c582d}] - C:\Program Files\shopperz\Firefox FF Extension: Lightshot (screenshot tool) - C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2015-05-30] R2 DRrJul; C:\ProgramData\fmCEuWAyppG\DRrJul.exe [2731488 2015-06-27] (Unique Solutions) R2 WInterEnhancer Service; C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560 2015-06-21] () [File not signed] R2 xoperoze; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\jnsp9DE6.tmp [219136 2015-06-22] () [File not signed] R2 zedepory; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\hnszC880.tmp [166912 2015-06-22] () [File not signed] R2 widimisi; C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF\knsu7183.tmpfs [X] S2 wssvc_1.10.0.19; C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe [X] 2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C: WINDOWS\System32\Tasks\Orvsaoivbo 2015-06-27 21:11 - 2015-06-27 21:11 - 00000000 ____D C:\ProgramData\Orvsaoivbo 2015-06-27 21:01 - 2015-06-27 21:12 - 00000000 ____D C:\Users\Eglantine\AppData\Local\DesktopSearch 2015-06-27 21:00 - 2015-06-27 21:00 - 00000000 ____D C:\ProgramData\fmCEuWAyppG 2015-06-27 20:59 - 2015-06-27 20:59 - 00001911 _____ C:\Users\Eglantine\Desktop\Desktop Search.lnk 2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search 2015-06-27 20:59 - 2015-06-27 20:59 - 00000000 ____D C:\ProgramData\DesktopSearch 2015-06-27 20:22 - 2015-06-27 20:23 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8 2015-06-27 19:51 - 2015-06-27 19:51 - 00243592 _____ C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe 2015-06-27 19:30 - 2015-06-27 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer 2015-06-27 19:29 - 2015-06-27 19:30 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer 2015-06-27 19:29 - 2015-06-27 19:29 - 00003502 _____ C:\Windows\System32\Tasks\avabvdxvy 2015-06-27 19:29 - 2015-06-27 19:29 - 00000000 ____D C:\Users\Eglantine\AppData\Local\avabvdxvy 2015-06-23 22:54 - 2015-06-23 22:54 - 00003118 _____ C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4} 2015-06-22 23:27 - 2015-06-22 23:27 - 00000000 ____D C:\Program Files (x86)\Product Deals 2015-06-22 22:39 - 2015-06-22 22:39 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF 2015-06-22 22:38 - 2012-03-17 20:56 - 00002037 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-06-22 22:37 - 2015-06-27 20:19 - 00000000 ____D C:\Program Files (x86)\Software 2015-06-22 22:37 - 2015-06-22 22:38 - 00000000 ____D C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF 2015-06-22 22:27 - 2015-06-25 22:27 - 00000348 _____ C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job 2015-06-22 22:27 - 2015-06-22 22:27 - 00003268 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] 2015-06-22 22:16 - 2015-06-23 22:47 - 00000000 ____D C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b 2015-06-22 22:16 - 2015-06-23 22:41 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-06-22 22:14 - 2015-06-22 22:14 - 00226304 _____ C:\Users\Eglantine\Downloads\f6f.exe 2015-06-22 22:13 - 2015-06-22 22:13 - 00226304 _____ C:\Users\Eglantine\Downloads\145.exe 2015-06-22 22:12 - 2015-06-22 22:12 - 00683296 _____ C:\Users\Eglantine\Downloads\Setup.exe 2015-06-16 00:27 - 2015-06-16 00:27 - 00061312 _____ (WS) C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys 2015-06-12 10:13 - 2015-06-12 10:13 - 00000000 ____D C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4} Task: {369D354A-0423-45E4-9ABC-AEFC9193C26E} - System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe Task: {A616BE34-CCB3-41C4-A0D2-F8501EFE0A95} - System32\Tasks\Orvsaoivbo => C:\ProgramData\Orvsaoivbo\1.0.1.0\creweait.exe [2015-06-27] () Task: {E932A675-508A-4FD8-99AF-63F2466591DA} - System32\Tasks\avabvdxvy => C:\Users\Eglantine\AppData\Local\avabvdxvy\avabvdxvy.exe [2015-06-21] () <==== ATTENTION Task: {EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7} - System32\Tasks\Bidaily Synchronize Task[74c7] => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => c:\programdata\{23786843-984e-794d-2378-86843984a10e}\hqghumeaylnlf.exe <==== ATTENTION HKLM\Software\Microsoft\Windows\CurrentVersion\Run\3D BubbleSound => value removed successfully HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_15210FE575538B8B1B685B29D57F65FD => value removed successfully HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Run\DesktopSearch => value removed successfully C:\ProgramData\Microsoft WINDOWS\Start Menu\Programs\Startup\CineFormActiveMetadataStatusViewer.exe not found. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable => value removed successfully HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer => value removed successfully HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable => value removed successfully HKU\S-1-5-21-1950117177-844656073-2298298385-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer => value removed successfully "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9771c444-42b0-4e23-a7fb-ff707123ab30}" => key removed successfully "HKCR\Wow6432Node\CLSID\{9771c444-42b0-4e23-a7fb-ff707123ab30}" => key removed successfully C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{d4b897a0-69fb-4488-b678-079ed3917c71}.xpi => moved successfully. HKLM\Software\Mozilla\Firefox\Extensions\{535b69cf-44f6-4c9f-96b1-b5adb65c582d} => value removed successfully HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\{535b69cf-44f6-4c9f-96b1-b5adb65c582d} => value removed successfully C:\Users\Eglantine\AppData\Roaming\Mozilla\Firefox\Profiles\1oxksnqm.default-1380159120288\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} => moved successfully. DRrJul => Unable to stop service. DRrJul => Service removed successfully WInterEnhancer Service => Service stopped successfully. WInterEnhancer Service => Service removed successfully xoperoze => Service stopped successfully. xoperoze => Service removed successfully zedepory => Service stopped successfully. zedepory => Service removed successfully widimisi => Service stopped successfully. widimisi => Service removed successfully wssvc_1.10.0.19 => Service removed successfully "2015-06-27 21:12 - 2015-06-27 21:12 - 00003456 _____ C: WINDOWS\System32\Tasks\Orvsaoivbo" => File/Folder not found. C:\ProgramData\Orvsaoivbo => moved successfully. C:\Users\Eglantine\AppData\Local\DesktopSearch => moved successfully. "C:\ProgramData\fmCEuWAyppG" folder move: Could not move "C:\ProgramData\fmCEuWAyppG" folder => Scheduled to move on reboot. C:\Users\Eglantine\Desktop\Desktop Search.lnk => moved successfully. C:\Users\Eglantine\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search => moved successfully. C:\ProgramData\DesktopSearch => moved successfully. C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8 => moved successfully. C:\Users\Eglantine\Downloads\Firefox Setup Stub 38.0.5.exe => moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer => moved successfully. C:\Program Files (x86)\WInterEnhancer => moved successfully. C:\Windows\System32\Tasks\avabvdxvy => moved successfully. C:\Users\Eglantine\AppData\Local\avabvdxvy => moved successfully. C:\Windows\System32\Tasks\{DDB0B151-C957-40F6-8D22-4A219A644CC4} => moved successfully. C:\Program Files (x86)\Product Deals => moved successfully. C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005547-E011-8789-8588017299FF => moved successfully. C:\Windows\system32\Drivers\etc\hp.bak => moved successfully. C:\Program Files (x86)\Software => moved successfully. C:\Users\Eglantine\AppData\Roaming\60C51DD3-1435005462-E011-8789-8588017299FF => moved successfully. C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job => moved successfully. C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] => moved successfully. C:\Program Files (x86)\7d31cb7b-af5b-4115-bfb1-459e728de73b => moved successfully. C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully. C:\Users\Eglantine\Downloads\f6f.exe => moved successfully. C:\Users\Eglantine\Downloads\145.exe => moved successfully. C:\Users\Eglantine\Downloads\Setup.exe => moved successfully. C:\Windows\system32\Drivers\wsfd_1_10_0_19.sys => moved successfully. C:\Users\Eglantine\AppData\Local\{E59BC881-57EE-49A1-8823-062EBB9C84C4} => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{369D354A-0423-45E4-9ABC-AEFC9193C26E}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{369D354A-0423-45E4-9ABC-AEFC9193C26E}" => key removed successfully C:\Windows\System32\Tasks\WordShark Auto Updater 1.10.0.19 Core => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.19 Core" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A616BE34-CCB3-41C4-A0D2-F8501EFE0A95}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A616BE34-CCB3-41C4-A0D2-F8501EFE0A95}" => key removed successfully C:\Windows\System32\Tasks\Orvsaoivbo => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Orvsaoivbo" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E932A675-508A-4FD8-99AF-63F2466591DA}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E932A675-508A-4FD8-99AF-63F2466591DA}" => key removed successfully C:\Windows\System32\Tasks\avabvdxvy not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avabvdxvy" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFEE5A49-3C1D-483A-BA40-6A8425B0F8D7}" => key removed successfully C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[74c7]" => key removed successfully C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job not found. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-28 16:47:43)<= C:\ProgramData\fmCEuWAyppG => Is moved successfully End of Fixlog 16:47:43

Flora243 · Answer

Bonjour, 
j'ai le même soucis que présenté précédemment. J'ai déjà commencé les procédures et voici les liens.

http://pjjoint.malekal.com/files.php?read=20150803_l7l8z14q6y5 (Adwcleaner)



http://pjjoint.malekal.com/files.php?read=FRST_20150803_m57w8b9x11 
(FRST)

http://pjjoint.malekal.com/files.php?read=20150803_j11p7m6x11l8
(Addition)

http://pjjoint.malekal.com/files.php?read=20150803_8g15l14w14s11
(Shotcut)

Merci d'avance !

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe HKLM-x32\...\Run: [mbot_fr_014010048] => [X] HKLM-x32\...\Run: [gmsd_fr_005010049] => [X] HKLM-x32\...\Run: [gmsd_fr_002020047] => [X] HKLM-x32\...\Run: [gmsd_en_6] => [X] HKLM-x32\...\Run: [mbot_fr_003010050] => [X] HKLM-x32\...\Run: [gmsd_fr_005010050] => [X] HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [WindApp] => C:\Users\Proprietaire\AppData\Roaming\Store\WindApp\WindApp.exe /winstartup HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [Selection Tools] => C:\Users\Proprietaire\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe /winstartup HKU\S-1-5-21-163334713-4170901588-2503300868-1001\...\Run: [GoogleChromeAutoLaunch_E2A8721B832B77B47A1D4F17681D0BEE] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-05-12] (Crossbrowse) Startup: C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-08-03] ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:50729;https=127.0.0.1:50729 [Attention - Possible Proxy Malicieux] CHR HKLM-x32\...\Chrome\Extension: [kbjlipmgfoamgjaogmbihaffnpkpjajp] - C:\Program Files (x86)\Nosibay\Bubble Dock\extensions\GCSurfMatch.crx [Not Found] R2 7eb89871; c:\Program Files (x86)\PragmaInstance\PragmaInstance.dll [3071488 2015-08-02] () [File not signed] R2 ljz; c:\windows\ljz.exe [417792 2015-08-03] () [File not signed] R2 mljz; c:\windows\mljz.exe [408576 2015-08-03] () [File not signed] R2 WindowsMangerProtect; C:\ProgramData\eWinManProe\ProtectWindowsManager.exe [708264 2015-08-03] (DTools LIMITED) <==== ATTENTION S2 comyninu; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\hnsm965B.tmp [X] S2 copiheze; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\knsfD348.tmp [X] S2 hyverumu; C:\Program Files (x86)\00000011-1438541117-0000-0000-50465D961051\jnsi71AB.tmp [X] S4 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [X] S2 Update Box Green; C:\Program Files (x86)\Box Green\updateBoxGreen.exe [X] S2 Util Coupon Time; C:\Program Files (x86)\Coupon Time\bin\utilCouponTime.exe [X] 2015-08-03 16:56 - 2015-08-03 16:56 - 00000000 ____D C:\ProgramData\7ac3e1d200002e51 2015-08-03 16:54 - 2015-08-03 16:54 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local sr559E.tmp 2015-08-03 15:25 - 2015-08-03 15:25 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local sz26FB.tmp 2015-08-03 15:23 - 2015-08-03 16:16 - 00000364 _____ C:\WINDOWS\Tasks\Superclean.job 2015-08-03 15:23 - 2015-08-03 15:23 - 00003264 _____ C:\WINDOWS\System32\Tasks\Superclean 2015-08-03 15:23 - 2015-08-03 15:23 - 00000000 ____D C:\ProgramData\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e} 2015-08-03 15:21 - 2015-08-03 15:21 - 00000000 ____D C:\ProgramData\3WinManPro3 2015-08-03 14:55 - 2015-08-03 14:55 - 00003102 _____ C:\WINDOWS\System32\Tasks\sab3009 2015-08-03 14:47 - 2015-08-03 17:09 - 00019024 _____ C:\WINDOWS\PFRO.log 2015-08-03 14:47 - 2015-08-03 17:09 - 00000231 _____ C:\WINDOWS\setupact.log 2015-08-03 14:47 - 2015-08-03 14:47 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-08-03 14:35 - 2015-08-03 14:35 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\BreakingNewsAlert 2015-08-03 14:26 - 2015-08-03 14:26 - 00003990 _____ C:\WINDOWS\System32\Tasks\LaunchPreSignup 2015-08-03 14:26 - 2015-08-03 14:26 - 00000000 ____D C:\ProgramData\db64535f00000475 2015-08-03 14:12 - 2015-08-03 14:12 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local se6F15.tmp 2015-08-03 11:05 - 2015-08-03 15:50 - 00000000 ___HD C:\ProgramData\ljz 2015-08-03 11:05 - 2015-08-03 11:05 - 00000000 ____D C:\ProgramData\4WinManPro4 2015-08-03 11:00 - 2015-08-03 11:01 - 00631808 _____ C:\WINDOWS\ljz.dat 2015-08-03 11:00 - 2015-08-03 11:00 - 00408576 _____ C:\WINDOWS\mljz.exe 2015-08-03 10:58 - 2015-08-03 11:00 - 00417792 _____ C:\WINDOWS\ljz.exe 2015-08-03 10:58 - 2015-08-03 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip 2015-08-03 10:37 - 2015-08-03 10:37 - 00003174 _____ C:\WINDOWS\System32\Tasks\{88D9EECC-A601-48E7-BE42-C0F8BBE8F739} 2015-08-03 10:12 - 2015-08-03 10:12 - 00034712 _____ () C:\WINDOWS\system32\Drivers\bsdriver.sys 2015-08-03 10:10 - 2015-08-03 10:10 - 00003172 _____ C:\WINDOWS\System32\Tasks\{CA6B9B7B-FF95-4BE7-8EF7-299B63F7B33A} 2015-08-03 10:08 - 2015-08-03 10:36 - 00000000 ____D C:\Program Files\shopperz02082015 2015-08-03 10:08 - 2015-08-03 10:08 - 00000000 ____D C:\ProgramData\1WinManPro1 2015-08-03 10:08 - 2015-06-18 12:08 - 00061336 _____ (Cherimoya Ltd) C:\WINDOWS\system32\Drivers\cherimoya.sys 2015-08-03 10:05 - 2015-08-03 16:50 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-03 09:45 - 2015-08-03 17:10 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-03 09:45 - 2015-08-03 16:50 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-03 09:45 - 2015-08-03 09:45 - 00931408 _____ (Google Inc.) C:\Users\Proprietaire\Downloads\ChromeSetup.exe 2015-08-03 09:45 - 2015-08-03 09:45 - 00004062 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-08-03 09:45 - 2015-08-03 09:45 - 00003826 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-08-03 09:25 - 2015-08-03 17:10 - 00001080 _____ C:\WINDOWS\Tasks\Crossbrowse.job 2015-08-03 09:25 - 2015-08-03 09:25 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\Crossbrowse 2015-08-03 09:25 - 2015-08-03 09:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse 2015-08-03 09:24 - 2015-08-03 09:24 - 00000000 ____D C:\Program Files (x86)\Crossbrowse 2015-08-03 00:26 - 2015-08-03 00:26 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8 2015-08-02 23:04 - 2015-08-03 09:25 - 00004086 _____ C:\WINDOWS\System32\Tasks\Crossbrowse 2015-08-02 22:51 - 2015-08-02 22:51 - 00000024 _____ C:\Users\Proprietaire\AppData\Roaming\appdataFr25.bin 2015-08-02 22:40 - 2015-08-02 22:40 - 00225792 _____ C:\WINDOWS\SysWOW64\807.exe 2015-08-02 22:40 - 2015-08-02 22:40 - 00225792 _____ C:\WINDOWS\SysWOW64\202aa53.exe 2015-08-02 22:39 - 2015-08-02 22:39 - 00003396 _____ C:\WINDOWS\System32\Tasks\Inst_Rep 2015-08-02 22:39 - 2015-08-02 22:39 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\CrashRpt 2015-08-02 22:01 - 2015-08-02 22:09 - 00003454 _____ C:\WINDOWS\System32\Tasks\Ovovwooorpauu 2015-08-02 22:00 - 2015-08-02 22:01 - 00000000 ____D C:\ProgramData\Ovovwooorpauu 2015-08-02 21:59 - 2015-08-02 23:44 - 00000995 _____ C:\WINDOWS\SysWOW64\${LOGFILE} 2015-08-02 21:57 - 2015-08-02 21:57 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local si1153.tmp 2015-08-02 21:56 - 2015-08-02 21:56 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\Windesk_Winsearch 2015-08-02 21:48 - 2015-08-03 17:10 - 00001050 _____ C:\WINDOWS\Tasks\YAlBD8pN0pdseg61gDwn.job 2015-08-02 21:48 - 2015-08-02 21:48 - 00004064 _____ C:\WINDOWS\System32\Tasks\YAlBD8pN0pdseg61gDwn 2015-08-02 21:47 - 2015-08-02 22:03 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-08-02 21:47 - 2015-08-02 21:47 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\globalUpdate 2015-08-02 21:45 - 2015-08-02 21:45 - 00613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local su2D6E.tmp 2015-08-02 21:37 - 2015-08-03 10:10 - 00004720 _____ C:\WINDOWS\SysWOW64\Shjencueit.ini 2015-08-02 21:37 - 2015-08-03 10:10 - 00002440 _____ C:\WINDOWS\SysWOW64\ShjencueitOff.ini 2015-08-02 21:37 - 2015-08-03 10:10 - 00002440 _____ C:\WINDOWS\system32\ShjencueitOff.ini 2015-08-02 21:37 - 2015-07-29 14:21 - 00353608 _____ C:\WINDOWS\system32\Shjencueit64.dll 2015-08-02 21:37 - 2015-07-29 14:20 - 00283464 _____ C:\WINDOWS\SysWOW64\Shjencueit.dll 2015-08-02 21:35 - 2015-08-02 21:36 - 00000000 ____D C:\Users\Proprietaire\Documents\CleanerPro 2015-08-02 21:35 - 2015-08-02 21:35 - 00003190 _____ C:\WINDOWS\System32\Tasks\CleanerPro_Start 2015-08-02 21:35 - 2015-08-02 21:35 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\CleanerPro 2015-08-02 21:32 - 2015-08-02 05:35 - 00048776 _____ (StdLib) C:\WINDOWS\system32\Drivers\{62dc5e25-b1a4-4bef-b130-001732d3585f}Gw64.sys 2015-08-02 21:31 - 2015-08-03 10:08 - 00000045 _____ C:\user.js 2015-08-02 21:28 - 2015-08-02 22:10 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\{88B2BEEE-AC1A-D256-C182-F7BEE5EA0B26} 2015-08-02 21:23 - 2015-08-02 21:23 - 00000000 ____D C:\ProgramData\OWinManProO 2015-08-02 21:19 - 2015-08-02 21:19 - 00000000 ____D C:\Program Files (x86)\PragmaInstance 2015-08-02 21:11 - 2015-08-02 23:07 - 00000000 ____D C:\ProgramData\2337805153652121619 2015-08-02 21:05 - 2015-08-03 15:05 - 00000360 _____ C:\WINDOWS\Tasks\HyperDock.job 2015-08-02 21:05 - 2015-08-02 21:05 - 00003260 _____ C:\WINDOWS\System32\Tasks\HyperDock 2015-08-02 21:05 - 2015-08-02 21:05 - 00000000 ____D C:\ProgramData\9WinManPro9 2015-08-02 21:05 - 2015-08-02 21:05 - 00000000 ____D C:\ProgramData\{9b1febaa-363a-95d9-9b1f-febaa363aea8} 2015-08-02 21:04 - 2015-08-02 21:04 - 00000000 _____ C:\dummy.htm 2015-08-02 21:02 - 2015-08-03 16:57 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\SmartWeb 2015-08-02 20:56 - 2015-08-02 09:54 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{5663c04f-f294-4115-9114-b62be60538cb}Gw64.sys 2015-08-02 20:52 - 2015-08-02 21:56 - 00000000 ____D C:\Users\Proprietaire\AppData\Roaming\WTools 2015-08-02 20:52 - 2015-08-02 20:52 - 00000078 _____ C:\Users\Proprietaire\AppData\Roaming\Selection Tools.installation.log 2015-08-02 20:51 - 2015-08-02 22:21 - 00000000 ____D C:\Users\Proprietaire\AppData\Roaming\Store 2015-08-02 20:51 - 2015-08-02 20:51 - 00000078 _____ C:\Users\Proprietaire\AppData\Roaming\WindApp.installation.log 2015-08-02 20:46 - 2015-08-02 22:08 - 00000000 ____D C:\Users\Proprietaire\AppData\Local\00000011-1438548397-0000-0000-50465D961051 2015-08-02 20:46 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2015-08-02 20:45 - 2015-08-02 20:45 - 00000097 _____ C:\Users\Proprietaire\AppData\Roaming\WindApp.boostrap.log 2015-08-02 20:41 - 2015-08-02 20:42 - 00000000 ____D C:\ProgramData\lWinManProl 2015-08-02 20:41 - 2015-08-02 20:41 - 00000000 ____D C:\ProgramData\IHProtectUpDate 2015-08-02 20:40 - 2015-08-02 20:40 - 00000000 _____ C:\WINDOWS\prleth.sys 2015-08-02 20:40 - 2015-08-02 20:40 - 00000000 _____ C:\WINDOWS\hgfs.sys 2015-08-02 22:51 - 2015-08-02 22:51 - 0000024 _____ () C:\Users\Proprietaire\AppData\Roaming\appdataFr25.bin 2014-05-13 15:55 - 2015-08-02 20:50 - 0018957 _____ () C:\Users\Proprietaire\AppData\Roaming\Bubble Dock.installation.log 2015-08-02 20:52 - 2015-08-02 20:52 - 0000078 _____ () C:\Users\Proprietaire\AppData\Roaming\Selection Tools.installation.log 2012-12-20 20:54 - 2015-08-03 17:10 - 0000409 _____ () C:\Users\Proprietaire\AppData\Roaming\sp_data.sys 2015-08-02 20:45 - 2015-08-02 20:45 - 0000097 _____ () C:\Users\Proprietaire\AppData\Roaming\WindApp.boostrap.log 2015-08-02 20:51 - 2015-08-02 20:51 - 0000078 _____ () C:\Users\Proprietaire\AppData\Roaming\WindApp.installation.log 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn 2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe 2015-08-03 14:12 - 2015-08-03 14:12 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local se6F15.tmp 2015-08-02 21:57 - 2015-08-02 21:57 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local si1153.tmp 2015-08-03 16:54 - 2015-08-03 16:54 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local sr559E.tmp 2015-08-02 21:45 - 2015-08-02 21:45 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local su2D6E.tmp 2015-08-03 15:25 - 2015-08-03 15:25 - 0613255 _____ (CMI Limited) C:\Users\Proprietaire\AppData\Local sz26FB.tmp Task: C:\WINDOWS\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\HyperDock.job => c:\programdata\{9b1febaa-363a-95d9-9b1f-febaa363aea8} sd108f.tmp.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\schedule!3036567561.job => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exeK/schedule /profile c:\programdata\bettersoft\optimizerpro\3036567561.ini <==== ATTENTION Task: C:\WINDOWS\Tasks\Superclean.job => c:\programdata\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\YAlBD8pN0pdseg61gDwn.job => C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe <==== ATTENTION Task: {14595D88-C9C0-4FA8-A145-2261D621ABFD} - System32\Tasks\{CA6B9B7B-FF95-4BE7-8EF7-299B63F7B33A} => pcalua.exe -a C:\Users\Proprietaire\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi Task: {28ACA332-38ED-45EB-A612-621BC11BFDB2} - System32\Tasks\{88D9EECC-A601-48E7-BE42-C0F8BBE8F739} => pcalua.exe -a "C:\Program Files\shopperz02082015\unins000.exe" -d "C:\Program Files\shopperz02082015" Task: {6172C2AF-1EE6-4FC8-9FB1-FAFD3DEE5203} - System32\Tasks\sab3009 => C:\PROGRA~2\FASTSE~1\sab3009.exe Task: {67A47794-4585-4592-8B13-E0821C17EA22} - \GoforFilesUpdate No Task File <==== ATTENTION Task: {6A83AF4A-93A0-46E2-BF89-09085327B8A1} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION Task: {84FF5FFE-ACAA-4967-B543-41AA3543EEFE} - \APSnotifierPP2 No Task File <==== ATTENTION Task: {8D676158-CCAC-491D-A354-C7EA54153348} - System32\Tasks\YAlBD8pN0pdseg61gDwn => C:\Users\Proprietaire\AppData\Roaming\YAlBD8pN0pdseg61gDwn.exe [2015-04-20] () <==== ATTENTION Task: {962B4359-1C0B-411F-9B69-B39AFDF1EBC7} - System32\Tasks\schedule!3036567561 => C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe <==== ATTENTION Task: {98A34E98-775C-4098-8D14-BF1FEF26E5F7} - System32\Tasks\HyperDock => c:\programdata\{9b1febaa-363a-95d9-9b1f-febaa363aea8} sd108f.tmp.exe [2014-08-02] () <==== ATTENTION Task: {99440DA3-D9CE-487A-A007-6C46E6CCACAE} - System32\Tasks\Ovovwooorpauu => C:\ProgramData\Ovovwooorpauu\1.0.4.1\uvamveko.exe [2015-08-02] () Task: {D73FA5A3-BDA5-4A14-B244-123A8AB36543} - System32\Tasks\Inst_Rep => C:\Users\Proprietaire\AppData\Local\Installer\Install_26987\DCYTDownloader.exe [2015-08-02] () Task: {D845E5B0-7057-4D01-8184-C54083E087DE} - System32\Tasks\Superclean => c:\programdata\{807d32cf-8bf2-7030-807d-d32cf8bfcb3e}\hqghumeaylnlf.exe [2014-08-03] (Super PC Tools Ltd) <==== ATTENTION Task: {E7ABD7D0-5F32-4964-A8BB-43B8FE823186} - System32\Tasks\CleanerPro_Start => C:\Program Files (x86)\Cleaner Pro\CleanerPro.exe Task: {F4004A0C-5958-4A88-A9B3-F164C295B597} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION Task: {FD332A4F-2F45-4E97-AA82-6AB876AA9B12} - \APSnotifierPP1 No Task File <==== ATTENTION Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur puis réinitialise tes navigateurs: ================================== Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites : Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start= Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= et enfin : Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/ Désactive Windows Defender : https://forum.malekal.com/viewtopic.php?t=52282&start= et Surtout active les détections LPIs. Like the angel you are, you laugh creating a lightness in my chest, Your eyes they penetrate me, (Your answer's always 'maybe') That's when I got up and left

Désinstaller Crossbrowse.

8 réponses

End of Fixlog 16:47:43

Discussions similaires

Newsletters