Wajam et WINDESKWINSEARCH : Ordi très lent.Résolu/Fermé

Question

Bonjour, 

Mon ordi est infecté par des virus. J'ai fait plusieurs scann avec AD ccleanner, j'ai supprimer des fichiers infectés avec anti Malware etc.... Malgré toutes mes tentatives, mon ordi est toujours très lent et des logiciels s'installent sans que je le veuille. WAJAM et WINDESKWINSEARCH. 
Merci de votre aide,sachez, je ne suis pas du tout douée en informatique. 

Configuration: Windows 7 / Firefox 39.0

Malekal_morte- · Answer

Salut, 

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB. 
Voici la procédure à  suivre pour les supprimer : 

Commence par ceci :

Suis le tutorial AdwCleaner( d'Xplode ) 
Ce programme permet de supprimer les adwares et programmes parasites :

 Télécharge le sur ton bureau ou dossier de téléchargement.  
 Lance AdwCleaner, clique sur [Scanner].
 L'analyse peux durer plusieurs minutes, patiente.
 Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]
 Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.

Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  


puis :

Suis le tutoriel FRST.
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à  ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

jo13200 · Answer

Re bonjour,

j'ai finalement réussi à héberger mes rapports sur http://pjjoint.malekal.com, mais je ne sais pas ce que j'ai fait, j'ai 4 rapports FRST..., voici les liens plus le rapport adwcleaner : 

rapport FRST : https://pjjoint.malekal.com/files.php?id=FRST_20150726_v11k14m6c8t5 
rapport FRST 1 : https://pjjoint.malekal.com/files.php?id=FRST_20150726_t12o10o5e10j15 
rapport FRS 2 : https://pjjoint.malekal.com/files.php?id=20150726_s11b13s12b5u11
rapport FRS 3 : https://pjjoint.malekal.com/files.php?id=20150726_t10j9m11p6p10
rapport FRS 4 : https://pjjoint.malekal.com/files.php?id=20150726_u8q6b12k5x5

rapport Adwcleaner : https://pjjoint.malekal.com/files.php?id=20150726_x5p11e7k10s10

j'espère qu'avec ça vous pourrez m'aider.

Merci d'avance,

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch) HKLM-x32\...\Run: [mpck_fr_017010028] => [X] HKLM-x32\...\Run: [gmsd_fr_005010030] => [X] HKLM-x32\...\Run: [rec_fr_47] => [X] R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed] R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X] S4 vicoqudu; [X] S4 zejytose; [X] 2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn 2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log 2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log 2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log 2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError 2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd 2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job 2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] 2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65} 2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef 2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521 2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp 2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp 2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log 2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results 2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews 2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm 2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} 2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} 2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData tuser.pol 2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job 2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job 2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349 2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews 2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk 2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log 2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE} 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys 2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate 2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z 2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe 2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job 2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask 2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X 2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe 2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe 22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx 2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe 2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan 2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat 2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf 2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log 2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys 2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq 2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX egistrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\Windows\Tasks\UpdateTask.job => 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ask: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION Une fois, le texte coller dans le bloc-note. Menu Fichier puis Enregistrer sous. A gauche, place toi sur le bureau. Dans le champs en bas, nom du fichier mets : fixlist.txt Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau. Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur puis réinitialise tes navigateurs: ================================== Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites : Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start= Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= Like the angel you are, you laugh creating a lightness in my chest, Your eyes they penetrate me, (Your answer's always 'maybe') That's when I got up and left

jo13200 · Answer

désolée, voilà, cette fois, ça devrait être bon : "Fix result of Farbar Recovery Scan Tool (x64) Version:26-07-2015 Ran by cojo at 2015-07-27 12:16:42 Run:1 Running from C:\Users\cojo\Downloads Loaded Profiles: cojo (Available Profiles: cojo) Boot Mode: Normal ============================================== fixlist content: HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch) HKLM-x32\...\Run: [mpck_fr_017010028] => [X] HKLM-x32\...\Run: [gmsd_fr_005010030] => [X] HKLM-x32\...\Run: [rec_fr_47] => [X] R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed] R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X] S4 vicoqudu; [X] S4 zejytose; [X] 2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn 2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log 2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log 2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log 2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError 2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd 2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job 2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] 2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65} 2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef 2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521 2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp 2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp 2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log 2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results 2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews 2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm 2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} 2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} 2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData tuser.pol 2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job 2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job 2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349 2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews 2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk 2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log 2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE} 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys 2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate 2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z 2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe 2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job 2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask 2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X 2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe 2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe 22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx 2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe 2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan 2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat 2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf 2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log 2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys 2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq 2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX egistrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\UpdateTask.job => 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ask: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windesk Winsearch => value removed successfully HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mpck_fr_017010028 => value removed successfully" merci de votre patience

jo13200 · Answer

effectivement, il en manquait un morceau.... le voici en entier cette fois : "Fix result of Farbar Recovery Scan Tool (x64) Version:26-07-2015 Ran by cojo at 2015-07-27 12:16:42 Run:1 Running from C:\Users\cojo\Downloads Loaded Profiles: cojo (Available Profiles: cojo) Boot Mode: Normal ============================================== fixlist content: HKLM\...\Run: [Windesk Winsearch] => C:\Program Files (x86)\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch) HKLM-x32\...\Run: [mpck_fr_017010028] => [X] HKLM-x32\...\Run: [gmsd_fr_005010030] => [X] HKLM-x32\...\Run: [rec_fr_47] => [X] R2 WajIEn Monitor; C:\Program Files\WajIEn\wajam_64.exe [2041344 2015-07-17] () [File not signed] R2 qifixyke; C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349\knsrD8EA.tmpfs [X] S4 vicoqudu; [X] S4 zejytose; [X] 2015-07-26 12:35 - 2015-07-26 12:35 - 00001072 _____ C:\Users\Public\Desktop\WindeskWinsearch.lnk 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Users\cojo\AppData\Local\Windesk_Winsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch 2015-07-26 12:35 - 2015-07-26 12:35 - 00000000 ____D C:\Program Files (x86)\WindeskWinsearch 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn 2015-07-26 11:42 - 2015-07-26 11:42 - 00000000 ____D C:\Program Files\WajIEn 2015-07-26 10:50 - 2015-07-26 14:14 - 00001562 _____ C:\Windows\PFRO.log 2015-07-26 10:50 - 2015-07-26 14:14 - 00000224 _____ C:\Windows\setupact.log 2015-07-26 10:50 - 2015-07-26 10:50 - 00000000 _____ C:\Windows\setuperr.log 2015-07-25 21:52 - 2015-07-26 12:33 - 00000000 ____D C:\Program Files (x86)\FriendlyError 2015-07-21 10:48 - 2015-07-21 10:49 - 00000000 ____D C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd 2015-07-21 10:46 - 2015-07-25 14:38 - 00000338 _____ C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job 2015-07-21 10:46 - 2015-07-21 10:46 - 00003248 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] 2015-07-21 10:46 - 2015-07-21 10:46 - 00000000 ____D C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65} 2015-07-18 12:01 - 2015-07-18 12:01 - 00000000 ____D C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef 2015-07-17 14:10 - 2015-07-17 14:10 - 00000000 ____D C:\Users\cojo\AppData\Local\12521 2015-07-16 11:25 - 2015-07-17 20:20 - 00000000 ____D C:\Program Files (x86)\GUMD670.tmp 2015-07-16 11:25 - 2015-07-16 11:25 - 06420480 _____ C:\Program Files (x86)\GUTD671.tmp 2015-07-16 11:05 - 2015-07-26 14:19 - 01438051 _____ C:\Windows\WindowsUpdate.log 2015-07-15 23:51 - 2015-07-15 23:47 - 00613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2015-07-13 18:55 - 2015-07-13 18:55 - 00000000 _____ C:\Windows\SysWOW64\Number of results 2015-07-13 17:32 - 2015-07-13 17:32 - 00000000 ____D C:\ZombieNews 2015-07-13 16:28 - 2015-07-13 16:28 - 00000000 _____ C:\dummy.htm 2015-07-13 16:19 - 2015-07-13 16:19 - 00003146 _____ C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} 2015-07-13 11:14 - 2015-07-13 11:14 - 00003140 _____ C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} 2015-07-13 10:28 - 2015-07-13 10:28 - 00000290 __RSH C:\ProgramData tuser.pol 2015-07-12 23:15 - 2015-07-26 14:15 - 00001000 _____ C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job 2015-07-12 23:14 - 2015-07-26 14:15 - 00000982 _____ C:\Windows\Tasks\A4crvbx.job 2015-07-12 23:07 - 2015-07-25 14:39 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-07-12 23:07 - 2015-07-16 11:12 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349 2015-07-12 23:06 - 2015-07-17 09:51 - 00000000 ____D C:\Users\cojo\AppData\Local\ZombieNews 2015-07-12 23:03 - 2015-07-12 23:03 - 00000971 _____ C:\Users\cojo\Desktop\GUPlayer.lnk 2015-07-12 23:02 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-07-12 23:01 - 2015-07-17 13:55 - 00000000 ____D C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\8A785A62pctlsp.log 2015-07-12 14:00 - 2015-07-12 14:00 - 00000142 _____ C:\Windows\SysWOW64\89FD28A7pctlsp.log 2015-07-12 13:53 - 2015-07-12 13:54 - 00000875 _____ C:\Windows\SysWOW64\${LOGFILE} 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\prleth.sys 2015-07-11 15:30 - 2015-07-11 15:30 - 00000000 _____ C:\Windows\hgfs.sys 2015-07-11 14:53 - 2015-07-11 14:53 - 00000000 ___HD C:\Users\cojo\AppData\Roaming\GoldenGate 2015-07-11 14:52 - 2015-07-13 16:29 - 00000000 ____D C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z 2015-07-11 14:51 - 2015-07-11 14:51 - 24656704 _____ (Mozilla) C:\Users\cojo\Downloads\FirefoxSetup [1].exe 2015-07-10 11:41 - 2015-07-26 12:41 - 00000324 _____ C:\Windows\Tasks\UpdateTask.job 2015-07-10 11:41 - 2015-07-10 11:41 - 00003260 _____ C:\Windows\System32\Tasks\UpdateTask 2015-07-10 11:39 - 2015-07-16 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X 2015-07-10 11:39 - 2015-07-10 11:38 - 11120451 _____ C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe 2015-07-10 11:37 - 2015-07-10 11:37 - 00840704 _____ (Web ) C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe 22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\cojo\AppData\Roaming\A4crvbx 2013-05-20 15:26 - 2013-05-20 15:26 - 0099384 _____ () C:\Users\cojo\AppData\Roaming\inst.exe 2012-08-05 22:45 - 2012-08-05 22:45 - 0000063 _____ () C:\Users\cojo\AppData\Roaming\mbam.context.scan 2013-05-20 15:26 - 2013-05-20 15:26 - 0007859 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.cat 2013-05-20 15:26 - 2013-05-20 15:26 - 0001167 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.inf 2013-05-20 15:26 - 2013-05-20 15:26 - 0000055 _____ () C:\Users\cojo\AppData\Roaming\pcouffin.log 2013-05-20 15:26 - 2013-05-20 15:26 - 0082816 _____ (VSO Software) C:\Users\cojo\AppData\Roaming\pcouffin.sys 2009-12-08 23:20 - 2013-06-27 10:26 - 0000602 _____ () C:\Users\cojo\AppData\Roaming\wklnhst.dat 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq 2015-07-15 23:51 - 2015-07-15 23:47 - 0613255 _____ (CMI Limited) C:\Users\cojo\AppData\Local sv4CEA.tmp 2011-03-27 10:40 - 2011-03-27 10:40 - 0005046 _____ () C:\ProgramData\oafcpcef.qqj Task: {0488AFD6-B433-4D66-87BD-27B2DCB1A1D8} - System32\Tasks\UpdateTask => C:\Users\cojo\AppData\Local\Chromium\APPLIC~1\450244~1.0\INSTAL~1\UNINST~1.EXE Task: {065E0812-B371-4BE6-9DC6-9F4654FEC689} - System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi Task: {0757D406-27DA-457C-BA28-3D35CDAD5160} - \A4crvbx No Task File <==== ATTENTION Task: {0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8} - \xuTxo6w4mD5PKuSq No Task File <==== ATTENTION Task: {35606946-55A3-4C83-84EE-0565AD6B793B} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7 No Task File <==== ATTENTION Task: {5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D} - System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => pcalua.exe -a "C:\Users\cojo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AX3OXGJX egistrydoktor-fr[1].exe" -d C:\Users\cojo\Desktop Task: {5AD7494F-C291-4E7C-B4C9-92DD432A45C3} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user No Task File <==== ATTENTION Task: {6B566E47-0C3C-40F9-AE24-866BB2B5AB66} - \3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3 No Task File <==== ATTENTION Task: {73C78214-D898-4A38-A554-27ED71BC0AB5} - System32\Tasks\Bidaily Synchronize Task[8da6] => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe [2014-07-21] (PC Utilities Software Limited) <==== ATTENTION Task: {B34C4391-204F-4382-B7A7-84D4F7EA7B84} - System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => pcalua.exe -a C:\Users\cojo\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs Task: C:\Windows\Tasks\A4crvbx.job => C:\Users\cojo\AppData\Roaming\A4crvbx.exe <==== ATTENTION Task: C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => c:\programdata\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\UpdateTask.job => 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ask: C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq.exe <==== ATTENTION HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windesk Winsearch => value removed successfully HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mpck_fr_017010028 => value removed successfully HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\gmsd_fr_005010030 => value removed successfully HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\rec_fr_47 => value removed successfully WajIEn Monitor => Service stopped successfully. WajIEn Monitor => service removed successfully qifixyke => Service stopped successfully. qifixyke => service removed successfully vicoqudu => service removed successfully zejytose => service removed successfully C:\Users\Public\Desktop\WindeskWinsearch.lnk => moved successfully. C:\Users\cojo\AppData\Local\Windesk_Winsearch => moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindeskWinsearch => moved successfully. C:\Program Files (x86)\WindeskWinsearch => moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajIEn => moved successfully. C:\Program Files\WajIEn => moved successfully. C:\Windows\PFRO.log => moved successfully. C:\Windows\setupact.log => moved successfully. C:\Windows\setuperr.log => moved successfully. C:\Program Files (x86)\FriendlyError => moved successfully. C:\Program Files (x86)\dd9d66b3-3934-4482-bada-ab1cb0ee9efd => moved successfully. C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job => moved successfully. C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] => moved successfully. "C:\ProgramData\{b9cd87d9-7c15-51c4-b9cd-d87d97c11f65}" => File/Folder not found. C:\Program Files (x86)\d925c8cb-4d16-4d74-ad47-cb8825673fef => moved successfully. C:\Users\cojo\AppData\Local\12521 => moved successfully. C:\Program Files (x86)\GUMD670.tmp => moved successfully. C:\Program Files (x86)\GUTD671.tmp => moved successfully. Could not move "C:\Windows\WindowsUpdate.log" => Scheduled to move on reboot. C:\Users\cojo\AppData\Local sv4CEA.tmp => moved successfully. C:\Windows\SysWOW64\Number of results => moved successfully. C:\ZombieNews => moved successfully. C:\dummy.htm => moved successfully. C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} => moved successfully. C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} => moved successfully. C:\ProgramData tuser.pol => moved successfully. C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job => moved successfully. C:\Windows\Tasks\A4crvbx.job => moved successfully. C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully. C:\Users\cojo\AppData\Roaming\200A20AB-1436735219-379E-D193-4E45435F4349 => moved successfully. C:\Users\cojo\AppData\Local\ZombieNews => moved successfully. C:\Users\cojo\Desktop\GUPlayer.lnk => moved successfully. C:\Windows\system32\Drivers\etc\hp.bak => moved successfully. C:\Users\cojo\AppData\Roaming\200A20AB-1436734898-379E-D193-4E45435F4349 => moved successfully. C:\Windows\SysWOW64\8A785A62pctlsp.log => moved successfully. C:\Windows\SysWOW64\89FD28A7pctlsp.log => moved successfully. C:\Windows\SysWOW64\${LOGFILE} => moved successfully. C:\Windows\prleth.sys => moved successfully. C:\Windows\hgfs.sys => moved successfully. C:\Users\cojo\AppData\Roaming\GoldenGate => moved successfully. C:\Users\cojo\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z => moved successfully. C:\Users\cojo\Downloads\FirefoxSetup [1].exe => moved successfully. C:\Windows\Tasks\UpdateTask.job => moved successfully. C:\Windows\System32\Tasks\UpdateTask => moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X => moved successfully. C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731 [1].exe => moved successfully. "C:\Users\cojo\Downloads\photofiltre-x-installer_10-9-1_fr_10731.exe" => File/Folder not found. 22015-07-16 11:25 - 2015-07-16 11:25 - 6420480 _____ () C:\Program Files (x86)\GUTD671.tmp => Error: No automatic fix found for this entry. C:\Users\cojo\AppData\Roaming\A4crvbx => moved successfully. C:\Users\cojo\AppData\Roaming\inst.exe => moved successfully. C:\Users\cojo\AppData\Roaming\mbam.context.scan => moved successfully. C:\Users\cojo\AppData\Roaming\pcouffin.cat => moved successfully. C:\Users\cojo\AppData\Roaming\pcouffin.inf => moved successfully. C:\Users\cojo\AppData\Roaming\pcouffin.log => moved successfully. C:\Users\cojo\AppData\Roaming\pcouffin.sys => moved successfully. C:\Users\cojo\AppData\Roaming\wklnhst.dat => moved successfully. C:\Users\cojo\AppData\Roaming\xuTxo6w4mD5PKuSq => moved successfully. "C:\Users\cojo\AppData\Local sv4CEA.tmp" => File/Folder not found. C:\ProgramData\oafcpcef.qqj => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0488AFD6-B433-4D66-87BD-27B2DCB1A1D8}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0488AFD6-B433-4D66-87BD-27B2DCB1A1D8}" => key removed successfully C:\Windows\System32\Tasks\UpdateTask not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UpdateTask" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{065E0812-B371-4BE6-9DC6-9F4654FEC689}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{065E0812-B371-4BE6-9DC6-9F4654FEC689}" => key removed successfully C:\Windows\System32\Tasks\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6DA28FE1-EA92-45A6-A2FE-C58DAFC97DE1}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0757D406-27DA-457C-BA28-3D35CDAD5160}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0757D406-27DA-457C-BA28-3D35CDAD5160}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\A4crvbx" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B3C75F0-2B95-4B11-8244-DB2EE5E5A1A8}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\xuTxo6w4mD5PKuSq" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{35606946-55A3-4C83-84EE-0565AD6B793B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35606946-55A3-4C83-84EE-0565AD6B793B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-7" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5818BCF6-8F3E-4D35-98C3-2E3BF7F20D7D}" => key removed successfully C:\Windows\System32\Tasks\{46086C68-1028-41AA-AEA6-B466BC229E6A} => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{46086C68-1028-41AA-AEA6-B466BC229E6A}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5AD7494F-C291-4E7C-B4C9-92DD432A45C3}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5AD7494F-C291-4E7C-B4C9-92DD432A45C3}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-10_user" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6B566E47-0C3C-40F9-AE24-866BB2B5AB66}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B566E47-0C3C-40F9-AE24-866BB2B5AB66}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3336bacc-9e0d-4ed8-af11-8d615fb87e4f-3" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73C78214-D898-4A38-A554-27ED71BC0AB5}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73C78214-D898-4A38-A554-27ED71BC0AB5}" => key removed successfully C:\Windows\System32\Tasks\Bidaily Synchronize Task[8da6] not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[8da6]" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B34C4391-204F-4382-B7A7-84D4F7EA7B84}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B34C4391-204F-4382-B7A7-84D4F7EA7B84}" => key removed successfully C:\Windows\System32\Tasks\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8} not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{25ACEE44-C11D-4CAA-9CB1-CB7E98E6B2A8}" => key removed successfully C:\Windows\Tasks\A4crvbx.job not found. C:\Windows\Tasks\Bidaily Synchronize Task[8da6].job not found. C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully. C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully. C:\Windows\Tasks\UpdateTask.job not found. C:\Windows\Tasks\xuTxo6w4mD5PKuSq.job not found. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-27 13:10:49)<= "C:\Windows\WindowsUpdate.log" => Could not move ==== End of Fixlog 13:10:49 ====" Par contre, pour information, je viens à nouveau de désinstaller WINDESKWINSEARCH et pendant que le fix de FRST travaillait un truc "panda antivirus" s'est installé, mais je n'ai pas retrouvé "panda" dans la liste des programmes... je n'y comprends plus rien... Encore merci pour votre aide

Malekal_morte- · Answer

ok, voici la suite :

 Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 
Mets le à  jour puis lance un examen. 

A la fin du scan, clic sur "Supprimer Selection" en bas à  gauche. 
Redémarre l'ordinateur si besoin. 
Après redémarrage, relance Malwarebytes. 
Vas chercher le rapport dans l'onglet Historique. 
A gauche Journal des examens. 
Doube-clic sur l'examen dans la liste. 
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

jo13200 · Answer

bonsoir,

voici le lien du journal d'analyse : 

https://pjjoint.malekal.com/files.php?id=20150727_v12i9r11n8j5

merci d'avance et bonne soirée,

Malekal_morte- · Answer

Reste quel problème ?

jo13200 · Answer

Bonsoir,

restent encore quelques problèmes malheureusement : 

l'ordinateur reste lent et certaines pages internet que je consulte se ferment toutes seules.

Au redémarrage, parfois l'ordinateur reste bloqué sur le logo acer : empowering et je suis obligée de l'éteindre et de le redémarrer.

Aujourd'hui, au redémarrage, j'ai eu le message suivant : ACER. Please download la test version Flash Player et si je clique sur ok, la fenêtre revient quand même...

désolée d'abuser de votre temps, mais tout cela m'inquiète.

Grand merci pour votre patience,

bonne soirée,

jo13200 · Answer

bonjour,

je surfe sous firefox.

voici le lien vers le rapport cbs.log : 

https://pjjoint.malekal.com/files.php?id=20150728_w7x7k15h10k12

Merci

Malekal_morte- · Answer

Suis ce tutorial : https://forum.malekal.com/viewtopic.php?t=51899&start=
Fais passer le rapport SFCFix qui s'ouvre à la fin du scan (il se trouve sur le bureau : SFCFix.txt).
puis : Relance un scan SFC et vérifie que ce dernier ne rapporte plus d'erreur irréparable.

jo13200 · Answer

bonsoir,

je ne parviens pas à désinstaller les 2 mises à jour en cause : je les vois bien dans la liste des mises à jour, mais lorsque je passe par l'historique des mises à jour, le système m'indique : aucune mise à jour installée.

Je vais essayer de trouver une solution et je reviens vers vous dès que possible.

A propos, les programmes Wajam et WINDESKWINSEARCH sont de nouveau là...
bonne soirée,

jo13200 · Answer

Bonjour,

ok, je passe le fix.

Concernant wajam notamment, Hier,  j'ai l'ai vu dans la barre de tâche en haut de l'écran. Il tournait comme quand je vais une recherche sur Google par exemple. Hum!!! Je ne sais pas si je suis très claire.

Aujourd'hui, je ne le vois plus.... bizarre

je relance un scan malwarebytes pour voir si il les détecte encore et je reviens avec le rapport du fix également.

Bonne journée,

jo13200 · Answer

bonsoir,

comme convenu, voici le lien vers le fix et le rapport malwarebytes :

https://pjjoint.malekal.com/files.php?id=20150730_z13z9k5u5z8

https://pjjoint.malekal.com/files.php?id=20150730_j10c5y7f14h13

Merci et bonne soirée

jo13200 · Answer

bonjour,

voici le résultat du scan SFC : 

"Microsoft Windows [version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Tous droits réservés.

C:\Windows\system32>sfc/scannow
Début de l'analyse du système. Cette opération peut nécessiter un certain temps.
Démarrage de la phase de vérification de l'analyse du système.
La vérification 100% est terminée.
Le programme de protection des ressources Windows n'a trouvé aucune violation d'
intégrité.
C:\Windows\system32>"

cela me semble pas mal... Pour l'instant l'ordinateur se comporte très bien, plus de problèmes et plus de traces de Wajam et WindeskWinsearch

Merci beaucoup pour votre aide, et votre patience à mon égard.

Bonne fin de journée et bon week-end également.

jo13200 · Answer

bonjour,

voici le lien vers le rapport : 

https://pjjoint.malekal.com/files.php?id=20150731_t14j9h11l9u12

ce devrait être bon cette fois-ci.

Merci

jo13200 · Answer

Bonsoir 
Oui une nette amélioration effectivement.  Je suis ravie,  merci beaucoup pour votre aide. 
Passez un bon week end.

Malekal_morte- · Answer

=)

à toi aussi! 

Voila, c'est terminé, tu peux supprimer les programmes utilisés. 

Quelques conseils : 


Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start= 


Pour ne plus te faire avoir. 
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/ 
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html 

 
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

Wajam et WINDESKWINSEARCH : Ordi très lent.

18 réponses

Discussions similaires

Newsletters