télécharges ZHPFIX Si tu ne l'as pas http://www.nicolascoolman.fr/telecharger/ Sélectionne et copie les lignes suivantes ************************************************ Script ZHPFix O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (...) C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime O43 - CFD: 24/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (...) -- c:\program files (x86)\quicktime\qttask.exe (.not file.) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime https://www.nicolascoolman.info/2016/04/21/riskware-quicktime/ =>Riskware.QuickTime [MD5.00000000000000000000000000000000] [APT] [ASC9_SkipUac_famille poir‚e] (...) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [CreateChoiceProcessTask] (...) -- C:\Windows\System32\browserchoice.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Driver Booster SkipUAC (famille poir‚e)] (...) -- C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [RecoveryCDWin7] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{1A9C316C-C2A0-469D-BD0B-FDB49E570460}] (...) -- C:\Users\famille poir‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SB3OMI8S\rk_uninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{3ADE66FE-1A66-42AD-84A0-97721BF0DAC7}] (...) -- C:\Users\famille poir‚e\Desktop\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{4B09BE99-A79B-4CAA-B815-018DF5F9688E}] (...) -- C:\Program Files (x86)\Bouygues Telecom\Controle Parental\uninst\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{4B81E086-B7D9-4941-87B5-C6FDD0283B10}] (...) -- C:\Users\famille poir‚e\Desktop\Wii_Converter_GUI_v1.6.0\Wii_Converter_GUI_v1.6.0\Wii Converter GUI.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{4BD25116-A386-415C-AA42-E3DA8BA44850}] (...) -- F:\Documents and Settings\HP_Propri‚taire.NOM-EB85C523610\Mes documents\Outlook Express\setup50.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{52B389B2-37FF-49DB-A265-ED05BD4C11EA}] (...) -- C:\Users\famille poir‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KQN06T3D\rkfree_setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{58E9B169-64C4-4BF6-BD16-211A9DEEDD24}] (...) -- C:\Program Files (x86)\Pinnacle\Studio 16\programs\PinnacleStudio.EXE (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{6A6C0A90-3742-41C2-B8C4-91CA497E878A}] (...) -- C:\Users\famille poir‚e\Desktop\qk_setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{6CD61775-F43C-4FF5-9313-D1209BAD5906}] (...) -- C:\Users\famille poir‚e\Desktop\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{765CBD75-BA01-4650-9D0B-8133435E367E}] (...) -- F:\Program Files\Outlook Express\setup50.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{7F9781C3-C52B-40AC-B392-EC1A62A2956B}] (...) -- C:\Users\famille poir‚e\Desktop\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{8E2A2D98-7AE4-41EF-A4B4-0648FABFA329}] (...) -- F:\Program Files\WBFS\WBFS Manager 3.0\WBFSManager.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{94C76578-C315-49AF-9D99-3534FBFD84D6}] (...) -- F:\Program Files\WBFS\WBFS Manager 3.0\WBFSManager.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{94DF393D-4A86-492D-B9BF-B4355704B449}] (...) -- C:\Users\famille poir‚e\Desktop\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{9D94D300-DEEB-47B3-A2EC-5CBEF3C348BE}] (...) -- C:\Users\famille poir‚e\Downloads\wbfs_file_2.9_win32\wbfs_file_2.9\wbfs_file.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{A9FCD3E2-86E9-40CD-9F0A-0F23032B2111}] (...) -- E:\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{AD05CFA2-38F0-490F-8630-6A748A582771}] (...) -- C:\Users\famille poir‚e\Desktop\Wii_Converter_GUI_v1.6.0\Wii_Converter_GUI_v1.6.0\Wii Converter GUI.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{B87462CA-5A66-4E3E-98FA-E16DD3B8ACA8}] (...) -- F:\Program Files\Outlook Express\msimn.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C4F33253-C071-4C53-8BDE-3657C81DA0B9}] (...) -- C:\Users\famille poir‚e\Desktop\Wii_Converter_GUI_v1.6.0\Wii_Converter_GUI_v1.6.0\Wii Converter GUI.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C50A8001-400E-406F-8316-E37AF9ADAA3E}] (...) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{CDDA0F95-12D1-43E5-A0D3-D3AFEA1D1379}] (...) -- C:\Program Files (x86)\Sony\Sony Picture Utility\VideoUtility\SPUHDD1AppLauncher.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{D3273A17-45EC-4181-84BD-D2468FEA92B2}] (...) -- C:\Users\famille poir‚e\Desktop\Image_Converter.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{DE6494F5-1793-43A8-9EC8-BBE8EB16385C}] (...) -- C:\Program Files (x86)\SPAMfighter\uninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{DF45A19D-87B5-4366-83C6-0B92AEBC1958}] (...) -- C:\Program Files\PC-Doctor for Windows\Setup_nltd.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{E2D048D0-FCDC-4751-B898-1D1B0CD9203F}] (...) -- C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{E38464CD-3ACE-47F8-8179-F1A9F7DEB969}] (...) -- C:\Users\famille poir‚e\Desktop\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{E6E7C160-1A2F-481B-AFCF-809341DB66DB}] (...) -- C:\Users\famille poir‚e\Desktop\Wii_Converter_GUI_v1.6.0\Wii_Converter_GUI_v1.6.0\Wii Converter GUI.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{ED49B41F-AE81-4D74-B32D-9E2C2859DCB1}] (...) -- E:\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{F3A0F07B-535F-486F-909D-8AD1B7E43409}] (...) -- F:\Documents and Settings\HP_Propri‚taire.NOM-EB85C523610\Mes documents\Outlook Express\msimn.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{F831DC35-A619-4EF7-8F95-223C8C34DAA1}] (...) -- C:\Users\famille poir‚e\Desktop\advanced_keylogger.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: CreateChoiceProcessTask - (...) -- C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask [3674] (.Orphan.) =>.Superfluous.Orphan O39 - APT: RecoveryCDWin7 - (...) -- C:\WINDOWS\System32\Tasks\RecoveryCDWin7 [3886] (.Orphan.) =>.Superfluous.Orphan O43 - CFD: 06/05/2016 - [0] D -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} O43 - CFD: 06/06/2016 - [0] D -- C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} O43 - CFD: 06/05/2016 - [0] D -- C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DataSharing O53 - SMSR:HKLM\...\startupreg\Advanced SystemCare 9 [Key] . (...) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe (.not file.) O87 - FAEL: "{B7DAE315-563A-40C8-B6EA-D7DA84DD7F34}" [In-None-P6-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{B139BE68-5416-40AA-B9BB-B2CC59B6F6CA}" [Out-None-P6-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{0596E553-24CD-4E84-BC51-21BEA8600A9C}" [In-None-P17-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{CD1E80B0-2357-441F-898C-029CD667C3BC}" [In-None-P6-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{B07C031E-6EFB-49AB-8D96-8AE8B3DC6551}" [In-None-P17-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{42716AAF-C0EF-4D6F-88CE-59FCC4675C30}" [Out-None-P17-TRUE] .(...) -- C:\Users\famille poirée\AppData\Roaming\uTorrent\uTorrent.exe (.not file. HKLM\SOFTWARE\Wow6432Node\Panda Software HKCU\SOFTWARE\F-Secure HKCU\SOFTWARE\SUPERAntiSpyware.com O43 - CFD: 08/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware O43 - CFD: 11/10/2010 - [] D -- C:\ProgramData\F-Secure O43 - CFD: 30/03/2011 - [] D -- C:\ProgramData\McAfee O43 - CFD: 08/06/2016 - [] D -- C:\ProgramData\SUPERAntiSpyware.com O43 - CFD: 08/06/2016 - [] D -- C:\Users\famille poirée\AppData\Roaming\SUPERAntiSpyware.com [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix ********************************************** Lance ZHPFIX colles les lignes dans le cadre blanc si elles n'y sont pas tu supprimes avec le bouton GO copies colles C:\Users\....\AppData\Roaming\ZHP\ZHPFix[R1].txt