télécharges ZHPFIX Si tu ne l'as pas http://www.nicolascoolman.fr/telecharger/ Sélectionne et copie les lignes suivantes ************************************************ Script ZHPFix HKLM\SOFTWARE\Wow6432Node\BDA6A6EC3937A98FED654800645A6DB8 =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\ourluckysitesSoftware =>Hijacker.OurLuckySites O69 - SBI: prefs.js [Seb - ml19w8s3.default] user_pref("browser.search.hiddenOneOffs", "Amazon.fr,Bing,DuckDuckGo,ourluckysites,Portail Lexical - CNRTL,Wikipédia (fr),Yahoo"); =>Hijacker.OurLuckySites [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified O39 - APT: {0DD8895A-88CA-488A-93D1-B4ABBE88B097} - (...) -- C:\Windows\System32\Tasks\{0DD8895A-88CA-488A-93D1-B4ABBE88B097} [3346] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {8D987553-8F91-417E-B265-E847ACFBB4E2} - (...) -- C:\Windows\System32\Tasks\{8D987553-8F91-417E-B265-E847ACFBB4E2} [3202] (.Orphan.) =>.Superfluous.Orphan O4 - HKLM\..\Run: [InstallerLauncher] C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe (.not file.) O4 - HKCU\..\Run: [background_fault] C:\Users\Seb\AppData\Local\background_fault\aswRD.exe (.not file.) O4 - HKUS\S-1-5-21-1633530422-2511851285-4157223326-1000\..\Run: [background_fault] C:\Users\Seb\AppData\Local\background_fault\aswRD.exe (.not file.) O4 - GS\Desktop [Administrateur]: Continuer Installation de aimp.lnk . (...) C:\Users\Seb\AppData\Local\Temp\ICReinstall_Tabletop-Simulator-Zombicide-Pc.exe /RR O4 - GS\Desktop [Seb]: Continuer Installation de aimp.lnk . (...) C:\Users\Seb\AppData\Local\Temp\ICReinstall_Tabletop-Simulator-Zombicide-Pc.exe /RR O43 - CFD: 22/05/2017 - [0] D -- C:\Users\Seb\AppData\Local\CSHMDR O87 - FAEL: "{C75C4635-F9AA-46B9-B21D-77D5FE4EEE32}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\MIO\loader\hitachixhts725050a9a364_100913pck404vlke90ljx.dat (.not file.) O87 - FAEL: "{9D4AF405-A7A8-4F21-91CD-341B0F167A42}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\MIO\loader\hitachixhts725050a9a364_100913pck404vlke90ljx.dat (.not file.) [MD5.] [WIS][2017/02/20 19:37:50] (.BikaQ - Windows Installer.) -- C:\Windows\Installer\13e28c94.msi [779776] =>.Superfluous.BikaQ [MD5.] [WIS][2017/03/09 20:43:42] (.BikaQ - Windows Installer.) -- C:\Windows\Installer\15f5bf7a.msi [834048] =>.Superfluous.BikaQ [MD5.] [WIS][2017/03/03 16:13:50] (.WinSnare - Windows Installer.) -- C:\Windows\Installer\22c00f67.msi [1098752] =>.Superfluous.WinSnare [MD5.] [WIS][2017/04/05 10:25:52] (.WinSnare - Windows Installer.) -- C:\Windows\Installer\a0a8c62e.msi [1406464] =>.Superfluous.WinSnare HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} =>.Superfluous.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} =>.Superfluous.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} =>.Superfluous.Orphan C:\Windows\Installer\13e28c94.msi =>.Superfluous.BikaQ C:\Windows\Installer\15f5bf7a.msi =>.Superfluous.BikaQ C:\Windows\Installer\22c00f67.msi =>.Superfluous.WinSnare C:\Windows\Installer\a0a8c62e.msi =>.Superfluous.WinSnare O17 - HKLM\System\CCS\Services\Tcpip\..\{BA91F875-8486-4EA9-B4BC-979C299C6E8F}: DhcpDomain = zoo.nb HKLM\SOFTWARE\Wow6432Node\Atodoentcoikse HKLM\SOFTWARE\Wow6432Node\Atofertainghumot HKLM\SOFTWARE\Wow6432Node\Bangcar HKLM\SOFTWARE\Wow6432Node\Bavrykatok HKLM\SOFTWARE\Wow6432Node\Chtydrerpuing HKLM\SOFTWARE\Wow6432Node\co.ao.qws HKLM\SOFTWARE\Wow6432Node\Coalush HKLM\SOFTWARE\Wow6432Node\Lowaghtzuwegh HKLM\SOFTWARE\Wow6432Node\Zohetnerhiing HKCU\SOFTWARE\Bangcar HKCU\SOFTWARE\Bookness HKCU\SOFTWARE\heheelibom HKCU\SOFTWARE\Moncar O43 - CFD: 26/01/2013 - [] D -- C:\Program Files (x86)\mstrgen O43 - CFD: 15/05/2017 - [] D -- C:\Program Files (x86)\PyeN4e7fbv O43 - CFD: 04/02/2017 - [] HD -- C:\ProgramData\3109m91u77q4870 O43 - CFD: 08/05/2017 - [] D -- C:\Users\Seb\AppData\Local\Bookness O43 - CFD: 05/04/2017 - [] D -- C:\Users\Seb\AppData\Local\Moncar SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix ********************************************** Lance ZHPFIX colles les lignes dans le cadre blanc si elles n'y sont pas tu supprimes avec le bouton GO copies colles le rapport qui est sur ton bureau ou C:\Users\....\AppData\Roaming\ZHP\ZHPFix[R1].txt