Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 02.08.2018 Exécuté par user (15-08-2018 15:41:02) Run:2 Exécuté depuis C:\Users\user\Desktop Profils chargés: user (Profils disponibles: user) Mode d'amorçage: Normal ============================================== fixlist contenu: ***************** CreateRestorePoint: CloseProcesses: HKLM-x32\...\Run: [mbot_fr_11] => [X] HKU\S-1-5-18\...\Run: [] => [X] GroupPolicy: Restriction - Chrome <==== ATTENTION Tcpip\..\Interfaces\{09E9C6D0-FEA1-42AD-A8E3-7211F5B60B87}: [NameServer] 77.234.40.79 HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = SearchScopes: HKLM -> DefaultScope la valeur est absente SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_secureddownload_15_08&cd=2XzuyEtN2Y1L1Qzu0CtDyE0AtDtDtCtCyCtAtDtByB0D0F0CtN0D0Tzu0StCtCyEzztN1L2XzutAtFzztFtCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyB0ByByCtDyE0EtGyDyDyCtBtG0Dzy0EtBtG0E0DyCtDtGyDyEtB0EzytA0FtA0Dzy0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCtB0EzztD0CyDtGyE0AzztBtGyEtBzzyBtG0AzztC0CtGtD0D0Azyzz0EyB0C0ByEtB0C2QtN1B2Z1V1T1S1NzuyDtCyC&cr=139962688&ir= SearchScopes: HKLM -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_tele_14_50_ie&cd=2XzuyEtN2Y1L1Qzu0CtDyE0AtDtDtCtCyCtAtDtByB0D0F0CtN0D0Tzu0StCtDyByEtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtA0AzztA0FtA0AtG0BtCyB0FtG0AtAzyzytG0A0B0DyEtGtCzyyE0CyCyEzytCtByD0Czy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCtB0EzztD0CyDtGyE0AzztBtGyEtBzzyBtG0AzztC0CtGtD0D0Azyzz0EyB0C0ByEtB0C2Q&cr=752274906&ir= SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = SearchScopes: HKU\S-1-5-21-4268732833-2078672349-1973945886-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = SearchScopes: HKU\S-1-5-21-4268732833-2078672349-1973945886-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJ_Xux0ohQkUyHV_-uVqn14U4DjFUms4TSz4dqKb7tQLWIMz60xFA6bdT-A6UFnSFAkg50bwxRnVGOkn3bzgPeMSsJlo7hcE3PPYg0UTcey5yrvx-0HfQS3Q9cjHGnkJU2m6AuwwQ84dwFubOxmhpvbpSWpA,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-4268732833-2078672349-1973945886-1000 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_tele_14_50_ie&cd=2XzuyEtN2Y1L1Qzu0CtDyE0AtDtDtCtCyCtAtDtByB0D0F0CtN0D0Tzu0StCtDyByEtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtA0AzztA0FtA0AtG0BtCyB0FtG0AtAzyzytG0A0B0DyEtGtCzyyE0CyCyEzytCtByD0Czy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCtB0EzztD0CyDtGyE0AzztBtGyEtBzzyBtG0AzztC0CtGtD0D0Azyzz0EyB0C0ByEtB0C2Q&cr=752274906&ir= SearchScopes: HKU\S-1-5-21-4268732833-2078672349-1973945886-1000 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3331316&octid=EB_ORIGINAL_CTID&ISID=MCAD6F594-8277-416A-954B-D6E8FEB4AC28&SearchSource=58&CUI=&UM=6&UP=SPA585C33A-0265-470F-88D9-F717DAF326A1&q={searchTerms}&SSPV= Toolbar: HKLM - Pas de nom - {ae07101b-46d4-4a98-af68-0333ea26e113} - Pas de fichier Toolbar: HKLM-x32 - Pas de nom - {ae07101b-46d4-4a98-af68-0333ea26e113} - Pas de fichier Toolbar: HKU\S-1-5-21-4268732833-2078672349-1973945886-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\a458wpa0.default\extensions\shortcutff@gmail.com => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\a458wpa0.default\extensions\faststartff@gmail.com => non trouvé(e) CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default CHR HKLM\...\Chrome\Extension: [Äÿ] - CHR HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [Äÿ] - CHR HKLM-x32\...\Chrome\Extension: [ehhlaekjfiiojlddgndcnefflngfmhen] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [Äÿ] - U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] () S3 catchme; \??\C:\patrick\catchme.sys [X] S3 cpuz134; \??\C:\Users\user\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X] <==== ATTENTION S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [X] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X] C:\Windows\System32\DRIVERS\EsgScanner.sys C:\Users\user\AppData\Local\Temp\cpuz134\cpuz134_x64.sys C:\patrick\catchme.sys C:\Windows\system32\drivers\viahduaa.sys C:\Windows\system32\DRIVERS\vmnetadapter.sys 2018-08-12 17:56 - 2018-08-12 17:56 - 000000375 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2014-08-01 18:53 - 2014-11-16 08:39 - 000003801 _____ () C:\Users\user\AppData\Roaming\Bubble Dock.boostrap.log 2014-08-01 18:54 - 2014-11-16 08:39 - 000024516 _____ () C:\Users\user\AppData\Roaming\Bubble Dock.installation.log 2014-09-01 10:18 - 2014-12-27 21:52 - 000000935 _____ () C:\Users\user\AppData\Roaming\FJPZBC 2018-01-15 20:59 - 2018-01-15 21:16 - 000571168 _____ () C:\Users\user\AppData\Roaming\Scorch_Install.log 2014-09-01 10:18 - 2014-09-01 10:18 - 000001248 _____ () C:\Users\user\AppData\Roaming\UBEJ 2017-09-07 05:06 - 2017-09-07 05:06 - 000023849 _____ () C:\Users\user\AppData\Roaming\UserTile.png 2018-06-01 19:48 - 2018-06-01 19:50 - 000000000 _____ () C:\Users\user\AppData\Local\{D87522CA-C3A0-4067-A87B-4A0F96D4E33B} 2018-06-09 17:32 - 2017-03-30 16:22 - 009968704 _____ (© pdfforge GmbH.) C:\Users\user\AppData\Local\Temp\318ff7f5-cf95-4eff-bb79-babe5fbd2e80.exe 2018-06-09 17:32 - 2018-06-09 17:32 - 010062000 _____ (© pdfforge GmbH.) C:\Users\user\AppData\Local\Temp\a1bb0f10-fdac-429f-89d9-8e207b218ebd.exe 2016-12-22 18:41 - 2016-12-22 18:43 - 008650280 _____ (Adobe Systems Incorporated) C:\Users\user\AppData\Local\Temp\ade.exe 2016-12-01 21:38 - 2018-01-06 16:20 - 000360600 _____ (Apowersoft) C:\Users\user\AppData\Local\Temp\ApowersoftAutoUpdater.exe 2015-11-12 18:55 - 2015-11-12 18:55 - 000144008 _____ (© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Temp\BingSvc.exe 2015-11-12 18:55 - 2015-11-12 18:55 - 001118360 _____ (© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Temp\BSvcProcessor.exe 2015-11-12 18:55 - 2015-11-12 18:55 - 000170128 _____ (© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Temp\BSvcUpdater.exe 2018-01-06 16:38 - 2018-01-06 16:38 - 001721368 _____ (Apowersoft Ltd. ) C:\Users\user\AppData\Local\Temp\bu234rss.5zr.exe 2015-10-31 19:04 - 2015-10-31 19:04 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(1).exe 2015-11-11 11:12 - 2015-11-11 11:12 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(2).exe 2015-11-13 20:24 - 2015-11-13 20:24 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(3).exe 2016-03-09 22:50 - 2016-03-09 22:50 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(4).exe 2016-05-14 14:59 - 2016-05-14 14:59 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(5).exe 2015-10-31 19:02 - 2015-10-31 19:02 - 001918920 _____ () C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper.exe 2016-07-26 18:45 - 2016-07-26 18:45 - 000741440 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u101-windows-au.exe 2016-11-04 19:47 - 2016-11-04 19:47 - 000737856 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u111-windows-au.exe 2017-01-23 19:22 - 2017-01-23 19:22 - 000739904 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u121-windows-au.exe 2017-04-24 18:21 - 2017-04-24 18:21 - 000739904 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u131-windows-au.exe 2017-07-24 13:22 - 2017-07-24 13:22 - 000739904 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u141-windows-au.exe 2018-04-17 19:58 - 2018-04-17 19:58 - 001884616 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u171-windows-au.exe 2018-07-27 06:09 - 2018-07-27 06:09 - 001906040 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u181-windows-au.exe 2014-12-18 19:29 - 2014-12-18 19:29 - 000641448 ____N (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u31-windows-au.exe 2015-04-27 18:48 - 2015-04-27 18:48 - 150622864 _____ () C:\Users\user\AppData\Local\Temp\mpa05660.exe 2018-05-08 15:58 - 2018-05-08 15:58 - 001876480 _____ (Opera Software) C:\Users\user\AppData\Local\Temp\Opera_installer_180508135813327.dll 2018-05-08 15:58 - 2018-05-08 15:58 - 001876480 _____ (Opera Software) C:\Users\user\AppData\Local\Temp\Opera_installer_180508135813602.dll 2018-05-08 15:58 - 2018-05-08 15:58 - 001876480 _____ (Opera Software) C:\Users\user\AppData\Local\Temp\Opera_installer_180508135815971.dll 2018-05-08 15:58 - 2018-05-08 15:58 - 001876480 _____ (Opera Software) C:\Users\user\AppData\Local\Temp\Opera_installer_180508135823485.dll 2018-05-08 15:58 - 2018-05-08 15:58 - 001876480 _____ (Opera Software) C:\Users\user\AppData\Local\Temp\Opera_installer_180508135831918.dll 2016-07-28 18:38 - 2016-07-28 18:38 - 000007168 _____ () C:\Users\user\AppData\Local\Temp\res1.tmp.exe 2015-04-27 18:48 - 2015-04-27 18:49 - 150622864 _____ () C:\Users\user\AppData\Local\Temp\Setup-Wacom.exe 2016-11-01 19:02 - 2015-01-22 17:01 - 000032768 _____ () C:\Users\user\AppData\Local\Temp\shutdown1478019736.exe 2017-05-23 14:58 - 2017-05-23 14:58 - 014157672 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\vcredist_x86.exe 2017-08-05 15:29 - 2017-08-05 15:29 - 032100680 _____ () C:\Users\user\AppData\Local\Temp\vlc-2.2.6-win64.exe 2018-07-22 09:00 - 2018-07-22 09:01 - 041465128 _____ () C:\Users\user\AppData\Local\Temp\vlc-3.0.3-win64.exe 2014-12-11 05:31 - 2014-12-11 05:31 - 000334336 _____ () C:\Users\user\AppData\Local\Temp\wme.dll Task: {1E70D6EF-6863-4CE8-886F-DAE78AC7FD6E} - \WIN-statsAdmin -> Pas de fichier <==== ATTENTION Task: {3680A956-EF03-4E22-9409-DC7F59E0C4EE} - \UBEJ -> Pas de fichier <==== ATTENTION Task: {41A194EA-F801-4F86-9E78-A73E3FF25590} - \FJPZBC -> Pas de fichier <==== ATTENTION Task: {5A0AF412-80CF-4A33-87F6-7FEF8029B4B6} - System32\Tasks\{242E6AB0-8551-49A9-AB77-A88A89AA29E2} => C:\Windows\system32\pcalua.exe -a C:\Users\user\AppData\Local\Temp\jre-8u171-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION Task: {95960BE6-53DB-4078-BE75-3DFB6D15FCDA} - \ASP -> Pas de fichier <==== ATTENTION Task: {A92297A1-FD57-464B-9C0E-7FCFAFC787A4} - \WIN-statsSystem -> Pas de fichier <==== ATTENTION Task: {AD62B269-CE9C-450B-8806-BF1E319F24E2} - \WSE_Vosteran -> Pas de fichier <==== ATTENTION Task: {B10DA74A-EDD0-43B6-956D-6FD46B4BA578} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION Task: {B369B710-6C24-401C-946B-6DCB949FE752} - \WIN-GGfIfEGCfEGbGffIfCfEGC -> Pas de fichier <==== ATTENTION Task: {B72F12E1-3A1A-4C33-B89B-C56D65C9BBE0} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: {CD434405-09CB-4B98-BAE3-D9A9FC5D6F74} - System32\Tasks\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA} => C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp\XRD Manager.exe <==== ATTENTION Task: {DD1BC3B1-6DB5-498C-8034-B4F698F03D3D} - System32\Tasks\SoftwareUpdateTaskMachineCore => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION Task: {E40B45C8-FC4F-4022-8551-D56EAD2D73E4} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION Task: {FFA0825C-54D7-4A1E-A1AF-7CE5613F53EA} - System32\Tasks\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4} => C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp\XRD Manager.exe <==== ATTENTION Task: C:\Windows\Tasks\FJPZBC.job => C:\Users\user\AppData\Roaming\FJPZBC.exe <==== ATTENTION Task: C:\Windows\Tasks\UBEJ.job => C:\Users\user\AppData\Roaming\UBEJ.exe <==== ATTENTION Task: C:\Windows\Tasks\WSE_Vosteran.job => C:\Users\user\AppData\Roaming\WSE_VO~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA}.job => C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp\XRD Manager.exeȢ/exenoupdates /noprereqs /qr AI_RESUME=1 ADDLOCAL=MainFeature,XRDdrivers64 ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE D:\ AI_PREREQFILES=C:\Users\user\AppData\Local\Temp\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA}\drivers64.msi AI_PREREQDIRS=C:\Users\user\AppData\Local\Temp OLDPRODUCTS={D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4} AI_SETUPEXEPATH=C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp\XRD Manager.exe SETUPEXEDIR=C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp <==== ATTENTION Task: C:\Windows\Tasks\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4}.job => C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp\XRD Manager.exeȎ/exenoupdates /exelang 1036 /noprereqs /qr AI_RESUME=1 ADDLOCAL=MainFeature,XRDdrivers64 ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE D:\ TRANSFORMS=:1036 AI_PREREQFILES=C:\Users\user\AppData\Local\Temp\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4}\drivers64.msi AI_PREREQDIRS=C:\Users\user\AppData\Local\Temp AI_SETUPEXEPATH=C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp\XRD Manager.exe SETUPEXEDIR=C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp <==== ATTENTION C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp C:\Program Files (x86)\MyPC Backup AlternateDataStreams: C:\Windows:nlsPreferences [0] MSCONFIG\startupreg: Web Companion => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize C:\Program Files (x86)\Lavasoft\Web Companion cmd: ipconfig /flushdns Hosts: EmptyTemp: ***************** Le Point de restauration a été créé avec succès. Processus fermé avec succès. "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_11" => non trouvé(e) "HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\" => non trouvé(e) "C:\Windows\system32\GroupPolicy\Machine" => non trouvé(e) "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{09E9C6D0-FEA1-42AD-A8E3-7211F5B60B87}\\NameServer" => non trouvé(e) HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => non trouvé(e) HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => valeur restauré(es) avec succès HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => valeur restauré(es) avec succès HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => valeur restauré(es) avec succès HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => valeur restauré(es) avec succès HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => valeur restauré(es) avec succès HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => valeur restauré(es) avec succès HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => valeur restauré(es) avec succès HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => valeur restauré(es) avec succès HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valeur restauré(es) avec succès HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => non trouvé(e) HKLM\Software\Classes\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} => non trouvé(e) HKLM\Software\Classes\CLSID\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB} => non trouvé(e) HKLM\Software\Classes\CLSID\{460C3D19-B3D4-4964-A550-77D263B0CCCB} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => non trouvé(e) HKLM\Software\Classes\CLSID\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => non trouvé(e) "HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => non trouvé(e) HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => non trouvé(e) HKLM\Software\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => non trouvé(e) HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} => non trouvé(e) HKLM\Software\Classes\CLSID\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} => non trouvé(e) HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => non trouvé(e) HKLM\Software\Classes\CLSID\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113}" => non trouvé(e) HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => non trouvé(e) "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113}" => non trouvé(e) HKLM\Software\Wow6432Node\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => non trouvé(e) "HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => non trouvé(e) HKLM\Software\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => non trouvé(e) "HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\shortcutff@gmail.com" => non trouvé(e) "HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\faststartff@gmail.com" => non trouvé(e) "Chrome DefaultSearchURL" => non trouvé(e) HKLM\SOFTWARE\Google\Chrome\Extensions\Äÿ => non trouvé(e) HKU\S-1-5-21-4268732833-2078672349-1973945886-1000\SOFTWARE\Google\Chrome\Extensions\Äÿ => non trouvé(e) HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehhlaekjfiiojlddgndcnefflngfmhen => non trouvé(e) HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kpdmjodecdegfglgaapafjleomjjlpnh => non trouvé(e) HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nbljechdpodpbchbmjcoamidppmpnmlc => non trouvé(e) HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\Äÿ => non trouvé(e) AppMgmt => service non trouvé(e). EsgScanner => service non trouvé(e). catchme => service non trouvé(e). cpuz134 => service non trouvé(e). MBAMSwissArmy => Service arrêté avec succès. "HKLM\System\CurrentControlSet\Services\MBAMSwissArmy" => supprimé(es) avec succès MBAMSwissArmy => service supprimé(es) avec succès VIAHdAudAddService => service non trouvé(e). VMnetAdapter => service non trouvé(e). "C:\Windows\System32\DRIVERS\EsgScanner.sys" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\cpuz134\cpuz134_x64.sys" => non trouvé(e) "C:\patrick\catchme.sys" => non trouvé(e) "C:\Windows\system32\drivers\viahduaa.sys" => non trouvé(e) "C:\Windows\system32\DRIVERS\vmnetadapter.sys" => non trouvé(e) "C:\Windows\system32\Drivers\etc\hosts.ics" => non trouvé(e) "C:\Users\user\AppData\Roaming\Bubble Dock.boostrap.log" => non trouvé(e) "C:\Users\user\AppData\Roaming\Bubble Dock.installation.log" => non trouvé(e) "C:\Users\user\AppData\Roaming\FJPZBC" => non trouvé(e) "C:\Users\user\AppData\Roaming\Scorch_Install.log" => non trouvé(e) "C:\Users\user\AppData\Roaming\UBEJ" => non trouvé(e) "C:\Users\user\AppData\Roaming\UserTile.png" => non trouvé(e) "C:\Users\user\AppData\Local\{D87522CA-C3A0-4067-A87B-4A0F96D4E33B}" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\318ff7f5-cf95-4eff-bb79-babe5fbd2e80.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\a1bb0f10-fdac-429f-89d9-8e207b218ebd.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\ade.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\ApowersoftAutoUpdater.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\BingSvc.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\BSvcProcessor.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\BSvcUpdater.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\bu234rss.5zr.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(1).exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(2).exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(3).exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(4).exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper(5).exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\CopyTransManagerMDHelper.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u101-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u111-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u121-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u131-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u141-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u171-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u181-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\jre-8u31-windows-au.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\mpa05660.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Opera_installer_180508135813327.dll" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Opera_installer_180508135813602.dll" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Opera_installer_180508135815971.dll" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Opera_installer_180508135823485.dll" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Opera_installer_180508135831918.dll" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\res1.tmp.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\Setup-Wacom.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\shutdown1478019736.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\vcredist_x86.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\vlc-2.2.6-win64.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\vlc-3.0.3-win64.exe" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\wme.dll" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E70D6EF-6863-4CE8-886F-DAE78AC7FD6E} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsAdmin => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3680A956-EF03-4E22-9409-DC7F59E0C4EE} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UBEJ => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41A194EA-F801-4F86-9E78-A73E3FF25590} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FJPZBC => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A0AF412-80CF-4A33-87F6-7FEF8029B4B6} => non trouvé(e) "C:\Windows\System32\Tasks\{242E6AB0-8551-49A9-AB77-A88A89AA29E2}" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{242E6AB0-8551-49A9-AB77-A88A89AA29E2} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95960BE6-53DB-4078-BE75-3DFB6D15FCDA} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASP => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A92297A1-FD57-464B-9C0E-7FCFAFC787A4} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsSystem => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AD62B269-CE9C-450B-8806-BF1E319F24E2} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_Vosteran => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B10DA74A-EDD0-43B6-956D-6FD46B4BA578} => non trouvé(e) "C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SoftwareUpdateTaskMachineUA => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B369B710-6C24-401C-946B-6DCB949FE752} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-GGfIfEGCfEGbGffIfCfEGC => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B72F12E1-3A1A-4C33-B89B-C56D65C9BBE0} => non trouvé(e) "C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD434405-09CB-4B98-BAE3-D9A9FC5D6F74} => non trouvé(e) "C:\Windows\System32\Tasks\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA}" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA} => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD1BC3B1-6DB5-498C-8034-B4F698F03D3D} => non trouvé(e) "C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SoftwareUpdateTaskMachineCore => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E40B45C8-FC4F-4022-8551-D56EAD2D73E4} => non trouvé(e) "C:\Windows\System32\Tasks\LaunchSignup" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFA0825C-54D7-4A1E-A1AF-7CE5613F53EA} => non trouvé(e) "C:\Windows\System32\Tasks\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4}" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4} => non trouvé(e) "C:\Windows\Tasks\FJPZBC.job" => non trouvé(e) "C:\Windows\Tasks\UBEJ.job" => non trouvé(e) "C:\Windows\Tasks\WSE_Vosteran.job" => non trouvé(e) "C:\Windows\Tasks\{1E18A923-CDF1-4D1C-93B2-AD4CC5BD33EA}.job" => non trouvé(e) "C:\Windows\Tasks\{D374D242-D5B3-4B1F-BA0F-1DC075FF3BF4}.job" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\is-V1S9P.tmp" => non trouvé(e) "C:\Users\user\AppData\Local\Temp\is-ST5KL.tmp" => non trouvé(e) "C:\Program Files (x86)\MyPC Backup" => non trouvé(e) "C:\Windows" => ":nlsPreferences" ADS non trouvé(e). HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Web Companion => non trouvé(e) "C:\Program Files (x86)\Lavasoft\Web Companion" => non trouvé(e) ========= ipconfig /flushdns ========= Configuration IP de Windows Cache de r‚solution DNS vid‚. ========= Fin de CMD: ========= C:\Windows\System32\Drivers\etc\hosts => déplacé(es) avec succès Hosts restauré(es) avec succès. =========== EmptyTemp: ========== BITS transfer queue => 8388608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5862738 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 158 B Edge => 0 B Chrome => 0 B Firefox => 189823771 B Opera => 0 B Temp, IE cache, history, cookies, recent: Users => 0 B Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 128 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 0 B user => 361912 B RecycleBin => 0 B EmptyTemp: => 195 MB données temporaires supprimées. ================================ Le système a dû redémarrer. ==== Fin de Fixlog 15:47:32 ====