Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 09-11-2021 Exécuté par molle (11-11-2021 12:20:05) Run:1 Exécuté depuis C:\Users\molle\Desktop Profils chargés: molle Mode d'amorçage: Normal ============================================== fixlist contenu: ***************** CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-3373227840-202954090-1753757146-1005\...\Run: [Advanced System Repair Pro] => C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0\AdvancedSystemRepairPro.exe [17018296 2019-11-14] (Advanced System Repair, Inc. -> Advanced System Repair Inc.) R1 asrdmon; C:\WINDOWS\system32\drivers\asrdmon.sys [19608 2019-11-14] (Advanced System Repair, Inc. -> Advanced System Repair Inc.) R2 tscmon; C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0\tscmon.exe [1388856 2019-11-14] (Advanced System Repair, Inc. -> Advanced System Repair Inc.) Task: {3A3A6BB6-71E4-4D21-9B77-F1FC0415D2B2} - System32\Tasks\Microsoft\Windows\rempl\shell => C:\Program Files\rempl\sedlauncher.exe (Pas de fichier) C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0 FF NewTab: Mozilla\Firefox\Profiles\4gbembvw.default -> hxxps://defaultsearch.co/homepage?hp=1&pId=BT171001&iDate=2020-11-24 01:16:36&bName=&bitmask=0600&iid=e492435d-7e12-446b-ba6b-e38b0787bd4e CHR Notifications: Default -> hxxps://drive.google.com; hxxps://euw.op.gg; hxxps://mail.google.com; hxxps://travian-team.bestoof.com; hxxps://www.fmscout.com; hxxps://www.netflix.com; hxxps://www.restaurants.mcdonalds.fr; hxxps://www.winamax.fr; hxxps://www.youtube.com CHR HomePage: Default -> hxxp://start.mysearchdial.com/?f=1&a=tele0202ch&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0F0EtCyE0DtAyCtC0DzytN0D0Tzu0SyBzyyDtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2StCtDtCyDyE0DzyyCtG0EtByEyBtGtByDzyyCtGzztCyEtCtGtCzzzytByEzy0FyE0CtCyE0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtAtA0FtCyE0EyBtG0FyEyB0CtGyE0Bzz0DtGtC0CtCtCtGtBtA0DtA0C0DyB0DzztBtDyC2Q&cr=1551772747&ir= CHR StartupUrls: Default -> "hxxp://start.mysearchdial.com/?f=1&a=tele0202ch&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0F0EtCyE0DtAyCtC0DzytN0D0Tzu0SyBzyyDtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2StCtDtCyDyE0DzyyCtG0EtByEyBtGtByDzyyCtGzztCyEtCtGtCzzzytByEzy0FyE0CtCyE0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtAtA0FtCyE0EyBtG0FyEyB0CtGyE0Bzz0DtGtC0CtCtCtGtBtA0DtA0C0DyB0DzztBtDyC2Q&cr=1551772747&ir=","hxxp://start.mysearchdial.com/?f=1&a=tele_14_10_CH&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0F0EtCyE0DtAyCtC0DzytN0D0Tzu0SyBzyyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0ByC0EtAtCtAyEtGtCzzyD0CtGyC0E0CtDtGtDyB0ByEtGtDyDtByEyD0E0BtB0DtDyEtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtAtA0FtCyE0EyBtG0FyEyB0CtGyE0Bzz0DtGtC0CtCtCtGtBtA0DtA0C0DyB0DzztBtDyC2Q&cr=1548203663&ir=","hxxp://astromenda.com/?f=7&a=ast_tele_14_33_ch&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0F0EtCyE0DtAtB0ByBzztN0D0Tzu0SzyyDzytN1L2XzutBtFtBtCtFtCzztFyBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCyEyD0EtBtDyC0BtG0C0B0EyEtGyDyCtBzytG0FzztBzztGyD0FyB0F0F0DtAtC0BtAyEtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtCyEtB0Bzy0C0CtG0EtD0F0DtGzytDyB0DtGtD0B0F0FtGtD0FzyzzyBtDzytBtDtCtAtA2Q&cr=1226994629&ir=","hxxp://www.sweet-page.com/?type=hp&ts=1409181984&from=cor&uid=ST750LM022XHN-M750MBB_S2RRJ9ACA01654","hxxp://Lasaoren.com/?f=7&a=lrn_ir_14_45_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0F0EtCyE0DtAtB0ByBzztN0D0Tzu0StCtDtAzytN1L2XzutAtFyCtFtDtFyEtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StDtAzzyD0EtD0BtCtGyD0EtCtCtG0A0A0DzytGyEzztCtBtGyD0FtD0AyD0E0D0FyDyCtA0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtA0E0FzzyC0CzytG0BtD0E0EtGyE0A0EyDtGzyyDzz0AtGyC0DtByDzytAzy0E0C0E0A0E2Q&cr=1820252201&ir=","hxxp://fr.msn.com/?pc=UP97&ocid=UP97DHP","hxxp://astromenda.com/?f=7&a=&cd=&cr=&ir=","hxxp://www.delta-homes.com/?type=hp&ts=1418806081&from=wpm12173&uid=ST750LM022XHN-M750MBB_S2RRJ9ACA01654","hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M09588FBF-8FEF-4C8B-879D-DEC8BCE101C1&SearchSource=55&CUI=&UM=2&UP=SPF9195DF2-C1BA-4841-A132-EA35A4412187&SSPV=","hxxp://search.gboxapp.com/" CHR HKLM\...\Chrome\Extension: [jdanfkhnfpagoijgfmklhgakdicpnfil] CHR HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jdanfkhnfpagoijgfmklhgakdicpnfil] CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] CHR HKLM-x32\...\Chrome\Extension: [jdanfkhnfpagoijgfmklhgakdicpnfil] SearchScopes: HKU\S-1-5-21-3373227840-202954090-1753757146-1005 -> DefaultScope {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dpyqptgki1320egikmoq9ay_20_48_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAtDzy0CtBtAtD0EyCtByEzyyE0AzztBtN0D0Tzu0StAtByEzytN1L2XzuyDtFtBtFtDtFtCyBtAtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyCzztD0Ezy0AtD0DtGtAtBzytBtGzytByEtBtGtCzyyEtDtGtByCyDtAyCtDzy0F0C0D0AtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1PzzyBzztDtA1RzytGtByBtB1OtGyEyDtB1PtG1SzyyDtAtGzy1Q1PyBtD1S1OtC1RtDtB1T2QtN0A0LzutBtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyCtDyCtCzztDyEyByB%26cr%3D2108081573%26a%3Dwbf_dpyqptgki1320egikmoq9ay_20_48_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-3373227840-202954090-1753757146-1005 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COS2&ptag=D112420-N0700A9FCDBB39EF&form=CONBDF&conlogo=CT3335799&q={searchTerms} SearchScopes: HKU\S-1-5-21-3373227840-202954090-1753757146-1005 -> {0EEA3A6D-EB9A-44DF-AB12-95165BF31554} URL = SearchScopes: HKU\S-1-5-21-3373227840-202954090-1753757146-1005 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dpyqptgki1320egikmoq9ay_20_48_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAtDzy0CtBtAtD0EyCtByEzyyE0AzztBtN0D0Tzu0StAtByEzytN1L2XzuyDtFtBtFtDtFtCyBtAtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyCzztD0Ezy0AtD0DtGtAtBzytBtGzytByEtBtGtCzyyEtDtGtByCyDtAyCtDzy0F0C0D0AtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1PzzyBzztDtA1RzytGtByBtB1OtGyEyDtB1PtG1SzyyDtAtGzy1Q1PyBtD1S1OtC1RtDtB1T2QtN0A0LzutBtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyCtDyCtCzztDyEyByB%26cr%3D2108081573%26a%3Dwbf_dpyqptgki1320egikmoq9ay_20_48_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} cmd: netsh advfirewall reset EmptyTemp: ***************** Le Point de restauration a été créé avec succès. Processus fermé avec succès. "HKU\S-1-5-21-3373227840-202954090-1753757146-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced System Repair Pro" => non trouvé(e) asrdmon => Service arrêté avec succès. HKLM\System\CurrentControlSet\Services\asrdmon => supprimé(es) avec succès asrdmon => service supprimé(es) avec succès HKLM\System\CurrentControlSet\Services\tscmon => supprimé(es) avec succès tscmon => service supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3A3A6BB6-71E4-4D21-9B77-F1FC0415D2B2}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A3A6BB6-71E4-4D21-9B77-F1FC0415D2B2}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell" => supprimé(es) avec succès "C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0" => non trouvé(e) "Firefox newtab" => supprimé(es) avec succès "Chrome Notifications:" => non trouvé(e) "Chrome HomePage" => supprimé(es) avec succès "Chrome StartupUrls" => supprimé(es) avec succès HKLM\SOFTWARE\Google\Chrome\Extensions\jdanfkhnfpagoijgfmklhgakdicpnfil => supprimé(es) avec succès HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Google\Chrome\Extensions\jdanfkhnfpagoijgfmklhgakdicpnfil => supprimé(es) avec succès HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb => supprimé(es) avec succès HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => supprimé(es) avec succès HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jdanfkhnfpagoijgfmklhgakdicpnfil => supprimé(es) avec succès "HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => supprimé(es) avec succès HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => supprimé(es) avec succès HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0EEA3A6D-EB9A-44DF-AB12-95165BF31554} => supprimé(es) avec succès HKU\S-1-5-21-3373227840-202954090-1753757146-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} => supprimé(es) avec succès ========= netsh advfirewall reset ========= Ok. ========= Fin de CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 1310720 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 50802250 B Java, Flash, Steam htmlcache => 320382314 B Windows/system/drivers => 28500256 B Edge => 135674 B Chrome => 397964623 B Brave => 140841 B Firefox => 95883432 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 855444 B molle => 383033133 B RecycleBin => 365808 B EmptyTemp: => 1.2 GB données temporaires supprimées. ================================ Le système a dû redémarrer. ==== Fin de Fixlog 12:20:49 ====