re ANTONY
Lance Farbar
http://zupimages.net/up/17/31/cqay.png
Copies les lignes suivantes dans le cadre rouge
start::
CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\...\MountPoints2: {1ac19b64-63bd-11e7-826d-54a050a829a4} - "F:\HiSuiteDownLoader.exe"
Tcpip\..\Interfaces\{D0625A0F-4BE7-4335-BC52-7CA1D36C48C3}: [DhcpNameServer] 30.50.1.1 30.50.1.2
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
U1 aswbdisk; pas de ImagePath
U0 msahci; system32\drivers\msahci.sys [X]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D20C58A-3A05-44DB-9D89-F78D3EF4584A}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{3D20C58A-3A05-44DB-9D89-F78D3EF4584A}
C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1497592172
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|WindowsDefender
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run:WebStorage
DeleteKey: HKCU\SOFTWARE\undefined
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui
DeleteKey: HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} <== Reinstall Software igfxcui
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFCreator.ShellContextMenu
DeleteKey: HKLM\Software\Classes\CLSID\{d9cea52e-100d-4159-89ea-76e845bc13e1}
DeleteKey: HKLM\Software\Classes\CLSID\{d9cea52e-100d-4159-89ea-76e845bc13e1}
DeleteKey: HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\BackupContextMenuExtension
DeleteKey: HKLM\Software\Classes\CLSID\{b1b96b20-da1d-4a3c-92c1-7229b32f2326}
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip
RemoveProxy:
cmd: dism.exe /online /cleanup-image /restorehealth
cmd: sfc /scannow
EmptyTemp:
end::
Corrige et heberge le rapport fixlog
@+
L'urgent est fait, l'impossible est en cours, pour les miracles, prévoir des délais
Charte du Forum