re Alain
Lance Farbar
http://zupimages.net/up/17/31/cqay.png
Copies les lignes suivantes dans le cadre rouge
start::
CloseProcesses:
Hosts:
CreateRestorePoint:
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] fastprox.dll <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
GroupPolicyUsers\S-1-5-21-1028750341-4172492720-3793550458-1003\User: Restriction <==== ATTENTION
SearchScopes: HKLM -> DefaultScope la valeur est absente
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKU\S-1-5-21-1028750341-4172492720-3793550458-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKLM - Pas de nom - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Pas de fichier
FF HKLM\...\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - => non trouvé(e)
FF Plugin HKU\S-1-5-21-1028750341-4172492720-3793550458-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alain\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [Pas de fichier]
CHR HKU\S-1-5-21-1028750341-4172492720-3793550458-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1028750341-4172492720-3793550458-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bpgmmbefnahabhcchpfkobeindpppflc] - hxxps://clients2.google.com/service/update2/crx
S3 Tosrfcom; pas de ImagePath
R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.)
S0 dkxkj; System32\drivers\vvhnnc.sys [X]
ContextMenuHandlers4-x32: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> Pas de fichier
ContextMenuHandlers4-x32: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier
ContextMenuHandlers6-x32: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier
Task: {0C4312CD-455F-48DD-B88F-D9497053EA01} - System32\Tasks\{163486D1-E4DD-4BC3-A127-1CBB914264F6} => C:\Windows\system32\pcalua.exe -a C:\Users\Alain\AppData\Local\Temp\jre-8u131-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
NO SCRIPT FOR G0 - GCSP: Preferences [User Data\Default][HomePage]
http://sb.scorecardresearch.com
DeleteKey: HKCU\SOFTWARE\6193323f96ee2256341dafff4af74571
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{00D32942-CE68-4FBF-968F-AD60D99A04CB}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{00D32942-CE68-4FBF-968F-AD60D99A04CB}
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{097B6C60-2B0E-4511-8885-91FE5C840E55}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{097B6C60-2B0E-4511-8885-91FE5C840E55}
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\mcupdate
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C4312CD-455F-48DD-B88F-D9497053EA01}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{0C4312CD-455F-48DD-B88F-D9497053EA01}
C:\Windows\System32\Tasks\{163486D1-E4DD-4BC3-A127-1CBB914264F6}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18E36E11-901B-4F7B-8ED5-FF8E6C006B4D}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{18E36E11-901B-4F7B-8ED5-FF8E6C006B4D}
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BF53B0B-1B2A-452F-9960-33C6FF804314}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{1BF53B0B-1B2A-452F-9960-33C6FF804314}
C:\Windows\System32\Tasks\AVAST Software\Avast settings backup
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8AAD1BD8-1940-4B96-9CB1-387B2CAED499}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8AAD1BD8-1940-4B96-9CB1-387B2CAED499}
C:\Windows\System32\Tasks\{9AA1A0F4-52F7-4404-8977-3D406068901C}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{96A7248A-A8B9-47F9-83A0-BFA933F074BD}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{96A7248A-A8B9-47F9-83A0-BFA933F074BD}
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\StartRecording
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F684490F-2748-402B-902C-CA0038468E0F}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{F684490F-2748-402B-902C-CA0038468E0F}
C:\Windows\System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run:ITSecMng
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MSSE
DeleteKey: HKLM\Software\Classes\CLSID\{0365FE2C-F183-4091-AC82-BFC39FB75C49} <== Reinstall Software MSSE
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files
DeleteKey: HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} <== Reinstall Software Offline Files
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} <== Reinstall Software 7-Zip
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files
DeleteKey: HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} <== Reinstall Software Offline Files
DeleteKey: HKLM\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\VMDiskMenuHandler
DeleteKey: HKLM\Software\Classes\CLSID\{271DC252-6FE1-4D59-9053-E4CF50AB99DE} <== Reinstall Software VMDiskMenuHandler
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MSSE
DeleteKey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files
DeleteKey: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\VMDiskMenuHandler
DeleteKey: HKLM\Software\Classes\CLSID\{271DC252-6FE1-4D59-9053-E4CF50AB99DE}
EmptyTemp:
end::
Corrige et heberge le rapport fixlog
@+