Je souhaite donc l'éradiquer et aussi mettre a niveau tout le pc niveau sécurité pour proteger mes données des trojan, malwares et compagnie, je suis a votre écoute pour les procédures a effectuer

Modérateurs : Mods Windows, Helper
Code : Tout sélectionner
Start:
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Pas de fichier)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [Svaklop] => C:\Users\eugen\AppData\Roaming\Svaklop.exe (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [Svakleop] => C:\Users\eugen\AppData\Roaming\Svakleop.exe (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [chrome] => "C:\Users\eugen\AppData\Roaming\chrome.exe" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [acrotray] => "C:\ProgramData\LHMTW19IY956GPVYNJ4S8YC3C\files\Files\acrotray.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [phoenix] => "C:\ProgramData\Data\process\phoenix.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [nvidia] => "C:\ProgramData\Systemd\nvidia\nvidia.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [IntodlldhcpruntimeMonitor] => "C:\Intodlldhcp\conhost\IntodlldhcpruntimeMonitor.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [servicehost] => "C:\Intodlldhcp\conhost\servicehost.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [rsEngineHelper] => "C:\GAMES\The Sims 4\Data\Client\rsEngineHelper.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [hatcfrv] => "C:\Intodlldhcp\conhost\hatcfrv.exe" (Pas de fichier)
HKU\S-1-5-21-3840811146-2457886558-4027984660-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize (Pas de fichier) <==== ATTENTION
StartupDir: %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\windllses <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {F736351C-16F1-44A7-9732-631802E84C3F} - System32\Tasks\Firefox Default Browser Agent 42EACE4F3A094CC4 => C:\Users\eugen\AppData\Roaming\rwtcfrv (Pas de fichier) <==== ATTENTION
Task: {59966AAB-9479-4CA8-896B-FD5BDDC4C937} - System32\Tasks\Firefox Default Browser Agent B4AA3E6138A695C3 => C:\Users\eugen\AppData\Roaming\hatcfrv (Pas de fichier) <==== ATTENTION
Task: {EBB8C620-5BE6-4870-A999-06D494ED1F07} - System32\Tasks\hatcfrv => "C:\Users\eugen\AppData\Roaming\ServicesZwrf\hatcfrv.exe" (Pas de fichier)
Task: {23CACCCE-DC2C-4B0E-B82E-22368E033048} - System32\Tasks\IntodlldhcpruntimeMonitor => "C:\Intodlldhcp\conhost\IntodlldhcpruntimeMonitor.exe" ->
Task: {03F0043D-22E3-40D9-8B4B-31C1FCB9086F} - System32\Tasks\phoenix => "C:\ProgramData\Data\process\phoenix.exe" (Pas de fichier)
Task: {1EF1B546-C446-4605-832D-6ED52E8FA470} - System32\Tasks\rsEngineHelper => "C:\GAMES\The Sims 4\Data\Client\rsEngineHelper.exe" (Pas de fichier)
Task: {DA7B7E83-54A1-4679-AA89-358D9973A27B} - System32\Tasks\servicehost => "C:\Intodlldhcp\conhost\servicehost.exe" ->
Task: {CC85EB5F-8B1B-4EA0-8557-2E260EA6B07F} - System32\Tasks\vgvDADJVPF => C:\Windows\System32\rundll32.exe [71680 2024-02-27] (Microsoft Windows -> Microsoft Corporation) -> "C:\Program Files (x86)\vgvDADJVPF\vgvDADJVPF.dll",vgvDADJVPF <==== ATTENTION
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\UniConverter\Transfer\DriverInstall.exe [107760 2019-05-07] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 AppServicea; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiceb; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicec; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiced; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicee; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicef; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiceg; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicei; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicej; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicek; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicel; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicem; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicen; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiceo; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicep; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiceq; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicer; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServices; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicet; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServiceu; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicev; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicew; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 AppServicex; C:\WINDOWS\system32\MXLKC5T1IV.tmp [X] <==== ATTENTION
S2 SAntivirusIC; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusIC.exe -service [X] <==== ATTENTION
"SAntivirusIC" => service a été déverrouillé. <==== ATTENTION
S1 TASANTIVIRUSKD; \??\C:\Program Files (x86)\Digital Communications\SAntivirus\TASAntivirusKD.sys [X] <==== ATTENTION
C:\Users\eugen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhcmdonhekjhfbjmeacdjbhlfgpjabp
2021-06-26 13:16 - 2021-06-23 19:48 - 000000041 _____ () C:\ProgramData\6NjO4kxgyOzkvfbJcwYJSsKa7uQq.bat
2021-06-23 22:05 - 2021-06-23 22:05 - 000000000 _____ () C:\Program Files (x86)\temp_files
2023-05-10 10:04 - 2023-05-10 10:13 - 000000017 _____ () C:\Users\eugen\AppData\Roaming\.cache3678791056.dat
2021-06-11 18:34 - 2021-06-11 18:34 - 000321226 ___SH () C:\Users\eugen\AppData\Roaming\serrdvg
2021-06-02 21:13 - 2021-06-02 21:13 - 000000410 _____ () C:\Users\eugen\AppData\Local\oobelibMkey.log
2020-12-09 23:05 - 2021-06-02 23:36 - 000016438 _____ () C:\Users\eugen\AppData\Local\partner.bmp
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:
End: