Script ZHPFix
SysRestore
C:\Users\jean pierre\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.6.2 (Désactivé)
G2 - GCE: Preference [User Data\Default] [pkhojieggfgllhllcegoffdcnmdeojgb] Iminent Chrome Toolbar v.2.0 (Désactivé)
O2 - BHO: uTorrentBar_FR - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (...) -- C:\Program Files\uTorrentBar_FR\prxtbuTo1.dll (.not file.) O3 - Toolbar: uTorrentBar_FR Toolbar - [HKLM]{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (...) -- C:\Program Files\uTorrentBar_FR\prxtbuTo1.dll O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0000041B-0000-0000-0000-0000DC2FD200} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FFD96CC-8CFF-76E6-0000-000000000000} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} Clé orpheline
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Norton Security Scan for jean pierre.job [452] [MD5.343E9EFB16136611B0322A1E94353C41] [APT] [Norton Security Scan for jean pierre] (.Symantec Corporation.) -- C:\Program Files\NORTON~2\Engine\351~1.10\Nss.exe [641464]
O43 - CFD: 25/01/2012 - 03:02:14 - [14,217] ----D C:\Program Files\Norton Security Scan
O43 - CFD: 25/01/2012 - 03:02:11 - [8,277] ----D C:\Program Files\NortonInstaller
O43 - CFD: 25/01/2012 - 03:02:14 - [0,004] ----D C:\ProgramData\Norton
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SpeedMaxPc Registration3.job [452] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SpeedMaxPc Update3.job [410]
[MD5.00000000000000000000000000000000] [APT] [Hoolapp For Android] (...) -- C:\Users\jean pierre\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Hoolapp Init] (...) -- C:\Users\jean pierre\AppData\Roaming\HOOLAP~1\Hoolapp.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{1A1CD285-D138-44FF-A556-AE8CBD646D87}] (...) -- C:\Users\jean pierre\Desktop\GoldSprinterSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{1D113A19-2B1C-4DD9-899A-C4E91B590FF3}] (...) -- E:\Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{20B766C3-03DD-4A94-9DA5-BA5945AAC176}] (...) -- C:\Users\jean pierre\Desktop\teamspeak_teamspeak_client_2.0.32.60_anglais_41572.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2E4711CB-23C5-418E-AF44-A0AEDD4016F3}] (...) -- E:\Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{3987EC80-4F13-46C0-9697-CBBD7060E92E}] (...) -- E:\autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3EB582DD-74E4-4D1D-95BA-0C8DEFFFDA87}] (...) -- C:\Program Files\Freeplayer\Uninstall.exe (.not file.) [0] =
[MD5.00000000000000000000000000000000] [APT] [{4D7FD8EC-9A25-4390-9442-051188081464}] (...) -- C:\Program Files\InternetGameBox\uninst.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{52241910-3507-4654-B09F-4BA93ECF725C}] (...) -- E:\Eautorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{6AF7243B-5A08-45C9-921F-4C87F0363715}] (...) -- C:\Users\jean pierre\Desktop\ts2_client_rc2_2032.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6C002661-71B6-4534-8460-948E5944ACFD}] (...) -- E:\Play.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{86FA3542-AFEA-4523-920C-FFA7D15A5FEA}] (...) -- C:\Users\jean pierre\Games\World of Warcraft\Launcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{96C6D2BF-F2CD-4272-B7FE-4D23F09AE038}] (...) -- C:\Program Files\HomePlayer\uninst.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B6172FB4-09B6-43FD-8DF0-7E12532641E7}] (...) -- E:\PLAY.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BEDC11B2-6476-4282-98B9-4D7FE5FFFD9B}] (...) -- E:\UbiSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D1CDDF83-CA5E-4A05-A89A-C23017623A53}] (...) -- E:\install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DEA64C62-EE6D-44DD-BA00-A28090274D4F}] (...) -- E:\autorun\autorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{EE029A32-4566-4D2D-A838-53D9878ADFD0}] (...) -- C:\Users\jean pierre\Desktop\RegCleaner.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{F0398BE4-E7D8-4C4F-86C9-9C0C1A30589A}] (...) -- C:\Users\jean pierre\Desktop\install_flash_player.exe (.not file.) [0]
O43 - CFD: 27/11/2013 - 16:37:17 - [0] ----D C:\Users\jean pierre\AppData\Roaming\HoolappForAndroid
[HKCU\Software\Hoolapp]
O42 - Logiciel: SpeedMaxPc - (.SpeedMaxPc.) [HKLM] -- {D894938C-8EE1-4854-9254-8F9AEF2BFE46}
O42 - Logiciel: uTorrentBar_FR Toolbar - (.uTorrentBar_FR.) [HKLM] -- uTorrentBar_FR Toolbar [HKCU\Software\AppDataLow\Software\adawarebp]
[HKCU\Software\Safer Networking Limited]
O53 - SMSR:HKLM\...\startupreg\SpybotSD TeaTimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O43 - CFD: 28/11/2013 - 18:01:35 - [6,216] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 28/11/2013 - 18:01:32 - [119,170] ----D C:\ProgramData\Spybot - Search & Destroy
O61 - LFC: 27/11/2013 - 22:55:09 ---A- . (...) -- C:\Users\jean pierre\Downloads\Adaware_Installer.exe [1723528]
[HKCU\Software\AppDataLow\Software\adawarebp]
O45 - LFCP:[MD5.CB41631A2FE47DF359DE9A7E57A46307] - 28/11/2013 - 14:28:17 ---A- - C:\Windows\Prefetch\ADAWAREDESKTOP.EXE-D674277B.pf
O45 - LFCP:[MD5.A45199D0F6329358EF3EE2C645879A90] - 28/11/2013 - 14:36:54 ---A- - C:\Windows\Prefetch\ADAWARESERVICE.EXE-37C05126.pf
O45 - LFCP:[MD5.9284AD91313C832636D54EA37EC3C1CF] - 28/11/2013 - 14:36:56 ---A- - C:\Windows\Prefetch\ADAWARETRAY.EXE-66F49611.pf
O45 - LFCP:[MD5.C4C2CFDC8F8410DCE34E30B852CD1E23] - 28/11/2013 - 20:41:32 ---A- - C:\Windows\Prefetch\ADAWAREUPDATER.EXE-270029F3.pf
O43 - CFD: 27/11/2013 - 16:52:59 - [2,477] ----D C:\ProgramData\Lavasoft
O43 - CFD: 28/11/2013 - 17:52:46 - [0,001] ----D C:\Users\jean pierre\AppData\Roaming\LavasoftStatistics
O43 - CFD: 20/03/2007 - 17:21:56 - [0,001] ----D C:\Program Files\Windows Live Toolbar O43 - CFD: 04/01/2010 - 15:55:38 - [0,865] ----D C:\Users\jean pierre\AppData\Roaming\igraal
O43 - CFD: 05/10/2013 - 10:59:36 - [0,107] ----D C:\Users\jean pierre\AppData\Local\avgchrome
O43 - CFD: 19/01/2013 - 11:46:43 - [2,412] ----D C:\Users\jean pierre\AppData\Local\CRE
O43 - CFD: 19/01/2013 - 10:17:33 - [0] ----D C:\Users\jean pierre\AppData\Local\Software
O45 - LFCP:[MD5.804FEB6284E080FC84EF22E8D55219F4] - 27/11/2013 - 15:20:10 ---A- - C:\Windows\Prefetch\PLUS-HD-2.6-ENABLER.EXE-D367AF39.pf
O45 - LFCP:[MD5.9C9E8BC4B08FCE1C2C5C1058E8C37D63] - 27/11/2013 - 16:18:58 ---A- - C:\Windows\Prefetch\PLUS-HD-2.6-CODEDOWNLOADER.EX-070179B6.pf
O45 - LFCP:[MD5.D57C3AF59EF7346C6BDE16D22A9A2877] - 28/11/2013 - 11:58:01 ---A- - C:\Windows\Prefetch\PRICORA-CHROMEINSTALLER.EXE-77D893E8.pf O45 - LFCP:[MD5.134F6075014F8BC93B949CEFC6D42F9C] - 28/11/2013 - 17:58:10 ---A- - C:\Windows\Prefetch\PRICORA-FIREFOXINSTALLER.EXE-30255DB1.pf
O45 - LFCP:[MD5.BCF61066587937ED9621DE93734DE68D] - 28/11/2013 - 17:58:13 ---A- - C:\Windows\Prefetch\PRICORA-UPDATER.EXE-37C5DC1D.pf
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.) O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\egeqiey_nav.dat
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\egeqiey_navps.dat
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\micqu_nav.dat
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\micqu_navps.dat O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\yqyia_nav.dat O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\yqyia_navps.dat O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\egeqiey.dat
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\micqu.dat
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\jean pierre\AppData\Local\yqyia.dat O69 - SBI: SearchScopes [HKCU] {7573059A-2A47-48A5-B180-421C066A1168} - (Search) - http://start.funmoods.com
O69 - SBI: SearchScopes [HKCU] {8672091B-A17C-419D-B191-8BA9E45E0CF4} - (uTorrentBar_FR Customized Web Search) - http://search.conduit.com O69 - SBI: SearchScopes [HKCU] {F1A8FA80-3092-4958-B932-DD8995888608} - (eBay) - http://rover.ebay.com
O87 - FAEL: "{F203D892-C017-41E1-9966-8F1C55D462AF}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{FAE01BE9-9BA0-424A-9EB4-74447A93529A}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O87 - FAEL: "{2967F383-6F31-4740-B233-321E06273BF5}" |In - Private - P6 - TRUE | .(...) -- C:\Users\jean pierre\AppData\Local\Temp\Shortcut_SweetIM_2.exe (.not file.) O87 - FAEL: "{5F80B0CA-5C93-4182-A5CC-34B79425CD97}" |In - Private - P17 - TRUE | .(...) -- C:\Users\jean pierre\AppData\Local\Temp\Shortcut_SweetIM_2.exe (.not file.)
[MD5.2F49F08DCBF1CC1D54333B5735CDB73A] [WIS][18/03/2007] (.Google - Installs the Google Toolbar for Firefox.) -- C:\Windows\Installer\6840bca.msi [94208]
C:\Users\jean pierre\AppData\LocalLow\wincorebsband C:\Users\jean pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb
C:\Users\jean pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\swg] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] [HKLM\Software\Classes\CLSID\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
[HKLM\Software\Classes\CLSID\{AC6240AE-33B6-40D3-8683-31BBE86049A0}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6240AE-33B6-40D3-8683-31BBE86049A0}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}]
[HKLM\Software\Classes\CLSID\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D6533F74-218B-41BE-9D91-5BD471FECFFD}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Live-Player]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentBar_FR Toolbar]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531129}] [HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D894938C-8EE1-4854-9254-8F9AEF2BFE46}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_FR Toolbar] [HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde]
[HKLM\Software\Google\Chrome\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] O4 - HKCU\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\jean pierre\AppData\Roaming\newnext.me\nengine.dll O4 - HKUS\S-1-5-21-3848721776-2844451674-3205978067-1000\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\jean pierre\AppData\Roaming\newnext.me\nengine.dll O43 - CFD: 28/11/2013 - 22:45:58 - [1,228] ----D C:\Users\jean pierre\AppData\Roaming\newnext.me
O43 - CFD: 28/11/2013 - 14:44:08 - [1,224] ----D C:\Users\jean pierre\AppData\Local\genienext
O3 - Toolbar: Veoh Web Player Video Finder - [HKLM]{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} . (.Veoh Networks Inc - Veoh Video Finder.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
[MD5.B4744A908D4CF167068C480121510EE6] [APT] [RunAsStdUser Task for VeohWebPlayer] (.Veoh Networks.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [3561720]
O43 - CFD: 01/08/2009 - 08:25:17 - [18,389] ----D C:\Program Files\Veoh Networks
O43 - CFD: 19/04/2009 - 15:21:10 - [0,001] ----D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veoh Networks, Inc
O87 - FAEL: "{0AFFE2A6-9B01-465E-9E6B-B70D97E16FAC}" | In - Private - P6 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe O87 - FAEL: "{0004452B-4C45-4285-94B4-2246B3138409}" | In - Private - P17 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O87 - FAEL: "{F8D2E5B8-05D8-4F76-B635-31024D2986D7}" | In - Public - P6 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe O87 - FAEL: "{B116B693-466D-4DA2-BD13-3785EF7D00A6}" | In - Public - P17 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [MD5.397944C0A254C4FA4CF2DAF1A4CC297C] [SPRF][01/04/2009] (...) -- C:\Users\jean pierre\AppData\Local\bvcwk.bat [94] [MD5.5EEED1721D6FDCECCA02BB39C6622228] [SPRF][28/02/2009] (...) -- C:\Users\jean pierre\AppData\Local\eagasya.bat [96]
[MD5.7758B7C5942B24CE6820E54C594963CC] [SPRF][24/04/2009] (...) -- C:\Users\jean pierre\AppData\Local\swgkaym.bat [94] [MD5.1A83135311B461104D1148B2122CFA02] [SPRF][28/08/2010] (...) -- C:\Users\jean pierre\AppData\Roaming\hngmfc.dat [20] [MD5.E4B31B8CC2CEB446EE6A6003550FAAE4] [SPRF][09/07/2007] (...) -- C:\Windows\Downloaded Program Files\cfweb_www.bobtv.fr-download_instmodule.exe [99936]
O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} ((no name)) - http://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
EmptyCLSID
EmptyFlash
EmptyTemp |