Script ZHPFix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 O2 - BHO: scriptproxy [64Bits] - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20121216133639.dll O4 - HKLM\..\Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe (.not file.) O4 - HKLM\..\Run: [Teco] C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe (.not file.) O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) OPT:O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe OPT:O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (...) - C:\Program Files (x86)\mcafee\SITEAD~1\mcsacore.exe (.not file.) O23 - Service: McAfee McShield (McShield) . (.McAfee, Inc. - McAfee On-Access Scanner service.) - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) . (.McAfee, Inc. - McAfee Core Firewall Service.) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\Windows\system32\mfevtps.exe [MD5.00000000000000000000000000000000] [APT] [bgf] (...) -- C:\Users\Serph\Downloads\__ -________FUKKIRETA _HD.256k.Kara_.mp3" (.not file.) [0] [MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [MyDefrag v4.3.1 Daily] (...) -- C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticDaily.MyD" [5663] [MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [MyDefrag v4.3.1 Monthly] (...) -- C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticMonthly.MyD" [5626] [MD5.00000000000000000000000000000000] [APT] [R‚veil] (...) -- C:\Users\Serph\Downloads\__ -________FUKKIRETA _HD.256k.Kara_.mp3" (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [R‚veile2] (...) -- F:\Musique\Transhumanisme theme.mp3" (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{28F4E1B2-3C5F-40EE-8FE3-6647CB741B98}] (...) -- D:\Install.exe (.not file.) [0] O41 - Driver: (mfenlfk) . (.McAfee, Inc. - McAfee NDIS Light Filter Driver.) - C:\Windows\System32\DRIVERS\mfenlfk.sys O42 - Logiciel: Java 7 Update 51 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417051FF} O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {FDE58148-57E7-43BF-879A-29CCE818C078} [HKCU\Software\Pando Networks] [HKLM\Software\McAfee.com] [HKLM\Software\McAfee] [HKLM\Software\Wow6432Node\McAfee] [HKLM\Software\Wow6432Node\Pando Networks] O43 - CFD: 16/12/2012 - 10:17:10 - [] ----D C:\Program Files (x86)\eBay O43 - CFD: 09/11/2013 - 19:35:00 - [0] ----D C:\Program Files (x86)\Pando Networks O43 - CFD: 16/12/2012 - 19:06:34 - [] ----D C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 28/11/2013 - 14:06:36 - [] ----D C:\ProgramData\McAfee OPT:O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\Windows\System32\Drivers\cfwids.sys [65264] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - Access Protection Filter Driver.) -- C:\Windows\System32\Drivers\mfeapfk.sys [160792] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\Drivers\mfeavfk.sys [229528] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee Driver Cleaning Driver.) -- C:\Windows\System32\Drivers\mfeclnk.sys [10248] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\Windows\System32\Drivers\mfefirek.sys [487296] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee Link Driver.) -- C:\Windows\System32\Drivers\mfehidk.sys [647208] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee NDIS Light Filter Driver.) -- C:\Windows\System32\Drivers\mfenlfk.sys [75936] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - McAfee Code Analysis Driver.) -- C:\Windows\System32\Drivers\mferkdet.sys [100912] O58 - SDL:22/02/2012 - 13:29:46 ---A- . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\Windows\System32\Drivers\mfewfpk.sys [289664] O69 - SBI: SearchScopes [HKCU] {3128D288-7AE4-41A3-87C1-7DCE510CC402} [DefaultScope] - (eBay) - http://rover.ebay.com O90 - PUC: "84185EDF7E75FB3478A992CC8E810C87" . (.eBay.) -- C:\windows\Installer\{FDE58148-57E7-43BF-879A-29CCE818C078}\_6FEFF9B68218417F98F549.exe ServiceDisabled:McShield ServiceDisabled:mfefire ServiceDisabled:mfevtp [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FDE58148-57E7-43BF-879A-29CCE818C078}] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDE58148-57E7-43BF-879A-29CCE818C078}] [HKLM\Software\Classes\Installer\Features\84185EDF7E75FB3478A992CC8E810C87] [HKLM\Software\Classes\Installer\Products\84185EDF7E75FB3478A992CC8E810C87] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\84185EDF7E75FB3478A992CC8E810C87] [HKLM\Software\Wow6432Node\Classes\Installer\Features\84185EDF7E75FB3478A992CC8E810C87] [HKLM\Software\Wow6432Node\Classes\Installer\Products\84185EDF7E75FB3478A992CC8E810C87] C:\Program Files (x86)\eBay EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID FirewallRAZ ProxyFix SysRestore