Script ZHPFix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified G2 - GCE: Preference [User Data\Default] [pcoohmdcpejoeggdnihdfhohjgdbllgm] Avira SearchFree Toolbar plus Web Protection v.30.1, (Désactivé) P2 - FPN:Firefox Plugin Navigator . (.BitComet - BitCometAgent v1.30 for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npBitCometAgent.dll P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.9.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.11.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.11.2] - (.Oracle Corporation - Next Generation Java Plug-in 11.11.2 for Mozilla browsers.) -- C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll P2 - FPN: [HKLM] [@rentabiliweb.net/MailocashHelper] - (...) -- C:\Program Files (x86)\Mailocash\Resources\Extensions\x64\np_mc_ns_invoke_helper_Win64.dll (.not file.) P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 5.4.2.18903.) -- C:\Users\Utilisateur\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll P2 - FPN: [HKCU] [@talk.google.com/O1DPlugin] - (.Google - Version 5.4.2.18903.) -- C:\Users\Utilisateur\AppData\Roaming\Mozilla\plugins\npo1d.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Utilisateur\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Utilisateur\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll G2 - GCE: Preference [User Data\Default] [pcoohmdcpejoeggdnihdfhohjgdbllgm] Avira SearchFree Toolbar plus Web Protection v.30.1, (Désactivé) [HKLM\Software\Google\Chrome\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm] C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0 O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{41564952-412D-5637-00A7-7A786E7484D7} Clé orpheline OPT:O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe OPT:O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D} O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail [HKCU\Software\Avira Secure Backup] [HKCU\Software\IncrediMail] [HKCU\Software\MCAFEE] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\UpToDown] [HKLM\Software\Avira Secure Backup.com] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\mozilla.org] O43 - CFD: 24/01/2014 - 10:30:22 - [0] ----D C:\Program Files (x86)\Avira O43 - CFD: 10/08/2011 - 09:39:38 - [] ----D C:\Program Files (x86)\IncrediMail O43 - CFD: 12/02/2014 - 11:15:26 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 07/08/2013 - 11:46:23 - [] ----D C:\ProgramData\APN O43 - CFD: 24/01/2014 - 10:30:23 - [] ----D C:\ProgramData\Avira O43 - CFD: 10/08/2011 - 09:40:08 - [] ----D C:\ProgramData\IM O43 - CFD: 10/08/2011 - 09:39:38 - [] ----D C:\ProgramData\IncrediMail O43 - CFD: 21/11/2013 - 10:37:10 - [] ----D C:\ProgramData\McAfee O43 - CFD: 03/05/2012 - 18:29:05 - [] ----D C:\ProgramData\Mozilla O43 - CFD: 10/06/2014 - 07:54:22 - [] ----D C:\Users\Utilisateur\AppData\Roaming\Mozilla O43 - CFD: 07/08/2014 - 17:35:36 - [0] ----D C:\Users\Utilisateur\AppData\Roaming\uTorrent O43 - CFD: 10/12/2013 - 18:30:31 - [] ----D C:\Users\Utilisateur\AppData\Local\IM O43 - CFD: 08/08/2011 - 11:45:32 - [] ----D C:\Users\Utilisateur\AppData\Local\Mozilla O53 - SMSR:HKLM\...\startupreg\Akamai NetSession Interface [Key] . (...) -- C:\Users\Utilisateur\AppData\Local\Akamai\netsession_win.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\cacaoweb [Key] . (...) -- C:\Users\Utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Pro Agent [Key] . (...) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\IncrediMail [Key] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\bin\IncMail.exe O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O62 - ADS:Alternate Data Stream File - C:\Windows\System32\SpoonUninstall.exe:Zone.Identifier O62 - ADS:Alternate Data Stream File - C:\Windows\System32\VMAPO32.DLL:Zone.Identifier O62 - ADS:Alternate Data Stream File - C:\Windows\System32\VMTHX32.DLL:Zone.Identifier [MD5.9DCB253038963E05178A70658F219FCA] [SPRF][31/10/2012] (...) -- C:\ProgramData\1351670988.bdinstall.bin [786777] [MD5.0EAB25084FF8DA646901920AF2A9CF2A] [SPRF][11/11/2012] (...) -- C:\ProgramData\1352637367.bdinstall.bin [213416] [MD5.79E6443F01B4B1C3B957AA38DDD564FF] [WIS][16/07/2012] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\187f2e4.msi [45056] HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\01net_BitComet_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\01net_BitComet_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\1ClickDownloader_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\1ClickDownloader_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BitComet_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BitComet_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\giant savings-bg_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\giant savings-bg_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTV_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTV_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17B8_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17B8_RASMANCS [HKLM\Software\Google\Chrome\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm] [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\cacaoweb] C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm C:\Users\Utilisateur\AppData\Roaming\uTorrent [HKCU\Software\UpToDown] C:\Windows\Installer\187f2e4.msi EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID FirewallRAZ SysRestore