ScriptZHPFix O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline OPT:O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe OPT:O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe OPT:O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{7E319980-166E-4584-AEA4-5C0BCC3363F9}: DhcpNameServer = 109.0.66.20 109.0.66.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{9653203E-1A5A-42E0-8AA8-84E24E886041}: DhcpDomain = sgt.automation.net O17 - HKLM\System\CS1\Services\Tcpip\..\{7E319980-166E-4584-AEA4-5C0BCC3363F9}: DhcpNameServer = 109.0.66.20 109.0.66.10 O17 - HKLM\System\CS1\Services\Tcpip\..\{9653203E-1A5A-42E0-8AA8-84E24E886041}: DhcpDomain = sgt.automation.net O17 - HKLM\System\CS2\Services\Tcpip\..\{7E319980-166E-4584-AEA4-5C0BCC3363F9}: DhcpNameServer = 109.0.66.20 109.0.66.10 O17 - HKLM\System\CS2\Services\Tcpip\..\{9653203E-1A5A-42E0-8AA8-84E24E886041}: DhcpDomain = sgt.automation.net O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.0.66.20 109.0.66.10 [MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeLogonTaskS-1-5-21-1209582120-3998546612-296815468-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178840] [MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeScheduledTaskS-1-5-21-1209582120-3998546612-296815468-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178840] [HKCU\Software\USyndication] [HKCU\Software\usyndication.com] [HKLM\Software\Wow6432Node\SWEETIM] O43 - CFD: 14/04/2014 - 13:36:16 - [1,251] ----D C:\ProgramData\InstallMate O45 - LFCP:[MD5.7E9AC43F13F6056E6228A5A4765ECB56] - 14/04/2014 - 12:00:09 ---A- - C:\Windows\Prefetch\SWEETIM.EXE-C8F96B16.pf OPT:O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com O87 - FAEL: "{362D29EF-00CE-4B36-9A40-639721FFE745}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{CD79CE50-179A-41A6-9D85-05EB864EE6D8}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_full_signed_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_full_signed_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarManager_80ACC8E3971CD605_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarManager_80ACC8E3971CD605_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sweetim_0711-adf025c2_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sweetim_0711-adf025c2_RASMANCS [HKLM\Software\Wow6432Node\SweetIM] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] [HKCU\Software\USyndication] [HKCU\Software\usyndication.com] C:\ProgramData\InstallMate [HKLM\Software\Wow6432Node\SWEETIM] C:\Users\AINA\AppData\Local\Temp\SIMEEI2Installer.exe C:\Users\AINA\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\AINA\AppData\Local\Temp\GoogleToolbarInstaller1.log C:\Users\AINA\AppData\Local\Temp\GoogleToolbarInstaller2.log ServiceDemand:Bonjour Service EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID SysRestore