Script ZHPFix SysRestore O4 - GS\Desktop [Lisa]: SpyHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [Optimizer Pro Schedule] (...) -- C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe (.not file.) [0] C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter O45 - LFCP:[MD5.643EDA9456AC2F5ECFA78731F20DEBB6] - 19/07/2014 - 23:47:33 ---A- - C:\Windows\Prefetch\ISAFESCAN.EXE-BEDBDBDC.pf O45 - LFCP:[MD5.37E038D10C6DE91D6BAE0669B24FAFFE] - 20/07/2014 - 16:34:46 ---A- - C:\Windows\Prefetch\ISAFESVC.EXE-8A12EE57.pf O45 - LFCP:[MD5.AA2803883BC00D727F84A1B68B8EA56E] - 20/07/2014 - 00:00:56 ---A- - C:\Windows\Prefetch\ISAFESVC2.EXE-FF57F8B9.pf O45 - LFCP:[MD5.CE0025BFC7A3E5A219E0F1D2B188E7F4] - 20/07/2014 - 16:33:55 ---A- - C:\Windows\Prefetch\ISAFETHLP.EXE-9D14CCFB.pf O45 - LFCP:[MD5.F772DE96872E5B68C30115C23863B059] - 20/07/2014 - 16:34:33 ---A- - C:\Windows\Prefetch\ISAFETHLP64.EXE-34E5B12D.pf O45 - LFCP:[MD5.64F1C8EF73EBDA045360A414D739780A] - 20/07/2014 - 16:18:53 ---A- - C:\Windows\Prefetch\ISAFETRAY.EXE-F929161B.pf O45 - LFCP:[MD5.4A6A1E38F043F6ECC026BBAAADA012FD] - 19/07/2014 - 17:23:12 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf O45 - LFCP:[MD5.1C46536733F298E76F6A6966700F1F05] - 20/07/2014 - 00:20:34 ---A- - C:\Windows\Prefetch\SHSETUP.EXE-658C5A6C.pf O45 - LFCP:[MD5.E7D7CDBD46479B64F8C7C62B2C76CCF2] - 20/07/2014 - 00:17:44 ---A- - C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-CD439A77.pf O45 - LFCP:[MD5.0DECAA2433E8DD3678A0E5C3EE42359A] - 19/07/2014 - 18:04:30 ---A- - C:\Windows\Prefetch\UNINSTALL BUBBLE DOCK.EXE-7454DAB5.pf O45 - LFCP:[MD5.28461318FEF765C7370463D5C6AAF08C] - 19/07/2014 - 18:04:34 ---A- - C:\Windows\Prefetch\UNINSTALL BUBBLE DOCK.EXE-B721973F.pf O45 - LFCP:[MD5.8EC92BEE5BDA7E5E0180BE80F17FAD30] - 20/07/2014 - 00:18:51 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA37.EXE-9DD21410.pf O61 - LFC: 19/07/2014 - 21:27:52 ---A- . (...) -- C:\Users\Lisa\Downloads\BitLordInstaller - Qu'est-ce qu'on a fait au Bon Dieu[2014]DVDRip.XviD[French].exe [689632] HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateRightSurf_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateRightSurf_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilRightSurf_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilRightSurf_RASMANCS SR - | Auto 09/01/2014 1025408 | (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC..) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [HKLM\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] C:\Users\Lisa\Desktop\SpyHunter.lnk C:\Users\Lisa\AppData\Local\Temp\IminentSetup.exe G2 - GCE: Preference [User Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.0.1 [MD5.9631FA36F4784888F0918394778B8B07] [SPRF][20/07/2014] (...) -- C:\Users\Lisa\Desktop\Norton_Removal_Tool.exe [870728] O61 - LFC: 20/07/2014 - 21:27:52 ---A- . (...) -- C:\Users\Lisa\Desktop\Norton_Removal_Tool.exe [870728] O45 - LFCP:[MD5.3B411C003A8C4312E44DAAC9B65634F9] - 19/07/2014 - 17:21:18 ---A- - C:\Windows\Prefetch\UTORRENT (1).EXE-50BC4984.pf =>P2P.µTorrent O45 - LFCP:[MD5.B9BE9BB1B0B4CE2EE30D80AD4CC4D707] - 19/07/2014 - 17:16:28 ---A- - C:\Windows\Prefetch\UTORRENT [1].EXE-F10FB417.pf =>P2P.µTorrent O45 - LFCP:[MD5.225B5FB73CA693B40773C1C3929E95B8] - 19/07/2014 - 17:16:13 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-AF011FE2.pf =>P2P.µTorrent O45 - LFCP:[MD5.C36EE6D1C4012E2BD89ED9DBA198D466] - 19/07/2014 - 18:27:13 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-E9421C8A.pf =>P2P.µTorrent O61 - LFC: 19/07/2014 - 21:27:52 ---A- . (...) -- C:\Users\Lisa\Downloads\Qu'est-ce_qu'on_a_fait_au_Bon_Dieu(2014)DVDRip.XviD(French).exe [370736] => P2P.Agent* O61 - LFC: 19/07/2014 - 21:27:52 ---A- . (...) -- C:\Users\Lisa\Downloads\Quest-ce_quon_a_fait_au_Bon_Dieu[2014]DVDRip_XviD[French].exe [370736] => P2P.Agent* O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline [HKLM\Software\Wow6432Node\mamverifier] C:\Users\Lisa\AppData\Local\Temp\dlLogic.exe C:\Users\Lisa\AppData\Local\Temp\GCVerifier.dll R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 => Internet Explorer Allows Proxy Settings Remotely OPT:SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074] O43 - CFD: 20/07/2014 - 01:18:45 - [] ----D C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter =>Crapware.SpyHunter [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified C:\Users\Lisa\AppData\Local\Temp\IminentSetup.exe C:\Users\Lisa\AppData\Local\Temp\dlLogic.exe C:\Users\Lisa\AppData\Local\Temp\GCVerifier.dll O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline [MD5.00000000000000000000000000000000] [APT] [Optimizer Pro Schedule] (...) -- C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe (.not file.) [0] EmptyPrefetch HiddenFix EmptyFlash EmptyTemp