Script ZHPFix R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 O2 - BHO: (no name) - {3049C3E9-B461-4BC5-8870-4C09146192CA} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{F2CF5485-4E02-4F68-819C-B92DE9277049} Clé orpheline OPT:O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe OPT:O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe OPT:O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe OPT:O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe OPT:O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe OPT:O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe OPT:O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe OPT:O4 - HKUS\S-1-5-21-839522115-725345543-2147188803-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe (.not file.) O39 - APT: - (..) -- C:\WINDOWS\Tasks\At1.job [406] O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job [218] O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [212] O39 - APT: - (..) -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-839522115-725345543-2147188803-1004.job [274] O39 - APT: - (..) -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-839522115-725345543-2147188803-1004.job [282] O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_07\bin\regutils.dll O41 - Driver: ({a3f28269-ad17-41a8-b032-3e0313ef8979}Gt) . (.StdLib - StdLib.) - C:\WINDOWS\system32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gt.sys O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O43 - CFD: 12/04/2014 - 18:07:36 - [] ----D C:\Documents and Settings\All Users\Application Data\InstallMate O43 - CFD: 19/07/2014 - 13:17:27 - [] ----D C:\Documents and Settings\All Users\Application Data\McAfee O43 - CFD: 14/09/2012 - 22:19:34 - [] ----D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy O43 - CFD: 15/12/2009 - 15:43:21 - [] ----D C:\Documents and Settings\oem\Application Data\eMule O43 - CFD: 18/11/2013 - 16:56:37 - [0] ----D C:\Documents and Settings\oem\Application Data\uTorrent O47 - AAKE:Key Export SP - "C:\Documents and Settings\oem\Local Settings\Apps\2.0\7N3T0OPH.WVC\K6XO4KDA.WNA\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\CurseClient.exe" [Disabled] .(...) -- C:\Documents and Settings\oem\Local Settings\Apps\2.0\7N3T0OPH.WVC\K6XO4KDA.WNA\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\CurseClient.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Documents and Settings\oem\Mes documents\Téléchargements\Discours_de_la_servitude_volontaire___Etienne_La_Boétie_de_downloader.exe" [Enabled] .(...) -- C:\Documents and Settings\oem\Mes documents\Téléchargements\Discours_de_la_servitude_volontaire___Etienne_La_Boétie_de_downloader.exe (.not file.) O51 - MPSK:{a62b6f6f-2b4f-11de-a291-001fd08d230b}\AutoRun\command. (...) -- C:\WINDOWS\system32\Info.exe (.not file.) OPT:O53 - SMSR:HKLM\...\startupreg\CTFMON.EXE [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe OPT:O53 - SMSR:HKLM\...\startupreg\MsnMsgr [Key] . (...) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.) OPT:O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\TkBellExe [Key] . (...) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe (.not file.) O61 - LFC: 20/07/2014 - 11:18:34 ---A- . (...) -- C:\Documents and Settings\oem\Local Settings\Temp\toolbar12541318.exe [581968] O61 - LFC: 20/07/2014 - 11:18:34 ---A- . (.VuuPC.) -- C:\Documents and Settings\oem\Local Settings\Temp\toolbar12543954.exe [105476] O61 - LFC: 20/07/2014 - 11:18:35 ---A- . (...) -- C:\Documents and Settings\oem\Local Settings\Temp\toolbar55588.exe [586832] O61 - LFC: 20/07/2014 - 11:18:35 ---A- . (...) -- C:\Documents and Settings\oem\Local Settings\Temp\toolbar55592.exe [581968] O61 - LFC: 20/07/2014 - 11:18:35 ---A- . (...) -- C:\Documents and Settings\oem\Mes documents\Téléchargements\cacaoweb.exe [510256] O61 - LFC: 20/07/2014 - 11:18:35 ---A- . (.VuuPC.) -- C:\Documents and Settings\oem\Local Settings\Temp\toolbar55596.exe [105476] C:\Documents and Settings\oem\Application Data\uTorrent C:\Documents and Settings\All Users\Application Data\InstallMate EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID FirewallRAZ HostFix ProxyFix SysRestore