Script ZHPFix [MD5.66E3B215E18EEB0C3379472465365C0C] - (...) -- C:\Program Files (x86)\Pass-Widget-soft\PassWidget_wd.exe [93184] [PID.49556] =>PUP.PassWidget G2 - GCE: Preference [User Data\Default] [dhdppnagkklahjmblgdojadgbiffhejd] Deeal_fr 0.2 v.1.26.80, (Activé) G2 - GCE: Preference [User Data\Default] [fbdagnimlohkpamglloopgfnoiijpmoj] PassWidget v.1.155.0.0 (Activé) =>PUP.PassWidget G2 - GCE: Preference [User Data\Default] [lpgneobcphcdajdmgifgdjkldnnkcnjp] Sharp Savings v.0.0.1, (Activé) G2 - GCE: Preference [User Data\Default] [nlbjncdgjeocebhnmkbbbdekmmmcbfjd] Plus-HD-8.3 v.12977.8731.6611, (Activé) =>Adware.PlusHD R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:13828 =>Hijacker.Proxy O23 - Service: PassWidget (PassWidget) . (...) - C:\Program Files (x86)\Pass-Widget-soft\PassWidget155.exe =>PUP.PassWidget O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PassWidget_wd.job [412] =>PUP.PassWidget [MD5.66E3B215E18EEB0C3379472465365C0C] [APT] [PassWidget_wd] (...) -- C:\Program Files (x86)\Pass-Widget-soft\PassWidget_wd.exe [93184] =>PUP.PassWidget [MD5.00000000000000000000000000000000] [APT] [wp_update] (...) -- C:\Users\vero\AppData\Roaming\~wikvflr.exe (.not file.) [0] =>PUP.WpManager [MD5.00000000000000000000000000000000] [APT] [{43111347-7746-4D49-979D-D304FE8F51BB}] (...) -- C:\ProgramData\Websteroids\uninstall.exe (.not file.) [0] =>PUP.TubeDimmer [MD5.00000000000000000000000000000000] [APT] [{4D4CEA43-492C-469E-9236-3DB586D93ADF}] (...) -- C:\PROGRA~3\TARMAI~1\{889DF~1\Setup.exe (.not file.) [0] =>PUP.Tarma [HKCU\Software\AppDataLow\Software\PassWidget] =>PUP.PassWidget [HKLM\Software\Wow6432Node\Sharp Savings] [HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday O43 - CFD: 01/03/2014 - 02:54:01 - [1,327] ----D C:\Program Files (x86)\Pass-Widget-soft =>PUP.PassWidget O43 - CFD: 03/07/2013 - 20:41:51 - [2,167] ----D C:\ProgramData\InstallMate =>PUP.Tarma O43 - CFD: 01/03/2014 - 02:55:32 - [1,683] ----D C:\Users\vero\AppData\Roaming\sweet-page =>PUP.SweetPage O43 - CFD: 09/03/2014 - 13:00:04 - [1,065] ----D C:\Users\vero\AppData\Local\Sharp Savings O45 - LFCP:[MD5.65404243636D46BD821D414DB780CC1B] - 12/03/2014 - 08:08:49 ---A- - C:\Windows\Prefetch\PASSWIDGET_WD.EXE-3F639F79.pf =>PUP.PassWidget O45 - LFCP:[MD5.5592CC6E61FF30EB6800712A18119F97] - 12/03/2014 - 08:08:54 ---A- - C:\Windows\Prefetch\PASSWIDGET155.EXE-763EEC0E.pf =>PUP.PassWidget O69 - SBI: SearchScopes [HKCU] EC9F4503B8764840B6F249A888D60029 - (qvo6) - http://search.qvo6.com =>Hijacker.Qvo6 O69 - SBI: SearchScopes [HKCR] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Web Search) - http://search.certified-toolbar.com =>PUP.CertifiedToolbar SR - | Auto 01/03/2014 193024 | (PassWidget) . (...) - C:\Program Files (x86)\Pass-Widget-soft\PassWidget155.exe =>PUP.PassWidget [HKLM\Software\Google\Chrome\Extensions\fbdagnimlohkpamglloopgfnoiijpmoj] =>PUP.PassWidget^ [HKLM\Software\Google\Chrome\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd] =>Adware.PlusHD^ [HKLM\SYSTEM\CurrentControlSet\Services\PassWidget] =>PUP.PassWidget^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity [HKLM\Software\Classes\Iminent.Companion.Buddy] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Iminent.Companion.Buddy] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ C:\Users\vero\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdagnimlohkpamglloopgfnoiijpmoj =>PUP.PassWidget^ C:\Users\vero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd =>Adware.PlusHD^ C:\Program Files (x86)\Pass-Widget-soft =>PUP.PassWidget^ C:\ProgramData\InstallMate =>PUP.Tarma^ C:\Users\vero\AppData\Roaming\sweet-page =>PUP.SweetPage^ C:\Program Files (x86)\Pass-Widget-soft\PassWidget_wd.exe =>PUP.PassWidget^ C:\Windows\Tasks\PassWidget_wd.job =>PUP.PassWidget^ [HKCU\Software\AppDataLow\Software\PassWidget] =>PUP.PassWidget^ [HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday^ ShortcutFix EmptyPrefetch FirewallRaz EmptyTemp