Script ZHPFix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.) O4 - HKCU\..\Run: [Wunderlist] C:\Program Files (x86)\Wunderlist2\Wunderlist.exe (.not file.) O4 - HKCU\..\Run: [GeeTeeDee] C:\Users\Mathilde\AppData\Local\Codea\GeeTeeDee\Application\GeeTeeDee.exe (.not file.) O4 - HKUS\S-1-5-21-2456067018-2608387153-1630043381-1000\..\Run: [Wunderlist] C:\Program Files (x86)\Wunderlist2\Wunderlist.exe (.not file.) O4 - HKUS\S-1-5-21-2456067018-2608387153-1630043381-1000\..\Run: [GeeTeeDee] C:\Users\Mathilde\AppData\Local\Codea\GeeTeeDee\Application\GeeTeeDee.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{409C0353-4DAE-494A-9CF4-97EB195D4D2E}] (...) -- C:\Users\Mathilde\Downloads\SpyHunter-Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{7427C218-9584-4AC9-92E3-A47C10E9E09F}] (...) -- C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{A737025E-3DFF-4F9D-9AE4-911CB8680862}] (...) -- C:\Users\Mathilde\Downloads\The Sims 3 - University Life\Sims3EP09Setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{EB45FA33-EFEB-4490-B04D-0290BEF321BC}] (...) -- C:\Users\Mathilde\Downloads\The Sims 3 - Island Paradise\Sims3EP10Setup.exe (.not file.) [0] [HKCU\Software\iWinArcade] [HKLM\Software\Wow6432Node\Object] [HKLM\Software\Wow6432Node\iWin.com Games] [HKLM\Software\Wow6432Node\iWinArcade] O43 - CFD: 6/08/2014 - 07:50:32 - [0] ----D C:\Program Files (x86)\iWin.com Games O43 - CFD: 16/04/2012 - 11:58:09 - [] ----D C:\ProgramData\InstallMate O43 - CFD: 5/08/2014 - 13:55:12 - [] ----D C:\ProgramData\iWin Games O43 - CFD: 5/08/2014 - 13:54:56 - [0] ----D C:\Users\Mathilde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iWin Games O51 - MPSK:{3bef75b5-c17d-11e2-9bd4-78843cf2167e}\AutoRun\command. (...) -- I:\Windows\CHECK\DriveNavigator.exe (.not file.) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O61 - LFC: 2/09/2014 - 12:09:26 ---A- . (...) -- C:\Users\Mathilde\AppData\Local\Temp\Quarantine.exe [377099] O61 - LFC: 7/09/2014 - 12:09:26 ---A- . (.Sony DADC Austria AG.) -- C:\Users\Mathilde\AppData\Local\Temp\drm_dyndata_7400009.dll [204800] O69 - SBI: SearchScopes [HKCU] {A36F3146-6303-432B-B1C9-AE0EDDDCAE37} - (eBay) - http://rover.ebay.com O90 - PUC: "25BD30E1BC5D83343A835E62DDD4D41B" . (.Bing Bar.) -- C:\Windows\Installer\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}\icon_installer_ico [MD5.030EF57D730EC0A96C633715399B37B9] [WIS][1/03/2011] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\e3c5.msi [4424192] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\betterinstaller_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\betterinstaller_RASMANCS SS - | Demand 1/03/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe SR - | Auto 25/02/2011 249648 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}] [HKLM\Software\Classes\TypeLib\{495874fe-4a82-4ad1-9476-0b957e0b95eb}] [HKLM\Software\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Wow6432Node\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Wow6432Node\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] [HKLM\Software\Wow6432Node\iWin.com Games] [HKCU\Software\iWinArcade] [HKLM\Software\Wow6432Node\iWinArcade] C:\ProgramData\InstallMate C:\ProgramData\iWin Games C:\Users\Mathilde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iWin Games C:\Program Files (x86)\iWin.com Games C:\Windows\Installer\e3c5.msi SysRestore FirewallRaz ShortcutFix EmptyTemp