Rapport de ZHPFix 2015.4.9.5 par Nicolas Coolman, Update du 18/03/2015 Fichier d'export Registre : Run by MSI GT70 at 18/04/2015 23:47:08 High Elevated Privileges : OK Windows 8 Business Edition, 64-bit Service Pack 1 (9600) Recycle Bin emptied (00mn 02s) Repair of browser shortcuts ========== Process memory ========== REMOVES: Memory Process: C:\Users\MSI GT70\Downloads\cacaoweb.exe ========== Registry keys ========== REMOVES: Service: geteruhy REMOVES: Service: popineje REMOVES: Service: cBvkjYqBPs REMOVES: HKLM\Software\Wow6432Node\Infonaut_1.10.0.14 ========== Registry values ========== ABSENT value Standard Profile: FirewallRaz : ABSENT value Domain Profile: FirewallRaz : REMOVES: FirewallRaz (Domain) : {9E3D57FC-7C37-4424-9352-4831E97D029D} REMOVES: FirewallRaz (Domain) : {548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6} REMOVES: FirewallRaz (Domain) : NetPres-In-TCP-NoScope REMOVES: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope REMOVES: FirewallRaz (None) : NetPres-WSD-In-UDP REMOVES: FirewallRaz (None) : NetPres-WSD-Out-UDP REMOVES: FirewallRaz (Public) : NetPres-In-TCP REMOVES: FirewallRaz (Public) : NetPres-Out-TCP REMOVES: FirewallRaz (None) : MCX-Prov-Out-TCP REMOVES: FirewallRaz (None) : MCX-McrMgr-Out-TCP REMOVES: FirewallRaz (Domain) : {E7985E1D-C36F-4787-80A8-6350D07E9266} REMOVES: FirewallRaz (None) : {808F1451-4108-46FD-ADBB-F17324B5F0BD} REMOVES: FirewallRaz (Public) : TCP Query User{697CBF9E-3C1E-40DE-821A-B077FC140C27}C:\program files (x86)\far cry 4\bin\farcry4.exe REMOVES: FirewallRaz (Public) : UDP Query User{F7F0DA21-AF7C-4062-B893-9864363D74E5}C:\program files (x86)\far cry 4\bin\farcry4.exe REMOVES: FirewallRaz (Private) : TCP Query User{81134252-6506-47F6-92C9-774E0B9B4BA7}C:\users\msi gt70\appdata\roaming\cacaoweb\cacaoweb.exe REMOVES: FirewallRaz (Private) : UDP Query User{3634D628-8335-4ECB-8FB9-BF7FB94CC14D}C:\users\msi gt70\appdata\roaming\cacaoweb\cacaoweb.exe REMOVES: FirewallRaz (Public) : TCP Query User{14ABB7D9-FFCE-4035-95A3-7CB2A29F7267}C:\users\msi gt70\appdata\roaming\cacaoweb\cacaoweb.exe REMOVES: FirewallRaz (Public) : UDP Query User{67A24AB0-227F-4952-B82D-2BE5EBD463D8}C:\users\msi gt70\appdata\roaming\cacaoweb\cacaoweb.exe ========== Folders ========== No folders empty CLSID Local user REMOVES Flash Cookies (0) Deletes temporary Windows (30) ========== Files ========== REMOVES: c:\users\msi gt70\appdata\roaming\03000200-1429382527-0500-0006-000700080009\jnso691d.tmp REMOVES: c:\users\msi gt70\appdata\roaming\03000200-1429382527-0500-0006-000700080009\nsp2b24.tmpfs REMOVES: c:\users\msi gt70\appdata\locallow\sony online entertainment\npsoeact.dll REMOVES Reboot: c:\programdata\ouyhmbfoqqj\cbvkjyqbps.exe REMOVES: c:\users\msi gt70\appdata\local\temp\is45637729\138057_stp\generic_vo.exe REMOVES: c:\users\msi gt70\appdata\local\temp\1842015221456\solimba uninstaller.exe REMOVES: c:\users\msi gt70\appdata\local\temp\7163.exe REMOVES: c:\users\msi gt70\appdata\local\temp\is-8vq7r.tmp\cmd.bat REMOVES: c:\users\msi gt70\appdata\local\temp\is-8vq7r.tmp\gentlemjmp_ieu.exe REMOVES: c:\users\msi gt70\appdata\local\temp\claradwl\c2646b6d-4adc-4d7e-96e9-4d4fce8f2602.exe REMOVES: c:\users\msi gt70\appdata\local\temp\f9626892-7a78-3199-abd2-97bbce96297b\adv_76.exe REMOVES: c:\users\msi gt70\appdata\local\temp\is-8vq7r.tmp\_isetup\_shfoldr.dll REMOVES: c:\users\msi gt70\appdata\local\temp\is-v1chr.tmp\_isetup\_shfoldr.dll REMOVES: c:\users\msi gt70\appdata\local\temp\is45637729\6401188_stp\gvstb.exe REMOVES: c:\users\msi gt70\appdata\local\temp\nsbfd74.tmp\ipconfig.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsbfd74.tmp\system.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsbfd74.tmp\wmiinspector.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsbfd74.tmp\inetc.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsmfe01.tmp\ipconfig.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsmfe01.tmp\system.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsmfe01.tmp\wmiinspector.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsmfe01.tmp\inetc.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nso7876.tmp\inetc.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\httprequest.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\hwinfo.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\nsisdl.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\system.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\wmiinspector.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\inetc.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nss2dd0.tmp\inetc.dll REMOVES: c:\users\msi gt70\appdata\local\temp\sdfa575.exe REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\nsislog.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\xtinfoplugin.dll REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\stdutils.dll REMOVES: c:\windows\prefetch\anyprotect.exe-3685bdd1.pf REMOVES: c:\windows\prefetch\bubble dock uninstall.exe-1343bbad.pf REMOVES: c:\windows\prefetch\gamesdesktop3-frinstaller.tmp-4fa331d7.pf REMOVES: c:\windows\prefetch\selection tools uninstall.exe-17464f7d.pf REMOVES: c:\windows\prefetch\selection tools uninstall.exe-2594cee6.pf REMOVES: c:\windows\prefetch\upgmsd_fr_436.exe-52a992c4.pf REMOVES: c:\windows\prefetch\upgmsd_fr_448.exe-cd13cc42.pf REMOVES: c:\windows\prefetch\vopackage.exe-861e372e.pf REMOVES: c:\windows\prefetch\vuupcinstaller.exe-fa469bf0.pf REMOVES: c:\users\msi gt70\appdata\local\temp\claradwl\02faf896-2996-47a6-acb7-7e171de1564c.exe REMOVES: c:\users\msi gt70\appdata\local\temp\nsrd8a7.tmp\uac.dll REMOVES: c:\users\msi gt70\appdata\local\temp\setup_296.exe REMOVES Flash Cookies (0) (0 octets) Deletes temporary Windows (100) (73?916?185 octets) ========== System restore ========== The system successfully created restore point ========== Summary ========== 1 : Process memory 4 : Registry keys 20 : Registry values 3 : Folders 48 : Files 1 : System restore End of clean in 00mn 06s ========== Path to file report ========== C:\Users\MSI GT70\AppData\Roaming\ZHP\ZHPFix[R1].txt - 18/04/2015 23:47:11 [6168]