Script zhpfix
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
G2 - GCE: Preference [User Data\Default] [boipimhfjpakfgckhbljjengakjhkcbp] MixiDJ Toolbar v.1.0 (D�sactiv�) =>Toolbar.MixiDJ
G2 - GCE: Preference [User Data\Default] [ieadcoanfjloocmfafkebdnfefmohngj] BonanzaDeals v.3.5.0.0 (Activ�) =>Adware.BonanzaDeals
O4 - GS\Desktop [Public]: Acheter en ligne.lnk . (...) -- C:\Program Files (x86)\Accessory Store\StartUrl.exe (.not file.)
O4 - GS\Desktop [Public]: Help and Support.lnk - Cl� orpheline
O4 - GS\Program [Public]: Desktop.lnk - Cl� orpheline
O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [LManager] Cl� orpheline
O4 - HKLM\..\Wow6432Node\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (.not file.)
O23 - Service: WajamUpdaterV2 (WajamUpdaterV2) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV2.exe (.not file.) =>Toolbar.Wajam
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job [940] =>Adware.BonanzaDeals
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job [944] =>Adware.BonanzaDeals
[MD5.00000000000000000000000000000000] [APT] [BonanzaDealsLiveUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe (.not file.) [0] =>Adware.BonanzaDeals
[MD5.00000000000000000000000000000000] [APT] [BonanzaDealsLiveUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe (.not file.) [0] =>Adware.BonanzaDeals
[MD5.5826462E5834594A81E0397A097B5D3E] [APT] [BonanzaDealsUpdate] (.BonanzaDealsUpdate.) -- C:\Program Files (x86)\BonanzaDeals\BonanzaDealsUpdate.exe [78384] =>Adware.BonanzaDeals
O42 - Logiciel: Bonanza Deals (remove only) - (.Bonanza Deals.) [HKLM][64Bits] -- Bonanza Deals =>Adware.BonanzaDeals
[HKCU\Software\BonanzaDealsLive] =>Adware.BonanzaDeals
[HKCU\Software\BonanzaDeals] =>Adware.BonanzaDeals
[HKLM\Software\Wow6432Node\BonanzaDealsLive] =>Adware.BonanzaDeals
[HKLM\Software\Wow6432Node\BonanzaDeals] =>Adware.BonanzaDeals
O43 - CFD: 12/10/2013 - 15:12:25 - [1,165] ----D C:\Program Files (x86)\BonanzaDeals =>Adware.BonanzaDeals
O43 - CFD: 12/10/2013 - 15:12:26 - [0,001] ----D C:\Users\Balbine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals =>Adware.BonanzaDeals
O45 - LFCP:[MD5.66A2F6D8A150F2CBBE5BA314AACA7DB5] - 12/10/2013 - 14:11:46 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-1B437816.pf =>Toolbar.Wajam
O45 - LFCP:[MD5.280F5D1647E1424F67048BEC9F7ADE20] - 12/10/2013 - 14:12:44 ---A- - C:\Windows\Prefetch\WAJAM_DOWNLOAD.EXE-C11A7A4E.pf =>Toolbar.Wajam
O45 - LFCP:[MD5.04BFD0E864E79DF5FC7B19FEE87BE106] - 12/10/2013 - 14:13:13 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-46FE3280.pf =>Adware.BonanzaDeals
O45 - LFCP:[MD5.7AAFBBBE8774055AA67D8DA594FD18ED] - 12/10/2013 - 14:18:00 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVEHANDLER.EXE-E63F06DB.pf =>Adware.BonanzaDeals
O45 - LFCP:[MD5.8ECF76E51CAED64EDA72AA4C8211E5F3] - 12/10/2013 - 14:19:01 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-1DD169EA.pf =>Adware.BonanzaDeals
O87 - FAEL: "{E9586A6C-27C6-45DF-87B8-0A6B8B72DEB5}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe (.not file.)
SS - | Auto 10/07/1658 0 | (WajamUpdaterV2) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV2.exe =>Toolbar.Wajam
[HKLM\Software\Google\Chrome\Extensions\boipimhfjpakfgckhbljjengakjhkcbp] =>Toolbar.MixiDJ^
[HKLM\Software\Google\Chrome\Extensions\ieadcoanfjloocmfafkebdnfefmohngj] =>Adware.BonanzaDeals^
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdaterV2] =>Toolbar.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bonanza Deals] =>Adware.BonanzaDeals^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
C:\Program Files (x86)\BonanzaDeals =>Adware.BonanzaDeals^
C:\Users\Balbine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals =>Adware.BonanzaDeals^
C:\Users\Balbine\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp =>Toolbar.MixiDJ^
C:\Users\Balbine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj =>Adware.BonanzaDeals^
C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job =>Adware.BonanzaDeals^
C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job =>Adware.BonanzaDeals^
C:\Program Files (x86)\BonanzaDeals\BonanzaDealsUpdate.exe =>Adware.BonanzaDeals^
[HKCU\Software\BonanzaDealsLive] =>Adware.BonanzaDeals^
[HKCU\Software\BonanzaDeals] =>Adware.BonanzaDeals^
[HKLM\Software\Wow6432Node\BonanzaDealsLive] =>Adware.BonanzaDeals^
[HKLM\Software\Wow6432Node\BonanzaDeals] =>Adware.BonanzaDeals^
C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-1B437816.pf =>Toolbar.Wajam^
C:\Windows\Prefetch\WAJAM_DOWNLOAD.EXE-C11A7A4E.pf =>Toolbar.Wajam^
C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-46FE3280.pf =>Adware.BonanzaDeals^
C:\Windows\Prefetch\BONANZADEALSLIVEHANDLER.EXE-E63F06DB.pf =>Adware.BonanzaDeals^
C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-1DD169EA.pf =>Adware.BonanzaDeals^
C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV2.exe =>Toolbar.Wajam^
SysRestore
FirewallRAZ
EmptyCLSID
EmptyTemp
EmptyFlash