Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: Modified
[MD5.4F2B6D05AFC4F680DFC2392EDA749493] - (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files (x86)\Freecorder\FLVSrvc.exe [167936] [PID.3140] =>Riskware.Movly
[MD5.4AA2CC5979AFF984227364F2C23B04F3] - (.Wajam - Auto-updater.) -- C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064] [PID.1676] =>PUP.Wajam
P2 - FPN: [HKLM] [@microsoft.com/VirtualEarth3D,version=4.0] - (...) -- (.not file.)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://home.speedbit.com
R3 - URLSearchHook: Freecorder Toolbar [64Bits] - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files (x86)\Freecorder\prxtbFre0.dll =>Toolbar.Conduit
O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll =>PUP.Wajam
O4 - HKCU\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Ben\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O4 - HKLM\..\Wow6432Node\Run: [Freecorder FLV Service] . (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files (x86)\Freecorder\FLVSrvc.exe =>Riskware.Movly
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Ben\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O2 - BHO: (no name) [64Bits] - {02478D38-C3F9-4efb-9B51-7695ECA05670} Cl� orpheline
O2 - BHO: Freecorder [64Bits] - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Freecorder\prxtbFre0.dll =>Toolbar.Conduit
O2 - BHO: SBCONVERT [64Bits] - {92A9ACF4-9333-43AE-9698-DB283326F87F} . (.Pas de propri�taire - IE Toolbar Engine.) -- C:\Program Files (x86)\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: GrabberObj Class [64Bits] - {FF7C3CF0-4B15-11D1-ABED-709549C10000} . (.SpeedBit - SpeedBit Grab & Convert.) -- C:\Program Files (x86)\SpeedBit Video Downloader\Toolbar\grabber.dll
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0329E7D6-6F54-462D-93F6-F5C3118BADF2} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{1392B8D2-5C05-419F-A8F6-B9F15A596612} Cl� orpheline
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - GS\Desktop [Public]: Choix de navigateur .lnk . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\System32\browserchoice.exe
O4 - GS\Accessories [Ben]: Run.lnk - Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadgetFirstRun_Portal] Cl� orpheline
O4 - HKCU\..\Run: [MusicGadget] Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadgetFirstRun] Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadget] Cl� orpheline
O4 - HKCU\..\Run: [TouchMemo] Cl� orpheline
O4 - HKCU\..\Run: [SRSHDAudioLab] C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (.not file.)
O4 - HKCU\..\Run: [Google Update] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadgetFirstRun_Portal] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [MusicGadget] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadgetFirstRun] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadget] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [TouchMemo] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [SRSHDAudioLab] C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (.not file.)
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [Google Update] Cl� orpheline
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O23 - Service: WajamUpdater (WajamUpdater) . (.Wajam - Auto-updater.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam
O42 - Logiciel: Freecorder 5 - (.Applian Technologies Inc..) [HKLM][64Bits] -- Freecorder5.02 =>Riskware.Movly
O42 - Logiciel: Freecorder Toolbar - (.Freecorder.) [HKLM][64Bits] -- Freecorder Toolbar =>Riskware.Movly
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =>PUP.Wajam
[HKCU\Software\AppDataLow\Software\BackgroundContainer] =>PUP.Babylon
[HKCU\Software\AppDataLow\Software\Freecorder] =>Riskware.Movly
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\Freecorder] =>Riskware.Movly
[HKCU\Software\Wajam] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Freecorder] =>Riskware.Movly
HKCU\Software\ChrmTB]
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Ask&Record]
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
O23 - Service: Google Update Service (gupdate) (?etadpug) . (...) - C:\Program Files (x86)\Google\Desktop\Install\{4e84eaca-f95f-a422-27a2-9df19f6f73fe}\ \...\???\{4e84eaca-f95f-a422-27a2-9df19f6f73fe}\GoogleUpdate.exe (.not file.)
O43 - CFD: 06/05/2012 - 02:45:06 - [19,824] ----D C:\Program Files (x86)\Freecorder =>Riskware.Movly
O43 - CFD: 22/02/2014 - 05:17:03 - [0,915] ----D C:\Program Files (x86)\Wajam =>PUP.Wajam
O43 - CFD: 14/08/2011 - 16:39:44 - [0,001] ----D C:\ProgramData\Partner
O43 - CFD: 13/09/2013 - 01:05:35 - [0,001] ----D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Wajam
O43 - CFD: 31/07/2011 - 09:25:41 - [1,215] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 24/11/2013 - 05:48:01 - [3,527] ----D C:\Users\Ben\AppData\Local\Conduit
O43 - CFD: 19/02/2014 - 01:29:36 - [0] ----D C:\Users\Ben\AppData\Roaming\Systweak
O45 - LFCP:[MD5.421BBBFFDDA469C12A40C9ED6DDA779C] - 01/03/2014 - 05:11:12 ---A- - C:\Windows\Prefetch\PROCEXP64.EXE-B6BAE896.pf
O45 - LFCP:[MD5.68C707325B9B211CCD0F86D48048F0C2] - 01/03/2014 - 06:06:18 ---A- - C:\Windows\Prefetch\WKSSS.EXE-808251D1.pf
O45 - LFCP:[MD5.E8AE23BF5C75274810B19B4472E98915] - 01/03/2014 - 07:32:29 ---A- - C:\Windows\Prefetch\DIVXUPDATE.EXE-EC9DEEDD.pf
O45 - LFCP:[MD5.D2CB028E5CC6238B1DDF2F7F085DC2A8] - 01/03/2014 - 07:32:29 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.A53C04A834BE9C2E60F510655CAFE36B] - 01/03/2014 - 07:59:57 ---A- - C:\Windows\Prefetch\MSERT.EXE-BE56B58C.pf
O45 - LFCP:[MD5.E4BE8E93D383F3529AAC983971F748C8] - 01/03/2014 - 08:05:05 ---A- - C:\Windows\Prefetch\METAEDITOR.EXE-95936D43.pf
O45 - LFCP:[MD5.24E2C97EF64C176722DE72C621B73902] - 01/03/2014 - 10:24:56 ---A- - C:\Windows\Prefetch\LOGIAPPBROKER.EXE-826D5DAD.pf
O45 - LFCP:[MD5.93EDD335F98F0173C2F7BFEB46B3288E] - 01/03/2014 - 10:29:26 ---A- - C:\Windows\Prefetch\RKILL.COM-3E952694.pf
O45 - LFCP:[MD5.7225F37DBEF504E2CD5989E5564B4112] - 01/03/2014 - 10:29:27 ---A- - C:\Windows\Prefetch\RKILL64.COM-2B65BCC6.pf
O45 - LFCP:[MD5.7E13D086574D4C5BBEA8B8D876E0D5C2] - 01/03/2014 - 10:42:25 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-7A540F09.pf
O45 - LFCP:[MD5.04D5837845C9671E8FC987BC57048658] - 01/03/2014 - 10:43:09 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-1CA6C108.pf
O45 - LFCP:[MD5.7BFD2D25185EAE245C8B8D9A99D5B454] - 01/03/2014 - 16:34:01 ---A- - C:\Windows\Prefetch\E_SAPDL2.EXE-87C8306B.pf
O45 - LFCP:[MD5.3E15EEFF6811AD507F322A9E17E5900B] - 01/03/2014 - 17:01:11 ---A- - C:\Windows\Prefetch\META01032014.EXE-82901B6F.pf
O45 - LFCP:[MD5.2205258A2550AD3C1A4418C434ED7601] - 01/03/2014 - 17:31:18 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-1058DAA3.pf
O45 - LFCP:[MD5.E833307B05536D38969A87107DB7FD12] - 01/03/2014 - 17:31:54 ---A- - C:\Windows\Prefetch\METAEDITOR.EXE-EDD2893D.pf
O45 - LFCP:[MD5.79C94BF779DF004B7E24A1CB7FF266A5] - 01/03/2014 - 17:34:50 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-A4487601.pf
O45 - LFCP:[MD5.EB23B028FEF6004BEC257BE7F2EEF44E] - 01/03/2014 - 19:03:51 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-124042113-826605413-1936925441-1000.db
O45 - LFCP:[MD5.4DA632F01BE64F7444707E14BA5F5B11] - 01/03/2014 - 19:03:51 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-124042113-826605413-1936925441-1000.db
O45 - LFCP:[MD5.CC9399A92CE27F7F3B9F629EB819FD63] - 01/03/2014 - 20:05:53 ---A- - C:\Windows\Prefetch\CPORTS.EXE-6D007F42.pf
O45 - LFCP:[MD5.CBD4CD0595106CD6DF607CA00B26C048] - 01/03/2014 - 23:24:10 ---A- - C:\Windows\Prefetch\SBUPDATE.EXE-9EF696A2.pf
O45 - LFCP:[MD5.E399F060816D27D727E96D6EDFB7D05A] - 02/03/2014 - 00:00:10 ---A- - C:\Windows\Prefetch\GREG.EXE-73992A73.pf
O45 - LFCP:[MD5.7205C10B7F3C9E3F3C96F54CC40BD823] - 26/02/2014 - 15:59:38 ---A- - C:\Windows\Prefetch\POWERCINEMA.EXE-8A3808DD.pf
O45 - LFCP:[MD5.75FD58AE075C002822D655E93DFE6D7A] - 26/02/2014 - 16:01:18 ---A- - C:\Windows\Prefetch\POWERCINEMAMOVIE.EXE-76D360A5.pf
O45 - LFCP:[MD5.A2097F82A939EC2A9A4CA5640AE40804] - 26/02/2014 - 16:14:10 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.167.509.0.EX-8EBC6319.pf
O45 - LFCP:[MD5.162EDCCC35E0D907F0B004E68502408C] - 26/02/2014 - 16:16:49 ---A- - C:\Windows\Prefetch\MPAM-A459C112.EXE-E2285933.pf
O45 - LFCP:[MD5.EA3388148FAB6B87161B921069BDA2CF] - 26/02/2014 - 23:43:21 ---A- - C:\Windows\Prefetch\JOURNAL.EXE-799A6ED0.pf
O45 - LFCP:[MD5.E26038C625A09FDB0D6703F11065BD4A] - 27/02/2014 - 00:05:56 ---A- - C:\Windows\Prefetch\MPAM-F0A07E6E.EXE-BB4EAC1D.pf
O45 - LFCP:[MD5.65032A5958165D38DE176899585A7FCB] - 27/02/2014 - 00:06:16 ---A- - C:\Windows\Prefetch\MPAM-F2B8890.EXE-3BE5D326.pf
O45 - LFCP:[MD5.D652F7E7C3FF4BEA49E3A47F77FE9460] - 27/02/2014 - 03:26:13 ---A- - C:\Windows\Prefetch\MPAM-3B3F7D76.EXE-40D093B5.pf
O45 - LFCP:[MD5.01C6EE2546BD4ABC443D38A3A5ED7136] - 27/02/2014 - 03:26:39 ---A- - C:\Windows\Prefetch\MPAM-A5183EEC.EXE-9B97B832.pf
O45 - LFCP:[MD5.FF06DF6D718A4437A881970D496F249B] - 27/02/2014 - 04:43:44 ---A- - C:\Windows\Prefetch\CPORTS.EXE-F810786D.pf
O45 - LFCP:[MD5.72DE79E5BA5D8EC6A3DE4AC6FFDDF79B] - 27/02/2014 - 05:37:22 ---A- - C:\Windows\Prefetch\MPAM-8C6E8624.EXE-B7F2B189.pf
O45 - LFCP:[MD5.24D9BAD66CBD948720DC058FB9FA4F18] - 27/02/2014 - 16:12:18 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.167.755.0.EX-6AC8D430.pf
O45 - LFCP:[MD5.1922CB2F467DDEB65E196FB335609BD7] - 27/02/2014 - 16:12:48 ---A- - C:\Windows\Prefetch\MPAM-A5A51137.EXE-37414FF9.pf
O45 - LFCP:[MD5.949FC32BFAE53E0212736D3AD548E68F] - 28/02/2014 - 16:19:01 ---A- - C:\Windows\Prefetch\MPAM-AFDAD8A.EXE-FE78E56E.pf
O45 - LFCP:[MD5.18069D92E3CDF670AA1A902A584F0532] - 28/02/2014 - 16:19:26 ---A- - C:\Windows\Prefetch\MPAM-26F42703.EXE-1D998097.pf
O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} - (Speedbit Search) - http://home.speedbit.com
O69 - SBI: SearchScopes [HKCU] {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} [DefaultScope] - (Freecorder Customized Web Search) - http://search.conduit.com =>Riskware.Movly
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS
SR - | Auto 12/08/2013 109064 | (WajamUpdater) . (.Wajam.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>PUP.Wajam^
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freecorder5.02] =>Riskware.Movly^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freecorder Toolbar] =>Riskware.Movly^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wajam] =>PUP.Wajam^
[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}] =>Hijacker.Seeearch
[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}] =>Hijacker.Seeearch
[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}] =>Adware.SocialSkinz
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1] =>Adware.Agent
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Classes\wajam.WajamBHO] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamBHO.1] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader.1] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1] =>PUP.Wajam
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BackgroundContainer =>PUP.Babylon^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Freecorder FLV Service =>Riskware.Movly^
C:\Program Files (x86)\Freecorder =>Riskware.Movly^
C:\Program Files (x86)\Wajam =>PUP.Wajam^
C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Wajam^
C:\ProgramData\Partner =>Spyware.Partner
C:\Users\Ben\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Program Files (x86)\Freecorder\FLVSrvc.exe =>Riskware.Movly^
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam^
[HKCU\Software\AppDataLow\Software\BackgroundContainer] =>PUP.Babylon^
[HKCU\Software\AppDataLow\Software\Freecorder] =>Riskware.Movly^
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar^
[HKCU\Software\Freecorder] =>Riskware.Movly^
[HKCU\Software\Wajam] =>PUP.Wajam^
[HKLM\Software\Wow6432Node\Freecorder] =>Riskware.Movly^
[MD5.D24949E5C6EC59F7F8664A657066994D] [WIS][11/09/2009] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\6eb5.msi [28160] =>Toolbar.Google
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\TbCommonUtils.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Classes\comobject.deskbarenabler] =>Toolbar.Agent
[HKLM\Software\Classes\comobject.deskbarenabler.1] =>Toolbar.Agent
[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit
[HKLM\Software\Classes\TbCommonUtils.CommonUtils] =>Toolbar.Agent
[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1] =>Toolbar.Agent
[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook] =>Toolbar.Agent
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam
[HKCU\Software\Ask&Record] =>Toolbar.Agent
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\priam_bho.DLL] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT1060933] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SBCONVERT] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SBCONVERT.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SearchProviderManager] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SearchProviderManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT1060933] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SBCONVERT] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SBCONVERT.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SearchProviderManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SearchProviderManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^
[HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{1392b8d2-5c05-419f-a8f6-b9f15a596612} =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\LocalLow\Toolbar4 =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
C:\Windows\Installer\6eb5.msi =>Toolbar.Google^
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: Modified
[MD5.4F2B6D05AFC4F680DFC2392EDA749493] - (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files (x86)\Freecorder\FLVSrvc.exe [167936] [PID.3140] =>Riskware.Movly
[MD5.4AA2CC5979AFF984227364F2C23B04F3] - (.Wajam - Auto-updater.) -- C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064] [PID.1676] =>PUP.Wajam
P2 - FPN: [HKLM] [@microsoft.com/VirtualEarth3D,version=4.0] - (...) -- (.not file.)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://home.speedbit.com
R3 - URLSearchHook: Freecorder Toolbar [64Bits] - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files (x86)\Freecorder\prxtbFre0.dll =>Toolbar.Conduit
O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll =>PUP.Wajam
O4 - HKCU\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Ben\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O4 - HKLM\..\Wow6432Node\Run: [Freecorder FLV Service] . (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files (x86)\Freecorder\FLVSrvc.exe =>Riskware.Movly
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Ben\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O2 - BHO: (no name) [64Bits] - {02478D38-C3F9-4efb-9B51-7695ECA05670} Cl� orpheline
O2 - BHO: Freecorder [64Bits] - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Freecorder\prxtbFre0.dll =>Toolbar.Conduit
O2 - BHO: SBCONVERT [64Bits] - {92A9ACF4-9333-43AE-9698-DB283326F87F} . (.Pas de propri�taire - IE Toolbar Engine.) -- C:\Program Files (x86)\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: GrabberObj Class [64Bits] - {FF7C3CF0-4B15-11D1-ABED-709549C10000} . (.SpeedBit - SpeedBit Grab & Convert.) -- C:\Program Files (x86)\SpeedBit Video Downloader\Toolbar\grabber.dll
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0329E7D6-6F54-462D-93F6-F5C3118BADF2} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{1392B8D2-5C05-419F-A8F6-B9F15A596612} Cl� orpheline
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - GS\Desktop [Public]: Choix de navigateur .lnk . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\System32\browserchoice.exe
O4 - GS\Accessories [Ben]: Run.lnk - Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadgetFirstRun_Portal] Cl� orpheline
O4 - HKCU\..\Run: [MusicGadget] Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadgetFirstRun] Cl� orpheline
O4 - HKCU\..\Run: [PhotoGadget] Cl� orpheline
O4 - HKCU\..\Run: [TouchMemo] Cl� orpheline
O4 - HKCU\..\Run: [SRSHDAudioLab] C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (.not file.)
O4 - HKCU\..\Run: [Google Update] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadgetFirstRun_Portal] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [MusicGadget] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadgetFirstRun] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [PhotoGadget] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [TouchMemo] Cl� orpheline
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [SRSHDAudioLab] C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (.not file.)
O4 - HKUS\S-1-5-21-124042113-826605413-1936925441-1000\..\Run: [Google Update] Cl� orpheline
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O23 - Service: WajamUpdater (WajamUpdater) . (.Wajam - Auto-updater.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam
O42 - Logiciel: Freecorder 5 - (.Applian Technologies Inc..) [HKLM][64Bits] -- Freecorder5.02 =>Riskware.Movly
O42 - Logiciel: Freecorder Toolbar - (.Freecorder.) [HKLM][64Bits] -- Freecorder Toolbar =>Riskware.Movly
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =>PUP.Wajam
[HKCU\Software\AppDataLow\Software\BackgroundContainer] =>PUP.Babylon
[HKCU\Software\AppDataLow\Software\Freecorder] =>Riskware.Movly
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\Freecorder] =>Riskware.Movly
[HKCU\Software\Wajam] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Freecorder] =>Riskware.Movly
HKCU\Software\ChrmTB]
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Ask&Record]
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
O23 - Service: Google Update Service (gupdate) (?etadpug) . (...) - C:\Program Files (x86)\Google\Desktop\Install\{4e84eaca-f95f-a422-27a2-9df19f6f73fe}\ \...\???\{4e84eaca-f95f-a422-27a2-9df19f6f73fe}\GoogleUpdate.exe (.not file.)
O43 - CFD: 06/05/2012 - 02:45:06 - [19,824] ----D C:\Program Files (x86)\Freecorder =>Riskware.Movly
O43 - CFD: 22/02/2014 - 05:17:03 - [0,915] ----D C:\Program Files (x86)\Wajam =>PUP.Wajam
O43 - CFD: 14/08/2011 - 16:39:44 - [0,001] ----D C:\ProgramData\Partner
O43 - CFD: 13/09/2013 - 01:05:35 - [0,001] ----D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Wajam
O43 - CFD: 31/07/2011 - 09:25:41 - [1,215] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 24/11/2013 - 05:48:01 - [3,527] ----D C:\Users\Ben\AppData\Local\Conduit
O43 - CFD: 19/02/2014 - 01:29:36 - [0] ----D C:\Users\Ben\AppData\Roaming\Systweak
O45 - LFCP:[MD5.421BBBFFDDA469C12A40C9ED6DDA779C] - 01/03/2014 - 05:11:12 ---A- - C:\Windows\Prefetch\PROCEXP64.EXE-B6BAE896.pf
O45 - LFCP:[MD5.68C707325B9B211CCD0F86D48048F0C2] - 01/03/2014 - 06:06:18 ---A- - C:\Windows\Prefetch\WKSSS.EXE-808251D1.pf
O45 - LFCP:[MD5.E8AE23BF5C75274810B19B4472E98915] - 01/03/2014 - 07:32:29 ---A- - C:\Windows\Prefetch\DIVXUPDATE.EXE-EC9DEEDD.pf
O45 - LFCP:[MD5.D2CB028E5CC6238B1DDF2F7F085DC2A8] - 01/03/2014 - 07:32:29 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.A53C04A834BE9C2E60F510655CAFE36B] - 01/03/2014 - 07:59:57 ---A- - C:\Windows\Prefetch\MSERT.EXE-BE56B58C.pf
O45 - LFCP:[MD5.E4BE8E93D383F3529AAC983971F748C8] - 01/03/2014 - 08:05:05 ---A- - C:\Windows\Prefetch\METAEDITOR.EXE-95936D43.pf
O45 - LFCP:[MD5.24E2C97EF64C176722DE72C621B73902] - 01/03/2014 - 10:24:56 ---A- - C:\Windows\Prefetch\LOGIAPPBROKER.EXE-826D5DAD.pf
O45 - LFCP:[MD5.93EDD335F98F0173C2F7BFEB46B3288E] - 01/03/2014 - 10:29:26 ---A- - C:\Windows\Prefetch\RKILL.COM-3E952694.pf
O45 - LFCP:[MD5.7225F37DBEF504E2CD5989E5564B4112] - 01/03/2014 - 10:29:27 ---A- - C:\Windows\Prefetch\RKILL64.COM-2B65BCC6.pf
O45 - LFCP:[MD5.7E13D086574D4C5BBEA8B8D876E0D5C2] - 01/03/2014 - 10:42:25 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-7A540F09.pf
O45 - LFCP:[MD5.04D5837845C9671E8FC987BC57048658] - 01/03/2014 - 10:43:09 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-1CA6C108.pf
O45 - LFCP:[MD5.7BFD2D25185EAE245C8B8D9A99D5B454] - 01/03/2014 - 16:34:01 ---A- - C:\Windows\Prefetch\E_SAPDL2.EXE-87C8306B.pf
O45 - LFCP:[MD5.3E15EEFF6811AD507F322A9E17E5900B] - 01/03/2014 - 17:01:11 ---A- - C:\Windows\Prefetch\META01032014.EXE-82901B6F.pf
O45 - LFCP:[MD5.2205258A2550AD3C1A4418C434ED7601] - 01/03/2014 - 17:31:18 ---A- - C:\Windows\Prefetch\TERMINAL.EXE-1058DAA3.pf
O45 - LFCP:[MD5.E833307B05536D38969A87107DB7FD12] - 01/03/2014 - 17:31:54 ---A- - C:\Windows\Prefetch\METAEDITOR.EXE-EDD2893D.pf
O45 - LFCP:[MD5.79C94BF779DF004B7E24A1CB7FF266A5] - 01/03/2014 - 17:34:50 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-A4487601.pf
O45 - LFCP:[MD5.EB23B028FEF6004BEC257BE7F2EEF44E] - 01/03/2014 - 19:03:51 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-124042113-826605413-1936925441-1000.db
O45 - LFCP:[MD5.4DA632F01BE64F7444707E14BA5F5B11] - 01/03/2014 - 19:03:51 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-124042113-826605413-1936925441-1000.db
O45 - LFCP:[MD5.CC9399A92CE27F7F3B9F629EB819FD63] - 01/03/2014 - 20:05:53 ---A- - C:\Windows\Prefetch\CPORTS.EXE-6D007F42.pf
O45 - LFCP:[MD5.CBD4CD0595106CD6DF607CA00B26C048] - 01/03/2014 - 23:24:10 ---A- - C:\Windows\Prefetch\SBUPDATE.EXE-9EF696A2.pf
O45 - LFCP:[MD5.E399F060816D27D727E96D6EDFB7D05A] - 02/03/2014 - 00:00:10 ---A- - C:\Windows\Prefetch\GREG.EXE-73992A73.pf
O45 - LFCP:[MD5.7205C10B7F3C9E3F3C96F54CC40BD823] - 26/02/2014 - 15:59:38 ---A- - C:\Windows\Prefetch\POWERCINEMA.EXE-8A3808DD.pf
O45 - LFCP:[MD5.75FD58AE075C002822D655E93DFE6D7A] - 26/02/2014 - 16:01:18 ---A- - C:\Windows\Prefetch\POWERCINEMAMOVIE.EXE-76D360A5.pf
O45 - LFCP:[MD5.A2097F82A939EC2A9A4CA5640AE40804] - 26/02/2014 - 16:14:10 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.167.509.0.EX-8EBC6319.pf
O45 - LFCP:[MD5.162EDCCC35E0D907F0B004E68502408C] - 26/02/2014 - 16:16:49 ---A- - C:\Windows\Prefetch\MPAM-A459C112.EXE-E2285933.pf
O45 - LFCP:[MD5.EA3388148FAB6B87161B921069BDA2CF] - 26/02/2014 - 23:43:21 ---A- - C:\Windows\Prefetch\JOURNAL.EXE-799A6ED0.pf
O45 - LFCP:[MD5.E26038C625A09FDB0D6703F11065BD4A] - 27/02/2014 - 00:05:56 ---A- - C:\Windows\Prefetch\MPAM-F0A07E6E.EXE-BB4EAC1D.pf
O45 - LFCP:[MD5.65032A5958165D38DE176899585A7FCB] - 27/02/2014 - 00:06:16 ---A- - C:\Windows\Prefetch\MPAM-F2B8890.EXE-3BE5D326.pf
O45 - LFCP:[MD5.D652F7E7C3FF4BEA49E3A47F77FE9460] - 27/02/2014 - 03:26:13 ---A- - C:\Windows\Prefetch\MPAM-3B3F7D76.EXE-40D093B5.pf
O45 - LFCP:[MD5.01C6EE2546BD4ABC443D38A3A5ED7136] - 27/02/2014 - 03:26:39 ---A- - C:\Windows\Prefetch\MPAM-A5183EEC.EXE-9B97B832.pf
O45 - LFCP:[MD5.FF06DF6D718A4437A881970D496F249B] - 27/02/2014 - 04:43:44 ---A- - C:\Windows\Prefetch\CPORTS.EXE-F810786D.pf
O45 - LFCP:[MD5.72DE79E5BA5D8EC6A3DE4AC6FFDDF79B] - 27/02/2014 - 05:37:22 ---A- - C:\Windows\Prefetch\MPAM-8C6E8624.EXE-B7F2B189.pf
O45 - LFCP:[MD5.24D9BAD66CBD948720DC058FB9FA4F18] - 27/02/2014 - 16:12:18 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.167.755.0.EX-6AC8D430.pf
O45 - LFCP:[MD5.1922CB2F467DDEB65E196FB335609BD7] - 27/02/2014 - 16:12:48 ---A- - C:\Windows\Prefetch\MPAM-A5A51137.EXE-37414FF9.pf
O45 - LFCP:[MD5.949FC32BFAE53E0212736D3AD548E68F] - 28/02/2014 - 16:19:01 ---A- - C:\Windows\Prefetch\MPAM-AFDAD8A.EXE-FE78E56E.pf
O45 - LFCP:[MD5.18069D92E3CDF670AA1A902A584F0532] - 28/02/2014 - 16:19:26 ---A- - C:\Windows\Prefetch\MPAM-26F42703.EXE-1D998097.pf
O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} - (Speedbit Search) - http://home.speedbit.com
O69 - SBI: SearchScopes [HKCU] {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} [DefaultScope] - (Freecorder Customized Web Search) - http://search.conduit.com =>Riskware.Movly
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS
SR - | Auto 12/08/2013 109064 | (WajamUpdater) . (.Wajam.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>PUP.Wajam^
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freecorder5.02] =>Riskware.Movly^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freecorder Toolbar] =>Riskware.Movly^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wajam] =>PUP.Wajam^
[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}] =>Hijacker.Seeearch
[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}] =>Hijacker.Seeearch
[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}] =>Adware.SocialSkinz
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1] =>Adware.Agent
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Classes\wajam.WajamBHO] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamBHO.1] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader] =>PUP.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader.1] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1] =>PUP.Wajam
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BackgroundContainer =>PUP.Babylon^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Freecorder FLV Service =>Riskware.Movly^
C:\Program Files (x86)\Freecorder =>Riskware.Movly^
C:\Program Files (x86)\Wajam =>PUP.Wajam^
C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Wajam^
C:\ProgramData\Partner =>Spyware.Partner
C:\Users\Ben\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Program Files (x86)\Freecorder\FLVSrvc.exe =>Riskware.Movly^
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>PUP.Wajam^
[HKCU\Software\AppDataLow\Software\BackgroundContainer] =>PUP.Babylon^
[HKCU\Software\AppDataLow\Software\Freecorder] =>Riskware.Movly^
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar^
[HKCU\Software\Freecorder] =>Riskware.Movly^
[HKCU\Software\Wajam] =>PUP.Wajam^
[HKLM\Software\Wow6432Node\Freecorder] =>Riskware.Movly^
[MD5.D24949E5C6EC59F7F8664A657066994D] [WIS][11/09/2009] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\6eb5.msi [28160] =>Toolbar.Google
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\TbCommonUtils.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Classes\comobject.deskbarenabler] =>Toolbar.Agent
[HKLM\Software\Classes\comobject.deskbarenabler.1] =>Toolbar.Agent
[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit
[HKLM\Software\Classes\TbCommonUtils.CommonUtils] =>Toolbar.Agent
[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1] =>Toolbar.Agent
[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook] =>Toolbar.Agent
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam
[HKCU\Software\Ask&Record] =>Toolbar.Agent
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\priam_bho.DLL] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT1060933] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SBCONVERT] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SBCONVERT.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SearchProviderManager] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.SearchProviderManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT1060933] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SBCONVERT] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SBCONVERT.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SearchProviderManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SearchProviderManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^
[HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{1392b8d2-5c05-419f-a8f6-b9f15a596612} =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Ben\AppData\LocalLow\Toolbar4 =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
C:\Windows\Installer\6eb5.msi =>Toolbar.Google^
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid