cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Script ZHPFix
G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.4 (Désactivé) =>Toolbar.DeltaSearch
G2 - GCE: Preference [User Data\Default] [hbcennhacfaagdopikcegfcobcadeocj] Ebay Shopping Assistant by Spigot v.1.1 (Désactivé) =>PUP.Dealio
G2 - GCE: Preference [User Data\Default] [icdlfehblmklkikfigmjhbmmpmkmpooj] Domain Error Assistant v.1.2 (Désactivé) =>PUP.Dealio
G2 - GCE: Preference [User Data\Default] [mhkaekfpcppmmioggniknbnbdbcigpkk] Slick Savings v.2.4 (Désactivé) =>PUP.Dealio
G2 - GCE: Preference [User Data\Default] [mljcmcfdefgabjpjfdcicafnjndoenec] Yahoo! France v.2013.4.18.26602 (Activé)
G2 - GCE: Preference [User Data\Default] [nangjmijgboblcmlpeedobafiohnalci] Connexion v.2013.4.18.26489 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pfndaklgolladniicklehhancnlgocpp] Amazon Shopping Assistant by Spigot v.1.0 (Désactivé) =>PUP.Dealio
M3 - MFPP: Plugins - [MED_BEN] -- C:\Users\MED_BEN\AppData\Roaming\Mozilla\Firefox\Profiles\v4cd57ex.default\searchplugins\babylon.xml =>PUP.Babylon
M3 - MFPP: Plugins - [MED_BEN] -- C:\Users\MED_BEN\AppData\Roaming\Mozilla\Firefox\Profiles\v4cd57ex.default\searchplugins\delta.xml =>Toolbar.DeltaSearch
M2 - MFEP: prefs.js [MED_BEN - v4cd57ex.default\savingsslider@mybrowserbar.com] [] Slick Savings v2.8 (..) =>PUP.Dealio
M2 - MFEP: prefs.js [MED_BEN - v4cd57ex.default\{58d2a791-6199-482f-a9aa-9b725ec61362}] [] Start Page v1.0 (..)
O3 - Toolbar: (no name) - [HKLM]{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} Orphan key
O4 - GS\QuickLaunch [MED_BEN]: Babylon.lnk . (...) -- C:\Users\MED_BEN\Desktop\Babylon\Babylon.exe (.not file.) =>PUP.Babylon
O4 - GS\QuickLaunch [MED_BEN]: QQPlayer.lnk . (.Technologie de Tencent - QQ Player.) -- C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>Adware.TencentAddressBar
O4 - GS\Program [MED_BEN]: DDLManager.lnk . (...) -- C:\Users\MED_BEN\AppData\Roaming\Microsoft\Installer\{466172B0-0DE8-4302-BABA-41B631A6A09C}\_7CE0113F367BEC00A9CE3C.exe =>Adware.Boxore
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -- C:\Users\MED_BEN\Desktop\Babylon\Utils\BabylonIEPI.dll (.not file.) =>PUP.Babylon
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMS.job [268]
[HKCU\Software\1ClickDownload] =>PUP.1ClickDownloader
[HKCU\Software\5f4dfdcb03ab910] =>Hijacker.Hijacker.Eazel
[HKCU\Software\APN PIP]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\Babylon] =>PUP.Babylon
[HKCU\Software\ConEmu]
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\Cyotek]
[HKCU\Software\DataMngr] =>PUP.Datamngr
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Luminitix]
[HKCU\Software\PIP]
[HKCU\Software\Tencent] =>Adware.TencentAddressBar
[HKCU\Software\www.cybertokyo.net]
[HKLM\Software\Babylon] =>PUP.Babylon
[HKLM\Software\ConEmu]
[HKLM\Software\DataMngr] =>PUP.Datamngr
[HKLM\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\InstallIQ]
[HKLM\Software\PIP]
[HKLM\Software\Tencent] =>Adware.TencentAddressBar
O43 - CFD: 24/09/2012 - 11:24:52 - [89,178] ----D C:\Program Files\Tencent =>Adware.TencentAddressBar
O43 - CFD: 23/12/2013 - 10:20:43 - [0,437] ----D C:\Program Files\Common Files\Spigot =>PUP.Dealio
O43 - CFD: 29/10/2013 - 10:45:59 - [0] ----D C:\ProgramData\APN
O43 - CFD: 15/06/2013 - 15:35:21 - [3,627] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 24/09/2012 - 11:27:10 - [0] ----D C:\ProgramData\Tencent =>Adware.TencentAddressBar
O43 - CFD: 04/10/2012 - 11:58:45 - [0] ----D C:\ProgramData\xml_param
O43 - CFD: 03/04/2013 - 11:31:01 - [0] ----D C:\Users\MED_BEN\AppData\Roaming\AlMAdinahMushaf
O43 - CFD: 05/06/2013 - 11:13:30 - [0,457] ----D C:\Users\MED_BEN\AppData\Roaming\B1Toolbar =>Hijacker.SearchB1org
O43 - CFD: 27/02/2013 - 13:05:35 - [0,301] ----D C:\Users\MED_BEN\AppData\Roaming\Babylon =>PUP.Babylon
O43 - CFD: 29/10/2013 - 11:31:12 - [0,417] ----D C:\Users\MED_BEN\AppData\Roaming\defaulttab =>Adware.Bandoo
O43 - CFD: 07/01/2013 - 10:16:03 - [0,026] ----D C:\Users\MED_BEN\AppData\Roaming\Offline Explorer
O43 - CFD: 11/04/2013 - 12:32:58 - [6,152] ----D C:\Users\MED_BEN\AppData\Roaming\OpenCandy =>Adware.OpenCandy
O43 - CFD: 11/03/2014 - 10:50:19 - [117,063] ----D C:\Users\MED_BEN\AppData\Roaming\Popcorn Time
O43 - CFD: 22/12/2013 - 09:35:40 - [0] ----D C:\Users\MED_BEN\AppData\Roaming\Slick Savings =>PUP.Dealio
O43 - CFD: 24/09/2012 - 11:27:10 - [13,540] ----D C:\Users\MED_BEN\AppData\Roaming\Tencent =>Adware.TencentAddressBar
O43 - CFD: 15/12/2013 - 14:44:31 - [0] ----D C:\Users\MED_BEN\AppData\Roaming\wp_update =>PUP.WpManager
O43 - CFD: 15/06/2013 - 15:36:02 - [0,020] ----D C:\Users\MED_BEN\AppData\Local\Babylon =>PUP.Babylon
O43 - CFD: 19/01/2014 - 15:03:51 - [0,001] ----D C:\Users\MED_BEN\AppData\Local\Cyotek
O43 - CFD: 17/03/2014 - 12:45:26 - [10,824] ----D C:\Users\MED_BEN\AppData\Local\Popcorn-Time
O43 - CFD: 20/11/2013 - 10:41:06 - [0,021] ----D C:\Users\MED_BEN\AppData\Local\Slick Savings =>PUP.Dealio
O43 - CFD: 11/03/2014 - 10:50:20 - [0,002] ----D C:\Users\MED_BEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time
O43 - CFD: 24/09/2012 - 11:24:54 - [0,004] ----D C:\Users\MED_BEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tencent =>Adware.TencentAddressBar
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.aflt", "babsst srcExt=def");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.dfltLng", "en");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.ffxUnstlRst", true);
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.id", "421546ea000000000000000000000000");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.instlDay", "15871");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.smplGrp", "none");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.vrsn", "1.8.21.5");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.vrsnTs", "1.8.21.515:35:58");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta.vrsni", "1.8.21.5");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta_i.babExt", "");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta_i.babTrack", "affID=119546&tl=gbn373638");
O69 - SBI: prefs.js [MED_BEN - v4cd57ex.default] user_pref("extensions.delta_i.srcExt", "");
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Babylon) - http://search.babylon.com =>PUP.Babylon
O69 - SBI: SearchScopes [HKCU] {A669A257-8345-435A-9B33-B9C9D87172BE} - (Search Here) - http://www.mysearchresults.com =>Adware.MyWebSearch
[MD5.87948212C71A773AEF4C68029BFAE924] [SPRF][15/12/2013] (.No owner - wp_update scheduler.) -- C:\Users\MED_BEN\AppData\Roaming\~brcysgk.exe [493272] =>PUP.WpManager
[HKCU\Software\5f4dfdcb03ab910\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel
[HKCU\Software\5f4dfdcb03ab910\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80" =>Hijacker.Hijacker.Eazel
[HKCU\Software\5f4dfdcb03ab910] =>PUP.Babylon^
[HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde] =>Toolbar.DeltaSearch^
[HKLM\Software\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj] =>PUP.Dealio^
[HKLM\Software\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj] =>PUP.Dealio^
[HKLM\Software\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk] =>PUP.Dealio^
[HKLM\Software\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp] =>PUP.Dealio^
[HKLM\Software\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}] =>Adware.RecordNRip
[HKLM\Software\Classes\CLSID\{35b8892d-c3fb-4d88-990d-31db2ebd72bd}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}] =>Adware.RecordNRip
[HKLM\Software\Classes\CLSID\{5eb0259d-ab79-4ae6-a6e6-24ffe21c3da4}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}] =>Adware.RecordNRip
[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] =>Adware.RecordNRip
[HKLM\Software\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Office\Word\Addins\BabylonOfficeAddin.OfficeAddin] =>PUP.Babylon
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Office\PowerPoint\Addins\BabylonOfficeAddin.OfficeAddin] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}] =>PUP.BearShare
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\NCTAudioCDGrabber2.DLL] =>PUP.BearShare
[HKLM\Software\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb] =>PUP.Babylon
[HKCU\Software\1ClickDownload] =>PUP.1ClickDownloader
[HKCU\Software\APN PIP] =>Toolbar.Ask
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\DataMngr] =>Adware.Bandoo
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\Iminent] =>Adware.IMBooster
[HKCU\Software\PIP] =>Toolbar.Ask
[HKLM\Software\PIP] =>Toolbar.Ask
[HKCU\Software\AppDataLow\Software\Search Settings] =>PUP.Dealio
[HKLM\Software\Microsoft\Tracing\Babylon_RASAPI32] =>PUP.Babylon
[HKLM\Software\Microsoft\Tracing\Babylon_RASMANCS] =>PUP.Babylon
[HKLM\Software\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\InstallIQ] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>PUP.Babylon
[HKLM\Software\Microsoft\Internet Explorer\extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>PUP.Babylon
[HKLM\Software\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}] =>PUP.Babylon
[HKLM\Software\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}] =>PUP.Babylon
[HKLM\Software\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}] =>PUP.Babylon
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\Interface\{928FE5E7-D557-46B7-8AF6-17ACCE1FB4ED}] =>Toolbar.Conduit
[HKLM\Software\Classes\.bdc] =>Toolbar.Conduit
[HKLM\Software\Classes\.bgl] =>Toolbar.Conduit
[HKLM\Software\Classes\.bof] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Tracing\apnstub_RASAPI32] =>Toolbar.Ask
[HKLM\Software\Microsoft\Tracing\apnstub_RASMANCS] =>Toolbar.Ask
[HKLM\Software\Classes\SpeedUpMyPC] =>Rogue.SpeedUpMyPC
C:\Users\MED_BEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Toolbar.DeltaSearch^
C:\Users\MED_BEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Roaming\Mozilla\Firefox\Profiles\v4cd57ex.default\extensions\savingsslider@mybrowserbar.com =>PUP.Dealio^
C:\Program Files\Tencent =>Adware.TencentAddressBar^
C:\Program Files\Common Files\Spigot =>PUP.Dealio^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\Tencent =>Adware.TencentAddressBar^
C:\Users\MED_BEN\AppData\Roaming\B1Toolbar =>Hijacker.SearchB1org^
C:\Users\MED_BEN\AppData\Roaming\Babylon =>PUP.Babylon^
C:\Users\MED_BEN\AppData\Roaming\defaulttab =>Adware.Bandoo^
C:\Users\MED_BEN\AppData\Roaming\OpenCandy =>Adware.OpenCandy^
C:\Users\MED_BEN\AppData\Roaming\Slick Savings =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Roaming\Tencent =>Adware.TencentAddressBar^
C:\Users\MED_BEN\AppData\Roaming\wp_update =>PUP.WpManager^
C:\Users\MED_BEN\AppData\Local\Babylon =>PUP.Babylon^
C:\Users\MED_BEN\AppData\Local\Slick Savings =>PUP.Dealio^
C:\Users\MED_BEN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tencent =>Adware.TencentAddressBar^
C:\Program Files\SearchProtect =>Toolbar.Conduit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon =>PUP.Babylon
C:\Users\MED_BEN\AppData\Roaming\WebPlayerBdd =>Adware.SocialSkinz
C:\Users\MED_BEN\AppData\Local\SearchProtect =>Toolbar.Conduit
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKCU\Software\Babylon] =>PUP.Babylon^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\Tencent] =>Adware.TencentAddressBar^
[HKLM\Software\Babylon] =>PUP.Babylon^
[HKLM\Software\Tencent] =>Adware.TencentAddressBar^
C:\Users\MED_BEN\AppData\Roaming\~brcysgk.exe =>PUP.WpManager^
[HKCU\Software\5f4dfdcb03ab910\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel^
[HKCU\Software\5f4dfdcb03ab910] =>PUP.Babylon^^


EmptyFlash
EmptyTemp
EmptyClsid
FirewallRaz
Proxyfix
SysRestore

Publicité


Signaler le contenu de ce document

Publicité