cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Script ZHPFix


Lignes indésirables :
[MD5.3A13CFFC1233ADD8F2FAFE33BE14FAD4] - (.Cherished Technololgy LIMITED - IePlugin Service.) -- C:\ProgramData\IePluginServices\PluginService.exe [704112] [PID.1236] =>PUP.IePluginService
M0 - MFSP: prefs.js [Etienne - 6ei3fr0c.default] http://www.sweet-page.com =>PUP.SweetPage
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com =>PUP.SweetPage
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com =>PUP.SweetPage
O2 - BHO: IETabPage Class [64Bits] - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files (x86)\SupTab\SupTab.dll =>PUP.SupTab
O4 - GS\Desktop [Public]: RegClean Pro.lnk . (.Systweak Inc - RegClean Pro.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe =>Rogue.RegistryPowerCleaner
O20 - AppInit_DLLs: . (.Skytech Co., Ltd. - Skytech.) - C:\Program Files (x86)\SupTab\SearchProtect64.dll =>PUP.SearchProtect
O23 - Service: IePlugin Services (IePluginServices) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService
O23 - Service: Update Rock Turner (Update Rock Turner) . (...) - C:\Program Files (x86)\Rock Turner\updateRockTurner.exe (.not file.) =>PUP.RockTurner
[MD5.039097DBE32D1356E034E3A3F20063FC] [APT] [RegClean Pro_DEFAULT] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [7912792] =>Rogue.RegistryPowerCleaner
[MD5.039097DBE32D1356E034E3A3F20063FC] [APT] [RegClean Pro_UPDATES] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [7912792] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{003DD75A-1006-4C33-B4F7-4F78671AE0D9}] (...) -- C:\Users\Etienne\AppData\Roaming\sweet-page\UninstallManager.exe (.not file.) [0] =>PUP.SweetPage
O39 - APT: RegClean Pro_DEFAULT - (.Systweak Inc.) -- C:\Windows\Tasks\RegClean Pro_DEFAULT.job [280] =>Rogue.RegistryPowerCleaner
O39 - APT: RegClean Pro_DEFAULT - (.Systweak Inc.) -- C:\Windows\System32\Tasks\RegClean Pro_DEFAULT [280] =>Rogue.RegistryPowerCleaner
O39 - APT: RegClean Pro_UPDATES - (.Systweak Inc.) -- C:\Windows\Tasks\RegClean Pro_UPDATES.job [288] =>Rogue.RegistryPowerCleaner
O39 - APT: RegClean Pro_UPDATES - (.Systweak Inc.) -- C:\Windows\System32\Tasks\RegClean Pro_UPDATES [288] =>Rogue.RegistryPowerCleaner
O42 - Logiciel: RegClean-Pro - (.Systweak Inc.) [HKLM][64Bits] -- RegClean-Pro_is1 =>Rogue.RegistryPowerCleaner
[HKCU\Software\AnyProtect] =>PUP.AnyProtect
[HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf
[HKCU\Software\AppDataLow\Software\DynConIE] =>PUP.DynConIE
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\FreeSoftToday] =>Adware.FreeSoftToday
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab
[HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab
[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager
[HKLM\Software\Wow6432Node\sweet-pageSoftware] =>PUP.SweetPage
O43 - CFD: 14/05/2014 - 09:21:34 - [0] ----D C:\Program Files (x86)\iMesh Applications =>PUP.iMesh
O43 - CFD: 25/05/2014 - 11:00:43 - [] ----D C:\Program Files (x86)\RegClean Pro =>Rogue.RegistryPowerCleaner
O43 - CFD: 29/05/2014 - 16:30:42 - [0] ----D C:\Program Files (x86)\ScanTack => PUP.ScanTack
O43 - CFD: 29/05/2014 - 16:06:05 - [] ----D C:\Program Files (x86)\SupTab =>PUP.SupTab
O43 - CFD: 25/05/2014 - 18:26:46 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 29/05/2014 - 16:06:12 - [] ----D C:\ProgramData\IePluginServices =>PUP.IePluginService
O43 - CFD: 29/05/2014 - 16:05:59 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 25/05/2014 - 18:26:46 - [] ----D C:\Users\Etienne\AppData\Roaming\Babylon =>PUP.Babylon
O43 - CFD: 25/05/2014 - 21:21:25 - [] ----D C:\Users\Etienne\AppData\Roaming\OpenCandy =>Adware.OpenCandy
O43 - CFD: 29/05/2014 - 16:09:26 - [] ----D C:\Users\Etienne\AppData\Roaming\SupTab =>PUP.SupTab
O43 - CFD: 25/05/2014 - 18:26:47 - [] ----D C:\Users\Etienne\AppData\Local\Babylon =>PUP.Babylon
O43 - CFD: 29/05/2014 - 16:22:16 - [] ----D C:\Users\Etienne\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RockTurner_RASAPI32 =>PUP.RockTurner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RockTurner_RASMANCS =>PUP.RockTurner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateRockTurner_RASAPI32 =>PUP.RockTurner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateRockTurner_RASMANCS =>PUP.RockTurner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32 =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS =>PUP.Wajam
SS - | Auto 10/07/1658 0 | (Update Rock Turner) . (...) - C:\Program Files (x86)\Rock Turner\updateRockTurner.exe =>PUP.RockTurner
SR - | Auto 08/05/2014 704112 | (IePluginServices) . (.Cherished Technololgy LIMITED.) - C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] =>PUP.SupTab^
[HKLM\SYSTEM\CurrentControlSet\Services\IePluginServices] =>PUP.IePluginService^
[HKLM\SYSTEM\CurrentControlSet\Services\Update Rock Turner] =>PUP.RockTurner^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\RegClean-Pro_is1] =>Rogue.RegistryPowerCleaner^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKCU\Software\InstallCore] =>Adware.InstallCore
C:\Program Files (x86)\iMesh Applications =>PUP.iMesh^
C:\Program Files (x86)\RegClean Pro =>Rogue.RegistryPowerCleaner^
C:\Program Files (x86)\SupTab =>PUP.SupTab^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\IePluginServices =>PUP.IePluginService^
C:\ProgramData\WPM =>PUP.WpManager^
C:\Users\Etienne\AppData\Roaming\Babylon =>PUP.Babylon^
C:\Users\Etienne\AppData\Roaming\OpenCandy =>Adware.OpenCandy^
C:\Users\Etienne\AppData\Roaming\SupTab =>PUP.SupTab^
C:\Users\Etienne\AppData\Local\Babylon =>PUP.Babylon^
C:\Users\Etienne\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro =>Rogue.RegistryPowerCleaner
C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService^
C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe =>Rogue.RegistryPowerCleaner^
C:\Windows\Tasks\RegClean Pro_DEFAULT.job =>Rogue.RegistryPowerCleaner^
C:\Windows\System32\Tasks\RegClean Pro_DEFAULT =>Rogue.RegistryPowerCleaner^
C:\Windows\Tasks\RegClean Pro_UPDATES.job =>Rogue.RegistryPowerCleaner^
C:\Windows\System32\Tasks\RegClean Pro_UPDATES =>Rogue.RegistryPowerCleaner^
[HKCU\Software\AnyProtect] =>PUP.AnyProtect^
[HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf^
[HKCU\Software\AppDataLow\Software\DynConIE] =>PUP.DynConIE^
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive^
[HKLM\Software\Wow6432Node\FreeSoftToday] =>Adware.FreeSoftToday^
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab^
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager^
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab^
[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^
[HKLM\Software\Wow6432Node\sweet-pageSoftware] =>PUP.SweetPage^
O2 - BHO: (no name) [64Bits] - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
O15 - Trusted Zone: [HKCU\...\Domains\www] http.samsungsetup.com => ZHPHosts Unknown Domain

Lignes superflues ou inutiles :
[HKCU\Software\Systweak] => Systweak Inc
[HKLM\Software\Wow6432Node\Systweak] => Systweak Inc
O43 - CFD: 29/05/2014 - 16:23:52 - [0] ----D C:\Program Files (x86)\predm
O43 - CFD: 25/05/2014 - 11:00:44 - [] ----D C:\Users\Etienne\AppData\Roaming\Systweak => Systweak Inc

Lignes d'optimisation du démarrage :
OPT:O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe (.not file.)
OPT:O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
[HKLM\Software\BrowserChoice]
OPT:SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

EmptyClsid
Ifeofix
Proxyfix
FirewallRaz
ShortcutFix
emptytemp
emptyflash


Publicité


Signaler le contenu de ce document

Publicité