Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
G2 - GCE: Preference [User Data\Default] [dhhjmlmdpcpiojiffodbldlkgcnaeogp] FromDocToPDF v.10.83.4.65262, (D�sactiv�)
O69 - SBI: SearchScopes [HKCU] {de13befe-8196-4d2c-864a-69fc4392ddc1} [DefaultScope] - (Search The Web) - http://www.findamo.com =>Adware.IMBooster
HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASAPI32 =>PUP.DealKeeper
HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASMANCS =>PUP.DealKeeper
G2 - GCE: Preference [User Data\Default] [aaaaadgepjkdffhjbkfjgnnffnfcffbg] Ask Search v. ()
G2 - GCE: Preference [User Data\Default] [cdenlcnfdjepagejpfajlkicggieknab] Musique Chansons joueur v.1.7 (Activ�)
G2 - GCE: Preference [User Data\Default] [elmbeipbbjbebncfmbgeegnlgjbfbdme] Saftyweb v.0.2 (D�sactiv�)
G2 - GCE: Preference [User Data\Default] [hjnhcgkngeeahimbfhejeaiijecekhba] ClixAddon v.0.84, (Activ�)
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdenlcnfdjepagejpfajlkicggieknab [Musique Chansons joueur]
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\elmbeipbbjbebncfmbgeegnlgjbfbdme [Saftyweb]
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjnhcgkngeeahimbfhejeaiijecekhba [ClixAddon]
[HKCU\Software\SysDispatch]
[HKCU\Software\aScRozvrhy]
[HKCU\Software\aSc]
O43 - CFD: 15/08/2014 - 23:18:21 - [] ----D C:\Program Files\Waseet303
O43 - CFD: 19/10/2014 - 18:37:35 - [] ----D C:\ProgramData\22f8e004945b2619
O43 - CFD: 19/10/2014 - 14:07:23 - [] ----D C:\Users\youri\AppData\Local\CodecPerformer
O43 - CFD: 19/10/2014 - 14:07:36 - [] ----D C:\Users\youri\AppData\Local\MatroskaSplitter
O43 - CFD: 20/10/2014 - 21:41:08 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aSc Timetables
O43 - CFD: 15/08/2014 - 23:18:22 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WASEET303
O44 - LFC:[MD5.ECD279E3BF3D634A8291E49230030FCF] - 19/10/2014 - 21:12:29 ---A- . (...) -- C:\Windows\BRRBCOM.INI [7887]
O61 - LFC: 17/10/2014 - 20:12:08 ---A- . (.SQLite Development Team.) -- C:\Users\youri\AppData\Local\Temp\sqlite3.dll [665682]
O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\Quarantine.exe [448000]
O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\utt51A9.tmp.bat [101]
[MD5.04A10BF0F13E28751EEC78B617F4CA40] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407513586.bdinstall.bin [1064721]
[MD5.5E67C715AF5DC78D7EAA1E280F402990] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407515586.bdinstall.bin [264269]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
G1 - GCS: Preference [User Data\Default] None
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O61 - LFC: 19/10/2014 - 20:12:15 ---A- . (.AVAST Software.) -- C:\Users\youri\Downloads\Programs\avast_internet_security_setup_online.exe [4834344]
O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup.exe [1677920]
O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup_3.6.0.248.exe [22690600]
G1 - GCS: Preference [User Data\Default] http://www.search.ask.com
O42 - Logiciel: Search App by Ask - (.APN, LLC.) [HKLM] -- {5245414C-312D-5350-00A7-A758B70C1200}
O45 - LFCP:[MD5.DD2836F0768FEB191E3D0EA84E48CADC] - 18/10/2014 - 20:28:49 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-1CA1ED12.pf
O45 - LFCP:[MD5.4CCFEDDAA1AE61A5D9917E943B1FD12B] - 18/10/2014 - 20:16:24 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-2F7C3395.pf
O45 - LFCP:[MD5.19CF41B09D46DB587DCBCC53FB2156F6] - 18/10/2014 - 20:12:06 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-42567A18.pf
O45 - LFCP:[MD5.9CAD95DA61F4C4770FA4EA50CE73CB00] - 18/10/2014 - 20:07:40 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-5530C09B.pf
[MD5.D8C2EA9DD71F6CDB0608D8BAD8E211B5] [WIS][15/10/2014] (.APN, LLC - Search App by Ask.) -- C:\Windows\Installer\2efd719.msi [507904]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-312D-5350-00A7-A758B70C1200}]
C:\Windows\Installer\2efd719.msi
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = www.google.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems - Creative Cloud Desktop Plugin.v_2_0_0_0.) (No version) -- (.not file.)
O9 - Extra button: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll =>.Microsoft Corporation
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O17 - HKLM\System\CS2\Services\Tcpip\..\{64374D07-9662-4C2B-B1BA-02C97666E5FC}: NameServer = 208.67.222.222 208.67.220.220
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0]
ShortcutFix
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore
G2 - GCE: Preference [User Data\Default] [dhhjmlmdpcpiojiffodbldlkgcnaeogp] FromDocToPDF v.10.83.4.65262, (D�sactiv�)
O69 - SBI: SearchScopes [HKCU] {de13befe-8196-4d2c-864a-69fc4392ddc1} [DefaultScope] - (Search The Web) - http://www.findamo.com =>Adware.IMBooster
HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASAPI32 =>PUP.DealKeeper
HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASMANCS =>PUP.DealKeeper
G2 - GCE: Preference [User Data\Default] [aaaaadgepjkdffhjbkfjgnnffnfcffbg] Ask Search v. ()
G2 - GCE: Preference [User Data\Default] [cdenlcnfdjepagejpfajlkicggieknab] Musique Chansons joueur v.1.7 (Activ�)
G2 - GCE: Preference [User Data\Default] [elmbeipbbjbebncfmbgeegnlgjbfbdme] Saftyweb v.0.2 (D�sactiv�)
G2 - GCE: Preference [User Data\Default] [hjnhcgkngeeahimbfhejeaiijecekhba] ClixAddon v.0.84, (Activ�)
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdenlcnfdjepagejpfajlkicggieknab [Musique Chansons joueur]
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\elmbeipbbjbebncfmbgeegnlgjbfbdme [Saftyweb]
G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjnhcgkngeeahimbfhejeaiijecekhba [ClixAddon]
[HKCU\Software\SysDispatch]
[HKCU\Software\aScRozvrhy]
[HKCU\Software\aSc]
O43 - CFD: 15/08/2014 - 23:18:21 - [] ----D C:\Program Files\Waseet303
O43 - CFD: 19/10/2014 - 18:37:35 - [] ----D C:\ProgramData\22f8e004945b2619
O43 - CFD: 19/10/2014 - 14:07:23 - [] ----D C:\Users\youri\AppData\Local\CodecPerformer
O43 - CFD: 19/10/2014 - 14:07:36 - [] ----D C:\Users\youri\AppData\Local\MatroskaSplitter
O43 - CFD: 20/10/2014 - 21:41:08 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aSc Timetables
O43 - CFD: 15/08/2014 - 23:18:22 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WASEET303
O44 - LFC:[MD5.ECD279E3BF3D634A8291E49230030FCF] - 19/10/2014 - 21:12:29 ---A- . (...) -- C:\Windows\BRRBCOM.INI [7887]
O61 - LFC: 17/10/2014 - 20:12:08 ---A- . (.SQLite Development Team.) -- C:\Users\youri\AppData\Local\Temp\sqlite3.dll [665682]
O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\Quarantine.exe [448000]
O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\utt51A9.tmp.bat [101]
[MD5.04A10BF0F13E28751EEC78B617F4CA40] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407513586.bdinstall.bin [1064721]
[MD5.5E67C715AF5DC78D7EAA1E280F402990] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407515586.bdinstall.bin [264269]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
G1 - GCS: Preference [User Data\Default] None
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O61 - LFC: 19/10/2014 - 20:12:15 ---A- . (.AVAST Software.) -- C:\Users\youri\Downloads\Programs\avast_internet_security_setup_online.exe [4834344]
O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup.exe [1677920]
O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup_3.6.0.248.exe [22690600]
G1 - GCS: Preference [User Data\Default] http://www.search.ask.com
O42 - Logiciel: Search App by Ask - (.APN, LLC.) [HKLM] -- {5245414C-312D-5350-00A7-A758B70C1200}
O45 - LFCP:[MD5.DD2836F0768FEB191E3D0EA84E48CADC] - 18/10/2014 - 20:28:49 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-1CA1ED12.pf
O45 - LFCP:[MD5.4CCFEDDAA1AE61A5D9917E943B1FD12B] - 18/10/2014 - 20:16:24 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-2F7C3395.pf
O45 - LFCP:[MD5.19CF41B09D46DB587DCBCC53FB2156F6] - 18/10/2014 - 20:12:06 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-42567A18.pf
O45 - LFCP:[MD5.9CAD95DA61F4C4770FA4EA50CE73CB00] - 18/10/2014 - 20:07:40 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-5530C09B.pf
[MD5.D8C2EA9DD71F6CDB0608D8BAD8E211B5] [WIS][15/10/2014] (.APN, LLC - Search App by Ask.) -- C:\Windows\Installer\2efd719.msi [507904]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-312D-5350-00A7-A758B70C1200}]
C:\Windows\Installer\2efd719.msi
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = www.google.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems - Creative Cloud Desktop Plugin.v_2_0_0_0.) (No version) -- (.not file.)
O9 - Extra button: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll =>.Microsoft Corporation
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O17 - HKLM\System\CS2\Services\Tcpip\..\{64374D07-9662-4C2B-B1BA-02C97666E5FC}: NameServer = 208.67.222.222 208.67.220.220
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0]
ShortcutFix
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore