Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17631 (winblue_r7.150111-1500)) -- C:\Windows\SysWOW64\ieframe.dll
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: ContentBlockerBrowserHelperObject [64Bits] - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} . (.Kaspersky Lab ZAO - Content Blocker Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject [64Bits] - {73455575-E40C-433C-9784-C78DC7761455} . (.Kaspersky Lab ZAO - Virtual Keyboard Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Safe Money Plugin [64Bits] - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (.Kaspersky Lab ZAO - Safe Money Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.dll =>.Microsoft Corporation
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - URL Advisor Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - GS\QuickLaunch [MNR]: �Torrent.lnk . (.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\Desktop [MNR]: �Torrent.lnk . (.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKLM\..\Wow6432Node\Run: [ITSecMng] . (.TOSHIBA CORPORATION - IT Security Manager for Toshiba Stack.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
O4 - HKLM\..\Wow6432Node\Run: [HSPALauncher] . (.Pas de propri�taire - HSDPALauncher MFC Application.) -- C:\Program Files (x86)\HSPA USB Modem\HSPALauncher.exe
O9 - Extra button: Cliquer pour appeler Lync [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
O17 - HKLM\System\CCS\Services\Tcpip\..\{FD77BB39-550E-48B5-93E2-6DD95DA0D0BC}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS1\Services\Tcpip\..\{7EED1A05-F9A6-4CC2-B63E-425E83AF6EA9}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FD77BB39-550E-48B5-93E2-6DD95DA0D0BC}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{7EED1A05-F9A6-4CC2-B63E-425E83AF6EA9}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
[HKCU\Software\BitTorrent] =>P2P.BitTorrent
[HKLM\Software\Wow6432Node\do-searchSoftware] =>PUP.DoSearches
O43 - CFD: 23/05/2015 - 17:45:03 - [] ----D C:\Program Files (x86)\uTorrent =>P2P.�Torrent
O43 - CFD: 27/05/2015 - 12:59:07 - [] ----D C:\Users\MNR\AppData\Roaming\do-search =>PUP.DoSearches
O43 - CFD: 26/05/2015 - 11:54:57 - [] ----D C:\Users\MNR\AppData\Roaming\uTorrent =>P2P.�Torrent
O51 - MPSK:{35d07e17-03ee-11e5-aa6d-feddfe2de230}\AutoRun\command. (...) -- G:\iLinker.exe (.not file.)
O51 - MPSK:{a893c46e-01a5-11e5-8f1c-b4749f9d22ff}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)
O51 - MPSK:{a893c474-01a5-11e5-8f1c-b4749f9d22ff}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\CNAP2 Launcher [Key] . (...) -- C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.exe (.not file.)
O61 - LFC: 23/05/2015 - 14:46:47 ---A- . (.BitTorrent Inc..) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe [1694560] =>P2P.BitTorrent
O61 - LFC: 23/05/2015 - 14:46:47 ---A- . (.BitTorrent Inc..) -- C:\Users\MNR\AppData\Roaming\uTorrent\updates\3.4.3_40298.exe [1694560] =>P2P.BitTorrent
D:\IDM\Programmes\ARC GIS + CRACK\ArcGIS 10.1 Crack\KeyGen.exe =>.Crack,Keygen
O87 - FAEL: "{B5F64683-B1DA-4959-B92A-8AC5C523AE6B}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{51673B22-1C51-4842-AC9A-304EF1E21C6C}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{5B6BA00E-9491-49A0-88E6-CBD0A1C637B3}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{D3AC05AF-6449-4A86-BE8C-80B0D23DA0E3}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent] =>P2P.BitTorrent^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster
C:\Program Files (x86)\uTorrent =>P2P.�Torrent^
C:\Users\MNR\AppData\Roaming\do-search =>PUP.DoSearches^
C:\Users\MNR\AppData\Roaming\uTorrent =>P2P.�Torrent^
[HKCU\Software\BitTorrent] =>P2P.BitTorrent^
[HKLM\Software\Wow6432Node\do-searchSoftware] =>PUP.DoSearches^
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17631 (winblue_r7.150111-1500)) -- C:\Windows\SysWOW64\ieframe.dll
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: ContentBlockerBrowserHelperObject [64Bits] - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} . (.Kaspersky Lab ZAO - Content Blocker Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject [64Bits] - {73455575-E40C-433C-9784-C78DC7761455} . (.Kaspersky Lab ZAO - Virtual Keyboard Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Safe Money Plugin [64Bits] - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (.Kaspersky Lab ZAO - Safe Money Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.dll =>.Microsoft Corporation
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - URL Advisor Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - GS\QuickLaunch [MNR]: �Torrent.lnk . (.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\Desktop [MNR]: �Torrent.lnk . (.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKLM\..\Wow6432Node\Run: [ITSecMng] . (.TOSHIBA CORPORATION - IT Security Manager for Toshiba Stack.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
O4 - HKLM\..\Wow6432Node\Run: [HSPALauncher] . (.Pas de propri�taire - HSDPALauncher MFC Application.) -- C:\Program Files (x86)\HSPA USB Modem\HSPALauncher.exe
O9 - Extra button: Cliquer pour appeler Lync [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
O17 - HKLM\System\CCS\Services\Tcpip\..\{FD77BB39-550E-48B5-93E2-6DD95DA0D0BC}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS1\Services\Tcpip\..\{7EED1A05-F9A6-4CC2-B63E-425E83AF6EA9}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FD77BB39-550E-48B5-93E2-6DD95DA0D0BC}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{7EED1A05-F9A6-4CC2-B63E-425E83AF6EA9}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
[HKCU\Software\BitTorrent] =>P2P.BitTorrent
[HKLM\Software\Wow6432Node\do-searchSoftware] =>PUP.DoSearches
O43 - CFD: 23/05/2015 - 17:45:03 - [] ----D C:\Program Files (x86)\uTorrent =>P2P.�Torrent
O43 - CFD: 27/05/2015 - 12:59:07 - [] ----D C:\Users\MNR\AppData\Roaming\do-search =>PUP.DoSearches
O43 - CFD: 26/05/2015 - 11:54:57 - [] ----D C:\Users\MNR\AppData\Roaming\uTorrent =>P2P.�Torrent
O51 - MPSK:{35d07e17-03ee-11e5-aa6d-feddfe2de230}\AutoRun\command. (...) -- G:\iLinker.exe (.not file.)
O51 - MPSK:{a893c46e-01a5-11e5-8f1c-b4749f9d22ff}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)
O51 - MPSK:{a893c474-01a5-11e5-8f1c-b4749f9d22ff}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\CNAP2 Launcher [Key] . (...) -- C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.exe (.not file.)
O61 - LFC: 23/05/2015 - 14:46:47 ---A- . (.BitTorrent Inc..) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe [1694560] =>P2P.BitTorrent
O61 - LFC: 23/05/2015 - 14:46:47 ---A- . (.BitTorrent Inc..) -- C:\Users\MNR\AppData\Roaming\uTorrent\updates\3.4.3_40298.exe [1694560] =>P2P.BitTorrent
D:\IDM\Programmes\ARC GIS + CRACK\ArcGIS 10.1 Crack\KeyGen.exe =>.Crack,Keygen
O87 - FAEL: "{B5F64683-B1DA-4959-B92A-8AC5C523AE6B}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{51673B22-1C51-4842-AC9A-304EF1E21C6C}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{5B6BA00E-9491-49A0-88E6-CBD0A1C637B3}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{D3AC05AF-6449-4A86-BE8C-80B0D23DA0E3}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\MNR\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent] =>P2P.BitTorrent^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster
C:\Program Files (x86)\uTorrent =>P2P.�Torrent^
C:\Users\MNR\AppData\Roaming\do-search =>PUP.DoSearches^
C:\Users\MNR\AppData\Roaming\uTorrent =>P2P.�Torrent^
[HKCU\Software\BitTorrent] =>P2P.BitTorrent^
[HKLM\Software\Wow6432Node\do-searchSoftware] =>PUP.DoSearches^
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore