Script ZHPFix FirewallRaz EmptyPrefetch EmptyTemp EmptyFlash G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.4 (Désactivé) G2 - GCE: Preference [User Data\Default] [ieakfmpjhljbpbfpldjkddkjmmgjmgon] WebConnect v.1.0.0 (Désactivé) G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.1.1.5.3, (Désactivé) G2 - GCE: Preference [User Data\Default] [kmkdohofefokfmbnlbgebdapndacfklg] VisualBee v.1.26.113, (Désactivé) G2 - GCE: Preference [User Data\Default] [nchpfiddbhbdnagofhkjlaiaejmkdcla] Helper extension v.2.0 (Activé) G2 - GCE: Preference [User Data\Default] [okkbcpjgdooahcefofhjdpacngfecaaa] Lyrics-Fan v.1.132 (Désactivé) M2 - MFEP: prefs.js [Marie - by3loz8k.default\132] [] Lyrics-Fan v1.132 (..) M2 - MFEP: Extension [Marie - by3loz8k.default] 132 M2 - MFEP: Extension [Marie - by3loz8k.default] staged M2 - MFEP: Extension [Marie - by3loz8k.default] {cfcb809c-3a22-4616-a916-6c007bd9d920} M2 - MFEP: Extension [Marie - by3loz8k.default] {d8a25ef6-8a9c-459b-a8b1-7a2b0504190a} [MD5.00000000000000000000000000000000] [APT] [At1] (...) -- C:\Users\Marie\AppData\Roaming\PRINTA~1\PRINTA~1.exe (.not file.) O39 - APT: At1 - (...) -- C:\Windows\Tasks\At1.job O39 - APT: At1 - (...) -- C:\Windows\System32\Tasks\At1 [HKCU\Software\AppDataLow\Software\Lyrics_Fan] [HKCU\Software\AppDataLow\Software\Printatree] [HKLM\Software\BrowserChoice] O43 - CFD: 10/02/2015 - 15:48:05 - [] ----D C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB O51 - MPSK:{4d221aa7-1447-11e0-b4ff-001f3ccae0d2}\AutoRun\command. (...) -- D:\installer.exe (.not file.) O51 - MPSK:{c24ea916-7881-11e2-830e-001eec413f55}\AutoRun\command. (...) -- D:\Setup.exe (.not file.) O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [feature_enable_ie_compression] -- svchost.exe O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [feature_enable_ie_compression] -- svchost.exe [HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde] [HKLM\Software\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon] [HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] [HKLM\Software\Google\Chrome\Extensions\kmkdohofefokfmbnlbgebdapndacfklg] [HKLM\Software\Google\Chrome\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla] [HKLM\Software\Google\Chrome\Extensions\okkbcpjgdooahcefofhjdpacngfecaaa] [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5791B7D3-8B34-4218-9750-6A8E45D0AD32}] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311391106}] C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkdohofefokfmbnlbgebdapndacfklg C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\okkbcpjgdooahcefofhjdpacngfecaaa C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\by3loz8k.default\extensions\132 C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\by3loz8k.default\Smartbar [HKCU\Software\AppDataLow\Software\Lyrics_Fan] [HKCU\Software\AppDataLow\Software\Printatree] C:\Users\Marie\AppData\Local\Temp\uninst1.exe