Script ZHPFix FirewallRaz EmptyPrefetch EmptyTemp EmptyFlash SysRestore [MD5.E2A09CE4D360A2DD5020B469D283E663] [APT] [Run_Bobby_Browser] (...) -- C:\Users\Martin\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.) [324224] (.Activate.) =>PUP.Optional.BoBrowser O39 - APT: crash_service - (...) -- C:\Windows\System32\Tasks\crash_service [324224] (.Orphan.) =>PUP.Optional.BoBrowser O39 - APT: Run_Bobby_Browser - (...) -- C:\Windows\System32\Tasks\Run_Bobby_Browser O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\Martin\AppData\Roaming\cacaoweb\cacaoweb.exe O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILFE.EXE (.not file.) O4 - HKCU\..\Run: [CrashService] C:\Users\Martin\AppData\Local\BoBrowser\Application\crash_service.exe (.not file.) =>PUP.Optional.BoBrowser O4 - HKCU\..\Run: [WindApp] C:\Users\Martin\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>.Superfluous.Nosibay O4 - HKCU\..\Run: [Selection Tools] C:\Users\Martin\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe (.not file.) =>.Superfluous.Nosibay O4 - HKLM\..\Wow6432Node\Run: [mpck_fr_017010146] (.Orphan.) O4 - HKUS\S-1-5-21-3883182004-1232709763-1425186247-1001\..\Run: [cacaoweb] . (...) -- C:\Users\Martin\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O4 - HKUS\S-1-5-21-3883182004-1232709763-1425186247-1001\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILFE.EXE (.not file.) O4 - HKUS\S-1-5-21-3883182004-1232709763-1425186247-1001\..\Run: [CrashService] C:\Users\Martin\AppData\Local\BoBrowser\Application\crash_service.exe (.not file.) =>PUP.Optional.BoBrowser O4 - HKUS\S-1-5-21-3883182004-1232709763-1425186247-1001\..\Run: [WindApp] C:\Users\Martin\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>.Superfluous.Nosibay O4 - HKUS\S-1-5-21-3883182004-1232709763-1425186247-1001\..\Run: [Selection Tools] C:\Users\Martin\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe (.not file.) =>.Superfluous.Nosibay G0 - GCSP: Preferences [User Data\Default][HomePage] http://bd.xingcloud.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://r.goo.mx G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.oursurfing.com =>PUP.Optional.OurSurfing G0 - GCSP: Preferences [User Data\Default][HomePage] http://xa.xingcloud.com G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.oursurfing.com/ P2 - EXT: (.http://www.cacaoweb.org/ - cacaoweb.) -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\wje088ex.default\extensions\cacaoweb@cacaoweb.org =>.Superfluous.CacaoWeb O2 - BHO: IMinent WebBooster [64Bits] - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (.Orphan.) O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC} C:\Program Files (x86)\Framed Display O43 - CFD: 16/11/2015 - [] D -- C:\Program Files (x86)\Iminent O43 - CFD: 09/10/2014 - [] D -- C:\ProgramData\APN =>Toolbar.Ask C:\ProgramData\TempMoudleSet O43 - CFD: 14/10/2014 - [] D -- C:\Users\Martin\AppData\Roaming\Astromenda O43 - CFD: 16/11/2015 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\ScreenSnapshotTool O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("extensions.xpiState", "{\"app-profile\":{\"cacaoweb@cacaoweb.org\":{\"d\":\"C:\\\\Users\\\\Martin\\\\AppData\\\\Roaming[...] =>.Superfluous.CacaoWeb O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.LayoutId", "1"); =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0,\"s\":0,\"es\":1}"); =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.adapters", "{\"widgets.livesticker.com\":{\"CountryCode\":\"FR\",\"NoAds\":false,\"Status\":2,\"AdapterKey\":\"[...] =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.cifs", "0"); =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"ad[...] =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.version", "9.38.3.2"); =>PUP.Optional.IMBooster O69 - SBI: prefs.js [Martin - wje088ex.default] user_pref("iminent.versioning", "{\"CurrentVersion\":\"9.38.3.2\",\"InstallEventCTime\":1447696658785,\"InstallEvent\":\"True\"}")[...] =>PUP.Optional.IMBooster O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (oursurfing) - http://www.oursurfing.com/ =>PUP.Optional.OurSurfing O69 - SBI: SearchScopes [HKLM] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (oursurfing) - http://www.oursurfing.com/ =>PUP.Optional.OurSurfing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect HKLM\SOFTWARE\Wow6432Node\Clara =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\Conduit =>.Superfluous.Conduit HKLM\SOFTWARE\Wow6432Node\Framed Display =>PUP.Optional.FramedDisplay HKLM\SOFTWARE\Wow6432Node\ihpmserver =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster HKLM\SOFTWARE\Wow6432Node\oursurfingSoftware =>PUP.Optional.OurSurfing HKLM\SOFTWARE\Wow6432Node\RayDld =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive HKCU\SOFTWARE\BoBrowser =>PUP.Optional.BoBrowser HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\Conduit =>.Superfluous.Conduit HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean HKCU\SOFTWARE\Framed Display =>PUP.Optional.FramedDisplay HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster HKCU\SOFTWARE\InstallCore =>Adware.InstallCore HKCU\SOFTWARE\MustangExt =>.Superfluous.MustangBrowser HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer HKCU\SOFTWARE\Store =>PUP.Optional.Generic HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader HKCU\SOFTWARE\WTools =>.Superfluous.Nosibay C:\Users\Martin\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock C:\Users\Martin\AppData\Roaming\PDAppFlex =>Trojan.Elpman C:\Users\Martin\AppData\Roaming\Store =>.Superfluous.Nosibay C:\Users\Martin\AppData\Roaming\WTools =>.Superfluous.Nosibay C:\Users\Martin\AppData\Local\CrashRpt =>.Superfluous.CrashReports HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} =>PUP.Optional.OurSurfing HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} =>PUP.Optional.OurSurfing