Rapport de ZHPFix 2013.9.30.130 par Nicolas Coolman, Update du 30/09/2013 Fichier d'export Registre : Run by Nolirion at 02/10/2013 22:41:50 High Elevated Privileges : OK Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Recycle Bin emptied ========== Process memory ========== REMOVES: Memory Process: C:\Users\TEMP.Nolirion-PC\AppData\Local\Temp\Quarantine.exe ========== Registry keys ========== REMOVES: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179} REMOVES:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375 REMOVES:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5 REMOVES:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC REMOVES: HKCU\Software\IncrediMail REMOVES: HKLM\Software\Wow6432Node\IncrediMail REMOVES CLSID MPSK: {3ff03bf0-672a-11e2-950d-002215444ca0} REMOVES: [HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] REMOVES: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole ========== Registry values ========== REMOVES: Toolbar: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} ABSENT value Standard Profile: FirewallRaz : ABSENT value Domain Profile: FirewallRaz : No value present in the exception of registry key (FirewallRaz) ProxyFix : Proxy configuration successfully removed REMOVES ProxyServer Value REMOVES ProxyEnable Value REMOVES EnableHttp1_1 Value REMOVES ProxyHttp1.1 Value REMOVES ProxyOverride Value ========== Folders ========== REMOVES: C:\Program Files (x86)\ss helper REMOVES: C:\ProgramData\InstallMate REMOVES: C:\ProgramData\0 REMOVES: C:\Users\TEMP.Nolirion-PC\AppData\Local\Milftoon Deletes temporary Windows REMOVES Flash Cookies ========== Files ========== REMOVES: c:\programdata\microsoft\windows\start menu\programs\discipline.lnk REMOVES: c:\program files\discipline\discipline.exe REMOVES: c:\diskdefrag.log REMOVES: C:\ProgramData\1363875131.bdinstall.bin REMOVES:* c:\programdata\1363875131.bdinstall.bin REMOVES: C:\ProgramData\1363878944.bdinstall.bin REMOVES:* c:\programdata\1363878944.bdinstall.bin REMOVES: C:\ProgramData\1363880026.bdinstall.bin REMOVES:* c:\programdata\1363880026.bdinstall.bin REMOVES: C:\ProgramData\1363880591.bdinstall.bin REMOVES:* c:\programdata\1363880591.bdinstall.bin REMOVES: C:\ProgramData\1363881656.bdinstall.bin REMOVES:* c:\programdata\1363881656.bdinstall.bin REMOVES: C:\ProgramData\1373354920.bdinstall.bin REMOVES:* c:\programdata\1373354920.bdinstall.bin REMOVES: C:\ProgramData\1373362024.bdinstall.bin REMOVES:* c:\programdata\1373362024.bdinstall.bin REMOVES: C:\ProgramData\1373362710.bdinstall.bin REMOVES:* c:\programdata\1373362710.bdinstall.bin REMOVES: C:\ProgramData\1373364112.bdinstall.bin REMOVES:* c:\programdata\1373364112.bdinstall.bin REMOVES: C:\ProgramData\1373365143.bdinstall.bin REMOVES:* c:\programdata\1373365143.bdinstall.bin REMOVES: C:\ProgramData\1373367827.bdinstall.bin REMOVES:* c:\programdata\1373367827.bdinstall.bin REMOVES:* c:\users\temp.nolirion-pc\appdata\local\temp\quarantine.exe REMOVES: C:\Users\TEMP.Nolirion-PC\AppData\Local\Temp\~gu3-ver.dat REMOVES:* c:\users\temp.nolirion-pc\appdata\local\temp\~gu3-ver.dat REMOVES: C:\Users\TEMP.Nolirion-PC\AppData\Local\Temp\~upgrade.dat REMOVES:* c:\users\temp.nolirion-pc\appdata\local\temp\~upgrade.dat Deletes temporary Windows REMOVES Flash Cookies ========== Scheduled task ========== REMOVES: {107AAF9F-4702-4031-947F-3556B68641A4} REMOVES: {1CF5EBD5-6FE4-4191-A23B-2A6C9F861B3A} REMOVES: {1F14C4D2-EA11-4712-8B71-63A1F4E375B4} REMOVES: {22D911C5-7C00-466F-9771-CB5E28EFA904} REMOVES: {4AB271F2-41E7-4C47-9DCD-1F9FAEE7E0AF} REMOVES: {4E98D88B-575A-4BAC-B6A2-B1B3037FAD35} REMOVES: {A8D0A3A2-8E38-4E35-ADF7-3B277BC86552} REMOVES: {DAC5710D-3917-475B-A3FD-3CDD21A45C4D} REMOVES: {E66E49F0-E125-45C1-AD35-7AD7886B09B2} ========== System restore ========== The system successfully created restore point ========== Summary ========== 1 : Process memory 9 : Registry keys 10 : Registry values 6 : Folders 32 : Files 9 : Scheduled task 1 : System restore End of clean in 00mn 50s ========== Path to file report ========== C:\Users\TEMP.Nolirion-PC\AppData\Roaming\ZHP\ZHPFix[R1].txt - 02/10/2013 22:41:53 [4484]