Script ZHPFix [MD5.7E4FD9AAB681A10A1510C5B2F5DD693A] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe [191320] [PID.5220] =>PUP.PirritSuggestor [MD5.2B1D5E75F46A209F1BF94F7BB40B5133] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe [52056] [PID.2020] =>PUP.PirritSuggestor [MD5.CF9826D1F1B7E48FE3CDB86A1F683CD5] - (...) -- C:\Program Files (x86)\WinRST\WinRST.exe [59904] [PID.2220] =>PUP.WinRST R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://127.0.0.1:9880 =>Hijacker.Proxy O4 - HKLM\..\Run: [VideoDownloadConverter Home Page Guard 64 bit] C:\Program Files (x86)\VIDEOD~2\bar\1.bin\AppIntegrator64.exe (.not file.) =>Adware.VideoDownloadConverter O4 - HKLM\..\Wow6432Node\Run: [freeSoftToday_widget] C:\Program Files (x86)\fst_en_2\freeSoftToday_widget.exe (.not file.) =>Adware.FreeSoftToday O4 - HKLM\..\Wow6432Node\Run: [Allin1Convert_8h Browser Plugin Loader 64] C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon64.exe (.not file.) =>Adware.Allin1Convert O23 - Service: Allin1ConvertService (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe (.not file.) =>Adware.Allin1Convert O23 - Service: PirritDesktop (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor O23 - Service: WinRST (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Dealply.job [298] =>PUP.DealPly [MD5.311BCE25242D9D00CBD7BB9D8B6E1315] [APT] [Dealply] (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe [102968] =>PUP.DealPly O42 - Logiciel: VideoDownloadConverter Internet Explorer Toolbar - (.Mindspark Interactive Network.) [HKLM][64Bits] -- VideoDownloadConverter_4zbar Uninstall Internet Explorer =>Adware.VideoDownloadConverter [HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar [HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] [HKCU\Software\BabSolution] =>Hijacker.BabSolution [HKCU\Software\DealPlyLive] =>PUP.DealPly [HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKCU\Software\SweetIM] =>PUP.SweetIM [HKCU\Software\TutoTag] =>AgenceExclusive [HKCU\Software\Tutorials] =>AgenceExclusive [HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar [HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager [HKCU\Software\WebProtect] [HKCU\Software\lollipop] =>Adware.Lollipop [HKCU\Software\metacrawler] =>Adware.SearchYa [HKLM\Software\Pirrit] =>PUP.PirritSuggestor [HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM [HKLM\Software\WEDL] =>PUP.weDownloadManager [HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly [HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday [HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa [HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor [HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor [HKLM\Software\Wow6432Node\RST] [HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Tutorials] =>AgenceExclusive [HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM [HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu [HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar [HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager [HKLM\Software\Wow6432Node\WebProtect] O43 - CFD: 2013-12-30 - 23:04:19 - [0] ----D C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp O43 - CFD: 2013-11-06 - 05:07:23 - [0,851] ----D C:\Program Files (x86)\DealPly =>PUP.DealPly O43 - CFD: 2013-11-06 - 05:28:23 - [0] ----D C:\Program Files (x86)\DealPlyLive =>PUP.DealPly O43 - CFD: 2014-04-04 - 21:05:37 - [0,109] ----D C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost O43 - CFD: 2014-01-02 - 12:12:45 - [12,131] ----D C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie O43 - CFD: 2014-02-07 - 11:55:32 - [7,978] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup O43 - CFD: 2014-01-05 - 11:46:10 - [0,868] ----D C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora O43 - CFD: 2014-01-02 - 12:19:54 - [0,367] ----D C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM O43 - CFD: 2014-01-02 - 12:14:22 - [1,186] ----D C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic O43 - CFD: 2014-01-02 - 11:22:49 - [0] ---AD C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic O43 - CFD: 2013-08-07 - 22:05:25 - [0,723] ----D C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner O43 - CFD: 2013-09-01 - 10:03:49 - [0,789] ---AD C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter O43 - CFD: 2014-03-07 - 08:40:11 - [6,116] ----D C:\Program Files (x86)\Web Protect =>PUP.WebProtect O43 - CFD: 2014-01-05 - 11:46:09 - [0,555] ----D C:\Program Files (x86)\Webplayer O43 - CFD: 2014-04-04 - 16:55:21 - [4,679] ----D C:\Program Files (x86)\WinRST =>PUP.WinRST O43 - CFD: 2013-11-02 - 16:23:29 - [0,391] ----D C:\ProgramData\DealPlyLive =>PUP.DealPly O43 - CFD: 2014-04-04 - 17:06:24 - [0] ----D C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc O43 - CFD: 2014-01-02 - 12:18:42 - [0] ----D C:\ProgramData\Updater =>PUP.CrossRider O43 - CFD: 2014-01-02 - 12:21:58 - [28,243] ----D C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar O43 - CFD: 2014-01-02 - 12:14:47 - [0,070] ----D C:\ProgramData\Websteroids =>PUP.TubeDimmer O43 - CFD: 2013-11-02 - 16:23:22 - [0,098] ----D C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure O43 - CFD: 2013-12-04 - 13:06:32 - [0,066] ----D C:\Users\Jacques\AppData\Roaming\freegames4357 O43 - CFD: 2013-08-05 - 22:54:27 - [0] ----D C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa O43 - CFD: 2014-01-02 - 11:30:51 - [0,004] ----D C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive O43 - CFD: 2014-02-07 - 11:32:45 - [0] ----D C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock O43 - CFD: 2014-01-02 - 12:20:26 - [3,778] ----D C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy O43 - CFD: 2013-08-20 - 21:04:44 - [0] ----D C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc O43 - CFD: 2013-12-04 - 13:06:31 - [0,121] ----D C:\Users\Jacques\AppData\Roaming\speedtest4354 O43 - CFD: 2014-01-05 - 11:29:33 - [0] ----D C:\Users\Jacques\AppData\Roaming\Webplayer O43 - CFD: 2014-02-07 - 11:23:15 - [0] ----D C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager O43 - CFD: 2013-11-02 - 16:23:29 - [0] ----D C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly O43 - CFD: 2014-02-10 - 18:00:54 - [0] ----D C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday O43 - CFD: 2014-01-02 - 12:18:41 - [0,016] ----D C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits O43 - CFD: 2013-10-25 - 11:29:26 - [0] ----D C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop O43 - CFD: 2014-01-02 - 11:26:04 - [0,004] ----D C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie O43 - CFD: 2014-04-04 - 16:55:29 - [5,574] ----D C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor O43 - CFD: 2014-01-02 - 12:15:47 - [1,953] ----D C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic O43 - CFD: 2013-12-30 - 20:08:11 - [0] ----D C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar O43 - CFD: 2014-01-02 - 11:26:08 - [0] ----D C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits O61 - LFC: 2014-04-09 - 22:28:26 ---A- . (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UpdateProc\TTL.DAT [4] =>PUP.DealPly HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASAPI32 =>Adware.BrowseFox HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASMANCS =>Adware.BrowseFox HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASAPI32 =>PUP.Duuqu HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASMANCS =>PUP.Duuqu HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASAPI32 =>Adware.VisualBeeToolbar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASMANCS =>Adware.VisualBeeToolbar SS - | Auto 1658-07-10 0 | (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe =>Adware.Allin1Convert SR - | Auto 2014-03-18 52056 | (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor SR - | Auto 2014-03-18 59904 | (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST [HKLM\SYSTEM\CurrentControlSet\Services\Allin1Convert_8hService] =>Adware.Allin1Convert^ [HKLM\SYSTEM\CurrentControlSet\Services\PirritDesktop] =>PUP.PirritSuggestor^ [HKLM\SYSTEM\CurrentControlSet\Services\WinRST] =>PUP.WinRST^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter_4zbar Uninstall Internet Explorer] =>Adware.VideoDownloadConverter^ [HKCU\Software\lollipop] =>Adware.Lollipop [HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc [HKCU\Software\SweetIM] =>PUP.SweetIM [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM [HKCU\Software\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive [HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\Classes\SpeedUpMyPC] =>PUP.SpeedUpMyPC [HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector [HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector [HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASAPI32] =>Adware.BrowseFox [HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASMANCS] =>Adware.BrowseFox [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:VideoDownloadConverter Home Page Guard 64 bit =>Adware.VideoDownloadConverter^ C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp^ C:\Program Files (x86)\DealPly =>PUP.DealPly^ C:\Program Files (x86)\DealPlyLive =>PUP.DealPly^ C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost^ C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie^ C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^ C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora^ C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM^ C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic^ C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic^ C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner^ C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter^ C:\Program Files (x86)\Web Protect =>PUP.WebProtect^ C:\Program Files (x86)\WinRST =>PUP.WinRST^ C:\ProgramData\DealPlyLive =>PUP.DealPly^ C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc^ C:\ProgramData\Updater =>PUP.CrossRider^ C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar^ C:\ProgramData\Websteroids =>PUP.TubeDimmer^ C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly^ C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure^ C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa^ C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive^ C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock^ C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy^ C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix^ C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc^ C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager^ C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly^ C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday^ C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits^ C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop^ C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie^ C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor^ C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic^ C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar^ C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits^ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro =>PUP.OptimizerPro C:\Users\Jacques\AppData\LocalLow\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe =>PUP.PirritSuggestor^ C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor^ C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST^ C:\WINDOWS\Tasks\Dealply.job =>PUP.DealPly^ C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe =>PUP.DealPly^ [HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar^ [HKCU\Software\BabSolution] =>Hijacker.BabSolution^ [HKCU\Software\DealPlyLive] =>PUP.DealPly^ [HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar^ [HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager^ [HKCU\Software\metacrawler] =>Adware.SearchYa^ [HKLM\Software\Pirrit] =>PUP.PirritSuggestor^ [HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM^ [HKLM\Software\WEDL] =>PUP.weDownloadManager^ [HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly^ [HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday^ [HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa^ [HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor^ [HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor^ [HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM^ [HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar^ [HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager^ [HKCU\Software\Delta] [HKLM\Software\Wow6432Node\Delta] O43 - CFD: 2013-10-11 - 21:10:14 - [1,863] ----D C:\Program Files (x86)\Delta O43 - CFD: 2013-10-11 - 21:10:36 - [0,259] ----D C:\Users\Jacques\AppData\Roaming\Delta O51 - MPSK:{797278f5-103f-11e3-bd64-d13e76e1e73c}\AutoRun\command. (...) -- E:\Setup.exe (.not file.) O87 - FAEL: "{0E6D04BE-F484-4D2E-BF97-D9B709B7B0EA}" |In - Public - P6 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.) O87 - FAEL: "{DCDEFCA0-5B29-49E5-84B0-442040E939B8}" |In - Public - P17 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.) [MD5.1ACCA74287FE5D7449FBB2B9F0C83341] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [309328] [PID.5172] =>Toolbar.Google [MD5.4D8B567286F302BCA515CD13DD3925D0] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe [4672288] [PID.6244] =>Toolbar.Conduit [MD5.B9910731290A9A63C1E71E9949969D79] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe [3027232] [PID.5596] =>Toolbar.Conduit [MD5.2AE149CA5B124D09BA1E76EA706D2095] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2466080] [PID.3716] =>Toolbar.Conduit G1 - GCS: Preference [User Data\Default] http://search.conduit.com G0 - GCSP: Preference [User Data\Default][HomePage] http://search.conduit.com R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline O4 - GS\Desktop [Jacques]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKLM\..\Wow6432Node\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit O4 - HKUS\S-1-5-21-757060503-48840028-2244158544-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O20 - AppInit_DLLs: . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll =>Toolbar.Conduit O23 - Service: Search Protect by Conduit Service (CltMngSvc) . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google O42 - Logiciel: Search Protect - (.Conduit.) [HKLM][64Bits] -- SearchProtect =>Toolbar.Conduit O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {A8B88634-7F90-402F-B66A-86429755F6A5} =>Toolbar.eBay [HKCU\Software\APN PIP] [HKCU\Software\AppDataLow\Software\ConduitSearchScopes] [HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar [HKCU\Software\Conduit] =>Toolbar.Conduit [HKCU\Software\ForumerIT] =>Toolbar.Forumer [HKCU\Software\Mixi.DJ] [HKCU\Software\SearchProtectINT] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit O43 - CFD: 2014-01-02 - 12:12:08 - [0,609] ----D C:\Program Files (x86)\Conduit O43 - CFD: 2011-03-20 - 22:09:41 - [0,891] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay O43 - CFD: 2014-04-10 - 21:32:35 - [31,824] ----D C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit O43 - CFD: 2014-01-02 - 12:14:30 - [1,637] ----D C:\ProgramData\Conduit O43 - CFD: 2013-10-11 - 21:10:24 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch O43 - CFD: 2014-01-02 - 12:14:47 - [2,832] ----D C:\Users\Jacques\AppData\Local\Conduit O43 - CFD: 2013-12-30 - 20:00:12 - [2,341] ----D C:\Users\Jacques\AppData\Local\CRE O43 - CFD: 2014-04-10 - 21:32:47 - [0,150] ----D C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit O61 - LFC: 2014-04-09 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar Cache\7.5.4805.320\fr\translate_languages.json.content [2033] O61 - LFC: 2014-04-10 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar DNS data\data [115] O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat [3982] =>Toolbar.Conduit O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat [146894] =>Toolbar.Conduit O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat [1950] =>Toolbar.Conduit O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\UI\rep\UIRepository.dat [4190] =>Toolbar.Conduit O61 - LFC: 2014-04-10 - 22:28:12 ---A- . (.Conduit.) -- C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe [66368] =>Toolbar.Conduit O69 - SBI: SearchScopes [HKCU] C458648CACE44F7188BC7083E702C050 - (Conduit Search) - http://search.conduit.com O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Conduit Search) - http://search.conduit.com O90 - PUC: "43688B8A09F7F2046BA6682479556F5A" . (.eBay.) -- C:\Windows\Installer\{A8B88634-7F90-402F-B66A-86429755F6A5}\_853F67D554F05449430E7E.exe =>Toolbar.eBay [MD5.B30273F8BC9043B004778D133ADC7655] [WIS][2013-09-01] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\9564d4.msi [28672] =>Toolbar.Google HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASAPI32 =>Toolbar.Google HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASMANCS =>Toolbar.Google HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32 =>Toolbar.Google HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS =>Toolbar.Google [HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google [HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google SR - | Auto 2014-03-30 2466080 | (CltMngSvc) . (.Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^ [HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc] =>Toolbar.Conduit^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.eBay^ [HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam [HKLM\Software\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay [HKLM\Software\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay [HKLM\Software\Wow6432Node\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay [HKLM\Software\Wow6432Node\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay [HKCU\Software\APN PIP] =>Toolbar.Ask [HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit [HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch [HKCU\Software\Mixi.DJ] =>Toolbar.MixiDJ [HKLM\Software\Classes\Toolbar.CT3287808] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\Toolbar.CT3287808] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^ [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^ C:\Program Files (x86)\eBay =>Toolbar.eBay^ C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit^ C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^ C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit^ C:\Program Files (x86)\Conduit =>Toolbar.Conduit C:\ProgramData\Conduit =>Toolbar.Conduit C:\Users\Jacques\AppData\Local\Conduit =>Toolbar.Conduit C:\Users\Jacques\AppData\LocalLow\Conduit =>Toolbar.Conduit C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe =>Toolbar.Google^ C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe =>Toolbar.Conduit^ C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe =>Toolbar.Conduit^ C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit^ [HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit^ [HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar^ [HKCU\Software\Conduit] =>Toolbar.Conduit^ [HKCU\Software\ForumerIT] =>Toolbar.Forumer^ [HKCU\Software\SearchProtectINT] =>Toolbar.Conduit^ [HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^ C:\Windows\Installer\9564d4.msi =>Toolbar.Google^ [HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google^ [HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google^ C:\Users\Jacques\AppData\Local\Temp\nseC356.exe =>Toolbar.Conduit C:\Users\Jacques\AppData\Local\Temp\nsj19BB.exe =>Toolbar.Conduit C:\Users\Jacques\AppData\Local\Temp\nsz3A66.exe =>Toolbar.Conduit C:\Users\Jacques\AppData\Local\Temp\nszE078.exe =>Toolbar.Conduit C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe =>Toolbar.Conduit FirewallRaz PROXYFix EmptyTemp EmptyFlash EmptyClsid SysRestore