Script ZHPFix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{4D594333-0076-A76A-76A7-7A786E7484D7} Clé orpheline [MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_TB_rmv] (...) -- C:\Windows\TEMP\{E0F40121-870B-4E64-9F26-51A3564FA12A}.exe (.not file.) [0] =>Toolbar.AVGSearch [MD5.00000000000000000000000000000000] [APT] [FoxyLyrics Update] (...) -- C:\Program Files (x86)\FoxyLyrics\FoxyLycsUP.exe (.not file.) [0] =>Adware.AddLyrics [MD5.00000000000000000000000000000000] [APT] [schedule!3036567561] (...) -- C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe (.not file.) [0] =>PUP.OptimizerPro [MD5.00000000000000000000000000000000] [APT] [{ACA1CB4F-09C4-41D9-A219-7BBE0CEA1BC3}] (...) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) [0] O53 - SMSR:HKLM\...\startupreg\AVG-Secure-Search-Update_JUNE2013_TB [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe (.not file.) =>Toolbar.AVGSearch O53 - SMSR:HKLM\...\startupreg\vProt [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32 =>Adware.PredictAd HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS =>Adware.PredictAd HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\deals plugin extension-bg_RASAPI32 =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\deals plugin extension-bg_RASMANCS =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Deals Plugin Extension-InternalInstaller_RASAPI32 =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Deals Plugin Extension-InternalInstaller_RASMANCS =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Deals Plugin Extension_RASAPI32 =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Deals Plugin Extension_RASMANCS =>Adware.DealsPlugin HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\UpdatePCTuto_RASAPI32 =>PUP.AgenceExclusive HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\UpdatePCTuto_RASMANCS =>PUP.AgenceExclusive HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-DropDownDeals-SilentInstaller-16DC_RASMANCS =>Adware.Yontoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0614_RASMANCS =>Adware.Yontoo [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\AVG-Secure-Search-Update_JUNE2013_TB] =>Toolbar.AVGSearch^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\vProt] =>Toolbar.AVGSearch^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{66F57190-01EB-45A6-8260-7895267209F7}] =>Adware.VisualBeeToolbar [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{66F57190-01EB-45A6-8260-7895267209F7}] =>Adware.VisualBeeToolbar [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311791108}] =>PUP.CrossRider FirewallRaz EmptyFlash Emptytemp ShortcutFix