Script ZHPFix G0 - GCSP: Preference [User Data\Default][StartupURLs] https://www.google.fr/?gws_rd=cr&ei=12N3Ut2mJY3Y0QWSg4CYBA", "http://websearch.searchmania.info/?pid=2921&r=2014/12/13&hid=9567187637293862327&lg=EN&cc=FR&unqvl=70 M2 - MFEP: Extension [Charles - krynjr6g.default-1410983525011] {a16a1775-5ab3-4034-ac52-de0795db97f0} R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-1964744218-1090075281-1278556077-1001Core] (...) -- C:\Users\Charles\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-1964744218-1090075281-1278556077-1001UA] (...) -- C:\Users\Charles\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0] [MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-1964744218-1090075281-1278556077-1001] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800] [MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-1964744218-1090075281-1278556077-1001] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800] [MD5.00000000000000000000000000000000] [APT] [{9C396F2A-C924-4B92-B752-DEBBAAB668AA}] (...) -- E:\SetupLauncher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{CDF4823C-E705-4E3E-9386-5BE13007EFD0}] (...) -- C:\Users\Charles\AppData\Roaming\webssearches\UninstallManager.exe (.not file.) [0] O42 - Logiciel: Java 8 Update 20 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218020F0} [HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}] [HKCU\Software\MCAFEE] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\Norton] [HKLM\Software\Wow6432Node\SPPDCOM] [HKLM\Software\Wow6432Node\Symantec] O43 - CFD: 09/12/2014 - 11:50:47 - [] ----D C:\Program Files (x86)\Browse Coupon O43 - CFD: 04/08/2013 - 00:04:01 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 09/12/2014 - 11:49:20 - [] ----D C:\ProgramData\dcagdbgookbaibcoccanelajaappaagf O43 - CFD: 14/12/2014 - 00:01:46 - [] ----D C:\ProgramData\iblicdfmfagolgdmmjgcdekbhjpomgmg O43 - CFD: 18/09/2014 - 19:57:16 - [0] ----D C:\ProgramData\jncndpjbimponmobfechildijkmkpicb O43 - CFD: 13/12/2014 - 23:49:15 - [] ----D C:\ProgramData\kfajdelpabcebkfpmdphebibhmjdeopk O43 - CFD: 24/08/2013 - 20:41:32 - [] ----D C:\ProgramData\McAfee O43 - CFD: 11/02/2014 - 22:28:04 - [] ----D C:\ProgramData\Norton O43 - CFD: 24/08/2013 - 20:41:40 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 24/08/2013 - 20:41:59 - [] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} O45 - LFCP:[MD5.07EC94C8955BFC214C89CC740CDA08CC] - 16/12/2014 - 12:20:29 ---A- - C:\Windows\Prefetch\REIMAGEREMINDER.EXE-302A39F5.pf O51 - MPSK:{171f1a4d-6335-11e4-96dd-e81132954938}\AutoRun\command. (...) -- F:\start.exe (.not file.) O55 - MWPS:[HKLM\...\Policies\System] - "verbosestatus"=0 O61 - LFC: 16/12/2014 - 15:10:43 ---A- . (.ReimageŽ.) -- C:\Users\Charles\AppData\Local\Temp\ReimagePackage.exe [13264048] O61 - LFC: 16/12/2014 - 15:10:52 ---A- . (.ReimageŽ.) -- C:\Users\Charles\Downloads\ReimageRepair.exe [775968] EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID FirewallRAZ SysRestore