Script ZHPFix [MD5.8655BF1CA65C808A62CB76BEC6713421] - (.Nosibay - Bubble Dock.) -- C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe [665104] [PID.7880] [MD5.3EAD6B3D7725A17ACB34E5219C613729] - (.Nosibay - Bubble Dock.) -- C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\Bubble Dock.exe [5154320] [PID.7880] O4 - HKCU\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe O4 - HKUS\S-1-5-21-143037667-2145307702-4118085144-1000\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] [HKLM\Software\Classes\CLSID\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Bubble Dock C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe C:\Users\laurent\AppData\Roaming\Nosibay\Bubble Dock\Bubble Dock.exe [MD5.B0C4C121BA864A9024863657E221AD45] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe [4329248] [PID.6764] [MD5.7D0205030D523173B47470E71239FB83] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files\SearchProtect\UI\bin\cltmngui.exe [2911520] [PID.6816] [MD5.33BE35574E1081A91EACD2B98E0A472A] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640] [PID.4724] [MD5.ABC13EE82ECC14C63709465BA9BCA0AD] - (.APN LLC. - Virtual New Tab Loader.) -- C:\Users\laurent\AppData\Local\VNT\vntldr.exe [202192] [PID.5948] [MD5.80251D8890EF97F04B4A75CC6629EBEC] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [2301216] [PID.6656] [MD5.B342CD9AA44E4AE99E2368EBDBC2E17A] - (.APN LLC. - APN Updater.) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352] [PID.1740] G1 - GCS: Preference [User Data\Default] http://search.conduit.com G0 - GCSP: Preference [User Data\Default][HomePage] http://search.conduit.com G0 - GCSP: Preference [User Data\Default] http://search.conduit.com O4 - HKLM\..\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe O4 - HKLM\..\Run: [VNT] . (.APN LLC. - Virtual New Tab Loader.) -- C:\Program Files\VNT\vntldr.exe O20 - AppInit_DLLs: . (.Conduit - Search Protect by Conduit.) - C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll O23 - Service: Service de mise à jour Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe O23 - Service: Search Protect by Conduit Service (CltMngSvc) . (.Conduit - Search Protect by Conduit.) - C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe O42 - Logiciel: Search Protect - (.Conduit.) [HKLM] -- SearchProtect [HKCU\Software\APN PIP] [HKCU\Software\AskPartnerNetwork] [HKCU\Software\Conduit] [HKCU\Software\VNT] [HKLM\Software\AskPartnerNetwork] [HKLM\Software\ValueApps] O43 - CFD: 27/01/2014 - 17:42:00 - [8,791] ----D C:\Program Files\AskPartnerNetwork O43 - CFD: 27/01/2014 - 17:42:01 - [0,333] ----D C:\Program Files\VNT O43 - CFD: 27/01/2014 - 17:41:45 - [0] ----D C:\ProgramData\APN O43 - CFD: 27/01/2014 - 17:42:00 - [0,663] ----D C:\ProgramData\AskPartnerNetwork O43 - CFD: 10/01/2014 - 21:05:39 - [0] ----D C:\Users\laurent\AppData\Local\ValueApps O43 - CFD: 27/01/2014 - 17:42:04 - [0,344] ----D C:\Users\laurent\AppData\Local\VNT O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Conduit Search) - http://search.conduit.com [MD5.C67BCF6441E378371F0D6EEFB7EF0861] [SPRF][20/01/2014] (.Conduit - SP Usage Sender.) -- C:\Users\laurent\AppData\Local\Temp\nsf9FBD.exe [167812] [MD5.C67BCF6441E378371F0D6EEFB7EF0861] [SPRF][20/01/2014] (.Conduit - SP Usage Sender.) -- C:\Users\laurent\AppData\Local\Temp\nskA559.exe [167812] [MD5.C67BCF6441E378371F0D6EEFB7EF0861] [SPRF][20/01/2014] (.Conduit - SP Usage Sender.) -- C:\Users\laurent\AppData\Local\Temp\nskEC7.exe [167812] [MD5.C67BCF6441E378371F0D6EEFB7EF0861] [SPRF][20/01/2014] (.Conduit - SP Usage Sender.) -- C:\Users\laurent\AppData\Local\Temp\nsp87F.exe [167812] [MD5.2AC7B1C68346796BB2B494DDF7335401] [SPRF][27/01/2014] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users\laurent\AppData\Local\Temp\offercast.exe [1083824] SR - | Auto 09/01/2014 166352 | (APNMCP) . (.APN LLC..) - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe SR - | Auto 20/01/2014 2301216 | (CltMngSvc) . (.Conduit.) - C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [HKLM\SYSTEM\CurrentControlSet\Services\APNMCP] [HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] [HKCU\Software\APN PIP] [HKCU\Software\AskPartnerNetwork] [HKLM\Software\AskPartnerNetwork] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:ApnTBMon C:\Users\laurent\AppData\Local\ValueApps C:\Program Files\SearchProtect C:\Program Files\AskPartnerNetwork C:\ProgramData\AskPartnerNetwork C:\Users\laurent\AppData\Local\SearchProtect C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe C:\Program Files\SearchProtect\UI\bin\cltmngui.exe C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe C:\Users\laurent\AppData\Local\VNT\vntldr.exe C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [HKCU\Software\Conduit] [HKLM\Software\ValueApps] C:\Users\laurent\AppData\Local\Temp\nsf9FBD.exe C:\Users\laurent\AppData\Local\Temp\nskA559.exe C:\Users\laurent\AppData\Local\Temp\nskEC7.exe C:\Users\laurent\AppData\Local\Temp\nsp87F.exe C:\Windows\Installer\4b6302.msi Toolbar (64) EmptyTemp EmptyFlash FirewallRaz SysRestore