Script zhpfix [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowPrinters: Modified G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon G2 - GCE: Preference [User Data\Default] [amfclgbdpgndipgoegfpkkgobahigbcl] Shopping Helper Smartbar v.1.4, (Activé) =>Hijacker.SmartBar G2 - GCE: Preference [User Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.2.0.3 (Activé) =>Adware.PricePeep G2 - GCE: Preference [User Data\Default] [mpcknfcdcgpffjddjeceioobdelceffo] Filesfrog Update Checker v.2.0.1 (Activé) =>Adware.MegaSearch M2 - MFEP: prefs.js [henri - 4f1xmeuj.default\6c937ed6-be66-4f72-9a60-ce5789cc7f09@53ba6712-2cae-46e2-b821-95baea44e049.com] [] Plus-HD-1.6 v4.5.2.0 (..) =>Adware.PlusHD M2 - MFEP: prefs.js [henri - 4f1xmeuj.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay M2 - MFEP: prefs.js [henri - 4f1xmeuj.default\toolbar@alot.com] [] ALOT Toolbar v2.4.18500 (..) M2 - MFEP: prefs.js [henri - 4f1xmeuj.default\{3112ca9c-de6d-4884-a869-9855de68056c}] [] Google Toolbar for Firefox v7.1.20100830W (..) =>Toolbar.Google M2 - MFEP: prefs.js [henri - 4f1xmeuj.default\{7cfeca73-7f54-a554-5353-c79e3038b97d}] [] Shopping Helper Smartbar v7.1.20100830W (..) =>Hijacker.SmartBar O3 - Toolbar: avast! Online Security - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O3 - Toolbar: Music Remote - [HKLM]{D2C31D2B-35BE-4C2B-ACCB-A78877274E60} . (.KangoExtensions - Kango BHO.) -- C:\Program Files\Music Remote\1.0\KangoBHO.dll O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar: Bing Bar - [HKLM]{eec0f710-38b5-4aba-99bf-ec87564a4e13} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll =>Toolbar.Bing O3 - Toolbar\WebBrowser: (no name) - [HKCU]{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{A057A204-BACC-4D26-8087-36EE87E26986} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{31C322DC-5878-452E-A2D8-C4AAB9973C9A} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D2C31D2B-35BE-4C2B-ACCB-A78877274E60} Clé orpheline O4 - GS\Desktop [henri]: cacaoweb - Raccourci.lnk . (...) -- C:\Users\henri\LOGICIELS TÉLÉCHARGÉS\cacaoweb.exe =>PUP.CacaoWeb O4 - HKLM\..\Run: [RegistryMechanic] Clé orpheline O4 - HKLM\..\Run: [EoClock] Clé orpheline O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKUS\S-1-5-21-585597244-702006781-1601228100-1002\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Registration.job [442] =>PUP.Paretologic O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Update Version2.job [416] =>PUP.Paretologic [MD5.00000000000000000000000000000000] [APT] [ParetoLogic Update Version2] (...) -- C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe (.not file.) [0] =>PUP.Paretologic [MD5.00000000000000000000000000000000] [APT] [{19F3A2CB-6A6D-48ED-A9F8-19A6D9B6145C}] (...) -- c:\Users\henri\LOGICIELS TLCHARGS\VanBasco Karaoke 252.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{2C5992AC-C5DC-4494-8DB5-46E3D98AB17A}] (...) -- C:\Users\henri\Desktop\MechCompWEN.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{424D3790-CE23-404E-9A45-169BDBEC47B2}] (...) -- C:\Users\henri\Desktop\GoogleSketchUpWFR.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{4BF6AF25-75AB-464E-98DA-C2B4BBB5807A}] (...) -- C:\Users\henri\Desktop\VyzexPocketPOD1p05Setup\Vyzex Pocket POD 1.05 Setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{4C84F9F6-510D-4C12-BD40-F4528B627217}] (...) -- C:\Users\henri\Desktop\vanBasco's Karaoke Player\uninst.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{8967CFDE-5EE8-4ED4-8FFD-A8AAD97C9EE4}] (...) -- C:\Users\henri\LOGICIELS TLCHARGS\vkaraoke.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{8E352242-DD78-4C6B-926E-81787EE3A53C}] (...) -- C:\Users\henri\Desktop\audacity-win-1.2.6.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{AB2CD42F-5B82-42A6-B2D0-B5A9E1B02AA7}] (...) -- C:\Users\henri\LOGICIELS TLCHARGS\vanbasco_french.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{AD0A1954-5B48-4CFE-A8C9-FCB7C5B30BCF}] (...) -- C:\Users\henri\LOGICIELS TLCHARGS\vanBasco's Karaoke Player\uninst.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B27451CF-631C-40E2-B399-BCD4944BD70D}] (...) -- C:\Users\henri\Desktop\installer-54163-33-Cartoon-Maker-French.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B40D39B5-2A22-4957-9F6D-03E7B787BD3A}] (...) -- C:\Users\henri\Desktop\installer-65504-33-Audacity-French.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B99A6DCD-9052-455D-B114-92BBB0676FE1}] (...) -- I:\start.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{C6644533-CE7A-4013-8C7D-80DC3D2149A6}] (...) -- C:\Users\henri\Desktop\OOo_2.4.0_Win32Intel_install_wJRE_fr.exe (.not file.) [0] O42 - Logiciel: Shopping Helper Smartbar - (.ReSoft Ltd..) [HKLM] -- {9726F9E3-EE13-4601-B2AF-81B1413BD8AF} =>Hijacker.SmartBar O42 - Logiciel: Shopping Helper Smartbar Engine - (.ReSoft Ltd..) [HKCU] -- {31958fd8-b84a-41db-91f8-2ce3cf858e37} =>Hijacker.SmartBar O43 - CFD: 20/05/2008 - 19:46:58 - [0] ----D C:\Users\henri\AppData\Roaming\MessengerSkinner =>PUP.MessengerSkinner O43 - CFD: 01/07/2012 - 14:49:44 - [0] ----D C:\Users\henri\AppData\Local\TempSweetIM_Temp_Folder_15377502 =>PUP.SweetIM O51 - MPSK:{185a2c9a-bde2-11dd-9443-001d7d21d3f6}\AutoRun\command. (...) -- C:\Windows\system32\E:\copy.exe (.not file.) O51 - MPSK:{b1514e51-4b57-11dd-8498-001d7d21d3f6}\AutoRun\command. (...) -- K:\LaunchU3.exe (.not file.) O51 - MPSK:{b5bf062a-4f6b-11dd-a538-001d7d21d3f6}\AutoRun\command. (...) -- J:\LaunchU3.exe (.not file.) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O87 - FAEL: "TCP Query User{A9E98296-CD1B-4AC4-B498-236BD3CBA94A}C:\program files\oovoo\oovoo.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\oovoo\oovoo.exe (.not file.) O87 - FAEL: "UDP Query User{3A725F75-5558-4B0E-9446-E49F8CDAF997}C:\program files\oovoo\oovoo.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\oovoo\oovoo.exe (.not file.) O87 - FAEL: "{AD4F8081-BD53-49F3-AE89-63691B1422F8}" |In - Public - P6 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetImSetup (1).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{84E4D4C8-6741-4D32-9C35-820B01D91DCA}" |In - Public - P17 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetImSetup (1).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{7569F88A-D0E3-4349-A653-CAD3FC9B0CA5}" |In - Public - P6 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetImSetup (2).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{5B535642-0509-4819-A988-66A730C68E97}" |In - Public - P17 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetImSetup (2).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{FE7AA92C-884E-461D-BDC9-28F5FAAE7EE4}" |In - Public - P6 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetIMSetup (3).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{3EB30D71-DD98-44F2-B4EC-F962F8CE3C8D}" |In - Public - P17 - TRUE | .(...) -- C:\Users\henri\Downloads\SweetIMSetup (3).exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{A2D60A83-D68A-4D9E-850A-87AF33BFAD18}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Datamngr O87 - FAEL: "{19CD86AA-B9D0-45DD-B719-407B791C4A5A}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Datamngr O87 - FAEL: "{345AE5EB-1FB3-4EED-90A1-A64FC8EA570D}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{01606E58-3632-4D57-95B0-65513BEF15D1}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "TCP Query User{116991D5-FAB6-46D1-9892-D93FD249FDA2}C:\users\henri\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\henri\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb O87 - FAEL: "UDP Query User{D023F495-3DCB-4427-991D-726E03DBFE9D}C:\users\henri\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\henri\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb O90 - PUC: "4340C4778499EED41AE496DC3D613EC6" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{774C0434-9948-4DEE-A14E-69CDD316E36C}\ARPPRODUCTICON.exe =>PUP.SweetIM O90 - PUC: "617DD6FF01B79624F991FF0BA74CDC59" . (.Bing Bar.) -- C:\Windows\Installer\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}\icon_installer_ico =>Toolbar.Bing [MD5.D25DA733104E6A1BDD66EC4748AC1B6E] [WIS][19/10/2013] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\1b05573.msi [474624] =>Adware.Boxore [MD5.4B25968F268FC5CC1D85589111FABDB4] [WIS][19/09/2012] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\285f106.msi [24576] =>Adware.Boxore SR - | Auto 16/12/2013 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe SR - | Demand 16/12/2013 247968 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe [HKLM\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl] =>Hijacker.SmartBar^ [HKLM\Software\Google\Chrome\Extensions\licjnkifamhpbaefhdpacpmihicfbomb] =>Adware.PricePeep^ [HKLM\Software\Google\Chrome\Extensions\mpcknfcdcgpffjddjeceioobdelceffo] =>Adware.MegaSearch^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9726F9E3-EE13-4601-B2AF-81B1413BD8AF}] =>Hijacker.SmartBar^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{31958fd8-b84a-41db-91f8-2ce3cf858e37}] =>Hijacker.SmartBar^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0566a191-d675-4911-9c7e-50edbef90f32}] =>Adware.Zango [HKLM\Software\Classes\Installer\Features\4340C4778499EED41AE496DC3D613EC6] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\4340C4778499EED41AE496DC3D613EC6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4340C4778499EED41AE496DC3D613EC6] =>PUP.SweetIM [HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}] =>Adware.Boxore [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311201102}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^ C:\Users\henri\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl =>Hijacker.SmartBar^ C:\Users\henri\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep^ C:\Users\henri\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo =>Adware.MegaSearch^ C:\Users\henri\AppData\Roaming\Mozilla\Firefox\Profiles\4f1xmeuj.default\extensions\6c937ed6-be66-4f72-9a60-ce5789cc7f09@53ba6712-2cae-46e2-b821-95baea44e049.com =>Adware.PlusHD^ C:\Users\henri\AppData\Roaming\Mozilla\Firefox\Profiles\4f1xmeuj.default\extensions\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^ C:\Users\henri\AppData\Roaming\Mozilla\Firefox\Profiles\4f1xmeuj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} =>Toolbar.Google^ C:\Users\henri\AppData\Roaming\Mozilla\Firefox\Profiles\4f1xmeuj.default\extensions\{7cfeca73-7f54-a554-5353-c79e3038b97d} =>Hijacker.SmartBar^ C:\Users\henri\AppData\Roaming\MessengerSkinner =>PUP.MessengerSkinner^ C:\Users\henri\AppData\Local\TempSweetIM_Temp_Folder_15377502 =>PUP.SweetIM^ C:\Users\henri\AppData\Roaming\Mozilla\Firefox\Profiles\4f1xmeuj.default\Extensions\toolbar@alot.com =>Toolbar.Agent C:\Windows\Tasks\ParetoLogic Registration.job =>PUP.Paretologic^ C:\Windows\Tasks\ParetoLogic Update Version2.job =>PUP.Paretologic^ C:\Windows\Installer\1b05573.msi =>Adware.Boxore^ C:\Windows\Installer\285f106.msi =>Adware.Boxore^ C:\Users\henri\Downloads\cacaoweb.exe =>PUP.CacaoWeb SysRestore FirewallRAZ EmptyCLSID EmptyTemp EmptyFlash