Script ZHPFix G2 - GCE: Preference [User Data\Default] [dhhjmlmdpcpiojiffodbldlkgcnaeogp] FromDocToPDF v.10.83.4.65262, (Désactivé) O69 - SBI: SearchScopes [HKCU] {de13befe-8196-4d2c-864a-69fc4392ddc1} [DefaultScope] - (Search The Web) - http://www.findamo.com =>Adware.IMBooster HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASAPI32 =>PUP.DealKeeper HKLM\SOFTWARE\Microsoft\Tracing\utilDealKeeper_RASMANCS =>PUP.DealKeeper G2 - GCE: Preference [User Data\Default] [aaaaadgepjkdffhjbkfjgnnffnfcffbg] Ask Search v. () G2 - GCE: Preference [User Data\Default] [cdenlcnfdjepagejpfajlkicggieknab] Musique Chansons joueur v.1.7 (Activé) G2 - GCE: Preference [User Data\Default] [elmbeipbbjbebncfmbgeegnlgjbfbdme] Saftyweb v.0.2 (Désactivé) G2 - GCE: Preference [User Data\Default] [hjnhcgkngeeahimbfhejeaiijecekhba] ClixAddon v.0.84, (Activé) G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdenlcnfdjepagejpfajlkicggieknab [Musique Chansons joueur] G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\elmbeipbbjbebncfmbgeegnlgjbfbdme [Saftyweb] G2 - EXT: C:\Users\youri\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjnhcgkngeeahimbfhejeaiijecekhba [ClixAddon] [HKCU\Software\SysDispatch] [HKCU\Software\aScRozvrhy] [HKCU\Software\aSc] O43 - CFD: 15/08/2014 - 23:18:21 - [] ----D C:\Program Files\Waseet303 O43 - CFD: 19/10/2014 - 18:37:35 - [] ----D C:\ProgramData\22f8e004945b2619 O43 - CFD: 19/10/2014 - 14:07:23 - [] ----D C:\Users\youri\AppData\Local\CodecPerformer O43 - CFD: 19/10/2014 - 14:07:36 - [] ----D C:\Users\youri\AppData\Local\MatroskaSplitter O43 - CFD: 20/10/2014 - 21:41:08 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aSc Timetables O43 - CFD: 15/08/2014 - 23:18:22 - [0] ----D C:\Users\youri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WASEET303 O44 - LFC:[MD5.ECD279E3BF3D634A8291E49230030FCF] - 19/10/2014 - 21:12:29 ---A- . (...) -- C:\Windows\BRRBCOM.INI [7887] O61 - LFC: 17/10/2014 - 20:12:08 ---A- . (.SQLite Development Team.) -- C:\Users\youri\AppData\Local\Temp\sqlite3.dll [665682] O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\Quarantine.exe [448000] O61 - LFC: 20/10/2014 - 20:12:08 ---A- . (...) -- C:\Users\youri\AppData\Local\Temp\utt51A9.tmp.bat [101] [MD5.04A10BF0F13E28751EEC78B617F4CA40] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407513586.bdinstall.bin [1064721] [MD5.5E67C715AF5DC78D7EAA1E280F402990] [SPRF][08/08/2014] (...) -- C:\ProgramData\1407515586.bdinstall.bin [264269] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date G1 - GCS: Preference [User Data\Default] None R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O61 - LFC: 19/10/2014 - 20:12:15 ---A- . (.AVAST Software.) -- C:\Users\youri\Downloads\Programs\avast_internet_security_setup_online.exe [4834344] O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup.exe [1677920] O61 - LFC: 21/10/2014 - 20:12:15 ---A- . (.Skype Technologies S.A..) -- C:\Users\youri\Downloads\Programs\SkypeSetup_3.6.0.248.exe [22690600] G1 - GCS: Preference [User Data\Default] http://www.search.ask.com O42 - Logiciel: Search App by Ask - (.APN, LLC.) [HKLM] -- {5245414C-312D-5350-00A7-A758B70C1200} O45 - LFCP:[MD5.DD2836F0768FEB191E3D0EA84E48CADC] - 18/10/2014 - 20:28:49 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-1CA1ED12.pf O45 - LFCP:[MD5.4CCFEDDAA1AE61A5D9917E943B1FD12B] - 18/10/2014 - 20:16:24 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-2F7C3395.pf O45 - LFCP:[MD5.19CF41B09D46DB587DCBCC53FB2156F6] - 18/10/2014 - 20:12:06 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-42567A18.pf O45 - LFCP:[MD5.9CAD95DA61F4C4770FA4EA50CE73CB00] - 18/10/2014 - 20:07:40 ---A- - C:\Windows\Prefetch\ASKINSTALLER.EXE-5530C09B.pf [MD5.D8C2EA9DD71F6CDB0608D8BAD8E211B5] [WIS][15/10/2014] (.APN, LLC - Search App by Ask.) -- C:\Windows\Installer\2efd719.msi [507904] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-312D-5350-00A7-A758B70C1200}] C:\Windows\Installer\2efd719.msi R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = www.google.com R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems - Creative Cloud Desktop Plugin.v_2_0_0_0.) (No version) -- (.not file.) O9 - Extra button: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll =>.Microsoft Corporation O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll =>.Microsoft Corporation O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O17 - HKLM\System\CS2\Services\Tcpip\..\{64374D07-9662-4C2B-B1BA-02C97666E5FC}: NameServer = 208.67.222.222 208.67.220.220 O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.) [0] ShortcutFix FirewallRaz EmptyTemp EmptyFlash Proxyfix Sysrestore