Script zhpfix
O2 - BHO: iGraal BHO - {240373D3-4199-4F41-BB4D-15D5B830C82D} . (.iGraal - iGraal BHO.) -- C:\Program Files\iGraal\iGraalBHO.dll
O3 - Toolbar: &Windows Live Toolbar - [HKLM]{21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{22E03916-85C5-44B0-8DC9-1830C11238D9} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{C44F9E21-D93F-490C-B41C-B3548BDD19FC} Cl� orpheline
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKUS\.DEFAULT\..\Run: [SearchProtect] Cl� orpheline =>Toolbar.Conduit
O4 - HKUS\S-1-5-18\..\Run: [SearchProtect] Cl� orpheline =>Toolbar.Conduit
O4 - HKUS\S-1-5-21-97462184-1598581789-3700126542-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O9 - Extra button: iGraal - {0FB6492F-7FED-4446-9863-992806E1C419} . (...) -- C:\Program Files\iGraal\iGraalButton.dll
O20 - AppInit_DLLs: . (...) - C:\Program Files\browse~1\261562~1.220\{c16c1~1\browse~1.dll (.not file.)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AffiliatedUpdate.job [280]
[MD5.AD87889DEB640F16F30029CD6A632BBF] [APT] [AffiliatedUpdate] (...) -- C:\Users\jm\AppData\Roaming\AFFILI~1\UPDATE~1\UPDATE~1.exe [100864]
[MD5.00000000000000000000000000000000] [APT] [{00FB0D32-C2A9-4D6F-8CD8-55C9D8E94FA7}] (...) -- C:\Users\jm\Downloads\VLCSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{27A170A4-511E-4068-9194-D185705EEDF9}] (...) -- C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5F342968-5E50-4E51-A470-40B854DDE57B}] (...) -- C:\Users\jm\Downloads\flashget20en.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E7776BB-A08E-470C-A7F0-49378A6B527C}] (...) -- C:\Program Files\Neuf\Kit\uninstall.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C133DB48-87F2-44B8-BA31-79668CBFC904}] (...) -- C:\Program Files\Neuf\Kit\9launch.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D59334E5-24ED-4472-B871-9BE2DF6FEBDE}] (...) -- C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D715B125-FA66-444F-87CF-9CB9DAD34A62}] (...) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E1E53AA8-D094-4D89-96AC-175DE1719647}] (...) -- C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EB519144-4E74-4483-8C1D-65DD59DBD18F}] (...) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EC0F75C3-72EC-41C2-A6B0-625A09290CB9}] (...) -- C:\Users\jm\FlashGet universal\flashget.exe (.not file.) [0]
O42 - Logiciel: Extended Update - (...) [HKCU] -- AffiliatedUpdate =>PUP.Dealply
O42 - Logiciel: MediaBar - (.Musiclab, LLC.) [HKLM] -- BearShare 2 MediaBar =>PUP.BearShare
O42 - Logiciel: SweetIM for Messenger 3.4 - (.SweetIM Technologies Ltd..) [HKLM] -- {F70AE624-2B41-476F-BC9C-0A7F158C3F15} =>PUP.SweetIM
O42 - Logiciel: Yahoo! Toolbar - (...) [HKLM] -- Yahoo! Companion
[HKCU\Software\BearShare] =>PUP.BearShare
[HKLM\Software\BearShareMediabarTb] =>PUP.BearShare
[HKLM\Software\iGraal-32]
O43 - CFD: 24/01/2014 - 19:14:33 - [4,144] ----D C:\Program Files\iGraal
O43 - CFD: 13/01/2014 - 09:23:21 - [4,342] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 20/12/2013 - 13:47:45 - [0,001] ----D C:\Users\jm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iGraal
O45 - LFCP:[MD5.760085C091CD630E74C8BCF0DDBB9774] - 24/01/2014 - 13:58:13 ---A- - C:\Windows\Prefetch\UPFST_FR_50.EXE-0347F49A.pf =>PUA.FSTfr9
O45 - LFCP:[MD5.5CD7D372DCADA41B758A851C6D222FEB] - 24/01/2014 - 14:57:01 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-BF809A22.pf =>PUP.DealPly
O47 - AAKE:Key Export SP - "C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe" [Enabled] .(...) -- C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe" [Enabled] .(...) -- C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" [Enabled] .(...) -- C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\jm\FlashGet universal\FlashGet.exe" [Enabled] .(...) -- C:\Users\jm\FlashGet universal\FlashGet.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\jm\FlashGet universal\LiveUpdate.exe" [Enabled] .(...) -- C:\Users\jm\FlashGet universal\LiveUpdate.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\jm\FlashGet universal\LiveUpdateEx.exe" [Enabled] .(...) -- C:\Users\jm\FlashGet universal\LiveUpdateEx.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ClickPotatoLiteSA [Key] . (...) -- C:\Program Files\ClickPotatoLite\bin\10.0.518.0\ClickPotatoLiteSA.exe (.not file.) =>Adware.ClickPotato
O53 - SMSR:HKLM\...\startupreg\FlashGet [Key] . (...) -- C:\Users\jm\FlashGet universal\flashget.exe (.not file.)
O69 - SBI: SearchScopes [HKCR] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Web Search) - http://search.certified-toolbar.com =>PUP.CertifiedToolbar
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O87 - FAEL: "{8B0C27A0-1E2B-4586-A7BB-E7B91E44A992}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.BearShare
O87 - FAEL: "{E115BCCD-9ACF-4898-BFA8-C1F718A19B54}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.BearShare
SS - | Demand 10/10/2009 360192 | (TuneUp.Defrag) . (.TuneUp Software.) - C:\Windows\System32\TuneUpDefragService.exe
SR - | Auto 10/10/2009 603904 | (TuneUp.ProgramStatisticsSvc) . (.TuneUp Software.) - C:\Windows\System32\TUProgSt.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AffiliatedUpdate] =>PUP.Dealply^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BearShare 2 MediaBar] =>PUP.BearShare^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F70AE624-2B41-476F-BC9C-0A7F158C3F15}] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ClickPotatoLiteSA] =>Adware.ClickPotato^
[HKLM\Software\BearShareMediabarTb] =>Toolbar.Agent
[HKLM\Software\Classes\Installer\Features\426EA07F14B2F674CBC9A0F751C8F351] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\426EA07F14B2F674CBC9A0F751C8F351] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\426EA07F14B2F674CBC9A0F751C8F351] =>PUP.SweetIM
[HKCU\AppEvents\Schemes\Apps\Explorer\Navigating\Old_Current] =>PUP.MediaFinder
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] =>Toolbar.Yahoo
[HKCU\Software\Mixi.DJ] =>Toolbar.MixiDJ
[HKLM\Software\Classes\FG2CatchUrl.Netscape] =>Adware.BDSearch
[HKLM\Software\Classes\FG2CatchUrl.Netscape.1] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^
C:\ProgramData\InstallMate =>PUP.Tarma^
C:\Users\jm\AppData\LocalLow\mediabarbs =>PUP.BearShare
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe =>Toolbar.Google^
[HKCU\Software\BearShare] =>PUP.BearShare^
Emptytemp
Emptyflash
firewallraz