Script zhpfix
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.3.5f1.) -- C:\Users\jenny\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Cl� orpheline
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
[MD5.00000000000000000000000000000000] [APT] [ASP] (...) -- C:\Program Files (x86)\RegClean Pro\SystweakASP.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [Test TimeTrigger] (...) -- C:\Users\jenny\AppData\Local\Temp\Runner.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3CD611A2-A742-424F-864F-B280AFF49B10}] (...) -- C:\PROGRA~3\TARMAI~1\{889DF~1\Setup.exe (.not file.) [0] =>PUP.Tarma
[MD5.00000000000000000000000000000000] [APT] [{531E407C-A946-4F79-A784-414D864EAD57}] (...) -- C:\ProgramData\IePluginService\PluginService.exe (.not file.) [0] =>PUP.IePluginService
[MD5.00000000000000000000000000000000] [APT] [{95737B29-5000-45EB-9926-EFFF2D759311}] (...) -- C:\Users\jenny\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z\Image Editor Packages\uninstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{9D9E7650-DC5E-4EAB-8BAA-7578CDEB1BAB}] (...) -- C:\Users\jenny\AppData\Roaming\0V1L2Z2Z1T1I1L1T\Spybot Search & Destroy Packages\uninstaller.exe (.not file.) [0] =>Adware.InstallCore
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\TuneUp]
[HKCU\Software\USyndication] =>Trojan.USyndication
[HKCU\Software\usyndication.com] =>Trojan.USyndication
[HKLM\Software\McAfee.com]
[HKLM\Software\TuneUp]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\TuneUp]
O43 - CFD: 27/07/2014 - 00:24:39 - [0] ----D C:\Program Files (x86)\Deal Keeper =>PUP.DealKeeper
O43 - CFD: 27/07/2014 - 00:29:02 - [] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 17/12/2012 - 11:11:45 - [] ----D C:\Program Files (x86)\Symantec
O43 - CFD: 27/07/2014 - 00:47:37 - [] ----D C:\Program Files (x86)\TuneUp Utilities 2014
O43 - CFD: 27/03/2013 - 13:14:41 - [] ----D C:\ProgramData\Norton
O43 - CFD: 27/03/2013 - 00:10:52 - [] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 27/07/2014 - 00:27:11 - [] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 17/12/2012 - 11:11:45 - [] ----D C:\ProgramData\Symantec
O43 - CFD: 27/07/2014 - 00:47:44 - [] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 27/07/2014 - 00:53:29 - [0] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 27/07/2014 - 00:47:27 - [] ----D C:\Users\jenny\AppData\Roaming\TuneUp Software
O43 - CFD: 24/02/2014 - 16:31:44 - [] ----D C:\Users\jenny\AppData\Roaming\Unity
O43 - CFD: 27/07/2014 - 00:47:27 - [] ----D C:\Users\jenny\AppData\Local\TuneUp Software
O43 - CFD: 13/12/2013 - 20:58:44 - [] ----D C:\Users\jenny\AppData\Local\Unity
O45 - LFCP:[MD5.A8FF53E22147CB412E4ABA97B63C350E] - 26/07/2014 - 23:08:26 ---A- - C:\Windows\Prefetch\DEALKEEPER1.EXE-08BE82D0.pf =>PUP.DealKeeper
O45 - LFCP:[MD5.CD039C6B24A93EE4E0CB2230F30C6D08] - 20/07/2014 - 16:41:53 ---A- - C:\Windows\Prefetch\SOFTONICDOWNLOADER_POUR_PHOTO-5F1742D6.pf =>Toolbar.Conduit
O50 - IFEO:Image File Execution Options - acpanel_win.exe - "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
O50 - IFEO:Image File Execution Options - ccleaner64.exe - "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
O50 - IFEO:Image File Execution Options - hotkeyutility.exe - "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
O50 - IFEO:Image File Execution Options - lifecam.exe - "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
O50 - IFEO:Image File Execution Options - uninst.exe - "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (...) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\5ACJBN1I\videopadsetupSoftonicFR.exe [5814328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\3Q22P5R1\SoftonicDownloader_pour_photo-slideshow-creator (1).exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\3Q22P5R1\SoftonicDownloader_pour_photo-slideshow-creator.exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\5ACJBN1I\SoftonicDownloader_pour_photo-slideshow-creator.exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\8XC2X7YJ\SoftonicDownloader_pour_photo-slideshow-creator (1).exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\8XC2X7YJ\SoftonicDownloader_pour_photo-slideshow-creator.exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\AFN5QELG\SoftonicDownloader_pour_photo-slideshow-creator (1).exe [360328] =>Toolbar.Conduit
O61 - LFC: 20/07/2014 - 16:18:18 ---A- . (.Softonic.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\AFN5QELG\SoftonicDownloader_pour_photo-slideshow-creator.exe [360328] =>Toolbar.Conduit
O61 - LFC: 26/07/2014 - 16:18:18 ---A- . (...) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\5ACJBN1I\rocket-browser[1].com [3]
O61 - LFC: 26/07/2014 - 16:18:18 ---A- . (.TuneUp Software.) -- C:\Users\jenny\AppData\Local\Microsoft\Windows\INetCache\IE\5ACJBN1I\TuneUpUtilities2014_fr-FR.exe [28605240]
O61 - LFC: 26/07/2014 - 16:18:22 ---A- . (.Safer-Networking Ltd..) -- C:\Users\jenny\Downloads\26066-673528-spybot-search-destroy.exe [40658208]
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- chrome.exe (.not file.)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {9CB96984-43C3-4D44-90EF-01466EFCF7BB} [DefaultScope] - (WSE Rocket) - http://rocket-find.com =>PUP.RockTurner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\DealKeeper_RASAPI32 =>PUP.DealKeeper
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\DealKeeper_RASMANCS =>PUP.DealKeeper
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateDealKeeper_RASAPI32 =>PUP.DealKeeper
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateDealKeeper_RASMANCS =>PUP.DealKeeper
SR - | Auto 16/07/2014 2145080 | (TuneUp.UtilitiesSvc) . (.TuneUp Software.) - C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKCU\Software\USyndication] =>Trojan.USyndication
[HKCU\Software\usyndication.com] =>Trojan.USyndication
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}] =>PUP.CrossRider
C:\Program Files (x86)\Deal Keeper =>PUP.DealKeeper^
C:\Users\jenny\AppData\Local\Temp\GoogleToolbarInstaller1.log =>PUP.Babylon
C:\Users\jenny\AppData\Local\Temp\GoogleToolbarInstaller1.log =>PUP.Babylon
Emptytemp
Emptyflash