Script ZHPFix
G2 - GCE: Preference [User Data\Default] [hpahcadokfmljkgjgaaeammmbhapphif] CoupExtensiioun v.1.3 (D�sactiv�) =>PUP.CoupExtension
G2 - GCE: Preference [User Data\Default] [ieakfmpjhljbpbfpldjkddkjmmgjmgon] WebConnect v.1.0.0 (D�sactiv�) =>PUP.WebConnect
G2 - EXT: C:\Users\Sed\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpahcadokfmljkgjgaaeammmbhapphif [CoupExtensiioun] =>PUP.CoupExtension
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net? =>Hijacker.Browsers
O2 - BHO: CCouepExtiensIon [64Bits] - {06FA10AF-A7BC-2B38-9A15-D9073E641F7F} Cl� orpheline =>PUP.CoupExtension
O2 - BHO: Linkey [64Bits] - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} Cl� orpheline =>PUP.LinkeySearch
O4 - HKLM\..\Wow6432Node\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Mobogenie
O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\SW-Booster\Assistant_x64.dll (.not file.) =>PUP.SafeWeb
O23 - Service: F06DEFF2-5B9C-490D-910F-35D3A9119622 (F06DEFF2-5B9C-490D-910F-35D3A9119622) . (.Aztec Media Inc - SystemK Configuration.) - C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg =>PUP.SystemK
O36 - AppCertDlls: (x64) . (...) -- C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll =>PUP.SystemK
O36 - AppCertDlls: (x86) . (...) -- c:\program files (x86)\settings manager\systemk\sysapcrt.dll =>PUP.SystemK
[MD5.8272D32ACE355E4D4E85CB78530AE962] [APT] [UpdaterEX] (...) -- C:\Users\Sed\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.exe [106496] =>PUP.Dealply
O39 - APT: UpdaterEX - (...) -- C:\Windows\Tasks\UpdaterEX.job [284] =>PUP.Dealply
O39 - APT: UpdaterEX - (...) -- C:\Windows\System32\Tasks\UpdaterEX [284] =>PUP.Dealply
O41 - Driver: (F06DEFF2-5B9C-490D-910F-35D3A9119622) . (.Aztec Media Inc - SystemK Configuration.) - C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg =>PUP.SystemK
O42 - Logiciel: CCouepExtiensIon - (.CooUpEXtensiooon.) [HKLM][64Bits] -- {6933C2BA-C67D-42C7-8C77-1FF4B364AF54} =>PUP.CoupExtension
O42 - Logiciel: Extended Update - (...) [HKCU][64Bits] -- UpdaterEX =>PUP.Dealply
O42 - Logiciel: SW-Sustainer 1.80 - (.Certified Publisher.) [HKLM][64Bits] -- {5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27} =>PUP.SafeWeb
O42 - Logiciel: Settings Manager - (.Aztec Media Inc.) [HKLM][64Bits] -- Settings Manager =>PUP.SystemK
[HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Linkey] =>PUP.LinkeySearch
[HKCU\Software\SystemK] =>PUP.SystemK
[HKLM\Software\Wow6432Node\SystemK] =>PUP.SystemK
O43 - CFD: 11/12/2013 - 21:40:26 - [] ----D C:\Program Files (x86)\BrowseSmart =>PUP.BrowseSmart
O43 - CFD: 11/12/2013 - 21:40:14 - [] ----D C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie
O43 - CFD: 12/12/2013 - 07:06:48 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 26/04/2014 - 14:10:06 - [] ----D C:\Program Files (x86)\Settings Manager =>PUP.SystemK
O43 - CFD: 02/07/2014 - 13:44:11 - [0] ----D C:\Program Files (x86)\SW-Booster =>PUP.SafeWeb
O43 - CFD: 20/09/2013 - 17:53:25 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 30/06/2014 - 13:53:16 - [] ----D C:\ProgramData\CCouepExtiensIon =>PUP.CoupExtension
O43 - CFD: 23/06/2014 - 16:46:45 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 29/05/2014 - 21:16:42 - [] ----D C:\ProgramData\systemk =>PUP.SystemK
O43 - CFD: 20/09/2013 - 17:53:25 - [] ----D C:\Users\Sed\AppData\Roaming\Babylon =>PUP.Babylon
O43 - CFD: 20/09/2013 - 17:53:51 - [] ----D C:\Users\Sed\AppData\Roaming\UpdaterEX =>PUP.Dealply
O43 - CFD: 11/12/2013 - 21:39:22 - [] ----D C:\Users\Sed\AppData\Local\Mobogenie =>PUP.Mobogenie
O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard
O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - bpsvc.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard
O50 - IFEO:Image File Execution Options - dprotectsvc.exe - tasklist.exe =>Trojan.Staser
O50 - IFEO:Image File Execution Options - jumpflip - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch
O50 - IFEO:Image File Execution Options - searchinstaller.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - searchprotection.exe - tasklist.exe =>PUP.SearchProtect
O50 - IFEO:Image File Execution Options - searchprotector.exe - tasklist.exe =>PUP.SearchProtect
O50 - IFEO:Image File Execution Options - searchsettings.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - searchsettings64.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar
O50 - IFEO:Image File Execution Options - stinst32.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - stinst64.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - umbrella.exe - tasklist.exe =>Adware.IMBooster
O50 - IFEO:Image File Execution Options - utiljumpflip.exe - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - volaro - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - vonteera - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - websteroids.exe - tasklist.exe =>PUP.TubeDimmer
O50 - IFEO:Image File Execution Options - websteroidsservice.exe - tasklist.exe =>PUP.TubeDimmer
O51 - MPSK:{77cc1039-2202-11e3-8435-806e6f6e6963}\AutoRun\command. (...) -- D:\autoplay.exe
O64 - Services: CurCS - 18/05/2014 - C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg (F06DEFF2-5B9C-490D-910F-35D3A9119622) .(.Aztec Media Inc - SystemK Configuration.) - LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622 =>PUP.SystemK
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} - (default-search.net) - http://www.default-search.net =>Hijacker.Browsers
HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASAPI32 =>PUP.WebConnect
HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASMANCS =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OptimizerPro_RASAPI32 =>PUP.OptimizerPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OptimizerPro_RASMANCS =>PUP.OptimizerPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OptProStart_RASAPI32 =>PUP.OptimizerPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OptProStart_RASMANCS =>PUP.OptimizerPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebConnect_RASAPI32 =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebConnect_RASMANCS =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebConnect_Setup_RASAPI32 =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebConnect_Setup_RASMANCS =>PUP.WebConnect
[HKCR\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}] (SystemK Module) =>PUP.SystemK
SR - | System 18/05/2014 36240 | (F06DEFF2-5B9C-490D-910F-35D3A9119622) . (.Aztec Media Inc.) - C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg =>PUP.SystemK
[HKLM\Software\Google\Chrome\Extensions\hpahcadokfmljkgjgaaeammmbhapphif] =>PUP.CoupExtension^
[HKLM\Software\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon] =>PUP.WebConnect^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06FA10AF-A7BC-2B38-9A15-D9073E641F7F}] =>PUP.CoupExtension^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}] =>PUP.LinkeySearch^
[HKLM\SYSTEM\CurrentControlSet\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622] =>PUP.SystemK^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6933C2BA-C67D-42C7-8C77-1FF4B364AF54}] =>PUP.CoupExtension^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UpdaterEX] =>PUP.Dealply^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27}] =>PUP.SafeWeb^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager] =>PUP.SystemK^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\optimizerpro_RASMANCS] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\Microsoft\Tracing\optimizerpro_RASAPI32] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\Microsoft\Tracing\optprostart_RASMANCS] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\Microsoft\Tracing\optprostart_RASAPI32] =>PUP.OptimizerPro
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}] =>Adware.Agent
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}] =>Adware.Bandoo^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon =>PUP.Mobogenie^
C:\Users\Sed\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpahcadokfmljkgjgaaeammmbhapphif =>PUP.CoupExtension^
C:\Users\Sed\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon =>PUP.WebConnect^
C:\Program Files (x86)\BrowseSmart =>PUP.BrowseSmart^
C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files (x86)\Settings Manager =>PUP.SystemK^
C:\Program Files (x86)\SW-Booster =>PUP.SafeWeb^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\CCouepExtiensIon =>PUP.CoupExtension^
C:\ProgramData\InstallMate =>PUP.Tarma^
C:\ProgramData\systemk =>PUP.SystemK^
C:\Users\Sed\AppData\Roaming\Babylon =>PUP.Babylon^
C:\Users\Sed\AppData\Roaming\UpdaterEX =>PUP.Dealply^
C:\Users\Sed\AppData\Local\Mobogenie =>PUP.Mobogenie^
C:\Users\Sed\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.exe =>PUP.Dealply^
C:\Windows\Tasks\UpdaterEX.job =>PUP.Dealply^
C:\Windows\System32\Tasks\UpdaterEX =>PUP.Dealply^
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKCU\Software\Linkey] =>PUP.LinkeySearch^
[HKCU\Software\SystemK] =>PUP.SystemK^
[HKLM\Software\Wow6432Node\SystemK] =>PUP.SystemK^
[HKCR\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}] (SystemK Module) =>PUP.SystemK^
C:\Users\Sed\AppData\Local\Temp\uninst1.exe =>PUP.Babylon
[HKCU\Software\Delta]
[HKLM\Software\Wow6432Node\Delta]




EmptyPrefetch
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
SysRestore