Script zhpfix
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.VideoLAN - VLC media player Web Plugin 2.0.0.) (No version) -- (.not file.) =>.VideoLAN
O4 - GS\QuickLaunch [Coline Chabot]: Bubble Dock.lnk . (...) -- C:\Users\Coline Chabot\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) =>PUP.BubbleDock
O9 - Extra button: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} -- Cl� orpheline
O15 - Trusted Zone: [HKLM\...\Domains\www] http.mcafeeasap.com
O15 - Trusted Zone: [HKLM\...\EscDomains\www] http.mcafeeasap.com
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014Core] (...) -- C:\Users\Coline Chabot\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014UA] (...) -- C:\Users\Coline Chabot\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Users\Coline Chabot\AppData\Local\Oxy\Application\oxy.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WebInternetSecurity Update Task] (...) -- C:\Program Files\Webinternetsecurity\uninstall.webinternetsecurity.exe (.not file.) [0] =>Spyware.Binternet
[MD5.00000000000000000000000000000000] [APT] [{0DFD5370-8E95-4BAB-9AC5-0D1A86610784}] (...) -- D:\625\Lan.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{746E6301-0B5E-41D2-B8B3-8CB568572FAA}] (...) -- C:\Program Files\Origin\EAProxyInstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A912F43D-B9A5-4284-BB07-AED7CFFFA7DA}] (...) -- D:\2010\DRIVERS\Broadcom_BCM43xx_5.10.79.14\Setup.exe (.not file.) [0]
O39 - APT: GoogleUpdateTaskMachineCore1cf96bcc882344a - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf96bcc882344a.job [1066]
O39 - APT: GoogleUpdateTaskMachineCore1cf96bcc882344a - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf96bcc882344a [1066]
O39 - APT: GoogleUpdateTaskMachineUA1cf96bccb55f853 - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf96bccb55f853.job [1070]
O39 - APT: GoogleUpdateTaskMachineUA1cf96bccb55f853 - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf96bccb55f853 [1070]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014Core - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014Core.job [888]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014Core - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014Core [888]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014UA - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014UA.job [940]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014UA - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2823203330-1570677491-1077528394-1014UA [940]
O42 - Logiciel: Shopping Helper Smartbar Engine - (.ReSoft Ltd..) [HKCU] -- {1a331ecf-a2e6-4a97-9f7f-30370fa0fd34} =>Hijacker.SmartBar
[HKCU\Software\ForumerIT] =>Toolbar.Forumer
[HKCU\Software\TuneUp]
[HKLM\Software\AdvertisingSupport] =>PUP.AdvertisingSupport
[HKLM\Software\TuneUp]
[HKLM\Software\Webinternetsecurity] =>Spyware.Binternet
O43 - CFD: 16/03/2014 - 10:52:17 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 28/02/2013 - 20:56:34 - [] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 12/02/2014 - 14:12:09 - [] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
O43 - CFD: 28/02/2013 - 20:55:54 - [] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 30/03/2012 - 03:09:41 - [] ----D C:\ProgramData\{DA06AA03-DF24-4ECE-939E-1B0939235C66}
O43 - CFD: 07/04/2013 - 15:43:58 - [] ----D C:\Users\Coline Chabot\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 28/02/2013 - 20:56:32 - [] ----D C:\Users\Coline Chabot\AppData\Roaming\TuneUp Software
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\Coline Chabot\AppData\Local\Oxy\Application\oxy.exe (.not file.)
O90 - PUC: "A07B748F92CF28B478E2852FECD9EE90" . (.Boxore Client.) -- C:\windows\Installer\{F847B70A-FC29-4B82-872E-58F2CE9DEE09}\boxore.ico =>Adware.Boxore
[MD5.0A517BFDBF16092D7D813FAA69BB7F65] [WIS][09/02/2014] (.LPT - LPT System Updater Service.) -- C:\Windows\Installer\2757664a.msi [1712128] =>Adware.IncrediBar
[MD5.79E6443F01B4B1C3B957AA38DDD564FF] [WIS][28/02/2013] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\50a0a8.msi [45056] =>Adware.Boxore
HKLM\SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASAPI32 =>Spyware.Binternet
HKLM\SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASMANCS =>Spyware.Binternet
HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0560_RASAPI32 =>Adware.Yontoo
HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0560_RASMANCS =>Adware.Yontoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1] =>PUP.FLVMPlayer^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1a331ecf-a2e6-4a97-9f7f-30370fa0fd34}] =>Hijacker.SmartBar^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{493CCB71-DCAD-4257-9F08-8750F63BD792}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{493CCB71-DCAD-4257-9F08-8750F63BD792}] =>Toolbar.Agent
[HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}] =>Adware.Boxore
[HKCU\Software\ForumerIT] =>Toolbar.Forumer^
[HKLM\Software\AdvertisingSupport] =>PUP.AdvertisingSupport^
[HKLM\Software\Webinternetsecurity] =>Spyware.Binternet^
C:\Windows\Installer\2757664a.msi =>Adware.IncrediBar^
C:\Windows\Installer\50a0a8.msi =>Adware.Boxore^
Emptytemp
Emptyflash
Hostfix