Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
EmptyCLSID
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F}
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSetProgramAccessAndDefaults: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowNetConn: Modified
O1 - Hosts: 54.225.95.126 fjnoekdlmmjagmmlchagfonjgbioomoo
[HKCU\Software\InstallCore]
[HKCU\Software\WSE_Astromenda]
[HKCU\Software\globalUpdate]
[HKLM\Software\AD106F7F-AF77-4203-BCBE-0BE123ECBE63]
[HKLM\Software\SupraSavings ]
[HKLM\Software\Wow6432Node\AdvertisingSupport]
[HKLM\Software\Wow6432Node\GlobalUpdate]
C:\Program Files (x86)\AD106F7F-AF77-4203-BCBE-0BE123ECBE63
C:\Program Files (x86)\FLVM Player
C:\Users\Proprietaire\AppData\Roaming\1H1Q
O69 - SBI: SearchScopes [HKCU] {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} [DefaultScope] - (Astromenda) - http://astromenda.com
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ClearThink_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ClearThink_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sizlsearch_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sizlsearch_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateClearThink_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateClearThink_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatesizlsearch_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatesizlsearch_RASMANCS
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC]
C:\Users\Proprietaire\AppData\Local\Temp\GoogleToolbarInstaller1.log