Script ZHPFix


Lignes indésirables :
[MD5.0A09297C37084FF74660F0390E1E4F9B] - (.Elex do Brasil Participações Ltda - YACTray.) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe [315520] [PID.2076] =>PUP.Elex
O4 - GS\Desktop [Public]: RegHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\RegHunter\RegHunter.exe (.not file.) =>Crapware.RegHunter
O4 - GS\Desktop [Public]: YAC.lnk . (.Elex do Brasil Participações Ltda - iStart.) -- C:\Program Files (x86)\Elex-tech\YAC\iStart.exe =>PUP.Elex
O4 - GS\Desktop [Dany et Guy]: Search The Web.lnk - Clé orpheline =>Adware.IMBooster
O4 - GS\Desktop [Dany et Guy]: SpyHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe (.not file.) =>Crapware.SpyHunter
O23 - Service: YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda - iSafeSvc.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Elex
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) . (...) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (.not file.) =>Rogue.ReimageRepair
[MD5.00000000000000000000000000000000] [APT] [ReimageUpdater] (...) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (.not file.) [0] =>Rogue.ReimageRepair
[MD5.00000000000000000000000000000000] [APT] [{2DD03709-CB64-4260-9A39-C3A56F155931}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{41DAC169-8E90-4DF5-B691-3CA2A9434DBF}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{6AD7569A-C038-4C31-9649-045E8D184BD1}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{7250664A-196F-4E83-8B60-CF4DD49207C3}] (...) -- C:\Users\Dany et Guy\AppData\Roaming\awesomehp\UninstallManager.exe (.not file.) [0] =>PUP.Awesomehp
[MD5.00000000000000000000000000000000] [APT] [{7BC28FF2-7B89-4286-A17A-B3F94C663115}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{92F5364A-DF90-4142-B50F-D8E5E8E62EC7}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
[MD5.00000000000000000000000000000000] [APT] [{D91EAD8E-9B5B-418C-80A2-578D6E78B7B2}] (...) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe (.not file.) [0] =>Rogue.RegistryPowerCleaner
O41 - Driver: (iSafeKrnl) . (.Elex do Brasil Participações Ltda - iSafe Kernel Driver.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys =>PUP.Elex
O41 - Driver: (iSafeKrnlKit) . (.Elex do Brasil Participações Ltda - iSafe Kernel Kit Driver.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys =>PUP.Elex
O41 - Driver: (iSafeKrnlR3) . (.Elex do Brasil Participações Ltda - iSafe Kernel Ring3 Driver.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys =>PUP.Elex
O41 - Driver: (iSafeNetFilter) . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) - C:\Windows\System32\DRIVERS\iSafeNetFilter.sys =>Trojan.Staser
[HKCU\Software\DM] => Infection PUP (PUP.BearShare)
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Wow6432Node\Elex-tech] =>PUP.Elex
O43 - CFD: 23/10/2014 - 18:39:24 - [] ----D C:\Program Files (x86)\Elex-tech =>PUP.Elex
O43 - CFD: 04/11/2014 - 22:37:42 - [] ----D C:\Users\Dany et Guy\AppData\Roaming\Elex-tech =>PUP.Elex
O43 - CFD: 01/09/2014 - 16:54:34 - [] ----D C:\Users\Dany et Guy\AppData\Local\com => PUP.Agent
O43 - CFD: 09/10/2013 - 13:51:44 - [0] ----D C:\Users\Dany et Guy\AppData\Local\Ignite => Infection PUP (Adware.OpenCandy)
O43 - CFD: 20/10/2014 - 18:25:30 - [] ----D C:\Users\Dany et Guy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter =>Crapware.SpyHunter
O44 - LFC:[MD5.8F3F9B64D83326A6D9419D970915112F] - 24/11/2013 - 13:30:24 ---A- . (...) -- C:\WinUpdateFix.txt [1301] =>PUP.WinRST
O58 - SDL:22/09/2014 - 13:13:46 ---A- . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\iSafeNetFilter.sys [49320] =>Trojan.Staser
O64 - Services: CurCS - 08/10/2014 - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys (iSafeKrnl) .(.Elex do Brasil Participações Ltda - iSafe Kernel Driver.) - LEGACY_ISAFEKRNL =>PUP.Elex
O64 - Services: CurCS - 08/10/2014 - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys (iSafeKrnlKit) .(.Elex do Brasil Participações Ltda - iSafe Kernel Kit Driver.) - LEGACY_ISAFEKRNLKIT =>PUP.Elex
O64 - Services: CurCS - 08/10/2014 - C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys (iSafeKrnlR3) .(.Elex do Brasil Participações Ltda - iSafe Kernel Ring3 Driver.) - LEGACY_ISAFEKRNLR3 =>PUP.Elex
O64 - Services: CurCS - 22/09/2014 - C:\Windows\System32\DRIVERS\iSafeNetFilter.sys (iSafeNetFilter) .(.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) - LEGACY_ISAFENETFILTER =>Trojan.Staser
[MD5.79E6443F01B4B1C3B957AA38DDD564FF] [WIS][17/07/2012] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\1b0b97.msi [45056] =>Adware.Boxore
[MD5.2DF57D3510AA56F727DF144B5E879C4A] [WIS][12/12/2012] (.Musiclab, LLC - BearShare.) -- C:\Windows\Installer\1e54cf8.msi [335872] =>PUP.BearShare
HKLM\SOFTWARE\Microsoft\Tracing\Signup Wizard_RASAPI32 =>PUP.JDIBackup
HKLM\SOFTWARE\Microsoft\Tracing\Signup Wizard_RASMANCS =>PUP.JDIBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Media Finder_RASAPI32 =>PUP.MediaFinder
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Media Finder_RASDLG =>PUP.MediaFinder
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Media Finder_RASMANCS =>PUP.MediaFinder
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASAPI32 =>PUP.PerformanceOptimizer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASMANCS =>PUP.PerformanceOptimizer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetPacksUpdateManager_RASDLG =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASAPI32 =>Adware.VideoDownloadConverter
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASMANCS =>Adware.VideoDownloadConverter
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystemHttpProxy_RASAPI32 =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystemHttpProxy_RASMANCS =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystem_RASAPI32 =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystem_RASMANCS =>Adware.WebAdSystem
SS - | Auto 10/07/1658 0 | (ReimageRealTimeProtector) . (...) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>Rogue.ReimageRepair
SR - | Auto 08/10/2014 118048 | (iSafeService) . (.Elex do Brasil Participações Ltda.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Elex
[HKLM\SYSTEM\CurrentControlSet\Services\iSafeService] =>PUP.Elex^
[HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector] =>Rogue.ReimageRepair^
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReimageUpdater] =>Rogue.ReimageRepair^
[HKLM\Software\Classes\AppID\BearShare.exe] =>PUP.BearShare
[HKCU\Software\DM] =>PUP.BearShare
[HKLM\Software\Classes\Installer\Features\FA26994B9BACED4478924A63F944ABD0] =>Adware.SmileyBar
[HKLM\Software\Wow6432Node\Classes\Installer\Features\FA26994B9BACED4478924A63F944ABD0] =>Adware.SmileyBar
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E47D688-85EC-465A-9946-EC58220F14FC}] =>PUP.SearchResults
C:\Program Files (x86)\Elex-tech =>PUP.Elex^
C:\Users\Dany et Guy\AppData\Roaming\Elex-tech =>PUP.Elex^
C:\Users\Dany et Guy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter =>Crapware.SpyHunter^
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe =>PUP.Elex^
[HKLM\Software\Wow6432Node\Elex-tech] =>PUP.Elex^
C:\Windows\Installer\1b0b97.msi =>Adware.Boxore^
C:\Windows\Installer\1e54cf8.msi =>PUP.BearShare^
C:\Windows\Reimage.ini =>Rogue.ReimageRepair
C:\Users\Dany et Guy\Desktop\SpyHunter.lnk =>Crapware.SpyHunter
[HKCU\Software\ToolbarCleaner]
O43 - CFD: 28/11/2012 - 17:13:00 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[MD5.201535C739FEA133E0E4CCBD5C79CEC4] [WIS][06/02/2013] (.MixiDJinstaller - MixiDJ Chrome Toolbar.) -- C:\Windows\Installer\ea9fb.msi [561152]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
C:\Windows\Installer\ea9fb.msi

Lignes superflues ou inutiles :
O43 - CFD: 18/12/2013 - 08:54:32 - [0] ----D C:\Program Files (x86)\GUMD365.tmp => Google Inc - Google Update Manager
O43 - CFD: 25/09/2012 - 08:01:27 - [] ----D C:\Program Files (x86)\GUMD567.tmp => Google Inc - Google Update Manager
O43 - CFD: 27/11/2013 - 18:04:17 - [] ----D C:\Program Files (x86)\GUMDA09.tmp => Google Inc - Google Update Manager
O43 - CFD: 28/11/2012 - 18:29:03 - [0] ----D C:\ProgramData\pc health check => Empty Folder not necessary
O43 - CFD: 28/11/2012 - 17:13:00 - [0] --H-D C:\ProgramData\{065E61A5-8EBF-4FD0-B4F4-9E3DC8089AD0} => Empty Folder not necessary
O43 - CFD: 28/11/2012 - 17:13:00 - [0] --H-D C:\ProgramData\{EC7D5FD4-23D2-4B8E-A4FB-676A35CD0044} => Empty Folder not necessary
O43 - CFD: 20/10/2014 - 17:34:35 - [0] ----D C:\Users\Dany et Guy\AppData\Local\MediaBuddy => Empty Folder not necessary
O44 - LFC:[MD5.6126DDBAF708B5EE487FD946A9BB6786] - 27/11/2013 - 17:55:40 ---A- . (...) -- C:\Windows\IE11_main.log [11795] => Fichiers de rapport (Log)
[MD5.00000000000000000000000000000000] [APT] [{AB893726-11D7-4B84-9823-08F49A647640}] (...) -- C:\Users\Dany et Guy\Downloads\Player Setup.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{ABAECF3E-8D8E-49B3-BC1E-F897A1416ED2}] (...) -- C:\Users\Dany et Guy\Downloads\video-to-picture.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{B05B7B21-3A46-4B3F-A04E-1C800C134C7A}] (...) -- E:\Inst.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{D702421A-015A-43C0-9E81-E8CA29EE66A1}] (...) -- C:\Users\Dany et Guy\Downloads\PICVIDEO.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{FB62BA52-6D8F-4230-9882-66582AEC3DC4}] (...) -- C:\Users\Dany et Guy\Desktop\karaokeanythingSetup.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{FDFD06C1-28CE-4526-89A7-C1A17EB984EF}] (...) -- E:\WiseSetup.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{219C74B6-888D-4A02-9150-3B7743D39F9A}] (...) -- E:\English\OCX Setup.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{25B4EE06-61CE-40FD-A93A-27808E9ABC38}] (...) -- C:\Users\Dany et Guy\Desktop\ftpserv_1.1.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{35D24862-0071-46B8-B249-31762445A6A6}] (...) -- C:\Users\Dany et Guy\Downloads\ip_camera_2_1.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{36033624-78E6-4077-8C77-B18033C4B68D}] (...) -- C:\Users\Dany et Guy\Downloads\NetFx20SP1_x86.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{495E29C4-E1BE-42E4-B7B3-E93C602B5206}] (...) -- C:\Users\Dany et Guy\Downloads\NetFx20SP1_x86.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{50E9612F-0859-4F4D-ABDD-B0A0AAA15984}] (...) -- E:\English\OCX Setup.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [{7A10B440-66A2-4CC9-B117-9BD8FCEF7FAE}] (...) -- C:\Users\Dany et Guy\Downloads\NetFx20SP1_x86.exe (.not file.) [0] => Fichier absent
[MD5.00000000000000000000000000000000] [APT] [Launch 26294] (...) -- C:\Program Files (x86)\Capture Express\UnInstHKCU.exe (.not file.) [0] => Fichier absent
P2 - FPN: [HKLM] [@microsoft.com/VirtualEarth3D,version=4.0] - (...) -- (.not file.) => Fichier absent

Lignes d'optimisation du démarrage :
OPT:SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe



EmptyClsid
Proxyfix
FirewallRaz
ShortcutFix
emptytemp
emptyflash
Sysrestore