Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp


[MD5.00000000000000000000000000000000] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [0] [PID.780] =>.AMD
[MD5.00000000000000000000000000000000] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [0] [PID.1068] =>.AMD
[MD5.0B52C2913E69DB56CA9B0B415B296E04] - (.Advanced Micro Devices, Inc. - AMD Fuel Service.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064] [PID.1748] =>.Advanced Micro Devices, Inc.
[MD5.E14C3987163EF4CA102B952624695C84] - (.AMD - HydraDM.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120] [PID.1816] =>.AMD
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ak.imgfarm.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ak.staticimgfarm.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://akz.imgfarm.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://anx.tb.ask.com =>Toolbar.Ask
G0 - GCSP: Preferences [User Data\Default][HomePage] http://hp.myway.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://live.tb.ask.com =>Toolbar.Ask
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ttdetect.staticimgfarm.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ak.ssl.imgfarm.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fb-s-a-a.akamaihd.net =>.Superfluous.AkamaiHD
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com =>.Facebook
G2 - GCE: Preference [User Data\Default] [ibopmonjjnejkdbimjbgdbekmfpogken] EasyPDFCombine =>.Superfluous.MindSpark
G2 - GCE: Preference [User Data\Default] [kohoehgoafblafjinhplmhcbphgaaobc] InternetSpeedTracker =>.Superfluous.MindSpark
G2 - GCE: Preference [User Data\Default] [maoffpmgdffbgbncadalkhfhmlfihkgk] DownSpeedTest =>.Superfluous.MindSpark
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft
HKCU\SOFTWARE\7866aac5b5fbfab6 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\DLL-Files.com =>PUP.Optional.DllFilesFixer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DLL-Files.com Client =>PUP.Optional.DllFilesFixer
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask
https://www.nicolascoolman.com/fr/pup-optional-dllfilesfixer/ =>PUP.Optional.DllFilesFixer
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Heuristic