télécharges ZHPFIX

Si tu ne l'as pas


http://www.nicolascoolman.fr/telecharger/



Sélectionne et copie les lignes suivantes 

************************************************

Script ZHPFix
HKCU\SOFTWARE\IM  =>Adware.InstallCore
O87 - FAEL: "TCP Query User{D3826935-DA9C-4593-9BD3-540C4BAA474F}C:\windows\kmsemulator.exe" [In-None-P6-TRUE] .(...) -- C:\windows\kmsemulator.exe (.not file.)  =>HackTool.AutoKMS
O87 - FAEL: "UDP Query User{98A530F7-EBE5-4335-B4C1-16EE600EAAC0}C:\windows\kmsemulator.exe" [In-None-P17-TRUE] .(...) -- C:\windows\kmsemulator.exe (.not file.)  =>HackTool.AutoKMS
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:TCP Query User{D3826935-DA9C-4593-9BD3-540C4BAA474F}C:\windows\kmsemulator.exe  =>HackTool.AutoKMS
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:UDP Query User{98A530F7-EBE5-4335-B4C1-16EE600EAAC0}C:\windows\kmsemulator.exe  =>HackTool.AutoKMS
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.search.ask.com/
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{27E87335-83C7-4AE5-873F-1B4338F98E85}  [324224] 
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{C82C39CE-93B9-4E85-8BC8-6E930CF1AC41}  [324224] 
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{D5339593-7B4F-4696-A44C-FD797D2CE6EA}  [324224] 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fb-s-a-a.akamaihd.net   =>.Superfluous.AkamaiHD 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fb-s-b-a.akamaihd.net   =>.Superfluous.AkamaiHD 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fb-s-c-a.akamaihd.net   =>.Superfluous.AkamaiHD 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fb-s-d-a.akamaihd.net   =>.Superfluous.AkamaiHD 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbexternal-a.akamaihd.net   =>.Superfluous.AkamaiHD 
HKCU\SOFTWARE\IM   =>Adware.InstallCore 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
O87 - FAEL: "TCP Query User{F4C0DE77-1127-47D7-8E49-FB4A0E4DA78E}C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe" [In-None-P6-TRUE] .(...) -- C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe (.not file.)
O87 - FAEL: "UDP Query User{AB932CC6-B697-4EF9-854E-10FA255C1AE6}C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe" [In-None-P17-TRUE] .(...) -- C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe (.not file.)
O87 - FAEL: "{9ECAF346-E3BA-4DEF-BA1A-9117DF84B471}" [In-None-P17-TRUE] .(...) -- C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe (.not file.)
O87 - FAEL: "{72C494A1-8D6B-403B-AC62-EC05B611E99D}" [In-None-P6-TRUE] .(...) -- C:\users\michel\downloads\qbittorrentportable\app\qbittorrent\qbittorrent.exe (.not file.)
C:\Users\MICHEL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage   =>.Superfluous.CloudfrontNet 
C:\Users\MICHEL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage-journal   =>.Superfluous.CloudfrontNet 
C:\Users\MICHEL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage   =>.Superfluous.AudienceInsights 
C:\Users\MICHEL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal   =>.Superfluous.AudienceInsights 
 

SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix

**********************************************
Lance ZHPFIX


colles les lignes dans le cadre blanc 

si elles n'y sont pas

tu supprimes avec le bouton GO

copies colles C:\Users\....\AppData\Roaming\ZHP\ZHPFix[R1].txt