télécharges ZHPFIX

Si tu ne l'as pas


http://www.nicolascoolman.fr/telecharger/



Sélectionne et copie les lignes suivantes 

************************************************

Script ZHPFix
[MD5.1AF107152EDA9CC870C639A5B1C3C466] - (...) -- C:\Users\Law\AppData\Roaming\tor.exe [3351566] [PID.5096]
O61 - LFC: 2016/12/22 10:54:14 A . (..) -- C:\Users\Law\AppData\Roaming\tor.exe   [3351566]
C:\Users\Law\AppData\Roaming\tor.exe  =>Heuristic.Suspect
C:\Users\Law\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage  =>PUP.Optional.Generic
C:\Users\Law\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal  =>PUP.Optional.Generic
O4 - HKUS\.DEFAULT\..\Run: [SpybotPostWindows10UpgradeReInstall] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe (.not file.)
O4 - HKUS\S-1-5-18\..\Run: [SpybotPostWindows10UpgradeReInstall] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe (.not file.)
O43 - CFD: 25/11/2013 - [] D -- C:\Users\Default\AppData\Local\Pokki  =>.Superfluous.SweetLabs
O43 - CFD: 25/11/2013 - [] D -- C:\Users\Default User\AppData\Local\Pokki  =>.Superfluous.SweetLabs
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}  =>.Superfluous.Orphan
HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}  =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}  =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}  =>.Superfluous.Orphan
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}  =>.Superfluous.Orphan
HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}  =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435b-BC74-9C25C1C588A9}  =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435b-BC74-9C25C1C588A9}  =>.Superfluous.Orphan
C:\Users\Default\AppData\Local\Pokki  =>.Superfluous.SweetLabs
C:\Users\Default User\AppData\Local\Pokki  =>.Superfluous.SweetLabs
C:\Users\Law\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage  =>.Superfluous.CloudfrontNet
C:\Users\Law\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal  =>.Superfluous.CloudfrontNet
C:\Users\Law\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage  =>.Superfluous.AudienceInsights
G2 - GCE: Preference [User Data\Default] [kmhkepipobnjllejbafajoemahjejdcm] __MSG_addons_name__     
O61 - LFC: 2016/12/22 10:54:14 A . (..) -- C:\Users\Law\Application Data\tor.exe   [3351566] 


SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix

**********************************************
Lance ZHPFIX


colles les lignes dans le cadre blanc 

si elles n'y sont pas

tu supprimes avec le bouton GO

copies colles C:\Users\....\AppData\Roaming\ZHP\ZHPFix[R1].txt