Script ZHPFix O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage® - Reimage Real Time Protection.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>.Superfluous.ReimageRepair =>.Superfluous.ReimageRepair SR - Auto [28/09/2015] [ 502232] Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage®.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>.Superfluous.ReimageRepair =>.Superfluous.ReimageRepair [MD5.BCEBD6BF9B68B6EF9A79C016739E309F] [APT] [Reimage Reminder] (.Reimage ltd..) -- C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [4478312] (.Activate.) =>.Superfluous.ReimageRepair [MD5.1283D0E726A546D58650070BE76DFA7C] [APT] [ReimageUpdater] (.Reimage®.) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [8515952] (.Activate.) =>.Superfluous.ReimageRepair [MD5.00000000000000000000000000000000] [APT] [{68852F09-5F0F-43F2-9887-FA8FB0726C3F}] (...) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_242_Plugin.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: ReimageUpdater - (.Reimage®.) -- C:\WINDOWS\System32\Tasks\ReimageUpdater [4270] =>.Superfluous.ReimageRepair O39 - APT: {68852F09-5F0F-43F2-9887-FA8FB0726C3F} - (...) -- C:\WINDOWS\System32\Tasks\{68852F09-5F0F-43F2-9887-FA8FB0726C3F} [3166] (.Orphan.) =>.Superfluous.Orphan HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Reimage Reminder =>..Superfluous.ReimageRepair HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReimageUpdater =>..Superfluous.ReimageRepair O4 - HKUS\S-1-5-21-249751736-1960304294-1742026601-1002\..\Run: [cacaoweb] . (...) -- C:\Users\Benjamin\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb [MD5.276FFA96DE1921AF0EDFD74515C5265C] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe [332016] [PID.5712] =>.McAfee, Inc.® [MD5.1283D0E726A546D58650070BE76DFA7C] - (.Reimage® - Reimage Real Time Protection.) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [8515952] [PID.4356] =>.Superfluous.ReimageRepair [MD5.264C5475A0EAB94B00EA3138152D15E9] - (.Reimage® - Reimage System Protection.) -- C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe [8062832] [PID.1588] =>.Superfluous.ReimageRepair P2 - EXT: (.http://www.cacaoweb.org/ - cacaoweb.) -- C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\q1rj85qg.default-1483299511159\extensions\cacaoweb@cacaoweb.org =>.Superfluous.CacaoWeb O4 - GS\Startup [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe =>.McAfee, Inc.® O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan =>.McAfee, Inc. O42 - Logiciel: Reimage Repair - (.Reimage.) [HKLM][64Bits] -- Reimage Repair =>.Superfluous.ReimageRepair HKLM\SOFTWARE\Wow6432Node\mcafeeupdater =>.McAfee Inc. HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\MCAFEE =>.McAfee Inc. HKCU\SOFTWARE\Norton =>.Symantec Corporation HKCU\SOFTWARE\Reimage =>.Superfluous.ReimageRepair O43 - CFD: 25/11/2014 - [] D -- C:\Program Files\McAfee Security Scan =>.McAfee O43 - CFD: 30/07/2017 - [] D -- C:\Program Files\Reimage =>.Superfluous.ReimageRepair O43 - CFD: 30/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair =>.Superfluous.ReimageRepair O43 - CFD: 21/11/2014 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 10/01/2015 - [] D -- C:\ProgramData\McAfee Security Scan =>.McAfee O43 - CFD: 25/06/2014 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation O43 - CFD: 25/06/2014 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec O43 - CFD: 30/07/2017 - [] D -- C:\ProgramData\Reimage Protector =>.Superfluous.ReimageRepair O43 - CFD: 30/07/2017 - [] D -- C:\Users\Benjamin\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb O45 - LFCP:[MD5.A78E7C13894956AF29D2D9113C824CC0] 29/07/2017 A -- C:\WINDOWS\Prefetch\CACAOWEB.EXE-794E660D.pf =>.Superfluous.CacaoWeb O45 - LFCP:[MD5.1943049071377D6FBC59807BBC472372] 30/07/2017 A -- C:\WINDOWS\Prefetch\REIMAGE.EXE-BEE43FC1.pf =>.Superfluous.ReimageRepair O45 - LFCP:[MD5.C31A675E6A47F815257B4522332DC997] 30/07/2017 A -- C:\WINDOWS\Prefetch\REIMAGEPACKAGE.EXE-2C090C4D.pf =>.Superfluous.ReimageRepair O45 - LFCP:[MD5.1661066BAC7F2CB1BEBEB3812F80A72D] 30/07/2017 A -- C:\WINDOWS\Prefetch\REIMAGEREPAIR.EXE-C524CFCB.pf =>.Superfluous.ReimageRepair O61 - LFC: 2017/07/29 21:44:19 A . (..) -- C:\Users\Benjamin\Desktop\cacaoweb.exe [568624] =>.Superfluous.CacaoWeb O61 - LFC: 2017/07/30 00:04:41 A . (.Reimage.) -- C:\Users\Benjamin\Downloads\ReimageRepair.exe [604928] =>.Superfluous.ReimageRepair [HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector] =>.Superfluous.ReimageRepair O87 - FAEL: "{51D7CC67-E392-4FFB-997E-58012F3BE145}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (.not file.) O87 - FAEL: "{BD37FAAF-226E-4440-8336-78A7109B634A}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (.not file.) O87 - FAEL: "TCP Query User{91E07FFF-6A6B-4CBE-B54E-A46EA3F59C75}C:\program files (x86)\skype\phone\skype.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\skype\phone\skype.exe (.not file.) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>.Superfluous.ReimageRepair [HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Reimage Reminder] =>.Superfluous.ReimageRepair [HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReimageUpdater] =>.Superfluous.ReimageRepair C:\Users\Benjamin\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\q1rj85qg.default-1483299511159\extensions\cacaoweb@cacaoweb.org =>.Superfluous.CacaoWeb C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair =>.Superfluous.ReimageRepair C:\ProgramData\Reimage Protector =>.Superfluous.ReimageRepair C:\Users\Benjamin\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb C:\WINDOWS\Prefetch\CACAOWEB.EXE-794E660D.pf =>.Superfluous.CacaoWeb C:\WINDOWS\Prefetch\REIMAGE.EXE-BEE43FC1.pf =>.Superfluous.ReimageRepair C:\WINDOWS\Prefetch\REIMAGEPACKAGE.EXE-2C090C4D.pf =>.Superfluous.ReimageRepair C:\WINDOWS\Prefetch\REIMAGEREPAIR.EXE-C524CFCB.pf =>.Superfluous.ReimageRepair FirewallRaz EmptyPrefetch EmptyTemp EmptyFlash