Script ZHPFix O4 - HKLM\..\Run: [BEWINTERNET-FR-DMGP-V2SessionManager] -- C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe (.not file.) P2 - EXT: (...) -- C:\Users\timothée\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} =>PUP.Optional.Wajam O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) O42 - Logiciel: DomaIQ - (.Tuguu SLU.) [HKLM] -- DomaIQ Uninstaller =>PUP.Optional.DomaIQ HKLM\SOFTWARE\mcafeeupdater =>.McAfee Inc. HKLM\SOFTWARE\Symantec =>.Symantec HKLM\SOFTWARE\SymDebug =>.Symantec Corporation O43 - CFD: 28/03/2015 - [] D -- C:\ProgramData\Baidu =>.Baidu O43 - CFD: 28/08/2009 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec O43 - CFD: 28/08/2009 - [] D -- C:\ProgramData\Symantec =>.Symantec O43 - CFD: 29/08/2009 - [] D -- C:\Program Files\Common Files\Symantec Shared =>.Symantec Corporation O43 - CFD: 25/12/2008 - [] D -- C:\Users\timothée\AppData\Roaming\Symantec =>.Symantec O43 - CFD: 27/10/2011 - [] D -- C:\Users\timothée\AppData\Local\Chromium =>.Chromium O43 - CFD: 29/07/2011 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\McAfee =>.McAfee O53 - SMSR:HKLM\...\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key] . (...) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (...) -- C:\Program Files\iTunes\iTunesHelper.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (...) -- C:\Program Files\QuickTime\QTTask.exe (.not file.) O69 - SBI: prefs.js [timothée - ujyszqpe.default] user_pref("extensions.Fortunitas.aul", "1394395682682"); =>PUP.Optional.Fortunitas O69 - SBI: prefs.js [timothée - ujyszqpe.default] user_pref("extensions.Fortunitas.irl", true); =>PUP.Optional.Fortunitas O69 - SBI: prefs.js [timothée - ujyszqpe.default] user_pref("extensions.Fortunitas.is", "tg4stfr"); =>PUP.Optional.Fortunitas O69 - SBI: prefs.js [timothée - ujyszqpe.default] user_pref("extensions.Fortunitas.ug", "D89491CB-966D-432A-8A0E-F6DCE9F48139"); =>PUP.Optional.Fortunitas O87 - FAEL: "{032F6630-58BA-4DB0-B13C-A120DE36D338}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager\Cym2005.exe (.not file.) O87 - FAEL: "{DCBDD73E-FDF3-45EF-8E3A-003AF397CA02}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager\Cym2005.exe (.not file.) O87 - FAEL: "{F1B33D03-CD80-43E7-BE10-E44ED6B9C906}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - La Vuelta - Temporada 2009\PCM.exe (.not file.) O87 - FAEL: "{B359D158-DD25-462D-B6D2-F15F56E5EAA2}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - La Vuelta - Temporada 2009\PCM.exe (.not file.) O87 - FAEL: "{9AF43EE8-A0D5-4DDE-9383-798A3FB088CF}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - La Vuelta - Temporada 2009\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "{32AE8597-673D-456E-884B-81BEC96345B1}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - La Vuelta - Temporada 2009\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "TCP Query User{7D124941-FE31-43A5-BB51-3E275DD5D3DC}C:\program files\adsltv\adsltv.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adsltv\adsltv.exe (.not file.) O87 - FAEL: "UDP Query User{CFC546BA-D2E3-4629-965A-C312FC52EB94}C:\program files\adsltv\adsltv.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adsltv\adsltv.exe (.not file.) O87 - FAEL: "{B6CFF846-3BBB-49AD-BF62-C336ADB9B4CA}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2010\PCM.exe (.not file.) O87 - FAEL: "{66D210E3-52A6-4E4A-B630-FA1AC79A5134}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2010\PCM.exe (.not file.) O87 - FAEL: "{3A4EE0D1-5239-405A-8A2E-CAF06C8B4E96}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2010\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "{37488E42-4B66-4B77-98F8-7562241F22C0}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2010\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "TCP Query User{EB6B9B5B-C253-49BE-9F4B-C09F7A7ABEA0}C:\program files\cyanide\pro cycling manager - saison 2010\pcm.exe" [In-None-P6-TRUE] .(...) -- C:\program files\cyanide\pro cycling manager - saison 2010\pcm.exe (.not file.) O87 - FAEL: "UDP Query User{FA24AF6B-0C3D-430F-A287-FBBC2358DF63}C:\program files\cyanide\pro cycling manager - saison 2010\pcm.exe" [In-None-P17-TRUE] .(...) -- C:\program files\cyanide\pro cycling manager - saison 2010\pcm.exe (.not file.) O87 - FAEL: "{103FF0B4-B092-4CBE-A9DB-20E247C7C62F}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2011\PCM.exe (.not file.) O87 - FAEL: "{9575BA0C-5DE0-4665-BF87-9BE41A5F4543}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2011\PCM.exe (.not file.) O87 - FAEL: "{822E9C66-4FC2-4A46-95C7-47191AFC2046}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2011\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "{825BFEBF-7126-4A67-A38D-717FC17D8E4B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Cyanide\Pro Cycling Manager - Saison 2011\Autorun\Exe\Autorun.exe (.not file.) O87 - FAEL: "{5B7C2191-F6A2-4197-BE19-1B6489268ECD}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Bonjour\mDNSResponder.exe (.not file.) O87 - FAEL: "{56C3DCBE-D955-4435-83B4-6A70D4C4D21E}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Bonjour\mDNSResponder.exe (.not file.) O87 - FAEL: "TCP Query User{B5572654-0CBA-4852-B605-F1F4CC05DC5D}C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729.exe" [In-None-P6-TRUE] .(...) -- C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729.exe (.not file.) O87 - FAEL: "UDP Query User{5B09355A-09FD-423D-9D84-D0A954D10828}C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729.exe" [In-None-P17-TRUE] .(...) -- C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729.exe (.not file.) O87 - FAEL: "TCP Query User{69DC21F7-0797-4AF6-BE27-2499610C30AF}C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729 (1).exe" [In-None-P6-TRUE] .(...) -- C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729 (1).exe (.not file.) O87 - FAEL: "UDP Query User{58BDC596-B7D1-441C-B61E-6DAA4BEA0C07}C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729 (1).exe" [In-None-P17-TRUE] .(...) -- C:\users\timothée\appdata\local\microsoft\windows\temporary internet files\content.ie5\nttguop2\conquer_v5517_p2p_20110729 (1).exe (.not file.) O87 - FAEL: "TCP Query User{DE3ED59B-D363-4636-95E5-D62E5C071682}C:\users\timothée\downloads\conquer_v5517.exe" [In-None-P6-TRUE] .(...) -- C:\users\timothée\downloads\conquer_v5517.exe (.not file.) O87 - FAEL: "UDP Query User{9D42E771-E433-43AF-8128-D0C1D5ADA38B}C:\users\timothée\downloads\conquer_v5517.exe" [In-None-P17-TRUE] .(...) -- C:\users\timothée\downloads\conquer_v5517.exe (.not file.) O87 - FAEL: "{67759DCB-A0A6-483A-8C49-4951CD1F210C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "{6A8FFDFA-D4C7-48E7-BC27-6D3595026FDE}" [In-None-P17-TRUE] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "{1BB98086-2DA3-4C4B-9A58-30F7E834BAF9}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\SteamApps\common\football manager 2012\fm.exe (.not file.) =>.Steam Games O87 - FAEL: "{FA2E1BAB-11B3-48E0-980C-912128D91638}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\SteamApps\common\football manager 2012\fm.exe (.not file.) =>.Steam Games O87 - FAEL: "TCP Query User{CAEACEA9-3530-4D2F-AE77-0A3B95745045}C:\program files\netdragon\conquer online 2.0\conquer.exe" [In-None-P6-TRUE] .(.TQ Digital Entertainment - Conquer Online.) -- C:\program files\netdragon\conquer online 2.0\conquer.exe O87 - FAEL: "UDP Query User{FF38CDBF-4FDB-4F0F-8405-7C0C29017B5D}C:\program files\netdragon\conquer online 2.0\conquer.exe" [In-None-P17-TRUE] .(.TQ Digital Entertainment - Conquer Online.) -- C:\program files\netdragon\conquer online 2.0\conquer.exe O87 - FAEL: "{481EC0AA-3469-4E8C-A40F-257F05F8DBD3}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Vuze\Azureus.exe (.not file.) O87 - FAEL: "{83BD7F30-ECC3-4F24-A58B-C5E80CAB0548}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Vuze\Azureus.exe (.not file.) O87 - FAEL: "TCP Query User{7DA11121-010A-4A0D-9BE9-43C7F65722C5}C:\program files\secondlifeviewer\slvoice.exe" [In-None-P6-TRUE] .(...) -- C:\program files\secondlifeviewer\slvoice.exe (.not file.) O87 - FAEL: "UDP Query User{5CBD1699-C358-4593-99FE-A075A2F69203}C:\program files\secondlifeviewer\slvoice.exe" [In-None-P17-TRUE] .(...) -- C:\program files\secondlifeviewer\slvoice.exe (.not file.) O87 - FAEL: "TCP Query User{55B89F36-CEE9-4215-BFFC-A5D3F31E7D69}C:\program files\cyanide\pro cycling manager - saison 2011\pcm.exe" [In-None-P6-TRUE] .(...) -- C:\program files\cyanide\pro cycling manager - saison 2011\pcm.exe (.not file.) O87 - FAEL: "UDP Query User{D0A8F97D-6681-4F3F-9D6F-1EFF1AB82C52}C:\program files\cyanide\pro cycling manager - saison 2011\pcm.exe" [In-None-P17-TRUE] .(...) -- C:\program files\cyanide\pro cycling manager - saison 2011\pcm.exe (.not file.) O87 - FAEL: "{B12B9EDC-0E01-40A0-985E-03E56E379636}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Vuze\Azureus.exe (.not file.) O87 - FAEL: "{126B026E-54E5-4D26-9551-52C9F7A5BDE5}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Vuze\Azureus.exe (.not file.) O87 - FAEL: "{CFBE47C3-D798-4E31-8FCA-39661FE600C7}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Streaming Audio Recorder\Streaming-Audio-Recorder.exe (.not file.) O87 - FAEL: "{838A16FA-A871-4699-A002-21CEA9E5294F}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Streaming Audio Recorder\StreamingAudioRecorder.exe (.not file.) O87 - FAEL: "{8BA53758-3773-4A82-A3BD-322F0FB99BE0}" [In-None-P6-TRUE] .(...) -- C:\Program Files\CyberLink\PowerDirector\PDR.EXE (.not file.) O87 - FAEL: "{22E1986E-3B2A-4373-A80D-2E8599FE8A75}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\bin\steamwebhelper.exe (.not file.) O87 - FAEL: "{24279B5D-4EA4-4E53-AA42-FB2C77C6063D}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\bin\steamwebhelper.exe (.not file.) O87 - FAEL: "{F075EB52-19A3-427B-A3B4-1043A7633BFC}" [In-None-P17-TRUE] .(...) -- C:\Users\timothée\Downloads\Conquer_v5987_P2P.exe (.not file.) O87 - FAEL: "{035A0AEA-15B8-4F65-9FAB-F597C1CA6F20}" [In-None-P17-TRUE] .(...) -- C:\Users\timothée\Downloads\Conquer_v5987_P2P.exe (.not file.) O87 - FAEL: "TCP Query User{0D59C8CB-FCE7-43C1-9043-C08026990339}C:\users\timothée\downloads\conquer_v5987_p2p.exe" [In-None-P6-TRUE] .(...) -- C:\users\timothée\downloads\conquer_v5987_p2p.exe (.not file.) O87 - FAEL: "UDP Query User{40C9DBE2-2432-40FC-B9A2-CD1CB68EAF80}C:\users\timothée\downloads\conquer_v5987_p2p.exe" [In-None-P17-TRUE] .(...) -- C:\users\timothée\downloads\conquer_v5987_p2p.exe (.not file.) C:\Users\timothée\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} =>PUP.Optional.Wajam [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}] =>.Superfluous.Orphan [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA6319C0-31B7-401E-A518-A07C3DB8F777}] =>.Superfluous.Orphan [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller] =>PUP.Optional.DomaIQ C:\ProgramData\Tmp0x0x =>PUP.Optional.WpManager [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1916A2AF346D399F50313C393200F14140456616] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2A83E9020591A55FC6DDAD3FB102794C52B24E70] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2B84BFBB34EE2EF949FE1CBE30AA026416EB2216] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\305F8BD17AA2CBC483A4C41B19A39A0C75DA39D6] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3A850044D8A195CD401A680C012CB0A3B5F8DC08] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\40AA38731BD189F9CDB5B9DC35E2136F38777AF4] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\43D9BCB568E039D073A74A71D8511F7476089CC3] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\471C949A8143DB5AD5CDF1C972864A2504FA23C9] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\51C3247D60F356C7CA3BAF4C3F429DAC93EE7B74] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\61793FCBFA4F9008309BBA5FF12D2CB29CD4151A] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\63FEAE960BAA91E343CE2BD8B71798C76BDB77D0] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\6431723036FD26DEA502792FA595922493030F97] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\80962AE4D6C5B442894E95A13E4A699E07D694CF] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\86E817C81A5CA672FE000F36F878C19518D6F844] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\8E5BD50D6AE686D65252F843A9D4B96D197730AB] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9845A431D51959CAF225322B4A4FE9F223CE6D15] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B533345D06F64516403C00DA03187D3BFEF59156] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B86E791620F759F17B8D25E38CA8BE32E7D5EAC2] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\C060ED44CBD881BD0EF86C0BA287DDCF8167478C] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CEA586B2CE593EC7D939898337C57814708AB2BE] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D018B62DC518907247DF50925BB09ACF4A5CB3AD] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F8A54E03AADC5692B850496A4C4630FFEAA29D83] =>PUM.Misplaced.Certificate [Avast Software] [HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FA6660A94AB45F6A88C0D7874D89A863D74DEE97] =>PUM.Misplaced.Certificate [Avast Software] FirewallRaz EmptyPrefetch EmptyTemp EmptyFlash