Script ZHPFix O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer-Networking Ltd.® O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer-Networking Ltd.® O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer-Networking Ltd.® SR - Auto [23/05/2017] [ 1776864] Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer-Networking Ltd.® SR - Auto [23/05/2017] [ 2131760] Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer-Networking Ltd.® SR - Auto [23/05/2017] [ 233936] Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer-Networking Ltd.® O4 - HKCU\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe =>.Safer-Networking Ltd.® O4 - GS\Startup [Administrateur]: lollipop_03090844.lnk . (...) C:\Users\Lucette\AppData\Local\Lollipop\lollipop_03090844.exe lollipop_03090844 O4 - GS\Startup [Administrateur]: lollipop_04070631.lnk . (...) C:\Users\Lucette\AppData\Local\Lollipop\lollipop_04070631.exe lollipop_04070631 O4 - GS\Startup [Lucette]: lollipop_03090844.lnk . (...) C:\Users\Lucette\AppData\Local\Lollipop\lollipop_03090844.exe lollipop_03090844 O4 - GS\Startup [Lucette]: lollipop_04070631.lnk . (...) C:\Users\Lucette\AppData\Local\Lollipop\lollipop_04070631.exe lollipop_04070631 O4 - HKLM\..\Wow6432Node\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe =>.Safer-Networking Ltd.® O4 - HKUS\S-1-5-21-1811546824-2429198167-3269102077-1001\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe =>.Safer-Networking Ltd.® O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop_04270746 O45 - LFCP:[MD5.CA408DF039E74BABB887857F0E6E168A] 17/07/2017 A -- C:\Windows\Prefetch\BABMAINT.EXE-4310EE22.pf O45 - LFCP:[MD5.D76AE187F7D0AB078EB0218362595F34] 04/09/2016 A -- C:\Windows\Prefetch\YONTOODESKTOP.EXE-89BBD1ED.pf O69 - SBI: SearchScopes [HKCU] [64Bits]{4327FABE-3C22-4689-8DBF-D226CF777FE9} - (Plus! Network) - http://plusnetwork.com/ [MD5.B4337BA6754438CD2699D8A17DD8A359] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864] [PID.1080] =>.Safer-Networking Ltd.® [MD5.30696A220D11270F4FC65C2D74CEE4D1] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760] [PID.2072] =>.Safer-Networking Ltd.® [MD5.FDEF8DC6871B96BBBD39A648994F60D1] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936] [PID.2604] =>.Safer-Networking Ltd.® [MD5.0EB54CE79A43ECFF46B6DAF7743E56F1] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464] [PID.5756] =>.Safer-Networking Ltd.® [MD5.79E6443F01B4B1C3B957AA38DDD564FF] [WIS][2012/07/16 16:20:38] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\595d92.msi [45056]HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04270746 O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) C:\Windows\Prefetch\BABMAINT.EXE-4310EE22.pf C:\Windows\Prefetch\YONTOODESKTOP.EXE-89BBD1ED.pf HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4327FABE-3C22-4689-8DBF-D226CF777FE9} O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 =>.Safer-Networking Ltd.® HKLM\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited O43 - CFD: 30/04/2018 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2 =>.SaferNetworking O43 - CFD: 30/04/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 =>.SaferNetworking O43 - CFD: 30/04/2018 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 07/12/2011 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 30/04/2018 - [] D -- C:\ProgramData\Spybot - Search & Destroy =>.SaferNetworking O43 - CFD: 06/04/2012 - [] D -- C:\ProgramData\Trend Micro =>.Trend Micro O43 - CFD: 24/04/2018 - [0] D -- C:\Program Files (x86)\Common Files\AV =>.Avast O43 - CFD: 06/09/2011 - [0] D -- C:\Users\Lucette\AppData\Local\PackageAware =>.SUP.BearShare O43 - CFD: 11/12/2011 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\McAfee =>.McAfee O69 - SBI: SearchScopes [HKCU] [64Bits]{4327FABE-3C22-4689-8DBF-D226CF777FE9} - (Plus! Network) - http://plusnetwork.com/ =>PUP.Optional.PlusNetwork C:\Windows\Installer\595d92.msi [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Program Files (x86)\Iminent\inst\Bootstrapper\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Program Files (x86)\Iminent\inst\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Program Files (x86)\Iminent\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Users\Lucette\AppData\Local\Smartbar\Common\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Users\Lucette\AppData\Local\Smartbar\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Users\Lucette\AppData\Local\Smartbar\Application\ [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\Folders]:C:\Users\Lucette\AppData\Local\Smartbar\Common\iconsWide\ O34 - HKLM BootExecute: (sdnclean64.exe) =>.Safer Networking Ltd EmptyPrefetch SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix