Script ZHPFix O4 - HKCU\..\Run: [Web Companion] . (. - .) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.Not File.) O4 - HKUS\S-1-5-21-4292629427-1022474966-2740723122-1001\..\Run: [Web Companion] . (. - .) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.Not File.) O4 - GS\Quicklaunch [Administrateur]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Programs [Administrateur]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Quicklaunch [SEAL_PC]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Programs [SEAL_PC]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Quicklaunch [WDAGUtilityAccount]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Programs [WDAGUtilityAccount]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O4 - GS\Programs [Public]: jZip.lnk . (.Bandoo Media Inc - jZip.) C:\Program Files (x86)\jZip\jZip.exe {32B24D9C6170CB3DA53A710307649B95} O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Browser Infrastructure Helper [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion [HKEY_USERS\S-1-5-21-4292629427-1022474966-2740723122-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Browser Infrastructure Helper [HKEY_USERS\S-1-5-21-4292629427-1022474966-2740723122-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task HKCU\Software\Lavasoft\Web Companion HKCU\Software\jZip HKCU\Software\TeleCharger HKCU\Software\Mozilla\Extends HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion HKLM\SOFTWARE\Wow6432Node\jZip HKLM\SOFTWARE\Lavasoft\Web Companion HKCU\SOFTWARE\cacaoweb HKCU\SOFTWARE\globalUpdate HKCU\SOFTWARE\IRISDesktopSearch HKCU\SOFTWARE\Smartbar HKCU\SOFTWARE\AppDataLow\Software\jzipmusictoolbar181 O108 - CMH1: PDFArchitect3_PDFManagerExt [64Bits] - {7519DD38-AA6F-4250-8E81-F1576DA1A05E} . (.Orphan.) O108 - CMH1: PDFArchitectExtension [64Bits] - {DBDB3433-0E01-40CE-A026-D9F54FAC3CA9} . (.Orphan.) O108 - CMH1: jZip [64Bits] - {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} . (.Bandoo Media Inc - jZip shell extension.) -- C:\Program Files (x86)\jZip\jZipShell.dll O108 - CMH6: jZip [64Bits] - {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} . (.Bandoo Media Inc - jZip shell extension.) -- C:\Program Files (x86)\jZip\jZipShell.dll O58 - SDL:2015/10/04 09:21:49 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\4E7C70CC.sys [113880] =>.Malwarebytes Corporation® (.SUP.Orphan) O90 - PUC: "ADF563E0F909939438A862D14D868D26" [HKLM] . (.Boxore Client.) -- C:\windows\Installer\{0E365FDA-909F-4939-838A-261DD468D862}\boxore.ico [MD5.9498B94351DAE84D294622EA61FB131B] [WIS][2011/08/31 21:54:52] (.McAfee.) -- C:\WINDOWS\Installer\169d6.msi [1448448] =>.McAfee HKLM\SYSTEM\CurrentControlSet\Services\HPSmartDeviceAgentBase c:\Program Files (x86)\HP\HPSmartDeviceAgentBase\Service\HPSmartDeviceAgentBase.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes Anti-Malware Packages C:\Program Files\003 C:\Program Files (x86)\globalUpdate C:\Program Files (x86)\Music Toolbar C:\Program Files (x86)\QuickTime C:\Program Files (x86)\webget C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime C:\Users\SEAL_PC\AppData\Roaming\0F1F1C2Y1H1P1C0I0T C:\Users\SEAL_PC\AppData\Local\globalUpdate HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect3_PDFManagerExt HKLM\Software\Classes\CLSID\{7519DD38-AA6F-4250-8E81-F1576DA1A05E} HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitectExtension HKLM\Software\Classes\CLSID\{DBDB3433-0E01-40CE-A026-D9F54FAC3CA9} C:\windows\Installer\{0E365FDA-909F-4939-838A-261DD468D862}\boxore.ico HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Products\ADF563E0F909939438A862D14D868D26 HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Features\ADF563E0F909939438A862D14D868D26 C:\WINDOWS\Installer\142d085b.msp C:\WINDOWS\Installer\1549f3b7.msp C:\WINDOWS\Installer\15c95897.msp C:\WINDOWS\Installer\1ab992.msp C:\WINDOWS\Installer\24ea0c5b.msp C:\WINDOWS\Installer\29b5ab1e.msp C:\WINDOWS\Installer\2de1e8cd.msp C:\WINDOWS\Installer\343e9f9e.msp C:\WINDOWS\Installer\345f3850.msp C:\WINDOWS\Installer\34da0b.msp C:\WINDOWS\Installer\403ddd9e.msp C:\WINDOWS\Installer\4ac5930e.msp C:\WINDOWS\Installer\aad613e.msp C:\WINDOWS\Installer\e8478.msp C:\WINDOWS\Installer\fa410da.msp C:\Users\SEAL_PC\AppData\Local\Google\Chrome\User Data\Default\File System\000 [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]:{58124A0B-DC32-4180-9BFF-E0E21AE34026} [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]:{977AE9CC-AF83-45E8-9E03-E2798216E2D5} [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]:{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix