Script ZHPFix
SysRestore
C:\Users\Nelly\AppData\Local\Google\Chrome\User Data\Default\Preferences C:\Users\Nelly\AppData\Roaming\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\prefs.js (.not file.)
[MD5.00000000000000000000000000000000] [APT] [Registry_Doktor] (...) -- C:\Program Files\RegistryDoktor 4.1\RegistryDoktor.exe (.not file.) [0] O39 - APT: Registry_Doktor - (...) -- C:\Windows\Tasks\Registry_Doktor.job [332]
O39 - APT: Registry_Doktor - (...) -- C:\Windows\System32\Tasks\Registry_Doktor [332]
O42 - Logiciel: Messenger Plus! Community Smartbar - (.Messenger Plus!.) [HKLM] -- {4C6C9AB1-BC69-4CC1-AE46-4053352586CB}
O42 - Logiciel: Reimage Express - (.Reimage.) [HKLM] -- Reimage Express O43 - CFD: 31/07/2013 - 21:22:58 - [] ----D C:\Program Files\McAfee Security Scan
O43 - CFD: 09/03/2014 - 09:00:00 - [] ----D C:\ProgramData\Reimage Express
O43 - CFD: 09/03/2014 - 08:58:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Express O43 - CFD: 16/11/2012 - 23:47:47 - [] ----D C:\Users\Nelly\AppData\Local\CRE O43 - CFD: 12/03/2014 - 08:11:07 - [0] ----D C:\Users\Nelly\AppData\Local\Feven 1.7
O43 - CFD: 21/12/2014 - 18:25:25 - [] ----D C:\Users\Nelly\AppData\Local\Smartbar O45 - LFCP:[MD5.2356F1F8558F6995C6E7A25D200172EB] - 13/06/2014 - 21:19:09 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-F83E4890.pf =>Hijacker.BabSolution O45 - LFCP:[MD5.97774F0A14406748284856DDB49AF62D] - 13/06/2014 - 22:05:30 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-7BB1D07F.pf =>PUP.DealPly O45 - LFCP:[MD5.2598651162EB68CE572B0A3F116E846D] - 13/06/2014 - 22:05:30 ---A- - C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-53F10C90.pf =>PUP.DealPly O45 - LFCP:[MD5.43C037F4675E1B6893D5DAAE321FE295] - 13/05/2014 - 20:06:41 ---A- - C:\Windows\Prefetch\FST_FR_134.EXE-5366765C.pf =>Adware.FreeSoftToday O45 - LFCP:[MD5.177800B3F909587FA7F4543FBE0A3B33] - 13/06/2014 - 20:59:12 ---A- - C:\Windows\Prefetch\MEDIAPLAYERPLUS-CODEDOWNLOADE-D4DEA7A3.pf =>PUP.CrossRider O45 - LFCP:[MD5.A134C85520B087A8F3077FD05CB3D171] - 17/12/2014 - 20:38:39 ---A- - C:\Windows\Prefetch\REIMAGEREMINDER.EXE-16D22B28.pf =>Rogue.ReimageRepair O45 - LFCP:[MD5.12D61E0FB94006F033F8637DE6F73D7F] - 18/04/2014 - 20:51:00 ---A- - C:\Windows\Prefetch\SMARTSAVER+ 8-CODEDOWNLOADER.-1BDED3A7.pf =>PUP.CrossRider C:\Users\Nelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbffombmdffoemfimpemoaaplncjdgfm
O90 - PUC: "8B501B6E56F182443979D1DFA8309BD4" . (.SupraSavings.) -- c:\Windows\Installer\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}\icon64.ico [MD5.7672D8E882B8E2D2C6562755E4FC4E7E] [WIS][17/04/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\444945.msi [1868288] =>PUP.SupraSavings [MD5.F6824CB05457112E4984720A97D96756] [WIS][17/04/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\44494c.msi [500224] =>PUP.SupraSavings [MD5.00923EEBE919F918DC729F74BFBB35D2] [WIS][09/04/2014] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\68808.msi [512512] =>Adware.Boxore [HKCR\CLSID\{0ED2C1F5-0D52-3528-8D19-2B3810844C64}] (LinkurySmartBar.LinkurySmartBarBandObject) =>Hijacker.SmartBar [HKCR\CLSID\{48791EE8-18B0-3225-94A7-2E912681434F}] (LinkurySmartBar.DockingPanel) =>Hijacker.SmartBar [HKCR\CLSID\{C0525F65-37A6-3CB1-B930-D0AD83655FCD}] (LinkurySmartBar.LinkuryMenuForm) =>Hijacker.SmartBar [HKCR\CLSID\{F149A3F1-9BED-3E8D-886C-AC801394E432}] (LinkurySmartBar.BandObjectAttribute) =>Hijacker.SmartBar [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Express] C:\Windows\Installer\444945.msi =>PUP.SupraSavings^ C:\Windows\Installer\44494c.msi =>PUP.SupraSavings^ C:\Windows\Installer\68808.msi =>Adware.Boxore^ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Express [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311201100}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311201100}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411051194}] =>PUP.CrossRider [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Iminent] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\DealPly] =>PUP.DealPly [HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}] =>Adware.Boxore [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PC Health Kit] =>PUP.DealPly [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AC6240AE-33B6-40D3-8683-31BBE86049A0}]
O58 - SDL:25/03/2009 - 10:06:28 ---A- . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\Drivers\mfeavfk.sys [79880]
O58 - SDL:25/03/2009 - 10:06:28 ---A- . (.McAfee, Inc. - Buffer Overflow Protection Driver.) -- C:\Windows\System32\Drivers\mfebopk.sys [35272]
O58 - SDL:25/03/2009 - 10:06:28 ---A- . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) -- C:\Windows\System32\Drivers\mfehidk.sys [214024]
O58 - SDL:25/03/2009 - 10:05:54 ---A- . (.McAfee, Inc. - VSCore Code Analysis Driver.) -- C:\Windows\System32\Drivers\mferkdk.sys [34216]
O58 - SDL:25/03/2009 - 10:06:30 ---A- . (.McAfee, Inc. - System Monitor Filter Driver.) -- C:\Windows\System32\Drivers\mfesmfk.sys [40552]
O64 - Services: CurCS - 25/03/2009 - C:\Windows\System32\drivers\mfehidk.sys (mfehidk) .(.McAfee, Inc. - Host Intrusion Detection Link Driver.) - LEGACY_MFEHIDK
O41 - Driver: McAfee Inc. mfehidk (mfehidk) . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) - C:\Windows\System32\drivers\mfehidk.sys
O43 - CFD: 23/07/2013 - 20:25:35 - [] ----D C:\ProgramData\McAfee
EmptyCLSID
EmptyFlash
EmptyTemp |