Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G0 - GCSP: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G1 - GCS: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.0.0.4.1, (D�sactiv�) =>PUP.Elex
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Activ�) =>PUP.Wajam
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com] [] Plus-HD-1.3 v (..) =>Adware.PlusHD
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com] [] Plus-HD-3.5 v (..) =>Adware.PlusHD
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v (..) =>Adware.MyWebSearch
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com =>Toolbar.DeltaSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
O2 - BHO: CrossriderApp0031257 - {11111111-1111-1111-1111-110311121157} . (.Plus HD - Plus-HD-1.3 BHO.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-bho.dll =>Adware.PlusHD
~ BHO: 16 Legitimates Filtered in 00mn 00s
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O4 - GS\QuickLaunch [Jean Michel Prudent]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O4 - GS\Program [Jean Michel Prudent]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O4 - GS\SystemTools [Jean Michel Prudent]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\MySearchDial.job [326] =>Adware.MyWebSearch
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job [1910] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job [1214] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-enabler.job [1114] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job [1834] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-updater.job [1312] =>Adware.PlusHD
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [MySearchDial] (...) -- C:\Users\Jean Michel Prudent\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>Adware.MyWebSearch
[MD5.00000000000000000000000000000000] [APT] [Omiga Plus RunAsStdUser] (...) -- C:\Program Files\Omiga Plus\omigaplus.exe (.not file.) [0] =>Hijacker.OmigaPlus
[MD5.3FB69FBE65375914C3F48A1D7A3AB9EF] [APT] [Plus-HD-1.3-chromeinstaller] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe [502120] =>Adware.PlusHD
[MD5.764216EF251D9964AC269EAEF426C951] [APT] [Plus-HD-1.3-codedownloader] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe [518504] =>Adware.PlusHD
[MD5.84BDDDB7E2A2D334CA9BA12AABF959AB] [APT] [Plus-HD-1.3-enabler] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [338792] =>Adware.PlusHD
[MD5.224C7BA3D1A11D4112CA6C57CF6BDE29] [APT] [Plus-HD-1.3-firefoxinstaller] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [767848] =>Adware.PlusHD
[MD5.23FB59BF0721096A7CEDFEA7EF871A34] [APT] [Plus-HD-1.3-updater] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-updater.exe [350568] =>Adware.PlusHD
[MD5.00000000000000000000000000000000] [APT] [YourFile DownloaderUpdate] (...) -- C:\Program Files\YourFileDownloader\YourFileUpdater.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{3D7045D8-CCB0-445F-9515-C6DBF7AFABC8}] (...) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\executeWithUAC.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{53D40682-0694-4B61-A10D-87B7AD385ACA}] (...) -- C:\Program Files\Adobe\pHOTOSHOP CS4\payloads\AdobeAIR1.0\AdobeAIRInstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D07CB88E-7C0C-41B5-A135-5A3655FC8881}] (...) -- C:\Program Files\IncrediMail\Bin\ImSetup.exe (.not file.)
O42 - Logiciel: Plus-HD-1.3 - (.Plus HD.) [HKLM] -- Plus-HD-1.3 =>Adware.PlusHD
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\DataMngr] =>PUP.Datamngr
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\eSafeSecControl] =>PUP.eSafeSecurity
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\omigaplusSvc] =>Hijacker.OmigaPlus
O43 - CFD: 16/11/2013 - 11:51:26 - [0,015] ----D C:\Program Files\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 11/11/2013 - 21:51:24 - [6,644] ----D C:\Program Files\Plus-HD-1.3 =>Adware.PlusHD
O43 - CFD: 22/07/2013 - 12:00:14 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 05/11/2013 - 14:56:44 - [0] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 05/11/2013 - 15:00:31 - [1,856] ----D C:\ProgramData\eSafe =>PUP.eSafeSecurity
O43 - CFD: 22/07/2013 - 13:42:55 - [1,045] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma
O43 - CFD: 06/11/2013 - 14:56:24 - [0,073] ----D C:\Users\Jean Michel Prudent\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 22/07/2013 - 11:49:23 - [0] ----D C:\Users\Jean Michel Prudent\AppData\Roaming\YourFileDownloader =>PUP.YourFileDownloader
O43 - CFD: 06/11/2013 - 14:56:09 - [0,054] ----D C:\Users\Jean Michel Prudent\AppData\Local\Wajam =>PUP.Wajam
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("browser.search.defaultenginename", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("browser.search.selectedEngine", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.crossrider.bic", "1410c2897fc02be29cd0d9c453304b09"); =>PUP.CrossRider
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.aflt", "telemsd"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD0DyEtB0BtDtC0FtN0D0Tzu0CyCyByCtN1L2XzutBtFtBtFzztFtCtBy[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.cr", "864347849"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dfltLng", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dfltSrch", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dnsErr", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.excTlbr", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD0D[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.id", "06225FDF5D42B01F"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.instlDay", "16015"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.instlRef", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.prdct", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.tlbrId", "base"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0F[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.newTab", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.smplGrp", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.014:55:51"); =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www2.delta-search.com =>Toolbar.DeltaSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {38228F43-0957-7735-7520-11F93151E3B7} - (delta-homes) - http://search.delta-homes.com =>Toolbar.DeltaSearch
[HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex^
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}] =>Adware.PlusHD^
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser] =>Hijacker.22Find^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.3] =>Adware.PlusHD^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc] =>Hijacker.OmigaPlus
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\esrv.EXE] =>PUP.Babylon
[HKLM\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKCU\Software\SpeedyPC Software] =>PUP.SpeedyPC
[HKLM\Software\SpeedyPC Software] =>PUP.SpeedyPC
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKLM\Software\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASAPI32] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASMANCS] =>PUP.OfferBox
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF] =>PUP.Dealio
[HKLM\Software\eSafeSecControl] =>PUP.eSafeSecurity
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKLM\Software\Classes\Installer\Features\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Classes\Installer\Products\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\80F08842F9EA1BE4BA4922DA74CDB698] =>Adware.iWinArcade
[HKLM\Software\delta-homesSoftware] =>Toolbar.DeltaSearch
[HKLM\SYSTEM\CurrentControlSet\Services\WsysSvc] =>PUP.eSafeSecurity
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc] =>PUP.eSafeSecurity
[HKLM\Software\Microsoft\Tracing\WebCakeDesktop_RASAPI32] =>Adware.WebCake
[HKLM\Software\Microsoft\Tracing\WebCakeDesktop_RASMANCS] =>Adware.WebCake
[HKLM\Software\omigaplusSvc] =>Hijacker.OmigaPlus
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\Classes\SpeedUpMyPC] =>Rogue.SpeedUpMyPC
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Classes\CrossriderApp0031257.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Classes\esrv.mysearchdialESrvc] =>Adware.MyWebSearch
[HKLM\Software\Classes\esrv.mysearchdialESrvc.1] =>Adware.MyWebSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322122257}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311301136}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311711180}] =>PUP.CrossRider
C:\Users\Jean Michel Prudent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo =>PUP.Elex^
C:\Users\Jean Michel Prudent\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com =>Adware.PlusHD^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com =>Adware.PlusHD^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} =>Adware.MyWebSearch^
C:\Program Files\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files\Plus-HD-1.3 =>Adware.PlusHD^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\ProgramData\eSafe =>PUP.eSafeSecurity^
C:\ProgramData\Tarma Installer =>PUP.Tarma^
C:\Users\Jean Michel Prudent\AppData\Roaming\mysearchdial =>Adware.MyWebSearch^
C:\Users\Jean Michel Prudent\AppData\Roaming\YourFileDownloader =>PUP.YourFileDownloader^
C:\Users\Jean Michel Prudent\AppData\Local\Wajam =>PUP.Wajam^
C:\ProgramData\Software =>Adware.Boxore
C:\ProgramData\SpeedyPC Software =>PUP.SpeedyPC
C:\Users\Jean Michel Prudent\AppData\Roaming\SpeedyPC Software =>PUP.SpeedyPC
C:\Users\Jean Michel Prudent\AppData\Local\Software =>Adware.Boxore
C:\Windows\Tasks\MySearchDial.job =>Adware.MyWebSearch^
C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-enabler.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-updater.job =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-enabler.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-updater.exe =>Adware.PlusHD^
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch^
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch^
FirewallRaz
EmptyFlash
Emptytemp
ShortcutFix
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G0 - GCSP: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G1 - GCS: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.0.0.4.1, (D�sactiv�) =>PUP.Elex
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Activ�) =>PUP.Wajam
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com] [] Plus-HD-1.3 v (..) =>Adware.PlusHD
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com] [] Plus-HD-3.5 v (..) =>Adware.PlusHD
M2 - MFEP: prefs.js [Jean Michel Prudent - uxu7lpqt.default\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v (..) =>Adware.MyWebSearch
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com =>Toolbar.DeltaSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
O2 - BHO: CrossriderApp0031257 - {11111111-1111-1111-1111-110311121157} . (.Plus HD - Plus-HD-1.3 BHO.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-bho.dll =>Adware.PlusHD
~ BHO: 16 Legitimates Filtered in 00mn 00s
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O4 - GS\QuickLaunch [Jean Michel Prudent]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O4 - GS\Program [Jean Michel Prudent]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O4 - GS\SystemTools [Jean Michel Prudent]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com =>Toolbar.DeltaSearch
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\MySearchDial.job [326] =>Adware.MyWebSearch
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job [1910] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job [1214] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-enabler.job [1114] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job [1834] =>Adware.PlusHD
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-1.3-updater.job [1312] =>Adware.PlusHD
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [MySearchDial] (...) -- C:\Users\Jean Michel Prudent\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>Adware.MyWebSearch
[MD5.00000000000000000000000000000000] [APT] [Omiga Plus RunAsStdUser] (...) -- C:\Program Files\Omiga Plus\omigaplus.exe (.not file.) [0] =>Hijacker.OmigaPlus
[MD5.3FB69FBE65375914C3F48A1D7A3AB9EF] [APT] [Plus-HD-1.3-chromeinstaller] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe [502120] =>Adware.PlusHD
[MD5.764216EF251D9964AC269EAEF426C951] [APT] [Plus-HD-1.3-codedownloader] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe [518504] =>Adware.PlusHD
[MD5.84BDDDB7E2A2D334CA9BA12AABF959AB] [APT] [Plus-HD-1.3-enabler] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [338792] =>Adware.PlusHD
[MD5.224C7BA3D1A11D4112CA6C57CF6BDE29] [APT] [Plus-HD-1.3-firefoxinstaller] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [767848] =>Adware.PlusHD
[MD5.23FB59BF0721096A7CEDFEA7EF871A34] [APT] [Plus-HD-1.3-updater] (.Plus HD.) -- C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-updater.exe [350568] =>Adware.PlusHD
[MD5.00000000000000000000000000000000] [APT] [YourFile DownloaderUpdate] (...) -- C:\Program Files\YourFileDownloader\YourFileUpdater.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{3D7045D8-CCB0-445F-9515-C6DBF7AFABC8}] (...) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\executeWithUAC.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{53D40682-0694-4B61-A10D-87B7AD385ACA}] (...) -- C:\Program Files\Adobe\pHOTOSHOP CS4\payloads\AdobeAIR1.0\AdobeAIRInstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D07CB88E-7C0C-41B5-A135-5A3655FC8881}] (...) -- C:\Program Files\IncrediMail\Bin\ImSetup.exe (.not file.)
O42 - Logiciel: Plus-HD-1.3 - (.Plus HD.) [HKLM] -- Plus-HD-1.3 =>Adware.PlusHD
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\DataMngr] =>PUP.Datamngr
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\eSafeSecControl] =>PUP.eSafeSecurity
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\omigaplusSvc] =>Hijacker.OmigaPlus
O43 - CFD: 16/11/2013 - 11:51:26 - [0,015] ----D C:\Program Files\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 11/11/2013 - 21:51:24 - [6,644] ----D C:\Program Files\Plus-HD-1.3 =>Adware.PlusHD
O43 - CFD: 22/07/2013 - 12:00:14 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 05/11/2013 - 14:56:44 - [0] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 05/11/2013 - 15:00:31 - [1,856] ----D C:\ProgramData\eSafe =>PUP.eSafeSecurity
O43 - CFD: 22/07/2013 - 13:42:55 - [1,045] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma
O43 - CFD: 06/11/2013 - 14:56:24 - [0,073] ----D C:\Users\Jean Michel Prudent\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 22/07/2013 - 11:49:23 - [0] ----D C:\Users\Jean Michel Prudent\AppData\Roaming\YourFileDownloader =>PUP.YourFileDownloader
O43 - CFD: 06/11/2013 - 14:56:09 - [0,054] ----D C:\Users\Jean Michel Prudent\AppData\Local\Wajam =>PUP.Wajam
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("browser.search.defaultenginename", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("browser.search.selectedEngine", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.crossrider.bic", "1410c2897fc02be29cd0d9c453304b09"); =>PUP.CrossRider
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.aflt", "telemsd"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD0DyEtB0BtDtC0FtN0D0Tzu0CyCyByCtN1L2XzutBtFtBtFzztFtCtBy[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.cr", "864347849"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dfltLng", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dfltSrch", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.dnsErr", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.excTlbr", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD0D[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.id", "06225FDF5D42B01F"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.instlDay", "16015"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.instlRef", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0FyD[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.prdct", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.tlbrId", "base"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=telemsd&cd=2XzuyEtN2Y1L1QzutDyCtBtByD0F0D0F[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.newTab", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.smplGrp", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Jean Michel Prudent - uxu7lpqt.default] user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.014:55:51"); =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www2.delta-search.com =>Toolbar.DeltaSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {38228F43-0957-7735-7520-11F93151E3B7} - (delta-homes) - http://search.delta-homes.com =>Toolbar.DeltaSearch
[HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex^
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}] =>Adware.PlusHD^
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser] =>Hijacker.22Find^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.3] =>Adware.PlusHD^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc] =>Hijacker.OmigaPlus
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\esrv.EXE] =>PUP.Babylon
[HKLM\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKCU\Software\SpeedyPC Software] =>PUP.SpeedyPC
[HKLM\Software\SpeedyPC Software] =>PUP.SpeedyPC
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKLM\Software\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASAPI32] =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASMANCS] =>PUP.OfferBox
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF] =>PUP.Dealio
[HKLM\Software\eSafeSecControl] =>PUP.eSafeSecurity
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKLM\Software\Classes\Installer\Features\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Classes\Installer\Products\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4301AEBD288588A40833184CFEC0AF92] =>Adware.iWinArcade
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\80F08842F9EA1BE4BA4922DA74CDB698] =>Adware.iWinArcade
[HKLM\Software\delta-homesSoftware] =>Toolbar.DeltaSearch
[HKLM\SYSTEM\CurrentControlSet\Services\WsysSvc] =>PUP.eSafeSecurity
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc] =>PUP.eSafeSecurity
[HKLM\Software\Microsoft\Tracing\WebCakeDesktop_RASAPI32] =>Adware.WebCake
[HKLM\Software\Microsoft\Tracing\WebCakeDesktop_RASMANCS] =>Adware.WebCake
[HKLM\Software\omigaplusSvc] =>Hijacker.OmigaPlus
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\Classes\SpeedUpMyPC] =>Rogue.SpeedUpMyPC
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Classes\CrossriderApp0031257.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0031257.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Classes\esrv.mysearchdialESrvc] =>Adware.MyWebSearch
[HKLM\Software\Classes\esrv.mysearchdialESrvc.1] =>Adware.MyWebSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322122257}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311301136}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311711180}] =>PUP.CrossRider
C:\Users\Jean Michel Prudent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo =>PUP.Elex^
C:\Users\Jean Michel Prudent\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com =>Adware.PlusHD^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com =>Adware.PlusHD^
C:\Users\Jean Michel Prudent\AppData\Roaming\Mozilla\Firefox\Profiles\uxu7lpqt.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} =>Adware.MyWebSearch^
C:\Program Files\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files\Plus-HD-1.3 =>Adware.PlusHD^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\ProgramData\eSafe =>PUP.eSafeSecurity^
C:\ProgramData\Tarma Installer =>PUP.Tarma^
C:\Users\Jean Michel Prudent\AppData\Roaming\mysearchdial =>Adware.MyWebSearch^
C:\Users\Jean Michel Prudent\AppData\Roaming\YourFileDownloader =>PUP.YourFileDownloader^
C:\Users\Jean Michel Prudent\AppData\Local\Wajam =>PUP.Wajam^
C:\ProgramData\Software =>Adware.Boxore
C:\ProgramData\SpeedyPC Software =>PUP.SpeedyPC
C:\Users\Jean Michel Prudent\AppData\Roaming\SpeedyPC Software =>PUP.SpeedyPC
C:\Users\Jean Michel Prudent\AppData\Local\Software =>Adware.Boxore
C:\Windows\Tasks\MySearchDial.job =>Adware.MyWebSearch^
C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-enabler.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job =>Adware.PlusHD^
C:\Windows\Tasks\Plus-HD-1.3-updater.job =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-enabler.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe =>Adware.PlusHD^
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-updater.exe =>Adware.PlusHD^
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch^
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch^
FirewallRaz
EmptyFlash
Emptytemp
ShortcutFix