Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com =>Adware.SocialSkinz
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\QuickLaunch [In�s]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\QuickLaunch [In�s]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\TaskBar [In�s]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\Program [In�s]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\SystemTools [In�s]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O45 - LFCP:[MD5.1D037E9209FBEF25A144E316FD1976DC] - 21/09/2013 - 09:46:29 ---A- - C:\Windows\Prefetch\TOOLBAR CLEANER UNINSTALL.EXE-F5E0A6EE.pf =>Adware.ToolbarCleaner
C:\Windows\Prefetch\TOOLBAR CLEANER UNINSTALL.EXE-F5E0A6EE.pf =>Adware.ToolbarCleaner^
O2 - BHO: Lexmark Barre d'outils [64Bits] - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} . (...) -- C:\Program Files\Lexmark Toolbar\toolband.dll => Toolbar.Agent*
O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.) => Toolbar.Sorcim
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline => Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{90B49673-5506-483E-B92B-CA0265BD9CA8} Cl� orpheline => Toolbar.IMVU
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{1017A80C-6F09-4548-A84D-EDD6AC9525F0} Cl� orpheline => Toolbar.Lexmark
O4 - GS\Desktop [In�s]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch
O4 - HKUS\S-1-5-21-3306187391-503495989-824018544-1003\..\Run: [Bubble Dock] C:\Users\In�s\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) =>Toolbar.BubbleDock
O42 - Logiciel: Lexmark Barre d'outils - (...) [HKLM][64Bits] -- {1017A80C-6F09-4548-A84D-EDD6AC9525F0} => Toolbar.Lexmark
O42 - Logiciel: ToolbarFR - (.Orange.) [HKLM][64Bits] -- {A047FE02-C91C-41CB-898C-4ED21B86025A} => Toolbar.Orange
O43 - CFD: 14/07/2013 - 23:25:02 - [0,221] ----D C:\Program Files (x86)\WiseConvert_1.5_B2 =>Toolbar.Conduit
O43 - CFD: 20/09/2013 - 07:41:01 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 16/01/2013 - 15:43:35 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} => Toolbar.TuneUp
O53 - SMSR:HKLM\...\startupreg\InboxToolbar [Key] . (...) -- C:\Program Files (x86)\Inbox Toolbar\Inbox.exe (.not file.) => Inbox.com, Inc. - Inbox Toolbar
O53 - SMSR:HKLM\...\startupreg\ROC_ROC_NT [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe (.not file.) =>Toolbar.AVGSearch
O53 - SMSR:HKLM\...\startupreg\vProt [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch
O61 - LFC: 18/09/2013 - 12:49:59 ---A- . (...) -- C:\Users\In�s\AppData\Local\avgchrome\avgp [5338] => Toolbar.AVGSearch
O61 - LFC: 20/09/2013 - 13:03:03 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage [3072] =>Toolbar.DeltaSearch
O61 - LFC: 20/09/2013 - 13:03:03 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage-journal [3608] =>Toolbar.DeltaSearch
O61 - LFC: 20/09/2013 - 13:03:05 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\IdentitySafe\FAVICON_YAHOO.PNG [3463] =>Toolbar.Yahoo
O69 - SBI: SearchScopes [HKCU] {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} - (Norton Safe Search) - http://nortonsafe.search.ask.com => Toolbar.Ask
SS - | Disabled 10/07/1658 0 | (vToolbarUpdater12.2.6) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ROC_ROC_NT] =>Toolbar.AVGSearch^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\vProt] =>Toolbar.AVGSearch^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Orange
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\SearchBar.Client] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
C:\Program Files (x86)\WiseConvert_1.5_B2 =>Toolbar.Conduit^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage-journal =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\IdentitySafe\FAVICON_YAHOO.PNG =>Toolbar.Yahoo^
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe =>Toolbar.AVGSearch^
[HKLM\Software\BrowserChoice]
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com =>Adware.SocialSkinz
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\QuickLaunch [In�s]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\QuickLaunch [In�s]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\TaskBar [In�s]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\Program [In�s]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\SystemTools [In�s]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
O45 - LFCP:[MD5.1D037E9209FBEF25A144E316FD1976DC] - 21/09/2013 - 09:46:29 ---A- - C:\Windows\Prefetch\TOOLBAR CLEANER UNINSTALL.EXE-F5E0A6EE.pf =>Adware.ToolbarCleaner
C:\Windows\Prefetch\TOOLBAR CLEANER UNINSTALL.EXE-F5E0A6EE.pf =>Adware.ToolbarCleaner^
O2 - BHO: Lexmark Barre d'outils [64Bits] - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} . (...) -- C:\Program Files\Lexmark Toolbar\toolband.dll => Toolbar.Agent*
O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.) => Toolbar.Sorcim
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline => Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{90B49673-5506-483E-B92B-CA0265BD9CA8} Cl� orpheline => Toolbar.IMVU
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{1017A80C-6F09-4548-A84D-EDD6AC9525F0} Cl� orpheline => Toolbar.Lexmark
O4 - GS\Desktop [In�s]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch
O4 - HKUS\S-1-5-21-3306187391-503495989-824018544-1003\..\Run: [Bubble Dock] C:\Users\In�s\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) =>Toolbar.BubbleDock
O42 - Logiciel: Lexmark Barre d'outils - (...) [HKLM][64Bits] -- {1017A80C-6F09-4548-A84D-EDD6AC9525F0} => Toolbar.Lexmark
O42 - Logiciel: ToolbarFR - (.Orange.) [HKLM][64Bits] -- {A047FE02-C91C-41CB-898C-4ED21B86025A} => Toolbar.Orange
O43 - CFD: 14/07/2013 - 23:25:02 - [0,221] ----D C:\Program Files (x86)\WiseConvert_1.5_B2 =>Toolbar.Conduit
O43 - CFD: 20/09/2013 - 07:41:01 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 16/01/2013 - 15:43:35 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} => Toolbar.TuneUp
O53 - SMSR:HKLM\...\startupreg\InboxToolbar [Key] . (...) -- C:\Program Files (x86)\Inbox Toolbar\Inbox.exe (.not file.) => Inbox.com, Inc. - Inbox Toolbar
O53 - SMSR:HKLM\...\startupreg\ROC_ROC_NT [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe (.not file.) =>Toolbar.AVGSearch
O53 - SMSR:HKLM\...\startupreg\vProt [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch
O61 - LFC: 18/09/2013 - 12:49:59 ---A- . (...) -- C:\Users\In�s\AppData\Local\avgchrome\avgp [5338] => Toolbar.AVGSearch
O61 - LFC: 20/09/2013 - 13:03:03 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage [3072] =>Toolbar.DeltaSearch
O61 - LFC: 20/09/2013 - 13:03:03 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage-journal [3608] =>Toolbar.DeltaSearch
O61 - LFC: 20/09/2013 - 13:03:05 ---A- . (...) -- C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\IdentitySafe\FAVICON_YAHOO.PNG [3463] =>Toolbar.Yahoo
O69 - SBI: SearchScopes [HKCU] {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} - (Norton Safe Search) - http://nortonsafe.search.ask.com => Toolbar.Ask
SS - | Disabled 10/07/1658 0 | (vToolbarUpdater12.2.6) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ROC_ROC_NT] =>Toolbar.AVGSearch^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\vProt] =>Toolbar.AVGSearch^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Orange
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\SearchBar.Client] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
C:\Program Files (x86)\WiseConvert_1.5_B2 =>Toolbar.Conduit^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\http_www2.delta-search.com_0.localstorage-journal =>Toolbar.DeltaSearch^
C:\Users\In�s\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\IdentitySafe\FAVICON_YAHOO.PNG =>Toolbar.Yahoo^
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe =>Toolbar.AVGSearch^
[HKLM\Software\BrowserChoice]