Script ZHPFIX
G0 - GCSP: Preference [User Data\Default] http://www.do
G2 - GCE: Preference [User Data\Default] [nikdaiaidiiiogaidkkekcmokcgcdeac] Discount Dragon v.1.0, (Activé) =>PUP.DiscountDragon
O1 - Hosts: 54.225.95.126 nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon
O4 - GS\Desktop [Andy]: SpyHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe (.not file.) =>Crapware.SpyHunter
O43 - CFD: 30/12/2013 - 21:33:53 - [0,014] ----D C:\ProgramData\Appupdater
O43 - CFD: 04/01/2014 - 21:08:22 - [0,005] ----D C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter =>Crapware.SpyHunter
O45 - LFCP:[MD5.D1FD334231E3B8933D1468A86506E20D] - 04/01/2014 - 20:27:19 ---A- - C:\Windows\Prefetch\SPEEDUPMYPC_EN_1303-B354CA22.-D21E6F95.pf =>Rogue.SpeedUpMyPC
O45 - LFCP:[MD5.EB5F14C0E051DA67114A5E444767E0ED] - 04/01/2014 - 20:29:33 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-507507D1.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.CF46AB5DA332D018E1F34BDFB806C937] - 04/01/2014 - 20:39:36 ---A- - C:\Windows\Prefetch\LOLLIPOP.EXE-A6289DD5.pf =>Adware.Lollipop
O45 - LFCP:[MD5.42B39231112975F24C641366575AE15B] - 04/01/2014 - 21:02:05 ---A- - C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-256897FC.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.1CD8ACA1C5E393BAB7563817C37B7D8D] - 04/01/2014 - 21:08:10 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA32.EXE-098C3500.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.7D45DB8811A44F4E0CC91756ABB1D690] - 04/01/2014 - 21:08:15 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA31.EXE-F6367A7B.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.783A75C48CD318EA5A5303F75C777F70] - 04/01/2014 - 21:08:17 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA33.EXE-1CE1EF85.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.F1BF4CC6BFCFF13DA1BD7FA8A25D0A1B] - 04/01/2014 - 21:08:20 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA34.EXE-3037AA0A.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.31EDFC154314A9DCBC07EDBDFE07E296] - 04/01/2014 - 21:08:28 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA37.EXE-6A38D999.pf =>Crapware.SpyHunter
O45 - LFCP:[MD5.0AAAF56DA624C01C1AA4821B828CBF8F] - 04/01/2014 - 21:08:50 ---A- - C:\Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf =>Crapware.SpyHunter
[MD5.883DFC791AAF1298FCFC2BCF5471BBFC] [SPRF][04/01/2014] (...) -- C:\Users\Andy\AppData\Local\Temp\SHSetup.exe [46777424] =>Crapware.SpyHunter
[HKLM\Software\Google\Chrome\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac] =>PUP.DiscountDragon^
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon^
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter =>Crapware.SpyHunter^
C:\Users\Andy\AppData\Local\Temp\SHSetup.exe =>Crapware.SpyHunter^
C:\Users\Andy\Downloads\cacaoweb.exe =>PUP.CacaoWeb
C:\Users\Andy\Desktop\SpyHunter.lnk =>Crapware.SpyHunter
O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline
O4 - GS\TaskBar [Andy]: Cracked Steam Service.lnk . (.Anti-Valve Software - Cracked Steam Service.) -- C:\Program Files (x86)\Cracked Steam\Cracked Steam.exe
O4 - HKLM\..\Wow6432Node\Run: [fst_be_9] Clé orpheline
O43 - CFD: 22/11/2012 - 23:18:27 - [346,164] ----D C:\Program Files (x86)\Cracked Steam
O44 - LFC:[MD5.70BC8F4B72A86921468BF8E8441DCE51] - 29/12/2013 - 22:33:30 ---A- . (...) -- C:\service.log [32]
O45 - LFCP:[MD5.B558FE9DE10CF11795E995D1CAF2396E] - 01/01/2014 - 21:02:12 ---A- - C:\Windows\Prefetch\APOPHYSIS.EXE-9376F579.pf
O45 - LFCP:[MD5.73859FBDD730E652B44A0B063936398B] - 01/01/2014 - 21:02:48 ---A- - C:\Windows\Prefetch\APOPHYSIS7X.EXE-203135F7.pf
O45 - LFCP:[MD5.6DE3158AAA829CB5D255A5DD0196DD37] - 01/01/2014 - 21:21:25 ---A- - C:\Windows\Prefetch\DLLFIXER.EXE-8E89558E.pf
O45 - LFCP:[MD5.F0C18D8AF5E7C5F2D725D4D5867A4944] - 02/01/2014 - 00:58:09 ---A- - C:\Windows\Prefetch\APOPHYSIS7X64.EXE-64D912D3.pf
O45 - LFCP:[MD5.69AECAD1EF4B1FF5F324382944A36DC4] - 02/01/2014 - 01:06:38 ---A- - C:\Windows\Prefetch\APOPHYSIS7X.EXE-C60F367C.pf
O45 - LFCP:[MD5.EA3F75E63500896A298DB742B41C2F76] - 02/01/2014 - 19:59:59 ---A- - C:\Windows\Prefetch\dynreservedpri.db
O45 - LFCP:[MD5.C20E4D28116687A5DB17CC90F07815B9] - 02/01/2014 - 22:08:36 ---A- - C:\Windows\Prefetch\LEAGUEOFLEGENDS.EXE-A4819FFA.pf
O45 - LFCP:[MD5.13FD38465464DCA869D76200B282DC53] - 02/01/2014 - 22:24:29 ---A- - C:\Windows\Prefetch\LEAGUEOFLEGENDS_EUW_INSTALLER-3775E225.pf
O45 - LFCP:[MD5.E4228D84923ECC2C3328783793F420CE] - 03/01/2014 - 20:55:24 ---A- - C:\Windows\Prefetch\BATTLE.NET.EXE-7CA6421D.pf
O45 - LFCP:[MD5.3D41BFD7B9DB1CD074AC7E00B330E095] - 04/01/2014 - 20:03:38 ---A- - C:\Windows\Prefetch\SYSTEMCHECK_FRFR.EXE-69374685.pf
O45 - LFCP:[MD5.837A8DDF6520A072F46C9C629176186F] - 04/01/2014 - 20:26:56 ---A- - C:\Windows\Prefetch\NSN414C.EXE-4AEEC7BC.pf
O45 - LFCP:[MD5.506E9C5818458134552688F698D2EDD8] - 04/01/2014 - 20:27:04 ---A- - C:\Windows\Prefetch\FST_BE_0201-97550D5F.TMP-FB3C0443.pf
O45 - LFCP:[MD5.05E1BC84BCAD5167F61716D39C7213D7] - 04/01/2014 - 20:27:10 ---A- - C:\Windows\Prefetch\SETUP__4757.EXE-4AC7746B.pf
O45 - LFCP:[MD5.A4A588EACA19BE781C7F5AD1995F8C27] - 04/01/2014 - 20:30:08 ---A- - C:\Windows\Prefetch\UPFST_BE_9.EXE-587963D6.pf
O45 - LFCP:[MD5.3628C6F55679722C14DF46F73E61E350] - 04/01/2014 - 20:32:54 ---A- - C:\Windows\Prefetch\PREDM.TMP-03A48532.pf
O45 - LFCP:[MD5.F28CF1145CB26B58BE1D55A61E82A80E] - 04/01/2014 - 20:32:58 ---A- - C:\Windows\Prefetch\DM.TMP-D7D1524C.pf
O45 - LFCP:[MD5.BABA1DB57D047E4BBA84EBD76831D877] - 04/01/2014 - 20:33:08 ---A- - C:\Windows\Prefetch\CLING.TMP-955870C5.pf
O45 - LFCP:[MD5.13B9C68A99E732068479FD06C1617E50] - 04/01/2014 - 20:33:38 ---A- - C:\Windows\Prefetch\PACKAGE_CLING_INSTALLER_MULTI-215E0FCD.pf
O45 - LFCP:[MD5.01340AFA0D5B468C9AC5E918B29C2494] - 04/01/2014 - 20:33:42 ---A- - C:\Windows\Prefetch\DDRAGON.TMP-C2266300.pf
O45 - LFCP:[MD5.BC07D2D101B20DB53A871EC0AF7BB295] - 04/01/2014 - 20:33:54 ---A- - C:\Windows\Prefetch\IMNS.EXE-0863792E.pf
O45 - LFCP:[MD5.D144CDF08363F8C31AF39B1F73F81559] - 04/01/2014 - 20:33:54 ---A- - C:\Windows\Prefetch\PACKAGE_DDRAGON_INSTALLER_MUL-C7948999.pf
O45 - LFCP:[MD5.2BBBAF367FE3312E0199400DAEBFD8BA] - 04/01/2014 - 20:55:12 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-EDDC2BE6.pf
O45 - LFCP:[MD5.4643F22A2F8A5760DA83CCB4AC3CCE58] - 04/01/2014 - 21:58:25 ---A- - C:\Windows\Prefetch\SAIMFD.EXE-6320DBBC.pf
O45 - LFCP:[MD5.6AB088051B1162B502E80090EDE77D1A] - 04/01/2014 - 23:18:56 ---A- - C:\Windows\Prefetch\WGET.DAT-56E46C3F.pf
O45 - LFCP:[MD5.12A420B63BF4B7FA3791A26FEE112FE9] - 04/01/2014 - 23:19:03 ---A- - C:\Windows\Prefetch\JRT.EXE-8CD54CD3.pf
O45 - LFCP:[MD5.266ECB98E6D6AC865D23B2B4B1847035] - 04/01/2014 - 23:19:58 ---A- - C:\Windows\Prefetch\FIND.EXE-9AADDA11.pf
O45 - LFCP:[MD5.008BA352DC356322F3B79F0AAA92AAFB] - 04/01/2014 - 23:21:43 ---A- - C:\Windows\Prefetch\FC.EXE-F6221E79.pf
O45 - LFCP:[MD5.3A0431905E7E0893A3D00BF6AB9AE6C3] - 04/01/2014 - 23:21:58 ---A- - C:\Windows\Prefetch\CUT.DAT-3F905D18.pf
O45 - LFCP:[MD5.A45D2ECACC53E178DCC15CDCA1C2505B] - 04/01/2014 - 23:22:17 ---A- - C:\Windows\Prefetch\SHORTCUT.DAT-AD4BB600.pf
O45 - LFCP:[MD5.221B143A7C2160A85AA47B7AC64A8C4B] - 04/01/2014 - 23:22:21 ---A- - C:\Windows\Prefetch\NIRCMD.DAT-D7DEC2F5.pf
O45 - LFCP:[MD5.C34673C3384D7615517D0F5258B78238] - 05/01/2014 - 00:30:13 ---A- - C:\Windows\Prefetch\PROFILERU.EXE-2F69A030.pf
O45 - LFCP:[MD5.74E47F4B360BC0A548D0456AF1C59716] - 05/01/2014 - 00:30:27 ---A- - C:\Windows\Prefetch\INSTUP.EXE-7E543EAF.pf
O45 - LFCP:[MD5.F97B8B0B059CACF7DE371DD3EFC7CCA9] - 29/12/2013 - 23:18:57 ---A- - C:\Windows\Prefetch\RANGE_RAT3_SD7_0_20_0_64BIT_D-23E11A4E.pf
O45 - LFCP:[MD5.F0FD96DDF2941E97F88BC5C7AD6B9B08] - 29/12/2013 - 23:20:45 ---A- - C:\Windows\Prefetch\INSTUP.EXE-E4115C13.pf
O45 - LFCP:[MD5.D77D9FEBE0D1B0EFC35EC185C14F930E] - 30/12/2013 - 21:27:06 ---A- - C:\Windows\Prefetch\SYSTEMSETTINGS.EXE-6069CEA4.pf
O45 - LFCP:[MD5.DB5A60320315A534BB3656C58C770337] - 30/12/2013 - 21:41:59 ---A- - C:\Windows\Prefetch\FONDUE.EXE-142C2D15.pf
O45 - LFCP:[MD5.AFC1A937D451201169C85E01B779313C] - 30/12/2013 - 21:50:25 ---A- - C:\Windows\Prefetch\ARC.EXE-8B3AB13C.pf
O45 - LFCP:[MD5.30988B8FA330D3603E7625D8588EB94A] - 30/12/2013 - 21:55:06 ---A- - C:\Windows\Prefetch\SCULPTRIS.EXE-BEACBFC3.pf
O45 - LFCP:[MD5.33E42B2C8350B0A4B0484C13451494DB] - 30/12/2013 - 21:57:06 ---A- - C:\Windows\Prefetch\MORPHVOXPRO.EXE-1D999BCE.pf
O45 - LFCP:[MD5.118D2971CB3D21E0C0482269E347E1EE] - 30/12/2013 - 22:02:02 ---A- - C:\Windows\Prefetch\SKYPE_6-11_FR_11171.EXE-E30404DD.pf
O45 - LFCP:[MD5.275EAB459139DB74CCDA769681F34C04] - 30/12/2013 - 22:06:17 ---A- - C:\Windows\Prefetch\VIRTUALDUB.EXE-61A8430D.pf
C:\Program Files (x86)\Cracked Steam\bin\SteamService.exe
C:\Program Files (x86)\Cracked Steam\bin\x64launcher.exe
C:\Program Files (x86)\Cracked Steam\Cracked Steam.exe
C:\Program Files (x86)\Cracked Steam\csiw_support\bin\chgstr.exe
C:\Program Files (x86)\Cracked Steam\csiw_support\bin\wget.exe
C:\Program Files (x86)\Cracked Steam\csiw_support\const\noautorun.reg
C:\Program Files (x86)\Cracked Steam\GameOverlayUI.exe
C:\Program Files (x86)\Cracked Steam\GameOverlayUI.exe.log
C:\Program Files (x86)\Cracked Steam\GameOverlayUI.exe.log.last
C:\Program Files (x86)\Cracked Steam\resource\sourceinit.dat
C:\Program Files (x86)\Cracked Steam\steam.exe
C:\Program Files (x86)\Cracked Steam\steamapps\andycmoi\counter-strike source\cstrike\downloads\882ab71a.dat
C:\Program Files (x86)\Cracked Steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe
C:\Program Files (x86)\Cracked Steam\steamerrorreporter.exe
C:\Program Files (x86)\Cracked Steam\uninstall\unins000.dat
C:\Program Files (x86)\Cracked Steam\uninstall\unins000.exe
C:\Program Files (x86)\Cracked Steam\WriteMiniDump.exe
C:\Users\Andy\Desktop\Bureau\script\script art computer\Scripts\Oil Paint Crackle\Oil Paint Crackle.zip
C:\Users\Andy\Desktop\Bureau\script\__MACOSX\script art computer\Scripts\Oil Paint Crackle\._Oil Paint Crackle.zip
C:\Users\Andy\Downloads\FRAPS 3.5.9 - Full Cracked.rar.torrent
[MD5.F0A5B44B9B8A23E2F2950B346B5C7718] [SPRF][23/12/2013] (...) -- C:\Users\Andy\AppData\Local\Temp\Quarantine.exe [360051]
O45 - LFCP:[MD5.64418CA01D308CDF40C14E1394B566DD] - 04/01/2014 - 20:26:54 ---A- - C:\Windows\Prefetch\SEARCHPROTECT_2111-1A12A8CE.E-80231B3E.pf =>Toolbar.Conduit
hostfix
proxyfix
sysrestore
emptyflash
emptytemp
shortcutfix