Script zhpfix
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
[HKCU\Software\44152InstEnd]
[HKCU\Software\Pando Networks]
[HKLM\Software\Better Surf Plus]
[HKLM\Software\Better-Surf] =>PUP.BetterSurf
[HKLM\Software\CoolPic] =>Adware.Incredibar
[HKLM\Software\MediaPlayerV1]
[HKLM\Software\Pando Networks]
[HKLM\Software\free_soft_to_day]
[HKLM\Software\supWPM] =>PUP.WpManager
O43 - CFD: 04/11/2013 - 07:45:06 - [6,940] ----D C:\Program Files\Pando Networks
O43 - CFD: 04/03/2014 - 14:50:14 - [0,001] ----D C:\Program Files\Uninstaller
O43 - CFD: 05/03/2014 - 12:39:05 - [0] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 04/10/2013 - 18:51:11 - [0,119] ----D C:\Users\Ferrero\AppData\Local\.pLoader
O61 - LFC: 04/03/2014 - 20:00:07 ---A- . (...) -- C:\Users\Ferrero\AppData\Local\PMB Files\pando.save [846] =>P2P.Pando
O61 - LFC: 04/03/2014 - 20:00:07 ---A- . (...) -- C:\Users\Ferrero\AppData\Local\PMB Files\cert\cert8.db [65536] =>P2P.Pando
O61 - LFC: 04/03/2014 - 20:00:07 ---A- . (...) -- C:\Users\Ferrero\AppData\Local\PMB Files\cert\key3.db [16384] =>P2P.Pando
O61 - LFC: 04/03/2014 - 20:00:07 ---A- . (...) -- C:\Users\Ferrero\AppData\Local\PMB Files\cert\secmod.db [16384] =>P2P.Pando
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {0E93C76A-E7DB-4690-BD5A-90D1A50190E7} - (Yahoo!) - http://search.yahoo.com
O90 - PUC: "D2A425F47365A600677A7A857BC06000" . (.Ask Toolbar.) -- C:\Windows\Installer\{4F524A2D-5637-006A-76A7-A758B70C0600}\ToolbarIcon.exe =>Toolbar.Ask
[MD5.D57323DC36D85DBA08AA4D2FCA44C674] [WIS][19/10/2013] (.APN, LLC - Ask Toolbar.) -- C:\Windows\Installer\113252.msi [461312] =>Toolbar.Ask
[MD5.9B5C4F545C6E7502A9B6F3DA900C6333] [WIS][11/06/2013] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\6c187.msi [23040] =>Toolbar.Google
C:\ProgramData\WPM =>PUP.WpManager^
[HKLM\Software\Better-Surf] =>PUP.BetterSurf^
[HKLM\Software\CoolPic] =>Adware.Incredibar^
[HKLM\Software\supWPM] =>PUP.WpManager^
C:\Windows\Installer\113252.msi =>Toolbar.Ask^
C:\Windows\Installer\6c187.msi =>Toolbar.Google^
Emptytemp
emptyflash