Script zhpfix
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[MD5.947977A567C1DD887FCA3056B320BF4A] - (...) -- C:\Program Files (x86)\Re-Markable-soft\Re-Markable_wd.exe [93696] [PID.3136] =>PUP.Re-Markable
[MD5.6862F12A1493C40F20A256B5E467B893] - (...) -- C:\Program Files (x86)\Re-Markable-soft\Re-Markable157.exe [194560] [PID.2304] =>PUP.Re-Markable
G2 - GCE: Preference [User Data\Default] [gebbadcnkcgcfgpbmcdleckpejgopimf] cacaoweb v.1.19 (Activ�) =>PUP.CacaoWeb
G2 - GCE: Preference [User Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick Start v.3.2.0, (D�sactiv�)
O23 - Service: Re-Markable (Re-Markable) . (...) - C:\Program Files (x86)\Re-Markable-soft\Re-Markable157.exe =>PUP.Re-Markable
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\APSnotifierPP1.job [380] =>PUP.AnyProtect
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\APSnotifierPP2.job [378] =>PUP.AnyProtect
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\APSnotifierPP3.job [378] =>PUP.AnyProtect
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Re-Markable_wd.job [402] =>PUP.Re-Markable
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP1] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP2] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP3] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect
[MD5.947977A567C1DD887FCA3056B320BF4A] [APT] [Re-Markable_wd] (...) -- C:\Program Files (x86)\Re-Markable-soft\Re-Markable_wd.exe [93696] =>PUP.Re-Markable
O42 - Logiciel: Re-Markable - (.ReMarkable.) [HKLM][64Bits] -- e1241116-a0a2-47e9-983f-26659195f44e =>PUP.Re-Markable
[HKCU\Software\Safe Browser]
[HKLM\Software\Wow6432Node\anset]
[HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday
O43 - CFD: 15/03/2014 - 01:14:20 - [1,384] ----D C:\Program Files (x86)\Re-Markable-soft =>PUP.Re-Markable
O43 - CFD: 18/03/2014 - 00:04:54 - [0,001] ----D C:\Program Files (x86)\Uninstaller
O43 - CFD: 19/02/2014 - 03:43:28 - [43,420] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
O45 - LFCP:[MD5.07961BA223B784FCD47D76E7C0FAD636] - 20/03/2014 - 21:20:59 ---A- - C:\Windows\Prefetch\CACAOWEB.EXE-310ACF63.pf =>PUP.CacaoWeb
O45 - LFCP:[MD5.E6F9C267B603EF09803B6A4B6FF210B3] - 20/03/2014 - 21:21:04 ---A- - C:\Windows\Prefetch\HPOSD.EXE-EAAD9E22.pf
O45 - LFCP:[MD5.7B9122DD181ED9DFEFBDABBFC28938D0] - 20/03/2014 - 21:26:39 ---A- - C:\Windows\Prefetch\CACAOWEB.EXE-46F1F494.pf =>PUP.CacaoWeb
O45 - LFCP:[MD5.8AA1EABC948A90D0B30C9C161E77FEAA] - 22/03/2014 - 01:02:59 ---A- - C:\Windows\Prefetch\RE-MARKABLE_WD.EXE-3D74B346.pf =>PUP.Re-Markable
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com =>Toolbar.eBay
O69 - SBI: SearchScopes [HKCU] {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} - (Bing) - http://www.bing.com
O87 - FAEL: "TCP Query User{32CFB5E4-5957-43DE-B087-C695A0608A65}C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
O87 - FAEL: "UDP Query User{F872D4C2-ECA1-4B5C-BC40-65AE5F22BD5F}C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
O87 - FAEL: "TCP Query User{A1CFF6AD-8677-4E7E-B88B-C32B21234BAE}C:\users\angie\desktop\cacaoweb.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\angie\desktop\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
O87 - FAEL: "UDP Query User{9F10845D-9571-40FF-B023-979D42401DF8}C:\users\angie\desktop\cacaoweb.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\angie\desktop\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
O87 - FAEL: "TCP Query User{B66AC48C-191A-498B-BA57-AE13DE6E6FE6}C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
O87 - FAEL: "UDP Query User{58780340-7CE9-4BB2-BF89-26F3FC83C1A5}C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\angie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>PUP.CacaoWeb
SR - | Auto 15/03/2014 194560 | (Re-Markable) . (...) - C:\Program Files (x86)\Re-Markable-soft\Re-Markable157.exe =>PUP.Re-Markable
[HKLM\Software\Google\Chrome\Extensions\gebbadcnkcgcfgpbmcdleckpejgopimf] =>PUP.CacaoWeb^
[HKLM\SYSTEM\CurrentControlSet\Services\Re-Markable] =>PUP.Re-Markable^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\e1241116-a0a2-47e9-983f-26659195f44e] =>PUP.Re-Markable^
C:\Users\angie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbadcnkcgcfgpbmcdleckpejgopimf =>PUP.CacaoWeb^
C:\Program Files (x86)\Re-Markable-soft =>PUP.Re-Markable^
C:\Program Files (x86)\Re-Markable-soft\Re-Markable_wd.exe =>PUP.Re-Markable^
C:\Program Files (x86)\Re-Markable-soft\Re-Markable157.exe =>PUP.Re-Markable^
C:\Windows\Tasks\APSnotifierPP1.job =>PUP.AnyProtect^
C:\Windows\Tasks\APSnotifierPP2.job =>PUP.AnyProtect^
C:\Windows\Tasks\APSnotifierPP3.job =>PUP.AnyProtect^
C:\Windows\Tasks\Re-Markable_wd.job =>PUP.Re-Markable^
[HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday^
C:\Users\angie\Downloads\cacaoweb.exe =>PUP.CacaoWeb
SysRestore
FirewallRAZ
EmptyCLSID
EmptyTemp
EmptyFlash