Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
[MD5.7E4FD9AAB681A10A1510C5B2F5DD693A] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe [191320] [PID.5220] =>PUP.PirritSuggestor
[MD5.2B1D5E75F46A209F1BF94F7BB40B5133] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe [52056] [PID.2020] =>PUP.PirritSuggestor
[MD5.CF9826D1F1B7E48FE3CDB86A1F683CD5] - (...) -- C:\Program Files (x86)\WinRST\WinRST.exe [59904] [PID.2220] =>PUP.WinRST
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://127.0.0.1:9880 =>Hijacker.Proxy
O4 - HKLM\..\Run: [VideoDownloadConverter Home Page Guard 64 bit] C:\Program Files (x86)\VIDEOD~2\bar\1.bin\AppIntegrator64.exe (.not file.) =>Adware.VideoDownloadConverter
O4 - HKLM\..\Wow6432Node\Run: [freeSoftToday_widget] C:\Program Files (x86)\fst_en_2\freeSoftToday_widget.exe (.not file.) =>Adware.FreeSoftToday
O4 - HKLM\..\Wow6432Node\Run: [Allin1Convert_8h Browser Plugin Loader 64] C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon64.exe (.not file.) =>Adware.Allin1Convert
O23 - Service: Allin1ConvertService (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe (.not file.) =>Adware.Allin1Convert
O23 - Service: PirritDesktop (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor
O23 - Service: WinRST (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Dealply.job [298] =>PUP.DealPly
[MD5.311BCE25242D9D00CBD7BB9D8B6E1315] [APT] [Dealply] (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe [102968] =>PUP.DealPly
O42 - Logiciel: VideoDownloadConverter Internet Explorer Toolbar - (.Mindspark Interactive Network.) [HKLM][64Bits] -- VideoDownloadConverter_4zbar Uninstall Internet Explorer =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar
[HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\DealPlyLive] =>PUP.DealPly
[HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\TutoTag] =>AgenceExclusive
[HKCU\Software\Tutorials] =>AgenceExclusive
[HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar
[HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager
[HKCU\Software\WebProtect]
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\metacrawler] =>Adware.SearchYa
[HKLM\Software\Pirrit] =>PUP.PirritSuggestor
[HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM
[HKLM\Software\WEDL] =>PUP.weDownloadManager
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly
[HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday
[HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa
[HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor
[HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor
[HKLM\Software\Wow6432Node\RST]
[HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Tutorials] =>AgenceExclusive
[HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu
[HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar
[HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager
[HKLM\Software\Wow6432Node\WebProtect]
O43 - CFD: 2013-12-30 - 23:04:19 - [0] ----D C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp
O43 - CFD: 2013-11-06 - 05:07:23 - [0,851] ----D C:\Program Files (x86)\DealPly =>PUP.DealPly
O43 - CFD: 2013-11-06 - 05:28:23 - [0] ----D C:\Program Files (x86)\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-04-04 - 21:05:37 - [0,109] ----D C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost
O43 - CFD: 2014-01-02 - 12:12:45 - [12,131] ----D C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie
O43 - CFD: 2014-02-07 - 11:55:32 - [7,978] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 2014-01-05 - 11:46:10 - [0,868] ----D C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora
O43 - CFD: 2014-01-02 - 12:19:54 - [0,367] ----D C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM
O43 - CFD: 2014-01-02 - 12:14:22 - [1,186] ----D C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic
O43 - CFD: 2014-01-02 - 11:22:49 - [0] ---AD C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic
O43 - CFD: 2013-08-07 - 22:05:25 - [0,723] ----D C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner
O43 - CFD: 2013-09-01 - 10:03:49 - [0,789] ---AD C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter
O43 - CFD: 2014-03-07 - 08:40:11 - [6,116] ----D C:\Program Files (x86)\Web Protect =>PUP.WebProtect
O43 - CFD: 2014-01-05 - 11:46:09 - [0,555] ----D C:\Program Files (x86)\Webplayer
O43 - CFD: 2014-04-04 - 16:55:21 - [4,679] ----D C:\Program Files (x86)\WinRST =>PUP.WinRST
O43 - CFD: 2013-11-02 - 16:23:29 - [0,391] ----D C:\ProgramData\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-04-04 - 17:06:24 - [0] ----D C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 2014-01-02 - 12:18:42 - [0] ----D C:\ProgramData\Updater =>PUP.CrossRider
O43 - CFD: 2014-01-02 - 12:21:58 - [28,243] ----D C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar
O43 - CFD: 2014-01-02 - 12:14:47 - [0,070] ----D C:\ProgramData\Websteroids =>PUP.TubeDimmer
O43 - CFD: 2013-11-02 - 16:23:22 - [0,098] ----D C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly
O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure
O43 - CFD: 2013-12-04 - 13:06:32 - [0,066] ----D C:\Users\Jacques\AppData\Roaming\freegames4357
O43 - CFD: 2013-08-05 - 22:54:27 - [0] ----D C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa
O43 - CFD: 2014-01-02 - 11:30:51 - [0,004] ----D C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive
O43 - CFD: 2014-02-07 - 11:32:45 - [0] ----D C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock
O43 - CFD: 2014-01-02 - 12:20:26 - [3,778] ----D C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy
O43 - CFD: 2013-08-20 - 21:04:44 - [0] ----D C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix
O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 2013-12-04 - 13:06:31 - [0,121] ----D C:\Users\Jacques\AppData\Roaming\speedtest4354
O43 - CFD: 2014-01-05 - 11:29:33 - [0] ----D C:\Users\Jacques\AppData\Roaming\Webplayer
O43 - CFD: 2014-02-07 - 11:23:15 - [0] ----D C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager
O43 - CFD: 2013-11-02 - 16:23:29 - [0] ----D C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-02-10 - 18:00:54 - [0] ----D C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday
O43 - CFD: 2014-01-02 - 12:18:41 - [0,016] ----D C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits
O43 - CFD: 2013-10-25 - 11:29:26 - [0] ----D C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop
O43 - CFD: 2014-01-02 - 11:26:04 - [0,004] ----D C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie
O43 - CFD: 2014-04-04 - 16:55:29 - [5,574] ----D C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor
O43 - CFD: 2014-01-02 - 12:15:47 - [1,953] ----D C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic
O43 - CFD: 2013-12-30 - 20:08:11 - [0] ----D C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar
O43 - CFD: 2014-01-02 - 11:26:08 - [0] ----D C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits
O61 - LFC: 2014-04-09 - 22:28:26 ---A- . (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UpdateProc\TTL.DAT [4] =>PUP.DealPly
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASAPI32 =>Adware.BrowseFox
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASMANCS =>Adware.BrowseFox
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASAPI32 =>PUP.Duuqu
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASMANCS =>PUP.Duuqu
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASAPI32 =>Adware.VisualBeeToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASMANCS =>Adware.VisualBeeToolbar
SS - | Auto 1658-07-10 0 | (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe =>Adware.Allin1Convert
SR - | Auto 2014-03-18 52056 | (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor
SR - | Auto 2014-03-18 59904 | (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST
[HKLM\SYSTEM\CurrentControlSet\Services\Allin1Convert_8hService] =>Adware.Allin1Convert^
[HKLM\SYSTEM\CurrentControlSet\Services\PirritDesktop] =>PUP.PirritSuggestor^
[HKLM\SYSTEM\CurrentControlSet\Services\WinRST] =>PUP.WinRST^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter_4zbar Uninstall Internet Explorer] =>Adware.VideoDownloadConverter^
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Classes\SpeedUpMyPC] =>PUP.SpeedUpMyPC
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASAPI32] =>Adware.BrowseFox
[HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASMANCS] =>Adware.BrowseFox
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:VideoDownloadConverter Home Page Guard 64 bit =>Adware.VideoDownloadConverter^
C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp^
C:\Program Files (x86)\DealPly =>PUP.DealPly^
C:\Program Files (x86)\DealPlyLive =>PUP.DealPly^
C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost^
C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora^
C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM^
C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic^
C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic^
C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner^
C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter^
C:\Program Files (x86)\Web Protect =>PUP.WebProtect^
C:\Program Files (x86)\WinRST =>PUP.WinRST^
C:\ProgramData\DealPlyLive =>PUP.DealPly^
C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc^
C:\ProgramData\Updater =>PUP.CrossRider^
C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar^
C:\ProgramData\Websteroids =>PUP.TubeDimmer^
C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly^
C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure^
C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa^
C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive^
C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock^
C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy^
C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix^
C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc^
C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager^
C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly^
C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday^
C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits^
C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop^
C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie^
C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor^
C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic^
C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar^
C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro =>PUP.OptimizerPro
C:\Users\Jacques\AppData\LocalLow\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter
C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe =>PUP.PirritSuggestor^
C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor^
C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST^
C:\WINDOWS\Tasks\Dealply.job =>PUP.DealPly^
C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe =>PUP.DealPly^
[HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar^
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKCU\Software\DealPlyLive] =>PUP.DealPly^
[HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar^
[HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager^
[HKCU\Software\metacrawler] =>Adware.SearchYa^
[HKLM\Software\Pirrit] =>PUP.PirritSuggestor^
[HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM^
[HKLM\Software\WEDL] =>PUP.weDownloadManager^
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly^
[HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday^
[HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa^
[HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor^
[HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor^
[HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM^
[HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar^
[HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager^
[HKCU\Software\Delta]
[HKLM\Software\Wow6432Node\Delta]
O43 - CFD: 2013-10-11 - 21:10:14 - [1,863] ----D C:\Program Files (x86)\Delta
O43 - CFD: 2013-10-11 - 21:10:36 - [0,259] ----D C:\Users\Jacques\AppData\Roaming\Delta
O51 - MPSK:{797278f5-103f-11e3-bd64-d13e76e1e73c}\AutoRun\command. (...) -- E:\Setup.exe (.not file.)
O87 - FAEL: "{0E6D04BE-F484-4D2E-BF97-D9B709B7B0EA}" |In - Public - P6 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.)
O87 - FAEL: "{DCDEFCA0-5B29-49E5-84B0-442040E939B8}" |In - Public - P17 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.)
[MD5.1ACCA74287FE5D7449FBB2B9F0C83341] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [309328] [PID.5172] =>Toolbar.Google
[MD5.4D8B567286F302BCA515CD13DD3925D0] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe [4672288] [PID.6244] =>Toolbar.Conduit
[MD5.B9910731290A9A63C1E71E9949969D79] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe [3027232] [PID.5596] =>Toolbar.Conduit
[MD5.2AE149CA5B124D09BA1E76EA706D2095] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2466080] [PID.3716] =>Toolbar.Conduit
G1 - GCS: Preference [User Data\Default] http://search.conduit.com
G0 - GCSP: Preference [User Data\Default][HomePage] http://search.conduit.com
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O4 - GS\Desktop [Jacques]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKLM\..\Wow6432Node\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
O4 - HKUS\S-1-5-21-757060503-48840028-2244158544-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O20 - AppInit_DLLs: . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll =>Toolbar.Conduit
O23 - Service: Search Protect by Conduit Service (CltMngSvc) . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
O42 - Logiciel: Search Protect - (.Conduit.) [HKLM][64Bits] -- SearchProtect =>Toolbar.Conduit
O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {A8B88634-7F90-402F-B66A-86429755F6A5} =>Toolbar.eBay
[HKCU\Software\APN PIP]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\ForumerIT] =>Toolbar.Forumer
[HKCU\Software\Mixi.DJ]
[HKCU\Software\SearchProtectINT] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
O43 - CFD: 2014-01-02 - 12:12:08 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 2011-03-20 - 22:09:41 - [0,891] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay
O43 - CFD: 2014-04-10 - 21:32:35 - [31,824] ----D C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit
O43 - CFD: 2014-01-02 - 12:14:30 - [1,637] ----D C:\ProgramData\Conduit
O43 - CFD: 2013-10-11 - 21:10:24 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 2014-01-02 - 12:14:47 - [2,832] ----D C:\Users\Jacques\AppData\Local\Conduit
O43 - CFD: 2013-12-30 - 20:00:12 - [2,341] ----D C:\Users\Jacques\AppData\Local\CRE
O43 - CFD: 2014-04-10 - 21:32:47 - [0,150] ----D C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit
O61 - LFC: 2014-04-09 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar Cache\7.5.4805.320\fr\translate_languages.json.content [2033]
O61 - LFC: 2014-04-10 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar DNS data\data [115]
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat [3982] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat [146894] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat [1950] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\UI\rep\UIRepository.dat [4190] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:28:12 ---A- . (.Conduit.) -- C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe [66368] =>Toolbar.Conduit
O69 - SBI: SearchScopes [HKCU] C458648CACE44F7188BC7083E702C050 - (Conduit Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Conduit Search) - http://search.conduit.com
O90 - PUC: "43688B8A09F7F2046BA6682479556F5A" . (.eBay.) -- C:\Windows\Installer\{A8B88634-7F90-402F-B66A-86429755F6A5}\_853F67D554F05449430E7E.exe =>Toolbar.eBay
[MD5.B30273F8BC9043B004778D133ADC7655] [WIS][2013-09-01] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\9564d4.msi [28672] =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASAPI32 =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASMANCS =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32 =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS =>Toolbar.Google
[HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google
[HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google
SR - | Auto 2014-03-30 2466080 | (CltMngSvc) . (.Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^
[HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.eBay^
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Wow6432Node\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Wow6432Node\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKCU\Software\APN PIP] =>Toolbar.Ask
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKCU\Software\Mixi.DJ] =>Toolbar.MixiDJ
[HKLM\Software\Classes\Toolbar.CT3287808] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3287808] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^
C:\Program Files (x86)\eBay =>Toolbar.eBay^
C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\ProgramData\Conduit =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Jacques\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe =>Toolbar.Google^
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe =>Toolbar.Conduit^
C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe =>Toolbar.Conduit^
C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit^
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\ForumerIT] =>Toolbar.Forumer^
[HKCU\Software\SearchProtectINT] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
C:\Windows\Installer\9564d4.msi =>Toolbar.Google^
[HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google^
[HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google^
C:\Users\Jacques\AppData\Local\Temp\nseC356.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nsj19BB.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nsz3A66.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nszE078.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe =>Toolbar.Conduit
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
SysRestore
[MD5.7E4FD9AAB681A10A1510C5B2F5DD693A] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe [191320] [PID.5220] =>PUP.PirritSuggestor
[MD5.2B1D5E75F46A209F1BF94F7BB40B5133] - (...) -- C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe [52056] [PID.2020] =>PUP.PirritSuggestor
[MD5.CF9826D1F1B7E48FE3CDB86A1F683CD5] - (...) -- C:\Program Files (x86)\WinRST\WinRST.exe [59904] [PID.2220] =>PUP.WinRST
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://127.0.0.1:9880 =>Hijacker.Proxy
O4 - HKLM\..\Run: [VideoDownloadConverter Home Page Guard 64 bit] C:\Program Files (x86)\VIDEOD~2\bar\1.bin\AppIntegrator64.exe (.not file.) =>Adware.VideoDownloadConverter
O4 - HKLM\..\Wow6432Node\Run: [freeSoftToday_widget] C:\Program Files (x86)\fst_en_2\freeSoftToday_widget.exe (.not file.) =>Adware.FreeSoftToday
O4 - HKLM\..\Wow6432Node\Run: [Allin1Convert_8h Browser Plugin Loader 64] C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon64.exe (.not file.) =>Adware.Allin1Convert
O23 - Service: Allin1ConvertService (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe (.not file.) =>Adware.Allin1Convert
O23 - Service: PirritDesktop (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor
O23 - Service: WinRST (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Dealply.job [298] =>PUP.DealPly
[MD5.311BCE25242D9D00CBD7BB9D8B6E1315] [APT] [Dealply] (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe [102968] =>PUP.DealPly
O42 - Logiciel: VideoDownloadConverter Internet Explorer Toolbar - (.Mindspark Interactive Network.) [HKLM][64Bits] -- VideoDownloadConverter_4zbar Uninstall Internet Explorer =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar
[HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\DealPlyLive] =>PUP.DealPly
[HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\TutoTag] =>AgenceExclusive
[HKCU\Software\Tutorials] =>AgenceExclusive
[HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar
[HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager
[HKCU\Software\WebProtect]
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\metacrawler] =>Adware.SearchYa
[HKLM\Software\Pirrit] =>PUP.PirritSuggestor
[HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM
[HKLM\Software\WEDL] =>PUP.weDownloadManager
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly
[HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday
[HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa
[HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor
[HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor
[HKLM\Software\Wow6432Node\RST]
[HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Tutorials] =>AgenceExclusive
[HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu
[HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar
[HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager
[HKLM\Software\Wow6432Node\WebProtect]
O43 - CFD: 2013-12-30 - 23:04:19 - [0] ----D C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp
O43 - CFD: 2013-11-06 - 05:07:23 - [0,851] ----D C:\Program Files (x86)\DealPly =>PUP.DealPly
O43 - CFD: 2013-11-06 - 05:28:23 - [0] ----D C:\Program Files (x86)\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-04-04 - 21:05:37 - [0,109] ----D C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost
O43 - CFD: 2014-01-02 - 12:12:45 - [12,131] ----D C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie
O43 - CFD: 2014-02-07 - 11:55:32 - [7,978] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 2014-01-05 - 11:46:10 - [0,868] ----D C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora
O43 - CFD: 2014-01-02 - 12:19:54 - [0,367] ----D C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM
O43 - CFD: 2014-01-02 - 12:14:22 - [1,186] ----D C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic
O43 - CFD: 2014-01-02 - 11:22:49 - [0] ---AD C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic
O43 - CFD: 2013-08-07 - 22:05:25 - [0,723] ----D C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner
O43 - CFD: 2013-09-01 - 10:03:49 - [0,789] ---AD C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter
O43 - CFD: 2014-03-07 - 08:40:11 - [6,116] ----D C:\Program Files (x86)\Web Protect =>PUP.WebProtect
O43 - CFD: 2014-01-05 - 11:46:09 - [0,555] ----D C:\Program Files (x86)\Webplayer
O43 - CFD: 2014-04-04 - 16:55:21 - [4,679] ----D C:\Program Files (x86)\WinRST =>PUP.WinRST
O43 - CFD: 2013-11-02 - 16:23:29 - [0,391] ----D C:\ProgramData\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-04-04 - 17:06:24 - [0] ----D C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 2014-01-02 - 12:18:42 - [0] ----D C:\ProgramData\Updater =>PUP.CrossRider
O43 - CFD: 2014-01-02 - 12:21:58 - [28,243] ----D C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar
O43 - CFD: 2014-01-02 - 12:14:47 - [0,070] ----D C:\ProgramData\Websteroids =>PUP.TubeDimmer
O43 - CFD: 2013-11-02 - 16:23:22 - [0,098] ----D C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly
O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure
O43 - CFD: 2013-12-04 - 13:06:32 - [0,066] ----D C:\Users\Jacques\AppData\Roaming\freegames4357
O43 - CFD: 2013-08-05 - 22:54:27 - [0] ----D C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa
O43 - CFD: 2014-01-02 - 11:30:51 - [0,004] ----D C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive
O43 - CFD: 2014-02-07 - 11:32:45 - [0] ----D C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock
O43 - CFD: 2014-01-02 - 12:20:26 - [3,778] ----D C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy
O43 - CFD: 2013-08-20 - 21:04:44 - [0] ----D C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix
O43 - CFD: 2014-04-02 - 20:12:55 - [0] ----D C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 2013-12-04 - 13:06:31 - [0,121] ----D C:\Users\Jacques\AppData\Roaming\speedtest4354
O43 - CFD: 2014-01-05 - 11:29:33 - [0] ----D C:\Users\Jacques\AppData\Roaming\Webplayer
O43 - CFD: 2014-02-07 - 11:23:15 - [0] ----D C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager
O43 - CFD: 2013-11-02 - 16:23:29 - [0] ----D C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly
O43 - CFD: 2014-02-10 - 18:00:54 - [0] ----D C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday
O43 - CFD: 2014-01-02 - 12:18:41 - [0,016] ----D C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits
O43 - CFD: 2013-10-25 - 11:29:26 - [0] ----D C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop
O43 - CFD: 2014-01-02 - 11:26:04 - [0,004] ----D C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie
O43 - CFD: 2014-04-04 - 16:55:29 - [5,574] ----D C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor
O43 - CFD: 2014-01-02 - 12:15:47 - [1,953] ----D C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic
O43 - CFD: 2013-12-30 - 20:08:11 - [0] ----D C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar
O43 - CFD: 2014-01-02 - 11:26:08 - [0] ----D C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits
O61 - LFC: 2014-04-09 - 22:28:26 ---A- . (...) -- C:\Users\Jacques\AppData\Roaming\Dealply\UpdateProc\TTL.DAT [4] =>PUP.DealPly
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASAPI32 =>Adware.BrowseFox
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASMANCS =>Adware.BrowseFox
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASAPI32 =>PUP.Duuqu
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\vbmz12_RASMANCS =>PUP.Duuqu
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASAPI32 =>Adware.VisualBeeToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VisualBee_1802-5a22562c_RASMANCS =>Adware.VisualBeeToolbar
SS - | Auto 1658-07-10 0 | (Allin1Convert_8hService) . (...) - C:\Program Files (x86)\ALLIN1~2\bar\1.bin\8hbarsvc.exe =>Adware.Allin1Convert
SR - | Auto 2014-03-18 52056 | (PirritDesktop) . (...) - C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor
SR - | Auto 2014-03-18 59904 | (WinRST) . (...) - C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST
[HKLM\SYSTEM\CurrentControlSet\Services\Allin1Convert_8hService] =>Adware.Allin1Convert^
[HKLM\SYSTEM\CurrentControlSet\Services\PirritDesktop] =>PUP.PirritSuggestor^
[HKLM\SYSTEM\CurrentControlSet\Services\WinRST] =>PUP.WinRST^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter_4zbar Uninstall Internet Explorer] =>Adware.VideoDownloadConverter^
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKLM\Software\Wow6432Node\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKCU\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKLM\Software\Wow6432Node\VideoDownloadConverter_4z] =>Adware.VideoDownloadConverter
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Classes\SpeedUpMyPC] =>PUP.SpeedUpMyPC
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASAPI32] =>Adware.BrowseFox
[HKLM\Software\Microsoft\Tracing\updateBrowseFox_RASMANCS] =>Adware.BrowseFox
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:VideoDownloadConverter Home Page Guard 64 bit =>Adware.VideoDownloadConverter^
C:\Program Files (x86)\Accelerer PC =>Rogue.PCSpeedUp^
C:\Program Files (x86)\DealPly =>PUP.DealPly^
C:\Program Files (x86)\DealPlyLive =>PUP.DealPly^
C:\Program Files (x86)\Free Games 111 =>Adware.ScriptHost^
C:\Program Files (x86)\Mobogenie =>PUP.Mobogenie^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files (x86)\Pricora 2.0 =>Adware.Pricora^
C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.SweetIM^
C:\Program Files (x86)\TelevisionFanatic =>PUP.TelevisionFanatic^
C:\Program Files (x86)\TelevisionFanaticEI =>PUP.TelevisionFanatic^
C:\Program Files (x86)\Toolbar Cleaner =>Adware.ToolbarCleaner^
C:\Program Files (x86)\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter^
C:\Program Files (x86)\Web Protect =>PUP.WebProtect^
C:\Program Files (x86)\WinRST =>PUP.WinRST^
C:\ProgramData\DealPlyLive =>PUP.DealPly^
C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc^
C:\ProgramData\Updater =>PUP.CrossRider^
C:\ProgramData\VisualBee =>Adware.VisualBeeToolbar^
C:\ProgramData\Websteroids =>PUP.TubeDimmer^
C:\Users\Jacques\AppData\Roaming\Dealply =>PUP.DealPly^
C:\Users\Jacques\AppData\Roaming\DriverCure =>PUP.DriverCure^
C:\Users\Jacques\AppData\Roaming\MetaCrawler =>Adware.SearchYa^
C:\Users\Jacques\AppData\Roaming\newnext.me =>PUP.NextLive^
C:\Users\Jacques\AppData\Roaming\Nosibay =>PUP.BubbleDock^
C:\Users\Jacques\AppData\Roaming\OpenCandy =>Adware.OpenCandy^
C:\Users\Jacques\AppData\Roaming\SmartPCFix =>Rogue.SmartPCFix^
C:\Users\Jacques\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc^
C:\Users\Jacques\AppData\Roaming\wp_update =>PUP.WpManager^
C:\Users\Jacques\AppData\Local\DealPlyLive =>PUP.DealPly^
C:\Users\Jacques\AppData\Local\freeSOFTtoday =>Adware.FreeSoftToday^
C:\Users\Jacques\AppData\Local\GreatArcadeHits =>PUP.GreatArcadeHits^
C:\Users\Jacques\AppData\Local\Lollipop =>Adware.Lollipop^
C:\Users\Jacques\AppData\Local\Mobogenie =>PUP.Mobogenie^
C:\Users\Jacques\AppData\Local\PirritSuggestor =>PUP.PirritSuggestor^
C:\Users\Jacques\AppData\Local\TelevisionFanatic =>PUP.TelevisionFanatic^
C:\Users\Jacques\AppData\Local\VisualBeeExe =>Adware.VisualBeeToolbar^
C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GreatArcadeHits =>PUP.GreatArcadeHits^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro =>PUP.OptimizerPro
C:\Users\Jacques\AppData\LocalLow\VideoDownloadConverter_4zEI =>Adware.VideoDownloadConverter
C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritDesktop.exe =>PUP.PirritSuggestor^
C:\Users\Jacques\AppData\Local\PirritSuggestor\PirritService.exe =>PUP.PirritSuggestor^
C:\Program Files (x86)\WinRST\WinRST.exe =>PUP.WinRST^
C:\WINDOWS\Tasks\Dealply.job =>PUP.DealPly^
C:\Users\Jacques\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe =>PUP.DealPly^
[HKCU\Software\AppDataLow\Software\SmartBar] =>Hijacker.SmartBar^
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKCU\Software\DealPlyLive] =>PUP.DealPly^
[HKCU\Software\Visualbee] =>Adware.VisualBeeToolbar^
[HKCU\Software\WEDLMNGR] =>PUP.weDownloadManager^
[HKCU\Software\metacrawler] =>Adware.SearchYa^
[HKLM\Software\Pirrit] =>PUP.PirritSuggestor^
[HKLM\Software\Updater By Sweetpacks] =>PUP.SweetIM^
[HKLM\Software\WEDL] =>PUP.weDownloadManager^
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly^
[HKLM\Software\Wow6432Node\FREESOFTTODAY] =>Adware.FreeSoftToday^
[HKLM\Software\Wow6432Node\Metacrawler] =>Adware.SearchYa^
[HKLM\Software\Wow6432Node\Pirrit Solutions] =>PUP.PirritSuggestor^
[HKLM\Software\Wow6432Node\Pirrit] =>PUP.PirritSuggestor^
[HKLM\Software\Wow6432Node\Updater By Sweetpacks] =>PUP.SweetIM^
[HKLM\Software\Wow6432Node\Visualbee] =>Adware.VisualBeeToolbar^
[HKLM\Software\Wow6432Node\WEDL] =>PUP.weDownloadManager^
[HKCU\Software\Delta]
[HKLM\Software\Wow6432Node\Delta]
O43 - CFD: 2013-10-11 - 21:10:14 - [1,863] ----D C:\Program Files (x86)\Delta
O43 - CFD: 2013-10-11 - 21:10:36 - [0,259] ----D C:\Users\Jacques\AppData\Roaming\Delta
O51 - MPSK:{797278f5-103f-11e3-bd64-d13e76e1e73c}\AutoRun\command. (...) -- E:\Setup.exe (.not file.)
O87 - FAEL: "{0E6D04BE-F484-4D2E-BF97-D9B709B7B0EA}" |In - Public - P6 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.)
O87 - FAEL: "{DCDEFCA0-5B29-49E5-84B0-442040E939B8}" |In - Public - P17 - TRUE | .(...) -- C:\WINDOWS\System32\dmwu.exe (.not file.)
[MD5.1ACCA74287FE5D7449FBB2B9F0C83341] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [309328] [PID.5172] =>Toolbar.Google
[MD5.4D8B567286F302BCA515CD13DD3925D0] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe [4672288] [PID.6244] =>Toolbar.Conduit
[MD5.B9910731290A9A63C1E71E9949969D79] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe [3027232] [PID.5596] =>Toolbar.Conduit
[MD5.2AE149CA5B124D09BA1E76EA706D2095] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2466080] [PID.3716] =>Toolbar.Conduit
G1 - GCS: Preference [User Data\Default] http://search.conduit.com
G0 - GCSP: Preference [User Data\Default][HomePage] http://search.conduit.com
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O4 - GS\Desktop [Jacques]: Search.lnk . (...) -- C:\ProgramData\DSearchLink\DSearchLink.exe =>Toolbar.DeltaSearch
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKLM\..\Wow6432Node\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
O4 - HKUS\S-1-5-21-757060503-48840028-2244158544-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O20 - AppInit_DLLs: . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll =>Toolbar.Conduit
O23 - Service: Search Protect by Conduit Service (CltMngSvc) . (.Conduit - Search Protect by Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
O42 - Logiciel: Search Protect - (.Conduit.) [HKLM][64Bits] -- SearchProtect =>Toolbar.Conduit
O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {A8B88634-7F90-402F-B66A-86429755F6A5} =>Toolbar.eBay
[HKCU\Software\APN PIP]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\ForumerIT] =>Toolbar.Forumer
[HKCU\Software\Mixi.DJ]
[HKCU\Software\SearchProtectINT] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
O43 - CFD: 2014-01-02 - 12:12:08 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 2011-03-20 - 22:09:41 - [0,891] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay
O43 - CFD: 2014-04-10 - 21:32:35 - [31,824] ----D C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit
O43 - CFD: 2014-01-02 - 12:14:30 - [1,637] ----D C:\ProgramData\Conduit
O43 - CFD: 2013-10-11 - 21:10:24 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
O43 - CFD: 2014-01-02 - 12:14:47 - [2,832] ----D C:\Users\Jacques\AppData\Local\Conduit
O43 - CFD: 2013-12-30 - 20:00:12 - [2,341] ----D C:\Users\Jacques\AppData\Local\CRE
O43 - CFD: 2014-04-10 - 21:32:47 - [0,150] ----D C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit
O61 - LFC: 2014-04-09 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar Cache\7.5.4805.320\fr\translate_languages.json.content [2033]
O61 - LFC: 2014-04-10 - 22:27:50 ---A- . (...) -- C:\Users\Jacques\AppData\Local\Google\Toolbar DNS data\data [115]
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat [3982] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat [146894] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat [1950] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:27:56 ---A- . (...) -- C:\Users\Jacques\AppData\Local\SearchProtect\UI\rep\UIRepository.dat [4190] =>Toolbar.Conduit
O61 - LFC: 2014-04-10 - 22:28:12 ---A- . (.Conduit.) -- C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe [66368] =>Toolbar.Conduit
O69 - SBI: SearchScopes [HKCU] C458648CACE44F7188BC7083E702C050 - (Conduit Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Conduit Search) - http://search.conduit.com
O90 - PUC: "43688B8A09F7F2046BA6682479556F5A" . (.eBay.) -- C:\Windows\Installer\{A8B88634-7F90-402F-B66A-86429755F6A5}\_853F67D554F05449430E7E.exe =>Toolbar.eBay
[MD5.B30273F8BC9043B004778D133ADC7655] [WIS][2013-09-01] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\9564d4.msi [28672] =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASAPI32 =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\googletoolbarinstaller_en64_signed_RASMANCS =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32 =>Toolbar.Google
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS =>Toolbar.Google
[HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google
[HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google
SR - | Auto 2014-03-30 2466080 | (CltMngSvc) . (.Conduit.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}] =>Toolbar.Google^
[HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] =>Toolbar.Google^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.eBay^
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Wow6432Node\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKLM\Software\Wow6432Node\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A] =>Toolbar.eBay
[HKCU\Software\APN PIP] =>Toolbar.Ask
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKCU\Software\Mixi.DJ] =>Toolbar.MixiDJ
[HKLM\Software\Classes\Toolbar.CT3287808] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3287808] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^
C:\Program Files (x86)\eBay =>Toolbar.eBay^
C:\Program Files (x86)\SearchProtect =>Toolbar.Conduit^
C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch^
C:\Users\Jacques\AppData\Local\SearchProtect =>Toolbar.Conduit^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\ProgramData\Conduit =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Jacques\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe =>Toolbar.Google^
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe =>Toolbar.Conduit^
C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe =>Toolbar.Conduit^
C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>Toolbar.Conduit^
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\AppDataLow\Software\KeyBar_1.8] =>Toolbar.KeyBar^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\ForumerIT] =>Toolbar.Forumer^
[HKCU\Software\SearchProtectINT] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
C:\Windows\Installer\9564d4.msi =>Toolbar.Google^
[HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] (Google Toolbar) =>Toolbar.Google^
[HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}] (Google Toolbar Helper) =>Toolbar.Google^
C:\Users\Jacques\AppData\Local\Temp\nseC356.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nsj19BB.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nsz3A66.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\nszE078.exe =>Toolbar.Conduit
C:\Users\Jacques\AppData\Local\Temp\SearchProtectINT.exe =>Toolbar.Conduit
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
SysRestore