Bonjour et bon dimanche
/!\ Deux infos très importantes =>
*Révise ton comportement via le Web, et les flux pourris en P2P :faché15:
* Il y a des sites à ne pas visiter '
Pornos" // Ils installent de faux codecs, et plantent ta machine + les risques pour ton compte bancaire mdr
Applique ce correctif =>
Lance ZHPFix par l'icône sur le bureau, par un double clic
* Dans la fenêtre qui s'ouvre, valide par "
OK "
Elle a été créée lors de l'installation de ZHPDiag
A l'aide de la souris (clic gauche maintenu), sélectionne et copie (clic droit/copier) le contenu de l'encadré ci-dessous
Code : Tout sélectionner[MD5.CA2E0AAA6943618108D786FF31848989] - (...) -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2569168] [PID.416] =>
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.delta-search.com => Toolbar.DeltaSearch
R3 - URLSearchHook: (no name) - {462be121-2b54-4218-bf00-b9bf8135b23f} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.6.) (No version) -- (.not file.) => Infection PUP (PUP.WhiteSmoke)
O2 - BHO: CrossriderApp0019962 - {11111111-1111-1111-1111-110111991162} . (...) -- C:\Program Files\Supreme Savings\Supreme Savings.dll (.not file.) => Infection PUP (PUP.CrossRider)*
O4 - GS\QuickLaunch: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\luc\AppData\Roaming\BitTorrent\BitTorrent.exe => P2P.BitTorrent*
O4 - GS\Desktop: SpeedAnalysis.lnk - ClàƒÂ© orpheline
O23 - Service: BrowserProtect (BrowserProtect) . (...) - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe => Infection PUP (Toolbar.Babylon)*
[MD5.CA1AF136333B41D4735644D2EE6A4A0F] [APT] [Updater19962.exe] (.215 Apps.) -- C:\Users\luc\AppData\Local\Updater19962\Updater19962.exe [210312] =>
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM] -- BitTorrent => P2P.BitTorrent*
O42 - Logiciel: BrowserProtect - (.Bit89 Inc.) [HKLM] -- {15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} => Infection PUP (Toolbar.Babylon)*
[HKCU\Software\AppDataLow\Software\Crossrider] => Infection PUP (PUP.CrossRider)*
[HKCU\Software\AppDataLow\Software\Supreme Savings] => Infection PUP (PUP.RewardsArcade)
[HKCU\Software\BabylonToolbar] => Infection PUP (Toolbar.Babylon)*
[HKCU\Software\BitTorrent] => P2P.BitTorrent*
[HKCU\Software\Cr_Installer] => Infection PUP (Adware.VidSaver)
[HKCU\Software\DataMngr] => Infection PUP (PUP.BearShare)*
[HKCU\Software\DataMngr_Toolbar] => Infection PUP (PUP.BearShare)*
[HKCU\Software\IncrediMail] => Messaging.Incredimail
[HKCU\Software\InstalledBrowserExtensions] => Infection PUP (Adware.VidSaver)
[HKCU\Software\Messengerdusexe] => Rentabiliweb
[HKCU\Software\Rencontres Hard] => Toolbar.RencontresHard
[HKCU\Software\SweetIM] => Infection PUP (PUP.SweetIM)*
[HKCU\Software\wscontb] => Toolbar.Agent
[HKLM\Software\Babylon] => Infection PUP (Toolbar.Babylon)*
[HKLM\Software\DataMngr] => Infection PUP (PUP.BearShare)*
[HKLM\Software\DomaIQ] => Toolbar.DomaIQ
[HKLM\Software\IncrediMail] => Messaging.Incredimail
[HKLM\Software\PerformerSoft] => PerformerSoft LLC
[HKLM\Software\SweetIM] => Infection PUP (PUP.SweetIM)*
O43 - CFD: 11/09/2012 - 18:08:23 - [1,929] ----D C:\Program Files\~Web Assistant => Infection PUP (Adware.IncrediBar)*
O43 - CFD: 24/03/2013 - 21:25:43 - [1,676] ----D C:\ProgramData\APN => Toolbar.Ask
O43 - CFD: 24/03/2013 - 21:16:17 - [0] ----D C:\ProgramData\Babylon => Infection PUP (Toolbar.Babylon)*
O43 - CFD: 24/03/2013 - 21:18:22 - [7,114] ----D C:\ProgramData\BrowserProtect => Infection PUP (Toolbar.Babylon)*
O43 - CFD: 27/07/2012 - 11:01:12 - [0] --H-D C:\ProgramData\Menu DàƒÂ©marrer => Empty Folder not necessary
O43 - CFD: 27/07/2012 - 11:01:12 - [0] --H-D C:\ProgramData\ModàƒÂ¨les => Empty Folder not necessary
O43 - CFD: 24/03/2013 - 21:16:17 - [0,006] ----D C:\Users\luc\AppData\Roaming\Babylon => Infection PUP (Toolbar.Babylon)*
O43 - CFD: 21/04/2013 - 14:28:59 - [3,498] ----D C:\Users\luc\AppData\Roaming\BitTorrent => P2P.BitTorrent*
O43 - CFD: 21/04/2013 - 08:54:25 - [0,308] ----D C:\Users\luc\AppData\Roaming\File Scout => File Scout
O43 - CFD: 15/09/2012 - 06:58:55 - [0,000] ----D C:\Users\luc\AppData\Local\messengerdusexe => Rentabiliweb
O43 - CFD: 01/09/2012 - 15:03:34 - [0,000] ----D C:\Users\luc\AppData\Local\rencontreshard => RencontresHard
O43 - CFD: 24/03/2013 - 21:16:56 - [0,065] ----D C:\Users\luc\AppData\Local\Supreme Savings => Infection PUP (PUP.RewardsArcade)
O43 - CFD: 18/08/2012 - 14:52:33 - [0,192] ----D C:\Users\luc\AppData\Local\TheBestMatch => Infection Proxy (Hijacker.Proxy)
O43 - CFD: 24/03/2013 - 21:17:02 - [0,201] ----D C:\Users\luc\AppData\Local\Updater19962 => Infection PUP (Adware.VidSaver)
O43 - CFD: 24/03/2013 - 21:18:28 - [0,001] ----D C:\Users\luc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect => Infection PUP (Toolbar.Babylon)*
O45 - LFCP:[MD5.EB2D44117DBE921C9870A28DAFDE9092] - 21/04/2013 - 16:36:44 ---A- - C:\Windows\Prefetch\WINUPGRO.EXE-C12B80B5.pf => Infection Bagle (BAGLE.Worm)
O45 - LFCP:[MD5.6FB00CC2D85C609FF3E134626421507F] - 27/04/2013 - 16:04:32 ---A- - C:\Windows\Prefetch\SUPREME SAVINGS-BG.EXE-162890FC.pf => Infection PUP (PUP.SpecialSavings)
O45 - LFCP:[MD5.3611321A147C984A3C5175D576CE0D51] - 27/04/2013 - 16:04:32 ---A- - C:\Windows\Prefetch\SUPREME SAVINGS.EXE-9DCCE21E.pf => Infection PUP (PUP.RewardsArcade)
O45 - LFCP:[MD5.264EC963E0E42069E2E1342DD7B37E6B] - 27/04/2013 - 18:09:42 ---A- - C:\Windows\Prefetch\BROWSERPROTECT.EXE-EAF067F3.pf => Infection PUP (Toolbar.Babylon)*
O61 - LFC: 25/04/2013 - 19:39:37 ---A- C:\Users\luc\AppData\Local\Temp\chart_data.dat [20550] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 16:56:23 ---A- C:\Users\luc\AppData\Local\Temp\wmplog03.sqm [1352] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 17:06:45 ---A- C:\Users\luc\AppData\Local\Temp\wmplog04.sqm [1352] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 19:11:25 ---A- C:\Users\luc\AppData\Local\Temp\nsl3B2F.tmp\FindProcDLL.dll [28160] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 19:11:25 ---A- C:\Users\luc\AppData\Local\Temp\nsl3B2F.tmp\System.dll [11264] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 19:11:25 ---A- C:\Users\luc\AppData\Local\Temp\nsl3B2F.tmp\newadvsplash.dll [8704] => Temporary file not necessary
O61 - LFC: 26/04/2013 - 19:11:25 ---A- C:\Users\luc\AppData\Local\Temp\nsl3B2F.tmp\registry.dll [29696] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 07:03:32 ---A- C:\Users\luc\AppData\Local\Temp\nsq7BF4.tmp\FindProcDLL.dll [28160] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 07:03:32 ---A- C:\Users\luc\AppData\Local\Temp\nsq7BF4.tmp\registry.dll [29696] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 07:03:33 ---A- C:\Users\luc\AppData\Local\Temp\nsq7BF4.tmp\System.dll [11264] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 07:03:33 ---A- C:\Users\luc\AppData\Local\Temp\nsq7BF4.tmp\newadvsplash.dll [8704] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:10:41 ---A- C:\Users\luc\AppData\Local\Temp\nsk284A.tmp\FindProcDLL.dll [28160] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:10:41 ---A- C:\Users\luc\AppData\Local\Temp\nsk284A.tmp\System.dll [11264] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:10:41 ---A- C:\Users\luc\AppData\Local\Temp\nsk284A.tmp\newadvsplash.dll [8704] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:10:41 ---A- C:\Users\luc\AppData\Local\Temp\nsk284A.tmp\registry.dll [29696] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:47:57 -SHA- C:\Users\luc\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768] => Temporary file not necessary
O61 - LFC: 27/04/2013 - 17:47:57 -SHA- C:\Users\luc\AppData\Local\Temp\History\History.IE5\index.dat [32768] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:12:25 ---A- C:\Users\luc\AppData\Local\Temp\wmplog05.sqm [1352] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:18:31 ---A- C:\Users\luc\AppData\Local\Temp\luc.bmp [31832] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:22:08 ---A- C:\Users\luc\AppData\Local\Temp\nse3728.tmp\FindProcDLL.dll [28160] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:22:08 ---A- C:\Users\luc\AppData\Local\Temp\nse3728.tmp\System.dll [11264] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:22:08 ---A- C:\Users\luc\AppData\Local\Temp\nse3728.tmp\newadvsplash.dll [8704] => Temporary file not necessary
O61 - LFC: 28/04/2013 - 07:22:08 ---A- C:\Users\luc\AppData\Local\Temp\nse3728.tmp\registry.dll [29696] => Temporary file not necessary
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Delta Search) - https://www.delta-search.com => Toolbar.DeltaSearch*
O69 - SBI: SearchScopes [HKCU] {4DA02FB8-440D-4636-B163-F14E63297A00} - (WhiteSmoke US New Customized Web Search) - https://search.conduit.com => Toolbar.Conduit*
[MD5.08E3501B12161ADEA676009A2BDE34FA] [SPRF][25/04/2013] (...) -- C:\Users\luc\AppData\Local\Temp\chart_data.dat [20550] => Temporary file not necessary
[MD5.0E0F1F74B9168CB03C29BAC8FE5E3300] [SPRF][21/03/2013] (...) -- C:\Users\luc\AppData\Local\Temp\pluswinks.exe [679560] => Temporary file not necessary
[MD5.39C127C39A470DAF34CAB18EF1A7CB55] [SPRF][17/04/2013] (...) -- C:\Users\luc\AppData\Local\Temp\speedanalysis.exe [701752] => Temporary file not necessary
[MD5.36179B382A989075FF5FA282434F6892] [SPRF][21/03/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\luc\AppData\Local\Temp\uninst1.exe [394736] => Infection PUP (Toolbar.Babylon)*
[MD5.014ECFB6C508C07CDEA8CFE8C32E4F2C] [SPRF][20/04/2013] (.Pas de propriàƒÂ©taire - Installer.) -- C:\Users\luc\AppData\Local\Temp\Video Performer63615.exe [587680] => Temporary file not necessary
[MD5.E563A65BAEA25CEF8F49FB0228CB8555] [SPRF][15/04/2013] (...) -- C:\Users\luc\AppData\Local\Temp\vlc-2.0.5-win32.exe [22916830] => Temporary file not necessary
O87 - FAEL: "{F562B723-F164-4165-8E91-ED86A11DB6F4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) => Infection PUP (PUP.SweetIM)*
O87 - FAEL: "{384886FE-27DD-4A3E-8041-D5F0C5C9490F}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) => Infection PUP (PUP.SweetIM)*
O87 - FAEL: "{1268DCDB-112E-4861-9A2C-96926116D561}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - BitTorrent.) -- C:\Users\luc\AppData\Roaming\BitTorrent\BitTorrent.exe => P2P.BitTorrent*
O87 - FAEL: "{0404B99E-C326-4F27-94C9-6ED064DFBBD0}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - BitTorrent.) -- C:\Users\luc\AppData\Roaming\BitTorrent\BitTorrent.exe => P2P.BitTorrent*
O87 - FAEL: "{AD00EEDC-FA2D-4791-B63E-0099B95E95B7}" | In - None - P17 - TRUE | .(.Pas de propriàƒÂ©taire - Installer.) -- C:\Users\luc\AppData\Local\Temp\Video Performer63615.exe => Temporary file not necessary
O87 - FAEL: "{8EF55C68-9569-4DAE-A951-2CDF2F05D4FF}" | Out - None - P17 - TRUE | .(.Pas de propriàƒÂ©taire - Installer.) -- C:\Users\luc\AppData\Local\Temp\Video Performer63615.exe => Temporary file not necessary
O87 - FAEL: "{6E50AC22-5CB5-42E7-9878-9E3F5097D379}" | In - None - P17 - TRUE | .(...) -- C:\Users\luc\AppData\Local\Temp\ibtmpc810551\component_610.decrpt => Temporary file not necessary
O87 - FAEL: "{EE193BF5-4D04-446F-BEF7-DE96ECC4BD1E}" | Out - None - P17 - TRUE | .(...) -- C:\Users\luc\AppData\Local\Temp\ibtmpc810551\component_610.decrpt => Temporary file not necessary
O87 - FAEL: "{43DA2D49-C0EE-401E-AE98-3D52A249CC9E}" | In - None - P17 - TRUE | .(.PerformerSoft LLC - PC Performer.) -- C:\Users\luc\AppData\Local\Temp\ibtmpc810551\component_358.decrpt => Temporary file not necessary
O87 - FAEL: "{CEEE0B5A-B56F-4554-9095-964DF888FAA3}" | Out - None - P17 - TRUE | .(.PerformerSoft LLC - PC Performer.) -- C:\Users\luc\AppData\Local\Temp\ibtmpc810551\component_358.decrpt => Temporary file not necessary
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] => Infection BT (PUP.ClaroSearch)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] => Toolbar.Skype
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] => Toolbar.Skype
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] => Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] => Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] => Toolbar.Skype
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] => Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] => Toolbar.Skype
[HKLM\Software\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph] => Infection BT (Spyware.GamePlayLabs)
[HKCU\Software\BabylonToolbar] => Infection PUP (Toolbar.Babylon)*
[HKCU\Software\Cr_Installer] => Infection PUP (Adware.VidSaver)
[HKCU\Software\DataMngr] => Infection PUP (PUP.BearShare)*
[HKLM\Software\DataMngr] => Infection PUP (PUP.BearShare)*
[HKCU\Software\Rencontres Hard] => Toolbar.RencontresHard
[HKCU\Software\SweetIM] => Infection PUP (PUP.SweetIM)*
[HKLM\Software\SweetIM] => Infection PUP (PUP.SweetIM)*
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}] => Toolbar.Bing
[HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\Prod.cap] => Infection PUP (Toolbar.Babylon)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings] => Infection PUP (PUP.BProtector)
[HKLM\Software\Classes\AppID\secman.DLL] => Infection PUP (Toolbar.Babylon)
[HKCU\Software\wscontb] => Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] => Infection PUP (PUP.SweetIM)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] => Infection PUP (PUP.SweetIM)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] => Infection PUP (PUP.SweetIM)
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta] => Toolbar.DeltaSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}] => Toolbar.Bing
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] => Toolbar.DeltaSearch
[HKCU\Software\AppDataLow\Software\Crossrider] => Infection PUP (PUP.CrossRider)*
[HKCU\Software\InstalledBrowserExtensions\]
[HKLM\Software\Classes\CrossriderApp0019962.BHO] => Infection PUP (PUP.CrossRider)*
[HKLM\Software\Classes\CrossriderApp0019962.BHO.1] => Infection PUP (PUP.CrossRider)*
[HKLM\Software\Classes\CrossriderApp0019962.Sandbox] => Infection PUP (PUP.CrossRider)*
[HKLM\Software\Classes\CrossriderApp0019962.Sandbox.1] => Infection PUP (PUP.CrossRider)*
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220122992262}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}] => Infection PUP (PUP.CrossRider)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38D5CDD0A851B3940A43CC50ABBA251C] => Infection PUP (Adware.Boxore)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] => Infection PUP (Adware.Boxore)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] => Infection PUP (Adware.Boxore)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] => Macromedia/Dreamweaver or PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] => Macromedia/Dreamweaver or PUP.SweetIM
[HKCU\Software\Mozilla\Firefox\Extensions]:{0F827075-B026-42F3-885D-98981EE7B1AE} => Infection PUP (Toolbar.Babylon)
C:\ProgramData\Babylon => Infection PUP (Toolbar.Babylon)*
C:\Users\luc\AppData\Roaming\Babylon => Infection PUP (Toolbar.Babylon)*
C:\Users\luc\AppData\Local\TheBestMatch => Infection Proxy (Hijacker.Proxy)
C:\Users\luc\AppData\Local\Supreme Savings => Infection PUP (PUP.RewardsArcade)
C:\Users\luc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph => Infection BT (Spyware.GamePlayLabs)
C:\Users\luc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkeoookbpemkdccdccdmacnidhooohk => Infection PUP (PUP.RewardsArcade)
C:\Users\luc\AppData\Local\Updater19962 => Infection PUP (Adware.VidSaver)
C:\Users\luc\AppData\Local\Temp\uninst1.exe => Infection BT (Toolbar.Babylon)
C:\Users\luc\AppData\Local\Temp\GoogleToolbarInstaller1.log => Infection PUP (Toolbar.Babylon)
[HKCU\Software\5f57dbdfe56fba15]:GUID="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" => Infection PUP (Toolbar.Babylon)
[HKLM\Software\5f57dbdfe56fba15]:GUID="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" => Infection PUP (Toolbar.Babylon)
SR - | Auto 2569168 | (BrowserProtect) . (...) - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe => Infection PUP (Toolbar.Babylon)*
EmptyCLSID
Emptytemp
EmptyFlash
Clique sur le bouton
Presse-papier encadré en rouge sur l'image.
Les lignes contenues dans le presse-papier vont s'afficher.
Clique sur le bouton
GO en bas à gauche.
Note: Si l'UAC est active, après le clic sur "GO", un message va apparaître du style "Voulez-vous autoriser le programme...." qu'il faudra valider :
Puis ZHPFix se relance, il faudra à nouveau cliquer sur le bouton "Presse-papier" pour coller les lignes, puis sur le bouton "GO"
Une fois le résultat affiché, clique sur la croix rouge pour refermer l'outil (en haut à doite).
Poste le contenu du rapport ZHPFixReport.txt, enregistré sur le bureau.
Le rapport se trouve aussi à cet emplacement => C:\ZHP\ZHPFix.txt
A te lire avec son rapport
