kink06
Nombre d'articles : 0

  • Lances ZHPFix, exécuter en tant qu’administrateur sous Windows : 7/8 et Vista

    A l’aide de la souris (clic gauche maintenu), sélectionne et copie (clic droit/copier) le contenu de l’encadré ci-dessous

    Script ZHPFix =>
    ShortcutFix
    O43 - CFD: 19/05/2013 - 15:04:26 - [3,375] ----D C:ProgramDataInstallMate =>PUP.Tarma
    [HKCUSoftwareusyndication.com] =>Trojan.USyndication
    C:ProgramDataInstallMate =>PUP.Tarma^
    [HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer] NoActiveDesktopChanges: Modified => SYSTEM : Active Desktop désactivé et configuration refusée
    R5 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,MigrateProxy = 1 => Internet Explorer Allows Proxy Settings Remotely
    O55 - MWPS:[HKLM...PoliciesSystem] - "EnableUIADesktopToggle"=0 => Disable Vista UIAccess applications (UAC)
    O55 - MWPS:[HKLM...PoliciesSystem] - "FilterAdministratorToken"=0 => Le compte "Administrateur" n'est pas soumis aux approbations
    [HKLMSYSTEMCurrentControlSetServicesEventlogApplicationHssSrv] =>Toolbar.Agent
    O64 - Services: CurCS - 01/11/2010 - C:Program Files (x86)IObitGame Booster 3DriverWinRing0x64.sys (WinRing0_1_2_0) .(.OpenLibSys.org - WinRing0.) - LEGACY_WINRING0_1_2_0
    O43 - CFD: 28/10/2013 - 19:21:57 - [0] ----D C:Program Files (x86)Pando Networks => P2P.Pando
    O53 - SMSR:HKLM...startupregFunshion [Key] . (...) -- C:Program Files (x86)Funshion OnlineFunshionFunshion.exe (.not file.) => P2P.Funshion
    O4 - HKLM..RunOnce: [NCInstallQueue] Clé orpheline => Orphean Key not necessary
    [MD5.00000000000000000000000000000000] [APT] [{1322A254-6582-4F71-9C2B-98ECF503CC03}] (...) -- C:UsersPhenixDeLumiereDesktopsp51004.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{93853372-B100-4BF6-A1B3-5AAFBAFB6A37}] (...) -- C:UsersPhenixDeLumiereDesktopsp49404.exe (.not file.) [0] => Fichier absent
    O44 - LFC:[MD5.3D4AD783E7B7F840CF1CAA779FA63274] - 03/01/2014 - 00:56:16
    . (...) -- C:UsbFix [Scan 1] PDL.txt [8883] => El Desaparecido
    O44 - LFC:[MD5.E03D68763B087DB053968AED6D8388D9] - 04/01/2014 - 11:19:35
    . (...) -- C:UsbFix [Scan 3] PDL.txt [9394] => El Desaparecido
    O44 - LFC:[MD5.0D1590D7C7E72E490307550295C4C210] - 04/01/2014 - 16:21:34 ---A- . (...) -- C:UsbFix [Clean 1] PDL.txt [9035] => El Desaparecido
    O63 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix => El Desaparecido
    [HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer] NoActiveDesktopChanges: Modified
    R5 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = local
    O4 - GSDesktop [Public]: Kobo.lnk . (...) -- C:Program Files (x86)KoboKobo.exe
    [MD5.00000000000000000000000000000000] [APT] [{1322A254-6582-4F71-9C2B-98ECF503CC03}] (...) -- C:UsersPhenixDeLumiereDesktopsp51004.exe (.not file.) [0]
    [MD5.00000000000000000000000000000000] [APT] [{93853372-B100-4BF6-A1B3-5AAFBAFB6A37}] (...) -- C:UsersPhenixDeLumiereDesktopsp49404.exe (.not file.) [0]
    [MD5.AF5C84446657B48C9B9B870C46438261] [SPRF][03/01/2014] (...) -- C:UsersPhenixDeLumiereDesktopadwcleaner.exe [1233962]
    O3 - Toolbar: avast! Online Security - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (.AVAST Software - IE Webrep plugin.) -- C:Program FilesAVAST SoftwareAvastaswWebRepIE64.dll
    O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:Program FilesAVAST SoftwareAvastaswWebRepIE64.dll
    O4 - HKLM..RunOnce: [NCInstallQueue] Clé orpheline
    O53 - SMSR:HKLM...startupregFunshion [Key] . (...) -- C:Program Files (x86)Funshion OnlineFunshionFunshion.exe (.not file.)
    O4 - HKLM..Wow6432NodeRun: [USB Security] . (.Zbshareware Lab - USB Disk Security.) -- C:Program Files (x86)USB Disk SecurityUSBGuard.exe
    O4 - HKUSS-1-5-19..Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:Program Files (x86)Windows SidebarSidebar.exe =>.Microsoft Corporation
    O4 - HKUSS-1-5-20..Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:Program Files (x86)Windows SidebarSidebar.exe =>.Microsoft Corporation
    O4 - HKUSS-1-5-19..RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:WindowsSystem32mctadmin.exe =>.Microsoft Corporation
    O4 - HKUSS-1-5-20..RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:WindowsSystem32mctadmin.exe =>.Microsoft Corporation
    O4 - HKUSS-1-5-21-661152722-366922968-3836358373-1000..Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:UsersPhenixDeLumiereAppDataLocalGoogleUpdateGoogleUpdate.exe =>.Google Inc
    O4 - HKUSS-1-5-21-661152722-366922968-3836358373-1000..Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:Program Files (x86)Common FilesLightScribeLightScribeControlPanel.exe
    O4 - HKUSS-1-5-21-661152722-366922968-3836358373-1000..Run: [HP Photosmart 6520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:Program FilesHPHP Photosmart 6520 seriesBinScanToPCActivationApp.exe =>.Hewlett-Packard Co
    O4 - HKLM..Run: [SmartMenu] . (.Pas de propriétaire - SmartMenu.) -- C:Program FilesHewlett-PackardHP MediaSmartSmartMenu.exe
    O4 - HKLM..RunOnce: [NCPluginUpdater] . (.Hewlett-Packard - NCPluginUpdater.) -- C:Program Files (x86)Hewlett-PackardHP Health CheckActiveCheckproduct_lineNCPluginUpdater.exe
    O4 - HKLM..RunOnce: [NCInstallQueue] Clé orpheline
    O4 - HKCU..Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:UsersPhenixDeLumiereAppDataLocalGoogleUpdateGoogleUpdate.exe =>.Google Inc
    O4 - HKCU..Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:Program Files (x86)Common FilesLightScribeLightScribeControlPanel.exe
    O4 - HKCU..Run: [HP Photosmart 6520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:Program FilesHPHP Photosmart 6520 seriesBinScanToPCActivationApp.exe =>.Hewlett-Packard Co
    O4 - HKLM..Wow6432NodeRun: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:Program Files (x86)IntelIntel(R) Rapid Storage TechnologyIAStorIcon.exe
    O4 - HKLM..Wow6432NodeRun: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- c:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe =>.Advanced Micro Devices, Inc
    O4 - HKLM..Wow6432NodeRun: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:Program Files (x86)Hewlett-PackardHP Quick LaunchHPMSGSVC.exe
    O4 - HKLM..Wow6432NodeRun: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe =>.Adobe Systems Incorporated
    O4 - HKLM..Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:Windowssystem32igfxtray.exe
    O4 - HKLM..Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:Windowssystem32hkcmd.exe
    O4 - HKLM..Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:Windowssystem32igfxpers.exe
    SysRestore
    EmptyFlash
    EmptyCLSID
    Firewallraz
    EmptyTemp
    EmptyTemp

    1. Clique sur Importer
    2. Puis Clic sur “GO

  • Confirmes les nettoyages des données en cliquant sur “Oui

  • Une fois le scan terminé rends toi sur le bureau, le fichier ZHPFixReport à été crée.
  • Héberge le rapport ZHPFixReport sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse.