buckhulk
Participant
Nombre d'articles : 2398

Il faut que tu réinitialise tes navigateurs :
Réinitialisation des navigateurs

liens divers officiels

Firefox

Google Chrome

Internet Explorer

tu as plein d’extension qui sont infectées ,tu vas essayer de passer ce script et après tu me referas un ZHPDiag !

  • Séléctionne et copie le script suivant :

    Script ZHPFix
    ShortcutFix
    G1 - GCS: Preference [User DataDefault] http://websearch.webisgreat.info
    G0 - GCSP: Preference [User DataDefault][HomePage] http://websearch.webisgreat.info
    G2 - GCE: Preference [User DataDefault] [bfjgfmegkolfnnimdfokmhadhpinbkpb] SNT v.2.1 (Activé) => Adware.MyWebSearch
    G2 - GCE: Preference [User DataDefault] [cjmplbnfmniceomefbehjibjigknjaao] DigiSaver v.6.7 (Activé) =>PUP.DiGiSaver
    G2 - GCE: Preference [User DataDefault] [ghidoagigpolbjipegiemahknjmmhnam] YoutubeAdblocker v.1.0 (Activé) =>PUP.TubeAdBlocker
    G2 - GCE: Preference [User DataDefault] [golapeopndcilhkgbckmeoengmkanncj] weubSavve v.3.7 (Activé) =>PUP.Websave
    G2 - GCE: Preference [User DataDefault] [hahpjplbmicfkmoccokbjejahjjpnena] Improved Search v.1.2 (Désactivé) =>Hijacker.SearchB1org
    G2 - GCE: Preference [User DataDefault] [ihhmkgmoickonlbbblaeedgjpfmpkdjn] YTAdRemoval v.1.5 (Activé) =>PUP.YTAdRemoval
    G2 - GCE: Preference [User DataDefault] [ogccgbmabaphcakpiclgcnmcnimhokcj] SweetPacks Chrome Extension v.1.3.0.2 (Désactivé) =>PUP.SweetIM
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsbfjgfmegkolfnnimdfokmhadhpinbkpb [SNT] => Adware.MyWebSearch
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionscjmplbnfmniceomefbehjibjigknjaao [DigiSaver] =>PUP.DiGiSaver
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsghidoagigpolbjipegiemahknjmmhnam [YoutubeAdblocker] =>PUP.TubeAdBlocker
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsgolapeopndcilhkgbckmeoengmkanncj [weubSavve] =>PUP.Websave
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionshahpjplbmicfkmoccokbjejahjjpnena [Improved Search] =>Hijacker.SearchB1org
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsihhmkgmoickonlbbblaeedgjpfmpkdjn [YTAdRemoval] =>PUP.YTAdRemoval
    G2 - EXT: C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsogccgbmabaphcakpiclgcnmcnimhokcj [SweetPacks Chrome Extension] =>PUP.SweetIM
    M3 - MFPP: Plugins - [user] -- C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultsearchpluginsaskcom.xml => Plugin Mozilla Firefox Ask.com
    M3 - MFPP: Plugins - [user] -- C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultsearchpluginsbabylon1.xml =>PUP.Babylon
    M3 - MFPP: Plugins - [user] -- C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultsearchpluginssweetim.xml =>PUP.SweetIM
    M3 - MFPP: Plugins - [user] -- C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultsearchpluginsWebSearch.xml => PUP.Mocaflix
    M2 - MFEP: prefs.js [user - maos1urt.defaulttoolbarbutton@obviousidea.us] [] ObviousIdea Addon v2.0 (..)
    M2 - MFEP: prefs.js [user - maos1urt.default{317EB79C-82C1-4D5A-9D04-342BAA96B7C0}] [] AllGamesHome Toolbar v1.0.10 (..)
    R0 - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://websearch.webisgreat.info
    R0 - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://websearch.webisgreat.info
    R4 - HKLMSOFTWAREMicrosoftInternet ExplorerPhishingFilter,EnabledV8 = 0 => Microsoft Internet Explorer Phishing Filter Disabled
    O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll =>PUP.SweetIM
    O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - [HKLM]{EEE6C35B-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:Program FilesSweetIMToolbarsInternet ExplorermgToolbarIE.dll =>PUP.SweetIM
    ~ Toolbar: Scanned in 00mn 00s
    O4 - GSQuickLaunch [user]: chrome.LNK . (.Google Inc. - Google Chrome.) -- C:Program FilesGoogleChromeApplicationchrome.exe http://www.bahaty.com =>PUP.Bahaty
    O4 - GSQuickLaunch [user]: Internet Explorer.LNK . (.Microsoft Corporation - Internet Explorer.) -- C:Program FilesInternet Exploreriexplore.exe http://www.bahaty.com =>PUP.Bahaty
    O4 - GSDesktop [user]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:Program FilesGoogleChromeApplicationchrome.exe http://www.bahaty.com =>PUP.Bahaty
    O4 - GSDesktop [user]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:Program FilesInternet Exploreriexplore.exe http://www.bahaty.com =>PUP.Bahaty
    O4 - HKLM..Run: [Anti-phishing Domain Advisor] . (.Visicom Media Inc. (Powered by Panda Securi - Visicom Media Anti-phishing Domain Advisor.) -- C:ProgramDataAnti-phishing Domain Advisorvisicom_antiphishing.exe =>Adware.PUP.VisicomAntiPhishing
    O4 - HKLM..Run: [SweetIM] . (.SweetIM Technologies Ltd. - SweetIM Instant Messenger Enhancer.) -- C:Program FilesSweetIMMessengerSweetIM.exe =>PUP.SweetIM
    O4 - HKCU..Run: [Apps Hat] C:UsersuserAppDataLocalWebPlayerAppsHatWebPlayer.exe (.not file.) =>PUP.CrossRider
    O4 - HKUSS-1-5-21-2931659078-2909613575-642730951-1000..Run: [Apps Hat] C:UsersuserAppDataLocalWebPlayerAppsHatWebPlayer.exe (.not file.) =>PUP.CrossRider
    O17 - HKLMSystemCCSServicesTcpip..{754D5DB9-BDD2-46F8-8278-FA3512F0B297}: NameServer = 212.217.0.1,212.217.1.1
    O17 - HKLMSystemCCSServicesTcpip..{50FD9B91-3F06-4531-9051-0362DCD61A5C}: DhcpDomain = iav.ac.ma
    O17 - HKLMSystemCS1ServicesTcpip..{754D5DB9-BDD2-46F8-8278-FA3512F0B297}: NameServer = 212.217.0.1,212.217.1.1
    O17 - HKLMSystemCS1ServicesTcpip..{50FD9B91-3F06-4531-9051-0362DCD61A5C}: DhcpDomain = iav.ac.ma
    O17 - HKLMSystemCS2ServicesTcpip..{754D5DB9-BDD2-46F8-8278-FA3512F0B297}: NameServer = 212.217.0.1,212.217.1.1
    O17 - HKLMSystemCS2ServicesTcpip..{BF749290-909C-46DE-AB09-654E324E00B4}: DhcpNameServer = 212.217.0.12 212.217.0.14
    O17 - HKLMSystemCS2ServicesTcpip..{50FD9B91-3F06-4531-9051-0362DCD61A5C}: DhcpDomain = iav.ac.ma
    O23 - Service: (IBUpdaterService) . (...) - C:WindowsSystem32dmwu.exe (.not file.) =>Adware.InstallBrain
    O23 - Service: Update Mega Browse (Update Mega Browse) . (...) - C:Program FilesMega BrowseupdateMegaBrowse.exe (.not file.) =>PUP.MegaBrowse
    [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000Core] (.Facebook Inc..) -- C:usersuserAppDataLocalFacebookUpdateFacebookUpdate.exe [138096]
    [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000UA] (.Facebook Inc..) -- C:usersuserAppDataLocalFacebookUpdateFacebookUpdate.exe [138096]
    [MD5.00000000000000000000000000000000] [APT] [RealUpgradeLogonTaskS-1-5-21-2931659078-2909613575-642730951-1000] (...) -- C:Program FilesRealRealUpgradeRealUpgrade.exe (.not file.) [0] => RealNetworks RealUpgrade LogonTask
    [MD5.00000000000000000000000000000000] [APT] [RealUpgradeScheduledTaskS-1-5-21-2931659078-2909613575-642730951-1000] (...) -- C:Program FilesRealRealUpgradeRealUpgrade.exe (.not file.) [0] => RealNetworks RealUpgrade LogonTask
    [MD5.00000000000000000000000000000000] [APT] [{11528384-8300-441E-9FDE-E2563FA02EE9}] (...) -- F:need 4 speed mostwantedeauninstall.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{1D9C1430-0F09-45D3-9ED1-18496EEB76EC}] (...) -- C:Program FilesAuralogTELL ME MORE SI PLUSbinUnsetup.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{2186D41B-BE21-4B26-A07F-07FAF77ADCD0}] (...) -- E:MSETUP4.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{50A22205-15D3-4B07-BFEC-624E379CA06F}] (...) -- F:office 2007SETUP.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{78EC896E-CEF4-4D6F-8FBE-9569FB473CB8}] (...) -- C:usersuserDesktopislamalbanywlsetup-web.exe (.not file.) [0] => Fichier absent
    [MD5.00000000000000000000000000000000] [APT] [{A77EEBD2-F4B4-4C8C-A720-684BA71F7D26}] (...) -- C:usersuserDesktopLogiciel STAT(MiniTab 2013)Setup.exe (.not file.) [0] => Fichier absent
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000Core - (.Facebook Inc..) -- C:WindowsTasksFacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000Core.job [902] => Facebook Update Task User
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000Core - (.Facebook Inc..) -- C:WindowsSystem32TasksFacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000Core [902] => Facebook Update Task User
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000UA - (.Facebook Inc..) -- C:WindowsTasksFacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000UA.job [924] => Facebook Update Task User
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000UA - (.Facebook Inc..) -- C:WindowsSystem32TasksFacebookUpdateTaskUserS-1-5-21-2931659078-2909613575-642730951-1000UA [924] => Facebook Update Task User
    O42 - Logiciel: Anti-phishing Domain Advisor - (.Visicom Media Inc. (Powered by Panda Security).) [HKLM] -- Anti-phishing Domain Advisor =>Adware.PUP.VisicomAntiPhishing
    O42 - Logiciel: DigiSaver - (.DigiSaVer.) [HKLM] -- {7223EDAC-E091-B3C1-BD91-B66CE557800F} =>PUP.DiGiSaver
    O42 - Logiciel: IB Updater Service - (...) [HKLM] -- WNLT =>Adware.InstallBrain
    O42 - Logiciel: SweetIM Bundle by SweetPacks - (.SweetPacks LTD.) [HKLM] -- SweetIM Bundle by SweetPacks =>PUP.SweetIM
    O42 - Logiciel: SweetIM for Messenger 3.7 - (.SweetIM Technologies Ltd..) [HKLM] -- {A0C9DF2B-89B5-4483-8983-18A68200F1B4} =>PUP.SweetIM
    O42 - Logiciel: Toolbar 4.7 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM] -- {96E2E493-C484-43E3-9B95-D62EE7D40D3A} =>PUP.SweetIM
    O42 - Logiciel: Update Manager for SweetPacks 1.1 - (.SweetIM Technologies Ltd..) [HKLM] -- {EA8FA6BE-29BE-4AF2-9352-841F83215EB0} =>PUP.SweetIM
    [HKCUSoftware23575e480bfee127dbd180edc79be36d]
    [HKCUSoftwareAPN PIP] => Toolbar.Ask
    [HKCUSoftwareAppDataLowSoftwareitsyourbar]
    [HKCUSoftwareAppDataLow{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}] => PUP.Agent
    [HKCUSoftwareAppDataLow{5F189DF5-2D05-472B-9091-84D9848AE48B}] => Trojan.SProtector
    [HKCUSoftwareBI] => Infection Web (Adware.MegaSearch)
    [HKCUSoftwareBabylonToolbar] =>PUP.Babylon
    [HKCUSoftwareIM] => Messaging.IncrediMail
    [HKCUSoftwareImInstaller] => Messenging.IncrediMail
    [HKCUSoftwareInstallCore] =>Adware.InstallCore
    [HKCUSoftwareOptimizer Pro] =>PUP.OptimizerPro
    [HKCUSoftwarePIP] => Toolbar.Ask
    [HKCUSoftwareRegisteredApplicationsEx] =>PUP.SfKpCouponApp
    [HKCUSoftwareSoftonic] =>Toolbar.Conduit
    [HKCUSoftwareSweetIM] =>PUP.SweetIM
    [HKCUSoftwareVisualbee] =>Adware.VisualBeeToolbar
    [HKCUSoftwareWNLT] =>Adware.IncrediBar
    [HKCUSoftwareWebPlayer] => Infection PUP (Adware.SocialSkinz)
    [HKLMSoftwareBabylonToolbar] =>PUP.Babylon
    [HKLMSoftwareBabylon] =>PUP.Babylon
    [HKLMSoftwareSweetIM] =>PUP.SweetIM
    [HKLMSoftwareVBMZ] =>PUP.Duuqu
    [HKLMSoftwareVisualbee] =>Adware.VisualBeeToolbar
    O43 - CFD: 06/08/2013 - 17:31:09 - [] ----D C:Program Files1.0 ???????? ???????
    O43 - CFD: 13/04/2014 - 11:48:35 - [0] ----D C:Program FilesDigiSaver =>PUP.DiGiSaver
    O43 - CFD: 12/04/2014 - 13:06:24 - [0] ----D C:Program FilesMega Browse =>PUP.MegaBrowse
    O43 - CFD: 11/12/2013 - 10:28:52 - [] ----D C:Program FilesMTB13FR
    O43 - CFD: 01/01/2014 - 11:58:20 - [] ----D C:Program FilesMyPC Backup =>PUP.MyPCBackup
    O43 - CFD: 11/04/2014 - 20:59:21 - [0] ----D C:Program FilesSNT => Adware.MyWebSearch
    O43 - CFD: 27/01/2013 - 14:13:16 - [] ----D C:Program FilesSweetIM =>PUP.SweetIM
    O43 - CFD: 27/01/2013 - 14:12:24 - [] ----D C:Program Filessweetpacks bundle uninstaller =>PUP.SweetIM
    O43 - CFD: 11/04/2014 - 20:59:09 - [0] ----D C:Program FileswEabsavEE =>PUP.Websave
    O43 - CFD: 19/05/2014 - 14:38:49 - [] ----D C:Program FilesYoutubeAdblocker =>PUP.TubeAdBlocker
    O43 - CFD: 11/04/2014 - 14:12:45 - [0] ----D C:Program FilesYTAdRemoval =>PUP.YTAdRemoval
    O43 - CFD: 15/12/2012 - 15:34:21 - [] ----D C:ProgramDataAnti-phishing Domain Advisor =>Adware.PUP.VisicomAntiPhishing
    O43 - CFD: 09/12/2012 - 11:34:57 - [0] ----D C:ProgramDataBabylon =>PUP.Babylon
    O43 - CFD: 19/05/2014 - 14:39:19 - [] ----D C:ProgramDataDigiSaver =>PUP.DiGiSaver
    O43 - CFD: 11/04/2014 - 20:59:22 - [] ----D C:ProgramDataed60aaa9a2e3c22e
    O43 - CFD: 19/02/2014 - 21:41:07 - [] ----D C:ProgramDataihhmkgmoickonlbbblaeedgjpfmpkdjn => PUP.YTAdRemoval
    O43 - CFD: 13/02/2014 - 00:52:23 - [] ----D C:ProgramDataInstallMate =>PUP.Tarma
    O43 - CFD: 12/04/2014 - 13:06:24 - [0] ----D C:ProgramDataSNT => Adware.MyWebSearch
    O43 - CFD: 27/01/2013 - 14:13:16 - [] ----D C:ProgramDataSweetIM =>PUP.SweetIM
    O43 - CFD: 10/02/2014 - 01:34:15 - [0] ----D C:ProgramDataVisualBee =>Adware.VisualBeeToolbar
    O43 - CFD: 12/04/2014 - 13:06:24 - [0] ----D C:ProgramDatawEabsavEE =>PUP.Websave
    O43 - CFD: 26/11/2013 - 20:20:35 - [0] ----D C:ProgramDataWindows Update => Empty Folder not necessary
    O43 - CFD: 12/04/2014 - 13:06:24 - [0] ----D C:ProgramDataYoutubeAdblocker =>PUP.TubeAdBlocker
    O43 - CFD: 12/04/2014 - 13:06:24 - [0] ----D C:ProgramDataYTAdRemoval =>PUP.YTAdRemoval
    O43 - CFD: 03/01/2013 - 22:18:15 - [] ----D C:UsersuserAppDataRoamingB1Toolbar =>Hijacker.SearchB1org
    O43 - CFD: 09/12/2012 - 11:34:56 - [] ----D C:UsersuserAppDataRoamingBabylon =>PUP.Babylon
    O43 - CFD: 19/05/2014 - 14:21:21 - [] ----D C:UsersuserAppDataRoamingnewnext.me =>PUP.NextLive
    O43 - CFD: 06/02/2014 - 00:39:24 - [] ----D C:UsersuserAppDataRoamingOpenCandy =>Adware.OpenCandy
    O43 - CFD: 27/01/2013 - 14:08:23 - [] ----D C:UsersuserAppDataLocalAPN => Toolbar.Ask
    O43 - CFD: 03/01/2013 - 22:18:22 - [] ----D C:UsersuserAppDataLocalB1E => Toolbar. BrotherSoft
    O43 - CFD: 09/12/2012 - 11:34:58 - [] ----D C:UsersuserAppDataLocalBabylon =>PUP.Babylon
    O43 - CFD: 11/10/2013 - 10:58:46 - [0] ----D C:UsersuserAppDataLocalBundled software uninstaller =>Adware.MegaSearch
    O43 - CFD: 19/05/2014 - 15:54:05 - [0] ----D C:UsersuserAppDataLocalgenienext =>PUP.NextLive
    O43 - CFD: 30/12/2012 - 10:56:55 - [] ----D C:UsersuserAppDataLocaliLivid =>Adware.Bandoo
    O43 - CFD: 15/12/2012 - 15:34:31 - [] ----D C:UsersuserAppDataLocalitsyourbar
    O43 - CFD: 19/05/2014 - 14:56:03 - [] ----D C:UsersuserAppDataLocalMobogenie =>PUP.Mobogenie
    O43 - CFD: 13/02/2014 - 00:53:06 - [] ----D C:UsersuserAppDataLocalTorch => Torch Media Inc
    O43 - CFD: 27/02/2013 - 22:58:28 - [] ----D C:UsersuserAppDataLocal_
    O51 - MPSK:{12b217ef-eba6-11e2-b465-001e101fb681}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{1a6522e4-211d-11e2-a6f4-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{25aaea1f-499a-11e3-9f64-24b6fd1cdda0}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{2b423cd0-793c-11e2-8625-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{2b423cec-793c-11e2-8625-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{2ef290bf-11bb-11e3-836c-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{75e9f10f-79ed-11e2-9f34-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{7c2caee4-87df-11e2-b454-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{7d0dbd19-ca9e-11e2-a9eb-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{9a87b35d-72e2-11e2-8950-001e101f3315}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{b2261d61-1f03-11e3-9582-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{b2261d79-1f03-11e3-9582-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{b748683b-1d5b-11e3-bd64-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{c0a57392-38e9-11e2-9e5c-001e101f63cf}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{c154271a-511a-11e3-927c-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{c52c7516-7d33-11e3-9532-642737d0044e}AutoRuncommand. (...) -- F:autorun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{d0c30ae3-2111-11e2-a329-24b6fd1cdda0}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{d0c30b31-2111-11e2-a329-001e101f1f81}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{d97b4e97-5a16-11e3-91da-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{e38d7440-2440-11e3-9418-642737d0044e}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O51 - MPSK:{e86a6101-2441-11e2-b43a-24b6fd1cdda0}AutoRuncommand. (...) -- F:AutoRun.exe (.not file.) => Microsoft Windows NT or Infection USB
    O69 - SBI: C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultsearchpluginsaskcom.xml => Plugin Mozilla Firefox Ask.com
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("extensions.asktb.ff-original-keyword-url", ""); => Toolbar.Agent
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://www.ask.com/?l=dis&o=15003"); =>PUP.SweetIM
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("sweetim.toolbar.urls.homepage", "http://home.sweetim.com/?crg=3.1010000.00000&barid={379E4CE4-6883-11E2-84B2-24B6FD1CDD[...] =>PUP.SweetIM
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Ask.com"); =>PUP.SweetIM
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Ask.com"); =>PUP.SweetIM
    O69 - SBI: prefs.js [user - maos1urt.default] user_pref("sweetim.toolbar.previous.keyword.URL", "http://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=fr_US[...] =>PUP.SweetIM
    O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Search the web (Babylon)) - http://search.babylon.com =>PUP.Babylon
    O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search The Web) - http://www.mystart.com =>Adware.IMBooster
    O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (AllGamesHome Search) - http://start.allgameshome.com => Toolbar.CheatEngine
    O69 - SBI: SearchScopes [HKCU] {AD84A86F-8FF6-4E5C-8643-9B1FA93ED4D6} - (Ask Search) - http://websearch.ask.com =>Toolbar.Ask
    O69 - SBI: SearchScopes [HKCU] {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} - (WebSearch) - http://websearch.webisgreat.info => Infection PUP (PUP.Browse2Save)
    O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - http://search.sweetim.com =>PUP.SweetIM
    [MD5.0CEC0457D5F4CDF41BFE4CBE68601390] [SPRF][02/08/2013] (...) -- C:ProgramDatawin_mpwd_sys.dat [2568]
    [MD5.7FC39C966D0DF666790F2F3A67E8DEFE] [SPRF][13/09/2012] (.XPSP2 - WindowsApplication1.) -- C:UsersuserAppDataRoamingPlugin.exe [39936] => Infection FakeAlert (Possible)
    [MD5.9DBDEE49DADD657065836572BE8CE383] [SPRF][12/11/2011] (...) -- C:UsersuserAppDataRoamingsetup.exe [559424] => Infection Diverse (Trojan.Agent)
    [MD5.6D80474DCF10B34A7BD1156EFB62DFCC] [SPRF][08/03/2014] (.Bump Technologies, Inc. - BumpTop Setup.) -- C:UsersuserDesktopbumptop_bumptop_2.1_32_et_64_bits_anglais_282232.exe [18087040]
    O90 - PUC: "394E2E69484C3E34B9596DE27E4DD0A3" . (.Toolbar 4.7 by SweetPacks.) -- C:WindowsInstaller{96E2E493-C484-43E3-9B95-D62EE7D40D3A}ARPPRODUCTICON.exe =>PUP.SweetIM
    O90 - PUC: "B2FD9C0A5B9838449838816A28001F4B" . (.SweetIM for Messenger 3.7.) -- C:WindowsInstaller{A0C9DF2B-89B5-4483-8983-18A68200F1B4}ARPPRODUCTICON.exe =>PUP.SweetIM
    [HKCUSoftware23575e480bfee127dbd180edc79be36d]:39b7927e0d4deb5c10fb380b7c53c617="TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAA4fug4AtAnNI
    [HKCUSoftware23575e480bfee127dbd180edc79be36d]:5546459fd68bf16831797d2aa2e7d569="TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAA4fug4AtAnNI
    [MD5.4FDF4861DC614282DC4C0CC6FC39FF4B] [WIS][27/01/2013] (.SweetIM Technologies Ltd. - SweetPacks Toolbar for Internet Explorer 4.0.) -- C:WindowsInstallerecdd8a.msi [3637248] =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingappshat-distribution_RASAPI32 =>PUP.CrossRider
    HKLMSOFTWAREMicrosoftTracingappshat-distribution_RASMANCS =>PUP.CrossRider
    HKLMSOFTWAREMicrosoftTracingBabylon_RASAPI32 =>PUP.Babylon
    HKLMSOFTWAREMicrosoftTracingBabylon_RASMANCS =>PUP.Babylon
    HKLMSOFTWAREMicrosoftTracingBackupStack_RASAPI32 =>PUP.MyPCBackup
    HKLMSOFTWAREMicrosoftTracingBackupStack_RASMANCS =>PUP.MyPCBackup
    HKLMSOFTWAREMicrosoftTracingbiclient_RASAPI32 =>Adware.MegaSearch
    HKLMSOFTWAREMicrosoftTracingbiclient_RASMANCS =>Adware.MegaSearch
    HKLMSOFTWAREMicrosoftTracingBrowseSmartSetup_RASAPI32 =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingBrowseSmartSetup_RASMANCS =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingBrowseSmart_Setup_RASAPI32 =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingBrowseSmart_Setup_RASMANCS =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingbundlesweetimsetup_RASAPI32 =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingbundlesweetimsetup_RASMANCS =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingDiVapton_Setup_RASAPI32 =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingDiVapton_Setup_RASMANCS =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingDiVapton_sm_RASAPI32 =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingDiVapton_sm_RASMANCS =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarInstaller_download_signed_6_RASAPI32 =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarInstaller_download_signed_6_RASMANCS =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarInstaller_updater_signed_RASAPI32 =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarInstaller_updater_signed_RASMANCS =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarManager_94DDE1EDD1CDF6A3_RASAPI32 =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarManager_94DDE1EDD1CDF6A3_RASMANCS =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarNotifier_RASAPI32 =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingGoogleToolbarNotifier_RASMANCS =>Toolbar.Google
    HKLMSOFTWAREMicrosoftTracingiLividSetup_RASAPI32 =>Adware.Bandoo
    HKLMSOFTWAREMicrosoftTracingiLividSetup_RASMANCS =>Adware.Bandoo
    HKLMSOFTWAREMicrosoftTracingLatestDLMgr_RASAPI32 =>Adware.OpenCandy
    HKLMSOFTWAREMicrosoftTracingLatestDLMgr_RASMANCS =>Adware.OpenCandy
    HKLMSOFTWAREMicrosoftTracingMegaBrowseSetup_RASAPI32 =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMegaBrowseSetup_RASMANCS =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMegaBrowse_RASAPI32 =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMegaBrowse_RASMANCS =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMegaBrowse_Setup_RASAPI32 =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMegaBrowse_Setup_RASMANCS =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingMobogenie_RASAPI32 =>PUP.Mobogenie
    HKLMSOFTWAREMicrosoftTracingMobogenie_RASMANCS =>PUP.Mobogenie
    HKLMSOFTWAREMicrosoftTracingMobogenie_Setup_2_RASAPI32 =>PUP.Mobogenie
    HKLMSOFTWAREMicrosoftTracingMobogenie_Setup_2_RASMANCS =>PUP.Mobogenie
    HKLMSOFTWAREMicrosoftTracingSoftonicDownloader_pour_sopcast_RASAPI32 =>Toolbar.Conduit
    HKLMSOFTWAREMicrosoftTracingSoftonicDownloader_pour_sopcast_RASMANCS =>Toolbar.Conduit
    HKLMSOFTWAREMicrosoftTracingSoftonicDownloader_pour_video-to-video-converter_RASAPI32 =>Toolbar.Conduit
    HKLMSOFTWAREMicrosoftTracingSoftonicDownloader_pour_video-to-video-converter_RASMANCS =>Toolbar.Conduit
    HKLMSOFTWAREMicrosoftTracingSweetIM_RASAPI32 =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingSweetIM_RASMANCS =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingSweetPacksUpdateManager_RASAPI32 =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingSweetPacksUpdateManager_RASMANCS =>PUP.SweetIM
    HKLMSOFTWAREMicrosoftTracingupdateBrowseSmart_RASAPI32 =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingupdateBrowseSmart_RASMANCS =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingupdateDiVapton_RASAPI32 =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingupdateDiVapton_RASMANCS =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingupdateMegaBrowse_RASAPI32 =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingupdateMegaBrowse_RASMANCS =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingutilBrowseSmart_RASAPI32 =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingutilBrowseSmart_RASMANCS =>PUP.BrowseSmart
    HKLMSOFTWAREMicrosoftTracingutilDiVapton_RASAPI32 =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingutilDiVapton_RASMANCS =>PUP.DiVapton
    HKLMSOFTWAREMicrosoftTracingutilMegaBrowse_RASAPI32 =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingutilMegaBrowse_RASMANCS =>PUP.MegaBrowse
    HKLMSOFTWAREMicrosoftTracingvbmz_RASAPI32 =>PUP.Duuqu
    HKLMSOFTWAREMicrosoftTracingvbmz_RASMANCS =>PUP.Duuqu
    HKLMSOFTWAREMicrosoftTracingVisualBeeSilent_RASAPI32 =>Adware.VisualBeeToolbar
    HKLMSOFTWAREMicrosoftTracingVisualBeeSilent_RASMANCS =>Adware.VisualBeeToolbar
    HKLMSOFTWAREMicrosoftTracingwebget_setup_RASAPI32 =>PUP.WebGet
    HKLMSOFTWAREMicrosoftTracingwebget_setup_RASMANCS =>PUP.WebGet
    [HKCRCLSID{28AA3843-2744-2BDB-0CB4-B6973A89069B}] (YTAdRemoval) =>PUP.YTAdRemoval
    [HKCRCLSID{2EECD738-5844-4a99-B4B6-146BF802613B}] (Babylon toolbar helper) =>PUP.Babylon
    [HKCRCLSID{B8C54F28-F7D4-D3E0-F326-F0EF175D0072}] (YoutubeAdblocker) =>PUP.Multiplug
    [HKCRCLSID{DB38CCBB-E151-3245-3E9D-A010F51222C2}] (DigiSaver) =>PUP.DiGiSaver
    [HKCRCLSID{EEE6C35B-6118-11DC-9C72-001320C79847}] (SweetPacks Toolbar for Internet Explorer) =>PUP.SweetIM
    [HKCRCLSID{EEE6C35C-6118-11DC-9C72-001320C79847}] (SweetPacks Browser Helper) =>PUP.SweetIM
    [HKCRCLSID{EEE6C35D-6118-11DC-9C72-001320C79847}] (SweetIM ToolbarURLSearchHook Class) =>PUP.SweetIM
    SS - | Auto 10/07/1658 0 | (IBUpdaterService) . (...) - C:WindowsSystem32dmwu.exe =>Adware.InstallBrain
    SS - | Auto 10/07/1658 0 | (Update Mega Browse) . (...) - C:Program FilesMega BrowseupdateMegaBrowse.exe =>PUP.MegaBrowse
    [HKLMSoftwareGoogleChromeExtensionscjmplbnfmniceomefbehjibjigknjaao] =>PUP.DiGiSaver^
    [HKLMSoftwareGoogleChromeExtensionsghidoagigpolbjipegiemahknjmmhnam] =>PUP.TubeAdBlocker^
    [HKLMSoftwareGoogleChromeExtensionsgolapeopndcilhkgbckmeoengmkanncj] =>PUP.Websave^
    [HKLMSoftwareGoogleChromeExtensionshahpjplbmicfkmoccokbjejahjjpnena] =>Hijacker.SearchB1org^
    [HKLMSoftwareGoogleChromeExtensionsihhmkgmoickonlbbblaeedgjpfmpkdjn] =>PUP.YTAdRemoval^
    [HKLMSoftwareGoogleChromeExtensionsogccgbmabaphcakpiclgcnmcnimhokcj] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
    [HKLMSYSTEMCurrentControlSetServicesIBUpdaterService] =>Adware.InstallBrain^
    [HKLMSYSTEMCurrentControlSetServicesUpdate Mega Browse] =>PUP.MegaBrowse^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallAnti-phishing Domain Advisor] =>Adware.PUP.VisicomAntiPhishing^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstall{7223EDAC-E091-B3C1-BD91-B66CE557800F}] =>PUP.DiGiSaver^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallWNLT] =>Adware.InstallBrain^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallSweetIM Bundle by SweetPacks] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstall{A0C9DF2B-89B5-4483-8983-18A68200F1B4}] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstall{96E2E493-C484-43E3-9B95-D62EE7D40D3A}] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstall{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}] =>PUP.SweetIM^
    [HKLMSoftwareClassesAppID{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon
    [HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
    [HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}] =>PUP.ToolbarCleaner
    [HKLMSoftwareClassesTypeLib{4d3b167e-5fd8-4276-8fd7-9df19c1e4d19}] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftInternet ExplorerLow RightsElevationPolicy{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
    [HKLMSoftwareClassesCLSID{82ac53b4-164c-4b07-a016-437a8388b81a}] =>PUP.SweetIM
    [HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}] =>Toolbar.Agent
    [HKLMSoftwareClassesInterface{A439801C-961D-452C-AB42-7848E9CBD289}] =>PUP.Babylon
    [HKLMSoftwareClassesCLSID{A4A0CB15-8465-4F58-A7E5-73084EA2A064}] =>PUP.SweetIM
    [HKLMSoftwareClassesAppID{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
    [HKLMSoftwareClassesCLSID{E46C8196-B634-44a1-AF6E-957C64278AB1}] =>PUP.Babylon
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA189D17A469616C4688D23E192996267] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components351716A953E21214898904032EAE2E81] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components2E6768B6932D112438F047C54D180635] =>PUP.SweetIM
    [HKLMSoftwareClassesInterface{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}] =>PUP.Babylon
    [HKLMSoftwareClassesAppIDescort.dll] =>PUP.Babylon
    [HKLMSoftwareMicrosoftWindowsCurrentVersionApp Pathssweetim.exe] =>PUP.SweetIM
    [HKLMSoftwareClassessim-packages] =>Toolbar.Agent
    [HKCUSoftwareAPN PIP] =>Toolbar.Ask
    [HKCUSoftwareBabylonToolbar] =>PUP.Babylon
    [HKLMSoftwareBabylonToolbar] =>PUP.Babylon
    [HKCUSoftwarePIP] =>Toolbar.Ask
    [HKCUSoftwareSoftonic] =>Toolbar.Conduit
    [HKLMSoftwareClassesInstallerFeaturesEB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
    [HKLMSoftwareClassesInstallerProductsEB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ProductsEB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftTracingMobogenie_RASMANCS] =>PUP.Mobogenie
    [HKCUSoftwareSweetIM] =>PUP.SweetIM
    [HKLMSoftwareSweetIM] =>PUP.SweetIM
    [HKCUSoftwareWNLT] =>Adware.IncrediBar
    [HKLMSoftwareWNLT] =>Adware.IncrediBar
    [HKLMSoftwareMicrosoftTracingBabylon_RASAPI32] =>PUP.Babylon
    [HKLMSoftwareMicrosoftTracingBabylon_RASMANCS] =>PUP.Babylon
    [HKLMSoftwareMicrosoftTracingMobogenie_RASAPI32] =>PUP.Mobogenie
    [HKLMSoftwareClassesProd.cap] =>PUP.Babylon
    [HKLMSoftwareVBMZ] =>Toolbar.Conduit
    [HKCUSoftwareInstallCore] =>Adware.InstallCore
    [HKLMSoftwareClassesInstallerFeaturesB2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
    [HKLMSoftwareClassesInstallerProductsB2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ProductsB2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
    [HKLMSoftwareClassesInstallerFeatures394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
    [HKLMSoftwareClassesInstallerProducts394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Products394E2E69484C3E34B9596DE27E4DD0A3] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionUninstall{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}] =>Adware.Browse2Save
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components2F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components7D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components80D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUpgradeCodes789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4318DF19719275242801CBE292063A4C] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsAB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsEC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUpgradeCodesA97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
    [HKLMSoftwareClassesMediaPlayer.GraphicsUtils] =>PUP.SweetIM
    [HKLMSoftwareClassesMediaPlayer.GraphicsUtils.1] =>PUP.SweetIM
    [HKLMSoftwareClassesMgMediaPlayer.GifAnimator] =>PUP.SweetIM
    [HKLMSoftwareClassesMgMediaPlayer.GifAnimator.1] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF754C503375A13344B22388E18DFE87E] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM
    [HKCUSoftwareBI] =>Adware.MegaSearch
    [HKLMSoftwareClassesCLSID{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}] =>Adware.BrowseFox
    [HKLMSoftwareMicrosoftTracingapnstub_RASAPI32] =>Toolbar.Ask
    [HKLMSoftwareMicrosoftTracingapnstub_RASMANCS] =>Toolbar.Ask
    [HKLMSoftwareMicrosoftTracingaskpartnercobrandingtool_rasapi32] =>Toolbar.Ask
    [HKLMSoftwareMicrosoftTracingaskpartnercobrandingtool_rasmancs] =>Toolbar.Ask
    [HKLMSoftwareClassesSWEETIE.IEToolbar] =>PUP.SweetIM
    [HKLMSoftwareClassesSWEETIE.IEToolbar.1] =>PUP.SweetIM
    [HKLMSoftwareClassesSweetIM_URLSearchHook.ToolbarURLSearchHook] =>PUP.SweetIM
    [HKLMSoftwareClassesSweetIM_URLSearchHook.ToolbarURLSearchHook.1] =>PUP.SweetIM
    [HKLMSoftwareClassesToolbar3.SWEETIE] =>PUP.SweetIM
    [HKLMSoftwareClassesToolbar3.SWEETIE.1] =>PUP.SweetIM
    [HKLMSoftwareClassesInterface{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
    [HKLMSoftwareClassesInterface{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
    [HKLMSoftwareClassesInterface{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^
    [HKLMSoftwareMicrosoftInternet ExplorerToolbar]:{EEE6C35B-6118-11DC-9C72-001320C79847} =>PUP.SweetIM^
    [HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun]:Anti-phishing Domain Advisor =>Adware.PUP.VisicomAntiPhishing^
    [HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun]:Apps Hat =>PUP.CrossRider^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionscjmplbnfmniceomefbehjibjigknjaao =>PUP.DiGiSaver^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsghidoagigpolbjipegiemahknjmmhnam =>PUP.TubeAdBlocker^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsgolapeopndcilhkgbckmeoengmkanncj =>PUP.Websave^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionshahpjplbmicfkmoccokbjejahjjpnena =>Hijacker.SearchB1org^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsihhmkgmoickonlbbblaeedgjpfmpkdjn =>PUP.YTAdRemoval^
    C:UsersuserAppDataLocalGoogleChromeUser DataDefaultExtensionsogccgbmabaphcakpiclgcnmcnimhokcj =>PUP.SweetIM^
    C:Program FilesDigiSaver =>PUP.DiGiSaver^
    C:Program FilesMega Browse =>PUP.MegaBrowse^
    C:Program FilesMyPC Backup =>PUP.MyPCBackup^
    C:Program FilesSweetIM =>PUP.SweetIM^
    C:Program Filessweetpacks bundle uninstaller =>PUP.SweetIM^
    C:Program FileswEabsavEE =>PUP.Websave^
    C:Program FilesYoutubeAdblocker =>PUP.TubeAdBlocker^
    C:Program FilesYTAdRemoval =>PUP.YTAdRemoval^
    C:ProgramDataAnti-phishing Domain Advisor =>Adware.PUP.VisicomAntiPhishing^
    C:ProgramDataBabylon =>PUP.Babylon^
    C:ProgramDataDigiSaver =>PUP.DiGiSaver^
    C:ProgramDataInstallMate =>PUP.Tarma^
    C:ProgramDataSweetIM =>PUP.SweetIM^
    C:ProgramDataVisualBee =>Adware.VisualBeeToolbar^
    C:ProgramDatawEabsavEE =>PUP.Websave^
    C:ProgramDataYoutubeAdblocker =>PUP.TubeAdBlocker^
    C:ProgramDataYTAdRemoval =>PUP.YTAdRemoval^
    C:UsersuserAppDataRoamingB1Toolbar =>Hijacker.SearchB1org^
    C:UsersuserAppDataRoamingBabylon =>PUP.Babylon^
    C:UsersuserAppDataRoamingnewnext.me =>PUP.NextLive^
    C:UsersuserAppDataRoamingOpenCandy =>Adware.OpenCandy^
    C:UsersuserAppDataLocalBabylon =>PUP.Babylon^
    C:UsersuserAppDataLocalBundled software uninstaller =>Adware.MegaSearch^
    C:UsersuserAppDataLocalgenienext =>PUP.NextLive^
    C:UsersuserAppDataLocaliLivid =>Adware.Bandoo^
    C:UsersuserAppDataLocalMobogenie =>PUP.Mobogenie^
    C:UsersuserAppDataLocalB1E =>Toolbar.BrotherSoft
    C:UsersuserAppDataRoamingMozillaFirefoxProfilesmaos1urt.defaultSearchPluginssweetim.xml =>PUP.SweetIM
    [HKCUSoftwareOptimizer Pro] =>PUP.OptimizerPro^
    [HKCUSoftwareRegisteredApplicationsEx] =>PUP.SfKpCouponApp^
    [HKCUSoftwareVisualbee] =>Adware.VisualBeeToolbar^
    [HKLMSoftwareBabylon] =>PUP.Babylon^
    [HKLMSoftwareVisualbee] =>Adware.VisualBeeToolbar^
    C:WindowsInstallerecdd8a.msi =>PUP.SweetIM^
    [HKCRCLSID{28AA3843-2744-2BDB-0CB4-B6973A89069B}] (YTAdRemoval) =>PUP.YTAdRemoval^
    [HKCRCLSID{2EECD738-5844-4a99-B4B6-146BF802613B}] (Babylon toolbar helper) =>PUP.Babylon^
    [HKCRCLSID{B8C54F28-F7D4-D3E0-F326-F0EF175D0072}] (YoutubeAdblocker) =>PUP.Multiplug^
    [HKCRCLSID{DB38CCBB-E151-3245-3E9D-A010F51222C2}] (DigiSaver) =>PUP.DiGiSaver^
    [HKCRCLSID{EEE6C35B-6118-11DC-9C72-001320C79847}] (SweetPacks Toolbar for Internet Explorer) =>PUP.SweetIM^
    [HKCRCLSID{EEE6C35C-6118-11DC-9C72-001320C79847}] (SweetPacks Browser Helper) =>PUP.SweetIM^
    [HKCRCLSID{EEE6C35D-6118-11DC-9C72-001320C79847}] (SweetIM ToolbarURLSearchHook Class) =>PUP.SweetIM^
    ProxyFix
    EmptyPrefetch
    EmptyFlash
    SysRestore
    FirewallRAZ
    EmptyTemp

  • Lances ZHPFix, exécuter en tant qu’administrateur sous Windows : 7/8 et Vista

    1. Clique sur Importer
    2. Les lignes précedemment copiées doivent être collées dans le cadre
    3. Si c’est le cas, Clic sur “GO


    exemple :

  • Confirmes les nettoyages des données en cliquant sur “Oui
  • Une fois le scan terminé rends toi sur le bureau, le fichier ZHPFixReport à été crée.
  • Héberge le rapport ZHPFixReport sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse.