.
- Code: Tout sélectionner
Script ZHPFix
[MD5.4F681F587B7538253C01AA73B822015B] - (...) -- C:\Users\boussad\AppData\Local\RocketTab\Client.exe [1420520] [PID.3872] =>PUP.RocketTab
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49363;https=127.0.0.1:49363 =>Hijacker.Proxy
O4 - GS\Desktop [Public]: Reimage Express.lnk . (...) -- C:\Program Files\Reimage\Reimage Express\ReimageExpress.exe (.not file.) =>Rogue.ReimageRepair
O4 - GS\Desktop [boussad]: pc-infopratique.comforum-informatique.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.pc-infopratique.com =>Hijacker.Browsers
O4 - GS\Desktop [boussad]: troway.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.troway.com =>Hijacker.Browsers
O4 - HKCU\..\Run: [RocketTab] . (...) -- C:\Users\boussad\AppData\Local\RocketTab\Client.exe =>PUP.RocketTab
O4 - HKCU\..\Run: [RocketTab Update Task] . (...) -- C:\Users\boussad\AppData\Local\RocketTab\uninstall.exe =>PUP.RocketTab
O4 - HKUS\S-1-5-21-3240107103-3365640406-1986512911-1000\..\Run: [RocketTab] . (...) -- C:\Users\boussad\AppData\Local\RocketTab\Client.exe =>PUP.RocketTab
O4 - HKUS\S-1-5-21-3240107103-3365640406-1986512911-1000\..\Run: [RocketTab Update Task] . (...) -- C:\Users\boussad\AppData\Local\RocketTab\uninstall.exe =>PUP.RocketTab
[MD5.00000000000000000000000000000000] [APT] [ReimageUpdater] (...) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (.not file.) [0] =>Rogue.ReimageRepair
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files (x86)\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) [0] =>PUP.BubbleDock
[MD5.00000000000000000000000000000000] [APT] [{8B250D09-3C52-4017-BAB0-74F0592A26D0}] (...) -- C:\Users\boussad\AppData\Roaming\istartsurf\UninstallManager.exe (.not file.) [0] =>PUP.IsStart
O42 - Logiciel: Reimage Express - (.Reimage.) [HKLM][64Bits] -- Reimage Express =>Rogue.ReimageRepair
O42 - Logiciel: RocketTab - (.RocketTab.) [HKCU][64Bits] -- RocketTab =>PUP.RocketTab
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKCU\Software\RocketTabInstalled] =>PUP.RocketTab
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Wow6432Node\RocketTab] =>PUP.RocketTab
O43 - CFD: 23/09/2014 - 17:40:47 - [] ----D C:\Program Files (x86)\PodoWeb =>PUP.PodoWeb
O43 - CFD: 16/09/2014 - 23:06:48 - [] ----D C:\ProgramData\Reimage Express =>Rogue.ReimageRepair
O43 - CFD: 01/08/2012 - 11:20:31 - [] ----D C:\Users\boussad\AppData\Local\bubbledock Air =>PUP.BubbleDock
O43 - CFD: 23/09/2014 - 17:45:11 - [] ----D C:\Users\boussad\AppData\Local\RocketTab =>PUP.RocketTab
O53 - SMSR:HKLM\...\startupreg\Bubble Dock [Key] . (...) -- C:\Program Files (x86)\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) =>PUP.BubbleDock
O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM
[MD5.EDD21B7C504C7E3F36DE766B31BD3178] [WIS][16/12/2012] (.SweetIM Technologies Ltd. - SweetPacks Toolbar for Internet Explorer 4.0.) -- C:\Windows\Installer\198bf3.msi [3304960] =>PUP.SweetIM
[MD5.3CD19859CD377AD00B30E4BEE49D374E] [WIS][16/12/2012] (.SweetIM Technologies Ltd. - Sweetpacks Communicator 1.1.) -- C:\Windows\Installer\198bf8.msi [2997248] =>PUP.SweetIM
[MD5.BBF4134424D0556F36DC086028750937] [WIS][16/12/2012] (.SweetIM Technologies Ltd. - SweetPacks bundle uninstaller.) -- C:\Windows\Installer\198bfd.msi [2579456] =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASAPI32 =>PUP.BrowserSafeguard
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASMANCS =>PUP.BrowserSafeguard
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bubbledock_air_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bubbledock_air_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\dealio_RASAPI32 =>PUP.Dealio
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\dealio_RASMANCS =>PUP.Dealio
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PodoWeb_RASAPI32 =>PUP.PodoWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PodoWeb_RASMANCS =>PUP.PodoWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ProtectedSearch_RASAPI32 =>Spyware.ProtectedSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ProtectedSearch_RASMANCS =>Spyware.ProtectedSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePodoWeb_RASAPI32 =>PUP.PodoWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePodoWeb_RASMANCS =>PUP.PodoWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilPodoWeb_RASAPI32 =>PUP.PodoWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilPodoWeb_RASMANCS =>PUP.PodoWeb
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Express] =>Rogue.ReimageRepair^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\RocketTab] =>PUP.RocketTab^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Bubble Dock] =>PUP.BubbleDock^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Sweetpacks Communicator] =>PUP.SweetIM^
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:RocketTab =>PUP.RocketTab^
C:\Program Files (x86)\PodoWeb =>PUP.PodoWeb^
C:\ProgramData\Reimage Express =>Rogue.ReimageRepair^
C:\Users\boussad\AppData\Local\bubbledock Air =>PUP.BubbleDock^
C:\Users\boussad\AppData\Local\RocketTab =>PUP.RocketTab^
C:\Users\boussad\AppData\Local\RocketTab\Client.exe =>PUP.RocketTab^
[HKCU\Software\RocketTabInstalled] =>PUP.RocketTab^
[HKLM\Software\Wow6432Node\RocketTab] =>PUP.RocketTab^
C:\Windows\Installer\198bf3.msi =>PUP.SweetIM^
C:\Windows\Installer\198bf8.msi =>PUP.SweetIM^
C:\Windows\Installer\198bfd.msi =>PUP.SweetIM^
C:\Windows\Reimage.ini =>Rogue.ReimageRepair
M2 - MFEP: Extension [boussad - 9vwmtpqn.default-1411142241321] {00c97d86-accb-4288-9972-6d929c1fe93a}
M2 - MFEP: Extension [boussad - g210abni.default-1409776278247] {00c97d86-accb-4288-9972-6d929c1fe93a}
M2 - MFEP: Extension [boussad - gl7n20vr.default-1410898979867] {00c97d86-accb-4288-9972-6d929c1fe93a}
M2 - MFEP: Extension [boussad - mdliny7d.default-1354577999731] {00c97d86-accb-4288-9972-6d929c1fe93a}
M2 - MFEP: Extension [boussad - rgef35yv.default-1411462903487] {00c97d86-accb-4288-9972-6d929c1fe93a}
M2 - MFEP: Extension [boussad - yiurvt30.default-1354576349568] {00c97d86-accb-4288-9972-6d929c1fe93a}
ShortcutFix
FirewallRaz
EmptyFlash
Emptytemp
SysRestore