Win32 PUP and Win64 PUP Solved

Question

Hello,when I launch Avast before startup, it tells me that I am infected with win32 and win64, can you help me?Thank youConfiguration: Windows 7 / Chrome 39.0.2171.95

Anonymous user · Answer

Hello,

Download and save Zhpcleaner on your desktop:

https://nicolascoolman.eu

[*] Right-click on it, run it as an administrator!
[*] Accept the End User License Agreement (EULA),
[*] Click on "repair"
[*] Click on report (the report should display)
[*] Save the report on your desktop
[*] Host its modification report found on the Desktop:

https://www.cjoint.com/ to read => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

, then copy/paste the link provided in your next response on the forum </bold>

Note:
- This tool does not require installation!
- The report can also be found in this directory "%AppData%".

--
O.o°* ???Breathe deeply, write your message in good French and clearly. It's going to be fine, you'll see, let's try!!! o°.Oø¤º°'°º¤ø

Malekal_morte- · Answer

Hi  detected in which files?  --

Bleach0723 · Answer

on an Android folder, I believe.

Bleach0723 · Answer

https://www.cjoint.com/?DLuwsNtHJ3r  Here it is if I followed correctly.

Anonymous user · Answer

ok,

/!\ read this:
more and more programs are offering the installation of toolbars (Toolbars, pre-checked box), so don't forget to use the custom installation mode and uncheck the corresponding boxes during installation.

In addition to this, strongly avoid sites like 01net (on the mend!), CNET, Clubic, BrotherSoft or Softonic, free and open-source software are repackaged with their toolbars or add extensions to your browser!

For tutorials distributed by Tuto4pc, Eorezo, Exclusive Agency .. etc (whatever its name since it changes all the time!

You must read the end-user license agreement carefully before installation!!!

https://forum.security-x.fr/securite-generale/tuto4pc-et-accord-de-licence/

? Download and save ADWcleaner on your desktop (by Xplode) here:

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

or here

http://www.bleepingcomputer.com/download/adwcleaner/dl/125/

Note: if you already have a version of ADWC on your PC, to get the latest version of the tool, you need to uninstall it and re-download it.

Run it
Accept the end-user license agreement
click on scan
Wait until the end,
Once the scan is finished, click on the report
Copy and paste the entire report into your next message

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It's going to be okay, you'll see, at least we're trying!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

tuto4pc do I need to download it?

Anonymous user · Answer

no, strongly avoid it!  run ADWCleaner!    -- O.o°* ???Breathe deeply, write your message in proper French and clearly. It will be fine, you’ll see, well, we’ll try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

# AdwCleaner v4.105 - Report created on 12/20/2014 at 10:20:16
# Updated on 12/08/2014 by Xplode
# Database: 2014-12-16.1 [Live]
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: Home - HOME-PC
# Executed from: C:\Users\Home\Downloads\adwcleaner_4.105.exe
# Option: Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Present: C:\Program Files (x86)\Conduit
Folder Present: C:\Program Files (x86)\Free Video Converter
Folder Present: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
Folder Present: C:\Users\Home\AppData\Local\Conduit
Folder Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Folder Present: C:\Users\Home\AppData\Local\Temp\mt_ffx
Folder Present: C:\Users\Home\AppData\LocalLow\Conduit
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Conduit
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Datamngr
Folder Present: C:\Users\virginie 2\AppData\LocalLow\DataMngr
Folder Present: C:\Users\virginie 2\AppData\LocalLow\PriceGong
Folder Present: C:\Users\virginie 2\AppData\LocalLow\searchquband
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Searchqutoolbar
Folder Present: C:\Users\virginie 2\AppData\LocalLow\SweetIM
Folder Present: C:\Users\virginie 2\AppData\LocalLow\uTorrentBar_FR
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\invalidprefs.js
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\Askcom.xml
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\delta.xml
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\trovi-search.xml
File Present: C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
File Present: C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
File Present: C:\Users\virginie 2\AppData\Roaming\Mozilla\Firefox\Profiles\tjfqbv6k.default\searchplugins\Vosteran.xml
File Present: C:\Users\virginie 2\AppData\Roaming\Mozilla\Firefox\Profiles\tjfqbv6k.default\user.js
File Present: C:\Users\virginie\AppData\Roaming\Mozilla\Firefox\Profiles\si3k0zxs.default\searchplugins\Vosteran.xml
File Present: C:\Users\virginie\AppData\Roaming\Mozilla\Firefox\Profiles\si3k0zxs.default\user.js
File Present: C:\Windows\System32\drivers\rsdrvx64.sys

***** [ Scheduled Tasks ] *****

Task Present: QtraxPlayer

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Present: HKCU\Software\DataMngr_Toolbar
Key Present: HKCU\Software\eSupport.com
Key Present: HKCU\Software\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: HKCU\Software\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
Key Present: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AB1432D-8FB1-46D1-A6B8-7DC7E1AC41D4}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Present: HKCU\Software\Myfree Codec
Key Present: HKCU\Software\qtrax
Key Present: [x64] HKCU\Software\DataMngr_Toolbar
Key Present: [x64] HKCU\Software\eSupport.com
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AB1432D-8FB1-46D1-A6B8-7DC7E1AC41D4}
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Present: [x64] HKCU\Software\Myfree Codec
Key Present: [x64] HKCU\Software\qtrax
Key Present: HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Present: HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Present: HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Present: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Present: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Present: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Present: HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Present: HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Present: HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Present: HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Present: HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Present: HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Present: HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Present: HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Present: HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Present: HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Present: HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Present: HKLM\SOFTWARE\e2dedab239e414
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Present: HKLM\SOFTWARE\Myfree Codec
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Present: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B
Data Present: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - _C:\PROGRA~2\SEARCH~2\SEARCH~1\bin\VC32LO~1.DLL
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Present: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

-\\ Mozilla Firefox v34.0.5 (x86 fr)

[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.FirstTime", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.FirstTimeFF3", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.PG_ENABLE", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.PG_ENABLE.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SF_JUST_INSTALLED.enc", "RkFMU0U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SF_STATUS.enc", "RU5BQkxFRA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SearchAppState.enc", "Mg==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.UserID", "UN51004557725178998");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.addressBarTakeOverEnabledInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.browser.search.defaultthis.engineName", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.enableFix404ByUser", "FALSE");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.firstTimeDialogOpened", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixPageNotFoundErrorByUser", "TRUE");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixPageNotFoundErrorInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixUrls", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.isCheckedStartAsHidden", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.isFirstTimeToolbarLoading", "false");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.keyword", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.lastVersion", "10.16.2.509");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appStateReportTime.enc", "MTM3MzAxNjIxNzI3OA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_CouponBuddy.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_Easytobook.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_PriceGong.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_WindowShopper.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_currentVersion.enc", "MS44LjAuNA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_eventsCache.enc", "eyI1Yjc0OGZiNS00NTQzLTQzMmMtYWNhMC1kOGNjZDIyZmQ4YTgiO[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_first_time.enc", "MQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_gadgetOpen.enc", "MA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_installer_preapproved.enc", "RkFMU0U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_lastLoginTime.enc", "MTM3MzAxNjIxNTgwNg==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_localization.enc", "eyJkbWJveDEiOnsiVGV4dCI6IlByb21vXG5kdSBqb3VyIn0sImRt[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_settings1.8.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_userId.enc", "MzJiZTE3OTctMWZlOS00MmU1LTkwYWEtYzE2MDExNGZhNTgw");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_user_approval_interacted.enc", "MQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.migrateAppsAndComponents", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalHomepage", "hxxp://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntr[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalSearchAddressUrl", "");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalSearchEngine", "Delta Search");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.price-gong.isManagedApp", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.search.searchAppId", "129351529700743801");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.search.searchCount", "0");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchFromAddressBarEnabledByUser", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchInNewTabEnabledByUser", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchInNewTabEnabledInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchUserMode", "1");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1372439339265");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_appsMetadata_lastUpdate", "1373016829682");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1372538168695");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_location_lastUpdate", "1372946164540");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_login_10.16.2.509_lastUpdate", "1373016331418");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1372538168667");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_searchAPI_lastUpdate", "1372946164565");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_serviceMap_lastUpdate", "1372946164389");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_toolbarContextMenu_lastUpdate", "1372538168632");
[p4y0yxw1.default] -

Anonymous user · Answer

follow up ADWC, click on clean,

post its report after restarting the pc

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It'll be fine, you'll see, at least we’re trying!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

# AdwCleaner v4.105 - Report created on 12/20/2014 at 10:20:16
# Updated on 12/08/2014 by Xplode
# Database: 2014-12-16.1 [Live]
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: Home - HOME-PC
# Executed from: C:\Users\Home\Downloads\adwcleaner_4.105.exe
# Option: Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Present: C:\Program Files (x86)\Conduit
Folder Present: C:\Program Files (x86)\Free Video Converter
Folder Present: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
Folder Present: C:\Users\Home\AppData\Local\Conduit
Folder Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Folder Present: C:\Users\Home\AppData\Local\Temp\mt_ffx
Folder Present: C:\Users\Home\AppData\LocalLow\Conduit
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Conduit
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Datamngr
Folder Present: C:\Users\virginie 2\AppData\LocalLow\DataMngr
Folder Present: C:\Users\virginie 2\AppData\LocalLow\PriceGong
Folder Present: C:\Users\virginie 2\AppData\LocalLow\searchquband
Folder Present: C:\Users\virginie 2\AppData\LocalLow\Searchqutoolbar
Folder Present: C:\Users\virginie 2\AppData\LocalLow\SweetIM
Folder Present: C:\Users\virginie 2\AppData\LocalLow\uTorrentBar_FR
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage
File Present: C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\invalidprefs.js
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\Askcom.xml
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\delta.xml
File Present: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchplugins\trovi-search.xml
File Present: C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
File Present: C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
File Present: C:\Users\virginie 2\AppData\Roaming\Mozilla\Firefox\Profiles\tjfqbv6k.default\searchplugins\Vosteran.xml
File Present: C:\Users\virginie 2\AppData\Roaming\Mozilla\Firefox\Profiles\tjfqbv6k.default\user.js
File Present: C:\Users\virginie\AppData\Roaming\Mozilla\Firefox\Profiles\si3k0zxs.default\searchplugins\Vosteran.xml
File Present: C:\Users\virginie\AppData\Roaming\Mozilla\Firefox\Profiles\si3k0zxs.default\user.js
File Present: C:\Windows\System32\drivers\rsdrvx64.sys

***** [ Scheduled Tasks ] *****

Task Present: QtraxPlayer

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Present: HKCU\Software\DataMngr_Toolbar
Key Present: HKCU\Software\eSupport.com
Key Present: HKCU\Software\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: HKCU\Software\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
Key Present: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AB1432D-8FB1-46D1-A6B8-7DC7E1AC41D4}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Present: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Present: HKCU\Software\Myfree Codec
Key Present: HKCU\Software\qtrax
Key Present: [x64] HKCU\Software\DataMngr_Toolbar
Key Present: [x64] HKCU\Software\eSupport.com
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AB1432D-8FB1-46D1-A6B8-7DC7E1AC41D4}
Key Present: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Present: [x64] HKCU\Software\Myfree Codec
Key Present: [x64] HKCU\Software\qtrax
Key Present: HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Present: HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Present: HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Present: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Present: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Present: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Present: HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Present: HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Present: HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Present: HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Present: HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Present: HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Present: HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Present: HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Present: HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Present: HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Present: HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Present: HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Present: HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Present: HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Present: HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Present: HKLM\SOFTWARE\e2dedab239e414
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: HKLM\SOFTWARE\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Present: HKLM\SOFTWARE\Myfree Codec
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Present: [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Present: [x64] HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Present: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Key Present: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B
Data Present: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - _C:\PROGRA~2\SEARCH~2\SEARCH~1\bin\VC32LO~1.DLL
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
Value Present: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Present: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Present: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Present: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

-\\ Mozilla Firefox v34.0.5 (x86 fr)

[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.FirstTime", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.FirstTimeFF3", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.PG_ENABLE", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.PG_ENABLE.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SF_JUST_INSTALLED.enc", "RkFMU0U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SF_STATUS.enc", "RU5BQkxFRA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SearchAppState.enc", "Mg==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.UserID", "UN51004557725178998");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.addressBarTakeOverEnabledInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.browser.search.defaultthis.engineName", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.enableFix404ByUser", "FALSE");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.firstTimeDialogOpened", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixPageNotFoundErrorByUser", "TRUE");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixPageNotFoundErrorInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.fixUrls", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.isCheckedStartAsHidden", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.isFirstTimeToolbarLoading", "false");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.keyword", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.lastVersion", "10.16.2.509");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appStateReportTime.enc", "MTM3MzAxNjIxNzI3OA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_CouponBuddy.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_Easytobook.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_PriceGong.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appState_WindowShopper.enc", "b2Zm");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_currentVersion.enc", "MS44LjAuNA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_eventsCache.enc", "eyI1Yjc0OGZiNS00NTQzLTQzMmMtYWNhMC1kOGNjZDIyZmQ4YTgiO[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_first_time.enc", "MQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_gadgetOpen.enc", "MA==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_installer_preapproved.enc", "RkFMU0U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_lastLoginTime.enc", "MTM3MzAxNjIxNTgwNg==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_localization.enc", "eyJkbWJveDEiOnsiVGV4dCI6IlByb21vXG5kdSBqb3VyIn0sImRt[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_settings1.8.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_userId.enc", "MzJiZTE3OTctMWZlOS00MmU1LTkwYWEtYzE2MDExNGZhNTgw");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.mam_gk_user_approval_interacted.enc", "MQ==");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.migrateAppsAndComponents", true);
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalHomepage", "hxxp://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntr[...]
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalSearchAddressUrl", "");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.originalSearchEngine", "Delta Search");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.price-gong.isManagedApp", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.search.searchAppId", "129351529700743801");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.search.searchCount", "0");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchFromAddressBarEnabledByUser", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchInNewTabEnabledByUser", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchInNewTabEnabledInHidden", "true");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.searchUserMode", "1");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1372439339265");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_appsMetadata_lastUpdate", "1373016829682");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1372538168695");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_location_lastUpdate", "1372946164540");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_login_10.16.2.509_lastUpdate", "1373016331418");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1372538168667");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_searchAPI_lastUpdate", "1372946164565");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_serviceMap_lastUpdate", "1372946164389");
[p4y0yxw1.default] - Line Found: #user_pref("CT2851639.serviceLayer_services_toolbarContextMenu_lastUpdate", "1372538168632");
[p4y0yxw1.default] -

Anonymous user · Answer

super,

* Download and save ZHPDiag to your desktop:

https://nicolascoolman.eu

or:

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Follow the prompts during installation; it will launch automatically at the end.

/!\ Users of Vista, Seven, and W8:

* Right-click the ZHPdiag logo, "Run as Administrator"

=> The icon looks like a scroll.

* Click on "complete"

* Let the tool work, even if it seems stuck!

* Save the report to your Desktop using the icon that looks like a floppy disk
* Upload the ZHPDiag.txt report to:
https://www.cjoint.com/ to read => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

, then copy/paste the provided link in your next response on the forum

zhpdiag tutorial:

https://nicolascoolman.eu

--
O.o°* ???Take a deep breath, write your message clearly in good French. It will be fine, you'll see, well, let's try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

Désolé, mais je ne peux pas accéder à des liens ou du contenu externe. Veuillez copier et coller le texte que vous souhaitez traduire ici.

Anonymous user · Answer

install the latest version of Adobe Reader from its dedicated site!  uncheck the tool bar offered before starting the installation!   attention:  µTorrent and Pando launch at PC startup, even when you don't see them!   uninstall McAfee Security Scan Plus, it is unnecessary!    * /!\ Warning /!\, * this script is only valid for this PC, during the cleanup, do not use it on another PC, risk of crashing!   * Launch ZHPFix via the shortcut on your Desktop, the icon looks like a syringe.  /!\ Users of Vista, Seven and W8:  * Right-click on the ZHPFix logo, "run as Administrator"  Click on "import"  You will see a warning message pop up, click on Ok.  * * Copy (Ctrl + C) and paste (Ctrl + V) the following bold lines into the ZHPFix window: ---------------------------------------------------------  ZHPFix Script  O51 - MPSK:{74582527-c75a-11e0-ab4a-f80f4120ca1e}\AutoRun\command. (...) -- I:\setup.exe (.not file.) O51 - MPSK:{7458256f-c75a-11e0-ab4a-f80f4120ca1e}\AutoRun\command. (...) -- J:\Autorun.exe (.not file.) O51 - MPSK:{91e1f08c-7740-11dc-8f7b-806e6f6e6963}\AutoRun\command. (.Hewlett-Packard Co. - SetupLauncher.exe.) -- E:\Setup.exe [MD5.00000000000000000000000000000000] [APT] [{987A0EC7-FA2E-4E85-A632-0E01C47542E0}] (...) -- I:\Installer.exe (.not file.) [0] O61 - LFC: 16/12/2014 - 09:44:40 ---A- . (...) -- C:\Users\Maison\AppData\Local\Temp
sn550F.tmp\UAC.dll [136192] O61 - LFC: 17/12/2014 - 09:44:40 ---A- . (...) -- C:\Users\Maison\AppData\Local\Temp
sg4B34.tmp\UAC.dll [30208] C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\searchqutoolbar C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\p4y0yxw1.default\Smartbar C:\Users\Maison\AppData\Local\Temp\uninst1.exe C:\Users\Maison\AppData\Local\Temp\wajam_install.exe C:\Users\Maison\AppData\Local\Temp\datamngrUI.exe.38210104 EmptyPrefetch ShortcutFix Emptytemp EmptyClsid     ---------------------------------------------------------- - Click the "GO" button to start the cleanup, - confirm the cleanup - Host the ZHPFIX.txt report on https://www.cjoint.com/  then copy/paste the provided link in your next reply on the forum.     Tutorial at the bottom of this page: https://nicolascoolman.eu    -- O.o°* ???Breathe deeply, write your message in proper French and clearly. it will be fine, you'll see, we just hope for the best!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

https://www.cjoint.com/c/DLvty0a41pF

Bleach0723 · Answer

if you see other things ^^

Anonymous user · Answer

Everything you need to know, I've already explained to you :-)

Read before launching the MBAM installation:

Beware, during installation uncheck the box "activate the free trial of Malwarebytes Anti-Malware"

this corresponds to a trial version that lasts only 15 days while functioning like an antivirus, thus risking conflict with your existing antivirus on the PC!

Download Malwarebytes' Anti-Malware and save it to your desktop:

https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

or:

https://fr.malwarebytes.com/mwb-download/
or:

https://fr.malwarebytes.com/mwb-download/?gclid=CPqbs6_Trb0CFcfKtAodJFoANw

or here:
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. If you already have it on your computer, there is no need to re-download it, but it is advisable to uninstall your old version (1.75) to install the latest one!

/!\ Users of Vista, Windows 7, and W8: Right-click on the Malwarebytes' Anti-Malware logo, "run as Administrator"

. Double-click on the downloaded file to start the installation process.

In the settings tab, choose your desired language

. In the "dashboard" tab, make sure your version is up to date

. If the firewall asks for permission for Malwarebytes to connect, accept
. Once the update is complete

In the "scan" tab, check the box "Custom Scan" and select your drive where Windows is installed, then scan now,

Select "rootkit scan", then the partition or drive where Windows is installed (C: for example)

then click on "start scan"

. The scan begins.

It will take some time, so let it run.
. The scan starts.
. At the end of the analysis, a message appears: Scan completed successfully.

Normally, detected infections are automatically moved to quarantine.

Click on view detailed log,
Then export, save its report in .txt format on your desktop,

Upload it to Cjoint and copy and paste the link in your next message.

--
O.o°* ???Breathe deeply, write your message in good French and clearly. It will go well, you'll see, well, let's try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

https://www.cjoint.com/?DLvwoXLEPtc

Anonymous user · Answer

I only see the header, I'm missing the body of the report.

--
O.o°* ???Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, well, we're trying!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

I don't know where to find the report... I think I'll redo the process.

Bleach0723 · Answer

Malwarebytes Anti-Malware
www.malwarebytes.org

Date of scan: 12/22/2014
Time of scan: 19:39:11
Log file: 2.txt
Administrator: Yes

Version: 2.00.4.1028
Malware database: v2014.12.22.07
Rootkit database: v2014.12.14.01
License: Free
Malware protection: Disabled
Malicious website protection: Disabled
Self-protection: Disabled

Operating system: Windows 7 Service Pack 1
Processor: x64
File system: NTFS
User: Home

Scan type: "Custom" scan
Result: Completed
Objects scanned: 722018
Elapsed time: 2 h, 6 min, 29 sec

Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry keys: 0
(No malicious items detected)

Registry values: 0
(No malicious items detected)

Registry data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical sectors: 0
(No malicious items detected)

(end)

Anonymous user · Answer

great,  restart the PC and let me know how it's working before continuing    -- O.o°* ???Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well, we'll try !!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

It seems to be going well, but how can I know if I'm still infected?

Anonymous user · Answer

we'll see the moment of truth with the sequel:  Download Delfix to your desktop:  https://toolslib.net/downloads/viewdownload/2-delfix/  or     Check the following boxes: => Reactivate Uac (only for Vista, Seven, and W8) => Remove disinfecting tools (checked by default) => Purge system restore    * Then click on Run and wait during the deletion process. * When the procedures are finished, the tool will close and disappear from the desktop * A report is saved to the clipboard: just right-click and "paste" in your next reply to send me the report ** the report is stored at this location: C:\DelFix.txt Attention: The report is unique and is deleted each time we re-run one or more options of DelFix.  Note: Delfix does not uninstall MBAM, it's up to you to decide whether to keep it or uninstall it.         * update your antivirus, run a full scan of your PC, keep me updated on the result :-)     -- O.o°* ???Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, we’re trying!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

# DelFix v10.8 - Report created on 25/12/2014 at 15:04:55 # Updated on 29/07/2014 by Xplode # Username: Home - HOME-PC # Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)  ~ UAC activation ... OK  ~ Removal of disinfection tools ...  Deleted: C:\AdwCleaner Deleted: C:\Users\Home\AppData\Roaming\ZHP Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP Deleted: C:\Program Files (x86)\ZHPDiag Deleted: C:\PhysicalDisk0_MBR.bin Deleted: C:\Users\Home\Desktop\ZHPCleaner.lnk Deleted: C:\Users\Home\Desktop\ZHPCleaner.txt Deleted: C:\Users\Home\Desktop\ZHPDiag.lnk Deleted: C:\Users\Home\Desktop\ZHPDiag.txt Deleted: C:\Users\Home\Desktop\ZHPFix.lnk Deleted: C:\Users\Home\Desktop\ZHPFixReport.txt Deleted: C:\Users\Home\Desktop\ZHPFix[R1].txt Deleted: C:\Users\Home\Downloads\adwcleaner_4.105.exe Deleted: C:\Users\Home\Downloads\ZHPCleaner.exe Deleted: C:\Users\Home\Downloads\ZHPDiag2.exe Deleted: HKLM\SOFTWARE\AdwCleaner Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1  ~ System restore purge ...  Deleted: RP #270 [Windows Update | 05/25/2014 18:20:05] Deleted: RP #271 [Windows Update | 05/27/2014 20:45:53] Deleted: RP #272 [Scheduled restore point | 11/19/2014 14:34:46] Deleted: RP #273 [avast! antivirus system restore point | 11/28/2014 07:50:16] Deleted: RP #274 [Driver package installation: Avast Network Service | 11/28/2014 07:57:17] Deleted: RP #275 [Removed AION Free-To-Play | 11/28/2014 20:48:44] Deleted: RP #276 [Windows Update | 11/30/2014 02:35:12] Deleted: RP #277 [avast! antivirus system restore point | 11/30/2014 15:47:29] Deleted: RP #278 [avast! antivirus system restore point | 11/30/2014 15:57:13] Deleted: RP #279 [Driver package installation: Avast Network Service | 11/30/2014 16:02:02] Deleted: RP #280 [Windows Update | 11/30/2014 19:11:11] Deleted: RP #281 [Windows Update | 12/01/2014 20:38:28] Deleted: RP #282 [Removed Skype(TM) 6.5 | 12/04/2014 18:24:56] Deleted: RP #283 [Windows Update | 12/05/2014 08:47:53] Deleted: RP #284 [Installed Skype Web Plugin | 12/06/2014 17:49:49] Deleted: RP #285 [Windows Update | 12/09/2014 12:22:58] Deleted: RP #286 [Windows Update | 12/09/2014 20:01:33] Deleted: RP #287 [Windows Update | 12/10/2014 20:30:13] Deleted: RP #288 [Windows Update | 12/12/2014 19:43:48] Deleted: RP #289 [Windows Update | 12/16/2014 09:19:07] Deleted: RP #290 [Windows Update | 12/18/2014 20:26:24] Deleted: RP #291 [Windows Update | 12/24/2014 08:35:21]  New restore point created!  ########## - EOF - ##########

Anonymous user · Answer

* update your antivirus, run a full scan of your pc, keep me posted on the results :-)   -- O.o°* ???Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well we’ll try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

He tells me that some files could not be scanned and that they are password protected.

Anonymous user · Answer

It's normal because the antivirus does not decompress compressed files and system files to analyze them. Sometimes, it even includes its own files in the mix!  But send me the name and path of the files so I can see what they are!    -- O.o°* ??? Breathe deeply, write your message in proper French and clearly. It will be fine, you will see, at least we’ll try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

d:\Logiciels\install_reader11_fr_ùssa_aih(1).exe\>gccheck.exe  among other things, I noticed that there is a lot of reader11

Anonymous user · Answer

This is a file that you put in D: !   It might be an old installation file of Adobe, detected by your antivirus! It is an extra copy; there should be another one like it!      -- O.o°* ???Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, well we’ll try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

Is it dangerous?

Anonymous user · Answer

If it's Adobe Reader, it's free and available for download on a website!  If it's another software, you need to test it or install it on a test machine to see what it does!     -- O.o°* ???Take a deep breath, write your message in proper French and clearly. It will be fine, you'll see, well, we’ll give it a try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

Well now he's talking to me about decompression bombs, but I've seen in another post that you mentioned it was a false positive (Samsung Kies).

Bleach0723 · Answer

Here is the screenshot

Anonymous user · Answer

yes, it's FP!  report them to Avast if you find them on your PC, just like that!  restart the PC and check if everything else is working properly!    -- O.o°* ???Breathe deeply, write your message in proper French and clearly. It's going to be fine, you'll see, well we're trying!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

I'm doing a thorough scan to see if everything is okay; after that, I think it will be fine.... Then I can send you a report that I prepared on my laptop?

Anonymous user · Answer

If it's not the same PC, I would prefer that you open another topic to avoid mixing up the PCs!    -- O.o°* ??? Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well, let's give it a try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

very well, I’m waiting to see the scan results, then I will make another post.

Anonymous user · Answer

Ok, copy and paste the link to the new post for the mobile if you want me to check it out :-)    -- O.o°* ??? Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, well, let's try!!! o°.Oø¤º°'°º¤ø

Bleach0723 · Answer

Very well, thank you in any case^^

Anonymous user · Answer

:-)   -- O.o°* ???Breathe deeply, write your message in proper French and clearly. It's going to be okay, you'll see, well we're trying!!! o°.Oø¤º°'°º¤ø

Win32 PUP and Win64 PUP

40 answers

Bidefender

Devices to renew

E.tre456.worm.windows

Impossible internet connections

Change a contact’s ringtone

Texture issues in enshrouded

Laptop thermometer?

How to uninstall cubbie web search

Pc audio connection: jack ports, hi-fi chain

Take a flight in france and schengen without id with france identité