Ads by speedchecker

Script ZHPFix
O43 - CFD: 07/01/2015 - 21:21:36 - [] ----D C:\ProgramData\VXnYJCj
O43 - CFD: 22/11/2014 - 22:52:12 - [] ----D C:\ProgramData\{D6A06EDD-9203-4050-8A05-45E7F4064FEB}
[HKCU\Software\WQRM]
O39 - APT: WQRM - (...) -- C:\Windows\Tasks\WQRM.job   [1344]
O39 - APT: WQRM - (...) -- C:\Windows\System32\Tasks\WQRM   [1344]
[MD5.00000000000000000000000000000000] [APT] [WQRM] (...) -- C:\Users\Shin\AppData\Roaming\WQRM.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{2BBC541D-EF2D-42B6-9194-D388C3AFB718}] (...) -- C:\ProgramData\TVWizard\uninstall.exe (.not file.)   [0]  =>PUP.TVWizard
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.not file.) 
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} Clé orpheline
O4 - HKUS\S-1-5-21-834330185-3961649148-2843825973-1001\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.not file.) 
[MD5.00000000000000000000000000000000] [APT] [{849581A6-F3C0-44C5-AA31-1DAEE601DAFB}] (...) -- C:\Users\Shin\AppData\Roaming\omiga-plus\UninstallManager.exe (.not file.)   [0]  =>Hijacker.OmigaPlus
C:\Users\Shin\AppData\Roaming\omiga-plus
EmptyTemp
EmptyFlash
EMPTYCLSID

netsvcs 
msconfig 
safebootminimal 
safebootnetwork 
activex 
drivers32 
%ALLUSERSPROFILE%\Application Data\*. 
%ALLUSERSPROFILE%\Application Data\*.exe /s 
%APPDATA%\*. 
%APPDATA%\*.exe /s 
%temp%\*.exe /s 
%SYSTEMDRIVE%\*.exe 
%systemroot%\*. /mp /s 
%systemroot%\system32\consrv.dll 
%systemroot%\system32\*.dll /lockedfiles 
%windir%\Tasks\*.job /lockedfiles 
%systemroot%\system32\drivers\*.sys /lockedfiles 
%systemroot%\System32\config\*.sav 
/md5start 
explorer.exe 
winlogon.exe 
services.exe 
wininit.exe 
/md5stop 
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s 
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s 
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s 
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s 
CREATERESTOREPOINT 
nslookup https://www.google.fr/?gws_rd=ssl /c 
hklm\software\clients\startmenuinternet|command /rs 
hklm\software\clients\startmenuinternet|command /64 /rs 
CREATERESTOREPOINT
SAVEMBR:0