[coco78]

Salut tout le monde !
Depuis peu mon PC a été infecté par un "adware" je penses j'en ai déjà eu et réussis a les virer mais la après multiple ZHP CLEANER et ADW CLEANER certains restent et ne veulent plus partir !!!

voici les éléments trouvés dans le pc ...

► Afficher le texte

---\\ Récapitulatif des éléments trouvés sur votre station (7) - 0s
https://nicolascoolman.eu/2017/09/07/pu ... nal-salus/ =>PUP.Optional.Salus
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>Adware.Wizzcaster
https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate
https://nicolascoolman.eu/2017/03/11/pu ... rossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/03/12/ad ... allcore-2/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/02/24/pu ... nal-wajam/ =>PUP.Optional.Wajam
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.ChinAd

Merci de vote aide et dsl si doublon ou autres ...

EDIT: Rapport ADW CLEANER

► Afficher le texte

# AdwCleaner 7.0.2.1 - Logfile created on Tue Sep 05 20:02:56 2017
# Updated on 2017/29/08 by Malwarebytes
# Database: 08-29-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy, C:\Users\All Users\Documents\XMUpdate
PUP.Optional.Legacy, C:\Users\Public\Documents\XMUpdate


***** [ Files ] *****

PUP.Optional.Legacy, C:\Windows\SysNative\drivers\lanmamaster.sys
PUP.Optional.Legacy, C:\Windows\SysNative\lanmamasterHelp.dll
PUP.Optional.SearchAlgo, C:\ProgramData\_lg.3sap
PUP.Optional.SearchAlgo, C:\ProgramData\Application Data\_lg.3sap
PUP.Optional.SearchAlgo, C:\Users\All Users\_lg.3sap


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce | ucdrv_repair
PUP.Adware.Heuristic, [Key] - HKLM\SOFTWARE\Classes\UCHTML


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2272 B] - [2016/9/30 19:24:2]
C:/AdwCleaner/AdwCleaner[C2].txt - [1407 B] - [2016/10/1 23:9:28]
C:/AdwCleaner/AdwCleaner[C3].txt - [2264 B] - [2016/12/11 14:45:57]
C:/AdwCleaner/AdwCleaner[C4].txt - [2839 B] - [2017/1/14 19:43:4]
C:/AdwCleaner/AdwCleaner[S0].txt - [1263 B] - [2016/9/30 17:14:44]
C:/AdwCleaner/AdwCleaner[S10].txt - [6386 B] - [2017/9/5 8:53:23]
C:/AdwCleaner/AdwCleaner[S11].txt - [7456 B] - [2017/9/5 9:37:22]
C:/AdwCleaner/AdwCleaner[S12].txt - [6940 B] - [2017/9/5 10:26:35]
C:/AdwCleaner/AdwCleaner[S13].txt - [5635 B] - [2017/9/5 13:0:59]
C:/AdwCleaner/AdwCleaner[S14].txt - [3642 B] - [2017/9/5 13:12:21]
C:/AdwCleaner/AdwCleaner[S15].txt - [2689 B] - [2017/9/5 13:24:40]
C:/AdwCleaner/AdwCleaner[S16].txt - [2515 B] - [2017/9/5 14:1:13]
C:/AdwCleaner/AdwCleaner[S17].txt - [2753 B] - [2017/9/5 15:54:7]
C:/AdwCleaner/AdwCleaner[S18].txt - [2757 B] - [2017/9/5 16:44:5]
C:/AdwCleaner/AdwCleaner[S1].txt - [2204 B] - [2016/9/30 19:23:38]
C:/AdwCleaner/AdwCleaner[S2].txt - [1589 B] - [2016/10/1 23:7:3]
C:/AdwCleaner/AdwCleaner[S3].txt - [2203 B] - [2016/12/11 14:45:26]
C:/AdwCleaner/AdwCleaner[S4].txt - [1915 B] - [2017/1/14 19:42:37]
C:/AdwCleaner/AdwCleaner[S5].txt - [2008 B] - [2017/8/1 19:28:41]
C:/AdwCleaner/AdwCleaner[S6].txt - [1686 B] - [2017/9/4 19:15:42]
C:/AdwCleaner/AdwCleaner[S7].txt - [6666 B] - [2017/9/4 19:23:30]
C:/AdwCleaner/AdwCleaner[S8].txt - [6879 B] - [2017/9/4 19:49:58]
C:/AdwCleaner/AdwCleaner[S9].txt - [11625 B] - [2017/9/4 20:22:16]


########## EOF - C:\AdwCleaner\AdwCleaner[S19].txt ##########

[Electricien 69]

bonjour,

* Télécharge et enregistre ZHPDiag sur ton bureau :

https://www.nicolascoolman.com/fr/download/zhpdiag/



* Une fois téléchargé sur ton bureau, lance le

/!\Utilisateur de Vista, Seven et W8 et W10 :

* Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »


* Clique sur « Scanner »

* Laisse travailler l'outil, même s'il semble bloqué !

* A la fin du scan, le rapport s’affiche,

Si Aucun rapport s’affiche, clique sur le bouton « Rapport », il s’ouvre,

* Enregistre le rapport sur ton Bureau
pour héberger le rapport, rends toi sur ce site :

http://www.cjoint.com/

clique sur Parcourir, sélectionne le fichier du rapport en format .txt,
Choisis « Type de diffusion » en privé, pour une durée à ta convenance !
En suite, clique sur « Créer le lien Cjoint », un lien va se créer, copie et colle le sur ton prochain message

[coco78]

Bonjour,

Merci beaucoup pour votre aide.

tenez le lien http://www.cjoint.com/c/GIiiLoo5ulP.

[Electricien 69]

Télécharge et enregistre Zhpfix sur ton bureau :

https://www.nicolascoolman.com/fr/download/zhpfix/



lance le, il va s’installer sur ton pc,

/!\Utilisateur de Vista, Seven et W8 :

* Clique droit sur le logo de ZHPfix, « exécuter en tant qu'Administrateur »

* /!\ Avertissement /!\,
* ce script est seulement valable pour ce pc, en cours du nettoyage, à ne pas utiliser sur un autre pc, risque de plantage !

* Lance ZHPFix via le raccourci sur ton Bureau, l'icône est sous forme de seringue.


Clique sur « importer »

Tu vas voir apparaitre un message d'avertissement, clique sur Ok.

* * Copie ( Ctrl + C ) et colle ( Ctrl + V ) les lignes suivantes en gras dans la fenêtre de Zhpfix :
---------------------------------------------------------

Script Zhpfix
O23 - Service: clsid54021 (clsid54021) . (...) - C:\ProgramData\clsid54021.exe (.not file.)
O4 - HKCU\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.)
O4 - HKCU\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.)
O4 - HKCU\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.)
O4 - HKCU\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.)
O4 - HKCU\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.)
O4 - HKCU\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.)
HKLM\SOFTWARE\Wow6432Node\6C09CE190BC45ADF2133F04CF4554564
HKCU\SOFTWARE\IM
O58 - SDL:2017/08/31 21:29:18 A . (.MTQ0HV - .) -- C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys [78744]
O58 - SDL:2017/06/20 07:15:11 A . (...) -- C:\WINDOWS\System32\drivers\lanmamaster.sys [1509480]
HKLM\SYSTEM\CurrentControlSet\Services\clsid54021
C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys
C:\WINDOWS\System32\drivers\lanmamaster.sys
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\03D22C9C66915D58C88912B64C1F984B8344EF09
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\0F684EC1163281085C6AF20528878103ACEFCAAB
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1667908C9E22EFBD0590E088715CC74BE4C60884
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\18DEA4EFA93B06AE997D234411F3FD72A677EECE
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\249BDA38A611CD746A132FA2AF995A2D3C941264
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\331E2046A1CCA7BFEF766724394BE6112B4CA3F7
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3353EA609334A9F23A701B9159E30CB6C22D4C59
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3D496FA682E65FC122351EC29B55AB94F3BB03FC
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4420C99742DF11DD0795BC15B7B0ABF090DC84DF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5240AB5B05D11B37900AC7712A3C6AE42F377C8C
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DD3D41810F28B2A13E9A004E6412061E28FA48D
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7457A3793086DBB58B3858D6476889E3311E550E
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\76A9295EF4343E12DFC5FE05DC57227C1AB00D29
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\775B373B33B9D15B58BC02B184704332B97C3CAF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\872CD334B7E7B3C3D1C6114CD6B221026D505EAB
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\88AD5DFE24126872B33175D1778687B642323ACF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9132E8B079D080E01D52631690BE18EBC2347C1E
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\982D98951CF3C0CA2A02814D474A976CBFF6BDB1
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9C43F665E690AB4D486D4717B456C5554D4BCEB5
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A5341949ABE1407DD7BF7DFE75460D9608FBC309
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A59CC32724DD07A6FC33F7806945481A2D13CA2F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD4C5429E10F4FF6C01840C20ABA344D7401209F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD96BB64BA36379D2E354660780C2067B81DA2E0
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CDC37C22FE9272D8F2610206AD397A45040326B8
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB303C9B61282DE525DC754A535CA2D6A9BD3D87
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB77E5CFEC34459146748B667C97B185619251BA
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E22240E837B52E691C71DF248F12D27F96441C00
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\ED841A61C0F76025598421BC1B00E24189E68D54
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F83099622B4A9F72CB5081F742164AD1B8D048C9
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138
Hostfix
EmptyPrefetch
ShortcutFix
Emptytemp
EmptyClsid


----------------------------------------------------------
- Clique sur le bouton « GO » pour lancer le nettoyage,
- confirme le nettoyage
- Héberge le rapport ZHPFIX.txt sur
pour héberger le rapport, rends toi sur ce site :

http://www.cjoint.com/

clique sur Parcourir, sélectionne le fichier du rapport en format .txt,
Choisis « Type de diffusion » en privé, pour une durée à ta convenance !
En suite, clique sur « Créer le lien Cjoint », un lien va se créer, copie et colle le sur ton prochain message

[coco78]

J'ai lancé ZHP fix avec voter script mais est normal que ce soit extrêmement long ???
http://www.cjoint.com/c/GIisaevQSd

[Electricien 69]

oui, normal, mais le rapport n'est pas accessible, tu peux réhéberger le rapport s'il te plait ?

[coco78]

Bah je n'ai pas encore le rapport la barre de chargement n'avance pas !
Elle est bloqué !

[Electricien 69]

ok, arrête le,

refais un nouveau rapport de Zhpdiag pour voir ou s'en est !

envoie moi le rapport via Cjoint

[coco78]

Ok voila le rapport ZHP DIAG
http://www.cjoint.com/c/GIjljkFwRVP

[Electricien 69]

ok,

colle seulement ceci dans la fenêtre de Zhpfix :

Script Zhpfix
O23 - Service: clsid54021 (clsid54021) . (...) - C:\ProgramData\clsid54021.exe (.not file.)
O4 - HKCU\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.)
O4 - HKCU\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.)
O4 - HKCU\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.)
O4 - HKCU\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.)
O4 - HKCU\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.)
O4 - HKCU\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.)
HKLM\SOFTWARE\Wow6432Node\6C09CE190BC45ADF2133F04CF4554564
HKCU\SOFTWARE\IM
O58 - SDL:2017/08/31 21:29:18 A . (.MTQ0HV - .) -- C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys [78744]
O58 - SDL:2017/06/20 07:15:11 A . (...) -- C:\WINDOWS\System32\drivers\lanmamaster.sys [1509480]
HKLM\SYSTEM\CurrentControlSet\Services\clsid54021
C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys
C:\WINDOWS\System32\drivers\lanmamaster.sys
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\03D22C9C66915D58C88912B64C1F984B8344EF09
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\0F684EC1163281085C6AF20528878103ACEFCAAB
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1667908C9E22EFBD0590E088715CC74BE4C60884
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\18DEA4EFA93B06AE997D234411F3FD72A677EECE
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\249BDA38A611CD746A132FA2AF995A2D3C941264
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\331E2046A1CCA7BFEF766724394BE6112B4CA3F7
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3353EA609334A9F23A701B9159E30CB6C22D4C59
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3D496FA682E65FC122351EC29B55AB94F3BB03FC
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4420C99742DF11DD0795BC15B7B0ABF090DC84DF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5240AB5B05D11B37900AC7712A3C6AE42F377C8C
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DD3D41810F28B2A13E9A004E6412061E28FA48D
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7457A3793086DBB58B3858D6476889E3311E550E
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\76A9295EF4343E12DFC5FE05DC57227C1AB00D29
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\775B373B33B9D15B58BC02B184704332B97C3CAF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\872CD334B7E7B3C3D1C6114CD6B221026D505EAB
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\88AD5DFE24126872B33175D1778687B642323ACF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9132E8B079D080E01D52631690BE18EBC2347C1E
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\982D98951CF3C0CA2A02814D474A976CBFF6BDB1
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9C43F665E690AB4D486D4717B456C5554D4BCEB5
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A5341949ABE1407DD7BF7DFE75460D9608FBC309
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A59CC32724DD07A6FC33F7806945481A2D13CA2F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD4C5429E10F4FF6C01840C20ABA344D7401209F
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD96BB64BA36379D2E354660780C2067B81DA2E0
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CDC37C22FE9272D8F2610206AD397A45040326B8
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB303C9B61282DE525DC754A535CA2D6A9BD3D87
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB77E5CFEC34459146748B667C97B185619251BA
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E22240E837B52E691C71DF248F12D27F96441C00
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\ED841A61C0F76025598421BC1B00E24189E68D54
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F83099622B4A9F72CB5081F742164AD1B8D048C9
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138
EmptyPrefetch
ShortcutFix
Emptytemp
EmptyClsid