Adware.Win32

# AdwCleaner v2.101 - Rapport créé le 20/12/2012 à 21:28:46
# Mis à jour le 16/12/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : brandon - BRANDON-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\brandon\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok

***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v16.0.2 (fr)

Nom du profil : default
Fichier : C:\Users\brandon\AppData\Roaming\Mozilla\Firefox\Profiles\6aefxuwt.default\prefs.js

C:\Users\brandon\AppData\Roaming\Mozilla\Firefox\Profiles\6aefxuwt.default\user.js ... Supprimé !

[OK] Le fichier ne contient aucune entrée illégitime.

Nom du profil : default
Fichier : C:\Users\karine\AppData\Roaming\Mozilla\Firefox\Profiles\q5cw86rx.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v23.0.1271.97

Fichier : C:\Users\brandon\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.41] : icon_url = "hxxp://www.babylon.com/favicon.ico",
Supprimée [l.44] : keyword = "babylon.com",
Supprimée [l.47] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=111020&tt=4512_3&babsrc=SP_ss&[...]

*************************

AdwCleaner[R1].txt - [1566 octets] - [20/12/2012 07:32:30]
AdwCleaner[S1].txt - [32927 octets] - [19/12/2012 22:22:29]
AdwCleaner[S3].txt - [1795 octets] - [20/12/2012 21:28:46]

########## EOF - C:\AdwCleaner[S3].txt - [1855 octets] ##########

Encore merci de te pencher sur mon problème :)

Rapport de ZHPDiag v1.33.04 par Nicolas Coolman, Update du 18/12/2012
Run by brandon at 21/12/2012 09:42:31
State :
UAC :


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 16.0.2 v16.0.2 (Defaut)
GCIE: Google Chrome v23.0.1271.97

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4060 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 42 GB (29%) free of 141 GB

---\\ Logged in mode
~ Computer Name: BRANDON-PC
~ User Name: brandon
~ All Users Names: karine, HomeGroupUser$, brandon, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\brandon\AppData\Roaming\
~ %Desktop% : C:\Users\brandon\Desktop\
~ %Favorites% : C:\Users\brandon\Favorites\
~ %LocalAppData% : C:\Users\brandon\AppData\Local\
~ %StartMenu% : C:\Users\brandon\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 42 Go of 141 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 141 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Free 3 Go of 4 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Hidden files state (Hidden/Total)
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/11/2012 - 07:04:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\
~ Mes images (My Pictures) : 2/410
~ Mes musiques (My Musics) : 12/13
~ Mes Videos (My Videos) : 8/95
~ Mes Favoris (My Favorites) : 1/49
~ Mes Documents (My Documents) : 5/566
~ Mon Bureau (My Desktop) : 1/25
~ Menu demarrer (Programs) : 1/68
~ Scan Hidden Files in 00mn 02s



---\\ Running Processes
[MD5.A898B58FA169AD2E84EC63354DC4BEB7].(.Acer Corp..Acer Touch Portal Button Monitor.) -- C:\Program Files (x86)\TouchSettings\TouchPortalOBR.exe [151368] [PID.2840]
[MD5.390679F7A217A5E73D756276C40AE887].(.Safer-Networking Ltd..System settings protector.) -- C:\Program Files (x86)\Spybot.Search & Destroy\TeaTimer.exe [2260480] [PID.1848]
[MD5.7C6FCBAF1BE7513C5BC5B90519EE59DF].(..Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528] [PID.2512]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD].(.Google Inc..GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.]
[MD5.53D28E8DE0ECDFB78141B81EE404ECB9].(.FaceMoi.www.facemoi.com.) -- C:\Facemoi\facemoi.exe [176128] [PID.2784]
[MD5.75E2B687934D0ED7A79A5F6FD18964F5].(.bywifi.com.Bywifi: Video Streaming Accelerator.) -- C:\Program Files (x86)\Bywifi\bywifi.exe [2644992] [PID.2520]
[MD5.AD8BD96B41C40AC36D803DF267B26EF0].(.LogMeIn Inc..Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2254768] [PID.3172]
[MD5.F023A14FE899F5401935CAC119A723CE].(.Akamai Technologies, Inc..Akamai NetSession Client.) -- C:\Users\brandon\AppData\Local\Akamai\netsession_win.exe [4441920] [PID.3216]
[MD5.083649EF692A066880C9326020915AFE].(.AVAST Software.avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4297136] [PID.3752]
[MD5.4EB0C6C3EF4D8885CF2B5D0062F31E44].(..DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376] [PID.3800]
[MD5.12916E0642E92561C98B18A2A2D01B14].(.Sun Microsystems, Inc..Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848] [PID.3812]
[MD5.DF7AEEC25E5C006EEC61206476F48629].(.Lavasoft.Ad-Aware Browsing Protection and Anti-Phish.) -- C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [542104] [PID.3836]
[MD5.90012FB281B393F9F6A6689BCD4CB64B].(.Lavasoft Limited.Ad-Aware Antivirus.) -- C:\Program Files (x86)\Ad-Aware Antivirus\AdAware.exe [18880984] [PID.2216]
[MD5.A3FBEC2CCD8F1AC7B61927C186A4BE1A].(.Nicolas Coolman.ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3793920] [PID.6060]
~ Scan Processes Running in 00mn 00s



---\\
C:\Users\brandon\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Opera, Plugins,Start,Search (P1,B0,B1)
C:\Users\brandon\AppData\Roaming\Mozilla\Firefox\Profiles\6aefxuwt.default\prefs.js
C:\Users\brandon\AppData\Roaming\Mozilla\Firefox\Profiles\6aefxuwt.default\user.js
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\Web Search.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [brandon] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [brandon - 6aefxuwt.default\donottrackplus@abine.com] [] DoNotTrackMe v2.2.5.1205 (.Abine, Inc..)
M2 - MFEP: prefs.js [brandon - 6aefxuwt.default\firefox@ghostery.com] [] Ghostery v2.8.3 (.Evidon, Inc..)
M2 - MFEP: prefs.js [brandon - 6aefxuwt.default\ich@maltegoetz.de] [] ProxTube - Gesperrte YouTube Videos entsperren v1.4.3 (.Malte Goetz.)
M2 - MFEP: prefs.js [brandon - 6aefxuwt.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20120926 (.WOT Services Oy.)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.2".) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@microsoft.com/VirtualEarth3D,version=4.0] - (...) -- (.not file.)
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (...) -- C:\Users\brandon\AppData\Roaming\Facebook\npfbplugin_1_0_1.dll (.not file.)
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\brandon\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\brandon\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\brandon\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 01s



---\\ Internet Explorer Extensions, URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;<local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Changed inifile Value, Mapped to Registry (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0



---\\ Browser Helper Objects (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader [64Bits] - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> [64Bits] - {326E768D-4182-46FD-9C16-1449A49795F4} . (.DivX, LLC - DivX Plus Web Player HTML5 <video> version.) -- C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHT
O2 - BHO: Spybot-S&D IE Protection [64Bits] - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Ad-Aware Security Add-on [64Bits] - {6c97a91e-4524-4019-86af-2aa2d567bf5c} . (...) -- C:\Program Files (x86)\adawaretb\adawareDx.dll (.not file.)
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll
O2 - BHO: BywifiBHO [64Bits] - {C4743D3E-20D7-4B52-84F2-5E4E277B2D82} . (.bywifi.com - Bywifi: Video Streaming Helper.) -- C:\Program Files (x86)\Bywifi\bywifiie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 01s



---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
~ Scan Toolbar in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [TouchPortal] . (.Acer Corp. - TouchPortal.) -- C:\Program Files (x86)\Packard Bell\Packard Bell Touch Suite\TouchPortal.exe
O4 - HKLM\..\Run: [TouchORB] . (.Acer Corp. - Acer Touch Portal Button Monitor.) -- C:\Program Files (x86)\TouchSettings\TouchPortalOBR.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SBRegRebootCleaner] . (.GFI Software - Registry Cleaner.) -- C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe
O4 - HKCU\..\Run: [PhotoGadgetFirstRun]
O4 - HKCU\..\Run: [MusicGadget]
O4 - HKCU\..\Run: [TouchMemo]
O4 - HKCU\..\Run: [PhotoGadget]
O4 - HKCU\..\Run: [PhotoGadgetFirstRun_Portal]
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Pando Media Booster] . (. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [PUSH Wallpaper] C:\Program Files\PUSH Entertainment\Space Wormhole 3D\Launch Wallpaper.exe (.not file.)
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files (x86)\NCSoft\Launcher\NCLauncher.exe (.not file.)
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Facemoi] . (.FaceMoi - www.facemoi.com.) -- C:\Facemoi\facemoi.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\brandon\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\steam.exe
O4 - HKCU\..\Run: [bywifi] . (.bywifi.com - Bywifi: Video Streaming Accelerator.) -- C:\Program Files (x86)\Bywifi\bywifi.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\brandon\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files (x86)\eMule\emule.exe (.not file.)
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\brandon\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe
O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [YouCam Mirror Tray icon] . (.CyberLink Corp. - CyberLink YouCam Tray.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [bywifi] . (.bywifi.com - Bywifi: Video Streaming Accelerator.) -- C:\Program Files (x86)\Bywifi\bywifi.exe
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS5.5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5.5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [DivXUpdate] . (. - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
O4 - HKLM\..\Wow6432Node\Run: [Ad-Aware Browsing Protection] . (.Lavasoft - Ad-Aware Browsing Protection and Anti-Phish.) -- C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
O4 - HKLM\..\Wow6432Node\Run: [Ad-Aware Antivirus]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [PhotoGadgetFirstRun]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [MusicGadget]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [TouchMemo]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [PhotoGadget]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [PhotoGadgetFirstRun_Portal]
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Pando Media Booster] . (. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [PUSH Wallpaper] C:\Program Files\PUSH Entertainment\Space Wormhole 3D\Launch Wallpaper.exe (.not file.)
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [NCsoft Launcher] C:\Program Files (x86)\NCSoft\Launcher\NCLauncher.exe (.not file.)
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Facemoi] . (.FaceMoi - www.facemoi.com.) -- C:\Facemoi\facemoi.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\brandon\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\steam.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [bywifi] . (.bywifi.com - Bywifi: Video Streaming Accelerator.) -- C:\Program Files (x86)\Bywifi\bywifi.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\brandon\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [eMuleAutoStart] C:\Program Files (x86)\eMule\emule.exe (.not file.)
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\brandon\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-1212204428-2477455955-3343533990-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe
~ Scan Application in 00mn 00s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Install_NSS.lnk . (...) -- C:\Program Files (x86)\DivX\Symantec\scstubinstaller.exe (.not file.)
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\brandon\Desktop\AD-R.lnk . (...) -- C:\Program Files (x86)\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\brandon\Desktop\BiosAgent Plus.lnk . (.Copyright © 2010 eSupport.com. All Rights R.) -- C:\Users\brandon\AppData\Local\eSupport.com\biosagentplus_1052.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Bywifi accélérateur de vidéo.lnk . (.bywifi.com.) -- C:\Program Files (x86)\Bywifi\bywifi.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Bywifi convertisseur de vidéo.lnk . (...) -- C:\Program Files (x86)\Bywifi\bywifidl.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Bywifi FLV Merger.lnk . (...) -- C:\Program Files (x86)\Bywifi\bywifidl.exe
O4 - Global Startup: C:\Users\brandon\Desktop\CamStudio.lnk . (...) -- C:\Program Files (x86)\CamStudio\Recorder.exe (.not file.)
O4 - Global Startup: C:\Users\brandon\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe
O4 - Global Startup: C:\Users\brandon\Desktop\DivX Movies.lnk . (...) -- C:\Users\brandon\Videos\DivX Movies
O4 - Global Startup: C:\Users\brandon\Desktop\EVEREST Home Edition.lnk . (...) -- C:\Program Files (x86)\Lavalys\EVEREST Home Edition\everest.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Format Factory.lnk . (.Free Time.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Fraps.lnk . (.Beepa P/L.) -- C:\Fraps\fraps.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\brandon\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\brandon\Desktop\HiJackThis.lnk . (.Trend Micro Inc..) -- C:\Users\brandon\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Installeur de World of Warcraft.lnk . (...) -- C:\Users\Public\Documents\Blizzard Entertainment\World of Warcraft Installer
O4 - Global Startup: C:\Users\brandon\Desktop\MaCalculatrice.lnk . (...) -- C:\Users\brandon\AppData\Roaming\Microsoft\Installer\{48D87CF2-9E6A-47B3-980B-2C1D3EF56819}\_B20F79C2D5CC8F74A13019.exe
O4 - Global Startup: C:\Users\brandon\Desktop\PhotoFiltre.lnk . (.Antonio Da Cruz.) -- C:\Program Files (x86)\PhotoFiltre\PhotoFiltre.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\brandon\Desktop\Teamspeak 2 RC2.lnk . (.Dominating Bytes Design.) -- C:\Program Files (x86)\Teamspeak2_RC2\TeamSpeak.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ALZip.lnk . (.ESTsoft Corp..) -- C:\Program Files (x86)\ESTsoft\ALZip\ALZip.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bywifi accélérateur de vidéo.lnk . (.bywifi.com.) -- C:\Program Files (x86)\Bywifi\bywifi.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bywifi convertisseur de vidéo.lnk . (...) -- C:\Program Files (x86)\Bywifi\bywifidl.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 4.0 Beta 11.lnk . (...) -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 11\firefox.exe (.not file.)
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\brandon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Xfire.lnk . (...) -- C:\Program Files (x86)\Xfire\Xfire.exe (.not file.)
~ Scan Global Startup in 00mn 20s



---\\ IE Options icon not visible in Control Panel (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B17D8D65-3E56-4F0D-BA6F-D20B2E4A6E50}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{B17D8D65-3E56-4F0D-BA6F-D20B2E4A6E50}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{B17D8D65-3E56-4F0D-BA6F-D20B2E4A6E50}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss [64Bits] - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: Ad-Aware Service (Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Antivirus Service.) - C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: GRegService (Greg_Service) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) . (. - OberonGameConsoleService.) - C:\Program Files (x86)\Packard Bell GameZone\GameConsole\OberonGameConsoleService.exe
O23 - Service: Ad-Aware (SBAMSvc) . (.GFI Software - GFI Software Anti Malware Service.) - C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Updater Service (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 00s



---\\ Windows Active Desktop Components & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Task Planned Automatically(039)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Install_NSS.job
[MD5.693A2BF25349642027FA26F5D1A4059E] [APT] [Ad-Aware Antivirus Scheduled Scan] (.Lavasoft Limited.) -- C:\Program Files (x86)\AD-AWA~1\AdAwareLauncher.exe
[MD5.393F021E2A9FA19AC94BA4482E32FC6C] [APT] [AdobeAAMUpdater-1.0-brandon-PC-brandon] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[MD5.E650A886EB173AC1C6F6A0FDF4138D54] [APT] [ESTsoft RunAsStdUser 14994254Task] (.ESTsoft Corp..) -- C:\Program Files (x86)\ESTsoft\ALZip\ALZip.exe
[MD5.E650A886EB173AC1C6F6A0FDF4138D54] [APT] [ESTsoft RunAsStdUser 5785499Task] (.ESTsoft Corp..) -- C:\Program Files (x86)\ESTsoft\ALZip\ALZip.exe
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001Core] (.Facebook Inc..) -- C:\Users\brandon\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001UA] (.Facebook Inc..) -- C:\Users\brandon\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001Core] (.Google Inc..) -- C:\Users\brandon\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1212204428-2477455955-3343533990-1001UA] (.Google Inc..) -- C:\Users\brandon\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [Install_NSS] (...) -- C:\Program Files (x86)\DivX\Symantec\scstubinstaller.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeLogonTaskS-1-5-21-1212204428-2477455955-3343533990-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeScheduledTaskS-1-5-21-1212204428-2477455955-3343533990-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{036628B8-CDD7-4EBB-8378-7A583D9AAAEF}] (...) -- C:\Program Files (x86)\Orange\RIM\CK_Installer.exe (.not file.)
[MD5.CBEC06E32D0AC9C3D0A9199EDC1FB959] [APT] [{22DE3BF3-BA5E-47CF-83E9-330DBD38A77E}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{351E2C20-E943-4D39-9AFE-368B8C17ABE4}] (...) -- E:\Autorun.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{38B475DC-6C89-41AC-9B8F-CAD155A7AC93}] (...) -- C:\Users\brandon\Downloads\downloader.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{589205DF-B9BA-41DB-9D08-C1D31C94C3DD}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{60DD815C-37FB-41A8-B70A-A6BE75A4980C}] (...) -- C:\Users\brandon\Downloads\deadmau5\Xbroak-stealer.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{6E1405DA-2B83-45B1-8AD6-01F8429B182A}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{7241170B-710F-4AA4-B8A9-2056E9150EEB}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{74E1D5ED-034F-4FE3-8E09-32BB785B14D2}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{808A9E62-FF91-435C-94FF-46AF3A41C7B4}] (...) -- C:\Users\brandon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV96XYZ3\DofusInstaller_v1_29_0[1].exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{89FA6E7B-B11F-4414-8952-672E883EF38F}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{A6AE8794-10F8-4765-8B55-43B0E452BD47}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{B1D2CFE2-3ABA-4C99-A170-72CAD1838313}] (...) -- C:\Program Files (x86)\Xfire\uninst.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{EBDCF764-2859-43B9-9247-FDCCC4F21CFE}] (...) -- E:\SETUP.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{F37778DF-5C24-4C9C-B174-A75F3D3878CA}] (...) -- C:\Users\brandon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NZA0D2NP\Firefox Setup 3.6[1].exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{FE7F8CA0-AD6F-4582-B0BC-2172F01480B0}] (...) -- C:\Users\brandon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9U2E9WPQ\eMule0.49c-Installer2[1].exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{FFF95A12-9E73-4675-A4FC-3F000F8F6434}] (...) -- C:\Program Files (x86)\Diablo II\Diablo II.exe (.not file.)
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 07s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: ALTools Update - (.ESTsoft Corp..) [HKLM][64Bits] -- ALUpdate_is1
O42 - Logiciel: ALZip - (.ESTsoft Corp..) [HKLM][64Bits] -- ALZip_is1
O42 - Logiciel: AbsoluteShield File Shredder - (.SysShield Consulting, Inc..) [HKLM][64Bits] -- AbsoluteShield File Shredder_is1
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Ad-Aware Security Add-on - (.Lavasoft.) [HKLM][64Bits] -- adawaretb
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Acrobat 5.0
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated..) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated..) [HKLM][64Bits] -- {3521BDBD-D453-5D9F-AA55-44B75D214629}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Premiere Pro CS5.5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0497EAED-70DA-4BBE-BEB3-AF77FD8788EA}
O42 - Logiciel: Adobe Reader 9.5.2 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A95000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Adobe Story - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Story - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C28DD992-5B7B-D195-6841-4EC57DF512BD}
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {b2ec4a38-b545-4a00-8214-13fe0e915e6d}
O42 - Logiciel: Airport Mania First Flight - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11505173}
O42 - Logiciel: Akamai NetSession Interface - (.Akamai Technologies, Inc.) [HKCU][64Bits] -- Akamai
O42 - Logiciel: Akamai NetSession Interface Service - (..) [HKLM][64Bits] -- Akamai
O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}
O42 - Logiciel: Amazonia - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM][64Bits] -- Avira AntiVir Desktop
O42 - Logiciel: Battlelog Web Plugins - (.EA Digital Illusions CE AB.) [HKLM][64Bits] -- Battlelog Web Plugins
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKCU][64Bits] -- BitTorrent
O42 - Logiciel: Bywifi 2.8.1 - (.bywifi.com.) [HKLM][64Bits] -- Bywifi
O42 - Logiciel: CASIO FA-124 - (.CASIO COMPUTER CO., LTD..) [HKLM][64Bits] -- {FB47E710-6249-4EFA-BE36-E922B0612AF4}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CamStudio 2.0 Fr - (..) [HKLM][64Bits] -- CamStudio 2.0 Fr_is1
O42 - Logiciel: Cheat Engine 6.0 - (.Dark Byte.) [HKLM][64Bits] -- Cheat Engine 6.0_is1
O42 - Logiciel: Chronicle 4 - (..) [HKCU][64Bits] -- Chronicle 4
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM][64Bits] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM][64Bits] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM][64Bits] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dairy Dash - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}
O42 - Logiciel: DebugMode Wink - (..) [HKLM][64Bits] -- DebugMode Wink
O42 - Logiciel: Dream Day First Home - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}
O42 - Logiciel: DriverAgent by eSupport.com - (..) [HKLM][64Bits] -- DriverAgent.exe
O42 - Logiciel: ESN Sonar - (.ESN Social Software AB.) [HKLM][64Bits] -- ESN Sonar-0.70.4
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM][64Bits] -- EVEREST Home Edition_is1
O42 - Logiciel: EasyPHP 1.8 - (..) [HKLM][64Bits] -- EasyPHP_is1
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Farm Frenzy 2 - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}
O42 - Logiciel: Feedback Tool - (.Microsoft Corporation.) [HKLM][64Bits] -- {90024193-9F13-4877-89D5-A1CDF0CBBF28}
O42 - Logiciel: First Class Flurry - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115208410}
O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Fraps (remove only) - (..) [HKLM][64Bits] -- Fraps
O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: GamersFirst LIVE! - (.GamersFirst.) [HKLM][64Bits] -- GamersFirst LIVE!
O42 - Logiciel: GeoGebra - (.International GeoGebra Institute.) [HKLM][64Bits] -- GeoGebra
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Granny In Paradise - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}
O42 - Logiciel: Heroes of Hellas - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}
O42 - Logiciel: I-Doser v4 - (..) [HKCU][64Bits] -- I-Doser v4
O42 - Logiciel: ITECIR - (.ITE.) [HKLM][64Bits] -- {40580068-9B10-40B5-9548-536CE88AB23C}
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM][64Bits] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 1 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {3248F0A8-6813-11D6-A77B-00B0D0150010}
O42 - Logiciel: JMicron Flas

AH ok désolé :p

https://forums-fec.be/upload/www/index.php?action=d&step=3

https://forums-fec.be/upload/www/index.php?action=d&step=3

Merci vraiment de ton aide, j'ai un achat important à faire sur le net et ce virus m'a retardé grandement.

Ton lien ne donne rien

https://www.cjoint.com/?3LxswEEapdP

Voila

Rapport de ZHPFix 1.3.08 par Nicolas Coolman, Update du 06/12/2012
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-23-12-2012-18-34-30.txt
Run by brandon at 23/12/2012 18:34:29
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)



========== ==========
SUPPRIME Spybot - Search & Destroy
SUPPRIME Google Toolbar for Internet Explorer

========== ==========
SUPPRIME Key: CLSID BHO: {C4743D3E-20D7-4B52-84F2-5E4E277B2D82}
SUPPRIME Key: HKCU\Software\Bywifi
SUPPRIME Key: HKCU\Software\Boonty
SUPPRIME Key: HKCU\Software\Pando Networks
SUPPRIME Key: HKLM\Software\Wow6432Node\Boonty
SUPPRIME Key: HKLM\Software\Wow6432Node\Pando Networks

========== ==========
SUPPRIME RunValue: bywifi
ABSENTE RunValue: bywifi
FirewallRaz :
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {6E51D0A6-0563-4855-A085-BF38A8EB2449}
SUPPRIME FirewallRaz (None) : {C021C26A-7B33-4F74-80FD-8620B31D0695}
SUPPRIME FirewallRaz (None) : {B1C0C87D-59B8-4CBC-A9F4-CE556493B078}
SUPPRIME FirewallRaz (Public) : TCP Query User{1F9F5270-4385-4A0D-85A2-03CFF069848F}C:\program files (x86)\emule\emule.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{87FF81BC-C2E1-487C-937E-7445AE3D1C3D}C:\program files (x86)\emule\emule.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{14EB2B23-13A0-4FC9-B0FD-B8E2345226B5}C:\users\public\games\world of warcraft\launcher.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{373AF84C-B824-4C55-95CA-321D3D7F15D3}C:\users\public\games\world of warcraft\launcher.exe
SUPPRIME FirewallRaz (Private) : {6BD56C50-4422-40B6-8AED-DD6D5436DC02}
SUPPRIME FirewallRaz (Private) : {BC5D01B2-1E53-4818-A3EA-5000995EDA5F}
SUPPRIME FirewallRaz (Public) : TCP Query User{452D5FE2-F7B9-41F5-A353-103873DCDAF7}C:\program files (x86)\icq7.1\icq.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{6DE73FBB-EF4A-4955-B563-037E716863FD}C:\program files (x86)\icq7.1\icq.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{38FF6946-3582-4F19-B6DD-D4AB973042B1}C:\program files (x86)\java\jre6\bin\javaw.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{CF1A4B8E-F504-4268-8B7B-2FCEC2B435C5}C:\program files (x86)\java\jre6\bin\javaw.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{AE1C9624-F3E0-40AD-8460-46D64A35E1E0}C:\users\brandon\appdata\local\temp\rarsfx1\ppb.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{A5238834-7B9C-4297-92B1-70ED0A0FFFA2}C:\users\brandon\appdata\local\temp\rarsfx1\ppb.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{94628556-6D7E-4DBC-A00F-235387B1CF8E}C:\users\brandon\appdata\local\temp\rarsfx0\ppb.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{F764849F-666A-48A5-91D8-BCB01F950563}C:\users\brandon\appdata\local\temp\rarsfx0\ppb.exe
SUPPRIME FirewallRaz (Private) : {4908FF36-70D4-4DD1-AFD1-8BFB78970D64}
SUPPRIME FirewallRaz (Private) : {C37FFA2D-7FA3-4F00-94D8-2C30C542AE5C}
SUPPRIME FirewallRaz (Private) : TCP Query User{46773872-9FF0-461E-95F0-4EDC57356447}C:\program files (x86)\bywifi\bywifi.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{6D85063C-5F32-4552-A85B-1B5C0D78A06C}C:\program files (x86)\bywifi\bywifi.exe
SUPPRIME FirewallRaz (Public) : TCP Query User{03434816-4746-485E-B32F-482B02BD9D5C}C:\program files (x86)\bywifi\bywifi.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{AF507C19-446D-4E34-A2AB-F5927FBAD83E}C:\program files (x86)\bywifi\bywifi.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{7D976076-6016-4351-A192-9AF4A2F50487}C:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{0468D4F1-341A-40F7-A00C-AD5CF561EB99}C:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
SUPPRIME FirewallRaz (Public) : {6E9E82EF-BDA5-47F6-949D-11F2B28D9AD8}
SUPPRIME FirewallRaz (Public) : {24E1BF38-43D0-4E5C-BAE2-68391049B9E7}
SUPPRIME FirewallRaz (Private) : TCP Query User{52F1BBF4-775C-4D87-A64A-1321345AB8AD}C:\users\brandon\documents\fogdownloader-rom_3_0_1_2153.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{28A31005-8310-499C-862B-23A86B294B66}C:\users\brandon\documents\fogdownloader-rom_3_0_1_2153.exe
SUPPRIME FirewallRaz (Public) : {9BA39C91-707B-47E6-B172-562F54F806A5}
SUPPRIME FirewallRaz (Public) : {6F80E6A2-860A-4F48-8198-14079CB12FA5}
SUPPRIME FirewallRaz (Public) : {F3F4EEAB-1BF1-4017-9B08-B852F6E0A61A}
SUPPRIME FirewallRaz (Public) : {CD4FE900-5612-4743-8C48-E28EB039074B}
SUPPRIME FirewallRaz (Private) : TCP Query User{B24AB067-E1C7-4003-92E0-03E000384B67}C:\users\brandon\appdata\roaming\cacaoweb\cacaoweb.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{61D1C62E-99E5-40EA-9B15-EA2281BDE3D4}C:\users\brandon\appdata\roaming\cacaoweb\cacaoweb.exe
SUPPRIME FirewallRaz (Public) : {5CB66638-AF97-4AC1-9D65-210768A3C734}
SUPPRIME FirewallRaz (Public) : {0D11BE51-83EC-437C-9391-A282CE7021A0}
SUPPRIME FirewallRaz (Private) : TCP Query User{2B451B79-C96F-4FC8-B576-FDBE7ECED4D0}C:\program files (x86)\cityvillebot\cvbot.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{7DE733BA-FE6D-49CC-B2B4-C1049D4DFB7D}C:\program files (x86)\cityvillebot\cvbot.exe
SUPPRIME FirewallRaz (Public) : {68BA9F44-94D0-49C2-9346-59978D786340}
SUPPRIME FirewallRaz (Public) : {D9598A4D-9C18-4D44-9218-C4B0963A7401}
SUPPRIME FirewallRaz (Private) : TCP Query User{BEE43910-BDEE-41C0-B933-CE4524C77E15}C:\program files (x86)\bethesda softworks\fallout 3\fallout3.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{5F41803E-03EE-4764-B8F9-C9497262460C}C:\program files (x86)\bethesda softworks\fallout 3\fallout3.exe
SUPPRIME FirewallRaz (Public) : {1F9AAD7B-E70F-4346-89AA-C92E50EFC063}
SUPPRIME FirewallRaz (Public) : {86013603-E7E3-440B-BD8D-DF28188AE624}
SUPPRIME FirewallRaz (Public) : TCP Query User{00222A36-A16D-48E9-83B0-1B5B6D391B6F}C:\users\brandon\downloads\wow_feriale\wow_feriale\wow-2.1.1.1897-engb-tools-downloader.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{AC27AF80-E897-45D9-A3F7-B94B4D5E2372}C:\users\brandon\downloads\wow_feriale\wow_feriale\wow-2.1.1.1897-engb-tools-downloader.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{4F8E15FF-4CBC-49A1-89E3-4CD65E4D06AB}C:\users\brandon\documents\unrealesed items\cityvillebot\aaaaaaa.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{9C55564F-9397-45B1-A3D6-686F64B5A55B}C:\users\brandon\documents\unrealesed items\cityvillebot\aaaaaaa.exe
SUPPRIME FirewallRaz (Public) : {D1BF6DD0-87F9-47A5-8D01-C97A6C99D248}
SUPPRIME FirewallRaz (Public) : {339B29B0-388F-43EC-A288-EED3B9D709B4}
SUPPRIME FirewallRaz (Private) : TCP Query User{604D492C-4DF3-4DE5-AEAF-C33E3A64BC6C}C:\users\brandon\downloads\wow_feriale\wow_feriale\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{E053A6BD-E67F-421C-B764-2AA4169D960B}C:\users\brandon\downloads\wow_feriale\wow_feriale\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe
SUPPRIME FirewallRaz (Public) : {F73996E7-1DF2-449B-BD0B-5F1C3F66E989}
SUPPRIME FirewallRaz (Public) : {E496F352-5C6E-4CB8-A996-009DCFE959A8}
SUPPRIME FirewallRaz (Public) : {A139C27D-A9BD-4345-AABF-AD336FCB1AE2}
SUPPRIME FirewallRaz (Public) : {9BEC3358-4BD8-4C89-9E20-C4C476F286CE}
SUPPRIME FirewallRaz (Public) : {1DFC0EF3-D747-4ED2-8EA6-BE4CF05ED6B1}
SUPPRIME FirewallRaz (Public) : {7380D1A1-1000-4D73-B10B-020A889DE269}
SUPPRIME FirewallRaz (Public) : {113C7C3D-6BB8-4454-AF5B-EB2F0B68DF41}
SUPPRIME FirewallRaz (Public) : {2BB44FC4-DA83-4C15-A14D-E1CF850B0934}
SUPPRIME FirewallRaz (Public) : {79031424-381A-4946-B182-1D75EADE808B}
SUPPRIME FirewallRaz (Public) : {EC4E05B5-4B15-4F5B-B230-40F129A0B8C2}
SUPPRIME FirewallRaz (Public) : {63BF8A51-7BA3-48C5-9EC1-514CE8BE8352}
SUPPRIME FirewallRaz (Public) : {F4AD62A8-5370-44DA-BA0F-AA8D2943FF16}
SUPPRIME FirewallRaz (None) : {A09616C5-5EB1-4E34-BFDD-F1BDE8C294DA}
SUPPRIME FirewallRaz (Private) : TCP Query User{63E8976A-4D89-4DF1-9825-E2B0120F4810}C:\program files (x86)\cityvillebot\cityvillebot\cvbot.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{13F98C0F-0D89-49DE-8C17-122A08EC1909}C:\program files (x86)\cityvillebot\cityvillebot\cvbot.exe
SUPPRIME FirewallRaz (Public) : {DEE7834F-420C-4B89-9FD9-02BFB34CF9EB}
SUPPRIME FirewallRaz (Public) : {95D1C9C9-4B5F-4D9F-BF5B-FAB99077D10B}
SUPPRIME FirewallRaz (Public) : TCP Query User{16F6FE77-A3F8-47CF-B577-0DC4A84F7BEC}C:\program files (x86)\mediaget\mediaget.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{673D13C2-2E59-4F84-97DF-4CF577DFA50D}C:\program files (x86)\mediaget\mediaget.exe
SUPPRIME FirewallRaz (Public) : TCP Query User{BED9D23F-2FE1-47FC-AF00-13AB6D58AE49}C:\users\brandon\downloads\age of empires ii\age of empires ii\age2_x1\age2_x1.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{F49963EC-8680-4027-963F-BC6587584B42}C:\users\brandon\downloads\age of empires ii\age of empires ii\age2_x1\age2_x1.exe
SUPPRIME FirewallRaz (Public) : {883A5DC9-F6B6-4324-9302-03C4ECE56903}
SUPPRIME FirewallRaz (Public) : {0588466D-9AA6-4486-A38C-8ABF93EC60F1}
SUPPRIME FirewallRaz (Private) : TCP Query User{6FAA383F-5F0E-4D5E-BFE8-321FF9383A20}C:\users\brandon\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{73A021B1-1398-48FA-85C3-A80C52B2404F}C:\users\brandon\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe
SUPPRIME FirewallRaz (Public) : {C58688BC-21A1-4A64-8987-B717E264BBDF}
SUPPRIME FirewallRaz (Public) : {483FE2B7-CA66-4408-86B9-F68DC83CE1A2}
SUPPRIME FirewallRaz (Private) : TCP Query User{C814ED5A-6ABE-4056-BCFB-F9E69C0F6478}C:\program files (x86)\steam\steamapps\lol56850\team fortress 2\hl2.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{F1E183BA-0EA9-4B9A-9365-F2562145C7C4}C:\program files (x86)\steam\steamapps\lol56850\team fortress 2\hl2.exe
SUPPRIME FirewallRaz (Public) : {8C0A1828-BD91-42B4-B1C2-69430BDA3589}
SUPPRIME FirewallRaz (Public) : {38FBBB00-90B1-41C5-8CA6-4AB3B535D429}
SUPPRIME FirewallRaz (Public) : {5D666547-07F2-4B5B-B9A5-B15B10EB054A}
SUPPRIME FirewallRaz (Public) : {8BFFEA57-94F5-475F-A988-4C81118286F7}
SUPPRIME FirewallRaz (Public) : {794B9CD1-DA05-49AD-859F-C7965937CADE}
SUPPRIME FirewallRaz (Public) : {D850215A-67A0-41EB-8AAF-5E8FC7B33A98}
SUPPRIME FirewallRaz (Public) : {3E337A96-257E-438E-9B46-4D056461CE6E}
SUPPRIME FirewallRaz (Public) : {E4DB239A-1579-4536-8C28-E543C780E73F}
SUPPRIME FirewallRaz (Private) : TCP Query User{2B0325B4-9AE3-43EC-92F7-772D0A7A16BD}C:\users\public\games\world of warcraft\backgrounddownloader.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{345E381D-5CDF-46FA-9282-E1E965BE1E87}C:\users\public\games\world of warcraft\backgrounddownloader.exe
SUPPRIME FirewallRaz (Public) : {2AD52AC8-07F1-43AD-8534-BCBE4047DEDD}
SUPPRIME FirewallRaz (Public) : {3ECA1CE7-122F-478F-A429-A23FE15E1B8D}
SUPPRIME FirewallRaz (Private) : {F5468EC9-B623-48AF-B6D6-721F986BDC2D}
SUPPRIME FirewallRaz (Private) : {5BD14BBA-A089-4D0B-8E97-4EA1EBE370A3}
SUPPRIME FirewallRaz (Public) : {FC276719-CD05-40A1-A4B6-0BC97A88ED14}
SUPPRIME FirewallRaz (Public) : {7E2D5B59-4C4B-4519-BAAB-4D5EDF51E629}
SUPPRIME FirewallRaz (Private) : {EFC422FB-C978-4EC3-8191-D0DE15264408}
SUPPRIME FirewallRaz (Private) : {0C0B915D-ABE2-4A26-80ED-D30AF5C5D360}
SUPPRIME FirewallRaz (Public) : TCP Query User{4BD6721B-CB3D-443D-9251-7173305F83D7}C:\program files (x86)\orange\rim\fscommand\rim.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{BD7AF30C-A342-4EB6-BA11-BBD5A14E985B}C:\program files (x86)\orange\rim\fscommand\rim.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{C5340BD5-5E4F-4F39-8C47-FA514ED55D9B}C:\program files (x86)\orange\rim\fscommand\cksocketserver.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{79595409-B92E-417E-9894-D4B21E12657C}C:\program files (x86)\orange\rim\fscommand\cksocketserver.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{F2915907-B556-477B-93A4-1DF9ECCBBC0D}C:\program files (x86)\java\jre6\bin\java.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{0C44D79A-573E-4C58-BE08-880F396A3305}C:\program files (x86)\java\jre6\bin\java.exe
SUPPRIME FirewallRaz (Public) : TCP Query User{B2E13F32-02E8-4B8E-9277-2E8F62CCFCE1}C:\program files (x86)\java\jre6\bin\java.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{08A978A2-726A-4874-A8BB-1D31A4987D0E}C:\program files (x86)\java\jre6\bin\java.exe
SUPPRIME FirewallRaz (Public) : {85B831F3-6A80-46D0-A7B5-815642FB5B62}
SUPPRIME FirewallRaz (Public) : {AF0E00CA-7ABE-4C7A-A1EF-13CE81C06932}

========== ==========
SUPPRIME Mozilla Pref: user_pref("weboftrust.search.ask.display", "Ask.com Web Search");

========== ==========
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{019F2C0E-BD17-4082-BAEB-1C8A79BAE44B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{021BE8EB-0B07-47AC-A961-EF4CE7F40A06}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{027EF6BF-0E03-4799-B75E-94E024481BCB}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{06841A3A-0F4A-4EED-A5C9-6CFFE087272E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{068C8A98-46B6-4E4C-AF78-0D5C237F3B00}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{06E7F414-6F74-41A7-8151-D00C70B1A84C}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{07E2C119-9358-46F7-8CB3-6868BE9A39A5}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{09BD6AA1-0578-4EA6-B917-B479CF9536ED}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{0B162454-CC57-4E77-9A76-5EE9A9232045}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{103EB707-F56B-4C7C-BB6A-5322EBDED720}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{10B3295E-A1B4-49B2-80D2-A45CA6F4C0CB}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1184469B-0119-4521-9AA5-AE77A08D7966}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{12045B61-28D0-44EF-A929-D8ACC5B8A48C}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{126767FB-F519-4C05-9AA1-D5584AC41BCA}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{13141A3D-B446-414C-820A-6366BE925099}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{13619DC1-2A5A-4320-914D-EAB5776D8314}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{145917B5-9F88-4511-AC9A-2A7BE2E21EE8}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1511408C-F692-4B2E-A6DA-64E0665214D0}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{15672095-262C-437A-ABDA-D73403DAD6FE}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1694657E-404C-4546-B19F-F8FBCC702BAB}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{18E0232D-2350-494A-8EA8-FAD29A11D4E9}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{18E6E67C-5AC6-45DC-B813-7E4210928551}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1A899B6C-357B-48E5-A442-BAA1918A0A05}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1AF8B5FB-2FF7-4924-B4A6-177F1CAB2DD3}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1C2F8EA8-B995-4830-9E78-48C8CB5F7A7E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{1EFFE2D7-11B6-48B5-889A-48E68BBFEA41}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{20CF4435-A66B-47B5-95FB-922F3C1CC482}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{21452166-0D62-42FC-B0EB-04D6C8B89BA7}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{216949A6-C14E-4BB1-A36C-756DB58F67F6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{21DB1704-A8AA-4761-92FD-D7EC0FAD3CE2}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{2B992A99-DB8B-4216-BD70-C1A2A41FE97F}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{2C373A77-5E8F-4CE5-AE3C-EC427C9B2DD6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{2C4FEB23-F5EA-496C-9147-DE1A2C964C6B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{2F220382-17B7-4EB0-928A-D574A33D4D52}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{30DA253E-1B07-484C-B78C-9427CE5BBA8A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{33641BB7-AE3E-4C9C-AB13-536ECF916217}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3867F155-FADB-48B4-9CF5-725C8AE9E212}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3978E1AC-F37A-4399-9A53-36E6A635C83A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3A9FE3A8-4C92-40A3-B687-BA7871E05FBF}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3CEB7624-2703-48F8-8220-64AF67FF6491}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3E3739C3-88F6-4802-9AF1-62D94A5F752C}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3E57315F-6C2C-4FFB-B34E-C62A41DDAF35}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{3EE3E9B5-65F1-45F3-B269-11EB17128918}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{406A34F7-674C-4257-B6FE-A9EB507019E2}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{4113AF8A-9E6B-4460-8BC1-DE47B48285C7}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{42807FC5-C459-4B4F-BB29-86D1C63C566E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{47AAE55B-E69E-4586-B8BE-ABB9F886B402}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{4973EB92-FD05-4D79-8885-36229404DAC1}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{4F6CD8ED-EB7D-4AF9-A363-F74415836BF2}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{4F899975-D637-4505-BCA1-3FB0E06E8474}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{4FC39669-0E84-4D2F-852C-51A966BCA459}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5028E9BD-D553-451B-BD34-C4A5BE04F4E6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{506DD7F9-5CCF-4F75-8C56-1C25BF648151}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{50C697CC-DC8C-4C8E-9AB8-6C9BEE6A90F3}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{51FF346E-2449-4B62-A9C7-CBC56CE04140}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{52CC4AE8-5DF6-4560-BC86-B4E5EEFD95E3}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{54F3C22E-5E4A-407C-B29B-9D7CD51520B2}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5A9B86C7-F8AF-447B-B439-FAE3ABFB0E98}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5B0AC11B-6CBD-454D-81F1-6DE16567DD83}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5D142482-6E18-478B-8984-1A598EE82A58}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5D49B57F-74A6-4772-8A92-C994744ECCF6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5DF930AA-55F1-40C2-AABD-388A46779AEA}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5F129556-B03B-4DEC-93E3-9CEB7B6BD6B5}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{5F572B01-6A41-4A6F-AF5B-D582EC8F6682}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{6074DCEF-88A9-49A9-8454-76F7AAC3569C}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{6161AE85-97FF-42EF-90AC-47ABC2334BDD}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{617E2F26-E75F-40CD-90EA-6689FD7A1556}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{62E4CBCB-3517-4A37-B277-1287A00DD96F}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{65B87358-FD8C-4A0E-AF18-53B4B8BE2251}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{67544580-ED99-444B-A4C6-78A39B1F2AA6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{689801B9-5DCE-40FC-BE14-B2059F838B16}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{69F74933-60A3-43E8-85AC-BD7D4301CCEE}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{6A8F5A39-344C-4F1A-A467-38788F5DD294}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{6BB73EF7-25D5-4D16-8DC1-8F3A77594916}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{703C1C32-4AC9-4C6C-8214-F08C1086B113}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{70B3C7E0-F791-49D9-8AF3-D8AC34E3681E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{70F4C32D-E3B8-437E-AE3E-FF1C5535011E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{711FF432-1472-4854-B322-5D1DF32C3AB9}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7381D839-C7DB-480F-ACCB-F11BE48AE832}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{74C10281-7AB8-4608-ADE8-AD57D155AFB8}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{763E1D4D-D2CB-4AC1-9526-15173634F4BF}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{76BEE8BB-5346-429B-AC4F-E2F8BC6DDB66}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7925E0B8-C091-487E-B833-12D93079E2FD}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7A0B6B7B-8F15-4A14-85AC-523CD7C7A489}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7C2912E2-C7D8-4EF5-A942-38656C8ECB3B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7D8526EA-4497-4DE8-9551-AF4433D642CE}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7EDF0EBC-8554-4325-8572-BAB30DD6AD49}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{7F672926-C1BE-4EA9-9633-AF79EC4122DC}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{80656C7D-04A5-47BA-8D22-C904E71E8AB9}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{8212E76B-4A03-4535-872D-3FCA4522B048}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{821A1C6D-31D9-4634-96F4-C32BB6671871}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{83456EF5-9DA4-4CB6-8CEB-AAD4530B86E7}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{8345C63A-9518-4D6F-8B56-5FCE9A954693}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{83E00958-7040-4D50-9676-E7F07AC36564}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{847F8F50-D81D-4E8D-99D3-8C0D57C99D8B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{85D0CE33-8B05-4ACA-A54E-32EC2D492C86}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{87FE7F20-0DD2-4B83-B8C9-700127836864}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{885E406A-CB9C-47CC-903C-7BF1F28933A6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{8C7DA247-4EF6-4D5B-8484-B29C2A00AEC0}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{8CB56B52-1D11-4920-B754-624130421DFA}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{8DD2881D-AF1A-4A2C-9711-B4843FB63561}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{950586B9-663A-435D-B260-4B1055EEC493}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{95874CD6-B67C-488C-9337-2057A1EB8E44}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{98C11BBA-F144-4573-9F18-B5E05CC2747E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{9AFA9ADB-F197-475F-AE07-7240A5E5BEE3}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{9BEBF603-BB72-4ECB-A83B-1BCB0CC22CFF}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{9EAA197C-8FCA-4F16-9E3A-5AB582B89F3B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A0DC21A9-8D27-469C-9A37-40D45C7F3CB0}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A2D7C51F-049D-4B9A-8374-F18E098E3B2D}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A424B1FB-57D5-4B27-ACC9-430581862BC2}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A436BCEB-989E-407D-99F0-A32E5221DEC3}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A4600842-8C1B-45BC-B459-9CA92247E19E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{A58C7F01-A5E6-4539-91EB-1F27A37196FF}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{AFCF351E-5E6F-460A-94A5-4F366FD44593}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{B2C21838-8A1D-40A4-818C-249FACDB4E29}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{B445AC1B-9DEE-46A6-9F2D-F998D6218619}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{B4A2495A-5D08-4467-B330-87CC94723691}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{B838960B-0A26-4115-9B37-970E55E17D6D}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{B94456BB-317B-4187-84CE-AF8DA87808A6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{BB350C03-BF70-4461-81E6-4D7FEADCE274}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{BC94F28E-50B4-4C52-B22B-F95F6CF77494}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{BCE74240-7E40-4A6B-ACBB-8CFA91668346}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{BF1B2246-2100-4FAC-8180-157F0BC21B68}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{BF94D994-82DC-495B-B4C4-2DFA208777A6}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{C085A0E3-4D2F-4F36-9BCE-8D95BCA54925}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{C9BCC399-05B1-42D3-9D77-E75EF0760372}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{CB7F8F49-BFA8-4032-BF04-D44056E95757}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{CD8D4526-4094-4B89-8B1F-9A2A5FBF699A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{CFB20D96-E46A-4399-A89C-BCFBA77C8E7F}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D042FF92-5296-4C89-9024-4048A5133F19}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D1A90B67-7264-4550-8087-C307222B3CF7}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D46830EF-144E-4FFD-8BF1-F824EB8D1ECA}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D60975D9-BF8E-48DD-9280-F8116413DB4A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D60C39A3-4837-43B6-9561-EE6F666F8B66}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{D61B7847-54A7-4BF0-BCB6-FE8A5566B794}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{DAF8A99D-8029-44FF-BC73-B1CF5D908CFB}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{DCB0A859-AD3B-479A-9E94-40DC98066659}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{E14A716D-86A7-4DA8-A34E-45CFF510DD2E}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{E18625F3-D752-48F0-9C12-1804C0EBBF0A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{E42AF8BD-82BA-44C7-A4DB-68D4024D2EED}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{E43DE8A4-1E2D-4CF8-A831-9402E6CB8EF4}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{E8ED148D-186B-4DA8-AE01-4A7D1AE21C6F}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{EAE35AA0-34EE-4E00-94EE-9A634E44AD1B}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{EB2E6B76-5D7F-4A15-B2E4-2EC144F1E844}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{EB31ED88-182F-4DC3-984E-7EB6F20FC8A0}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{EEDE7329-5402-4AC1-889E-2568D1D7A42D}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{EF27EBD5-0E8C-4BB4-86C0-7F7F179E0DC4}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{F19C246E-CF29-4D4B-A3A2-FD72FA77B269}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{F2EF8677-F644-4B37-AC60-28F688058B3A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{F5BEBCA2-D06B-48AC-B8F0-D19F9EB3A257}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{FEC7E0AD-6E94-4E0B-AC33-F94A3ED3BD7A}
SUPPRIME Folder: C:\Users\brandon\AppData\Local\{FFAD1B96-67D0-4CC1-92A2-1D922F8103F0}

========== ==========
SUPPRIME c:\program files (x86)\bywifi\bywifiie.dll
ABSENT File: c:\program files (x86)\bywifi\bywifi.exe
SUPPRIME c:\users\karine\desktop\bywifi accélérateur de vidéo.lnk
SUPPRIME c:\users\karine\desktop\bywifi convertisseur de vidéo.lnk
SUPPRIME c:\users\karine\desktop\bywifi flv merger.lnk
SUPPRIME File: c:\users\karine\appdata\roaming\microsoft\internet explorer\quick launch\bywifi accélérateur de vidéo.lnk
SUPPRIME File: c:\users\karine\appdata\roaming\microsoft\internet explorer\quick launch\bywifi convertisseur de vidéo.lnk
SUPPRIME File: c:\users\brandon\desktop\bywifi accélérateur de vidéo.lnk
SUPPRIME File: c:\users\brandon\desktop\bywifi convertisseur de vidéo.lnk
SUPPRIME File: c:\users\brandon\desktop\bywifi flv merger.lnk
SUPPRIME File: c:\users\brandon\appdata\roaming\microsoft\internet explorer\quick launch\bywifi accélérateur de vidéo.lnk
SUPPRIME File: c:\users\brandon\appdata\roaming\microsoft\internet explorer\quick launch\bywifi convertisseur de vidéo.lnk
ABSENT Folder/File: c:\users\brandon\appdata\local\microsoft\windows\temporary internet files\content.ie5\ov96xyz3\dofusinstaller_v1_29_0
ABSENT Folder/File: c:\users\brandon\appdata\local\microsoft\windows\temporary internet files\content.ie5\nza0d2np\firefox setup 3.6
ABSENT Folder/File: c:\users\brandon\appdata\local\microsoft\windows\temporary internet files\content.ie5\9u2e9wpq\emule0.49c-installer2

========== ==========
Task: {036628B8-CDD7-4EBB-8378-7A583D9AAAEF}
Task: {38B475DC-6C89-41AC-9B8F-CAD155A7AC93}
Task: {60DD815C-37FB-41A8-B70A-A6BE75A4980C}
Task: {808A9E62-FF91-435C-94FF-46AF3A41C7B4}
Task: {B1D2CFE2-3ABA-4C99-A170-72CAD1838313}
Task: {F37778DF-5C24-4C9C-B174-A75F3D3878CA}
Task: {FE7F8CA0-AD6F-4582-B0BC-2172F01480B0}
Task: Scheduled Update for Ask Toolbar


========== ==========
6 :
119 :
152 :
15 :
2 :
1 :
8 :


End of clean in 01mn 30s

========== ==========
C:\ZHP\ZHPFix[R1].txt - 23/12/2012 18:34:30 [28139]

Après une désinstallations complètes de firefox, je n'avais plus de pages qui s'ouvraient, seul le scan d'Ad-Aware le détectait encore.

Je lance un scan en ce moment, je te dirais s'il détecte quelque chose ou pas.

En tout cas, merci beaucoup :)

Bon ba il détecte toujours, je cite:

"Adware.win32.DesktopFLVPlayer"

Quel est le nom du fichier?

Aucune info de plus à part ce que je t'ai dis.

J'ai fait une impr écran si tu veux:
http://www.noelshack.com/2012-51-1356284771-important.png

et dans l'onglet détails

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Version de la base de données: v2012.12.19.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
brandon :: BRANDON-PC [administrateur]

23/12/2012 20:04:15
mbam-log-2012-12-23 (20-04-15).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM | P2P
Options d'examen désactivées:
Elément(s) analysé(s): 449825
Temps écoulé: 1 heure(s), 18 minute(s), 47 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 1
C:\Users\brandon\Downloads\cartograph_g_2011_03_17_bins\Cartograph_G_Post_Processor.exe (Trojan.Agent.cn) -> Mis en quarantaine et supprimé avec succès.

(fin)

Merci de ton aide, mais on dirait qu'une restauration à la version d'usine du PC était ce qu'il y avait de mieux à faire :)