Virus unideals

start
Task: {095BF618-6597-4728-89B6-2FD0653C745D} - \MediaPlayerEnhance-enabler No Task File <==== ATTENTION
Task: {2B0E1D55-113F-467C-80CA-F33830024662} - \HQ-Video-Profession-1.3-chromeinstaller No Task File <==== ATTENTION
Task: {32434A51-659E-4521-99CC-F35D1AAEA6D9} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {3456DD7C-4641-4765-91E9-7838243B7DF5} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3903A710-4B35-40BA-84DF-D053D8192E67} - \HQ-Video-Profession-1.3-enabler No Task File <==== ATTENTION
Task: {3DF1FB41-6DDD-4C2F-81D6-232C239EA15A} - \HQ-Video-Profession-1.3-firefoxinstaller No Task File <==== ATTENTION
Task: {479CB305-6624-42DC-9174-23F8A1DB17BB} - System32\Tasks\{75C70CE8-8754-4AA3-B49B-BF1B837D399D} => pcalua.exe -a C:\Users\PC\AppData\Roaming\awesomehp\UninstallManager.exe
Task: {4B9FBCA9-85E9-44DB-B6A2-BDE4AC2A482E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {56B124F4-C567-4AEE-88CD-99FE58D9DCED} - \MediaPlayerEnhance-chromeinstaller No Task File <==== ATTENTION
Task: {5E41B49D-A492-42E4-A991-A6C8E0FDB873} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {6201F993-469B-43D2-B762-C05425D0763B} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{1F0D0DE6-B322-4C85-868C-2393371FA0B9}.exe
Task: {72804725-A985-4549-9D81-2D519F6EAD47} - \MediaPlayerEnhance-updater No Task File <==== ATTENTION
Task: {73F8BB1B-41D6-4163-BECC-84F4C18748DE} - \MediaPlayerEnhance-codedownloader No Task File <==== ATTENTION
Task: {78C13436-D82E-45BB-80F2-C117ABB90DA7} - \HQ-Video-Profession-1.3-codedownloader No Task File <==== ATTENTION
Task: {8F495CE1-BAEF-4792-8DEF-8479BC968E57} - \MediaPlayerEnhance-firefoxinstaller No Task File <==== ATTENTION
Task: {DD48383C-9B27-4B65-B85B-B4419092874F} - \HQ-Video-Profession-1.3-updater No Task File <==== ATTENTION
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{1F0D0DE6-B322-4C85-868C-2393371FA0B9}.exe <==== ATTENTION
C:\Windows\TEMP\{1F0D0DE6-B322-4C85-868C-2393371FA0B9}.exe
C:\Windows\system32\GWX
C:\Windows\SysWOW64\GWX
C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DD5C.lnk
C:\ProgramData\{aa1e29a0-5ae1-6d75-aa1e-e29a05aea681}
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\John Wick.FRENCH.BRRiP.XviD.(Keanu Reeves).(2014) (1).lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\John Wick.FRENCH.BRRiP.XviD.(Keanu Reeves).(2014).lnk
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKU\S-1-5-21-3598576173-2487849744-3046334321-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Hosts:
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\awab6h2p.default-1416474555389\extensions\searchengine@gmail.com [Not Found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\awab6h2p.default-1416474555389\extensions\istart_ffnt@gmail.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
C:\Windows\System32\Tasks\{D5EA1182-13FE-4606-B275-2F1442E80819}
C:\Users\PC\Downloads\Firefox Setup Stub 36.0.4.exe
C:\Users\PC\Downloads\Setup.exe
C:\Program Files (x86)\LighterEdit
2015-03-12 21:10 - 2015-03-12 21:10 - 00000000 ____D () C:\ProgramData\blanhdahggohpancceebkkjlmpfoeneh
2015-03-12 21:09 - 2015-03-26 12:40 - 00000000 ____D () C:\ProgramData\{aa1e29a0-5ae1-6d75-aa1e-e29a05aea681}
2015-03-12 21:09 - 2015-03-12 21:09 - 00000000 ____D () C:\ProgramData\eoecpljfaomamgejeilfklcmolmgpdal
2015-03-12 21:08 - 2015-03-26 12:40 - 00000000 ____D () C:\ProgramData\{17ace501-c0db-e53b-17ac-ce501c0d9407}
2015-03-12 21:07 - 2015-03-26 12:40 - 00000000 ____D () C:\ProgramData\{c9fd2d1c-646a-3719-c9fd-d2d1c646b471}
end

netsvcs 
msconfig 
safebootminimal 
safebootnetwork 
activex 
drivers32 
%ALLUSERSPROFILE%\Application Data\*. 
%ALLUSERSPROFILE%\Application Data\*.exe /s 
%APPDATA%\*. 
%APPDATA%\*.exe /s 
%temp%\*.exe /s 
%SYSTEMDRIVE%\*.exe 
%systemroot%\*. /mp /s 
%systemroot%\system32\consrv.dll 
%systemroot%\system32\*.dll /lockedfiles 
%windir%\Tasks\*.job /lockedfiles 
%systemroot%\system32\drivers\*.sys /lockedfiles 
%systemroot%\System32\config\*.sav 
/md5start 
explorer.exe 
winlogon.exe 
services.exe 
wininit.exe 
/md5stop 
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s 
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s 
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s 
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s 
CREATERESTOREPOINT 
nslookup https://www.google.fr/?gws_rd=ssl /c 
hklm\software\clients\startmenuinternet|command /rs 
hklm\software\clients\startmenuinternet|command /64 /rs 
CREATERESTOREPOINT
SAVEMBR:0 

:OTL 
DRV:64bit: - [2012/12/10 04:28:34 | 000,127,328 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:64bit: - [2012/11/08 04:49:24 | 000,307,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2012/08/24 15:43:16 | 000,384,352 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2012/01/31 04:46:48 | 000,036,944 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2011/12/23 13:32:14 | 000,047,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2011/12/23 13:32:04 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avgidsfiltera.sys -- (AVGIDSFilter)
O2:64bit: - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: []  File not found

:files
C:\Windows\SysNative\drivers\avgidsdrivera.sys
C:\Windows\SysNative\drivers\avgldx64.sys
C:\Windows\SysNative\drivers\avgtdia.sys
C:\Windows\SysNative\drivers\avgidsfiltera.sy
C:\Windows\SysNative\drivers\avgmfx64.sys
C:\Windows\SysNative\drivers\avgrkx64.sys
C:\Users\PC\AppData\Roaming\appdataFr3.bin
C:\Users\PC\AppData\Roaming\AVG2012
C:\program files (x86)\avg
%Temp%\*.*

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{31CE1406-5C12-44C5-B6C5-0F55F2039DE3}"=-
"{F2CD25EB-2FC9-4D58-812A-32BBFBF06186}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall]
"{31CE1406-5C12-44C5-B6C5-0F55F2039DE3}"=-
"{F2CD25EB-2FC9-4D58-812A-32BBFBF06186}"=-

:services
Avgldx64
AVGIDSDriver
Avgtdia
Avgrkx64
Avgmfx64
AVGIDSFilter

:Commands 
[emptytemp] 
[emptyflash] 
[reboot]