Script ZHPFIX [MD5.4481F8F17BD112EA23BE7AEF210F61E0] [SPRF][19/11/2011] (.Bandoo Media Inc - Free FLV Converter Install.) -- C:\Users\guy\Desktop\Setup_FreeFlvConverter.exe [439000] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster C:\Users\guy\Desktop\Setup_FreeFlvConverter.exe =>Adware.Bandoo^ [MD5.F3F709C2D49DD6636F4EDE5C2CAE5448] - (.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe [5758976] [PID.3520] O4 - HKLM\..\Wow6432Node\Run: [NPSStartup] Clé orpheline [MD5.00000000000000000000000000000000] [APT] [{0F8BA68F-29AF-496E-8D96-FE3A6A802AEE}] (...) -- K:\WinZip8\SETUP.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{3B91D053-3950-49EB-B5E5-696396086683}] (...) -- C:\Program Files (x86)\WinZip8\SETUP.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{5D4FC477-39F5-4CE5-824D-A176853DFE08}] (...) -- C:\Users\guy\Downloads\avi_four_cc_changer.exe (.not file.) [0] [MD5.F3F709C2D49DD6636F4EDE5C2CAE5448] [APT] [{69092DBD-A6FB-488D-83BB-EAB9FE4A4AAF}] (.http://www.emule-project.net.) -- C:\Program Files (x86)\eMule\emule.exe [5758976] [MD5.F3F709C2D49DD6636F4EDE5C2CAE5448] [APT] [{FA0E0536-7D4C-41E7-A635-B63C042EA0E6}] (.http://www.emule-project.net.) -- C:\Program Files (x86)\eMule\emule.exe [5758976] O45 - LFCP:[MD5.A44C266613514C0CEAFE97B59A668736] - 14/01/2014 - 18:20:43 ---A- - C:\Windows\Prefetch\JRT.EXE-3F8BE185.pf O45 - LFCP:[MD5.14B14CE58FF5D91A467B0D5DEE34672F] - 14/01/2014 - 18:20:44 ---A- - C:\Windows\Prefetch\WGET.DAT-48DF4B94.pf O45 - LFCP:[MD5.F78F68B1C765A0C0DE4764EABBD600E5] - 14/01/2014 - 18:25:07 ---A- - C:\Windows\Prefetch\FC.EXE-F6221E79.pf O45 - LFCP:[MD5.8144C646BC471E418B56C9B45C26B8FF] - 14/01/2014 - 18:25:46 ---A- - C:\Windows\Prefetch\FIND.EXE-9AADDA11.pf O45 - LFCP:[MD5.5897D0A900A2F5F6CF7C838CF8411ABE] - 14/01/2014 - 18:26:28 ---A- - C:\Windows\Prefetch\CUT.DAT-121CFB75.pf O45 - LFCP:[MD5.3B680047B4410F935A4A01B0E1EDA550] - 14/01/2014 - 18:26:44 ---A- - C:\Windows\Prefetch\SHORTCUT.DAT-1F20F9B5.pf O45 - LFCP:[MD5.876E7357C5632FF15196D8CBE62A70EE] - 14/01/2014 - 18:26:56 ---A- - C:\Windows\Prefetch\NIRCMD.DAT-06F179FA.pf O45 - LFCP:[MD5.3500A80035CB7E95D4BB0E8F48D132C6] - 14/01/2014 - 18:26:56 ---A- - C:\Windows\Prefetch\SED.DAT-959332A5.pf O45 - LFCP:[MD5.88463FC54621C0FD5887FB3A55CB9615] - 14/01/2014 - 19:45:59 ---A- - C:\Windows\Prefetch\MOVIEC~1.EXE-034D4864.pf O45 - LFCP:[MD5.25006FC3A80026A9C52F172A3F43D915] - 14/01/2014 - 20:59:13 ---A- - C:\Windows\Prefetch\INSTUP.EXE-7E543EAF.pf C:\Users\guy\Desktop\FICHIERS\applis32\winrarv3.51keygencore.zip C:\Users\guy\Desktop\FICHIERS\applis32\winrarv3.51keygencore.zip [MD5.3DF9C822FFD4245403113A555A27357F] [SPRF][12/01/2014] (...) -- C:\Users\guy\AppData\Local\Temp\Quarantine.exe [360073] O3 - Toolbar: (no name) - [HKLM]{EFEED92A-A33D-4873-BA8F-32BAA631E54D} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{EFEED92A-A33D-4873-BA8F-32BAA631E54D} Clé orpheline [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing shortcutfix proxyfix sysrestore emptyflash emptytemp emptyclsid