Script ZHPFix EmptyPrefetch FirewallRaz PROXYFix EmptyTemp EmptyFlash EmptyClsid SysRestore O61 - LFC: 07/10/2014 - 23:23:03 ---A- . (.Bandoo Media Inc.) -- C:\Users\anthony\AppData\Local\Microsoft\Windows\INetCache\IE\P9EVSQW7\iLividSetup-r1957-n-bi[1].exe [1651056] =>Adware.Bandoo [HKLM\Software\Wow6432Node\AVAST Software] O43 - CFD: 08/07/2013 - 11:28:28 - [] ----D C:\ProgramData\AVAST Software O43 - CFD: 08/07/2013 - 12:04:57 - [] ----D C:\ProgramData\McAfee [MD5.7B45F6FC84B4B812569C043A4F65D337] - (.Musrukafa Corporatien - Musrukafa Visatl Studie 2010.) -- C:\Users\anthony\AppData\Roaming\Pyekux\poynivo.exe [276686] [PID.4676] [HKCU\Software\ATworks] [HKCU\Software\Qsfsyyyjbe] [HKCU\Software\V1aIWQ] O43 - CFD: 07/10/2014 - 20:29:34 - [] ----D C:\Users\anthony\AppData\Roaming\Pyekux O43 - CFD: 20/03/2014 - 17:34:27 - [] ----D C:\Users\anthony\AppData\Roaming\RCP 6 O43 - CFD: 07/10/2014 - 10:13:25 - [] ----D C:\Users\anthony\AppData\Local\ATworks O43 - CFD: 07/10/2014 - 02:57:30 - [] ----D C:\Users\anthony\AppData\Local\Ofics O43 - CFD: 30/12/2013 - 19:10:41 - [] ----D C:\Users\anthony\AppData\Local\TempFichierSauvegardeSW M2 - MFEP: prefs.js [anthony - 1ib2hj02.default\{44F5EDCF-4A79-839C-20A5-911B3EFAB4BB}] [] TaskSymbol Class v4.0.2 (..) O4 - HKCU\..\Run: [ATworks] regsvr32.exe O4 - HKCU\..\Run: [Rovaenpya] . (.Musrukafa Corporatien - Musrukafa Visatl Studie 2010.) -- C:\Users\anthony\AppData\Roaming\Pyekux\poynivo.exe O4 - HKUS\S-1-5-21-605459465-3663228525-1435895634-1001\..\Run: [ATworks] regsvr32.exe O4 - HKUS\S-1-5-21-605459465-3663228525-1435895634-1001\..\Run: [Rovaenpya] . (.Musrukafa Corporatien - Musrukafa Visatl Studie 2010.) -- C:\Users\anthony\AppData\Roaming\Pyekux\poynivo.exe [MD5.7B45F6FC84B4B812569C043A4F65D337] [APT] [Security Center Update - 3340685781] (.Musrukafa Corporatien.) -- C:\Users\anthony\AppData\Roaming\Pyekux\poynivo.exe [276686]