Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-04-2015 01
Ran by Léopold (administrator) on LÉOPOLD-PC on 19-04-2015 19:38:29
Running from C:\Users\Léopold\Downloads\Programs
Loaded Profiles: Léopold (Available profiles: Léopold)
Platform: Microsoft Windows 7 Professionnel  Service Pack 1 (X86) OS Language: Français (France)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files\DFX\DFX.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SFX TEAM) C:\Program Files\SuperCopier2\SuperCopier2.exe
() C:\ProgramData\Internet Mobile\OnlineUpdate\ouc.exe
(BitTorrent Inc.) C:\Users\Léopold\AppData\Roaming\uTorrent\uTorrent.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
() C:\Program Files\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files\DFX\Universal\Apps\dfxItunesSong.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Opera Software) C:\Program Files\Opera\28.0.1750.48\opera.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [3076144 2013-11-11] (ESET)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [DFX] => C:\Program Files\DFX\DFX.exe [1266648 2015-04-03] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll [2009-09-23] (Intel Corporation)
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\Run: [SuperCopier2.exe] => C:\Program Files\SuperCopier2\SuperCopier2.exe [955392 2009-08-16] (SFX TEAM)
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\Run: [uTorrent] => C:\Users\Léopold\AppData\Roaming\uTorrent\uTorrent.exe [1442384 2015-03-26] (BitTorrent Inc.)
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\Run: [SpeedConnectStartUp] => C:\Program Files\CBS Software\SpeedConnect Internet Accelerator\SpeedConnectStartUp.exe [602112 2010-10-18] (CBS Software)
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3898960 2015-04-06] (Tonec Inc.)
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: J - J:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5ef81-77dd-11e3-8a77-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5ef93-77dd-11e3-8a77-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5efc0-77dd-11e3-8a77-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5efcb-77dd-11e3-8a77-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5efed-77dd-11e3-8a77-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {02e5eff1-77dd-11e3-8a77-001e101f8924} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {0ef1bfa9-6f44-11e4-b0f7-001e101f63cf} - J:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {0f8211a7-7897-11e3-8c9e-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {48ee7ebf-4b16-11e3-93ae-001ec97bc22c} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\Index.html
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {4faa24e9-a0c9-11e3-8d3a-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {73dc0653-b4c3-11e3-9092-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {74718648-e04c-11e3-aff3-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {74718656-e04c-11e3-aff3-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {7c1cec07-520f-11e3-aa71-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {7f8a3179-4bce-11e3-94c3-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {92055f40-5856-11e3-ad36-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {943025ba-a0b9-11e3-8f63-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {9afad784-4bde-11e3-955f-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {9afad7a5-4bde-11e3-955f-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {9afad7aa-4bde-11e3-955f-001ec97bc22c} - H:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {a01c6b18-561d-11e3-aac1-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {a01c6b1d-561d-11e3-aac1-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {a01c6b2b-561d-11e3-aac1-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {b613e8fe-03a7-11e4-a9e6-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {b918faba-c811-11e3-bc29-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {bdd53747-98d2-11e3-9256-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {d2557f15-4b1d-11e3-91cf-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {d2557f1a-4b1d-11e3-91cf-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {db45d14d-52db-11e3-aae8-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {ece1fdc2-787f-11e3-ac5e-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {ece1fdd2-787f-11e3-ac5e-001ec97bc22c} - G:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {ece1fdf6-787f-11e3-ac5e-001ec97bc22c} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {f429b7c3-79f2-11e3-8d73-001e101fa1f5} - F:\AutoRun.exe
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\MountPoints2: {f429b7f3-79f2-11e3-8d73-001e101fa1f5} - F:\AutoRun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-03-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2014-04-21] (Tonec Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.fr
HKU\S-1-5-21-901056662-1337516420-1803406765-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.fr
SearchScopes: HKLM -> URL http://search.certified-toolbar.com?si=39030&bs=true&tid=619&q={searchTerms}
SearchScopes: HKLM -> SuggestionsURL_JSON http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=39030&gid=1&dbCode=1&command={searchTerms}
SearchScopes: HKLM -> TopResultURLFallback http://search.certified-toolbar.com?si=39030&bs=true&tid=619&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-901056662-1337516420-1803406765-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\S-1-5-21-901056662-1337516420-1803406765-1000 -> {C4939CCF-CEFD-41A1-9AFC-4C11BF49A954} URL = http://fr.wikipedia.org/w/index.php?title=Sp%C3%A9cial:Recherche&search={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: PDFXChange 4.0 -> {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} -> C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll [2011-09-17] (Tracker Softaware)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-06-12] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
Toolbar: HKLM - PDFXChange 4.0 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll [2011-09-17] (Tracker Softaware)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 5.104.175.153 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Léopold\AppData\Roaming\Mozilla\Firefox\Profiles\2mwtqo2r.default
FF Homepage: about:home
FF Homepage: hxxp://start.bramjnet.com/vb/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2000-01-01] (Tracker Software Products Ltd.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2000-01-01] (Tracker Software Products Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin HKU\S-1-5-21-901056662-1337516420-1803406765-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2000-01-01] (Tracker Software Products Ltd.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-11-11]
FF HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Léopold\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Léopold\AppData\Roaming\IDM\idmmzcc5 [2015-04-19]
FF HKU\S-1-5-21-901056662-1337516420-1803406765-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Léopold\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR HomePage: Default -> hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
CHR Profile: C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Assassin's Creed IV Black Flag) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\agibflpbghgmiinfaefgnldmfajdance [2014-01-11]
CHR Extension: (YouTube) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-11]
CHR Extension: (Google Search) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-28]
CHR Extension: (IDM Integration Module) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-04-11]
CHR Extension: (Google Wallet) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-11]
CHR Extension: (Gmail) - C:\Users\Léopold\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2015-04-02]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [974944 2011-09-06] (ESET)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
S2 Internet Mobile. RunOuc; C:\Program Files\Internet Mobile\UpdateDog\ouc.exe [657504 2012-11-12] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 DFX11_1; C:\Windows\System32\drivers\dfx11_1.sys [24424 2012-12-13] (Windows (R) Win 7 DDK provider)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [163424 2011-08-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [118104 2011-08-04] (ESET)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-18] (Elaborate Bytes AG)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [147480 2011-08-04] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [33656 2011-08-04] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2011-08-04] (ESET)
R3 es1969; C:\Windows\System32\drivers\ES1969.sys [96896 2006-08-15] (ESS Technology, Inc.)
R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [82320 2010-01-29] (EZB Systems, Inc.)
S3 anvsnddrv; system32\drivers\anvsnddrv.sys [X]
S2 ATE_PROCMON; \??\C:\Program Files\Anti Trojan Elite\ATEPMon.sys [X]
S3 cpuz134; \??\C:\Users\LOPOLD~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 18:01 - 2015-04-18 18:01 - 00113713 _____ () C:\Users\Léopold\Downloads\the-gambler-french-dvdrip-2015.torrent
2015-04-18 09:29 - 2015-04-19 19:19 - 00000336 _____ () C:\Windows\setupact.log
2015-04-18 09:29 - 2015-04-18 09:29 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-17 20:59 - 2015-04-17 20:59 - 00002975 _____ () C:\Users\Léopold\Downloads\malwarebytes-anti-malware-premium-v2-0-2-1012.torrent
2015-04-17 20:40 - 2015-04-17 20:42 - 06466499 _____ () C:\Users\Léopold\Malwarebytes' Anti-Malware 1.46 FinalL + Serial.rar
2015-04-17 20:39 - 2015-04-17 20:39 - 00003316 _____ () C:\Users\Léopold\Downloads\malwarebytes-anti-malware-1-46-final-serial.torrent
2015-04-16 21:05 - 2015-04-19 19:38 - 00000000 ____D () C:\FRST
2015-04-16 20:54 - 2015-04-16 20:54 - 01137152 _____ (Farbar) C:\Users\Léopold\FRST.exe
2015-04-15 20:19 - 2015-04-15 20:20 - 02217984 _____ () C:\Users\Léopold\Downloads\adwcleaner_4.201.exe
2015-04-15 09:54 - 2015-04-15 09:54 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-04-15 09:53 - 2015-04-15 19:34 - 00000000 ____D () C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2015-04-15 09:53 - 2015-04-15 09:53 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2015-04-14 22:50 - 2015-04-14 22:53 - 00000000 ____D () C:\Users\Léopold\SpyHunter 4.1.11.0 + Crack
2015-04-14 22:50 - 2015-04-14 22:50 - 00011704 _____ () C:\Users\Léopold\Downloads\SpyHunter 4.1.11.0 + Crack.torrent
2015-04-14 21:27 - 2015-04-15 20:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-14 21:06 - 2015-04-14 21:06 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\Malwarebytes
2015-04-14 20:56 - 2011-05-06 21:29 - 16409799 _____ () C:\Users\Léopold\spybotsd162.rar
2015-04-14 20:56 - 2011-05-06 20:41 - 07903653 _____ () C:\Users\Léopold\trojan remover.rar
2015-04-13 23:57 - 2015-04-13 23:57 - 00000996 _____ () C:\Users\Léopold\Downloads\AdwCleaner 4.105.exe.torrent
2015-04-13 23:42 - 2015-04-13 23:50 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-04-13 22:29 - 2015-04-14 21:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-13 21:44 - 2015-04-13 22:21 - 00000000 ____D () C:\Users\Léopold\Malwarebytes Anti-Malware(premium)2.0.0.502 Beta+Sérial
2015-04-13 21:43 - 2015-04-13 21:43 - 00005519 _____ () C:\Users\Léopold\Downloads\Malwarebytes Anti-Malware(premium)2.0.0.502 Beta+Sérial.torrent
2015-04-13 20:54 - 2015-04-19 00:29 - 1631060983 _____ () C:\Users\Léopold\[ www.Cpasbien.pw ] Hackers.2015.FRENCH.WEBRip.MD.XViD-KR4K3N.avi
2015-04-13 20:53 - 2015-04-13 20:53 - 00125931 _____ () C:\Users\Léopold\Downloads\hacker-blackhat-french-dvdscr-2015.torrent
2015-04-12 22:48 - 2015-04-12 23:18 - 00013030 _____ () C:\PDOXUSRS.NET
2015-04-12 22:47 - 2015-04-12 22:47 - 00000000 ____D () C:\Program Files\Common Files\Borland Shared
2015-04-12 22:47 - 1999-11-12 05:11 - 00183808 _____ () C:\Windows\system32\BDEADMIN.CPL
2015-04-12 22:47 - 1999-01-20 05:01 - 00210032 _____ () C:\Windows\system32\DBCLIENT.DLL
2015-04-12 22:26 - 2015-04-12 22:26 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2015-04-12 22:22 - 2015-04-14 00:34 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\ZHP
2015-04-12 22:22 - 2015-04-14 00:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-04-10 14:39 - 2015-04-10 14:39 - 00001389 _____ () C:\Users\Léopold\Desktop\Internet Explorer.lnk
2015-04-08 20:56 - 2015-04-08 20:56 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-07 22:35 - 2015-04-07 22:35 - 00026158 _____ () C:\Users\Léopold\Downloads\the-100-s02e16-final-vostfr-hdtv (1).torrent
2015-04-06 00:27 - 2015-04-06 00:27 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-04-06 00:27 - 2015-04-06 00:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-04-06 00:13 - 2015-04-06 00:15 - 00000000 ____D () C:\Users\Léopold\IDM 6.23Build10_delta
2015-04-06 00:08 - 2015-04-19 19:30 - 2565967872 _____ () C:\Users\Léopold\Windows8-ReleasePreview-32bit-French.iso
2015-04-03 20:17 - 2015-04-03 20:17 - 00000000 ____D () C:\Users\Léopold\AppData\Local\MaxRecorder
2015-04-03 20:15 - 2015-04-03 20:15 - 00000000 ____D () C:\Users\Léopold\AppData\Local\DFX
2015-04-03 20:13 - 2015-04-03 20:14 - 00000000 ____D () C:\Program Files\DFX
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\Users\Invité\AppData\Roaming\vlc
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\Users\Invité
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\Users\Administrateur\AppData\Roaming\vlc
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\Users\Administrateur
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2015-04-03 20:13 - 2015-04-03 20:13 - 00000000 ____D () C:\Program Files\Common Files\DFX
2015-04-03 20:09 - 2015-04-03 20:11 - 00000000 ____D () C:\Users\Léopold\DFX Audio Enhancer 11.113+Crack
2015-04-03 12:29 - 2015-04-03 12:30 - 00026158 _____ () C:\Users\Léopold\Downloads\the-100-s02e16-final-vostfr-hdtv.torrent
2015-04-03 12:29 - 2015-04-03 12:29 - 00029410 _____ () C:\Users\Léopold\Downloads\the-100-s02e15-vostfr-hdtv.torrent
2015-04-03 12:29 - 2015-04-03 12:29 - 00029410 _____ () C:\Users\Léopold\Downloads\the-100-s02e14-proper-vostfr-hdtv.torrent
2015-04-03 12:29 - 2015-04-03 12:29 - 00029390 _____ () C:\Users\Léopold\Downloads\the-100-s02e12-vostfr-hdtv.torrent
2015-04-03 12:29 - 2015-04-03 12:29 - 00028684 _____ () C:\Users\Léopold\Downloads\the-100-s02e13-vostfr-hdtv.torrent
2015-04-03 12:28 - 2015-04-03 12:28 - 00028664 _____ () C:\Users\Léopold\Downloads\the-100-s02e11-vostfr-hdtv.torrent
2015-04-02 15:54 - 2015-03-27 02:10 - 00122432 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2015-03-30 20:47 - 2015-04-02 09:10 - 00000000 ____D () C:\Users\Léopold\[ www.Cpasbien.pw ] The.100.S02E09.FASTSUB.VOSTFR.HDTV.XviD-ATN
2015-03-30 20:46 - 2015-04-01 19:04 - 00000000 ____D () C:\Users\Léopold\[www.Cpasbien.pe] The.100.S02E08.FASTSUB.VOSTFR.HDTV.XviD-ADDiCTiON
2015-03-30 20:46 - 2015-03-31 20:40 - 00000000 ____D () C:\Users\Léopold\[www.Cpasbien.pe] The.100.S02E07.FASTSUB.VOSTFR.HDTV.XviD-ADDiCTiON
2015-03-30 20:45 - 2015-03-30 20:45 - 00029549 _____ () C:\Users\Léopold\Downloads\the-100-s02e09-vostfr-hdtv.torrent
2015-03-30 20:45 - 2015-03-30 20:45 - 00028664 _____ () C:\Users\Léopold\Downloads\the-100-s02e10-vostfr-hdtv.torrent
2015-03-30 20:44 - 2015-03-30 20:44 - 00029497 _____ () C:\Users\Léopold\Downloads\the-100-s02e07-vostfr-hdtv.torrent
2015-03-30 20:44 - 2015-03-30 20:44 - 00029477 _____ () C:\Users\Léopold\Downloads\the-100-s02e08-vostfr-hdtv.torrent
2015-03-27 00:39 - 2015-03-30 20:40 - 00000000 ____D () C:\Users\Léopold\[www.Cpasbien.pe] The.100.S02E06.FASTSUB.VOSTFR.HDTV.XviD-ADDiCTiON
2015-03-27 00:38 - 2015-03-27 00:38 - 00029675 _____ () C:\Users\Léopold\Downloads\the-100-s02e06-vostfr-hdtv.torrent
2015-03-27 00:37 - 2015-03-27 00:37 - 00029497 _____ () C:\Users\Léopold\Downloads\the-100-s02e05-vostfr-hdtv.torrent
2015-03-27 00:36 - 2015-03-27 00:36 - 00028963 _____ () C:\Users\Léopold\Downloads\the-100-s02e04-vostfr-hdtv.torrent
2015-03-23 01:33 - 2015-03-23 01:34 - 00127045 _____ () C:\Users\Léopold\Downloads\CCcam.prio

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-19 19:38 - 2014-03-12 21:18 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\uTorrent
2015-04-19 19:19 - 2014-01-11 20:00 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-19 19:19 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-19 00:30 - 2013-11-11 23:58 - 01338643 _____ () C:\Windows\WindowsUpdate.log
2015-04-19 00:29 - 2013-11-11 23:41 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\DMCache
2015-04-19 00:10 - 2013-11-29 21:56 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-19 00:05 - 2014-01-11 20:00 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-17 22:44 - 2013-11-11 22:16 - 00000000 ____D () C:\Users\Léopold
2015-04-17 22:33 - 2013-11-11 23:41 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\IDM
2015-04-17 21:17 - 2014-01-11 20:34 - 00002087 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-17 20:35 - 2013-11-12 00:45 - 00000000 ____D () C:\Program Files\Unlocker
2015-04-16 21:22 - 2009-07-14 06:34 - 00009936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-16 21:22 - 2009-07-14 06:34 - 00009936 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-15 22:11 - 2015-02-18 18:52 - 00000000 ____D () C:\Users\Léopold\Desktop\TIBURON FISH
2015-04-15 20:30 - 2014-03-09 23:15 - 00000000 ____D () C:\AdwCleaner
2015-04-15 19:17 - 2013-11-29 21:56 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-15 19:17 - 2013-11-29 21:56 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-14 00:28 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-04-14 00:27 - 2014-04-16 22:11 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\PC TEKNIX
2015-04-14 00:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-14 00:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2015-04-13 21:33 - 2014-07-24 20:57 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\Media Player Classic
2015-04-10 22:54 - 2013-11-11 22:20 - 01668698 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-09 18:31 - 2013-11-12 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-04-06 00:28 - 2013-11-11 23:41 - 00000000 ____D () C:\Program Files\Internet Download Manager
2015-04-03 20:14 - 2014-03-06 00:32 - 00000000 ____D () C:\Program Files\JetAudio
2015-04-03 12:24 - 2009-07-14 06:53 - 00032496 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-31 20:43 - 2013-11-26 21:42 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\Skype
2015-03-26 20:07 - 2014-01-02 20:29 - 00000000 ____D () C:\Program Files\Opera
2015-03-26 00:03 - 2015-03-08 21:32 - 1484228739 _____ () C:\Users\Léopold\The.Hobbit.The.Battle.of.the.Five.Armies.2014.FRENCH.BRRip.XviD-Slay3R.avi
2015-03-21 19:35 - 2013-11-11 23:58 - 00000000 ____D () C:\Users\Léopold\AppData\Roaming\vlc

==================== Files in the root of some directories =======

2012-05-04 09:04 - 2012-05-04 09:04 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files\Common Files\atimpenc.dll
2014-11-18 11:16 - 2014-11-18 11:16 - 0003584 _____ () C:\Users\Léopold\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-16 22:24 - 2014-05-16 22:24 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-11-19 21:58 - 2014-11-19 21:58 - 0001701 _____ () C:\ProgramData\SystemInformation.txt

Files to move or delete:
====================
C:\Users\Léopold\code-de-la-route-pratic.exe
C:\Users\Léopold\FRST.exe


Some content of TEMP:
====================
C:\Users\Léopold\AppData\Local\Temp\HitmanPro.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-06 22:13

==================== End Of Log ============================