Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-07-2015
Ran by Utilisateur (administrator) on NOM-B423C522963 (30-07-2015 16:00:59)
Running from C:\Documents and Settings\Utilisateur\Mes documents\Téléchargements
Loaded Profiles: Utilisateur (Available Profiles: Utilisateur & Administrateur)
Platform: Microsoft Windows XP Professionnel Service Pack 3 (X86) Language: Français (France)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SFR) C:\Program Files\SFR\Gestionnaire de Connexion\SFR.Dashboard.Service.exe
() C:\Program Files\ASUS\NB Probe\SPM\SPMGR.EXE
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ASUS) C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ASUS) C:\Program Files\ASUS\ATK Media\DMedia.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.EXE
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
() C:\WINDOWS\ASScrPro.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(ASUSTeK) C:\WINDOWS\System32\ACEngSvr.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.EXE
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\WDC.EXE
(Oracle Corporation) C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
(Google Inc.) C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
(Microsoft Corporation) C:\WINDOWS\System32\WBEM\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\FIREFOX.EXE


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16805888 2008-07-29] (Realtek Semiconductor Corp.)
HKLM\...\Run: [MsgTranAgt] => C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe [117304 2008-08-18] (ASUS)
HKLM\...\Run: [HControlUser] => C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [98304 2008-08-18] (ASUS)
HKLM\...\Run: [ATKHOTKEY] => C:\Program Files\ASUS\ATK Hotkey\HControl.exe [223800 2008-08-29] (ASUS)
HKLM\...\Run: [ATKOSD2] => C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1323008 2008-07-03] (Synaptics, Inc.)
HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Media\DMedia.exe [159744 2008-08-19] (ASUS)
HKLM\...\Run: [Wireless Console 2] => C:\Program Files\Wireless Console 2\wcourier.exe [1040384 2007-07-05] ()
HKLM\...\Run: [ASUS Live Update] => C:\Program Files\ASUS\ASUS Live Update\ALU.exe [51768 2007-11-30] ()
HKLM\...\Run: [Power_Gear] => C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [90112 2006-07-26] (ASUSTeK Computer Inc.)
HKLM\...\Run: [ASUS Camera ScreenSaver] => C:\WINDOWS\AsScrProlog.exe [47672 2008-12-23] ()
HKLM\...\Run: [ASUS Screen Saver Protector] => C:\WINDOWS\ASScrPro.exe [33136 2008-12-23] ()
HKLM\...\Run: [ACMON] => C:\Program Files\ASUS\Splendid\ACMON.exe [851968 2008-01-15] (ATK)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [866584 2006-11-03] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-09] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-1808584525-4025613466-1403178482-1005\...\Run: [Google Update] => C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [107912 2014-10-21] (Google Inc.)
HKU\S-1-5-21-1808584525-4025613466-1403178482-1005\...\Run: [Avast-Browser-Cleanup] => C:\Program Files\AVAST Software\Avast\BrowserCleanup.exe [1530992 2015-06-09] (AVAST Software)
IFEO\Your Image File Name Here without a path: [Debugger] 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-06-09] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [ADSMOverlayIcon] -> {A825576B-0042-4F0F-8FB0-93CE0F054E69} => C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll [2007-06-15] ()
ShellIconOverlayIdentifiers: [ADSMOverlayIcon1] -> {A8D448F4-0431-45AC-9F5E-E1B434AB2249} => C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll [2007-06-01] ()
ShellIconOverlayIdentifiers: [Fichiers hors connexion] -> {750fdf0e-2a26-11d1-a3ea-080036587f03} => C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
HKU\S-1-5-21-1808584525-4025613466-1403178482-1005\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1808584525-4025613466-1403178482-1005\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.windows.fr/ie8/bienvenue
HKU\S-1-5-21-1808584525-4025613466-1403178482-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-15] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-09] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-15] (Oracle Corporation)
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6886.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} http://securite-neufbox.sfr.fr/Ols/fscax.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
ShellExecuteHooks: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll [83224 2006-11-03] (Microsoft Corporation)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A7FC3183-BB9A-47B8-8D99-5CACCA9B2D6E}: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\ytvb8ixj.default-1417285250531
FF Homepage: hxxp://www.sfr.fr/sfr-et-moi.html?sfrintid=P_set-homepage_firefox
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2008-12-12] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-15] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1808584525-4025613466-1403178482-1005: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-1808584525-4025613466-1403178482-1005: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-06-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-06-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-06-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-06-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-06-23] (Apple Inc.)
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-06-02]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-06-02]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-06-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-10]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-28]

Chrome: 
=======
CHR Profile: C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (Gmail) - C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR Extension: (Google Search) - C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-21]
CHR Extension: (avast! Online Security) - C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-09-21]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-09]
StartMenuInternet: Google Chrome - Chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [73728 2007-05-18] () [File not signed]
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-09] (Avast Software s.r.o.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 SFR.DashBoard.Service; C:\Program Files\SFR\Gestionnaire de Connexion\SFR.DashBoard.Service.exe [28632 2012-11-12] (SFR)
R2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [13592 2006-11-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1315776 2008-06-27] (Atheros Communications, Inc.)
R0 AsDsm; C:\WINDOWS\system32\Drivers\AsDsm.sys [29752 2007-08-10] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R3 ASNDIS5; C:\Program Files\ASUS\ATK Hotkey\ASNDIS5.SYS [16269 2004-05-27] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-06-09] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-06-09] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-06-09] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-06-09] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-06-09] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-06-09] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-06-09] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [20936 2007-08-03] ()
R3 kbfiltr; C:\WINDOWS\System32\DRIVERS\kbfiltr.sys [5632 2007-01-24] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [5760 2007-08-23] () [File not signed]
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 SNP2UVC; C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [1748352 2008-06-09] ()
S3 ZTEusbnet; C:\WINDOWS\System32\DRIVERS\ZTEusbnet.sys [110080 2010-11-17] (ZTE Corporation)
S3 ZTEusbvoice; C:\WINDOWS\System32\DRIVERS\ZTEusbvoice.sys [104960 2010-11-17] (ZTE Incorporated)
S3 ASUSProcObsrv; \??\E:\I386\AsProcOb.sys [X]
S4 IntelIde; No ImagePath
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-30 16:00 - 2015-07-30 16:00 - 00000000 ____D C:\FRST
2015-07-29 20:27 - 2015-07-29 20:27 - 00000000 ____D C:\Program Files\Exploremedia
2015-07-29 19:00 - 2015-07-29 19:00 - 00000948 _____ C:\Documents and Settings\Utilisateur\Bureau\ZHPFixReport.txt
2015-07-29 18:57 - 2015-07-29 18:58 - 00001416 _____ C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
2015-07-29 18:57 - 2015-07-29 18:58 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
2015-07-29 18:57 - 2015-07-29 18:57 - 00000000 ____D C:\Program Files\ZHPFix
2015-07-29 13:00 - 2015-07-29 13:00 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\PlayGemConfig
2015-07-28 13:11 - 2015-07-28 13:11 - 00000000 ____D C:\AdwCleaner
2015-07-28 13:07 - 2015-07-28 13:08 - 00005311 _____ C:\Documents and Settings\Utilisateur\Bureau\ZHPCleaner.txt
2015-07-28 13:01 - 2015-07-28 13:01 - 00000733 _____ C:\Documents and Settings\Utilisateur\Bureau\ZHPCleaner.lnk
2015-07-27 20:53 - 2015-07-27 20:53 - 00000000 __SHD C:\FOUND.012
2015-07-27 20:49 - 2015-07-27 20:49 - 00341296 _____ C:\avenger.txt
2015-07-27 20:49 - 2015-07-27 20:49 - 00000000 ____D C:\Avenger
2015-07-27 18:57 - 2015-07-27 18:57 - 00000000 _____ C:\WINDOWS\system32\TempWmicBatchFile.bat
2015-07-27 18:56 - 2015-07-27 18:56 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-27 18:56 - 2015-07-27 18:56 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-27 18:55 - 2015-07-27 18:55 - 00000000 _____ C:\dummy.htm
2015-07-27 18:34 - 2015-07-29 19:05 - 00076831 _____ C:\Documents and Settings\Utilisateur\Bureau\ZHPDiag.txt
2015-07-27 18:29 - 2015-07-29 19:01 - 00000723 _____ C:\Documents and Settings\Utilisateur\Bureau\ZHPDiag.lnk
2015-07-27 16:50 - 2015-07-28 13:08 - 00000629 _____ C:\Documents and Settings\Utilisateur\Menu Démarrer\Programmes\Internet Explorer.lnk
2015-07-27 16:46 - 2015-07-27 16:46 - 00000000 __SHD C:\FOUND.011
2015-07-15 15:05 - 2015-07-15 15:05 - 00000000 ____D C:\Program Files\Fichiers communs\Java
2015-07-14 10:15 - 2015-07-18 10:20 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1d0be0d3886885c.job

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-30 15:56 - 2008-12-22 17:27 - 01444619 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-30 15:53 - 2012-03-30 19:58 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-30 15:49 - 2009-02-14 20:40 - 00000330 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2015-07-30 15:47 - 2014-07-28 10:35 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-30 15:47 - 2008-12-22 17:24 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-07-30 15:47 - 2006-08-18 08:14 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-30 15:46 - 2014-03-29 09:56 - 00000234 _____ C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job
2015-07-30 15:46 - 2008-12-22 17:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-29 23:28 - 2008-12-22 17:56 - 00000184 ___SH C:\Documents and Settings\Utilisateur\ntuser.ini
2015-07-29 23:28 - 2008-12-22 17:34 - 00032464 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-29 23:28 - 2008-12-22 17:25 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-07-29 19:12 - 2014-06-22 09:50 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1cf8dee9eca1d54.job
2015-07-29 19:11 - 2014-05-16 19:04 - 00098520 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-07-28 13:19 - 2014-11-29 21:16 - 00000634 _____ C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk
2015-07-27 20:47 - 2013-10-23 21:15 - 00173752 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2015-07-27 20:00 - 2014-11-29 21:16 - 00000628 _____ C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
2015-07-27 19:34 - 2014-10-21 19:07 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1cfed51847d40ee.job
2015-07-27 17:09 - 2015-02-08 09:54 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1d0437cc8c181f8.job
2015-07-27 16:50 - 2009-06-14 10:38 - 00000692 _____ C:\Documents and Settings\Utilisateur\Menu Démarrer\Programmes\Windows Media Player.lnk
2015-07-27 16:50 - 2009-06-14 10:38 - 00000686 _____ C:\Documents and Settings\Utilisateur\Bureau\Windows Media Player.lnk
2015-07-27 16:50 - 2008-12-22 17:56 - 00000642 _____ C:\Documents and Settings\Utilisateur\Menu Démarrer\Programmes\Outlook Express.lnk
2015-07-27 16:50 - 2008-12-22 17:56 - 00000000 ___RD C:\Documents and Settings\Utilisateur\Mes documents\Mes images
2015-07-27 16:50 - 2008-12-22 17:56 - 00000000 ___RD C:\Documents and Settings\Utilisateur\Mes documents\Ma musique
2015-07-27 16:50 - 2008-12-22 17:56 - 00000000 ___RD C:\Documents and Settings\Utilisateur\Favoris
2015-07-18 10:20 - 2015-05-17 17:04 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1d090b2b7bb8966.job
2015-07-18 09:58 - 2014-11-13 19:29 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1808584525-4025613466-1403178482-1005Core1cfff6fb397e444.job
2015-07-15 15:53 - 2012-03-30 19:58 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-15 15:53 - 2011-08-19 10:49 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-15 15:05 - 2014-10-18 20:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-15 15:05 - 2014-10-18 20:16 - 00096352 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-03 08:49 - 2008-12-31 16:54 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-07-01 20:13 - 2012-02-13 12:40 - 00000681 _____ C:\Documents and Settings\All Users\Bureau\Malwarebytes Anti-Malware.lnk

==================== Files in the root of some directories =======

2008-12-22 17:56 - 2008-12-31 16:52 - 0000134 _____ () C:\Documents and Settings\Utilisateur\Local Settings\Application Data\fusioncache.dat
2009-06-11 20:18 - 2009-06-11 20:18 - 0003584 _____ () C:\Documents and Settings\Utilisateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-22 20:11 - 2011-07-22 20:11 - 0000036 _____ () C:\Documents and Settings\Utilisateur\Local Settings\Application Data\housecall.guid.cache
2011-07-22 20:18 - 2012-03-23 20:35 - 0185110 _____ () C:\Documents and Settings\Utilisateur\Local Settings\Application Data\ars.cache
2011-07-22 20:18 - 2012-03-23 20:35 - 0249854 _____ () C:\Documents and Settings\Utilisateur\Local Settings\Application Data\census.cache

Some files in TEMP:
====================
C:\Documents and Settings\Utilisateur\Local Settings\Temp\jre-8u51-windows-au.exe
C:\Documents and Settings\Utilisateur\Local Settings\Temp\UninstallModule.exe
C:\Documents and Settings\Utilisateur\Local Settings\Temp\sqlite3.dll
C:\Documents and Settings\Utilisateur\Local Settings\Temp\Uninstall.exe
C:\Documents and Settings\Utilisateur\Local Settings\Temp\vcredist_x86.exe
C:\Documents and Settings\Utilisateur\Local Settings\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of log ============================