Script ZHPFix O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline [MD5.00000000000000000000000000000000] [APT] [MirageAgent] (...) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (.not file.) [0] [MD5.433ED3BBF2CD1FBCA646F93340788B47] [APT] [YourFileDownloader Installer Starter] (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloadereS7lsawDPj.exe [3743312] [MD5.00000000000000000000000000000000] [APT] [{E4FA8659-9E2C-42A1-86B3-49C7706AD795}] (...) -- C:\Users\bastien\AppData\Roaming\webssearches\UninstallManager.exe (.not file.) [0] O45 - LFCP:[MD5.CDC70ED201CBA9E1C4F68D9BB099382B] - 26/09/2014 - 15:05:38 ---A- - C:\Windows\Prefetch\WPM_V20.0.0.722.EXE-903E3395.pf O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (...) -- C:\Users\bastien\AppData\Local\Temp\~nsu.tmp\Au_.exe [185901] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\87R4eEx9p3.tmp\htmlayout.dll [966224] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\BsI4nvSjR7.tmp\htmlayout.dll [966224] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\ByYESHfYDQ.tmp\htmlayout.dll [966224] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\Tu5BH7BFxU.tmp\htmlayout.dll [966224] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\yMkCpwpa7N.tmp\htmlayout.dll [966224] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloaderGBESwFI0zC.exe [3743312] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloaderINiTcupCdZ.exe [3743312] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloaderZggaTjB1ps.exe [3743312] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloaderayL1NzLz29.exe [3743312] O61 - LFC: 26/09/2014 - 11:23:13 ---A- . (.http://yourfiledownloader.net.) -- C:\Users\bastien\AppData\Local\Temp\YourFileDownloadereS7lsawDPj.exe [3743312] O61 - LFC: 27/09/2014 - 11:23:13 ---A- . (.Terra Informatica Software, Inc., British C.) -- C:\Users\bastien\AppData\Local\Temp\jIJ2j2hokL.tmp\htmlayout.dll [966224] O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com OPT:O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe OPT:SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe ShortcutFix SysRestore FirewallRaz EmptyTemp