Delta search

Bonsoir,

Windows 8, google chrome.

Mon ordinateur a été infecté par delta-search, j'ai lancé Spybot et cela semble avoir éradiqué le problème. J'ai aussi procédé à la plupart des manipulations pour remettre une nouvelle page d'accueil sur google chrome, mais mon navigateur s'ouvre obstinément sur delta-homes.com, alors que dans les paramètres, partout où il est possible et indiqué de supprimer delta-homes, je l'ai fait.

Je ne sais comment résoudre ce problème,

Merci de votre aide.

François

9 réponses

  1. Modérateur
    Salut,

    Tu as des adwares sur ton PC.
    Passe ces deux programmes dans l'ordre.
    Lis bien les instructions, clics sur les liens et lis bien aussi.
    Prends ton temps.

    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
    !!! Malwarebyte doit être à jour avant de faire le scan !!!
    Coche tout en faisant un clic droit / cocher tout
    puis bouton supprimer sélection pour tout supprimer.

    puis :

    Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
    Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    Le scan peux durer plusieurs minutes, patienter.
    Une fois le scan terminé, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    1. Je te remercie, mais j'ai déjà fait tout ça. La seule manip qu'il me reste à faire, c'est de reparamétrer la page d'accueil de google chrome.
      1. Voici le rapport de Spybot

        Search results from Spybot - Search & Destroy

        30.09.2013 16:52:23
        Scan took 01:21:10.
        90 items found.

        Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
        C:\ProgramData\Babylon\

        Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Roaming\Babylon\
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
        Directory.subfile.size=6305
        Directory.subfile.md5=776AFBAB9611C38820B39C324294F09B
        Directory.subfile.filedate=1380181074
        Directory.subfile.filedatetext=2013-09-26 09:37:53

        Babylon.Toolbar: [SBI $0C3B54D0] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Local\Babylon\
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab098.claroico.zpb
        Directory.subfile.size=953
        Directory.subfile.md5=4D86B379CE2451BE0B96CD9E8761F4C2
        Directory.subfile.filedate=1380181031
        Directory.subfile.filedatetext=2013-09-26 09:37:11
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab138.deltatb_dmn.zpb
        Directory.subfile.size=250
        Directory.subfile.md5=E3F94911F62443BB76C2A71BFF1B5D5B
        Directory.subfile.filedate=1380181031
        Directory.subfile.filedatetext=2013-09-26 09:37:10
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab149.spreg.zpb
        Directory.subfile.size=299
        Directory.subfile.md5=57DB174831D94469C02C82964D6512F4
        Directory.subfile.filedate=1380181031
        Directory.subfile.filedatetext=2013-09-26 09:37:11
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab457.TB_NewWay.dat
        Directory.subfile.size=173
        Directory.subfile.md5=16ABCACBDC0476A21299C697CA66AE90
        Directory.subfile.filedate=1380181031
        Directory.subfile.filedatetext=2013-09-26 09:37:10
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\BUsolution_vt.zpb
        Directory.subfile.size=199480
        Directory.subfile.md5=48A9BB985DE97EDEC9CB0536FE80A204
        Directory.subfile.filedate=1380181033
        Directory.subfile.filedatetext=2013-09-26 09:37:13
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\GUninstaller_cat.zpb
        Directory.subfile.size=8192
        Directory.subfile.md5=58152EC9407C504348AFBD01EE5F490E
        Directory.subfile.filedate=1380181064
        Directory.subfile.filedatetext=2013-09-26 09:37:43
        Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\latest.zpb
        Directory.subfile.size=361398
        Directory.subfile.md5=E6F2BE96E7308C5DC48B9E7B65146424
        Directory.subfile.filedate=1380181027
        Directory.subfile.filedatetext=2013-09-26 09:37:07

        Delta.Toolbar: [SBI $C87F6C5D] Data (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
        Properties.size=6305
        Properties.md5=776AFBAB9611C38820B39C324294F09B
        Properties.filedate=1380181074
        Properties.filedatetext=2013-09-26 09:37:53

        Delta.Toolbar: [SBI $85F92549] User settings (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\BabSolution

        Delta.Toolbar: [SBI $4FE1D2EF] User settings (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

        Delta.Toolbar: [SBI $1E0125E9] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\Delta

        Pricepeep: [SBI $7B1A2903] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\
        Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\background.html
        Directory.subfile.size=784
        Directory.subfile.md5=BA82642D3A033B95C4D7F324D84ED104
        Directory.subfile.filedate=1350059368
        Directory.subfile.filedatetext=2012-10-12 18:29:28
        Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\manifest.json
        Directory.subfile.size=824
        Directory.subfile.md5=1B864E2A2F5C2E224BCEAD091501977C
        Directory.subfile.filedate=1377894700
        Directory.subfile.filedatetext=2013-08-30 22:31:40

        WebCake.BHO: [SBI $FDE5A161] Class ID (Registry Key, nothing done)
        HKEY_CLASSES_ROOT\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}

        WebCake.BHO: [SBI $3F53FBE0] Class ID (Registry Key, nothing done)
        HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

        WebCake.BHO: [SBI $8048C96E] Interface (Registry Key, nothing done)
        HKEY_CLASSES_ROOT\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}

        WebCake.BHO: [SBI $7BEA5F33] Interface (Registry Key, nothing done)
        HKEY_CLASSES_ROOT\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}

        WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

        WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

        WebCake.BHO: [SBI $2698E3E6] Program directory (Directory, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\
        Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
        Directory.subfile.size=56017
        Directory.subfile.md5=711EF3CDC4EB735A562F4E277328EB0B
        Directory.subfile.filedate=1372843124
        Directory.subfile.filedatetext=2013-07-03 11:18:43
        Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
        Directory.subfile.size=227984
        Directory.subfile.md5=5A8222C703B4A34F2227A652A49A2827
        Directory.subfile.filedate=1299814153
        Directory.subfile.filedatetext=2011-03-11 05:29:12
        Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
        Directory.subfile.size=4846
        Directory.subfile.md5=60E3EF9326E8C3F574A2C7B5A31FD895
        Directory.subfile.filedate=1258611124
        Directory.subfile.filedatetext=2009-11-19 08:12:03
        Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
        Directory.subfile.size=531968
        Directory.subfile.md5=E1416C9C40FD81557795D4195FB48E8D
        Directory.subfile.filedate=1368563125
        Directory.subfile.filedatetext=2013-05-14 22:25:25
        Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
        Directory.subfile.size=273408
        Directory.subfile.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
        Directory.subfile.filedate=1368563125
        Directory.subfile.filedatetext=2013-05-14 22:25:24

        WebCake.BHO: [SBI $885FF297] Library (File, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
        Properties.size=531968
        Properties.md5=E1416C9C40FD81557795D4195FB48E8D
        Properties.filedate=1368563125
        Properties.filedatetext=2013-05-14 22:25:25

        WebCake.BHO: [SBI $0A5B161A] Library (File, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
        Properties.size=273408
        Properties.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
        Properties.filedate=1368563125
        Properties.filedatetext=2013-05-14 22:25:24

        WebCake.BHO: [SBI $1107F102] Data (File, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
        Properties.size=56017
        Properties.md5=711EF3CDC4EB735A562F4E277328EB0B
        Properties.filedate=1372843124
        Properties.filedatetext=2013-07-03 11:18:43

        WebCake.BHO: [SBI $E98B8D0E] Executable (File, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
        Properties.size=227984
        Properties.md5=5A8222C703B4A34F2227A652A49A2827
        Properties.filedate=1299814153
        Properties.filedatetext=2011-03-11 05:29:12

        WebCake.BHO: [SBI $370B837B] Picture (File, nothing done)
        C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
        Properties.size=4846
        Properties.md5=60E3EF9326E8C3F574A2C7B5A31FD895
        Properties.filedate=1258611124
        Properties.filedatetext=2009-11-19 08:12:03

        Win32.Agent.qvo: [SBI $C32FED7D] Settings (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

        Win32.Agent.qvo: [SBI $37F0341B] Settings (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope

        Banyan.eSafe: [SBI $320096C0] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\eSafeSecControl

        Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

        Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

        Banyan.eSafe: [SBI $043C19FB] Program directory (Directory, nothing done)
        C:\ProgramData\eSafe\
        Directory.subfile=C:\ProgramData\eSafe\temp_000.exe
        Directory.subfile.size=178176
        Directory.subfile.md5=1BAAF5819FD346B34E21056B33EA8D18
        Directory.subfile.filedate=1380272657
        Directory.subfile.filedatetext=2013-09-27 11:04:17
        Directory.subfile=C:\ProgramData\eSafe\log\eGdpSvc.LOG
        Directory.subfile.size=287982
        Directory.subfile.md5=DB6184A472CB8111008214E170C0640A
        Directory.subfile.filedate=1380540428
        Directory.subfile.filedatetext=2013-09-30 13:27:07
        Directory.subfile=C:\ProgramData\eSafe\log\eSafeSvc.LOG
        Directory.subfile.size=73172
        Directory.subfile.md5=8442FA73416C352FCE12DC22220944B8
        Directory.subfile.filedate=1377350508
        Directory.subfile.filedatetext=2013-08-24 15:21:48

        Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

        Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

        Banyan.eSafe: [SBI $E00BC7C6] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Roaming\eIntaller\
        Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Config.ini
        Directory.subfile.size=220
        Directory.subfile.md5=02C84EFB774471CB8BA8B60487266AF6
        Directory.subfile.filedate=1372843126
        Directory.subfile.filedatetext=2013-07-03 11:18:45
        Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Desk365.exe
        Directory.subfile.size=4356176
        Directory.subfile.md5=EE1A1AA7D1E5190FBF4C6618A47A0D3C
        Directory.subfile.filedate=1369820333
        Directory.subfile.filedatetext=2013-05-29 11:38:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
        Directory.subfile.size=361536
        Directory.subfile.md5=7D8DD3520A5B113A248B4867492E7DFE
        Directory.subfile.filedate=1372843115
        Directory.subfile.filedatetext=2013-07-03 11:18:34
        Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
        Directory.subfile.size=718392
        Directory.subfile.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
        Directory.subfile.filedate=1372843116
        Directory.subfile.filedatetext=2013-07-03 11:18:35

        Banyan.eSafe: [SBI $F391D360] Executable (File, nothing done)
        C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
        Properties.size=361536
        Properties.md5=7D8DD3520A5B113A248B4867492E7DFE
        Properties.filedate=1372843115
        Properties.filedatetext=2013-07-03 11:18:34

        Banyan.eSafe: [SBI $5C7F4E30] Executable (File, nothing done)
        C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
        Properties.size=718392
        Properties.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
        Properties.filedate=1372843116
        Properties.filedatetext=2013-07-03 11:18:35

        Elex.Desk365: [SBI $C6008D91] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\deskSvc

        Elex.Desk365: [SBI $487B5F3A] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\V9

        Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

        Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

        Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

        Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

        Elex.Desk365: [SBI $5898CD7C] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\accelerate
        Directory.subfile.size=0
        Directory.subfile.md5=D41D8CD98F00B204E9800998ECF8427E
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
        Directory.subfile.size=1434
        Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
        Directory.subfile.size=17864
        Directory.subfile.md5=8FE5F08FC542B868EDB34E79E4F148EF
        Directory.subfile.filedate=1372852378
        Directory.subfile.filedatetext=2013-07-03 13:52:58
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
        Directory.subfile.size=82
        Directory.subfile.md5=88D6F5361B4990FFF5192E7FEBAD7143
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
        Directory.subfile.size=220
        Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
        Directory.subfile.filedate=1372852456
        Directory.subfile.filedatetext=2013-07-03 13:54:15
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
        Directory.subfile.size=5926
        Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\components\libcef_1.1364_wallpaper.exe
        Directory.subfile.size=10434864
        Directory.subfile.md5=8E390845A88CB1E0406CE350F570CF4B
        Directory.subfile.filedate=1375536902
        Directory.subfile.filedatetext=2013-08-03 15:35:02
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png
        Directory.subfile.size=79965
        Directory.subfile.md5=39CB48E50C1687943D9D8243534A978C
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png
        Directory.subfile.size=262007
        Directory.subfile.md5=600C71AC313C6D8CB86C8DBF97808CB2
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png
        Directory.subfile.size=109761
        Directory.subfile.md5=35361BC157F356FA8B05238790C70C1E
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png
        Directory.subfile.size=311068
        Directory.subfile.md5=472564D9BE514897A479679A16AF6295
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png
        Directory.subfile.size=201084
        Directory.subfile.md5=7BA3473A9526CDB3680E823C3823AA0C
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png
        Directory.subfile.size=2031
        Directory.subfile.md5=F5B39121E867C9936CCB6268837A1894
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png
        Directory.subfile.size=3290
        Directory.subfile.md5=1FFB97EEB780E007976D68A7F5686DC9
        Directory.subfile.filedate=1372843180
        Directory.subfile.filedatetext=2013-07-03 11:19:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png
        Directory.subfile.size=3497
        Directory.subfile.md5=0CF32AB908FB25D8B4E6FE6C70B75AF4
        Directory.subfile.filedate=1372843170
        Directory.subfile.filedatetext=2013-07-03 11:19:30
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png
        Directory.subfile.size=6461
        Directory.subfile.md5=9BC9C146C55E228248D47D1F57E82A19
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png
        Directory.subfile.size=6249
        Directory.subfile.md5=8760281CEE9AA98F2C35BAE2B5A573E9
        Directory.subfile.filedate=1372843172
        Directory.subfile.filedatetext=2013-07-03 11:19:31
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866.ico
        Directory.subfile.size=55773
        Directory.subfile.md5=C8C9AFE271500BBD9B5C29E86DB8EF66
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866_48_48.png
        Directory.subfile.size=3862
        Directory.subfile.md5=0945506ECF06B297C1E1BB878CFAE522
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png
        Directory.subfile.size=4447
        Directory.subfile.md5=5168E91605FEC4DB1278876CF6756E2E
        Directory.subfile.filedate=1372843173
        Directory.subfile.filedatetext=2013-07-03 11:19:33
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png
        Directory.subfile.size=1684
        Directory.subfile.md5=0DAE331466C7319B010839EC73D1EC53
        Directory.subfile.filedate=1372843176
        Directory.subfile.filedatetext=2013-07-03 11:19:36
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png
        Directory.subfile.size=2953
        Directory.subfile.md5=17025BF4A3A47BD39A43116D4EF7184C
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png
        Directory.subfile.size=1680
        Directory.subfile.md5=B25C97B3D39D2495822D4C6E018654CA
        Directory.subfile.filedate=1372843177
        Directory.subfile.filedatetext=2013-07-03 11:19:37
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png
        Directory.subfile.size=1648
        Directory.subfile.md5=E541CE7DF52E638E155AC01E7B9FD208
        Directory.subfile.filedate=1372843174
        Directory.subfile.filedatetext=2013-07-03 11:19:34
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png
        Directory.subfile.size=5533
        Directory.subfile.md5=2535026BCE2154C641326114F5AE9030
        Directory.subfile.filedate=1372843182
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431.ico
        Directory.subfile.size=82151
        Directory.subfile.md5=12CE4FAE05C5CC52955D83002528FD53
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_16_16.png
        Directory.subfile.size=1022
        Directory.subfile.md5=CEAD53A3CF9401B25986A3134ABCDB25
        Directory.subfile.filedate=1372852378
        Directory.subfile.filedatetext=2013-07-03 13:52:58
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_48_48.png
        Directory.subfile.size=5017
        Directory.subfile.md5=BD2620F7B9CEDC486EA7EFC2F7213259
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png
        Directory.subfile.size=7408
        Directory.subfile.md5=7D347C69736BC249D0ADBAF0D0125910
        Directory.subfile.filedate=1372843180
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png
        Directory.subfile.size=996
        Directory.subfile.md5=656E676249500A92897729EB7B70C356
        Directory.subfile.filedate=1372843175
        Directory.subfile.filedatetext=2013-07-03 11:19:35
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png
        Directory.subfile.size=1520
        Directory.subfile.md5=7A32F8A7144F199235F14363BD02F945
        Directory.subfile.filedate=1372843179
        Directory.subfile.filedatetext=2013-07-03 11:19:38
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_20_20.png
        Directory.subfile.size=1038
        Directory.subfile.md5=EFF0ED9BC240BAB196054F0D483B83A5
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png
        Directory.subfile.size=4991
        Directory.subfile.md5=9F708E9B2ACF92AA17B24AE420D2FC54
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_20_20.png
        Directory.subfile.size=1186
        Directory.subfile.md5=93DCE65B5F7C0B56E853ACCA19420160
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png
        Directory.subfile.size=4391
        Directory.subfile.md5=2B2A6EA0D1C20B414BDD0C64016CFBA9
        Directory.subfile.filedate=1372843163
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_downloads_20_20.png
        Directory.subfile.size=1232
        Directory.subfile.md5=1DF9CFE13710E20768B1F595420248C8
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_20_20.png
        Directory.subfile.size=1039
        Directory.subfile.md5=FFBF4646D56E393DC4555B34F67E30BF
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png
        Directory.subfile.size=3942
        Directory.subfile.md5=5F52AC5DA5722CC7F770D5D6BA036B4D
        Directory.subfile.filedate=1372843163
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png
        Directory.subfile.size=3627
        Directory.subfile.md5=6D0D3DB3615E9C65A500AF0459E85576
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png
        Directory.subfile.size=4445
        Directory.subfile.md5=B8A981866E83CE33B3142FF25988AB5F
        Directory.subfile.filedate=1372843182
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
        Directory.subfile.filedate=1372843180
        Directory.subfile.filedatetext=2013-07-03 11:19:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\barbie.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=690F18A933D2602125041B2613992063
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=690F18A933D2602125041B2613992063
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\facebook.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\GameCenter.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=C43C4159B62E4EAED3C7677902627806
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\google.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
        Directory.subfile.filedate=1372843182
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\mario.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
        Directory.subfile.filedate=1372843180
        Directory.subfile.filedatetext=2013-07-03 11:19:40
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\twitter.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
        Directory.subfile.filedate=1372843181
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\v9.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=BD31640E318030A99D4E7A1228D9FC1F
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\youtube.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico
        Directory.subfile.size=13942
        Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
        Directory.subfile.filedate=1372843182
        Directory.subfile.filedatetext=2013-07-03 11:19:41
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico
        Directory.subfile.size=99567
        Directory.subfile.md5=AA7F7C9CA7C2A3E8B33C99338E0020D3
        Directory.subfile.filedate=1372843162
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico
        Directory.subfile.size=79781
        Directory.subfile.md5=F0CFA464CDD86350DAE8E1AC6E3A25C3
        Directory.subfile.filedate=1372843163
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_175.ico
        Directory.subfile.size=67173
        Directory.subfile.md5=C99AAEDA16CD6524F2C26BCBDC93E4B3
        Directory.subfile.filedate=1372852299
        Directory.subfile.filedatetext=2013-07-03 13:51:39
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico
        Directory.subfile.size=69998
        Directory.subfile.md5=31136B37FF3DBBA78520FC3B258AD009
        Directory.subfile.filedate=1372843163
        Directory.subfile.filedatetext=2013-07-03 11:19:22
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r0.jpg
        Directory.subfile.size=99071
        Directory.subfile.md5=15C2EA420C382259DEE6FFE667C4CDFB
        Directory.subfile.filedate=1372843164
        Directory.subfile.filedatetext=2013-07-03 11:19:23
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r1.jpg
        Directory.subfile.size=243668
        Directory.subfile.md5=4BD08157F258A8A75AF71C14813A9086
        Directory.subfile.filedate=1372843167
        Directory.subfile.filedatetext=2013-07-03 11:19:27
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r2.jpg
        Directory.subfile.size=260964
        Directory.subfile.md5=076AAFD7232144885A3534225ADCDCFB
        Directory.subfile.filedate=1372843165
        Directory.subfile.filedatetext=2013-07-03 11:19:24
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r3.jpg
        Directory.subfile.size=172184
        Directory.subfile.md5=6FBE69DA6CABA36B5FDD460C249F841B
        Directory.subfile.filedate=1372843171
        Directory.subfile.filedatetext=2013-07-03 11:19:31
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r4.jpg
        Directory.subfile.size=318950
        Directory.subfile.md5=9D738AF8B31FDD8A4AB3B40E45E72499
        Directory.subfile.filedate=1372843166
        Directory.subfile.filedatetext=2013-07-03 11:19:25
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r5.jpg
        Directory.subfile.size=291623
        Directory.subfile.md5=CD8D2E43E865FB2E3DB840D955DAC545
        Directory.subfile.filedate=1372843169
        Directory.subfile.filedatetext=2013-07-03 11:19:28
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r6.jpg
        Directory.subfile.size=280712
        Directory.subfile.md5=C964E70AA09130459124EA9E9C22D6B3
        Directory.subfile.filedate=1372843171
        Directory.subfile.filedatetext=2013-07-03 11:19:31
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r7.jpg
        Directory.subfile.size=242358
        Directory.subfile.md5=6AE22A47C48A0A68B5A6AFBCC78B5FB7
        Directory.subfile.filedate=1372843170
        Directory.subfile.filedatetext=2013-07-03 11:19:29
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r8.jpg
        Directory.subfile.size=256804
        Directory.subfile.md5=1E2FC86580DA26DBBA3B8D5508F9AA9C
        Directory.subfile.filedate=1372843167
        Directory.subfile.filedatetext=2013-07-03 11:19:26
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r9.jpg
        Directory.subfile.size=284621
        Directory.subfile.md5=C35ACE7A53644846A2B8207F3337A5D3
        Directory.subfile.filedate=1372843173
        Directory.subfile.filedatetext=2013-07-03 11:19:32
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.db
        Directory.subfile.size=994
        Directory.subfile.md5=563B20129235DC021C75E63DC423AF8C
        Directory.subfile.filedate=1372843170
        Directory.subfile.filedatetext=2013-07-03 11:19:30
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=04678F375785D80A9E22FF477C5417EF
        Directory.subfile.filedate=1372843169
        Directory.subfile.filedatetext=2013-07-03 11:19:28
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.db
        Directory.subfile.size=890
        Directory.subfile.md5=FEA225420438A0F53528FAE05E16A9E0
        Directory.subfile.filedate=1372843172
        Directory.subfile.filedatetext=2013-07-03 11:19:31
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico
        Directory.subfile.size=82726
        Directory.subfile.md5=91E58CABF6C3C530189E2B1031BEED59
        Directory.subfile.filedate=1372843171
        Directory.subfile.filedatetext=2013-07-03 11:19:31
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.db
        Directory.subfile.size=778
        Directory.subfile.md5=8D16FFFB1992D48E3CB4D8404C518723
        Directory.subfile.filedate=1372843174
        Directory.subfile.filedatetext=2013-07-03 11:19:34
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.ico
        Directory.subfile.size=13262
        Directory.subfile.md5=43E266FA15B8F01B425D381211A8791C
        Directory.subfile.filedate=1372843174
        Directory.subfile.filedatetext=2013-07-03 11:19:33
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.db
        Directory.subfile.size=796
        Directory.subfile.md5=8DE87696714794E2552896C853386EE7
        Directory.subfile.filedate=1372843175
        Directory.subfile.filedatetext=2013-07-03 11:19:35
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.ico
        Directory.subfile.size=13262
        Directory.subfile.md5=F8CCECACF455195E9FF5067D20A9CB06
        Directory.subfile.filedate=1372843175
        Directory.subfile.filedatetext=2013-07-03 11:19:35
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.db
        Directory.subfile.size=920
        Directory.subfile.md5=9C78DF11E968D9DD10247231BE2CC2C7
        Directory.subfile.filedate=1372843176
        Directory.subfile.filedatetext=2013-07-03 11:19:36
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=9E44300746A04FC221381900153EFE3F
        Directory.subfile.filedate=1372843176
        Directory.subfile.filedatetext=2013-07-03 11:19:35
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.db
        Directory.subfile.size=872
        Directory.subfile.md5=21E8C7928D43A3B85ECBD4E1460EFF26
        Directory.subfile.filedate=1372843173
        Directory.subfile.filedatetext=2013-07-03 11:19:33
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.ico
        Directory.subfile.size=82726
        Directory.subfile.md5=5B186EA99E25E888A95A1D3931512287
        Directory.subfile.filedate=1372843173
        Directory.subfile.filedatetext=2013-07-03 11:19:32
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.db
        Directory.subfile.size=858
        Directory.subfile.md5=D94EFA5A58CF16DB847E542F69FD50E2
        Directory.subfile.filedate=1372843177
        Directory.subfile.filedatetext=2013-07-03 11:19:37
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=03CD38BE20AF6CB71874DAC6EE7A821C
        Directory.subfile.filedate=1372843177
        Directory.subfile.filedatetext=2013-07-03 11:19:36
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.db
        Directory.subfile.size=764
        Directory.subfile.md5=10E74A23CA1F759991A6EDF3859BC717
        Directory.subfile.filedate=1372843179
        Directory.subfile.filedatetext=2013-07-03 11:19:38
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.ico
        Directory.subfile.size=15086
        Directory.subfile.md5=CCBD925EF735C7946F36FE67E63C17B3
        Directory.subfile.filedate=1372843178
        Directory.subfile.filedatetext=2013-07-03 11:19:38

        Elex.Desk365: [SBI $9BC51D3A] Configuration file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
        Properties.size=1434
        Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $8D473845] Configuration file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
        Properties.size=17864
        Properties.md5=8FE5F08FC542B868EDB34E79E4F148EF
        Properties.filedate=1372852378
        Properties.filedatetext=2013-07-03 13:52:58

        Elex.Desk365: [SBI $C29E5543] Configuration file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
        Properties.size=82
        Properties.md5=88D6F5361B4990FFF5192E7FEBAD7143
        Properties.filedate=1372852299
        Properties.filedatetext=2013-07-03 13:51:39

        Elex.Desk365: [SBI $3C87FAD7] Configuration file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
        Properties.size=220
        Properties.md5=0FBAFD0F852466354337E54EEF679AC2
        Properties.filedate=1372852456
        Properties.filedatetext=2013-07-03 13:54:15

        Elex.Desk365: [SBI $DF805F27] Configuration file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
        Properties.size=5926
        Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $9E0CDB3D] Program directory (Directory, nothing done)
        C:\Program Files (x86)\Desk 365\
        Directory.subfile=C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
        Directory.subfile.size=1434
        Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Program Files (x86)\Desk 365\desk_list.xml
        Directory.subfile.size=312
        Directory.subfile.md5=59F9E2248D06B0E2F98514F3181AA08C
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Program Files (x86)\Desk 365\desk_settings.ini
        Directory.subfile.size=80
        Directory.subfile.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Program Files (x86)\Desk 365\process_mgr.xml
        Directory.subfile.size=220
        Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Program Files (x86)\Desk 365\promote.xml
        Directory.subfile.size=5926
        Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53
        Directory.subfile=C:\Program Files (x86)\Desk 365\recent.xml
        Directory.subfile.size=200
        Directory.subfile.md5=4B021AF446161B9B0696D14C0A94A321
        Directory.subfile.filedate=1372843133
        Directory.subfile.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $9673464D] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
        Properties.size=1434
        Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $CD3F2E88] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\desk_list.xml
        Properties.size=312
        Properties.md5=59F9E2248D06B0E2F98514F3181AA08C
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $CF280E34] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\desk_settings.ini
        Properties.size=80
        Properties.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $B607A6FD] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\process_mgr.xml
        Properties.size=220
        Properties.md5=0FBAFD0F852466354337E54EEF679AC2
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $A50DD4C3] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\promote.xml
        Properties.size=5926
        Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $55641D0D] Configuration file (File, nothing done)
        C:\Program Files (x86)\Desk 365\recent.xml
        Properties.size=200
        Properties.md5=4B021AF446161B9B0696D14C0A94A321
        Properties.filedate=1372843133
        Properties.filedatetext=2013-07-03 11:18:53

        Elex.Desk365: [SBI $C12C031F] Program directory (Directory, nothing done)
        C:\Program Files (x86)\Common Files\337\
        Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\icudt.dll
        Directory.subfile.size=9962568
        Directory.subfile.md5=3C9DBA4666B11E993AAEC89064340310
        Directory.subfile.filedate=1365477135
        Directory.subfile.filedatetext=2013-04-09 05:12:15
        Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\libcef.dll
        Directory.subfile.size=24984648
        Directory.subfile.md5=BD1ADEAB6F31A4FCF3279A6D9BD89278
        Directory.subfile.filedate=1365477137
        Directory.subfile.filedatetext=2013-04-09 05:12:17
        Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales\en-US.pak
        Directory.subfile.size=2898
        Directory.subfile.md5=D171F4787659D87D3B354270F2CCF3FD
        Directory.subfile.filedate=1365473635
        Directory.subfile.filedatetext=2013-04-09 04:13:54

        Systweak.RegCleanPro: [SBI $A53DF47E] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
        Directory.subfile.size=50140
        Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
        Directory.subfile.filedate=1380181133
        Directory.subfile.filedatetext=2013-09-26 09:38:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
        Directory.subfile.size=18710
        Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
        Directory.subfile.filedate=1380181133
        Directory.subfile.filedatetext=2013-09-26 09:38:53

        Systweak.RegCleanPro: [SBI $80041D24] Program directory (Directory, nothing done)
        C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
        Directory.subfile.size=50140
        Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
        Directory.subfile.filedate=1380181133
        Directory.subfile.filedatetext=2013-09-26 09:38:53
        Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
        Directory.subfile.size=18710
        Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
        Directory.subfile.filedate=1380181133
        Directory.subfile.filedatetext=2013-09-26 09:38:53

        Systweak.RegCleanPro: [SBI $B5F5AABB] Program directory (Directory, nothing done)
        C:\Program Files (x86)\RegClean Pro\
        Directory.subfile=C:\Program Files (x86)\RegClean Pro\install_left_image.bmp
        Directory.subfile.size=156296
        Directory.subfile.md5=78BAF9FF8AA0F67D1BAEBB292D8429FE
        Directory.subfile.filedate=1347881266
        Directory.subfile.filedatetext=2012-09-17 13:27:46
        Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.dat
        Directory.subfile.size=60863
        Directory.subfile.md5=509990D0870F5ECAB867B068E96A1755
        Directory.subfile.filedate=1380181018
        Directory.subfile.filedatetext=2013-09-26 09:36:58
        Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.msg
        Directory.subfile.size=28783
        Directory.subfile.md5=5EB9758F0F53EDF4FCACDD2BD31F7AE6
        Directory.subfile.filedate=1380181018
        Directory.subfile.filedatetext=2013-09-26 09:36:57

        myPCBackup: [SBI $BE3057E0] Program directory (Directory, nothing done)
        C:\Program Files (x86)\MyPC Backup\
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\aff.conf
        Directory.subfile.size=102
        Directory.subfile.md5=9F4C693F76335096E0578ED13D4CDC1A
        Directory.subfile.filedate=1363086208
        Directory.subfile.filedatetext=2013-03-12 13:03:28
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\de_DE.mo
        Directory.subfile.size=44491
        Directory.subfile.md5=DBDEC3376419EB64DE27333DA2297458
        Directory.subfile.filedate=1379629950
        Directory.subfile.filedatetext=2013-09-20 00:32:30
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\es_ES.mo
        Directory.subfile.size=44977
        Directory.subfile.md5=6B3615B8CED981B75652112F70FCF342
        Directory.subfile.filedate=1379629950
        Directory.subfile.filedatetext=2013-09-20 00:32:30
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\fr_FR.mo
        Directory.subfile.size=45483
        Directory.subfile.md5=BC313E08C18B049684DDB423F7EB6596
        Directory.subfile.filedate=1379629950
        Directory.subfile.filedatetext=2013-09-20 00:32:30
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\it_IT.mo
        Directory.subfile.size=43717
        Directory.subfile.md5=7779773C211CE2D1636B3A42244E9C6E
        Directory.subfile.filedate=1379629950
        Directory.subfile.filedatetext=2013-09-20 00:32:30
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\pt_PT.mo
        Directory.subfile.size=39751
        Directory.subfile.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
        Directory.subfile.filedate=1379629950
        Directory.subfile.filedatetext=2013-09-20 00:32:30
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
        Directory.subfile.size=16384
        Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
        Directory.subfile.size=7168
        Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
        Directory.subfile.size=13312
        Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
        Directory.subfile.size=9216
        Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
        Directory.subfile.filedate=1380181150
        Directory.subfile.filedatetext=2013-09-26 09:39:10
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
        Directory.subfile.size=6144
        Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34

        myPCBackup: [SBI $6F31F5C9] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\aff.conf
        Properties.size=102
        Properties.md5=9F4C693F76335096E0578ED13D4CDC1A
        Properties.filedate=1363086208
        Properties.filedatetext=2013-03-12 13:03:28

        myPCBackup: [SBI $81109B34] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\de_DE.mo
        Properties.size=44491
        Properties.md5=DBDEC3376419EB64DE27333DA2297458
        Properties.filedate=1379629950
        Properties.filedatetext=2013-09-20 00:32:30

        myPCBackup: [SBI $0843065C] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\es_ES.mo
        Properties.size=44977
        Properties.md5=6B3615B8CED981B75652112F70FCF342
        Properties.filedate=1379629950
        Properties.filedatetext=2013-09-20 00:32:30

        myPCBackup: [SBI $46906119] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\fr_FR.mo
        Properties.size=45483
        Properties.md5=BC313E08C18B049684DDB423F7EB6596
        Properties.filedate=1379629950
        Properties.filedatetext=2013-09-20 00:32:30

        myPCBackup: [SBI $2150E03A] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\it_IT.mo
        Properties.size=43717
        Properties.md5=7779773C211CE2D1636B3A42244E9C6E
        Properties.filedate=1379629950
        Properties.filedatetext=2013-09-20 00:32:30

        myPCBackup: [SBI $05EA4743] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\pt_PT.mo
        Properties.size=39751
        Properties.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
        Properties.filedate=1379629950
        Properties.filedatetext=2013-09-20 00:32:30

        myPCBackup: [SBI $5C7A6B4B] Program directory (Directory, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
        Directory.subfile.size=16384
        Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
        Directory.subfile.size=7168
        Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
        Directory.subfile.size=13312
        Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
        Directory.subfile.size=9216
        Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
        Directory.subfile.filedate=1380181150
        Directory.subfile.filedatetext=2013-09-26 09:39:10
        Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
        Directory.subfile.size=6144
        Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
        Directory.subfile.filedate=1379629954
        Directory.subfile.filedatetext=2013-09-20 00:32:34

        myPCBackup: [SBI $AD6AB843] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
        Properties.size=16384
        Properties.md5=60FF608113FE7F661FF40DC274E2F662
        Properties.filedate=1379629954
        Properties.filedatetext=2013-09-20 00:32:34

        myPCBackup: [SBI $559CAEF6] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
        Properties.size=7168
        Properties.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
        Properties.filedate=1379629954
        Properties.filedatetext=2013-09-20 00:32:34

        myPCBackup: [SBI $B1463116] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
        Properties.size=13312
        Properties.md5=3BE52D1F03ADF742E6109ED33D5A2D90
        Properties.filedate=1379629954
        Properties.filedatetext=2013-09-20 00:32:34

        myPCBackup: [SBI $1D0A14D4] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
        Properties.size=9216
        Properties.md5=46831E52CAB92AF50258C8F1F3E74BDA
        Properties.filedate=1380181150
        Properties.filedatetext=2013-09-26 09:39:10

        myPCBackup: [SBI $FD4C0913] Data (File, nothing done)
        C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
        Properties.size=6144
        Properties.md5=1042BD894D67281E7EC0E1E73B9214D8
        Properties.filedate=1379629954
        Properties.filedatetext=2013-09-20 00:32:34

        Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\images-na.ssl-images-amazon.com\mercury.sol
        Properties.size=69
        Properties.md5=3FED42C2834BAB590DAEB7B6522AF1FC
        Properties.filedate=1374068724
        Properties.filedatetext=2013-07-17 15:45:24

        Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
        C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\localhost\FLVMediaPlayer.sol
        Properties.size=259
        Properties.md5=9DE666B62A0824E3E87819B9B8E5237E
        Properties.filedate=1375807595
        Properties.filedatetext=2013-08-06 18:46:34

        Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\TypedURLs

        Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
        HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

        Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

        Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
        HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

        MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Microsoft Management Console\Recent File List

        MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

        MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

        MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

        MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

        Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

        Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

        Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

        Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

        Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

        Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

        Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

        Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

        Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
        HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

        Cookie: [SBI $49804B54] Browser: Cookie (34) (Browser: Cookie, nothing done)

        Cache: [SBI $49804B54] Browser: Cache (1231) (Browser: Cache, nothing done)

        Historique: [SBI $49804B54] Browser: History (572) (Browser: History, nothing done)

        --- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

        2013-05-16 blindman.exe (2.1.18.151)
        2013-05-16 explorer.exe (2.1.18.177)
        2013-05-16 SDBootCD.exe (2.1.18.109)
        2013-05-16 SDCleaner.exe (2.1.18.110)
        2013-05-16 SDDelFile.exe (2.1.18.94)
        2013-06-18 SDDisableProxy.exe
        2013-05-16 SDFiles.exe (2.1.18.135)
        2013-03-20 SDFileScanHelper.exe (2.1.16.1)
        2013-05-16 SDFSSvc.exe (2.1.18.208)
        2013-05-16 SDHookHelper.exe (2.1.18.2)
        2013-05-16 SDHookInst32.exe (2.1.18.2)
        2013-05-16 SDHookInst64.exe (2.1.18.2)
        2013-05-16 SDImmunize.exe (2.1.18.130)
        2013-05-16 SDLogReport.exe (2.1.18.107)
        2013-05-16 SDOnAccess.exe (2.1.18.4)
        2013-05-16 SDPESetup.exe (2.1.18.3)
        2013-05-16 SDPEStart.exe (2.1.18.86)
        2013-05-16 SDPhoneScan.exe (2.1.18.28)
        2013-05-16 SDPRE.exe (2.1.18.22)
        2013-05-16 SDPrepPos.exe (2.1.18.10)
        2013-05-16 SDQuarantine.exe (2.1.18.103)
        2013-05-16 SDRootAlyzer.exe (2.1.18.116)
        2013-05-16 SDSBIEdit.exe (2.1.18.39)
        2013-05-16 SDScan.exe (2.1.18.177)
        2013-05-16 SDScript.exe (2.1.18.53)
        2013-05-16 SDSettings.exe (2.1.18.136)
        2013-05-16 SDShell.exe (2.1.18.2)
        2013-05-16 SDShred.exe (2.1.18.107)
        2013-05-16 SDSysRepair.exe (2.1.18.101)
        2013-05-16 SDTools.exe (2.1.18.150)
        2013-05-16 SDTray.exe (2.1.18.127)
        2013-05-16 SDUpdate.exe (2.1.18.91)
        2013-05-16 SDUpdSvc.exe (2.1.18.76)
        2013-05-16 SDWelcome.exe (2.1.18.129)
        2013-05-15 SDWSCSvc.exe (2.1.18.2)
        2013-06-19 spybotsd2-translation-frx.exe
        2013-09-30 unins000.exe (51.1052.0.0)
        1999-12-02 xcacls.exe
        2012-08-23 borlndmm.dll (10.0.2288.42451)
        2012-09-05 DelZip190.dll (1.9.0.107)
        2012-09-10 libeay32.dll (1.0.0.4)
        2012-09-10 libssl32.dll (1.
        1. Modérateur
          Désinstalle Spybot, il est dépassé et inefficace.
          Fais ce qui est demandé plus haut.
          1. Voici les résultats de Malware

            Malwarebytes Anti-Malware (Essai) 1.75.0.1300
            www.malwarebytes.org

            Version de la base de données: v2013.10.01.02

            Windows 8 x64 NTFS
            Internet Explorer 10.0.9200.16688
            Admin :: FRANCOIS [administrateur]

            Protection: Désactivé

            01.10.2013 10:07:19
            MBAM-log-2013-10-01 (10-27-19).txt

            Type d'examen: Examen rapide
            Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
            Options d'examen désactivées: P2P
            Elément(s) analysé(s): 201835
            Temps écoulé: 16 minute(s), 42 seconde(s)

            Processus mémoire détecté(s): 0
            (Aucun élément nuisible détecté)

            Module(s) mémoire détecté(s): 0
            (Aucun élément nuisible détecté)

            Clé(s) du Registre détectée(s): 5
            HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
            HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Aucune action effectuée.
            HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Aucune action effectuée.
            HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA} (PUP.Optional.WebCake.A) -> Aucune action effectuée.
            HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Aucune action effectuée.

            Valeur(s) du Registre détectée(s): 0
            (Aucun élément nuisible détecté)

            Elément(s) de données du Registre détecté(s): 0
            (Aucun élément nuisible détecté)

            Dossier(s) détecté(s): 2
            C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Aucune action effectuée.
            C:\Users\Admin\AppData\Local\Temp\ct2504091 (PUP.Optional.Conduit.A) -> Aucune action effectuée.

            Fichier(s) détecté(s): 1
            C:\Users\Admin\AppData\Roaming\Omiga Plus\wallpaper_components.exe (PUP.Optional.Desk365.A) -> Aucune action effectuée.

            (fin)
            1. Et voici le rapport d'ADwcleaner

              # AdwCleaner v3.006 - Rapport créé le 01/10/2013 à 10:42:35
              # Mis à jour le 01/10/2013 par Xplode
              # Système d'exploitation : Windows 8 (64 bits)
              # Nom d'utilisateur : Admin - FRANCOIS
              # Exécuté depuis : C:\Users\Admin\Downloads\adwcleaner.exe
              # Option : Nettoyer

              ***** [ Services ] *****

              Service Supprimé : omigaplussvc
              Service Supprimé : winzipersvc

              ***** [ Fichiers / Dossiers ] *****

              Dossier Supprimé : C:\ProgramData\BasicServe
              Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Omiga Plus
              Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
              Dossier Supprimé : C:\Program Files (x86)\BasicServe
              Dossier Supprimé : C:\Program Files (x86)\Omiga Plus
              Dossier Supprimé : C:\Program Files (x86)\WinZip Registry Optimizer
              Dossier Supprimé : C:\Program Files (x86)\WinZipper
              Dossier Supprimé : C:\Program Files (x86)\tuto4pc_fr_59
              Dossier Supprimé : C:\Users\Admin\AppData\Local\PackageAware
              Dossier Supprimé : C:\Users\Admin\AppData\Local\tuto4pc_fr_59
              Dossier Supprimé : C:\Users\Admin\AppData\Local\Temp\eIntaller
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\337
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Advanced System Protector
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Omiga Plus
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\pdfforge
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Systweak
              Dossier Supprimé : C:\Users\Admin\AppData\Roaming\WinZipper
              Fichier Supprimé : C:\Windows\System32\roboot64.exe
              Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage
              Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage-journal
              Fichier Supprimé : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser

              ***** [ Raccourcis ] *****

              Raccourci Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
              Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
              Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
              Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
              Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
              Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

              ***** [ Registre ] *****

              Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
              Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
              Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
              Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
              Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
              Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
              Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
              Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
              Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
              Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
              Clé Supprimée : HKCU\Software\Conduit
              Clé Supprimée : HKCU\Software\Delta
              Clé Supprimée : HKCU\Software\IGearSettings
              Clé Supprimée : HKCU\Software\powerpack
              Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
              Clé Supprimée : HKLM\Software\BasicServe
              Clé Supprimée : HKLM\Software\Delta
              Clé Supprimée : HKLM\Software\delta-homesSoftware
              Clé Supprimée : HKLM\Software\omigaplusSvc
              Clé Supprimée : HKLM\Software\portaldositesSoftware
              Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
              Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer

              ***** [ Navigateurs ] *****

              -\\ Internet Explorer v10.0.9200.16688

              Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
              Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
              Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
              Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
              Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

              -\\ Google Chrome v29.0.1547.76

              [ Fichier : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

              *************************

              AdwCleaner[R0].txt - [7532 octets] - [01/10/2013 10:41:30]
              AdwCleaner[S0].txt - [4909 octets] - [01/10/2013 10:42:35]

              ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4969 octets] ##########
              1. Modérateur
                Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
                Fournir les deux rapports :

                Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

                * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
                (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

                Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

                * Lance OTL
                * En haut à droite de Analyse rapide, coche "tous les utilisateurs"
                * Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :

                netsvcs
                msconfig
                safebootminimal
                safebootnetwork
                activex
                drivers32
                %ALLUSERSPROFILE%\Application Data\*.
                %ALLUSERSPROFILE%\Application Data\*.exe /s
                %APPDATA%\*.
                %APPDATA%\*.exe /s
                %temp%\*.exe /s
                %SYSTEMDRIVE%\*.exe
                %systemroot%\*. /mp /s
                %systemroot%\system32\consrv.dll
                %systemroot%\system32\*.dll /lockedfiles
                %windir%\Tasks\*.job /lockedfiles
                %systemroot%\system32\drivers\*.sys /lockedfiles
                %systemroot%\System32\config\*.sav
                /md5start
                explorer.exe
                winlogon.exe
                services.exe
                wininit.exe
                /md5stop
                HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
                HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
                HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
                HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
                CREATERESTOREPOINT
                nslookup https://www.google.fr/?gws_rd=ssl /c
                SAVEMBR:0
                hklm\software\clients\startmenuinternet|command /rs
                hklm\software\clients\startmenuinternet|command /64 /rs

                * Clique sur le bouton Analyse.

                * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
                Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
                Je répète : donne le lien du rapport pjjoint ici en réponse.

                NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE