Delta search

Fermé
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013 - 30 sept. 2013 à 19:31
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 1 oct. 2013 à 16:42
Bonsoir,

Windows 8, google chrome.

Mon ordinateur a été infecté par delta-search, j'ai lancé Spybot et cela semble avoir éradiqué le problème. J'ai aussi procédé à la plupart des manipulations pour remettre une nouvelle page d'accueil sur google chrome, mais mon navigateur s'ouvre obstinément sur delta-homes.com, alors que dans les paramètres, partout où il est possible et indiqué de supprimer delta-homes, je l'ai fait.

Je ne sais comment résoudre ce problème,

Merci de votre aide.

François
A voir également:

9 réponses

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 662
30 sept. 2013 à 19:32
Salut,

Tu as des adwares sur ton PC.
Passe ces deux programmes dans l'ordre.
Lis bien les instructions, clics sur les liens et lis bien aussi.
Prends ton temps.

Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
!!! Malwarebyte doit être à jour avant de faire le scan !!!
Coche tout en faisant un clic droit / cocher tout
puis bouton supprimer sélection pour tout supprimer.

puis :

Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Une fois le scan terminé, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


0
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013
30 sept. 2013 à 19:34
Je te remercie, mais j'ai déjà fait tout ça. La seule manip qu'il me reste à faire, c'est de reparamétrer la page d'accueil de google chrome.
0
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013
30 sept. 2013 à 19:35
Voici le rapport de Spybot

Search results from Spybot - Search & Destroy

30.09.2013 16:52:23
Scan took 01:21:10.
90 items found.

Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
C:\ProgramData\Babylon\

Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Roaming\Babylon\
Directory.subfile=C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
Directory.subfile.size=6305
Directory.subfile.md5=776AFBAB9611C38820B39C324294F09B
Directory.subfile.filedate=1380181074
Directory.subfile.filedatetext=2013-09-26 09:37:53

Babylon.Toolbar: [SBI $0C3B54D0] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Local\Babylon\
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab098.claroico.zpb
Directory.subfile.size=953
Directory.subfile.md5=4D86B379CE2451BE0B96CD9E8761F4C2
Directory.subfile.filedate=1380181031
Directory.subfile.filedatetext=2013-09-26 09:37:11
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab138.deltatb_dmn.zpb
Directory.subfile.size=250
Directory.subfile.md5=E3F94911F62443BB76C2A71BFF1B5D5B
Directory.subfile.filedate=1380181031
Directory.subfile.filedatetext=2013-09-26 09:37:10
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab149.spreg.zpb
Directory.subfile.size=299
Directory.subfile.md5=57DB174831D94469C02C82964D6512F4
Directory.subfile.filedate=1380181031
Directory.subfile.filedatetext=2013-09-26 09:37:11
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab457.TB_NewWay.dat
Directory.subfile.size=173
Directory.subfile.md5=16ABCACBDC0476A21299C697CA66AE90
Directory.subfile.filedate=1380181031
Directory.subfile.filedatetext=2013-09-26 09:37:10
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\BUsolution_vt.zpb
Directory.subfile.size=199480
Directory.subfile.md5=48A9BB985DE97EDEC9CB0536FE80A204
Directory.subfile.filedate=1380181033
Directory.subfile.filedatetext=2013-09-26 09:37:13
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\GUninstaller_cat.zpb
Directory.subfile.size=8192
Directory.subfile.md5=58152EC9407C504348AFBD01EE5F490E
Directory.subfile.filedate=1380181064
Directory.subfile.filedatetext=2013-09-26 09:37:43
Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\latest.zpb
Directory.subfile.size=361398
Directory.subfile.md5=E6F2BE96E7308C5DC48B9E7B65146424
Directory.subfile.filedate=1380181027
Directory.subfile.filedatetext=2013-09-26 09:37:07

Delta.Toolbar: [SBI $C87F6C5D] Data (File, nothing done)
C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
Properties.size=6305
Properties.md5=776AFBAB9611C38820B39C324294F09B
Properties.filedate=1380181074
Properties.filedatetext=2013-09-26 09:37:53

Delta.Toolbar: [SBI $85F92549] User settings (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\BabSolution

Delta.Toolbar: [SBI $4FE1D2EF] User settings (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Delta.Toolbar: [SBI $1E0125E9] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Delta

Pricepeep: [SBI $7B1A2903] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\
Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\background.html
Directory.subfile.size=784
Directory.subfile.md5=BA82642D3A033B95C4D7F324D84ED104
Directory.subfile.filedate=1350059368
Directory.subfile.filedatetext=2012-10-12 18:29:28
Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\manifest.json
Directory.subfile.size=824
Directory.subfile.md5=1B864E2A2F5C2E224BCEAD091501977C
Directory.subfile.filedate=1377894700
Directory.subfile.filedatetext=2013-08-30 22:31:40

WebCake.BHO: [SBI $FDE5A161] Class ID (Registry Key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}

WebCake.BHO: [SBI $3F53FBE0] Class ID (Registry Key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

WebCake.BHO: [SBI $8048C96E] Interface (Registry Key, nothing done)
HKEY_CLASSES_ROOT\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}

WebCake.BHO: [SBI $7BEA5F33] Interface (Registry Key, nothing done)
HKEY_CLASSES_ROOT\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}

WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

WebCake.BHO: [SBI $2698E3E6] Program directory (Directory, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\
Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
Directory.subfile.size=56017
Directory.subfile.md5=711EF3CDC4EB735A562F4E277328EB0B
Directory.subfile.filedate=1372843124
Directory.subfile.filedatetext=2013-07-03 11:18:43
Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
Directory.subfile.size=227984
Directory.subfile.md5=5A8222C703B4A34F2227A652A49A2827
Directory.subfile.filedate=1299814153
Directory.subfile.filedatetext=2011-03-11 05:29:12
Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
Directory.subfile.size=4846
Directory.subfile.md5=60E3EF9326E8C3F574A2C7B5A31FD895
Directory.subfile.filedate=1258611124
Directory.subfile.filedatetext=2009-11-19 08:12:03
Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
Directory.subfile.size=531968
Directory.subfile.md5=E1416C9C40FD81557795D4195FB48E8D
Directory.subfile.filedate=1368563125
Directory.subfile.filedatetext=2013-05-14 22:25:25
Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
Directory.subfile.size=273408
Directory.subfile.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
Directory.subfile.filedate=1368563125
Directory.subfile.filedatetext=2013-05-14 22:25:24

WebCake.BHO: [SBI $885FF297] Library (File, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
Properties.size=531968
Properties.md5=E1416C9C40FD81557795D4195FB48E8D
Properties.filedate=1368563125
Properties.filedatetext=2013-05-14 22:25:25

WebCake.BHO: [SBI $0A5B161A] Library (File, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
Properties.size=273408
Properties.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
Properties.filedate=1368563125
Properties.filedatetext=2013-05-14 22:25:24

WebCake.BHO: [SBI $1107F102] Data (File, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
Properties.size=56017
Properties.md5=711EF3CDC4EB735A562F4E277328EB0B
Properties.filedate=1372843124
Properties.filedatetext=2013-07-03 11:18:43

WebCake.BHO: [SBI $E98B8D0E] Executable (File, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
Properties.size=227984
Properties.md5=5A8222C703B4A34F2227A652A49A2827
Properties.filedate=1299814153
Properties.filedatetext=2011-03-11 05:29:12

WebCake.BHO: [SBI $370B837B] Picture (File, nothing done)
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
Properties.size=4846
Properties.md5=60E3EF9326E8C3F574A2C7B5A31FD895
Properties.filedate=1258611124
Properties.filedatetext=2009-11-19 08:12:03

Win32.Agent.qvo: [SBI $C32FED7D] Settings (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Win32.Agent.qvo: [SBI $37F0341B] Settings (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope

Banyan.eSafe: [SBI $320096C0] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\eSafeSecControl

Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

Banyan.eSafe: [SBI $043C19FB] Program directory (Directory, nothing done)
C:\ProgramData\eSafe\
Directory.subfile=C:\ProgramData\eSafe\temp_000.exe
Directory.subfile.size=178176
Directory.subfile.md5=1BAAF5819FD346B34E21056B33EA8D18
Directory.subfile.filedate=1380272657
Directory.subfile.filedatetext=2013-09-27 11:04:17
Directory.subfile=C:\ProgramData\eSafe\log\eGdpSvc.LOG
Directory.subfile.size=287982
Directory.subfile.md5=DB6184A472CB8111008214E170C0640A
Directory.subfile.filedate=1380540428
Directory.subfile.filedatetext=2013-09-30 13:27:07
Directory.subfile=C:\ProgramData\eSafe\log\eSafeSvc.LOG
Directory.subfile.size=73172
Directory.subfile.md5=8442FA73416C352FCE12DC22220944B8
Directory.subfile.filedate=1377350508
Directory.subfile.filedatetext=2013-08-24 15:21:48

Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

Banyan.eSafe: [SBI $E00BC7C6] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Roaming\eIntaller\
Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Config.ini
Directory.subfile.size=220
Directory.subfile.md5=02C84EFB774471CB8BA8B60487266AF6
Directory.subfile.filedate=1372843126
Directory.subfile.filedatetext=2013-07-03 11:18:45
Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Desk365.exe
Directory.subfile.size=4356176
Directory.subfile.md5=EE1A1AA7D1E5190FBF4C6618A47A0D3C
Directory.subfile.filedate=1369820333
Directory.subfile.filedatetext=2013-05-29 11:38:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
Directory.subfile.size=361536
Directory.subfile.md5=7D8DD3520A5B113A248B4867492E7DFE
Directory.subfile.filedate=1372843115
Directory.subfile.filedatetext=2013-07-03 11:18:34
Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
Directory.subfile.size=718392
Directory.subfile.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
Directory.subfile.filedate=1372843116
Directory.subfile.filedatetext=2013-07-03 11:18:35

Banyan.eSafe: [SBI $F391D360] Executable (File, nothing done)
C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
Properties.size=361536
Properties.md5=7D8DD3520A5B113A248B4867492E7DFE
Properties.filedate=1372843115
Properties.filedatetext=2013-07-03 11:18:34

Banyan.eSafe: [SBI $5C7F4E30] Executable (File, nothing done)
C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
Properties.size=718392
Properties.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
Properties.filedate=1372843116
Properties.filedatetext=2013-07-03 11:18:35

Elex.Desk365: [SBI $C6008D91] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\deskSvc

Elex.Desk365: [SBI $487B5F3A] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\V9

Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

Elex.Desk365: [SBI $5898CD7C] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\accelerate
Directory.subfile.size=0
Directory.subfile.md5=D41D8CD98F00B204E9800998ECF8427E
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
Directory.subfile.size=1434
Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
Directory.subfile.size=17864
Directory.subfile.md5=8FE5F08FC542B868EDB34E79E4F148EF
Directory.subfile.filedate=1372852378
Directory.subfile.filedatetext=2013-07-03 13:52:58
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
Directory.subfile.size=82
Directory.subfile.md5=88D6F5361B4990FFF5192E7FEBAD7143
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
Directory.subfile.size=220
Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
Directory.subfile.filedate=1372852456
Directory.subfile.filedatetext=2013-07-03 13:54:15
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
Directory.subfile.size=5926
Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\components\libcef_1.1364_wallpaper.exe
Directory.subfile.size=10434864
Directory.subfile.md5=8E390845A88CB1E0406CE350F570CF4B
Directory.subfile.filedate=1375536902
Directory.subfile.filedatetext=2013-08-03 15:35:02
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png
Directory.subfile.size=79965
Directory.subfile.md5=39CB48E50C1687943D9D8243534A978C
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png
Directory.subfile.size=262007
Directory.subfile.md5=600C71AC313C6D8CB86C8DBF97808CB2
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png
Directory.subfile.size=109761
Directory.subfile.md5=35361BC157F356FA8B05238790C70C1E
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png
Directory.subfile.size=311068
Directory.subfile.md5=472564D9BE514897A479679A16AF6295
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png
Directory.subfile.size=201084
Directory.subfile.md5=7BA3473A9526CDB3680E823C3823AA0C
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png
Directory.subfile.size=2031
Directory.subfile.md5=F5B39121E867C9936CCB6268837A1894
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png
Directory.subfile.size=3290
Directory.subfile.md5=1FFB97EEB780E007976D68A7F5686DC9
Directory.subfile.filedate=1372843180
Directory.subfile.filedatetext=2013-07-03 11:19:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png
Directory.subfile.size=3497
Directory.subfile.md5=0CF32AB908FB25D8B4E6FE6C70B75AF4
Directory.subfile.filedate=1372843170
Directory.subfile.filedatetext=2013-07-03 11:19:30
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png
Directory.subfile.size=6461
Directory.subfile.md5=9BC9C146C55E228248D47D1F57E82A19
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png
Directory.subfile.size=6249
Directory.subfile.md5=8760281CEE9AA98F2C35BAE2B5A573E9
Directory.subfile.filedate=1372843172
Directory.subfile.filedatetext=2013-07-03 11:19:31
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866.ico
Directory.subfile.size=55773
Directory.subfile.md5=C8C9AFE271500BBD9B5C29E86DB8EF66
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866_48_48.png
Directory.subfile.size=3862
Directory.subfile.md5=0945506ECF06B297C1E1BB878CFAE522
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png
Directory.subfile.size=4447
Directory.subfile.md5=5168E91605FEC4DB1278876CF6756E2E
Directory.subfile.filedate=1372843173
Directory.subfile.filedatetext=2013-07-03 11:19:33
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png
Directory.subfile.size=1684
Directory.subfile.md5=0DAE331466C7319B010839EC73D1EC53
Directory.subfile.filedate=1372843176
Directory.subfile.filedatetext=2013-07-03 11:19:36
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png
Directory.subfile.size=2953
Directory.subfile.md5=17025BF4A3A47BD39A43116D4EF7184C
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png
Directory.subfile.size=1680
Directory.subfile.md5=B25C97B3D39D2495822D4C6E018654CA
Directory.subfile.filedate=1372843177
Directory.subfile.filedatetext=2013-07-03 11:19:37
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png
Directory.subfile.size=1648
Directory.subfile.md5=E541CE7DF52E638E155AC01E7B9FD208
Directory.subfile.filedate=1372843174
Directory.subfile.filedatetext=2013-07-03 11:19:34
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png
Directory.subfile.size=5533
Directory.subfile.md5=2535026BCE2154C641326114F5AE9030
Directory.subfile.filedate=1372843182
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431.ico
Directory.subfile.size=82151
Directory.subfile.md5=12CE4FAE05C5CC52955D83002528FD53
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_16_16.png
Directory.subfile.size=1022
Directory.subfile.md5=CEAD53A3CF9401B25986A3134ABCDB25
Directory.subfile.filedate=1372852378
Directory.subfile.filedatetext=2013-07-03 13:52:58
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_48_48.png
Directory.subfile.size=5017
Directory.subfile.md5=BD2620F7B9CEDC486EA7EFC2F7213259
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png
Directory.subfile.size=7408
Directory.subfile.md5=7D347C69736BC249D0ADBAF0D0125910
Directory.subfile.filedate=1372843180
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png
Directory.subfile.size=996
Directory.subfile.md5=656E676249500A92897729EB7B70C356
Directory.subfile.filedate=1372843175
Directory.subfile.filedatetext=2013-07-03 11:19:35
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png
Directory.subfile.size=1520
Directory.subfile.md5=7A32F8A7144F199235F14363BD02F945
Directory.subfile.filedate=1372843179
Directory.subfile.filedatetext=2013-07-03 11:19:38
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_20_20.png
Directory.subfile.size=1038
Directory.subfile.md5=EFF0ED9BC240BAB196054F0D483B83A5
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png
Directory.subfile.size=4991
Directory.subfile.md5=9F708E9B2ACF92AA17B24AE420D2FC54
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_20_20.png
Directory.subfile.size=1186
Directory.subfile.md5=93DCE65B5F7C0B56E853ACCA19420160
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png
Directory.subfile.size=4391
Directory.subfile.md5=2B2A6EA0D1C20B414BDD0C64016CFBA9
Directory.subfile.filedate=1372843163
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_downloads_20_20.png
Directory.subfile.size=1232
Directory.subfile.md5=1DF9CFE13710E20768B1F595420248C8
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_20_20.png
Directory.subfile.size=1039
Directory.subfile.md5=FFBF4646D56E393DC4555B34F67E30BF
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png
Directory.subfile.size=3942
Directory.subfile.md5=5F52AC5DA5722CC7F770D5D6BA036B4D
Directory.subfile.filedate=1372843163
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png
Directory.subfile.size=3627
Directory.subfile.md5=6D0D3DB3615E9C65A500AF0459E85576
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png
Directory.subfile.size=4445
Directory.subfile.md5=B8A981866E83CE33B3142FF25988AB5F
Directory.subfile.filedate=1372843182
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337.ico
Directory.subfile.size=15086
Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico
Directory.subfile.size=15086
Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
Directory.subfile.filedate=1372843180
Directory.subfile.filedatetext=2013-07-03 11:19:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\barbie.ico
Directory.subfile.size=15086
Directory.subfile.md5=690F18A933D2602125041B2613992063
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico
Directory.subfile.size=15086
Directory.subfile.md5=690F18A933D2602125041B2613992063
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\facebook.ico
Directory.subfile.size=13942
Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico
Directory.subfile.size=13942
Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\GameCenter.ico
Directory.subfile.size=13942
Directory.subfile.md5=C43C4159B62E4EAED3C7677902627806
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\google.ico
Directory.subfile.size=13942
Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico
Directory.subfile.size=13942
Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
Directory.subfile.filedate=1372843182
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\mario.ico
Directory.subfile.size=15086
Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico
Directory.subfile.size=15086
Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
Directory.subfile.filedate=1372843180
Directory.subfile.filedatetext=2013-07-03 11:19:40
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\twitter.ico
Directory.subfile.size=13942
Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico
Directory.subfile.size=13942
Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
Directory.subfile.filedate=1372843181
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\v9.ico
Directory.subfile.size=13942
Directory.subfile.md5=BD31640E318030A99D4E7A1228D9FC1F
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\youtube.ico
Directory.subfile.size=13942
Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico
Directory.subfile.size=13942
Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
Directory.subfile.filedate=1372843182
Directory.subfile.filedatetext=2013-07-03 11:19:41
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico
Directory.subfile.size=99567
Directory.subfile.md5=AA7F7C9CA7C2A3E8B33C99338E0020D3
Directory.subfile.filedate=1372843162
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico
Directory.subfile.size=79781
Directory.subfile.md5=F0CFA464CDD86350DAE8E1AC6E3A25C3
Directory.subfile.filedate=1372843163
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_175.ico
Directory.subfile.size=67173
Directory.subfile.md5=C99AAEDA16CD6524F2C26BCBDC93E4B3
Directory.subfile.filedate=1372852299
Directory.subfile.filedatetext=2013-07-03 13:51:39
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico
Directory.subfile.size=69998
Directory.subfile.md5=31136B37FF3DBBA78520FC3B258AD009
Directory.subfile.filedate=1372843163
Directory.subfile.filedatetext=2013-07-03 11:19:22
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r0.jpg
Directory.subfile.size=99071
Directory.subfile.md5=15C2EA420C382259DEE6FFE667C4CDFB
Directory.subfile.filedate=1372843164
Directory.subfile.filedatetext=2013-07-03 11:19:23
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r1.jpg
Directory.subfile.size=243668
Directory.subfile.md5=4BD08157F258A8A75AF71C14813A9086
Directory.subfile.filedate=1372843167
Directory.subfile.filedatetext=2013-07-03 11:19:27
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r2.jpg
Directory.subfile.size=260964
Directory.subfile.md5=076AAFD7232144885A3534225ADCDCFB
Directory.subfile.filedate=1372843165
Directory.subfile.filedatetext=2013-07-03 11:19:24
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r3.jpg
Directory.subfile.size=172184
Directory.subfile.md5=6FBE69DA6CABA36B5FDD460C249F841B
Directory.subfile.filedate=1372843171
Directory.subfile.filedatetext=2013-07-03 11:19:31
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r4.jpg
Directory.subfile.size=318950
Directory.subfile.md5=9D738AF8B31FDD8A4AB3B40E45E72499
Directory.subfile.filedate=1372843166
Directory.subfile.filedatetext=2013-07-03 11:19:25
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r5.jpg
Directory.subfile.size=291623
Directory.subfile.md5=CD8D2E43E865FB2E3DB840D955DAC545
Directory.subfile.filedate=1372843169
Directory.subfile.filedatetext=2013-07-03 11:19:28
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r6.jpg
Directory.subfile.size=280712
Directory.subfile.md5=C964E70AA09130459124EA9E9C22D6B3
Directory.subfile.filedate=1372843171
Directory.subfile.filedatetext=2013-07-03 11:19:31
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r7.jpg
Directory.subfile.size=242358
Directory.subfile.md5=6AE22A47C48A0A68B5A6AFBCC78B5FB7
Directory.subfile.filedate=1372843170
Directory.subfile.filedatetext=2013-07-03 11:19:29
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r8.jpg
Directory.subfile.size=256804
Directory.subfile.md5=1E2FC86580DA26DBBA3B8D5508F9AA9C
Directory.subfile.filedate=1372843167
Directory.subfile.filedatetext=2013-07-03 11:19:26
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r9.jpg
Directory.subfile.size=284621
Directory.subfile.md5=C35ACE7A53644846A2B8207F3337A5D3
Directory.subfile.filedate=1372843173
Directory.subfile.filedatetext=2013-07-03 11:19:32
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.db
Directory.subfile.size=994
Directory.subfile.md5=563B20129235DC021C75E63DC423AF8C
Directory.subfile.filedate=1372843170
Directory.subfile.filedatetext=2013-07-03 11:19:30
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico
Directory.subfile.size=15086
Directory.subfile.md5=04678F375785D80A9E22FF477C5417EF
Directory.subfile.filedate=1372843169
Directory.subfile.filedatetext=2013-07-03 11:19:28
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.db
Directory.subfile.size=890
Directory.subfile.md5=FEA225420438A0F53528FAE05E16A9E0
Directory.subfile.filedate=1372843172
Directory.subfile.filedatetext=2013-07-03 11:19:31
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico
Directory.subfile.size=82726
Directory.subfile.md5=91E58CABF6C3C530189E2B1031BEED59
Directory.subfile.filedate=1372843171
Directory.subfile.filedatetext=2013-07-03 11:19:31
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.db
Directory.subfile.size=778
Directory.subfile.md5=8D16FFFB1992D48E3CB4D8404C518723
Directory.subfile.filedate=1372843174
Directory.subfile.filedatetext=2013-07-03 11:19:34
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.ico
Directory.subfile.size=13262
Directory.subfile.md5=43E266FA15B8F01B425D381211A8791C
Directory.subfile.filedate=1372843174
Directory.subfile.filedatetext=2013-07-03 11:19:33
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.db
Directory.subfile.size=796
Directory.subfile.md5=8DE87696714794E2552896C853386EE7
Directory.subfile.filedate=1372843175
Directory.subfile.filedatetext=2013-07-03 11:19:35
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.ico
Directory.subfile.size=13262
Directory.subfile.md5=F8CCECACF455195E9FF5067D20A9CB06
Directory.subfile.filedate=1372843175
Directory.subfile.filedatetext=2013-07-03 11:19:35
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.db
Directory.subfile.size=920
Directory.subfile.md5=9C78DF11E968D9DD10247231BE2CC2C7
Directory.subfile.filedate=1372843176
Directory.subfile.filedatetext=2013-07-03 11:19:36
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.ico
Directory.subfile.size=15086
Directory.subfile.md5=9E44300746A04FC221381900153EFE3F
Directory.subfile.filedate=1372843176
Directory.subfile.filedatetext=2013-07-03 11:19:35
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.db
Directory.subfile.size=872
Directory.subfile.md5=21E8C7928D43A3B85ECBD4E1460EFF26
Directory.subfile.filedate=1372843173
Directory.subfile.filedatetext=2013-07-03 11:19:33
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.ico
Directory.subfile.size=82726
Directory.subfile.md5=5B186EA99E25E888A95A1D3931512287
Directory.subfile.filedate=1372843173
Directory.subfile.filedatetext=2013-07-03 11:19:32
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.db
Directory.subfile.size=858
Directory.subfile.md5=D94EFA5A58CF16DB847E542F69FD50E2
Directory.subfile.filedate=1372843177
Directory.subfile.filedatetext=2013-07-03 11:19:37
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico
Directory.subfile.size=15086
Directory.subfile.md5=03CD38BE20AF6CB71874DAC6EE7A821C
Directory.subfile.filedate=1372843177
Directory.subfile.filedatetext=2013-07-03 11:19:36
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.db
Directory.subfile.size=764
Directory.subfile.md5=10E74A23CA1F759991A6EDF3859BC717
Directory.subfile.filedate=1372843179
Directory.subfile.filedatetext=2013-07-03 11:19:38
Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.ico
Directory.subfile.size=15086
Directory.subfile.md5=CCBD925EF735C7946F36FE67E63C17B3
Directory.subfile.filedate=1372843178
Directory.subfile.filedatetext=2013-07-03 11:19:38

Elex.Desk365: [SBI $9BC51D3A] Configuration file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
Properties.size=1434
Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $8D473845] Configuration file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
Properties.size=17864
Properties.md5=8FE5F08FC542B868EDB34E79E4F148EF
Properties.filedate=1372852378
Properties.filedatetext=2013-07-03 13:52:58

Elex.Desk365: [SBI $C29E5543] Configuration file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
Properties.size=82
Properties.md5=88D6F5361B4990FFF5192E7FEBAD7143
Properties.filedate=1372852299
Properties.filedatetext=2013-07-03 13:51:39

Elex.Desk365: [SBI $3C87FAD7] Configuration file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
Properties.size=220
Properties.md5=0FBAFD0F852466354337E54EEF679AC2
Properties.filedate=1372852456
Properties.filedatetext=2013-07-03 13:54:15

Elex.Desk365: [SBI $DF805F27] Configuration file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
Properties.size=5926
Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $9E0CDB3D] Program directory (Directory, nothing done)
C:\Program Files (x86)\Desk 365\
Directory.subfile=C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
Directory.subfile.size=1434
Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Program Files (x86)\Desk 365\desk_list.xml
Directory.subfile.size=312
Directory.subfile.md5=59F9E2248D06B0E2F98514F3181AA08C
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Program Files (x86)\Desk 365\desk_settings.ini
Directory.subfile.size=80
Directory.subfile.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Program Files (x86)\Desk 365\process_mgr.xml
Directory.subfile.size=220
Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Program Files (x86)\Desk 365\promote.xml
Directory.subfile.size=5926
Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53
Directory.subfile=C:\Program Files (x86)\Desk 365\recent.xml
Directory.subfile.size=200
Directory.subfile.md5=4B021AF446161B9B0696D14C0A94A321
Directory.subfile.filedate=1372843133
Directory.subfile.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $9673464D] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
Properties.size=1434
Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $CD3F2E88] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\desk_list.xml
Properties.size=312
Properties.md5=59F9E2248D06B0E2F98514F3181AA08C
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $CF280E34] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\desk_settings.ini
Properties.size=80
Properties.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $B607A6FD] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\process_mgr.xml
Properties.size=220
Properties.md5=0FBAFD0F852466354337E54EEF679AC2
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $A50DD4C3] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\promote.xml
Properties.size=5926
Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $55641D0D] Configuration file (File, nothing done)
C:\Program Files (x86)\Desk 365\recent.xml
Properties.size=200
Properties.md5=4B021AF446161B9B0696D14C0A94A321
Properties.filedate=1372843133
Properties.filedatetext=2013-07-03 11:18:53

Elex.Desk365: [SBI $C12C031F] Program directory (Directory, nothing done)
C:\Program Files (x86)\Common Files\337\
Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\icudt.dll
Directory.subfile.size=9962568
Directory.subfile.md5=3C9DBA4666B11E993AAEC89064340310
Directory.subfile.filedate=1365477135
Directory.subfile.filedatetext=2013-04-09 05:12:15
Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\libcef.dll
Directory.subfile.size=24984648
Directory.subfile.md5=BD1ADEAB6F31A4FCF3279A6D9BD89278
Directory.subfile.filedate=1365477137
Directory.subfile.filedatetext=2013-04-09 05:12:17
Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales\en-US.pak
Directory.subfile.size=2898
Directory.subfile.md5=D171F4787659D87D3B354270F2CCF3FD
Directory.subfile.filedate=1365473635
Directory.subfile.filedatetext=2013-04-09 04:13:54

Systweak.RegCleanPro: [SBI $A53DF47E] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\
Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
Directory.subfile.size=50140
Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
Directory.subfile.filedate=1380181133
Directory.subfile.filedatetext=2013-09-26 09:38:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
Directory.subfile.size=18710
Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
Directory.subfile.filedate=1380181133
Directory.subfile.filedatetext=2013-09-26 09:38:53

Systweak.RegCleanPro: [SBI $80041D24] Program directory (Directory, nothing done)
C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\
Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
Directory.subfile.size=50140
Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
Directory.subfile.filedate=1380181133
Directory.subfile.filedatetext=2013-09-26 09:38:53
Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
Directory.subfile.size=18710
Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
Directory.subfile.filedate=1380181133
Directory.subfile.filedatetext=2013-09-26 09:38:53

Systweak.RegCleanPro: [SBI $B5F5AABB] Program directory (Directory, nothing done)
C:\Program Files (x86)\RegClean Pro\
Directory.subfile=C:\Program Files (x86)\RegClean Pro\install_left_image.bmp
Directory.subfile.size=156296
Directory.subfile.md5=78BAF9FF8AA0F67D1BAEBB292D8429FE
Directory.subfile.filedate=1347881266
Directory.subfile.filedatetext=2012-09-17 13:27:46
Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.dat
Directory.subfile.size=60863
Directory.subfile.md5=509990D0870F5ECAB867B068E96A1755
Directory.subfile.filedate=1380181018
Directory.subfile.filedatetext=2013-09-26 09:36:58
Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.msg
Directory.subfile.size=28783
Directory.subfile.md5=5EB9758F0F53EDF4FCACDD2BD31F7AE6
Directory.subfile.filedate=1380181018
Directory.subfile.filedatetext=2013-09-26 09:36:57

myPCBackup: [SBI $BE3057E0] Program directory (Directory, nothing done)
C:\Program Files (x86)\MyPC Backup\
Directory.subfile=C:\Program Files (x86)\MyPC Backup\aff.conf
Directory.subfile.size=102
Directory.subfile.md5=9F4C693F76335096E0578ED13D4CDC1A
Directory.subfile.filedate=1363086208
Directory.subfile.filedatetext=2013-03-12 13:03:28
Directory.subfile=C:\Program Files (x86)\MyPC Backup\de_DE.mo
Directory.subfile.size=44491
Directory.subfile.md5=DBDEC3376419EB64DE27333DA2297458
Directory.subfile.filedate=1379629950
Directory.subfile.filedatetext=2013-09-20 00:32:30
Directory.subfile=C:\Program Files (x86)\MyPC Backup\es_ES.mo
Directory.subfile.size=44977
Directory.subfile.md5=6B3615B8CED981B75652112F70FCF342
Directory.subfile.filedate=1379629950
Directory.subfile.filedatetext=2013-09-20 00:32:30
Directory.subfile=C:\Program Files (x86)\MyPC Backup\fr_FR.mo
Directory.subfile.size=45483
Directory.subfile.md5=BC313E08C18B049684DDB423F7EB6596
Directory.subfile.filedate=1379629950
Directory.subfile.filedatetext=2013-09-20 00:32:30
Directory.subfile=C:\Program Files (x86)\MyPC Backup\it_IT.mo
Directory.subfile.size=43717
Directory.subfile.md5=7779773C211CE2D1636B3A42244E9C6E
Directory.subfile.filedate=1379629950
Directory.subfile.filedatetext=2013-09-20 00:32:30
Directory.subfile=C:\Program Files (x86)\MyPC Backup\pt_PT.mo
Directory.subfile.size=39751
Directory.subfile.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
Directory.subfile.filedate=1379629950
Directory.subfile.filedatetext=2013-09-20 00:32:30
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
Directory.subfile.size=16384
Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
Directory.subfile.size=7168
Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
Directory.subfile.size=13312
Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
Directory.subfile.size=9216
Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
Directory.subfile.filedate=1380181150
Directory.subfile.filedatetext=2013-09-26 09:39:10
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
Directory.subfile.size=6144
Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34

myPCBackup: [SBI $6F31F5C9] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\aff.conf
Properties.size=102
Properties.md5=9F4C693F76335096E0578ED13D4CDC1A
Properties.filedate=1363086208
Properties.filedatetext=2013-03-12 13:03:28

myPCBackup: [SBI $81109B34] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\de_DE.mo
Properties.size=44491
Properties.md5=DBDEC3376419EB64DE27333DA2297458
Properties.filedate=1379629950
Properties.filedatetext=2013-09-20 00:32:30

myPCBackup: [SBI $0843065C] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\es_ES.mo
Properties.size=44977
Properties.md5=6B3615B8CED981B75652112F70FCF342
Properties.filedate=1379629950
Properties.filedatetext=2013-09-20 00:32:30

myPCBackup: [SBI $46906119] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\fr_FR.mo
Properties.size=45483
Properties.md5=BC313E08C18B049684DDB423F7EB6596
Properties.filedate=1379629950
Properties.filedatetext=2013-09-20 00:32:30

myPCBackup: [SBI $2150E03A] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\it_IT.mo
Properties.size=43717
Properties.md5=7779773C211CE2D1636B3A42244E9C6E
Properties.filedate=1379629950
Properties.filedatetext=2013-09-20 00:32:30

myPCBackup: [SBI $05EA4743] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\pt_PT.mo
Properties.size=39751
Properties.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
Properties.filedate=1379629950
Properties.filedatetext=2013-09-20 00:32:30

myPCBackup: [SBI $5C7A6B4B] Program directory (Directory, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
Directory.subfile.size=16384
Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
Directory.subfile.size=7168
Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
Directory.subfile.size=13312
Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
Directory.subfile.size=9216
Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
Directory.subfile.filedate=1380181150
Directory.subfile.filedatetext=2013-09-26 09:39:10
Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
Directory.subfile.size=6144
Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
Directory.subfile.filedate=1379629954
Directory.subfile.filedatetext=2013-09-20 00:32:34

myPCBackup: [SBI $AD6AB843] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
Properties.size=16384
Properties.md5=60FF608113FE7F661FF40DC274E2F662
Properties.filedate=1379629954
Properties.filedatetext=2013-09-20 00:32:34

myPCBackup: [SBI $559CAEF6] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
Properties.size=7168
Properties.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
Properties.filedate=1379629954
Properties.filedatetext=2013-09-20 00:32:34

myPCBackup: [SBI $B1463116] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
Properties.size=13312
Properties.md5=3BE52D1F03ADF742E6109ED33D5A2D90
Properties.filedate=1379629954
Properties.filedatetext=2013-09-20 00:32:34

myPCBackup: [SBI $1D0A14D4] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
Properties.size=9216
Properties.md5=46831E52CAB92AF50258C8F1F3E74BDA
Properties.filedate=1380181150
Properties.filedatetext=2013-09-26 09:39:10

myPCBackup: [SBI $FD4C0913] Data (File, nothing done)
C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
Properties.size=6144
Properties.md5=1042BD894D67281E7EC0E1E73B9214D8
Properties.filedate=1379629954
Properties.filedatetext=2013-09-20 00:32:34

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\images-na.ssl-images-amazon.com\mercury.sol
Properties.size=69
Properties.md5=3FED42C2834BAB590DAEB7B6522AF1FC
Properties.filedate=1374068724
Properties.filedatetext=2013-07-17 15:45:24

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\localhost\FLVMediaPlayer.sol
Properties.size=259
Properties.md5=9DE666B62A0824E3E87819B9B8E5237E
Properties.filedate=1375807595
Properties.filedatetext=2013-08-06 18:46:34

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Microsoft Management Console\Recent File List

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (34) (Browser: Cookie, nothing done)


Cache: [SBI $49804B54] Browser: Cache (1231) (Browser: Cache, nothing done)


Historique: [SBI $49804B54] Browser: History (572) (Browser: History, nothing done)



--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-06-18 SDDisableProxy.exe
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDHookInst64.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-05-16 SDTray.exe (2.1.18.127)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-05-16 SDWelcome.exe (2.1.18.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-19 spybotsd2-translation-frx.exe
2013-09-30 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.
0
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 662
30 sept. 2013 à 19:53
Désinstalle Spybot, il est dépassé et inefficace.
Fais ce qui est demandé plus haut.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013
1 oct. 2013 à 10:28
Voici les résultats de Malware

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.10.01.02

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16688
Admin :: FRANCOIS [administrateur]

Protection: Désactivé

01.10.2013 10:07:19
MBAM-log-2013-10-01 (10-27-19).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 201835
Temps écoulé: 16 minute(s), 42 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 5
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA} (PUP.Optional.WebCake.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Aucune action effectuée.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 2
C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Aucune action effectuée.
C:\Users\Admin\AppData\Local\Temp\ct2504091 (PUP.Optional.Conduit.A) -> Aucune action effectuée.

Fichier(s) détecté(s): 1
C:\Users\Admin\AppData\Roaming\Omiga Plus\wallpaper_components.exe (PUP.Optional.Desk365.A) -> Aucune action effectuée.

(fin)
0
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013
1 oct. 2013 à 10:46
Et voici le rapport d'ADwcleaner

# AdwCleaner v3.006 - Rapport créé le 01/10/2013 à 10:42:35
# Mis à jour le 01/10/2013 par Xplode
# Système d'exploitation : Windows 8 (64 bits)
# Nom d'utilisateur : Admin - FRANCOIS
# Exécuté depuis : C:\Users\Admin\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : omigaplussvc
Service Supprimé : winzipersvc

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\BasicServe
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Omiga Plus
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
Dossier Supprimé : C:\Program Files (x86)\BasicServe
Dossier Supprimé : C:\Program Files (x86)\Omiga Plus
Dossier Supprimé : C:\Program Files (x86)\WinZip Registry Optimizer
Dossier Supprimé : C:\Program Files (x86)\WinZipper
Dossier Supprimé : C:\Program Files (x86)\tuto4pc_fr_59
Dossier Supprimé : C:\Users\Admin\AppData\Local\PackageAware
Dossier Supprimé : C:\Users\Admin\AppData\Local\tuto4pc_fr_59
Dossier Supprimé : C:\Users\Admin\AppData\Local\Temp\eIntaller
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\337
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Advanced System Protector
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Omiga Plus
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\pdfforge
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users\Admin\AppData\Roaming\WinZipper
Fichier Supprimé : C:\Windows\System32\roboot64.exe
Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage
Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage-journal
Fichier Supprimé : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser

***** [ Raccourcis ] *****

Raccourci Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Registre ] *****

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\IGearSettings
Clé Supprimée : HKCU\Software\powerpack
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKLM\Software\BasicServe
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\Software\delta-homesSoftware
Clé Supprimée : HKLM\Software\omigaplusSvc
Clé Supprimée : HKLM\Software\portaldositesSoftware
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16688

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v29.0.1547.76

[ Fichier : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [7532 octets] - [01/10/2013 10:41:30]
AdwCleaner[S0].txt - [4909 octets] - [01/10/2013 10:42:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4969 octets] ##########
0
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 662
1 oct. 2013 à 10:48
Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :



netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\*.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\consrv.dll
%systemroot%\system32\*.dll /lockedfiles
%windir%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
services.exe
wininit.exe
/md5stop
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
CREATERESTOREPOINT
nslookup https://www.google.fr/?gws_rd=ssl /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs



* Clique sur le bouton Analyse.

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE


0
Wizz2010 Messages postés 6 Date d'inscription lundi 30 septembre 2013 Statut Membre Dernière intervention 1 octobre 2013
1 oct. 2013 à 16:03
0
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 662
1 oct. 2013 à 16:42
Plus de delta?
0