Virus ?

Bonjour à tous,

J'ai un problème, j'ai eu une page qui s'est affichée : sweet page. Après avoir navigué sur le site j'ai trouvé comment m'en débarrasser mais ça n'est pas suffisant apparemment.
Je pense que ce problème est dû à l'installation d'un codec pour windows media player mais je n'en suis pas sûre...

J'ai des mots de pages qui se mettent en liens hypertextes avec un carré vert et un flèche en exposant... Bizarre, lorsque l'on survole ces mots avec la souris : pub...

Je ne peux plus poster de message ou réponse sur un site demandant un lien avec facebook (votipets pour le nommer), c'est comme si j'étais déconnectée et une page blanche s'ouvre dans une nouvelle fenêtre.

J'ai vérifié, ce problème n'apparait que sur firefox mais c'est le seul navigateur que j'utilise donc c'est normal...

J'ai installé ccleaner, adblock plus et malwarebytes anit malware mais impossible de résoudre ce problème.

Qui peut m'aider ?

Merci d'avance.

Elodie

23 réponses

Résumé de la discussion

Une infection publicitaire se manifeste par l’affichage d’une page Sweet Page et des mots mis en liens hypertextes affichant un carré vert et une flèche en exposant, provoquant détournement et déconnexion sur certains sites. Le problème ne se produit que sous Firefox, les autres navigateurs n’étant pas affectés, et les hypothèses évoquent une coïncidence avec l’installation de codecs ou d’outils de type Windows Media Player. Plusieurs mesures ont été tentées, dont CCleaner, Adblock Plus et Malwarebytes, sans éliminer définitivement l’infection; une intervention plus approfondie via l’outil ZHPFix a identifié et supprimé de nombreuses traces, aboutissant à 0 élément détecté. En dernier recours, un rapport d’analyse détaillé et un lien vers le diagnostic ont été partagés, avec une mise en garde sur des scripts personnalisés et les risques lors de reproductions sur une autre machine.

Bobot (l’IA à votre service)
  1. Regardes dans tes extensions (plugins) si t'as pas de la cochonerie

    0
    1. peux-tu m'expliquer où je dois regarder exactement s'il te plait ?
      j'ai oublié de préciser que je suis sur windows 8.1
      0
      1. ça y est j'ai réussi, c'était plushd.8 qui était installé mais j'ai toujours le problème des commentaires avec le lien facebook/jooky/votipets...
        0
      2. Tu es sous chrome, firefox ou Internet Explorer ?
        0
      3. firefox, j'ai essayé sous ie, ça ne le fait pas...
        0
      4. Alors tu vas dans Outils (Si il n'est pas visible à l'écran appuis sur Alt)=> Modules complémentaires=> Plugins et supprimes les trucs qui ont l'air louche (Tout ce que tu ne connais pas, exepté Java & Flash Player)
        0
      5. oui merci c'est fait il n'y a plus rien dedans...
        0
    2. Contributeur sécurité
      Tu as dû installer des logiciels potentiellement indésirables

      Pour éviter ce genre de problème :

      - Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme O1net, Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.

      - Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.

      Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

      * Télécharge cet outil simple d'utilisation

      http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner (de Xplode) sur ton bureau.

      * Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

      * Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus

      * Cliques sur scanner
      * Poste le rapport de recherche C:\Adwcleaner[R]

      * Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]

      0
      1. bonjour Liliduhone et merci pour ta réponse,

        voici le rapport, j'avais déjà fait un nettoyage avec ce logiciel veux-tu l'ancien rapport ?

        celui d'aujourd'hui ça donne ça :

        # Exécuté depuis : C:\Users\Elodie\Downloads\adwcleaner-3.017.exe
        # Option : Scanner

        ***** [ Services ] *****

        ***** [ Fichiers / Dossiers ] *****

        Fichier Présent : C:\WINDOWS\System32\Tasks\NCH Software

        ***** [ Raccourcis ] *****

        ***** [ Registre ] *****

        ***** [ Navigateurs ] *****

        -\\ Internet Explorer v11.0.9600.16384

        -\\ Mozilla Firefox v26.0 (fr)

        [ Fichier : C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\2zwdiysg.default\prefs.js ]

        *************************

        AdwCleaner[R0].txt - [11137 octets] - [21/01/2014 23:51:59]
        AdwCleaner[R1].txt - [970 octets] - [23/01/2014 15:30:37]
        AdwCleaner[R2].txt - [830 octets] - [23/01/2014 15:36:43]
        AdwCleaner[S0].txt - [10236 octets] - [22/01/2014 00:02:17]
        AdwCleaner[S1].txt - [1031 octets] - [23/01/2014 15:33:35]

        ########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1010 octets] ##########

        que dois-je faire ?
        0
    3. Contributeur sécurité
      Passe à l'option nettoyer
      0
      1. voilà c'est fait l'ordi à redémarré, dois-je faire autre chose ?
        0
      2. sachant que mon problème de messages sur votipets/jooky est toujours d'actualité
        0
    4. Contributeur sécurité
      * Télécharge ZHPDiag (de Nicolas Coolman)
      https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

      * Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
      ftp://zebulon.fr/ZHPDiag2.exe

      * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

      * Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
      https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png

      * A l'ouverture du logiciel il te sera proposé deux options "rechercher" et "configurer"

      * Cliques sur configurer

      * Options puis tous

      * Clique sur l'icône représentant une loupe + (« Lancer le diagnostic »)

      * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette

      * Pour héberger le rapport, rends toi sur cjoint.com
      * Clique sur choisissez un fichier va chercher le rapport dans ton PC.

      * Le rapport est hébergé:
      - Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
      - Depuis Vista : C:\Users\username\AppData\Roaming\ZHP

      * Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

      * Choisis le type de diffusion(je te conseille privée 4 jours il sera détruit)

      * Puis cliques sur créer le lien cjoint

      * Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

      * Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

      0
    5. Contributeur sécurité
      Hello

      -Ton windows est t-il légal?
      -N'aurais pas tu essayé de cr*acker Office?

      Car tu as un logiciel permettant l'activation illégale!
      0
      1. ça m'a été installé par quelqu'un du quartier chinois c'est ça le problème ? parce que j'ai office 2007...
        0
      2. et mon windows 8.1 oui il est légal, j'ai un nouvel ordi avec windows 8 et j'ai fait l'installation de 8.1 sur la boutique windows qui est sur l'ordi
        0
    6. Contributeur sécurité
      Ok tu es honnête

      Désinstalles Office 2007 ;)

      0
      1. lol

        et sinon tu as vu quelque chose qui fait que j'ai ce problème récent sur firefox ? est-ce que ça ne serait pas un reste de sweet page ?
        0
    7. Contributeur sécurité
      Oui il y a des restes

      Je le sais que ton windows est légal

      Désinstalles K*M*Spico
      0
      1. ok et autre chose ?
        0
    8. Contributeur sécurité
      K*M*Snano 25 => tu connais ou pas?
      0
      1. je sais que KMS nano m'a été installé pour office mais je ne sais pas si c'est 25.... Si c'est le cas c'est installé depuis novembre et m'a jamais posé de provblème, le problème date d'il y a 3j... après ça peut mettre du temps à se déclarer, je ne suis pas une pro... ;)
        0
    9. Contributeur sécurité
      Désinstalles le
      0
      1. c'est fait
        0
      2. mais ça n'a rien changé
        0
    10. Contributeur sécurité
      Mets Malwarebytes à jour et lance un scan complet
      0
      1. ok je viens de le lancer, ça va prendre un peu de temps...
        0
    11. Contributeur sécurité
      * Télécharge http://www.archive-host.com SFTGC.exe
      (de Pierre13) sur ton Bureau.

      * Lance SFTGC, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista

      * Clique sur GO
      image http://img11.hostingpics.net/pics/122370401.png

      * Note : A la fin un rapport va s'ouvrir

      * Une fois le scan terminé rends toi sur le bureau, le fichier SFT.txt à été créé.

      * Héberge le rapport sur https://www.cjoint.com/ ==> Copie/colle la totalité du rapport SFT.txt dans ta prochaine réponse.
      0
      1. https://www.cjoint.com/?3AxvRtIUlX4

        Rapport de SFTGC (Pierre13) du Jeudi 23 Janvier 2014 à 21:42:42 version : 2.0.0.65
        Mis à jour le 22/01/2014
        Outil lancé en Mode normal et En tant qu'administrateur
        Windows 8.1 64 bits

        Tool start in C:\Users\Elodie\Downloads

        901 éléments supprimés => 66.82 Mo libérés. (57 s)

        C:\Users\Elodie\AppData\Local\Temp\01202352-00001b9c-37vjsglchv
        C:\Users\Elodie\AppData\Local\Temp\01202352-00001b9c-crlos2b1g1
        C:\Users\Elodie\AppData\Local\Temp\7B91B8A9-6E52-4031-A882-AB139DD2F5BC.Diagnose.Admin.0.etl
        C:\Users\Elodie\AppData\Local\Temp\acro_rd_dir
        C:\Users\Elodie\AppData\Local\Temp\adb.log
        C:\Users\Elodie\AppData\Local\Temp\AdobeARM.log
        C:\Users\Elodie\AppData\Local\Temp\AdwCleaner.jpg
        C:\Users\Elodie\AppData\Local\Temp\BackupSetup.exe
        C:\Users\Elodie\AppData\Local\Temp\Cleaning.ico
        C:\Users\Elodie\AppData\Local\Temp\CVR966.tmp.cvr
        C:\Users\Elodie\AppData\Local\Temp\CVRAAA2.tmp.cvr
        C:\Users\Elodie\AppData\Local\Temp\CVRBD9D.tmp.cvr
        C:\Users\Elodie\AppData\Local\Temp\CVRCE9A.tmp.cvr
        C:\Users\Elodie\AppData\Local\Temp\CVRD35A.tmp.cvr
        C:\Users\Elodie\AppData\Local\Temp\dd_vcredistMSI2B1E.txt
        C:\Users\Elodie\AppData\Local\Temp\dd_vcredistUI2B1E.txt
        C:\Users\Elodie\AppData\Local\Temp\DMI53EE.tmp
        C:\Users\Elodie\AppData\Local\Temp\Donate.ico
        C:\Users\Elodie\AppData\Local\Temp\eyes.jpg
        C:\Users\Elodie\AppData\Local\Temp\hsperfdata_Elodie
        C:\Users\Elodie\AppData\Local\Temp\JavaDeployReg.log
        C:\Users\Elodie\AppData\Local\Temp\jusched.log
        C:\Users\Elodie\AppData\Local\Temp\LCFEM
        C:\Users\Elodie\AppData\Local\Temp\Low
        C:\Users\Elodie\AppData\Local\Temp\MicroThemePackDir
        C:\Users\Elodie\AppData\Local\Temp\mpbtrk.log
        C:\Users\Elodie\AppData\Local\Temp\msdt
        C:\Users\Elodie\AppData\Local\Temp\msdtadmin
        C:\Users\Elodie\AppData\Local\Temp\msohtmlclip
        C:\Users\Elodie\AppData\Local\Temp\NitoPDF
        C:\Users\Elodie\AppData\Local\Temp\NitroPDFCache
        C:\Users\Elodie\AppData\Local\Temp\NitroSysFonts01.dat
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp
        C:\Users\Elodie\AppData\Local\Temp\nsqFFAE.tmp
        C:\Users\Elodie\AppData\Local\Temp\nsqFFAE.tmp.cnv
        C:\Users\Elodie\AppData\Local\Temp\plugtmp
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-1
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-2
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-4
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-5
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-6
        C:\Users\Elodie\AppData\Local\Temp\Quarantine.exe
        C:\Users\Elodie\AppData\Local\Temp\Report.ico
        C:\Users\Elodie\AppData\Local\Temp\Scan.ico
        C:\Users\Elodie\AppData\Local\Temp\StructuredQuery.log
        C:\Users\Elodie\AppData\Local\Temp\tempfile.t
        C:\Users\Elodie\AppData\Local\Temp\tmp-j5n.xpi
        C:\Users\Elodie\AppData\Local\Temp\Uninstall.ico
        C:\Users\Elodie\AppData\Local\Temp\VBE
        C:\Users\Elodie\AppData\Local\Temp\vcredist_x64.exe
        C:\Users\Elodie\AppData\Local\Temp\wct1543.tmp
        C:\Users\Elodie\AppData\Local\Temp\wctBED3.tmp
        C:\Users\Elodie\AppData\Local\Temp\wctEADE.tmp
        C:\Users\Elodie\AppData\Local\Temp\winstore.log
        C:\Users\Elodie\AppData\Local\Temp\_iu14D2N.tmp
        C:\Users\Elodie\AppData\Local\Temp\~DFA16911D1C9510947.TMP
        C:\Users\Elodie\AppData\Local\Temp\~DFCD7583E80027645A.TMP
        C:\Users\Elodie\AppData\Local\Temp\~DFFC5CDD75573592E7.TMP
        C:\Users\Elodie\AppData\Local\Temp\~nsu.tmp
        C:\Users\Elodie\AppData\Local\Temp\~nsu.tmp\Au_.exe
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--1
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--10
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--11
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--12
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--2
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--3
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--4
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--5
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--6
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--7
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--8
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin--9
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-1.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-10.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-11.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-12.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-13.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-2.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-3.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-4.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-5.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-6.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-7.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-8.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer-9.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-adServer.bs
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-bid-1.php
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-bid-2.php
        C:\Users\Elodie\AppData\Local\Temp\plugtmp-3\plugin-bid.php
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\background.bmp
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\BgWorker.dll
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\btn_min.bmp
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\install.ico
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\KillProcDLL.dll
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\nsis7z.dll
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\SkinBtn.dll
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\System.dll
        C:\Users\Elodie\AppData\Local\Temp\nsp243C.tmp\uninstall.ico
        C:\Users\Elodie\AppData\Local\Temp\msohtmlclip1\01
        C:\Users\Elodie\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml
        C:\Users\Elodie\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316144_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316144_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316144_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316176_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316176_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316176_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316183_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316183_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316183_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316258_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316258_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316475_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316475_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316475_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316505_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316505_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316505_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316512_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316512_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316512_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316576_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316576_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316576_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316617_stp
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316617_stp.CIS
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316617_stp.CIS.part
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316576_stp\Mobogenie_Setup_UN.exe
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316512_stp\rcpsetup_adppi15_adppi15.exe
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316475_stp\cor_sweet-page.exe
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316183_stp\sqlite3.dll
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316176_stp\wajam_validate.exe
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316144_stp\ClickMeInSetup.exe
        C:\Users\Elodie\AppData\Local\Temp\is45637729\45316144_stp\ManualRegister.exe
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\13.json
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\conf
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\DataBase
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\ep.zip
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\log
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\newtabv2.crx
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\QQBrowser.exe
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\tmp
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\tmp\13.db
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\tmp\package2.zip
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\tmp\wpm.exe
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\bg1.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\bg2.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\button1.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\button2.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\check.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\close.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\main.xml
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\min.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\note.png
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin\all\Thumbs.db
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\log\QQBrowser.LOG
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\2014.lnk
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\47bb2136fda3f1ed.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\69bacc0499d41c4.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\969252ce11249fdd.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\a2b95ca27b6c33d9.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28c8b86deab549a1.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\83b03b46dcd30a0e.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9027fe24326910d2.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\969252ce11249fdd.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a34115f17ee7a478.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms
        C:\Users\Elodie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fe1e893a39e332bf.customDestinations-ms
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04AFA8793E5CDC4A81C6CD4554A30707
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_1E562C75E6CFA21DBFA4413069869356
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_2DB4A3F943C3E0852DC490B4A5AEEFB1
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\114B3C4A819B7B5D518A2BCD1CE5F8BE_6ED2C6C6CB4B0F33C5C6F857E9B3B112
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_26A5240757BF82792AA784077902FD56
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_3722A7817B153CAC96BEA5D2AB2FB31E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_54F461E341AC92480E0EB583C80AB528
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_655D668C5B11F0EDC03AFCE578DFB7B6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_83653FB4B566DAD9C63D2C31D4C9715C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_CBA631DDF5A79C5E212F40850E9A47D9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_EE63AC2A1F98BDF578EE9DF3B58696FD
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_4C89BB5F5A8A7DBCA446BAEE925B13C8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_6A46B4B65187E9076838555B53450FAF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_87FAF66C12240E6113CD96579A1C29E9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_EB65DAB0C4385AAE2447B6A1B036E15F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26AD01F9C002FAD37427E734302383D8_05C6D3E71E89B60FA438215AD56E8191
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26AD01F9C002FAD37427E734302383D8_CE5CD7897EB51527CF77A2AE2817EB62
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2E980CF7BB84455884A2F90C0668C729_48847F5D6455176099ABDAA9D97F766B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C3948BE6E525B8A8CEE9FAC91C9E392_F097ACF04B23232921FC1418385C801E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4BF36D32316DF6B21360F1A8997CD3E2
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\52770F0CD1D9CC0F5A362D2D451CE4E4_DB22ADAEA6FE724588BA8845EE20343B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_4BDA944235F1446F185236D493959297
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_D734EC3DD00546F46D368325396086B0
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\55C4822D0F35FE8F4F67713B4F628992
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5BF987767EE121EB773E3E93D13C2F30_0B2AEF4FE043D0F11F387BBA16F05698
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B7AED56F69397028F35E77E6DD681FC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6F0788892ECB795F56E658EDB1CA93AA_32ED58A7CD9AC095E8DCEF33F5587722
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6F0788892ECB795F56E658EDB1CA93AA_EEBC6C126AEB3046785D115B93781503
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\724BA1E3D2C377A06FA5FA54F984881F_9314BFC411ABCA31A7BDCE79BABB553D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\783DF2F5A7C9BC04C36663632D14B993_09A85C5418FB163D61A6CDA83D9C0B2C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_1B765DC2AB3E4742711AFCB2F2A7AC14
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_36E3207A43A87A281983E8D0B4D7BCDF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_3741936C58CE6ADFCE0F389F03AA0F8D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_3E186C9196FDA807F8A858F1F81B43E9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_4069BD6CA0A97DCB6D4110B1A16AB213
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_43C6BFF81342EBED0985BC6A1265DDB6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_80A2070E1C459951687192EB795029AF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_B47AA3B9E3AEFBF40B5610D70A8D265A
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_C9B190D3A0B2283820B6C33764149AA6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_E7C0892E831E2E197C090353CDEF322C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_F4D7AB45B5F869AD65B56DB8E39C24B4
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_F9A05643DE1669B7677E16EE8F20BDEF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_FFE23A7C282C1690704B5AEA6161D1B8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_14AB9484AE24EC91DFD6741A58FDD39F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_298C7C05A76CF4F87B7E48888C7B12A9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_3C811F4CFE96816AB0BDE3F251D634EC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_43C752172D00DD2FC41DED4E17D2CCE9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_57309974A37FDEC008AAC285A176D3ED
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6A7C795C7F078FB652C97E22D170F80E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_9A21F8C711ED80682DE4983132744971
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_9E331B173620DEF14FA9BAAE9A894C18
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A9510437CB4EEB09F4B3AC2BC980E19
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\944E5B697BC46FE14AB888AE8A1EBB99_2269679B991E7B74D029ADC1DCE94782
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\944E5B697BC46FE14AB888AE8A1EBB99_59B6FBCC191F4A4313B12DF86D2D3E16
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3C4F17BF8CB09C3DF2A086B36306B5C_C1C0B5D167C066A750AF361DC97F90F6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AABBA64FEAC30FC78B82B9115CBA4569_727DF3C101675AE2C508F1D175EF8584
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_5864DDF0697688952ACDB52C47E0933E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B4378BD2E36B69DECED3E341BD654801_AD2C8B8ACF129EB108DF57D18F693A7C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E7EC0C85688F4738F3BE49B104BA67
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_5F3F7E7AE66D0A87A0F86E6B66DB733B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_AE3FE875193DBB7C9EC575C998F19368
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_BF27707F9F987306A627EAD4748E2FE6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_C1E12B24931DF30EF8125657DA7A408C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0197CD123129A6D466C5F0FC1584EA2_415CF1E2239BBFB812667D030A1B2462
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0197CD123129A6D466C5F0FC1584EA2_556F5186F9C63BA26312E1A3EE0ECA55
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D236B74794790D9923905972356B8BEC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D473E9C373099A94D5057303FDF0EE65_EADEACF5131A9F06158E834EB040AE27
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E63A640A06A2B005AB42F3250BC98D9E_6020995806BF99A1FBC324A7B889F612
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4B372709D6C2AD766C34D274501DC76_0336A3E438E66920481D8300B8B34509
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4B372709D6C2AD766C34D274501DC76_C08D897FBCD7D5D638FCD154D1404CBE
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_42F164B30C1047B3B894EB61DFD5D08F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F72943F1E01540BBACB5396C76DD6AAA
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\04AFA8793E5CDC4A81C6CD4554A30707
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_1E562C75E6CFA21DBFA4413069869356
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_2DB4A3F943C3E0852DC490B4A5AEEFB1
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\114B3C4A819B7B5D518A2BCD1CE5F8BE_6ED2C6C6CB4B0F33C5C6F857E9B3B112
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_26A5240757BF82792AA784077902FD56
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_3722A7817B153CAC96BEA5D2AB2FB31E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_54F461E341AC92480E0EB583C80AB528
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_655D668C5B11F0EDC03AFCE578DFB7B6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_83653FB4B566DAD9C63D2C31D4C9715C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_CBA631DDF5A79C5E212F40850E9A47D9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_EE63AC2A1F98BDF578EE9DF3B58696FD
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_4C89BB5F5A8A7DBCA446BAEE925B13C8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_6A46B4B65187E9076838555B53450FAF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_87FAF66C12240E6113CD96579A1C29E9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_EB65DAB0C4385AAE2447B6A1B036E15F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26AD01F9C002FAD37427E734302383D8_05C6D3E71E89B60FA438215AD56E8191
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26AD01F9C002FAD37427E734302383D8_CE5CD7897EB51527CF77A2AE2817EB62
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2E980CF7BB84455884A2F90C0668C729_48847F5D6455176099ABDAA9D97F766B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C3948BE6E525B8A8CEE9FAC91C9E392_F097ACF04B23232921FC1418385C801E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4BF36D32316DF6B21360F1A8997CD3E2
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\52770F0CD1D9CC0F5A362D2D451CE4E4_DB22ADAEA6FE724588BA8845EE20343B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_4BDA944235F1446F185236D493959297
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_D734EC3DD00546F46D368325396086B0
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\55C4822D0F35FE8F4F67713B4F628992
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5BF987767EE121EB773E3E93D13C2F30_0B2AEF4FE043D0F11F387BBA16F05698
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B7AED56F69397028F35E77E6DD681FC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6F0788892ECB795F56E658EDB1CA93AA_32ED58A7CD9AC095E8DCEF33F5587722
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6F0788892ECB795F56E658EDB1CA93AA_EEBC6C126AEB3046785D115B93781503
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\724BA1E3D2C377A06FA5FA54F984881F_9314BFC411ABCA31A7BDCE79BABB553D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\783DF2F5A7C9BC04C36663632D14B993_09A85C5418FB163D61A6CDA83D9C0B2C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_1B765DC2AB3E4742711AFCB2F2A7AC14
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_36E3207A43A87A281983E8D0B4D7BCDF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_3741936C58CE6ADFCE0F389F03AA0F8D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_3E186C9196FDA807F8A858F1F81B43E9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_4069BD6CA0A97DCB6D4110B1A16AB213
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_43C6BFF81342EBED0985BC6A1265DDB6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_80A2070E1C459951687192EB795029AF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_B47AA3B9E3AEFBF40B5610D70A8D265A
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_C9B190D3A0B2283820B6C33764149AA6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_E7C0892E831E2E197C090353CDEF322C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_F4D7AB45B5F869AD65B56DB8E39C24B4
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_F9A05643DE1669B7677E16EE8F20BDEF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_FFE23A7C282C1690704B5AEA6161D1B8
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_14AB9484AE24EC91DFD6741A58FDD39F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_298C7C05A76CF4F87B7E48888C7B12A9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_3C811F4CFE96816AB0BDE3F251D634EC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_43C752172D00DD2FC41DED4E17D2CCE9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_57309974A37FDEC008AAC285A176D3ED
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6A7C795C7F078FB652C97E22D170F80E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_9A21F8C711ED80682DE4983132744971
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_9E331B173620DEF14FA9BAAE9A894C18
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8A9510437CB4EEB09F4B3AC2BC980E19
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\944E5B697BC46FE14AB888AE8A1EBB99_2269679B991E7B74D029ADC1DCE94782
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\944E5B697BC46FE14AB888AE8A1EBB99_59B6FBCC191F4A4313B12DF86D2D3E16
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A3C4F17BF8CB09C3DF2A086B36306B5C_C1C0B5D167C066A750AF361DC97F90F6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AABBA64FEAC30FC78B82B9115CBA4569_727DF3C101675AE2C508F1D175EF8584
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_5864DDF0697688952ACDB52C47E0933E
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B4378BD2E36B69DECED3E341BD654801_AD2C8B8ACF129EB108DF57D18F693A7C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E7EC0C85688F4738F3BE49B104BA67
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_5F3F7E7AE66D0A87A0F86E6B66DB733B
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_AE3FE875193DBB7C9EC575C998F19368
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_BF27707F9F987306A627EAD4748E2FE6
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_C1E12B24931DF30EF8125657DA7A408C
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0197CD123129A6D466C5F0FC1584EA2_415CF1E2239BBFB812667D030A1B2462
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0197CD123129A6D466C5F0FC1584EA2_556F5186F9C63BA26312E1A3EE0ECA55
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D236B74794790D9923905972356B8BEC
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D473E9C373099A94D5057303FDF0EE65_EADEACF5131A9F06158E834EB040AE27
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E63A640A06A2B005AB42F3250BC98D9E_6020995806BF99A1FBC324A7B889F612
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4B372709D6C2AD766C34D274501DC76_0336A3E438E66920481D8300B8B34509
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4B372709D6C2AD766C34D274501DC76_C08D897FBCD7D5D638FCD154D1404CBE
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_42F164B30C1047B3B894EB61DFD5D08F
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F72943F1E01540BBACB5396C76DD6AAA
        C:\Users\Elodie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
        C:\Users\Elodie\AppData\Local\Temp\is45637729
        C:\Users\Elodie\AppData\Local\Temp\msohtmlclip1
        C:\Users\Elodie\AppData\Local\Temp\fullpackage_temp1390213858\skin
        C:\WINDOWS\TEMP\lpksetup-20140119-225027-0.log
        C:\WINDOWS\TEMP\lpksetup-20140119-225610-0.log
        C:\WINDOWS\TEMP\lpksetup-20140121-112211-0.log
        C:\WINDOWS\TEMP\lpksetup-20140121-131129-0.log
        C:\WINDOWS\TEMP\lpksetup-20140122-000503-0.log
        C:\WINDOWS\TEMP\lpksetup-20140123-153512-0.log
        C:\WINDOWS\TEMP\lpksetup-20140123-162056-0.log
        C:\WINDOWS\TEMP\MpCmdRun.log
        C:\WINDOWS\TEMP\MPENGINE.DLL
        C:\WINDOWS\TEMP\MPGEAR.DLL
        C:\WINDOWS\TEMP\ScheduledHeartbeat.log
        C:\WINDOWS\TEMP\tmp000064a2
        C:\WINDOWS\TEMP\tmp000064a2\tmp00000000
        C:\WINDOWS\TEMP\MRT\7BC20D37-A4C7-4B84-BA08-8EC32EBF781C\MpGearSupport_20140120_132134937.log
        C:\WINDOWS\TEMP\MRT\7BC20D37-A4C7-4B84-BA08-8EC32EBF781C\RtSigs\Data
        C:\WINDOWS\TEMP\MRT\7BC20D37-A4C7-4B84-BA08-8EC32EBF781C\History\Results
        C:\WINDOWS\TEMP\MRT\7BC20D37-A4C7-4B84-BA08-8EC32EBF781C\History\Store
        C:\WINDOWS\Prefetch\AAMW_EXIT.EXE-0B9DFF2C.pf
        C:\WINDOWS\Prefetch\AAMW_EXIT.EXE-0FE62066.pf
        C:\WINDOWS\Prefetch\AAMW_GUARD.EXE-740ED781.pf
        C:\WINDOWS\Prefetch\AAMW_MAIN.EXE-B5CC55B3.pf
        C:\WINDOWS\Prefetch\AAMW_REFRESH.EXE-D05D04E5.pf
        C:\WINDOWS\Prefetch\AAMW_SERVICE.EXE-FD274A5F.pf
        C:\WINDOWS\Prefetch\AAMW_SIGNATUREUPDATE.EXE-587AFCD3.pf
        C:\WINDOWS\Prefetch\AAMW_WSC_CONTROL.EXE-4325704B.pf
        C:\WINDOWS\Prefetch\AAMW_WSC_SERVICE_VISTA.EXE-6948B5B9.pf
        C:\WINDOWS\Prefetch\ACRORD32.EXE-153662D3.pf
        C:\WINDOWS\Prefetch\ADOBEARM.EXE-813E932C.pf
        C:\WINDOWS\Prefetch\ADVANCEDSYSTEMPROTECTOR.EXE-9B4B6DAD.pf
        C:\WINDOWS\Prefetch\ADWCLEANER-3.017.EXE-0700D2F4.pf
        C:\WINDOWS\Prefetch\ADWCLEANER.EXE-F803674B.pf
        C:\WINDOWS\Prefetch\AgAppLaunch.db
        C:\WINDOWS\Prefetch\AgCx_SC1.db
        C:\WINDOWS\Prefetch\AgCx_SC1.db.trx
        C:\WINDOWS\Prefetch\AgCx_SC2.db
        C:\WINDOWS\Prefetch\AgCx_SC4.db
        C:\WINDOWS\Prefetch\AgCx_SC5.db
        C:\WINDOWS\Prefetch\AgGlFaultHistory.db
        C:\WINDOWS\Prefetch\AgGlFgAppHistory.db
        C:\WINDOWS\Prefetch\AgGlGlobalHistory.db
        C:\WINDOWS\Prefetch\AgGlUAD_P_S-1-5-21-4004134140-3884676286-562295384-1002.db
        C:\WINDOWS\Prefetch\AgGlUAD_S-1-5-21-4004134140-3884676286-562295384-1002.db
        C:\WINDOWS\Prefetch\AgRobust.db
        C:\WINDOWS\Prefetch\ANTI ROOTKITS.EXE-815AB034.pf
        C:\WINDOWS\Prefetch\APPLEIEDAV.EXE-1C2231B9.pf
        C:\WINDOWS\Prefetch\APPLEMOBILEBACKUP.EXE-3A92388A.pf
        C:\WINDOWS\Prefetch\APPLEMOBILEDEVICEHELPER.EXE-B90BEA1C.pf
        C:\WINDOWS\Prefetch\APPLEPHOTOSTREAMS.EXE-F4825399.pf
        C:\WINDOWS\Prefetch\APRP.EXE-189CFE39.pf
        C:\WINDOWS\Prefetch\APSDAEMON.EXE-6974DE1A.pf
        C:\WINDOWS\Prefetch\APSDAEMON.EXE-8C865900.pf
        C:\WINDOWS\Prefetch\ASHAMPOO_ANTI-MALWARE_1.21_SM-4B984AF3.pf
        C:\WINDOWS\Prefetch\ASHAMPOO_ANTI-MALWARE_1.21_SM-8CBD7726.pf
        C:\WINDOWS\Prefetch\ASHAMPOO_ANTI-MALWARE_1.21_SM-C785AD58.pf
        C:\WINDOWS\Prefetch\ASPSETUP.EXE-92D0A4AB.pf
        C:\WINDOWS\Prefetch\ASPSETUP.TMP-88CFBB10.pf
        C:\WINDOWS\Prefetch\ASUSTPCFG64.EXE-7A0C8A89.pf
        C:\WINDOWS\Prefetch\ASUSWSPANEL.EXE-355A816C.pf
        C:\WINDOWS\Prefetch\ATBROKER.EXE-8B8F7F7C.pf
        C:\WINDOWS\Prefetch\ATH.EXE-216631C3.pf
        C:\WINDOWS\Prefetch\ATKOSD2.EXE-830E1513.pf
        C:\WINDOWS\Prefetch\AUDIODG.EXE-9848A323.pf
        C:\WINDOWS\Prefetch\AU_.EXE-28D97EE9.pf
        C:\WINDOWS\Prefetch\AVS4YOUSOFTWARENAVIGATOR.TMP-03AB33AF.pf
        C:\WINDOWS\Prefetch\AVSSCREENCAPTURE.TMP-E13AF810.pf
        C:\WINDOWS\Prefetch\AVSUPDATEMANAGER.TMP-09E1F29F.pf
        C:\WINDOWS\Prefetch\AVSVIDEOBURNER.TMP-408425D8.pf
        C:\WINDOWS\Prefetch\AVSVIDEORECORDER.TMP-408C7C93.pf
        C:\WINDOWS\Prefetch\AVSVIDEOREMAKER.EXE-89BA71FE.pf
        C:\WINDOWS\Prefetch\AVSVIDEOREMAKER.TMP-953E1FBA.pf
        C:\WINDOWS\Prefetch\AVSVIDEOREMAKER.TMP-A54705C0.pf
        C:\WINDOWS\Prefetch\BACKUPSETUP.EXE-6060A398.pf
        C:\WINDOWS\Prefetch\BCDEDIT.EXE-EB47CDA5.pf
        C:\WINDOWS\Prefetch\BIZZYBOLTUNINSTALL.EXE-4B891A37.pf
        C:\WINDOWS\Prefetch\BIZZYBOLT_2511-5EA0573C.EXE-9405E403.pf
        C:\WINDOWS\Prefetch\BIZZYBOLT_SETUP.EXE-B9350023.pf
        C:\WINDOWS\Prefetch\BOXOREINSTALLER.EXE-79AED936.pf
        C:\WINDOWS\Prefetch\BRAND.TMP-D73DB28B.pf
        C:\WINDOWS\Prefetch\BRAND.TMP-F57CAA30.pf
        C:\WINDOWS\Prefetch\BYTECODEGENERATOR.EXE-353D57C0.pf
        C:\WINDOWS\Prefetch\CALC.EXE-0FE8F3A9.pf
        C:\WINDOWS\Prefetch\CCLEANER-SETUP.EXE-70711E3F.pf
        C:\WINDOWS\Prefetch\CCLEANER2.EXE-9450E8D3.pf
        C:\WINDOWS\Prefetch\CCLEANER64.EXE-1137D9AC.pf
        C:\WINDOWS\Prefetch\CCLEANER_4-09_FR_14492.EXE-020F43B8.pf
        C:\WINDOWS\Prefetch\CDLABELPRINT.EXE-64267FB3.pf
        C:\WINDOWS\Prefetch\CLASSICIE9_64.EXE-659EAACC.pf
        C:\WINDOWS\Prefetch\CLASSICSTARTMENU.EXE-B2535E93.pf
        C:\WINDOWS\Prefetch\CLEANMGR.EXE-91F4F5AB.pf
        C:\WINDOWS\Prefetch\CLEANSCHEDULE.EXE-370A7215.pf
        C:\WINDOWS\Prefetch\CLICKMEINSETUP.EXE-C4435D02.pf
        C:\WINDOWS\Prefetch\CLVIEW.EXE-37B1763A.pf
        C:\WINDOWS\Prefetch\CMD.EXE-2EB3E6E2.pf
        C:\WINDOWS\Prefetch\CMD.EXE-CD245F9E.pf
        C:\WINDOWS\Prefetch\CNMIGMAIN.EXE-8E66F913.pf
        C:\WINDOWS\Prefetch\CNMNSST.EXE-67CA3D99.pf
        C:\WINDOWS\Prefetch\CNMVSBL.EXE-AD181E28.pf
        C:\WINDOWS\Prefetch\CNQMMAIN.EXE-12432A88.pf
        C:\WINDOWS\Prefetch\CNQMSWCS.EXE-301464CF.pf
        C:\WINDOWS\Prefetch\COMUPDATUS.EXE-403FA02A.pf
        C:\WINDOWS\Prefetch\CONHOST.EXE-F98A1078.pf
        C:\WINDOWS\Prefetch\CONNECTIVITY.EXE-D1F99EA5.pf
        C:\WINDOWS\Prefetch\CONSENT.EXE-2D674CE4.pf
        C:\WINDOWS\Prefetch\CONTROL.EXE-5BCB0217.pf
        C:\WINDOWS\Prefetch\CONVERTHELPERSETUP.TMP-4DBBA938.pf
        C:\WINDOWS\Prefetch\CONVERTHELPERSETUP.TMP-67CBB505.pf
        C:\WINDOWS\Prefetch\COPYTRANS.EXE-C8F0D9FE.pf
        C:\WINDOWS\Prefetch\COPYTRANSCONTACTS.EXE-893AA4C9.pf
        C:\WINDOWS\Prefetch\COPYTRANSCONTROLCENTER.EXE-B1A0AA58.pf
        C:\WINDOWS\Prefetch\COPYTRANSMANAGER.EXE-80D3380D.pf
        C:\WINDOWS\Prefetch\COR_SWEET-PAGE.EXE-62B77504.pf
        C:\WINDOWS\Prefetch\CRASHREPORTER.EXE-6A765BC6.pf
        C:\WINDOWS\Prefetch\CS6SERVICEMANAGER.EXE-CFBDFEBE.pf
        C:\WINDOWS\Prefetch\CSCRIPT.EXE-3EBE5CD1.pf
        C:\WINDOWS\Prefetch\CSCRIPT.EXE-E9FF6526.pf
        C:\WINDOWS\Prefetch\CSISYNCCLIENT.EXE-E1DAC3A6.pf
        C:\WINDOWS\Prefetch\CSISYN~1.EXE-CAB12199.pf
        C:\WINDOWS\Prefetch\CSRSS.EXE-A7A2B218.pf
        C:\WINDOWS\Prefetch\DAEMONPROCESS.EXE-E4BDA2BB.pf
        C:\WINDOWS\Prefetch\DAO.17692143.EXE-9EC76F21.pf
        C:\WINDOWS\Prefetch\DEFRAG.EXE-22AD8A37.pf
        C:\WINDOWS\Prefetch\DELETEUSERDATA.EXE-FC755875.pf
        C:\WINDOWS\Prefetch\DEVCON.EXE-6A49DF45.pf
        C:\WINDOWS\Prefetch\DISTNOTED.EXE-DE72C2C6.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-5B6442A9.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-6A829A47.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-6E31253B.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-73B0B771.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-7682DD6F.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-78073FE4.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-829F390C.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-82CF0F0F.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-8BE5CE86.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-A432434E.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-B51A0D95.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-BF26B840.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-E5221F10.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-F11437D0.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-F3B31CFE.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-F8F2B7B0.pf
        C:\WINDOWS\Prefetch\DLLHOST.EXE-FB1CDFA7.pf
        C:\WINDOWS\Prefetch\DMEDIA.EXE-FAA82C3F.pf
        C:\WINDOWS\Prefetch\DRVINST.EXE-26FFA444.pf
        C:\WINDOWS\Prefetch\DSMUSERTASK.EXE-D4A83970.pf
        C:\WINDOWS\Prefetch\DTLITE.EXE-AEE5B4A0.pf
        C:\WINDOWS\Prefetch\DWM.EXE-F29FE9E2.pf
        C:\WINDOWS\Prefetch\DWWIN.EXE-0777FFBF.pf
        C:\WINDOWS\Prefetch\dynreservedpri.db
        C:\WINDOWS\Prefetch\EGUI.EXE-951D6207.pf
        C:\WINDOWS\Prefetch\EXCEL.EXE-606B2A85.pf
        C:\WINDOWS\Prefetch\EXPLORER.EXE-03C49D11.pf
        C:\WINDOWS\Prefetch\FCVIDEOP.EXE-59DD9BAB.pf
        C:\WINDOWS\Prefetch\FFDSHOW.EXE-2EB203AD.pf
        C:\WINDOWS\Prefetch\FFDSHOW_REV4515_20130612_CLSI-3C81F883.pf
        C:\WINDOWS\Prefetch\FFDSHOW_REV4515_20130612_CLSI-C5002D20.pf
        C:\WINDOWS\Prefetch\FINEPIXVIEWER.EXE-8A7852D5.pf
        C:\WINDOWS\Prefetch\FIREFOX.EXE-528BC649.pf
        C:\WINDOWS\Prefetch\FLASHPLAYERPLUGIN_11_9_900_15-75226B5E.pf
        C:\WINDOWS\Prefetch\FLASHPLAYERPLUGIN_11_9_900_17-195BD8CE.pf
        C:\WINDOWS\Prefetch\FLASHPLAYERPLUGIN_12_0_0_43.E-5B767174.pf
        C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-E0E5E52F.pf
        C:\WINDOWS\Prefetch\FLASHUTIL_ACTIVEX.EXE-4E6AE223.pf
        C:\WINDOWS\Prefetch\FREE-MP3-WMA-CONVERTER_FREE_M-2C326FDC.pf
        C:\WINDOWS\Prefetch\FREECORDER8-SETUP POUR TÉLÉCH-D49CE11B.pf
        C:\WINDOWS\Prefetch\FREEMAKEERRORREPORTER.EXE-79CEDCA7.pf
        C:\WINDOWS\Prefetch\FREEMAKEUTILSSERVICE.EXE-9E05D593.pf
        C:\WINDOWS\Prefetch\FREEMAKEVIDEOCONVERTERSETUP.T-CB62B387.pf
        C:\WINDOWS\Prefetch\FREEMAKEVIDEOCONVERTERSETUP.T-D1B5042C.pf
        C:\WINDOWS\Prefetch\FREEMAKEVIDEOCONVERTER_4.1.2.-8233EB16.pf
        C:\WINDOWS\Prefetch\GCCHECK.EXE-05B415D7.pf
        C:\WINDOWS\Prefetch\GTBCHECK.EXE-E4534ACE.pf
        C:\WINDOWS\Prefetch\HCONTROL.EXE-752ABE5C.pf
        C:\WINDOWS\Prefetch\HKCMD.EXE-15DC91D5.pf
        C:\WINDOWS\Prefetch\ICLOUDSERVICES.EXE-2D02517E.pf
        C:\WINDOWS\Prefetch\IEXPLORE.EXE-7A9337F2.pf
        C:\WINDOWS\Prefetch\IEXPLORE.EXE-F4FB5D2F.pf
        C:\WINDOWS\Prefetch\IGFXEXT.EXE-B04096D5.pf
        C:\WINDOWS\Prefetch\IGFXPERS.EXE-82C794F2.pf
        C:\WINDOWS\Prefetch\IGFXSRVC.EXE-F41E6E8E.pf
        C:\WINDOWS\Prefetch\IGFXTRAY.EXE-21BDFE68.pf
        C:\WINDOWS\Prefetch\INS724.EXE-88189BCF.pf
        C:\WINDOWS\Prefetch\INS8520.EXE-D1B5D2FB.pf
        C:\WINDOWS\Prefetch\INSONWMI.EXE-D21E86F3.pf
        C:\WINDOWS\Prefetch\INSTALL-HD-4-5-0-6.EXE-58C6BB15.pf
        C:\WINDOWS\Prefetch\INSTALL.EXE-E1A6823D.pf
        C:\WINDOWS\Prefetch\INSTALLFLASHPLAYER.EXE-3CB98F98.pf
        C:\WINDOWS\Prefetch\INSTALL_FLASHPLAYER12X32AU_MS-3E640135.pf
        C:\WINDOWS\Prefetch\INSTALL_FLASHPLAYER12X32AU_MS-866C80C8.pf
        C:\WINDOWS\Prefetch\INSTALL_FLASH_PLAYER.EXE-659F5777.pf
        C:\WINDOWS\Prefetch\INTELMEFWSERVICE.EXE-265333D9.pf
        C:\WINDOWS\Prefetch\IPCONFIG.EXE-EEA91845.pf
        C:\WINDOWS\Prefetch\IPODSERVICE.EXE-AB17D83E.pf
        C:\WINDOWS\Prefetch\IRSETUP.EXE-EDE22F3B.pf
        C:\WINDOWS\Prefetch\IS-03N64.TMP-FA2592A2.pf
        C:\WINDOWS\Prefetch\ITUNES.EXE-07AC1693.pf
        C:\WINDOWS\Prefetch\ITUNESHELPER.EXE-722A54DB.pf
        C:\WINDOWS\Prefetch\JAUREG.EXE-E2D13B60.pf
        C:\WINDOWS\Prefetch\JAVA.EXE-4EF2C834.pf
        C:\WINDOWS\Prefetch\JAVAW.EXE-9BCFFCC7.pf
        C:\WINDOWS\Prefetch\JAVAWS.EXE-596738CE.pf
        C:\WINDOWS\Prefetch\JQS.EXE-02829BC8.pf
        C:\WINDOWS\Prefetch\JRE-7U51-WINDOWS-I586-IFTW.EX-60DAB29D.pf
        C:\WINDOWS\Prefetch\JUCHECK.EXE-3F4853CB.pf
        C:\WINDOWS\Prefetch\JUMPFLIPSETUP.EXE-5D4310DD.pf
        C:\WINDOWS\Prefetch\JUMPFLIPUNINSTALL.EXE-BEBD7123.pf
        C:\WINDOWS\Prefetch\JUMPFLIP_SETUP.EXE-12C0F5DF.pf
        C:\WINDOWS\Prefetch\JUSCHED.EXE-4B303C70.pf
        C:\WINDOWS\Prefetch\JXPIINSTALL.EXE-45075D1A.pf
        C:\WINDOWS\Prefetch\KBCLIENT_FD2.EXE-EF4A6B8B.pf
        C:\WINDOWS\Prefetch\KEYGEN.EXE-2BC6BD7A.pf
        C:\WINDOWS\Prefetch\KEYGEN.EXE-64F1BF44.pf
        C:\WINDOWS\Prefetch\KEYGEN.EXE-6F7D16BB.pf
        C:\WINDOWS\Prefetch\KEYGEN.EXE-891526EE.pf
        C:\WINDOWS\Prefetch\KMSELDI.EXE-87096988.pf
        C:\WINDOWS\Prefetch\KMSELDI.EXE-FBA86FAB.pf
        C:\WINDOWS\Prefetch\LADS.EXE-BC89FD22.pf
        C:\WINDOWS\Prefetch\LAUNCHTM.EXE-B444BC8E.pf
        C:\WINDOWS\Prefetch\Layout.ini
        C:\WINDOWS\Prefetch\LECTEUR FLV.EXE-CF179214.pf
        C:\WINDOWS\Prefetch\LMS.EXE-409EDB07.pf
        C:\WINDOWS\Prefetch\LOGONUI.EXE-E35F76FB.pf
        C:\WINDOWS\Prefetch\LPKSETUP.EXE-EE6EE0C2.pf
        C:\WINDOWS\Prefetch\LZMA.EXE-AB10C8CF.pf
        C:\WINDOWS\Prefetch\MAKECAB.EXE-E962779E.pf
        C:\WINDOWS\Prefetch\MBAM-SETUP-1.75.0.1300 CONSEI-32CDC761.pf
        C:\WINDOWS\Prefetch\MBAM-SETUP-1.75.0.1300 CONSEI-7FCBBD3B.pf
        C:\WINDOWS\Prefetch\MBAM-SETUP-1.75.0.1300 CONSEI-925D330E.pf
        C:\WINDOWS\Prefetch\MBAM.EXE-125A28F9.pf
        C:\WINDOWS\Prefetch\MBAMGUI.EXE-9FF23AE2.pf
        C:\WINDOWS\Prefetch\MBAMSCHEDULER.EXE-E0C395DC.pf
        C:\WINDOWS\Prefetch\MBAMSERVICE.EXE-5C46DB66.pf
        C:\WINDOWS\Prefetch\MBAR-1.07.0.1008.EXE-FB36A927.pf
        C:\WINDOWS\Prefetch\MBAR.EXE-1089AC3E.pf
        C:\WINDOWS\Prefetch\MBAR.EXE-1566AFBB.pf
        C:\WINDOWS\Prefetch\MBRCHECK.EXE-52282269.pf
        C:\WINDOWS\Prefetch\MDCRASHREPORTTOOL.EXE-3BC35FEE.pf
        C:\WINDOWS\Prefetch\MGADB.EXE-281F1F6B.pf
        C:\WINDOWS\Prefetch\MGUSB.EXE-2DCAF222.pf
        C:\WINDOWS\Prefetch\MOBOGENIE.EXE-7EA50C05.pf
        C:\WINDOWS\Prefetch\MOBOGENIE_SETUP_UN.EXE-AC4F2F30.pf
        C:\WINDOWS\Prefetch\MOUCLIENT_FD2.EXE-A7112A4F.pf
        C:\WINDOWS\Prefetch\MOVIEMAKER.EXE-A6401490.pf
        C:\WINDOWS\Prefetch\MOVIESTUDIOPLATINUM120.EXE-645355E9.pf
        C:\WINDOWS\Prefetch\MP3DC219.EXE-053B15A7.pf
        C:\WINDOWS\Prefetch\MP3DC219.EXE-1E8E5E48.pf
        C:\WINDOWS\Prefetch\MP3DC219.EXE-90525F75.pf
        C:\WINDOWS\Prefetch\MP3DC219.EXE-92237B95.pf
        C:\WINDOWS\Prefetch\MP3DIRECTCUT_2-19_FR_10838.EX-D35D84BE.pf
        C:\WINDOWS\Prefetch\MP3DIRECTCUT_MP3DIRECTCUT_2.1-EBA1C897.pf
        C:\WINDOWS\Prefetch\MPC-HC.EXE-5D3BF9A9.pf
        C:\WINDOWS\Prefetch\MPCMDRUN.EXE-6520183E.pf
        C:\WINDOWS\Prefetch\MSCORSVW.EXE-55FE3087.pf
        C:\WINDOWS\Prefetch\MSCORSVW.EXE-D593A5D9.pf
        C:\WINDOWS\Prefetch\MSDT.EXE-A16F1692.pf
        C:\WINDOWS\Prefetch\MSI293C.TMP-CFC99CD3.pf
        C:\WINDOWS\Prefetch\MSI4FF4.TMP-DF85B141.pf
        C:\WINDOWS\Prefetch\MSIEXEC.EXE-7D20CFB0.pf
        C:\WINDOWS\Prefetch\MSIEXEC.EXE-BAE57A74.pf
        C:\WINDOWS\Prefetch\MSIFDCA.TMP-C020838B.pf
        C:\WINDOWS\Prefetch\MSOSYNC.EXE-1CEE1794.pf
        C:\WINDOWS\Prefetch\MYPC BACKUP.EXE-D2D9F9B9.pf
        C:\WINDOWS\Prefetch\NCHSETUP.EXE-93F18E4D.pf
        C:\WINDOWS\Prefetch\NERO.EXE-0CADF8EE.pf
        C:\WINDOWS\Prefetch\NERO.EXE-E8782A97.pf
        C:\WINDOWS\Prefetch\NEROSTARTSMART.EXE-6C635EC8.pf
        C:\WINDOWS\Prefetch\NET.EXE-C3772C91.pf
        C:\WINDOWS\Prefetch\NET1.EXE-D513025E.pf
        C:\WINDOWS\Prefetch\NETSH.EXE-355423B0.pf
        C:\WINDOWS\Prefetch\NGEN.EXE-383F81D5.pf
        C:\WINDOWS\Prefetch\NGEN.EXE-A8DBB043.pf
        C:\WINDOWS\Prefetch\NGENTASK.EXE-4DB88ADA.pf
        C:\WINDOWS\Prefetch\NGENTASK.EXE-CD4E002C.pf
        C:\WINDOWS\Prefetch\NITROPDF.EXE-1297BDA6.pf
        C:\WINDOWS\Prefetch\NITROPDF.EXE-2CBC64E6.pf
        C:\WINDOWS\Prefetch\NITROPDFDRIVERCREATOR.EXE-FBAC8CD2.pf
        C:\WINDOWS\Prefetch\NITROPDFTHUMBNAILHELPER.EXE-8C39F742.pf
        C:\WINDOWS\Prefetch\NITRO_PIPASSISTANT.EXE-8FEC407E.pf
        C:\WINDOWS\Prefetch\NITRO_PIPASSISTANT.EXE-E8C11D3E.pf
        C:\WINDOWS\Prefetch\NOTEPAD.EXE-1A4CC1C3.pf
        C:\WINDOWS\Prefetch\NOTEPAD.EXE-46F01A62.pf
        C:\WINDOWS\Prefetch\NOTEPAD.EXE-B28CC291.pf
        C:\WINDOWS\Prefetch\NOTEPAD.EXE-F0516D55.pf
        C:\WINDOWS\Prefetch\NSLOOKUP.EXE-EB35EDAD.pf
        C:\WINDOWS\Prefetch\NVTRAY.EXE-981FA625.pf
        C:\WINDOWS\Prefetch\NVVSVC.EXE-D5489D80.pf
        C:\WINDOWS\Prefetch\NVXDSYNC.EXE-7855AED2.pf
        C:\WINDOWS\Prefetch\OBBOXORE_0307-76302122.EXE-18FB1CFD.pf
        C:\WINDOWS\Prefetch\Op-EXPLORER.EXE-03C49D11-000000F5.pf
        C:\WINDOWS\Prefetch\OPENWITH.EXE-BA0DC300.pf
        C:\WINDOWS\Prefetch\PATCHJRE.EXE-3DD8DF36.pf
        C:\WINDOWS\Prefetch\PCAUI.EXE-A64155AC.pf
        C:\WINDOWS\Prefetch\PDVD10SERV.EXE-99C8A7B5.pf
        C:\WINDOWS\Prefetch\PfPre_3c835f26.db
        C:\WINDOWS\Prefetch\PfSvPerfStats.bin
        C:\WINDOWS\Prefetch\PHOTOSAPP.EXE-8FE95EC8.pf
        C:\WINDOWS\Prefetch\PING.EXE-167FE968.pf
        C:\WINDOWS\Prefetch\PING.EXE-CF0A440C.pf
        C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-E510713D.pf
        C:\WINDOWS\Prefetch\PLUGIN-HANG-UI.EXE-63DEED3B.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-BG.EXE-86C1ABD1.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-CHROMEINSTALLER.E-620AD558.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-CODEDOWNLOADER.EX-8CC32296.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-ENABLER.EXE-723C7D19.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-FIREFOXINSTALLER.-96E54DA1.pf
        C:\WINDOWS\Prefetch\PLUS-HD-4.8-UPDATER.EXE-74F7198D.pf
        C:\WINDOWS\Prefetch\PLUSHD_1701_FR-C4BEA315.EXE-A70A4BF0.pf
        C:\WINDOWS\Prefetch\POQEXEC.EXE-43A49B23.pf
        C:\WINDOWS\Prefetch\POWERSHELL.EXE-E69E0788.pf
        C:\WINDOWS\Prefetch\PRINTISOLATIONHOST.EXE-9AE42873.pf
        C:\WINDOWS\Prefetch\PRISM.EXE-EFB5EE29.pf
        C:\WINDOWS\Prefetch\PV.EXE-D9D90B9C.pf
        C:\WINDOWS\Prefetch\QQBROWSER.EXE-007A0EEB.pf
        C:\WINDOWS\Prefetch\QTTASK.EXE-F78A5877.pf
        C:\WINDOWS\Prefetch\QUICKDCF2.EXE-37D24DE0.pf
        C:\WINDOWS\Prefetch\QUICKMEDIACONVERTER.EXE-8165FDF2.pf
        C:\WINDOWS\Prefetch\RAVCPL64.EXE-C0BB540D.pf
        C:\WINDOWS\Prefetch\RCPSETUP_ADPPI15_ADPPI15.EXE-65ADFD6F.pf
        C:\WINDOWS\Prefetch\RCPSETUP_ADPPI15_ADPPI15.TMP-6C8126EA.pf
        C:\WINDOWS\Prefetch\RCPUNINSTALL.EXE-D0648238.pf
        C:\WINDOWS\Prefetch\READER_SL.EXE-350EE930.pf
        C:\WINDOWS\Prefetch\ReadyBoot
        C:\WINDOWS\Prefetch\REG.EXE-6A8B6960.pf
        C:\WINDOWS\Prefetch\REGCLEANPRO.EXE-F0AFF227.pf
        C:\WINDOWS\Prefetch\REGEDIT.EXE-FA6F6DA2.pf
        C:\WINDOWS\Prefetch\REGISTEREXTENSIONDOTNET20_X64-8B0528E5.pf
        C:\WINDOWS\Prefetch\REGISTEREXTENSIONDOTNET20_X86-7C958069.pf
        C:\WINDOWS\Prefetch\REGISTRATION.EXE-08E03801.pf
        C:\WINDOWS\Prefetch\REGISTRATION.TMP-08A5AF1B.pf
        C:\WINDOWS\Prefetch\REGSVR32.EXE-3290E8FC.pf
        C:\WINDOWS\Prefetch\REGSVR32.EXE-E1DBB6D8.pf
        C:\WINDOWS\Prefetch\REMOTEENGINE.EXE-1AA38D3C.pf
        C:\WINDOWS\Prefetch\REMOTEENGINEHELPER.EXE-5C6799D4.pf
        C:\WINDOWS\Prefetch\RESTARTEXPLORER.EXE-9CEA359C.pf
        C:\WINDOWS\Prefetch\ROCKENFOLIE.EXE-92424FCD.pf
        C:\WINDOWS\Prefetch\ROUTE.EXE-C5FB9965.pf
        C:\WINDOWS\Prefetch\RSTRUI.EXE-F76EBF17.pf
        C:\WINDOWS\Prefetch\RUN.EXE-BAC22E6B.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-02D9B41E.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-0F905C08.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-210D3DBE.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-24EFAC77.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-26D398F1.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-26D399CF.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-27C01666.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-46021B52.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-5C68AAB7.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-65953559.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-6999291C.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-7068DC39.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-801C3949.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-A3EE2396.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-CEFAA268.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-D6988D22.pf
        C:\WINDOWS\Prefetch\RUNDLL32.EXE-FE7B1E94.pf
        C:\WINDOWS\Prefetch\RUNONCE.EXE-E874B0D0.pf
        C:\WINDOWS\Prefetch\RUNTIMEBROKER.EXE-17E2786F.pf
        C:\WINDOWS\Prefetch\SAVEVIDPLUGINCORE.EXE-ADD95C37.pf
        C:\WINDOWS\Prefetch\SC.EXE-443D0E78.pf
        C:\WINDOWS\Prefetch\SC.EXE-CCD1735C.pf
        C:\WINDOWS\Prefetch\SCANUTILITY.EXE-2D4E27DB.pf
        C:\WINDOWS\Prefetch\SCHTASKS.EXE-0AD36442.pf
        C:\WINDOWS\Prefetch\SCHTASKS.EXE-BA1E321E.pf
        C:\WINDOWS\Prefetch\SDFSSVC.EXE-E6EB5D65.pf
        C:\WINDOWS\Prefetch\SDIAGNHOST.EXE-D8BC1DC6.pf
        C:\WINDOWS\Prefetch\SDIMMUNIZE.EXE-1AE7723A.pf
        C:\WINDOWS\Prefetch\SDSCAN.EXE-0F32CACD.pf
        C:\WINDOWS\Prefetch\SDTRAY.EXE-4980050C.pf
        C:\WINDOWS\Prefetch\SDUPDSVC.EXE-E2750175.pf
        C:\WINDOWS\Prefetch\SDWELCOME.EXE-FA3DE6B8.pf
        C:\WINDOWS\Prefetch\SDWSCSVC.EXE-7619AAF1.pf
        C:\WINDOWS\Prefetch\SEARCHFILTERHOST.EXE-10E4267C.pf
        C:\WINDOWS\Prefetch\SEARCHINDEXER.EXE-EF8503D3.pf
        C:\WINDOWS\Prefetch\SEARCHPROTOCOLHOST.EXE-C6CFE2A8.pf
        C:\WINDOWS\Prefetch\SERVICE_KMS.EXE-DBECD6E5.pf
        C:\WINDOWS\Prefetch\SETTINGSYNCHOST.EXE-DD400067.pf
        C:\WINDOWS\Prefetch\SETUP.EXE-7558971A.pf
        C:\WINDOWS\Prefetch\SETUPX.EXE-4714E829.pf
        C:\WINDOWS\Prefetch\SFTGC.EXE-439B1993.pf
        C:\WINDOWS\Prefetch\SIMAPPEXEC.EXE-EAF5252A.pf
        C:\WINDOWS\Prefetch\SKYDRIVE.EXE-0DBB4667.pf
        C:\WINDOWS\Prefetch\SKYDRIVE.EXE-2C4D96B3.pf
        C:\WINDOWS\Prefetch\SKYPE.EXE-67114AC9.pf
        C:\WINDOWS\Prefetch\SMSS.EXE-81AD91F0.pf
        C:\WINDOWS\Prefetch\SOFTONICDOWNLOADER_FOR_ASHAMP-D315BE5D.pf
        C:\WINDOWS\Prefetch\SOFTWARECRASHHANDLER.EXE-5F240164.pf
        C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-39F79F3B.pf
        C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-FA9C6D6C.pf
        C:\WINDOWS\Prefetch\SOUNDTAP.EXE-5EE14517.pf
        C:\WINDOWS\Prefetch\SPLWOW64.EXE-853292E2.pf
        C:\WINDOWS\Prefetch\SPPEXTCOMOBJ.EXE-3F878F80.pf
        C:\WINDOWS\Prefetch\SPPSVC.EXE-7B160CA5.pf
        C:\WINDOWS\Prefetch\SPYBOT-SEARCH-DESTROY_2-2-03--5405691F.pf
        C:\WINDOWS\Prefetch\SPYBOT-SEARCH-DESTROY_2-2-03--5EE5CFF9.pf
        C:\WINDOWS\Prefetch\SPYBOT-SEARCH-DESTROY_2-2-03--77BD883B.pf
        C:\WINDOWS\Prefetch\SPYWAREBLASTER.EXE-2683A083.pf
        C:\WINDOWS\Prefetch\SPYWAREBLASTERSETUP-5.0.EXE-D127180D.pf
        C:\WINDOWS\Prefetch\SPYWAREBLASTERSETUP-5.0.TMP-55ACFDD5.pf
        C:\WINDOWS\Prefetch\SRTASKS.EXE-29C2E869.pf
        C:\WINDOWS\Prefetch\SUBINACL.EXE-D08B2113.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-3830BC72.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-38BE90DD.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-576FFE64.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-93798CD2.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-AFA96AE1.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-E2A00AF0.pf
        C:\WINDOWS\Prefetch\SVCHOST.EXE-FEA1FDBE.pf
        C:\WINDOWS\Prefetch\SWITCHBOARD.EXE-A966E0C2.pf
        C:\WINDOWS\Prefetch\SYNCSERVER.EXE-261E368E.pf
        C:\WINDOWS\Prefetch\SYS64CONTROL.EXE-17515CDB.pf
        C:\WINDOWS\Prefetch\SYSTEMSETTINGS.EXE-D8CC3B5E.pf
        C:\WINDOWS\Prefetch\SYSTWEAKASP.EXE-2516A980.pf
        C:\WINDOWS\Prefetch\SYSTWEAKASP.TMP-3BC5DD4C.pf
        C:\WINDOWS\Prefetch\TASKENG.EXE-23205583.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-05B3EDF6.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-29D61DAB.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-3C5D03F7.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-5CFABC16.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-92CB0A79.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-985C34E6.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-D687BE54.pf
        C:\WINDOWS\Prefetch\TASKHOST.EXE-F2C7AEBC.pf
        C:\WINDOWS\Prefetch\TASKHOSTEX.EXE-7356AAC0.pf
        C:\WINDOWS\Prefetch\TASKKILL.EXE-3D8A2F61.pf
        C:\WINDOWS\Prefetch\TASKMGR.EXE-39AABA37.pf
        C:\WINDOWS\Prefetch\TDSSKILLER.EXE-BA831C6A.pf
        C:\WINDOWS\Prefetch\THUMBNAILEXTRACTIONHOST.EXE-C3FB8861.pf
        C:\WINDOWS\Prefetch\THUNDERBIRD.EXE-33138219.pf
        C:\WINDOWS\Prefetch\TIWORKER.EXE-103DCE51.pf
        C:\WINDOWS\Prefetch\TORRENT_3-3-2-BUILD-30303_FR_-C6B289AD.pf <
        0
    12. Contributeur sécurité
      Attention script personnalisé à ne pas reproduire sur un autre ordinateur risque de plantage !

      * Copies uniquement les lignes indiquées en gras ci-dessous dans le presse papier soit le bloc note(tu surlignes avec la souris puis clic droit copier de Script ZHPFix jusqu'à la fin soit sysrestore)

      Script ZHPFix
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
      M2 - MFEP: prefs.js [Elodie - 2zwdiysg.default\WebSiteRecommendation@weliketheweb.com] [] WebSite Recommendation v (..) =>PUP.WebSiteRecommendation
      M2 - MFEP: prefs.js [Elodie - 2zwdiysg.default\{9c72a7f0-9ced-4876-80b8-2cebdc068f07}] [] HomeTab v4.7 (..) =>PUP.CertifiedToolbar
      O43 - CFD: 22/01/2014 - 14:33:32 - [0,162] ----D C:\Program Files (x86)\Savevid =>Adware.Bandoo
      O43 - CFD: 20/01/2014 - 11:32:10 - [0] ----D C:\Users\Elodie\AppData\Roaming\0C1I1L1R1J0M1P0I1G
      O43 - CFD: 01/01/2014 - 23:42:09 - [0,010] ----D C:\Users\Elodie\AppData\Roaming\Freecorder 8 Video =>Riskware.Movly
      C:\Users\Elodie\AppData\Roaming\uTorrent\NCH.SoundTap.Streaming.Audio.Recorder.v2.23.Incl.Keygen-BRD.rar.torrent =>P2P.µTorrent
      C:\Users\Elodie\AppData\Roaming\uTorrent\NCH.SoundTap.Streaming.Audio.Recorder.v2.23.Incl.Keygen-BRD.rar.torrent =>P2P.µTorrent
      O87 - FAEL: "{1A0DB8E2-9BF5-4C30-88E7-9752910F7E80}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\KMSnano\data\qemu-system-i386.exe (.not file.)
      O87 - FAEL: "{3210B052-82E2-40EC-91BE-23619AAC68AB}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\KMSnano\data\qemu-system-i386.exe (.not file.)
      O87 - FAEL: "{27164140-BB50-4473-8ED2-1EA908ADBFBF}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\KMSnano\data\qemu-system-i386.exe (.not file.)
      O87 - FAEL: "{7189692C-01A5-4FD8-AE68-7268C181C210}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\KMSnano\data\qemu-system-i386.exe (.not file.)
      O87 - FAEL: "{5DE55CF6-1A8D-4AC4-B37D-6788F811B82E}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>PUP.KMSpico
      O87 - FAEL: "{DE54EDA4-5C63-4F35-AFD5-B4621273F3A2}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>PUP.KMSpico
      O87 - FAEL: "{DB9D6872-A6B8-474D-967A-D4C734EE8739}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\KMSpico\AutoPico.exe (.not file.) =>PUP.KMSpico
      O87 - FAEL: "{71FC4565-CEDF-45F9-9E2B-19DCE689D6CA}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\KMSpico\AutoPico.exe (.not file.) =>PUP.KMSpico
      O87 - FAEL: "{4FAE9113-757A-4575-9FDB-03F23A2E5183}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>PUP.KMSpico
      O87 - FAEL: "{4756D95C-F8FA-45E8-944E-3FB0447785C8}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>PUP.KMSpico
      [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110411591114}] =>PUP.CrossRider
      [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411591114}] =>PUP.CrossRider
      [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
      C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\2zwdiysg.default\extensions\WebSiteRecommendation@weliketheweb.com =>PUP.WebSiteRecommendation^
      C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\2zwdiysg.default\extensions\{9c72a7f0-9ced-4876-80b8-2cebdc068f07} =>PUP.CertifiedToolbar^
      C:\Program Files (x86)\Savevid =>Adware.Bandoo^
      C:\Users\Elodie\AppData\Roaming\Freecorder 8 Video =>Riskware.Movly^
      C:\Users\Elodie\AppData\Local\Software =>Adware.Boxore
      [HKCU\Software\Savevid] =>Adware.Bandoo^
      Sysrestore


      * Lance ZHPFix (icône seringue)en tant qu'administrateur(si tu es sous Vista/7/8)sinon double clique sur l'icône en forme de seringue puis clique sur OK pour continuer.

      * Cliques sur importer(Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".)

      * Si tu ne vois pas les lignes clic droit dans l'encadré puis coller

      * Clique sur le bouton GO pour lancer le nettoyage, et laisse l'outil travailler.

      * Zhpfix te proposera de vider la corbeille si tu le souhaites cliques sur oui si tu ne le souhaites pas cliques sur non

      * Redémarre le PC et poste le rapport C:\ZHP\ZHPFixReport.txt

      0
    13. Contributeur sécurité
      Plus de souci?
      0
      1. ben si c'est toujours pareil, impossible de commenter, le lien avec facebook ne doit pas se faire...
        0
    14. Contributeur sécurité
      Refais un zhpdiag

      Sur quel navigateur as tu ce souci?
      0
      1. ok
        sur firefox, j'ai vérifié, sur ie ça marche...
        0
    15. Contributeur sécurité
      Y a plus d'infection :)
      0
      1. super merci beaucoup liliduhone pour tout ce que tu as fait pour moi aujourd'hui. Bonne soirée et bonne nuit.
        0
    16. Contributeur sécurité
      ça donne quoi pour Firefox?
      :)
      0
      1. ça marche !

        merci encore !
        :)))))
        0
    • 1
    • 2