Supprimer optimizer pro

salut

pour ton problème, fait ceci et poste le rapport s'il te plaît

télécharge adwcleaner sur ton bureau

le lien https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

utlisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

clique sur Scanner puis patiente le temps du scan

une fois le scan terminé clique sur le bouton Nettoyer

clique sur rapport pour qu'il s'affiche sur ton bureau

le rapport est aussi sauvegarder dans C:\AdwCleaner[S0].txt

poste le rapport via 1 copier/coller

merci

@+

merci pour votre réponse rapide!
voici le rapport :
# AdwCleaner v3.216 - Rapport créé le 25/07/2014 à 16:47:46
# Mis à jour le 17/07/2014 par Xplode
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : Isabelle - ISABELLE
# Exécuté depuis : C:\Users\Isabelle\Downloads\adwcleaner_3.216.exe
# Option : Nettoyer

***** [ Services ] *****

[#] Service Supprimé : Software_update
[#] Service Supprimé : Software_update_m
[#] Service Supprimé : Update WebConnect
[#] Service Supprimé : Util WebConnect

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\DSearchLink
Dossier Supprimé : C:\ProgramData\eSafe
Dossier Supprimé : C:\ProgramData\IBUpdaterService
Dossier Supprimé : C:\ProgramData\SweetIM
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
Dossier Supprimé : C:\Program Files (x86)\Boxore
Dossier Supprimé : C:\Program Files (x86)\FlvPlayer
Dossier Supprimé : C:\Program Files (x86)\HappyLyrics
Dossier Supprimé : C:\Program Files (x86)\MetaCrawler
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
Dossier Supprimé : C:\Program Files (x86)\Optimizer Pro
Dossier Supprimé : C:\Program Files (x86)\PC Speed Maximizer
Dossier Supprimé : C:\Program Files (x86)\Services x86
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Program Files (x86)\sweetpacks bundle uninstaller
[!] Dossier Supprimé : C:\Program Files (x86)\WebConnect
Dossier Supprimé : C:\WINDOWS\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Dossier Supprimé : C:\WINDOWS\Installer\{F847B70A-FC29-4B82-872E-58F2CE9DEE09}
Dossier Supprimé : C:\WINDOWS\SysWOW64\ARFC
Dossier Supprimé : C:\WINDOWS\SysWOW64\jmdp
Dossier Supprimé : C:\WINDOWS\SysWOW64\WNLT
Dossier Supprimé : C:\Program Files\Uninstaller
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\EoRezo
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\lollipop
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Pay-By-Ads
Dossier Supprimé : C:\Users\Isabelle\AppData\LocalLow\Delta
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\7go
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\BabSolution
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\MetaCrawler
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\Nosibay
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\Optimizer Pro
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\PerformerSoft
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\SeeSimilar02
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\SpeedAnalysis2
Dossier Supprimé : C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\ealchnonpofjocgofjpopjdoegbbkofj
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjajpkikblccgefaibcafkfbanllpefi
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\jidjhchcblhlapbcpheibgdjkajekhbh
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla
Dossier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\Extensions\***@***
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
Fichier Supprimé : C:\WINDOWS\System32\roboot64.exe
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\Bubble Dock.boostrap.log
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\speedanalysis.ico
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\invalidprefs.js
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\searchplugins\BrowserDefender.xml
Fichier Supprimé : C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\user.js
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.babylon.com_0.localstorage
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.babylon.com_0.localstorage-journal
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-search.com_0.localstorage
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-search.com_0.localstorage-journal
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage
Fichier Supprimé : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage-journal
Fichier Supprimé : C:\WINDOWS\System32\Tasks\BitGuard
Fichier Supprimé : C:\WINDOWS\System32\Tasks\Desk 365 RunAsStdUser
Fichier Supprimé : C:\WINDOWS\System32\Tasks\EPUpdater
Fichier Supprimé : C:\WINDOWS\Tasks\Happy Lyrics Update.job
Fichier Supprimé : C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job
Fichier Supprimé : C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineCore
Fichier Supprimé : C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job
Fichier Supprimé : C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA

***** [ Raccourcis ] *****

***** [ Registre ] *****

Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [***@***]
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ealchnonpofjocgofjpopjdoegbbkofj
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=3
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=9
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Clé Supprimée : HKCU\Software\524db8bbc3ced17
Clé Supprimée : HKLM\SOFTWARE\524db8bbc3ced17
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2316C625-B487-4410-A1A5-FF040B65245F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322202202}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6A83313B-E6B5-4F18-B49D-15EBE176A8B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355205502}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366206602}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{134B8A85-6292-4010-9FB0-D2D7B3768B9D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344204402}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316C625-B487-4410-A1A5-FF040B65245F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322202202}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6A83313B-E6B5-4F18-B49D-15EBE176A8B1}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355205502}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366206602}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKCU\Software\BABSOLUTION
Clé Supprimée : HKCU\Software\Boxore
Clé Supprimée : HKCU\Software\DataMngr
[#] Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\filescout
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\installedbrowserextensions
Clé Supprimée : HKCU\Software\lollipop
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\Optimizer Pro
Clé Supprimée : HKCU\Software\pc speed maximizer
Clé Supprimée : HKCU\Software\SweetIM
Clé Supprimée : HKCU\Software\Tuto4PC
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\WebConnect
Clé Supprimée : HKCU\Software\WNLT
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\HappyLyrics
Clé Supprimée : HKCU\Software\AppDataLow\Software\Plus-HD-1.6
Clé Supprimée : HKCU\Software\AppDataLow\Software\Services x86
Clé Supprimée : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\Software\delta-homesSoftware
Clé Supprimée : HKLM\Software\Desksvc
Clé Supprimée : HKLM\Software\eSafeSecControl
Clé Supprimée : HKLM\Software\FlvPlayer
Clé Supprimée : HKLM\Software\hdcode
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\Software\InstallCore
Clé Supprimée : HKLM\Software\Plus-HD-1.6
Clé Supprimée : HKLM\Software\Services x86
Clé Supprimée : HKLM\Software\SweetIM
Clé Supprimée : HKLM\Software\Tuto4PC
Clé Supprimée : HKLM\Software\V9
Clé Supprimée : HKLM\Software\WebConnect
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Search
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F847B70A-FC29-4B82-872E-58F2CE9DEE09}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FlvPlayer
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.6
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Services x86
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SweetIM Bundle by SweetPacks
Clé Supprimée : [x64] HKLM\SOFTWARE\DomaIQ
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebConnect
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL
Clé Supprimée : HKLM\Software\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
Clé Supprimée : HKLM\Software\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17126

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v28.0 (fr)

[ Fichier : C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\prefs.js ]

Ligne Supprimée : user_pref("browser.newtab.url", "hxxp://www.delta-homes.com/newtab/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=nt&from=newgdp&uid=TOSHIBAXMQ01ABD100_Y2O6P14QTXXY2O6P14QT&ts=1380215400[...]
Ligne Supprimée : user_pref("browser.search.defaultenginename", "metaCrawler");
Ligne Supprimée : user_pref("browser.search.order.1", "metaCrawler");
Ligne Supprimée : user_pref("browser.search.selectedEngine", "metaCrawler");
Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=4591425[...]
Ligne Supprimée : user_pref("extensions.AVIRA-V7.AUC_clientCache", "{\"AUC_CACHE\":{\"google.fr\":{\"c\":[1],\"ttl\":1398678892},\"ratp.fr\":{\"c\":[1],\"ttl\":1395944478},\"mappy.com\":{\"c\":[1],\"ttl\":1382185165},\[...]
Ligne Supprimée : user_pref("extensions.AVIRA-V7.apn.tldcache", "{\"date\":1398073957831,\"domainList\":[\"ac\",\"com.ac\",\"edu.ac\",\"gov.ac\",\"net.ac\",\"mil.ac\",\"org.ac\",\"ad\",\"nom.ad\",\"ae\",\"co.ae\",\"net[...]
Ligne Supprimée : user_pref("extensions.a6c937ed6be664f729a60ce5789cc7f0953ba67122cae46e2b82195baea44e049com32002.32002.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
Ligne Supprimée : user_pref("extensions.a6c937ed6be664f729a60ce5789cc7f0953ba67122cae46e2b82195baea44e049com32002.32002.internaldb.cache/62cce7d26ab5636bceb113b988d56c59_FR.value", "%22var%20cat_62cce7d26ab5636bceb113b[...]
Ligne Supprimée : user_pref("extensions.a6c937ed6be664f729a60ce5789cc7f0953ba67122cae46e2b82195baea44e049com32002.32002.internaldb.cache/e7395ccc0c22b2cca7bf3e0c7db4d8a6_FR.value", "%22var%20cat_e7395ccc0c22b2cca7bf3e0[...]
Ligne Supprimée : user_pref("extensions.a6c937ed6be664f729a60ce5789cc7f0953ba67122cae46e2b82195baea44e049com32002.32002.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//tomshardware.fr.intell[...]
Ligne Supprimée : user_pref("extensions.crossrider.bic", "1417ac7b709031d98cb12869928fc6ca");
Ligne Supprimée : user_pref("extensions.delta.admin", false);
Ligne Supprimée : user_pref("extensions.delta.aflt", "babsst");
Ligne Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Ligne Supprimée : user_pref("extensions.delta.autoRvrt", "false");
Ligne Supprimée : user_pref("extensions.delta.dfltLng", "fr");
Ligne Supprimée : user_pref("extensions.delta.excTlbr", false);
Ligne Supprimée : user_pref("extensions.delta.ffxUnstlRst", true);
Ligne Supprimée : user_pref("extensions.delta.id", "925b801f00000000000012d96204286d");
Ligne Supprimée : user_pref("extensions.delta.instlDay", "15959");
Ligne Supprimée : user_pref("extensions.delta.instlRef", "sst");
Ligne Supprimée : user_pref("extensions.delta.newTab", false);
Ligne Supprimée : user_pref("extensions.delta.prdct", "delta");
Ligne Supprimée : user_pref("extensions.delta.prtnrId", "delta");
Ligne Supprimée : user_pref("extensions.delta.rvrt", "false");
Ligne Supprimée : user_pref("extensions.delta.smplGrp", "none");
Ligne Supprimée : user_pref("extensions.delta.tlbrId", "base");
Ligne Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");
Ligne Supprimée : user_pref("extensions.delta.vrsn", "1.8.24.6");
Ligne Supprimée : user_pref("extensions.delta.vrsnTs", "1.8.24.613:32:48");
Ligne Supprimée : user_pref("extensions.delta.vrsni", "1.8.24.6");
Ligne Supprimée : user_pref("extensions.delta_i.babExt", "");
Ligne Supprimée : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5002");
Ligne Supprimée : user_pref("extensions.delta_i.srcExt", "ss");
Ligne Supprimée : user_pref("extensions.irmcrawler.aflt", "ironmc2");
Ligne Supprimée : user_pref("extensions.irmcrawler.cd", "2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu");
Ligne Supprimée : user_pref("extensions.irmcrawler.cr", "459142565");
Ligne Supprimée : user_pref("extensions.irmcrawler.instlRef", "");
Ligne Supprimée : user_pref("extensions.metacrawler.aflt", "ironmc2");
Ligne Supprimée : user_pref("extensions.metacrawler.appId", "{0FA5C13C-4EDA-488A-A8EB-B84CD7395A79}");
Ligne Supprimée : user_pref("extensions.metacrawler.cd", "2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu");
Ligne Supprimée : user_pref("extensions.metacrawler.cntry", "FR");
Ligne Supprimée : user_pref("extensions.metacrawler.cr", "459142565");
Ligne Supprimée : user_pref("extensions.metacrawler.dfltLng", "");
Ligne Supprimée : user_pref("extensions.metacrawler.dfltSrch", true);
Ligne Supprimée : user_pref("extensions.metacrawler.dnsErr", true);
Ligne Supprimée : user_pref("extensions.metacrawler.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,182856[...]
Ligne Supprimée : user_pref("extensions.metacrawler.excTlbr", false);
Ligne Supprimée : user_pref("extensions.metacrawler.hdrMd5", "E5A6B2C7A39A6E4A677A6DE36B2756E4");
Ligne Supprimée : user_pref("extensions.metacrawler.hmpg", true);
Ligne Supprimée : user_pref("extensions.metacrawler.hmpgUrl", "hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=4[...]
Ligne Supprimée : user_pref("extensions.metacrawler.id", "C0D96204286D801F");
Ligne Supprimée : user_pref("extensions.metacrawler.instlDay", "16006");
Ligne Supprimée : user_pref("extensions.metacrawler.instlRef", "");
Ligne Supprimée : user_pref("extensions.metacrawler.lastB", "hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=459[...]
Ligne Supprimée : user_pref("extensions.metacrawler.lastVrsnTs", "1.8.19.018:33:44");
Ligne Supprimée : user_pref("extensions.metacrawler.newTabUrl", "hxxp://i.search.metacrawler.com/?f=2&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr[...]
Ligne Supprimée : user_pref("extensions.metacrawler.prdct", "metacrawler");
Ligne Supprimée : user_pref("extensions.metacrawler.prtnrId", "metaCrawler");
Ligne Supprimée : user_pref("extensions.metacrawler.sg", "none");
Ligne Supprimée : user_pref("extensions.metacrawler.srchPrvdr", "metaCrawler");
Ligne Supprimée : user_pref("extensions.metacrawler.tlbrId", "base");
Ligne Supprimée : user_pref("extensions.metacrawler.tlbrSrchUrl", "hxxp://i.search.metacrawler.com/?f=3&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0CtD0DzyyCtBtDyEtBzzyC0DzztDtC0FtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&[...]
Ligne Supprimée : user_pref("extensions.metacrawler.vrsn", "1.8.19.0");
Ligne Supprimée : user_pref("extensions.metacrawler.vrsni", "1.8.19.0");
Ligne Supprimée : user_pref("extensions.metacrawler_i.hmpg", true);
Ligne Supprimée : user_pref("extensions.metacrawler_i.newTab", false);
Ligne Supprimée : user_pref("extensions.metacrawler_i.smplGrp", "none");
Ligne Supprimée : user_pref("extensions.metacrawler_i.vrsnTs", "1.8.19.018:33:44");

-\\ Google Chrome v36.0.1985.125

[ Fichier : C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Startup_urls] : hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=925B12D96204286D&affID=119357&tsp=5002
Supprimée [Homepage] : hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=925B12D96204286D&affID=119357&tsp=5002
Supprimée [Extension] : engaigpbgdjjmanonjcjkcmomgibneba
Supprimée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Supprimée [Extension] : dgjkhjdcljddbedokogakmmdjgnbeanf
Supprimée [Extension] : ealchnonpofjocgofjpopjdoegbbkofj
Supprimée [Extension] : gjajpkikblccgefaibcafkfbanllpefi
Supprimée [Extension] : ieakfmpjhljbpbfpldjkddkjmmgjmgon
Supprimée [Extension] : ifohbjbgfchkkfhphahclmkpgejiplfo
Supprimée [Extension] : jidjhchcblhlapbcpheibgdjkajekhbh
Supprimée [Extension] : nchpfiddbhbdnagofhkjlaiaejmkdcla
Supprimée [Extension] : pbaohildkhbcljgoabiecdoinkaedlca

*************************

AdwCleaner[R0].txt - [26615 octets] - [25/07/2014 16:46:47]
AdwCleaner[S0].txt - [25137 octets] - [25/07/2014 16:47:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25198 octets] ##########

re

ok, firefox n'est pas a jour, met le a jour>> https://support.mozilla.org/fr/kb/mettre-jour-firefox-derniere-version

ensuite, fait ceci et poste le rapport s'il te plaît

http://sosvirus.net/viewtopic.php?f=281&t=594

utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

a la fin de l'installation, décoche la case "activer l'essai gratuit de MBAM premium"

regarde l'image >> clique ici

regarde ceci pour le mettre a jour et en français >> clique ici

dans l'onglet "examens" sélectionne "examen menaces" puis clique sur "examiner maintenant"

a la fin du scan, clique sur "tout mettre en quarantaine " puis sur "appliquer les actions"

si MBAM demande de redémarrer le pc, fait le

le rapport s'affichera sur ton bureau, mais sera aussi disponible dans "historique"

et "journaux de l'application"

sélectionne le rapport et demande l'affichage (choisit bien le dernier en date)

en bas a gauche, clique sur "exporter" et choisit "format texte"

enregistre le sur ton bureau (pour le retrouver facilement)

poste le rapport via 1 copier/coller dans ta prochaine réponse

merci

@+

Bonsoir,
voici le rapport. merci pour votre aide
Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 25/07/2014
Heure de l'examen: 17:26:33
Fichier journal: rapport.txt
Administrateur: Oui

Version: 2.00.2.1012
Base de données Malveillants: v2014.07.25.04
Base de données Rootkits: v2014.07.17.01
Licence: Gratuite
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Self-protection: Désactivé(e)

Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Isabelle

Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 291999
Temps écoulé: 14 min, 59 sec

Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Désactivé(e)
Heuristics: Activé(e)
PUP: Activé(e)
PUM: Activé(e)

Processus: 1
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe, 3452, Supprimé-au-redémarrage, [942462412d4e1e1839fc548d0004847c]

Modules: 1
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\ffxtn.dll, Supprimé-au-redémarrage, [74441093c8b3b581628cf0cf82808977],

Clés du Registre: 3
PUP.Optional.PayByAds.A, HKU\S-1-5-21-44279061-2991893873-181971371-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\shopwit, Supprimé-au-redémarrage, [942462412d4e1e1839fc548d0004847c],
PUP.Optional.Babylon.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, Supprimé-au-redémarrage, [d2e6d3d085f662d413ef6bf0da281de3],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{664f7cae-01d9-48b5-bc90-e3c3d6bb0ddb}w64, Mis en quarantaine, [9f19376cc2b92d0991b334f4a163e917],

Valeurs du Registre: 1
PUP.Optional.PayByAds.A, HKU\S-1-5-21-44279061-2991893873-181971371-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|shopwit, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe, Supprimé-au-redémarrage, [942462412d4e1e1839fc548d0004847c]

Données du Registre: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Bon: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Mauvais: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Remplacé,[576141626f0cf93da18d22919d67966a]

Dossiers: 8
PUP.Optional.7Go.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjajpkikblccgefaibcafkfbanllpefi, Mis en quarantaine, [c3f59d068fec989e6534adfffa08619f],
PUP.Optional.SmartDisplay.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa, Mis en quarantaine, [892f148f66156ec8da5a971858aa10f0],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\jidjhchcblhlapbcpheibgdjkajekhbh, Mis en quarantaine, [694f1093e596d56124b48e2edd25e719],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jidjhchcblhlapbcpheibgdjkajekhbh_0, Mis en quarantaine, [bbfd564df4879d991bbfd9e3f50d31cf],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit, Supprimé-au-redémarrage, [74441093c8b3b581628cf0cf82808977],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit, Supprimé-au-redémarrage, [74441093c8b3b581628cf0cf82808977],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10, Supprimé-au-redémarrage, [74441093c8b3b581628cf0cf82808977],

Fichiers: 30
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe, Supprimé-au-redémarrage, [942462412d4e1e1839fc548d0004847c],
PUP.Optional.InstallBrain, C:\Users\Isabelle\Downloads\SoftangoDownloader_VlcMediaPlayer.exe, Mis en quarantaine, [8f29d2d1d8a3b581bc1e57dd827ee21e],
PUP.Optional.Firseria, C:\Users\Isabelle\Downloads\Microsoft Outlook (1).exe, Mis en quarantaine, [63554a592a5153e3d4aa9e3b768e946c],
PUP.Optional.Solimba, C:\Users\Isabelle\Downloads\Microsoft Outlook.exe, Mis en quarantaine, [8731673c413a3ff7c286e925d928da26],
PUP.Optional.BundleInstaller.A, C:\Users\Isabelle\Downloads\New player.exe, Mis en quarantaine, [e1d7a4ff8cef93a3e8c4a88fbf459769],
Adware.InstallBrain, C:\Users\Isabelle\Downloads\PCPerformerSetup.exe, Mis en quarantaine, [397f723112690432d0ac2ae6a55c45bb],
Adware.Boxore, C:\Windows\Installer\1477a8ba.msi, Mis en quarantaine, [d8e0475c1467b581b45e6f37d52b18e8],
PUP.Optional.SweetIM, C:\Windows\Installer\31610eba.msi, Mis en quarantaine, [0fa9f3b07605cd6994178750897b6a96],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-1.6-chromeinstaller.job, Mis en quarantaine, [9d1b2f74b5c60a2c485d5d6daa583ec2],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-1.6-codedownloader.job, Mis en quarantaine, [d3e56d369fdc72c41590894150b2ed13],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-1.6-enabler.job, Mis en quarantaine, [6355b3f0403b072f8124854562a0fa06],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-1.6-firefoxinstaller.job, Mis en quarantaine, [18a04a59ff7cb2843b6a3298659d6b95],
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-1.6-updater.job, Mis en quarantaine, [f8c0bae91e5d75c14f5606c448ba58a8],
PUP.Optional.LiveLyrics.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage, Mis en quarantaine, [0bad891a215afd39989ad802cd352ad6],
PUP.Optional.LiveLyrics.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage-journal, Mis en quarantaine, [d9dfcfd4a2d915214de59b3f4cb61ce4],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jidjhchcblhlapbcpheibgdjkajekhbh_0.localstorage, Mis en quarantaine, [fbbdd2d1fe7d1c1aeaff0620cd37758b],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jidjhchcblhlapbcpheibgdjkajekhbh_0.localstorage-journal, Mis en quarantaine, [3c7c02a1f3885adcd0191a0ca85c51af],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{664f7cae-01d9-48b5-bc90-e3c3d6bb0ddb}w64.sys, Mis en quarantaine, [9f19376cc2b92d0991b334f4a163e917],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000015.log, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\000016.ldb, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\CURRENT, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOCK, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOG, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\LOG.old, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jidjhchcblhlapbcpheibgdjkajekhbh\MANIFEST-000013, Mis en quarantaine, [7e3a089b99e2c96d9c3d9b2120e254ac],
PUP.Optional.CrossRider.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jidjhchcblhlapbcpheibgdjkajekhbh_0\2, Mis en quarantaine, [bbfd564df4879d991bbfd9e3f50d31cf],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\app.ini, Mis en quarantaine, [74441093c8b3b581628cf0cf82808977],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\chrmXtn.dll, Mis en quarantaine, [74441093c8b3b581628cf0cf82808977],
PUP.Optional.PayByAds.A, C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\ffxtn.dll, Supprimé-au-redémarrage, [74441093c8b3b581628cf0cf82808977],
PUP.Optional.Delta.A, C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\preferences, Bon: (), Mauvais: ( "search_url": "http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=ds&from=newgdp&uid=TOSHIBAXMQ01ABD100_Y2O6P14QTXXY2O6P14QT&ts=1380215400&type=default&q={searchTerms}",), Remplacé,[ebcd6340cdaef2446f0221c1659f27d9]

Secteurs physiques: 0
(No malicious items detected)

(end)

re

ok, dit moi comment va le pc

ensuite, fait ceci et poste le rapport s'il te plaît

télécharge zhpdiag sur ton bureau (outil de diagnostic)

le lien https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

le tuto http://www.forum-entraide-informatique.com/support/zhpdiag-tutoriel-t4831.html

utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

clique sur "complet" >>aide en image >> clique ici

le rapport s'affichera sur ton bureau et dans C:\zhpdiag.txt

poste le rapport via ce lien https://www.cjoint.com/

merci

@+

ça me parait plutot bien!! j'ai plus de pubs intempestives. merci!

re

ok, mais fait quand même le scan avec zhpdiag pour contrôle

merci

@+

voici le rapport, merci!
~ Rapport de ZHPDiag v2014.7.24.108 - Nicolas Coolman (24/07/2014)
~ Lancé par Isabelle (25/07/2014 19:22:34)
~ Adresse du Site Web http://nicolascoolman.fr
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by usera

---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17207
MFIE: Mozilla Firefox 31.0 (Defaut)
GCIE: Google Chrome v36.0.1985.125

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 8.1, 64-bit (Build 9600)
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : TMQHT
Windows License : OK
~ Windows Remaining Initializations Number : 999
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
Avira Free Antivirus v14.0.5.464
Malwarebytes Anti-Malware version 2.0.2.1012
McAfee Security Scan Plus v3.8.150.1
Windows Defender W8 (Deactivate)

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 14 Plugin

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6111 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 873 GB (94%) free of 920 GB

---\\ Mode de connexion au système
~ Computer Name: ISABELLE
~ User Name: Isabelle
~ All Users Names: Isabelle, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Isabelle\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Isabelle\AppData\Roaming\
~ %Desktop% : C:\Users\Isabelle\Desktop\
~ %Favorites% : C:\Users\Isabelle\Favorites\
~ %LocalAppData% : C:\Users\Isabelle\AppData\Local\
~ %StartMenu% : C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 873 Go of 920 Go)
D: CD-ROM drive (Free 0 Go of 0 Go)

---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Explorateur Windows.) (.04/03/2014 - 13:25:49.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.2EE102DF0EDD8A1EDD3D1E9B99A91BEC] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/06/2014 - 23:58:27.) -- C:\Windows\System32\wininet.dll [2266112]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.498288DD5CA42C2D36D125893E968C53] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.18/03/2014 - 09:19:14.) -- C:\Windows\system32\Drivers\HDAudBus.sys [77312]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/02/2014 - 00:21:56.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.0696F66E4D423793951A60562F794D14] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.03/04/2014 - 03:23:05.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.20/03/2014 - 04:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.14/11/2013 - 08:16:40.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.4BB9BC49DEE1A319EC58274A7BBED663] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.06/03/2014 - 13:42:44.) -- C:\Windows\system32\Drivers\volsnap.sys [310616]
~ Generic Processes: Scanned in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/1935
~ Mes musiques (My Musics) : 1/266
~ Mes Favoris (My Favorites) : 1/9
~ Mes Documents (My Documents) : 2/1096
~ Mon Bureau (My Desktop) : 2/62
~ Menu demarrer (Programs) : 1/33
~ Hidden Files: Scanned in 00mn 01s

---\\ Processus lancés
[MD5.CF74C5BE20CD4DE1299F6C92A738A2DF] - (.TOSHIBA Corporation - Sleep and Charge Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952] [PID.2524]
[MD5.6EF487A46FB615DF717F85D7458BD2CD] - (.Pas de propriétaire - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136] [PID.1268]
[MD5.88354CCEE11A1621B5C7951BFF999474] - (.Microsoft Corporation - Send to OneNote Tool.) -- C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.exe [195248] [PID.3320]
[MD5.1E9B225DE829A6F666A0BA9B8A7984BF] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160] [PID.2276]
[MD5.0A76EB770F0D432AA7795C5DDB27B888] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1956760] [PID.464] =>Toolbar.Ask
[MD5.4DEEE0D77498D818B486E3172053BD03] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [315478] [PID.2236]
[MD5.07172AE32812C00603887C0D54DEADA0] - (.Microsoft Corporation - Microsoft Office Document Cache Sync Client.) -- C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.exe [79600] [PID.1540]
[MD5.8DF7F2A9B72B7CA4294BB9E59FEAEFCD] - (.Microsoft Corporation - Hôte Microsoft WWA.) -- C:\WINDOWS\syswow64\wwahost.exe [514560] [PID.4832]
[MD5.10F36FB8CD6218CD7F818268E0F3F9C6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.3724]
[MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.5744]
[MD5.80E04F074334739C96E1C08C331FB82D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8080384] [PID.2132]
~ Processes Running: Scanned in 00mn 00s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Isabelle\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 1 Scanned in 00mn 05s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\prefs.js
M2 - MFEP: prefs.js [Isabelle - r3jlewya.default\***@***] [] metacrawler.com v1.6.0 (..) =>Adware.SearchYa
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
~ Firefox Browser: 3 Scanned in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17031 (winblue_gdr.140221-1952)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 16 Scanned in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\System32\Userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s

---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: MSS+ Identifier [64Bits] - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} . (.McAfee, Inc. - Quick Browser Identifier for MSS+ Tool.) -- C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: Avira SearchFree Toolbar BHO [64Bits] - {41564952-412D-5637-00A7-7A786E7484D7} . (...) -- "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" (.not file.) =>Toolbar.Avira
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} Clé orpheline
O2 - BHO: (no name) [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} Clé orpheline
~ BHO: 5 Scanned in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Avira SearchFree Toolbar - [HKLM]{41564952-412D-5637-00A7-7A786E7484D7} . (.APN LLC. - Passport.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll =>Toolbar.Ask
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{41564952-412D-5637-00A7-7A786E7484D7} Clé orpheline
~ Toolbar: Scanned in 00mn 00s

---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [SmartAudio] . (.Conexant Systems, Inc. - SmartAudio CPL (32bit).) -- C:\Program Files\CONEXANT\SAII\SACpl.exe
O4 - HKLM\..\Run: [cAudioFilterAgent] . (.Conexant Systems, Inc. - Conexant High Definition Audio Filter Agent.) -- C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
O4 - HKLM\..\Run: [SRS Premium Sound HD] . (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
O4 - HKLM\..\Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe (.not file.)
O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe
O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.)
O4 - HKLM\..\Run: [ThpSrv] Clé orpheline
O4 - HKLM\..\Run: [TSleepSrv] . (.TOSHIBA Corporation - Sleep and Charge Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
O4 - HKLM\..\Run: [TODDMain] . (.Pas de propriétaire - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKCU\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Isabelle\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc
O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_39] Clé orpheline =>PUP.AgenceExclusive
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask
O4 - HKLM\..\Wow6432Node\Run: [BtTray] . (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
O4 - HKUS\S-1-5-21-44279061-2991893873-181971371-1001\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Isabelle\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
~ Application: Scanned in 00mn 00s

---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\lync.exe (.not file.)
O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\WINDOWS\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\WINDOWS\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4A62C38E-A4D1-4290-AEF1-12A480D6433D}: DhcpNameServer = 40.41.1.201 40.41.1.202
O17 - HKLM\System\CCS\Services\Tcpip\..\{D66894E1-CB27-4DFD-A4A3-0CC3C7983F6F}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4A62C38E-A4D1-4290-AEF1-12A480D6433D}: DhcpNameServer = 40.41.1.201 40.41.1.202
O17 - HKLM\System\CS1\Services\Tcpip\..\{D66894E1-CB27-4DFD-A4A3-0CC3C7983F6F}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: Service de mise à jour Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
O23 - Service: BlueSoleilCS (BlueSoleilCS) . (.IVT Corporation - Bluetooth Application.) - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) . (.Conexant Systems Inc. - Conexant Audio Message Service.) - C:\windows\system32\CxAudMsg64.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: TOSHIBA HDD Protection (Thpsrv) . (.TOSHIBA Corporation - TOSHIBA HDD Protection Service.) - C:\windows\system32\ThpSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\Toshiba\Teco\TecoService.exe =>.Toshiba Corporation
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 17 Scanned in 00mn 04s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s

---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
[MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore1cec4b63b1f6ec0] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.00000000000000000000000000000000] [APT] [Shop-wit] (...) -- C:\Users\Isabelle\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe (.not file.) [0]
[MD5.18AE8CD3665F375CBD250E347F6061E7] [APT] [CommonNotifier] (.Toshiba Europe GmbH.) -- C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [461272]
[MD5.B7C0AC916884B05310E85E45C7FC2EDF] [APT] [Service Station] (.TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [1295496]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: GoogleUpdateTaskMachineCore1cec4b63b1f6ec0 - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec4b63b1f6ec0.job [1090]
O39 - APT: GoogleUpdateTaskMachineCore1cec4b63b1f6ec0 - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec4b63b1f6ec0 [1090]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1090]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1090]
~ Scheduled Task: 12 Scanned in 00mn 04s

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s

---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\system32\DRIVERS\avkmgr.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
~ Drivers: 36 Scanned in 00mn 00s

---\\ Logiciels installés (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A04B2417-373C-2BF9-D8C8-48FD027CAE14}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {95EF3DDB-27C8-CDA9-9E72-5EC3F02C1B02}
O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- AmUStor
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Avira Free Antivirus v14.0.5.464 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop
O42 - Logiciel: Avira SearchFree Toolbar v12.15.1.464 - (.APN, LLC.) [HKLM][64Bits] -- {41564952-412D-5637-00A7-A758B70C0F01} =>Toolbar.Avira
O42 - Logiciel: Bluesoleil 5.4.277.0 - (.IVT Corporation.) [HKLM][64Bits] -- {FBBAB883-0BEE-4744-8062-281B213ADC1E}
O42 - Logiciel: Bubble Dock (remove only) - (.Nosibay.) [HKCU][64Bits] -- Bubble Dock =>PUP.BubbleDock
O42 - Logiciel: Buzzdock - (.Alactro LLC.) [HKLM][64Bits] -- {ac225167-00fc-452d-94c5-bb93600e7d9a}
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {CF1F9079-DCB5-4AA3-9015-CAA18A2CFF35}
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM][64Bits] -- CNXT_AUDIO_HDA
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Happy Lyrics - (.Happy Productions.) [HKLM][64Bits] -- ***@*** =>Adware.AddLyrics
O42 - Logiciel: Intel AppUp(SM) center - (.Intel.) [HKLM][64Bits] -- Intel AppUp(SM) center 33268
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: MonAlbumPhoto - (.MonAlbumPhoto.) [HKLM][64Bits] -- MonAlbumPhoto_is1
O42 - Logiciel: Mozilla Firefox 31.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 31.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mozilla Thunderbird 24.5.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 24.5.0 (x86 fr) =>.Mozilla Corporation
O42 - Logiciel: Nero 12 Essentials Toshiba - (.Nero AG.) [HKLM][64Bits] -- {2EF76291-8647-46F0-89D8-0AA8B72A5420}
O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {0071820F-09B0-4998-8320-F89629DCBC99}
O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415}
O42 - Logiciel: Nero Blu-ray Player - (.Nero AG.) [HKLM][64Bits] -- {A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}
O42 - Logiciel: Nero Blu-ray Player Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}
O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {1001266B-D4BB-46D9-B023-2612A8CE3A31}
O42 - Logiciel: Nero BurnRights Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {8E7EABFA-BF37-4824-B792-4220C9E04233}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63}
O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Nero Express - (.Nero AG.) [HKLM][64Bits] -- {848A7C68-0ADC-4193-8A89-2CEA78E56A0C}
O42 - Logiciel: Nero Express Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0708FF30-78C0-47B0-81F0-C84604DC769C}
O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM][64Bits] -- {052A1E34-A54B-458C-A4E3-24C3E054754A}
O42 - Logiciel: Nero Kwik Media Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {1F16820E-D0E7-4636-939E-45CBFEFB06E1}
O42 - Logiciel: Nero Kwik Themes Basic - (.Nero AG.) [HKLM][64Bits] -- {1B6F5E51-575E-4693-BCA2-7543570D076D}
O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9}
O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {B953732D-B623-4E84-B369-CFFF7B1AE06F}
O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156}
O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Office 15 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-0000-0000-0000000FF1CE}
O42 - Logiciel: Office 15 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008F-0000-1000-0000000FF1CE}
O42 - Logiciel: Office 15 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-040C-0000-0000000FF1CE}
O42 - Logiciel: Premium Sound HD - (.SRS Labs, Inc..) [HKLM][64Bits] -- {94F03B8E-CB73-4653-AFE9-79112C01FED2}
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02}
O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120}
O42 - Logiciel: TOSHIBA HDD Protection - (.Toshiba Corporation.) [HKLM][64Bits] -- {94A90C69-71C1-470A-88F5-AA47ECC96B40}
O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: TOSHIBA Resolution+ Plug-in for Windows Media Player - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94} =>.Microsoft Corporation
O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {B8C8422F-01F1-4791-B084-047AAFF9BFCC} =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C}
O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0}
O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A}
O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7} =>.Toshiba Corporation
O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A} =>.Toshiba Corporation
O42 - Logiciel: Welcome App (Start-up experience) - (.Nero AG.) [HKLM][64Bits] -- {828175FA-7307-4DBF-95AD-9CEE086B6F45}
O42 - Logiciel: adsl TV - (.adsl TV / FM.) [HKLM][64Bits] -- {3AFDD2C6-8663-46B5-B195-6CEB00D44768}
O42 - Logiciel: metaCrawler - (.metaCrawler.) [HKLM][64Bits] -- metaCrawler =>Adware.SearchYa
~ Logic: 53 Scanned in 00mn 00s

---\\ HKCU & HKLM Software Keys
[HKCU\Software\524db8b]
[HKCU\Software\ATI]
[HKCU\Software\AppDataLow\Software\CallingID]
[HKCU\Software\AppDataLow]
[HKCU\Software\AskPartnerNetwork]
[HKCU\Software\Avira]
[HKCU\Software\CDDB]
[HKCU\Software\CallingID]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conexant]
[HKCU\Software\Google]
[HKCU\Software\IncrediMail]
[HKCU\Software\InfoSpace.com]
[HKCU\Software\Licenses]
[HKCU\Software\MAP-DN]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Software]
[HKCU\Software\Synaptics]
[HKCU\Software\Toshiba]
[HKCU\Software\Trolltech]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\metacrawler] =>Adware.SearchYa
[HKCU\Software\monAlbumPhoto]
[HKCU\Software\mozilla]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AskPartnerNetwork]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CnxtCoinst]
[HKLM\Software\Cnxt_Uiu_Parms]
[HKLM\Software\Conexant]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Synaptics]
[HKLM\Software\ToshibaBlobDelivery]
[HKLM\Software\Toshiba]
[HKLM\Software\UIU]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AskPartnerNetwork]
[HKLM\Software\Wow6432Node\Atheros Communications Inc.]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Avira]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IVT Corporation]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\MAP-DN]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Software]
[HKLM\Software\Wow6432Node\TOSHIBA]
[HKLM\Software\Wow6432Node\Toshiba Corporation]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WebConnect] =>PUP.WebConnect
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\X-AVCSD]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\sMedio]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mcafeeupdater]
~ Key Software: 223 Scanned in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 23/05/2013 - 20:43:39 - [] ----D C:\Program Files (x86)\adslTV
O43 - CFD: 31/01/2013 - 12:57:40 - [] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 31/01/2013 - 12:57:41 - [] ----D C:\Program Files (x86)\AMD AVT
O43 - CFD: 31/01/2013 - 13:06:38 - [] ----D C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 27/06/2014 - 22:34:22 - [] ----D C:\Program Files (x86)\AskPartnerNetwork
O43 - CFD: 31/01/2013 - 13:05:00 - [] ----D C:\Program Files (x86)\Atheros
O43 - CFD: 31/01/2013 - 12:57:36 - [] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 07/08/2013 - 23:46:49 - [] ----D C:\Program Files (x86)\Avira
O43 - CFD: 13/02/2014 - 01:39:51 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 02/11/2012 - 00:41:18 - [] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay
O43 - CFD: 15/05/2013 - 07:34:32 - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 31/01/2013 - 13:15:03 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 31/01/2013 - 12:59:35 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/07/2014 - 13:04:24 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 26/02/2014 - 14:49:46 - [] ----D C:\Program Files (x86)\IVT Corporation
O43 - CFD: 25/07/2014 - 17:25:12 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 23/03/2013 - 18:59:31 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 13/03/2014 - 20:03:34 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 23/03/2013 - 17:40:21 - [] ----D C:\Program Files (x86)\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 13/02/2014 - 01:39:51 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 16/09/2013 - 21:25:50 - [] ----D C:\Program Files (x86)\MonAlbumPhoto
O43 - CFD: 25/07/2014 - 18:32:12 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 25/07/2014 - 18:32:13 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 12/05/2014 - 20:21:29 - [] ----D C:\Program Files (x86)\Mozilla Thunderbird =>.Mozilla Corporation
O43 - CFD: 13/02/2014 - 01:16:41 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 02/11/2012 - 00:48:41 - [] ----D C:\Program Files (x86)\Nero
O43 - CFD: 13/02/2014 - 01:16:41 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 31/01/2013 - 13:15:03 - [] ----D C:\Program Files (x86)\TOSHIBA
O43 - CFD: 07/08/2013 - 23:25:38 - [] ----D C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 02/11/2012 - 00:53:34 - [] ----D C:\Program Files (x86)\Toshiba TEMPRO =>.Toshiba Corporation
O43 - CFD: 25/07/2014 - 16:50:32 - [] ----D C:\Program Files (x86)\WebConnect =>PUP.WebConnect
O43 - CFD: 21/05/2014 - 22:42:17 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 14/11/2013 - 09:13:28 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 21/05/2014 - 22:41:35 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 21/05/2014 - 22:41:36 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22/08/2013 - 17:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 14/11/2013 - 09:13:28 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/05/2014 - 22:41:35 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 13/02/2014 - 01:39:55 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22/08/2013 - 17:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 25/07/2014 - 19:22:09 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 31/01/2013 - 12:57:41 - [] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 23/03/2013 - 19:29:21 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 02/11/2012 - 00:11:35 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 13/02/2014 - 01:39:50 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 02/11/2012 - 00:47:51 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 31/01/2013 - 12:55:10 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 22/08/2013 - 17:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 14/11/2013 - 09:13:28 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 31/01/2013 - 13:14:26 - [] ----D C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 16/09/2013 - 21:32:55 - [] ----D C:\ProgramData\albumphoto
O43 - CFD: 31/01/2013 - 12:57:42 - [] ----D C:\ProgramData\AMD
O43 - CFD: 31/01/2013 - 13:06:38 - [] ----D C:\ProgramData\AmUStor
O43 - CFD: 07/08/2013 - 23:48:32 - [] ----D C:\ProgramData\APN
O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 07/08/2013 - 23:49:41 - [] ----D C:\ProgramData\AskPartnerNetwork
O43 - CFD: 31/01/2013 - 13:04:13 - [] ----D C:\ProgramData\ATI
O43 - CFD: 07/08/2013 - 23:46:49 - [] ----D C:\ProgramData\Avira
O43 - CFD: 13/02/2014 - 01:58:26 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 31/01/2013 - 13:00:03 - [] ----D C:\ProgramData\Conexant
O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 23/05/2013 - 20:16:18 - [] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 31/01/2013 - 12:56:38 - [] ----D C:\ProgramData\Intel
O43 - CFD: 25/07/2014 - 17:25:09 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 11/09/2013 - 13:36:01 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 16/06/2014 - 17:43:48 - [] ----D C:\ProgramData\McAfee Security Scan
O43 - CFD: 13/02/2014 - 01:58:26 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 13/02/2014 - 01:39:59 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 20/02/2014 - 15:51:12 - [] ----D C:\ProgramData\Microsoft OneDrive
O43 - CFD: 23/03/2013 - 17:40:11 - [] ----D C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 13/02/2014 - 01:58:26 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 06/08/2013 - 21:45:43 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 02/11/2012 - 01:00:06 - [] ----D C:\ProgramData\Nero
O43 - CFD: 13/02/2014 - 01:40:00 - [] ----D C:\ProgramData\PRICache
O43 - CFD: 31/01/2013 - 13:04:36 - [] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 11/07/2014 - 09:15:40 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 02/10/2013 - 20:19:59 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 02/03/2013 - 18:14:09 - [] ----D C:\ProgramData\Toshiba
O43 - CFD: 02/03/2013 - 18:16:48 - [] ----D C:\ProgramData\ToshibaEurope
O43 - CFD: 07/08/2013 - 23:24:56 - [] ----D C:\ProgramData\WildTangent
O43 - CFD: 02/03/2013 - 18:12:36 - [] ----D C:\Users\Isabelle\AppData\Roaming\Adobe
O43 - CFD: 02/03/2013 - 18:18:42 - [] ----D C:\Users\Isabelle\AppData\Roaming\ATI
O43 - CFD: 07/08/2013 - 23:47:38 - [] ----D C:\Users\Isabelle\AppData\Roaming\Avira
O43 - CFD: 13/02/2014 - 08:00:29 - [] ----D C:\Users\Isabelle\AppData\Roaming\Identities
O43 - CFD: 02/03/2013 - 18:16:07 - [] ----D C:\Users\Isabelle\AppData\Roaming\Macromedia
O43 - CFD: 13/02/2014 - 08:01:39 - [] -S--D C:\Users\Isabelle\AppData\Roaming\Microsoft
O43 - CFD: 06/08/2013 - 22:04:07 - [] ----D C:\Users\Isabelle\AppData\Roaming\Mozilla
O43 - CFD: 31/03/2013 - 18:06:44 - [] ----D C:\Users\Isabelle\AppData\Roaming\Nero
O43 - CFD: 07/08/2013 - 23:28:12 - [] ----D C:\Users\Isabelle\AppData\Roaming\player
O43 - CFD: 14/03/2013 - 20:44:04 - [] ----D C:\Users\Isabelle\AppData\Roaming\sMedio
O43 - CFD: 02/03/2014 - 19:23:07 - [] ----D C:\Users\Isabelle\AppData\Roaming\Thunderbird =>.Mozilla Corporation
O43 - CFD: 07/08/2013 - 23:21:42 - [] ----D C:\Users\Isabelle\AppData\Roaming\WildTangent
O43 - CFD: 25/07/2014 - 19:22:57 - [] ----D C:\Users\Isabelle\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 11/09/2013 - 13:38:59 - [0] ----D C:\Users\Isabelle\AppData\Local\Adobe
O43 - CFD: 04/09/2013 - 18:09:21 - [] ----D C:\Users\Isabelle\AppData\Local\adslTV
O43 - CFD: 13/02/2014 - 01:36:06 - [] -SH-D C:\Users\Isabelle\AppData\Local\Application Data
O43 - CFD: 15/05/2013 - 07:33:08 - [] ----D C:\Users\Isabelle\AppData\Local\Apps
O43 - CFD: 07/08/2013 - 23:51:18 - [] ----D C:\Users\Isabelle\AppData\Local\AskPartnerNetwork
O43 - CFD: 02/03/2013 - 18:18:42 - [] ----D C:\Users\Isabelle\AppData\Local\ATI
O43 - CFD: 14/09/2013 - 09:36:24 - [] ----D C:\Users\Isabelle\AppData\Local\avgchrome
O43 - CFD: 26/02/2014 - 14:54:51 - [] ----D C:\Users\Isabelle\AppData\Local\bluesoleil
O43 - CFD: 06/02/2014 - 07:28:00 - [0] ----D C:\Users\Isabelle\AppData\Local\Diagnostics
O43 - CFD: 25/04/2013 - 21:07:10 - [0] ----D C:\Users\Isabelle\AppData\Local\ElevatedDiagnostics
O43 - CFD: 14/06/2014 - 21:23:48 - [] -SH-D C:\Users\Isabelle\AppData\Local\EmieSiteList
O43 - CFD: 14/06/2014 - 21:23:48 - [] -SH-D C:\Users\Isabelle\AppData\Local\EmieUserList
O43 - CFD: 15/05/2013 - 07:34:45 - [] ----D C:\Users\Isabelle\AppData\Local\Google
O43 - CFD: 13/02/2014 - 01:36:06 - [] -SH-D C:\Users\Isabelle\AppData\Local\Historique
O43 - CFD: 11/09/2013 - 13:39:02 - [] ----D C:\Users\Isabelle\AppData\Local\Macromedia
O43 - CFD: 14/05/2014 - 10:24:36 - [] ----D C:\Users\Isabelle\AppData\Local\Microsoft
O43 - CFD: 02/10/2013 - 14:03:48 - [] ----D C:\Users\Isabelle\AppData\Local\Mozilla
O43 - CFD: 02/07/2014 - 07:22:55 - [] ----D C:\Users\Isabelle\AppData\Local\Packages
O43 - CFD: 29/05/2013 - 13:29:09 - [] ----D C:\Users\Isabelle\AppData\Local\Programs
O43 - CFD: 02/03/2013 - 18:13:31 - [] ----D C:\Users\Isabelle\AppData\Local\SRS Labs
O43 - CFD: 25/07/2014 - 19:22:54 - [] ----D C:\Users\Isabelle\AppData\Local\Temp
O43 - CFD: 13/02/2014 - 01:36:06 - [] -SH-D C:\Users\Isabelle\AppData\Local\Temporary Internet Files
O43 - CFD: 18/03/2014 - 21:48:44 - [] ----D C:\Users\Isabelle\AppData\Local\Thunderbird =>.Mozilla Corporation
O43 - CFD: 17/03/2013 - 22:29:20 - [] ----D C:\Users\Isabelle\AppData\Local\TOSHIBA
O43 - CFD: 23/05/2013 - 21:19:57 - [] ----D C:\Users\Isabelle\AppData\Local\VirtualStore
O43 - CFD: 22/08/2013 - 17:36:32 - [] R---D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22/08/2013 - 17:36:32 - [] R---D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 13/06/2014 - 22:36:11 - [] R---D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 13/02/2014 - 01:43:21 - [] ----D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\adsl TV
O43 - CFD: 22/08/2013 - 17:36:32 - [] ----D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 13/06/2014 - 22:36:11 - [] R---D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 13/02/2014 - 01:37:17 - [] R---D C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 128 Scanned in 00mn 00s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.BDD4A74421B023C81DA63168BD10C01B] - 11/07/2014 - 07:40:02 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [846336]
O44 - LFC:[MD5.CA67F68CEC788C0C69AD47C5125DDD8E] - 11/07/2014 - 07:40:03 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [608768]
O44 - LFC:[MD5.1FD6C2F6AC489C271565730F6E9E1A05] - 11/07/2014 - 07:40:06 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [85504]
O44 - LFC:[MD5.D8E6706AECD7AA50764E126CE3F36555] - 11/07/2014 - 07:40:12 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [631808]
O44 - LFC:[MD5.1685AA234852657C4A6D253CCBBE84E0] - 11/07/2014 - 07:40:13 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2040832]
O44 - LFC:[MD5.A21C6231459F4CAC212676A9367A1A68] - 11/07/2014 - 07:40:18 ---A- . (.Microsoft Corporation - Utilitaire à l'exécution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll [2768384]
O44 - LFC:[MD5.2EE102DF0EDD8A1EDD3D1E9B99A91BEC] - 11/07/2014 - 07:40:19 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2266112]
O44 - LFC:[MD5.73C7D1FCF6F58F3BF077FB42B0214BC0] - 11/07/2014 - 07:40:21 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1393664]
O44 - LFC:[MD5.366FA6D38406DC8BED62825C196144D1] - 11/07/2014 - 07:40:27 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [13527040]
O44 - LFC:[MD5.4EC7738394D2BC7BCB5F7A3657F57252] - 11/07/2014 - 07:42:37 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [5721088]
O44 - LFC:[MD5.FEC19C351EF1B2C998A85D1BFD765675] - 11/07/2014 - 07:42:55 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [23464448]
O44 - LFC:[MD5.3310F7A257F0EAABDD41E10E1F3FCCFE] - 11/07/2014 - 07:42:56 ---A- . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll [250880]
O44 - LFC:[MD5.7C85DA6592E8C368C41B7C91FF452C43] - 13/07/2014 - 12:07:06 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [400432]
O44 - LFC:[MD5.4663C5AD76FE8E19592DE808156FA07D] - 18/07/2014 - 11:34:43 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [117712]
O44 - LFC:[MD5.868B8276DAFE0F275AD93F704EABC139] - 18/07/2014 - 11:34:50 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [42040]
O44 - LFC:[MD5.49ECDFF7027737C9F62D6D96AACCBFB0] - 18/07/2014 - 11:47:22 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll [527360]
O44 - LFC:[MD5.591B2C8C5C6B944AF538F182B7AF00A6] - 18/07/2014 - 11:47:22 ---A- . (.Microsoft Corporation - Device Inventory Library.) -- C:\Windows\System32\devinv.dll [385536]
O44 - LFC:[MD5.C43573182D614B94272115C7B641D24A] - 18/07/2014 - 11:47:22 ---A- . (.Microsoft Corporation - Mise à jour des données de compatibilité de.) -- C:\Windows\System32\aepdu.dll [688128]
O44 - LFC:[MD5.753836B935A8AC095D9FB3190A145122] - 23/07/2014 - 10:18:40 ---A- . (...) -- C:\Windows\setupact.log [293463]
O44 - LFC:[MD5.A4955BC3696B0FB4C5FF7322B0F67A62] - 23/07/2014 - 10:22:46 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1824010]
O44 - LFC:[MD5.EE5FD8A7EF2BB81C79EA43D4321B8544] - 23/07/2014 - 10:22:46 ---A- . (...) -- C:\Windows\System32\perfc009.dat [135592]
O44 - LFC:[MD5.D0DC572A6EB42F21AD0A5619109C7B81] - 23/07/2014 - 10:22:46 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [159412]
O44 - LFC:[MD5.910CA7CF9AA06AEC3E8E6034C4CBDA18] - 23/07/2014 - 10:22:46 ---A- . (...) -- C:\Windows\System32\perfh009.dat [722476]
O44 - LFC:[MD5.6B1C0F87A3C0A33602875760919DF40F] - 23/07/2014 - 10:22:46 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [812350]
O44 - LFC:[MD5.3D748E5558FD9A9F03182CB2330698DC] - 25/07/2014 - 12:59:29 ---A- . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [1018880]
O44 - LFC:[MD5.A01E5B6BA2766A8AD2583EE5490CEE09] - 25/07/2014 - 13:00:45 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [96441528]
O44 - LFC:[MD5.93CAA981E59A34E05D610D82B5992DFD] - 25/07/2014 - 14:51:43 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1375944]
O44 - LFC:[MD5.6B8E40540A244842C290DB3562E18486] - 25/07/2014 - 15:48:17 ---A- . (...) -- C:\Windows\win.ini [324]
O44 - LFC:[MD5.F92B0E478C0FAA6D6661E6E977247E60] - 25/07/2014 - 16:25:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816]
O44 - LFC:[MD5.9D9ED48F841EA37AA5310D54B9E5D3C7] - 25/07/2014 - 16:25:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [91352]
O44 - LFC:[MD5.0664F6335F108F38FE08C3CA747311EE] - 25/07/2014 - 16:25:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [64216]
O44 - LFC:[MD5.33A74FEF642E2AB6BCA7F8EFE0F211DA] - 25/07/2014 - 17:32:13 ---A- . (...) -- C:\Windows\PFRO.log [20064]
O44 - LFC:[MD5.9153C665BC689DDD01F49070E6712E9A] - 25/07/2014 - 18:09:49 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.8A50D5304E6AE48664CF5838EC32F647] - 25/07/2014 - 18:09:57 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [122584]
~ Files: 36 Scanned in 00mn 50s

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.5559757AE3936E97472C0DF3D4AAA900] - 25/07/2014 - 15:05:57 ---A- - C:\Windows\Prefetch\UPDATEWEBCONNECT.EXE-12604AEA.pf =>PUP.WebConnect
O45 - LFCP:[MD5.106C6B7D52F9D75B6E0AC56E9AA6E603] - 25/07/2014 - 15:06:22 ---A- - C:\Windows\Prefetch\UTILWEBCONNECT.EXE-7FC5F632.pf =>PUP.WebConnect
O45 - LFCP:[MD5.09AEADA21FE285E7A5EBA0959D98F85D] - 25/07/2014 - 15:48:27 ---A- - C:\Windows\Prefetch\WEBCONNECT.BROWSERADAPTER.EXE-A9098AB3.pf =>PUP.WebConnect
O45 - LFCP:[MD5.0663641B6D9E2F3EF9C0CA83686AE888] - 25/07/2014 - 15:06:38 ---A- - C:\Windows\Prefetch\WEBCONNECT.PURBROWSE64.EXE-F5F699B9.pf =>PUP.WebConnect
~ Prefetcher: 4 Scanned in 00mn 00s

---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsof

ah il a besoin d'être hébergé, je m'en occupe

re

le rapport n'est pas complet (trop long ) tu dois l'héberger avec cjoint

le lien https://www.cjoint.com/

le tuto http://www.forum-entraide-informatique.com/support/cjoint-com-tutoriel-t2939.html

merci

@+

voici le lien : http://cjoint.com/14ju/DGztDiTzJrA.htm

re

désinstalle McAfee Security Scan Plus v3.8.150.1 via programmes et fonctionnalités

du panneau de configuration

ensuite, fait ceci et poste le rapport s'il te plaît

copie tout le texte depuis ce lien https://www.cjoint.com/?DGzt01BN7xg

lance zhpfix en tant qu'administrateur (clic droit)

clique sur importer et le texte s'affichera dans la fenêtre qui s'ouvre

clic sur GO en bas de page et confirme par OUI pour

lancer le nettoyage des données

le rapport s'affichera sur ton bureau et dans C:\zhpfix.txt

poste le rapport via ce lien https://www.cjoint.com/

merci

@+

Lorsque je clique sur GO, cet avertissement apparait:

re

tu dois copier tout le texte, de la 1er a la dernière ligne

@+

ah oui désolée, je n'avais pas bien compris!

Rapport de ZHPFix 2014.7.9.4 par Nicolas Coolman, Update du 09/07/2014
Fichier d'export Registre :
Run by Isabelle at 25/07/2014 20:28:23
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (00mn 03s)

========== Logiciels ==========
ABSENT Uninstall Process: c:\program files (x86)\happylyrics\uninstall.exe
ABSENT Uninstall Process: c:\program files (x86)\metacrawler\1.8.19.0\uninstall.exe

========== Clés du Registre ==========
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\happylyrics@hpyproductions.net]
SUPRRIMÉ Partiel Shared C Run-time for x64
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\metaCrawler]
SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}]
SUPPRIMÉ: HKCU\Software\MCAFEE
SUPPRIMÉ: HKCU\Software\metacrawler
SUPPRIMÉ:* HKLM\Software\McAfee.com
SUPPRIMÉ: HKLM\Software\Wow6432Node\WebConnect
SUPPRIMÉ: HKLM\Software\Wow6432Node\mcafeeupdater
SUPPRIMÉ: SearchScopes :{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\25946514D2147365007A7A857BC0F010]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\25946514D2147365007A7A857BC0F010]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\A07B748F92CF28B478E2852FECD9EE90]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\A07B748F92CF28B478E2852FECD9EE90]
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASMANCS
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
SUPPRIMÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bubble Dock
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
SUPPRIMÉ: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc
SUPPRIMÉ: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
SUPPRIMÉ: HKCU\Software\Classes\keepmysearch
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0124B064795BB484FA494FC7CF204C0C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01F8E7504D2D2644AB1185234D2AD5AC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04CDEDFDD6EF25443B78A49D1FE5B4F2
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\058911EBC07BAAE42B102E3F4B0D070D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CE306CC244D284D8D8090E404CD7D3
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\089527E77AD22E345B0066D226E44F46
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BD0B15D6F0C2BF428B339B2D2D732C9
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C1AAA506D92B2D44BD6FEF6CDFB71E1
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CAEC9AFF1716FF4DBACEED82F88C702
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DD4444CBC682774C8E573CC73C5BC46
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F68250201451D64EA71E91BA19832DC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\126FFC99A0F214F41AE2D6C7A0FC09BF
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12F72EF2521177A4BB467FF35A881382
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14873772FE3926F4195C9280D52D3486
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14CF11D787D40BF458A3B5CB123733CE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\163A5460E4FB18343B4C0B781B27E813
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1705977FCB2F22F4D8A9AB847C3FB9CE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\19F133B6A0BA9B14493CE47703DF4CF3
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C735C7A54F53574CA5AEA93D0D1F01E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CE2260B068265A488410CA171D93778
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DF1DD2609A2135479C19D72E41B64AA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F72D9058D0863E4F8EB9FE6E980C385
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2217D47FAFB0AC547820199B3A026CFB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22C5FD2815F5C7C4DB5F34F504BF9D96
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26CF57FC035624845B9005289DFA1448
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2719056FB4CDD294887140382819FFF7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2956CB28F45AAF746998774B3C9FF012
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AD5E582EBA9ED54989A134D9250922B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BB672F8D2CA64146B6688371E75C986
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2EA450B923F9C4D4BBEB203648FBFFDC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ECA942EFDBD22B4EBB7FE3AB9EDDBDD
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F055C41FDCA50A43BE42A96D243AD47
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F4EE319A22490145BC4AEBC53B616CA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31E430E345D85D54CA33BC88AEFDB9D8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\358096DA35E67B5479C2E880DF0C10C1
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37345F678B330594E9E4AC16908F78CF
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38641BF101151094F86DD62B534BDEC4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38762340C83E6764B87807B67154F5A4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3984BAF27BDA0DC4D8AED19FCB64BD7D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3D82200490995CE42AB754DCD90AC44D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E9F0E4315A35D741873885200C6A454
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F261C3E5AD56E54598E24B106813C7E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40D753328E77EE842A82631EED62CEC5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40FDEFB25883CF140B9B5F89CB7E2871
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\412179CD2126BB34CAE51691856A3D68
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43218F63264345445A73071C174FEEE8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\439E8A02B7736CA488EECE28D7EE961A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\456D8CED0106E1649AE5CBD8082AC705
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\459277E8A0EE8894F9D7F807DF90506A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\463372A470C576443AE8802B1AC61D89
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\48F13E425ECD5F243A8A82AA2B65336D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B6F3AD0EE690D2478C7D0528AADF8C4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BB9D431259E08A499469636383B9935
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D3B0714BC82B2340AB18C031262573D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D5809867D6C1D14180511D3AAD03F79
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DB13DED48DC4494C90DE800D31B086C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52C608FC2A61CCE479768A9719CABF7B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56861F0CE995D0E45835F5D31E105D54
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\58E44D082625757499995F9516313A9C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A52F724764B00747A637F14FBBBB830
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B19839CB98BB914BA43E863BBE11B4E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\613DCE6E373581A40B6C88D4F7C09096
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6292C097F9759424BAFA3E32CD3DD562
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62C171206461ED34885A4AE095F4A7AC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\63E9F48D88AA940498502E29E3747471
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\64747EAAAE2BA5141AEBCF4F6651A144
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6494B0B34076D6248B6E5F42E3252AD0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6495111F730311440BBC3AAAF3B8C7AC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65273BD75ADFA9146A0950469941299A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6543EA2E8E729CF4789BCD7361D58C03
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\658DABBCADB609E429A6769C46FAADD0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67A614CC45D7C5845BE2184211CC8F9C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B6581D2CF6BB444D8ACBF79E3AF425B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C0DB201BFD71284CB8CA279446863E8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EA4E994723ECC940AE01A2507673199
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F2331E07AF9B414DB15E2E7BAB7F880
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F3E6739E6CECC64D9B7E5D24CF60746
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73268B3F6C2206C4BAF14E3C5B4BC494
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73D229597C7281E409FDEB3079E30E5A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75A49DF39158638428A0F7797D4CD1E6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D223AE12684124794DD7D3FB067886
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76937F723CDCAB547A9791D60867A5B5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78AD011E92C0B7D4A86E41451EC7A0F0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79080E81959ECB54E9E7B3C67AE5781A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A8B37070412F4D47895AA40EFC2E39A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7F84DAA817EC0AB409DFE802184D5B09
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82F14F44AA63A5945A2E960EF018794E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\831071FAC16E2DA4682F55E0B0DE6979
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83D0F8F1641145A42B26F71D534E9A34
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84072C174C7F25148BFB33ADE8C704E1
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\872C7B3D2887D4E4EBF645D7AB9374D1
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C00987A23C36B145AB60EE274936EB3
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D736B12592E2E94094267BC5B7AA7EB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F3E0221A8351144BB04AEF5266143CB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90E77522D1656DA4DABC673942243B44
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\920219BD6C542544893D7ECFCB5E2B6B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\939840D09446FFF459FA6CB4F03C38BE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9459BDD3A7C686345A9B7A1AD1CC6BE4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95AC1A94BAFFE3D41B23B2097BA8B190
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\983EBB458AA802846BBC74D26C3209C8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98A0180804723E24AAA941C0B046363D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\990A25796B2949842BACA56514B7316A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\999D63C685BF046489CA3126029FE837
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AC4C1465926D52478BEC6D3DB946DD7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9CF7625ADC5FCFE43AD003DCC16B49CB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2D54AC8D24E8F94ABBB993A69EF13EC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A357C02D064283D41978AFEEE1A48E0F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4022CA9531268145AD6F8FD7F4F01DC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5CDCC279604D6746A7DA9ED701BF41F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6F4FE9AC6F165A4EAA8F90CE891C0DA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A960AC53CA238044A820A3B63D4536CA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA3077BB9E4617440AF467D91146A8C4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AAC05EAA51DC78A41A1DCE3B31038584
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD7957C966A13904EA466152B29EA9AF
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B13C910C1D6376A4BB2BDB9585253923
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1B5689BAD89AFD448923B5051E5BB50
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2CE0F97DFABDE446811F33E7273BFE2
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B445461D74829AF4C8EF6C00B2861EF0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4D011D14FD2DB74A9090EA633C0B98E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B551BEBCA0334AA40978C2137FD21AB2
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B877893A942DC524580C7B45547FCBC8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC651C0803618C44DA6F1DDD51AF35BF
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BDE5B9F2A520B674BBB1BEAE5F5D51B8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE85C3D8F4816D4A9E5F4EAA4D80A2A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD48F71CCCEC97489147D4E852D3F6F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C05694CDCD2DD724F90F13A20E67EC7C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C42065D3060DD4648A38882BEA92941E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5F606FB1152E344981B09071C472211
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C77B53875F388AA4AA076F6F9D099011
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C85EA06E73FF0A240B4C287EE0D9521D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA30DE5A0DE293D4AA3BF5E13322823A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA9ADF25A98C8074FA4CBBA3ED29FEFA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCE886225BDEB6C43868B0AEDB036B02
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CDD11BF4B1CAA584695EFBC611438213
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE1CCF5CABA1395409D54586592B319E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE7392F9B9A81FA4EA952625BD5534FE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D12B7976E5CA7C34D932C1A8A1BF61C8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D91D500D43BD91A44B02BDBE41E0523F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA2710A9158C6584C9677EB954F3AC97
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DCF07B57C9DC38E419CF122EA180585E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD2E1A561C7F1294BB3996EE77F6BBEE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF14E9E130504B745A2AC47EF6145D24
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF7A4CDE9ED9CD7479FF74F35FA4149E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE39849AF921D045B613CD5852C76A6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E03EC5B80A22A7D4C92AB528A3D323E8
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1B9E95AA2730744AB926911484F8AD5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3436415FB2833843B9EE970079A87C0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3BBB86ACE9686A4281227D5F7EE95AE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E6B40E8EBBC3CD445BD2FC7D8FDCCFEC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E77C3F952C1F0354FAFADB6B080ACCF7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E84382A588F214C4C89C3DB758EA6AD6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E89B10C102BBEF941A920EE2269747C0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E9D73D5153C19FD48B6E10CB7E8572CE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EBAFF392ACA75ED4CA30BF821C1AE267
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECFC746582988774684DB5D8D95F674D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EECC799BFA63E6146A81EAAA53540EDE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1547261AA1C98C48B0ECDBC767C76CE
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1BDB464DE2D33547BB31C1B35D9C337
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F29CFDBF9B20AB8448A1BD73A3FE863F
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F5F8D8368E8CAE84188DE44DAF8C10F9
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAB510A06C6F4B24AAD055CE6EEA27CD
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

========== Valeurs du Registre ==========
SUPPRIMÉ: Toolbar: {41564952-412D-5637-00A7-7A786E7484D7}
SUPPRIMÉ RunValue: tuto4pc_fr_39
SUPPRIMÉ CLSID SSODL: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Aucune Valeur Standard Profile: FirewallRaz :
Aucune Valeur Domain Profile: FirewallRaz :
SUPPRIMÉ: FirewallRaz (Domain) : {9E3D57FC-7C37-4424-9352-4831E97D029D}
SUPPRIMÉ: FirewallRaz (Domain) : {548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}
SUPPRIMÉ: FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIMÉ: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIMÉ: FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIMÉ: FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIMÉ: FirewallRaz (Public) : NetPres-In-TCP
SUPPRIMÉ: FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIMÉ: FirewallRaz (None) : MCX-Prov-Out-TCP
SUPPRIMÉ: FirewallRaz (None) : MCX-McrMgr-Out-TCP
SUPPRIMÉ: FirewallRaz (Public) : {5CB4EC41-3409-4158-A95F-9C1BD24C0C8A}
SUPPRIMÉ: FirewallRaz (Public) : {71F152B4-1087-4D53-9BF1-7A78C419C352}
SUPPRIMÉ: FirewallRaz (Public) : {C5C12013-FDE4-4DDF-A0A3-683FE4DA495A}
SUPPRIMÉ: FirewallRaz (Public) : {B6271E06-1317-4ABE-889D-A8B9F4673384}
SUPPRIMÉ: FirewallRaz (Public) : {1D66C59B-8182-43C9-86B9-7601239584D9}
SUPPRIMÉ: FirewallRaz (Public) : {17D68FF9-A617-44ED-8A8D-2B362DAE82BE}
SUPPRIMÉ: FirewallRaz (Public) : {BC40D67B-1667-4FC7-B843-E72C22D04C8C}
SUPPRIMÉ: FirewallRaz (Domain) : {E7985E1D-C36F-4787-80A8-6350D07E9266}
SUPPRIMÉ: FirewallRaz (None) : {808F1451-4108-46FD-ADBB-F17324B5F0BD}

========== Dossiers ==========
SUPPRIMÉ: C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Profiles\r3jlewya.default\extensions\ffxtlbr@metacrawler.com
SUPPRIMÉ: C:\Program Files (x86)\eBay
SUPPRIMÉ: C:\Program Files (x86)\WebConnect
SUPPRIMÉ: C:\ProgramData\McAfee
SUPPRIMÉS Temporaires Windows (212)
SUPPRIMÉS Flash Cookies (0)

========== Fichiers ==========
SUPPRIMÉ: c:\windows\tasks\googleupdatetaskmachinecore1cec4b63b1f6ec0.job
SUPPRIMÉ Redémarrage: c:\windows\system32\tasks\googleupdatetaskmachinecore1cec4b63b1f6ec0
SUPPRIMÉ: c:\windows\tasks\googleupdatetaskmachineua.job
SUPPRIMÉ Redémarrage: c:\windows\system32\tasks\googleupdatetaskmachineua
SUPPRIMÉ: c:\windows\prefetch\updatewebconnect.exe-12604aea.pf
SUPPRIMÉ: c:\windows\prefetch\utilwebconnect.exe-7fc5f632.pf
SUPPRIMÉ: c:\windows\prefetch\webconnect.browseradapter.exe-a9098ab3.pf
SUPPRIMÉ: c:\windows\prefetch\webconnect.purbrowse64.exe-f5f699b9.pf
SUPPRIMÉ: C:\Windows\Installer\5dead9f.msi
SUPPRIMÉS Temporaires Windows (472) (211 957 425 octets)
SUPPRIMÉS Flash Cookies (0) (0 octets)

========== Tache planifiée ==========
SUPPRIMÉ: Shop-wit

========== Récapitulatif ==========
229 : Clés du Registre
24 : Valeurs du Registre
6 : Dossiers
11 : Fichiers
2 : Logiciels
1 : Tache planifiée

End of clean in 00mn 41s

========== Chemin de fichier rapport ==========
C:\Users\Isabelle\AppData\Roaming\ZHP\ZHPFix[R1].txt - 25/07/2014 20:28:27 [32176]

re

ok, dit moi comment va le pc

merci

@+

Il va bien mieux! Merci pour ton aide. Je n'ai rien remarqué de bizarre actuellement.

re

ok, alors on finalise^^

fait ceci et poste les rapports s'il te plaît

1) http://www.sosvirus.net/canned-speech-sftgc-t611.html

2) télécharge delfix sur ton bureau

le lien http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/9-delfix

exécute le en tant qu'administrateur (clic droit)

dans delfix,coche les cases suivantes:

supprimer les outils de désinfection (case cochée par défault)

réactiver l'UAC

purger la restauration système

clique sur exécuter

le rapport s'affichera sur ton bureau et dans C:\delfix.txt

poste le rapport via 1 copier/coller

merci

@+

voici le premier rapport, je m'occupe du second. Merci!
Rapport de SFTGC (Pierre13) du Vendredi 25 Juillet 2014 à 21:10:31 version : 2.2.0.0
Mis à jour le 30/05/2014
Outil lancé en Mode normal et En tant qu'administrateur
Windows 8.1 64 bits

Tool start in C:\Users\Isabelle\Downloads

3189 éléments supprimés => 1.3 Go libérés. (30 mn 11 s)

Attention infection possible ! =>> C:\Users\Isabelle\AppData\Local\Temp\avgnt.exe
C:\Users\Isabelle\AppData\Local\Temp\acro_rd_dir
C:\Users\Isabelle\AppData\Local\Temp\avgnt.exe
C:\Users\Isabelle\AppData\Local\Temp\plugtmp
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\04 Plic Ploc.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\105NIKON.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\120NIKON.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\122NIKON.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\123NIKON.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\126NIKON.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\13 Flic et flac.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\149___06.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\150___07.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\18 18 Les mots magiques.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014-01-13.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014-02-04.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014-02-06.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014-03-13.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014-03-20.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\2014.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\27 juin.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\avertissement.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Bienvenue dans Word.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\bilan jeux maths 4.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\bonnes vacances (2).lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\bonnes vacances.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\bsps.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\CANTINE.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\choix_50_ans_Carmen (2).lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\choix_50_ans_Carmen.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Classeur1.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Damien est venu parler compost avec no((Unsaved-303520100782935040)).asd.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dessin illustration PL.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dessin première journée (2).lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dessin première journée moyens (2).lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dessin première journée moyens.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dessin première journée.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\dire non à l'adulte.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\DSCN0142.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\DSC_0001.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\DSC_0016_.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\DSC_0020.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Echange 23 juin.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Echange du 16 juin.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Echange du 19 mai.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Echange du 2 juin.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Envoi et suivi de colis express. Livraison colis international avec Chronopost - Suivi colis.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\eula.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\feuille travail paysage grands.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\feuille travail portrait.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\Formation FOAD par école.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\GS cp.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\habitude d'écriture de la date (2).lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\habitude d'écriture de la date.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\http--chaines2-c.free.fr-clics-idc=1355&url=http--television.portail.free.fr-aktu.php.lnk
C:\Users\Isabelle\AppData\Roaming\Microsoft\Windows\Recent\http--classexecutiva.com-mkt-unsubscribe.phpM=3112609&C=e5e0caaf54e12dd494c6c4844307c08a&L=11&N=13.lnk
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\664d14df-0369-4250-84b9-dd5ae4a8aa5b.dmp
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\664d14df-0369-4250-84b9-dd5ae4a8aa5b.extra
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\d279d69a-21a7-4b23-8a94-427a36313e7c.dmp
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\d279d69a-21a7-4b23-8a94-427a36313e7c.extra
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\db0f6c56-634a-402f-a0f6-fd875f027566.dmp
C:\Users\Isabelle\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\db0f6c56-634a-402f-a0f6-fd875f027566.extra
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\03C2624375988154FBF20373B7D495E8_E4687460FE1D5401901BFA1743DEFE38
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_7701714C1E9B4F16E47AF0B1694EE958
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\17704B7A99D010A5658DCB9355B65471_5FEA55F2BCB4685A54058A290E2CED24
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2427C246DCF85A06DD675914EDA68038_6A3E57832DAD7769858DFD2485EFE4BE
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26AD01F9C002FAD37427E734302383D8_E1DF8F31180BEED965CA2CD894B8B7B4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2E980CF7BB84455884A2F90C0668C729_4BB53C973C7FEB7DCD172CCD90AF6ACA
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2E980CF7BB84455884A2F90C0668C729_A578655EA97D34E933400A7A3693DF62
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4DD39726D4B55AC3B4119B35A893323C_3A8DDF2E8F000026B8B4C642DF72FCC9
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\54D62447E94D6E1A4BDF9F5D97B79ED0_0AE67D36D340ADDCC6C5DBDBC05C9BB4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\70FEE87A42672626A68FAB261B428374_7FA4A19E9E8ECB94A8E785D67DD2F84B
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_3A4825D4BC1BDF7F8D1B10AF07376564
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_408BF57CFB22C8CE7202361683829F8C
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_45BA4D4769FDB8508CEACDC73D403554
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_5F124D17DE64DB801438EF94A4BF11CB
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_82A6E25B79E891F34987BD4C93317D0A
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_C1EEA01572A0AA1DB9DE7A051B808637
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7C0C22AB55244DFDEB5CE0A2A7EF3758
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7C1B7BA2D0A4C1307F3A4A532F819AA1_E3D6280EC27718C344EE7F6A8A84D533
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\803D392C3051B3E3A74EB48BC5861291
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_008F183D9C9E1CF5392735DA38B42AE4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6F75B4C008008F0E1F73DFBC8174C492
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_765869990270A968E3B362DDAE9D84C0
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A4E6137C1DA01BC85AB51569325B4126
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_B06E3642F6C9FE85B72D070A140A9054
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_ED8B91786D9C87F339240E21E1A1D8A5
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_1A9CEF0D6BDBEE31E5C2CF9955E61B89
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_C79CD306037D98FEE12E7BFC8B892833
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A84549268A5F3059D9A3F1D631CA86E1
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_3FB9EBFC1D18D5E09631A5E5A62F6EF3
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B912B2C6928A18B8CD7D50CF08BEA95B_D1F31FC713F1CA4EF0EB85CF733903FC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAEDF689AA6DC9642B833051B2B77D1A
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5054B3FD90C2AE6E53B5EA495D10CC9_C52CC1C616E97ED158C06B1AF9727B13
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FE4CE54DB2FF4A306DFFD2A15CCE2909_EEB46D67DDA42E287E3CAFADC59D5BA0
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\03C2624375988154FBF20373B7D495E8_E4687460FE1D5401901BFA1743DEFE38
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_7701714C1E9B4F16E47AF0B1694EE958
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\17704B7A99D010A5658DCB9355B65471_5FEA55F2BCB4685A54058A290E2CED24
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2427C246DCF85A06DD675914EDA68038_6A3E57832DAD7769858DFD2485EFE4BE
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26AD01F9C002FAD37427E734302383D8_E1DF8F31180BEED965CA2CD894B8B7B4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2E980CF7BB84455884A2F90C0668C729_4BB53C973C7FEB7DCD172CCD90AF6ACA
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2E980CF7BB84455884A2F90C0668C729_A578655EA97D34E933400A7A3693DF62
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4DD39726D4B55AC3B4119B35A893323C_3A8DDF2E8F000026B8B4C642DF72FCC9
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\54D62447E94D6E1A4BDF9F5D97B79ED0_0AE67D36D340ADDCC6C5DBDBC05C9BB4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\70FEE87A42672626A68FAB261B428374_7FA4A19E9E8ECB94A8E785D67DD2F84B
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_3A4825D4BC1BDF7F8D1B10AF07376564
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_408BF57CFB22C8CE7202361683829F8C
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_45BA4D4769FDB8508CEACDC73D403554
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_5F124D17DE64DB801438EF94A4BF11CB
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_82A6E25B79E891F34987BD4C93317D0A
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_C1EEA01572A0AA1DB9DE7A051B808637
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7C0C22AB55244DFDEB5CE0A2A7EF3758
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7C1B7BA2D0A4C1307F3A4A532F819AA1_E3D6280EC27718C344EE7F6A8A84D533
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\803D392C3051B3E3A74EB48BC5861291
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_008F183D9C9E1CF5392735DA38B42AE4
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_19BE54E9F66DDEC271EBF5365998BCDB
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6F75B4C008008F0E1F73DFBC8174C492
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_765869990270A968E3B362DDAE9D84C0
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A4E6137C1DA01BC85AB51569325B4126
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_B06E3642F6C9FE85B72D070A140A9054
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_ED8B91786D9C87F339240E21E1A1D8A5
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_1A9CEF0D6BDBEE31E5C2CF9955E61B89
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_C79CD306037D98FEE12E7BFC8B892833
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A84549268A5F3059D9A3F1D631CA86E1
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ACF244F1A10D4DBED0D88EBA0C43A9B5_3FB9EBFC1D18D5E09631A5E5A62F6EF3
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B912B2C6928A18B8CD7D50CF08BEA95B_D1F31FC713F1CA4EF0EB85CF733903FC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAEDF689AA6DC9642B833051B2B77D1A
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5054B3FD90C2AE6E53B5EA495D10CC9_C52CC1C616E97ED158C06B1AF9727B13
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\Isabelle\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FE4CE54DB2FF4A306DFFD2A15CCE2909_EEB46D67DDA42E287E3CAFADC59D5BA0
C:\Users\Isabelle\AppData\Local\Microsoft\Sqm\WindowsLL\WindowsLL.wns.0.sqm
C:\Users\Isabelle\AppData\Local\Microsoft\Sqm\WindowsLL\WindowsLL.wns.1.sqm
C:\Users\Isabelle\AppData\Local\Microsoft\Sqm\WindowsLL\WindowsLL.wns.2.sqm
C:\Users\Isabelle\AppData\Local\Microsoft\Sqm\WindowsLL\WindowsLL.wns.3.sqm
C:\Users\Isabelle\AppData\Local\Temp\avgnt.exe
C:\WINDOWS\TEMP\APN-Stub
C:\WINDOWS\TEMP\ASPNETSetup_00000.log
C:\WINDOWS\TEMP\ASPNETSetup_00001.log
C:\WINDOWS\TEMP\AVSETUP_53c8fc1d
C:\WINDOWS\TEMP\bluesoleilSetup.log
C:\WINDOWS\TEMP\c2r32.dll.bak
C:\WINDOWS\TEMP\c2r64.dll.bak
C:\WINDOWS\TEMP\C2RIntegrator(201403200627453B00).log
C:\WINDOWS\TEMP\C2RIntegrator(20140412062537E6C).log
C:\WINDOWS\TEMP\C2RIntegrator(201406190638301A14).log
C:\WINDOWS\TEMP\C2RIntegrator(201407110914521100).log
C:\WINDOWS\TEMP\chrome_installer.log
C:\WINDOWS\TEMP\contentDATs.exe
C:\WINDOWS\TEMP\CR_367FC.tmp
C:\WINDOWS\TEMP\dat22B7.tmp
C:\WINDOWS\TEMP\dat2603.tmp
C:\WINDOWS\TEMP\dat2789.tmp
C:\WINDOWS\TEMP\dat2874.tmp
C:\WINDOWS\TEMP\dat6C14.tmp
C:\WINDOWS\TEMP\dat6D7C.tmp
C:\WINDOWS\TEMP\dat7943.tmp
C:\WINDOWS\TEMP\dat7B09.tmp
C:\WINDOWS\TEMP\datF4AC.tmp
C:\WINDOWS\TEMP\datF6B1.tmp
C:\WINDOWS\TEMP\FireFly(20140213004623644).log
C:\WINDOWS\TEMP\FireFly(2014021422324467C).log
C:\WINDOWS\TEMP\FireFly(201402261352376C0).log
C:\WINDOWS\TEMP\FireFly(201402271254416AC).log
C:\WINDOWS\TEMP\FireFly(20140313190436688).log
C:\WINDOWS\TEMP\InstallHelp
C:\WINDOWS\TEMP\integratedoffice.exe_c2ruidll(20140213004622644).log
C:\WINDOWS\TEMP\integratedoffice.exe_c2ruidll(2014021422324467C).log
C:\WINDOWS\TEMP\integratedoffice.exe_c2ruidll(201402261352376C0).log
C:\WINDOWS\TEMP\integratedoffice.exe_c2ruidll(201402271254416AC).log
C:\WINDOWS\TEMP\integratedoffice.exe_c2ruidll(20140313190436688).log
C:\WINDOWS\TEMP\integratedoffice.exe_streamserver(20140213004628644).log
C:\WINDOWS\TEMP\integratedoffice.exe_streamserver(2014021422324867C).log
C:\WINDOWS\TEMP\integratedoffice.exe_streamserver(201402261352456C0).log
C:\WINDOWS\TEMP\integratedoffice.exe_streamserver(201402271254436AC).log
C:\WINDOWS\TEMP\integratedoffice.exe_streamserver(20140313190438688).log
C:\WINDOWS\TEMP\ISABELLE-20140320-0629.log
C:\WINDOWS\TEMP\ISABELLE-20140320-0629a.log
C:\WINDOWS\TEMP\ISABELLE-20140320-0629b.log
C:\WINDOWS\TEMP\ISABELLE-20140320-1759.log
C:\WINDOWS\TEMP\ISABELLE-20140320-1829.log
C:\WINDOWS\TEMP\ISABELLE-20140320-1859.log
C:\WINDOWS\TEMP\ISABELLE-20140321-0516.log
C:\WINDOWS\TEMP\ISABELLE-20140321-0522.log
C:\WINDOWS\TEMP\ISABELLE-20140321-0552.log
C:\WINDOWS\TEMP\ISABELLE-20140321-0809.log
C:\WINDOWS\TEMP\ISABELLE-20140322-0715.log
C:\WINDOWS\TEMP\ISABELLE-20140322-0845.log
C:\WINDOWS\TEMP\ISABELLE-20140322-1047.log
C:\WINDOWS\TEMP\ISABELLE-20140323-0349.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1756.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1812.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1826.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1842.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1856.log
C:\WINDOWS\TEMP\ISABELLE-20140324-1912.log
C:\WINDOWS\TEMP\ISABELLE-20140325-0623.log
C:\WINDOWS\TEMP\ISABELLE-20140325-0630.log
C:\WINDOWS\TEMP\ISABELLE-20140325-0644.log
C:\WINDOWS\TEMP\ISABELLE-20140325-1809.log
C:\WINDOWS\TEMP\ISABELLE-20140325-1839.log
C:\WINDOWS\TEMP\ISABELLE-20140325-1909.log
C:\WINDOWS\TEMP\ISABELLE-20140326-0822.log
C:\WINDOWS\TEMP\ISABELLE-20140326-0852.log
C:\WINDOWS\TEMP\ISABELLE-20140326-0922.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1225.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1255.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1325.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1656.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1726.log
C:\WINDOWS\TEMP\ISABELLE-20140326-1756.log
C:\WINDOWS\TEMP\ISABELLE-20140327-0620.log
C:\WINDOWS\TEMP\ISABELLE-20140327-0637.log
C:\WINDOWS\TEMP\ISABELLE-20140327-1743.log
C:\WINDOWS\TEMP\ISABELLE-20140327-1759.log
C:\WINDOWS\TEMP\ISABELLE-20140327-1813.log
C:\WINDOWS\TEMP\ISABELLE-20140327-1829.log
C:\WINDOWS\TEMP\ISABELLE-20140327-1859.log
C:\WINDOWS\TEMP\ISABELLE-20140328-0628.log
C:\WINDOWS\TEMP\ISABELLE-20140328-1706.log
C:\WINDOWS\TEMP\ISABELLE-20140328-1724.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1304.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1319.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1334.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1900.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1916.log
C:\WINDOWS\TEMP\ISABELLE-20140329-1946.log
C:\WINDOWS\TEMP\ISABELLE-20140329-2016.log
C:\WINDOWS\TEMP\ISABELLE-20140330-1033.log
C:\WINDOWS\TEMP\ISABELLE-20140330-1038.log
C:\WINDOWS\TEMP\ISABELLE-20140330-1125.log
C:\WINDOWS\TEMP\ISABELLE-20140330-1155.log
C:\WINDOWS\TEMP\ISABELLE-20140331-1819.log
C:\WINDOWS\TEMP\ISABELLE-20140331-1849.log
C:\WINDOWS\TEMP\ISABELLE-20140331-1919.log
C:\WINDOWS\TEMP\ISABELLE-20140401-0611.log
C:\WINDOWS\TEMP\ISABELLE-20140401-0616.log
C:\WINDOWS\TEMP\ISABELLE-20140401-1852.log
C:\WINDOWS\TEMP\ISABELLE-20140401-1907.log
C:\WINDOWS\TEMP\ISABELLE-20140401-1931.log
C:\WINDOWS\TEMP\ISABELLE-20140401-1937.log
C:\WINDOWS\TEMP\ISABELLE-20140401-2043.log
C:\WINDOWS\TEMP\ISABELLE-20140402-0804.log
C:\WINDOWS\TEMP\ISABELLE-20140402-0834.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1154.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1210.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1240.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1310.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1533.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1603.log
C:\WINDOWS\TEMP\ISABELLE-20140402-1633.log
C:\WINDOWS\TEMP\ISABELLE-20140402-2131.log
C:\WINDOWS\TEMP\ISABELLE-20140402-2146.log
C:\WINDOWS\TEMP\ISABELLE-20140402-2201.log
C:\WINDOWS\TEMP\ISABELLE-20140402-2216.log
C:\WINDOWS\TEMP\ISABELLE-20140402-2231.log
C:\WINDOWS\TEMP\ISABELLE-20140403-0623.log
C:\WINDOWS\TEMP\ISABELLE-20140403-1701.log
C:\WINDOWS\TEMP\ISABELLE-20140403-1717.log
C:\WINDOWS\TEMP\ISABELLE-20140403-1731.log
C:\WINDOWS\TEMP\ISABELLE-20140403-1923.log
C:\WINDOWS\TEMP\ISABELLE-20140404-0627.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1741.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1757.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1811.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1827.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1841.log
C:\WINDOWS\TEMP\ISABELLE-20140404-1857.log
C:\WINDOWS\TEMP\ISABELLE-20140405-0643.log
C:\WINDOWS\TEMP\ISABELLE-20140405-0713.log
C:\WINDOWS\TEMP\ISABELLE-20140405-0743.log
C:\WINDOWS\TEMP\ISABELLE-20140405-1311.log
C:\WINDOWS\TEMP\ISABELLE-20140405-1428.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0629.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0634.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0645.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0843.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0858.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0913.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0913a.log
C:\WINDOWS\TEMP\ISABELLE-20140406-0928.log
C:\WINDOWS\TEMP\ISABELLE-20140406-1054.log
C:\WINDOWS\TEMP\ISABELLE-20140406-2024.log
C:\WINDOWS\TEMP\ISABELLE-20140406-2124.log
C:\WINDOWS\TEMP\ISABELLE-20140407-0611.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1749.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1804.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1819.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1834.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1849.log
C:\WINDOWS\TEMP\ISABELLE-20140407-1904.log
C:\WINDOWS\TEMP\ISABELLE-20140408-0625.log
C:\WINDOWS\TEMP\ISABELLE-20140408-0630.log
C:\WINDOWS\TEMP\ISABELLE-20140408-1816.log
C:\WINDOWS\TEMP\ISABELLE-20140408-1831.log
C:\WINDOWS\TEMP\ISABELLE-20140408-1846.log
C:\WINDOWS\TEMP\ISABELLE-20140408-1901.log
C:\WINDOWS\TEMP\ISABELLE-20140408-1931.log
C:\WINDOWS\TEMP\ISABELLE-20140409-0616.log
C:\WINDOWS\TEMP\ISABELLE-20140409-0646.log
C:\WINDOWS\TEMP\ISABELLE-20140409-0716.log
C:\WINDOWS\TEMP\ISABELLE-20140409-2143.log
C:\WINDOWS\TEMP\ISABELLE-20140410-0621.log
C:\WINDOWS\TEMP\ISABELLE-20140410-0637.log
C:\WINDOWS\TEMP\ISABELLE-20140410-1803.log
C:\WINDOWS\TEMP\ISABELLE-20140410-1824.log
C:\WINDOWS\TEMP\ISABELLE-20140410-1832.log
C:\WINDOWS\TEMP\ISABELLE-20140410-1854.log
C:\WINDOWS\TEMP\ISABELLE-20140410-1924.log
C:\WINDOWS\TEMP\ISABELLE-20140411-0626.log
C:\WINDOWS\TEMP\ISABELLE-20140411-1758.log
C:\WINDOWS\TEMP\ISABELLE-20140411-1828.log
C:\WINDOWS\TEMP\ISABELLE-20140411-1858.log
C:\WINDOWS\TEMP\ISABELLE-20140412-0616.log
C:\WINDOWS\TEMP\ISABELLE-20140412-0625.log
C:\WINDOWS\TEMP\ISABELLE-20140412-0625a.log
C:\WINDOWS\TEMP\ISABELLE-20140413-0034.log
C:\WINDOWS\TEMP\ISABELLE-20140413-0904.log
C:\WINDOWS\TEMP\ISABELLE-20140413-0910.log
C:\WINDOWS\TEMP\ISABELLE-20140414-0920.log
C:\WINDOWS\TEMP\ISABELLE-20140414-0935.log
C:\WINDOWS\TEMP\ISABELLE-20140414-0950.log
C:\WINDOWS\TEMP\ISABELLE-20140414-1347.log
C:\WINDOWS\TEMP\ISABELLE-20140414-1402.log
C:\WINDOWS\TEMP\ISABELLE-20140414-1432.log
C:\WINDOWS\TEMP\ISABELLE-20140414-1734.log
C:\WINDOWS\TEMP\ISABELLE-20140415-0813.log
C:\WINDOWS\TEMP\ISABELLE-20140415-0819.log
C:\WINDOWS\TEMP\ISABELLE-20140415-0849.log
C:\WINDOWS\TEMP\ISABELLE-20140415-0929.log
C:\WINDOWS\TEMP\ISABELLE-20140416-0858.log
C:\WINDOWS\TEMP\ISABELLE-20140416-0928.log
C:\WINDOWS\TEMP\ISABELLE-20140417-0936.log
C:\WINDOWS\TEMP\ISABELLE-20140417-0951.log
C:\WINDOWS\TEMP\ISABELLE-20140417-1006.log
C:\WINDOWS\TEMP\ISABELLE-20140417-1021.log
C:\WINDOWS\TEMP\ISABELLE-20140417-1036.log
C:\WINDOWS\TEMP\ISABELLE-20140417-1420.log
C:\WINDOWS\TEMP\ISABELLE-20140418-0929.log
C:\WINDOWS\TEMP\ISABELLE-20140418-0943.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1327.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1647.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1659.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1717.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1729.log
C:\WINDOWS\TEMP\ISABELLE-20140418-1747.log
C:\WINDOWS\TEMP\ISABELLE-20140419-0951.log
C:\WINDOWS\TEMP\ISABELLE-20140419-1912.log
C:\WINDOWS\TEMP\ISABELLE-20140420-1851.log
C:\WINDOWS\TEMP\ISABELLE-20140421-0939.log
C:\WINDOWS\TEMP\ISABELLE-20140421-1009.log
C:\WINDOWS\TEMP\ISABELLE-20140421-1039.log
C:\WINDOWS\TEMP\ISABELLE-20140421-1235.log
C:\WINDOWS\TEMP\ISABELLE-20140421-1251.log
C:\WINDOWS\TEMP\ISABELLE-20140421-2013.log
C:\WINDOWS\TEMP\ISABELLE-20140421-2015.log
C:\WINDOWS\TEMP\ISABELLE-20140421-2105.log
C:\WINDOWS\TEMP\ISABELLE-20140421-2121.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0841.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0850.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0856.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0910.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0910a.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0926.log
C:\WINDOWS\TEMP\ISABELLE-20140422-0956.log
C:\WINDOWS\TEMP\ISABELLE-20140422-1924.log
C:\WINDOWS\TEMP\ISABELLE-20140422-1939.log
C:\WINDOWS\TEMP\ISABELLE-20140422-2047.log
C:\WINDOWS\TEMP\ISABELLE-20140423-0909.log
C:\WINDOWS\TEMP\ISABELLE-20140423-0948.log
C:\WINDOWS\TEMP\ISABELLE-20140423-1236.log
C:\WINDOWS\TEMP\ISABELLE-20140423-1905.log
C:\WINDOWS\TEMP\ISABELLE-20140423-1935.log
C:\WINDOWS\TEMP\ISABELLE-20140423-2005.log
C:\WINDOWS\TEMP\ISABELLE-20140424-0809.log
C:\WINDOWS\TEMP\ISABELLE-20140424-0839.log
C:\WINDOWS\TEMP\ISABELLE-20140424-0909.log
C:\WINDOWS\TEMP\ISABELLE-20140424-2010.log
C:\WINDOWS\TEMP\ISABELLE-20140425-0729.log
C:\WINDOWS\TEMP\ISABELLE-20140425-0744.log
C:\WINDOWS\TEMP\ISABELLE-20140425-0759.log
C:\WINDOWS\TEMP\ISABELLE-20140425-1715.log
C:\WINDOWS\TEMP\ISABELLE-20140426-1104.log
C:\WINDOWS\TEMP\ISABELLE-20140426-1119.log
C:\WINDOWS\TEMP\ISABELLE-20140426-1546.log
C:\WINDOWS\TEMP\ISABELLE-20140426-1546a.log
C:\WINDOWS\TEMP\ISABELLE-20140427-0735.log
C:\WINDOWS\TEMP\ISABELLE-20140427-0740.log
C:\WINDOWS\TEMP\ISABELLE-20140427-0810.log
C:\WINDOWS\TEMP\ISABELLE-20140427-0840.log
C:\WINDOWS\TEMP\ISABELLE-20140427-2215.log
C:\WINDOWS\TEMP\ISABELLE-20140428-0631.log
C:\WINDOWS\TEMP\ISABELLE-20140428-1828.log
C:\WINDOWS\TEMP\ISABELLE-20140428-1858.log
C:\WINDOWS\TEMP\ISABELLE-20140428-1859.log
C:\WINDOWS\TEMP\ISABELLE-20140428-1929.log
C:\WINDOWS\TEMP\ISABELLE-20140428-2026.log
C:\WINDOWS\TEMP\ISABELLE-20140429-0626.log
C:\WINDOWS\TEMP\ISABELLE-20140429-0632.log
C:\WINDOWS\TEMP\ISABELLE-20140429-1725.log
C:\WINDOWS\TEMP\ISABELLE-20140430-2106.log
C:\WINDOWS\TEMP\ISABELLE-20140430-2121.log
C:\WINDOWS\TEMP\ISABELLE-20140430-2151.log
C:\WINDOWS\TEMP\ISABELLE-20140430-2206.log
C:\WINDOWS\TEMP\ISABELLE-20140430-2221.log
C:\WINDOWS\TEMP\ISABELLE-20140503-2220.log
C:\WINDOWS\TEMP\ISABELLE-20140503-2225.log
C:\WINDOWS\TEMP\ISABELLE-20140504-2143.log
C:\WINDOWS\TEMP\ISABELLE-20140504-2149.log
C:\WINDOWS\TEMP\ISABELLE-20140504-2203.log
C:\WINDOWS\TEMP\ISABELLE-20140504-2219.log
C:\WINDOWS\TEMP\ISABELLE-20140504-2249.log
C:\WINDOWS\TEMP\ISABELLE-20140505-0623.log
C:\WINDOWS\TEMP\ISABELLE-20140505-0640.log
C:\WINDOWS\TEMP\ISABELLE-20140505-1744.log
C:\WINDOWS\TEMP\ISABELLE-20140505-1800.log
C:\WINDOWS\TEMP\ISABELLE-20140505-1813.log
C:\WINDOWS\TEMP\ISABELLE-20140505-2329.log
C:\WINDOWS\TEMP\ISABELLE-20140505-2344.log
C:\WINDOWS\TEMP\ISABELLE-20140505-2358.log
C:\WINDOWS\TEMP\ISABELLE-20140506-0013.log
C:\WINDOWS\TEMP\ISABELLE-20140506-0014.log
C:\WINDOWS\TEMP\ISABELLE-20140506-0043.log
C:\WINDOWS\TEMP\ISABELLE-20140506-0044.log
C:\WINDOWS\TEMP\ISABELLE-20140506-0613.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2025.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2040.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2054.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2110.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2124.log
C:\WINDOWS\TEMP\ISABELLE-20140506-2140.log
C:\WINDOWS\TEMP\ISABELLE-20140507-1922.log
C:\WINDOWS\TEMP\ISABELLE-20140507-1952.log
C:\WINDOWS\TEMP\ISABELLE-20140507-1955.log
C:\WINDOWS\TEMP\ISABELLE-20140507-2022.log
C:\WINDOWS\TEMP\ISABELLE-20140507-2025.log
C:\WINDOWS\TEMP\ISABELLE-20140507-2055.log
C:\WINDOWS\TEMP\ISABELLE-20140509-0615.log
C:\WINDOWS\TEMP\ISABELLE-20140509-0625.log
C:\WINDOWS\TEMP\ISABELLE-20140509-0634.log
C:\WINDOWS\TEMP\ISABELLE-20140509-0655.log
C:\WINDOWS\TEMP\ISABELLE-20140509-1926.log
C:\WINDOWS\TEMP\ISABELLE-20140509-2234.log
C:\WINDOWS\TEMP\ISABELLE-20140510-0902.log
C:\WINDOWS\TEMP\ISABELLE-20140511-2214.log
C:\WINDOWS\TEMP\ISABELLE-20140511-2224.log
C:\WINDOWS\TEMP\ISABELLE-20140511-2230.log
C:\WINDOWS\TEMP\ISABELLE-20140512-0622.log
C:\WINDOWS\TEMP\ISABELLE-20140512-0636.log
C:\WINDOWS\TEMP\ISABELLE-20140512-1755.log
C:\WINDOWS\TEMP\ISABELLE-20140512-1810.log
C:\WINDOWS\TEMP\ISABELLE-20140512-1824.log
C:\WINDOWS\TEMP\ISABELLE-20140512-1840.log
C:\WINDOWS\TEMP\ISABELLE-20140512-1910.log
C:\WINDOWS\TEMP\ISABELLE-20140513-0621.log
C:\WINDOWS\TEMP\ISABELLE-20140513-0627.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1812.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1827.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1842.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1857.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1927.log
C:\WINDOWS\TEMP\ISABELLE-20140513-1943.log
C:\WINDOWS\TEMP\ISABELLE-20140513-2013.log
C:\WINDOWS\TEMP\ISABELLE-20140513-2043.log
C:\WINDOWS\TEMP\ISABELLE-20140514-0922.log
C:\WINDOWS\TEMP\ISABELLE-20140514-1023.log
C:\WINDOWS\TEMP\ISABELLE-20140514-1330.log
C:\WINDOWS\TEMP\ISABELLE-20140514-2341.log
C:\WINDOWS\TEMP\ISABELLE-20140514-2345.log
C:\WINDOWS\TEMP\ISABELLE-20140515-0900.log
C:\WINDOWS\TEMP\ISABELLE-20140515-0930.log
C:\WINDOWS\TEMP\ISABELLE-20140515-1403.log
C:\WINDOWS\TEMP\ISABELLE-20140516-0523.log
C:\WINDOWS\TEMP\ISABELLE-20140517-2225.log
C:\WINDOWS\TEMP\ISABELLE-20140517-2255.log
C:\WINDOWS\TEMP\ISABELLE-20140518-1851.log
C:\WINDOWS\TEMP\ISABELLE-20140518-1856.log
C:\WINDOWS\TEMP\ISABELLE-20140518-2253.log
C:\WINDOWS\TEMP\ISABELLE-20140518-2308.log
C:\WINDOWS\TEMP\ISABELLE-20140518-2322.log
C:\WINDOWS\TEMP\ISABELLE-20140519-0634.log
C:\WINDOWS\TEMP\ISABELLE-20140519-1758.log
C:\WINDOWS\TEMP\ISABELLE-20140519-1814.log
C:\WINDOWS\TEMP\ISABELLE-20140519-1827.log
C:\WINDOWS\TEMP\ISABELLE-20140519-1844.log
C:\WINDOWS\TEMP\ISABELLE-20140519-1914.log
C:\WINDOWS\TEMP\ISABELLE-20140520-0616.log
C:\WINDOWS\TEMP\ISABELLE-20140520-0626.log
C:\WINDOWS\TEMP\ISABELLE-20140520-0633.log
C:\WINDOWS\TEMP\ISABELLE-20140520-1810.log
C:\WINDOWS\TEMP\ISABELLE-20140520-1826.log
C:\WINDOWS\TEMP\ISABELLE-20140520-1839.log
C:\WINDOWS\TEMP\ISABELLE-20140520-1856.log
C:\WINDOWS\TEMP\ISABELLE-20140520-1926.log
C:\WINDOWS\TEMP\ISABELLE-20140521-0650.log
C:\WINDOWS\TEMP\ISABELLE-20140521-0720.log
C:\WINDOWS\TEMP\ISABELLE-20140521-0750.log
C:\WINDOWS\TEMP\ISABELLE-20140522-0620.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1804.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1820.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1834.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1850.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1904.log
C:\WINDOWS\TEMP\ISABELLE-20140522-1920.log
C:\WINDOWS\TEMP\ISABELLE-20140523-1718.log
C:\WINDOWS\TEMP\ISABELLE-20140523-1728.log
C:\WINDOWS\TEMP\ISABELLE-20140524-1921.log
C:\WINDOWS\TEMP\ISABELLE-20140524-1937.log
C:\WINDOWS\TEMP\ISABELLE-20140524-1951.log
C:\WINDOWS\TEMP\ISABELLE-20140524-2001.log
C:\WINDOWS\TEMP\ISABELLE-20140524-2001a.log
C:\WINDOWS\TEMP\ISABELLE-20140524-2156.log
C:\WINDOWS\TEMP\ISABELLE-20140525-0918.log
C:\WINDOWS\TEMP\ISABELLE-20140525-0941.log
C:\WINDOWS\TEMP\ISABELLE-20140525-0947.log
C:\WINDOWS\TEMP\ISABELLE-20140525-0957.log
C:\WINDOWS\TEMP\ISABELLE-20140525-1502.log
C:\WINDOWS\TEMP\ISABELLE-20140525-1720.log
C:\WINDOWS\TEMP\ISABELLE-20140525-1735.log
C:\WINDOWS\TEMP\ISABELLE-20140525-1750.log
C:\WINDOWS\TEMP\ISABELLE-20140525-1820.log
C:\WINDOWS\TEMP\ISABELLE-20140526-1744.log
C:\WINDOWS\TEMP\ISABELLE-20140526-1759.log
C:\WINDOWS\TEMP\ISABELLE-20140526-1814.log
C:\WINDOWS\TEMP\ISABELLE-20140526-1829.log
C:\WINDOWS\TEMP\ISABELLE-20140526-1844.log
C:\WINDOWS\TEMP\ISABELLE-20140526-2011.log
C:\WINDOWS\TEMP\ISABELLE-20140526-2027.log
C:\WINDOWS\TEMP\ISABELLE-20140527-0626.log
C:\WINDOWS\TEMP\ISABELLE-20140527-0636.log
C:\WINDOWS\TEMP\ISABELLE-20140527-1917.log
C:\WINDOWS\TEMP\ISABELLE-20140527-1932.log
C:\WINDOWS\TEMP\ISABELLE-20140527-1947.log
C:\WINDOWS\TEMP\ISABELLE-20140527-2002.log
C:\WINDOWS\TEMP\ISABELLE-20140528-0822.log
C:\WINDOWS\TEMP\ISABELLE-20140528-0837.log
C:\WINDOWS\TEMP\ISABELLE-20140528-0907.log
C:\WINDOWS\TEMP\ISABELLE-20140528-0937.log
C:\WINDOWS\TEMP\ISABELLE-20140529-1829.log
C:\WINDOWS\TEMP\ISABELLE-20140529-1844.log
C:\WINDOWS\TEMP\ISABELLE-20140529-1914.log
C:\WINDOWS\TEMP\ISABELLE-20140530-0635.log
C:\WINDOWS\TEMP\ISABELLE-20140530-1808.log
C:\WINDOWS\TEMP\ISABELLE-20140601-1809.log
C:\WINDOWS\TEMP\ISABELLE-20140601-1823.log
C:\WINDOWS\TEMP\ISABELLE-20140602-1803.log
C:\WINDOWS\TEMP\ISABELLE-20140602-1818.log
C:\WINDOWS\TEMP\ISABELLE-20140602-1848.log
C:\WINDOWS\TEMP\ISABELLE-20140602-1918.log
C:\WINDOWS\TEMP\ISABELLE-20140603-0632.log
C:\WINDOWS\TEMP\ISABELLE-20140603-2148.log
C:\WINDOWS\TEMP\ISABELLE-20140604-0723.log
C:\WINDOWS\TEMP\ISABELLE-20140604-0740.log
C:\WINDOWS\TEMP\ISABELLE-20140604-0753.log
C:\WINDOWS\TEMP\ISABELLE-20140604-0810.log
C:\WINDOWS\TEMP\ISABELLE-20140604-1122.log
C:\WINDOWS\TEMP\ISABELLE-20140604-1138.log
C:\WINDOWS\TEMP\ISABELLE-20140604-1354.log
C:\WINDOWS\TEMP\ISABELLE-20140604-1424.log
C:\WINDOWS\TEMP\ISABELLE-20140604-2147.log
C:\WINDOWS\TEMP\ISABELLE-20140605-0624.log
C:\WINDOWS\TEMP\ISABELLE-20140605-0640.log
C:\WINDOWS\TEMP\ISABELLE-20140605-1816.log
C:\WINDOWS\TEMP\ISABELLE-20140605-1831.log
C:\WINDOWS\TEMP\ISABELLE-20140605-1845.log
C:\WINDOWS\TEMP\ISABELLE-20140605-1901.log
C:\WINDOWS\TEMP\ISABELLE-20140605-2113.log
C:\WINDOWS\TEMP\ISABELLE-20140606-0623.log
C:\WINDOWS\TEMP\ISABELLE-20140606-0631.log
C:\WINDOWS\TEMP\ISABELLE-20140606-1727.log
C:\WINDOWS\TEMP\ISABELLE-20140609-2323.log
C:\WINDOWS\TEMP\ISABELLE-20140609-2332.log
C:\WINDOWS\TEMP\ISABELLE-20140609-2338.log
C:\WINDOWS\TEMP\ISABELLE-20140610-0642.log
C:\WINDOWS\TEMP\ISABELLE-20140610-0658.log
C:\WINDOWS\TEMP\ISABELLE-20140610-1735.log
C:\WINDOWS\TEMP\ISABELLE-20140610-1750.log
C:\WINDOWS\TEMP\ISABELLE-20140610-1804.log
C:\WINDOWS\TEMP\ISABELLE-20140610-1820.log
C:\WINDOWS\TEMP\ISABELLE-20140610-1850.log
C:\WINDOWS\TEMP\ISABELLE-20140611-0605.log
C:\WINDOWS\TEMP\ISABELLE-20140611-0619.log
C:\WINDOWS\TEMP\ISABELLE-20140611-0633.log
C:\WINDOWS\TEMP\ISABELLE-20140611-1749.log
C:\WINDOWS\TEMP\ISABELLE-20140611-1804.log
C:\WINDOWS\TEMP\ISABELLE-20140611-1819.log
C:\WINDOWS\TEMP\ISABELLE-20140611-1834.log
C:\WINDOWS\TEMP\ISABELLE-20140611-1904.log
C:\WINDOWS\TEMP\ISABELLE-20140612-1907.log
C:\WINDOWS\TEMP\ISABELLE-20140612-1937.log
C:\WINDOWS\TEMP\ISABELLE-20140613-0002.log
C:\WINDOWS\TEMP\ISABELLE-20140613-0637.log
C:\WINDOWS\TEMP\ISABELLE-20140613-0640.log
C:\WINDOWS\TEMP\ISABELLE-20140613-0642.log
C:\WINDOWS\TEMP\ISABELLE-20140613-2052.log
C:\WINDOWS\TEMP\ISABELLE-20140613-2122.log
C:\WINDOWS\TEMP\ISABELLE-20140613-2143.log
C:\WINDOWS\TEMP\ISABELLE-20140614-0741.log
C:\WINDOWS\TEMP\ISABELLE-20140614-0745.log
C:\WINDOWS\TEMP\ISABELLE-20140614-1853.log
C:\WINDOWS\TEMP\ISABELLE-20140614-2009.log
C:\WINDOWS\TEMP\ISABELLE-20140614-2024.log
C:\WINDOWS\TEMP\ISABELLE-20140614-2043.log
C:\WINDOWS\TEMP\ISABELLE-20140614-2054.log
C:\WINDOWS\TEMP\ISABELLE-20140614-2124.log
C:\WINDOWS\TEMP\ISABELLE-20140615-0637.log
C:\WINDOWS\TEMP\ISABELLE-20140615-0643.log
C:\WINDOWS\TEMP\ISABELLE-20140615-0713.log
C:\WINDOWS\TEMP\ISABELLE-20140615-0743.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1723.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1739.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1753.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1809.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1826.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1844.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1908.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1925.log
C:\WINDOWS\TEMP\ISABELLE-20140616-1954.log
C:\WINDOWS\TEMP\ISABELLE-20140616-2024.log
C:\WINDOWS\TEMP\ISABELLE-20140617-0628.log
C:\WINDOWS\TEMP\ISABELLE-20140617-0634.log
C:\WINDOWS\TEMP\ISABELLE-20140617-2059.log
C:\WINDOWS\TEMP\ISABELLE-20140617-2114.log
C:\WINDOWS\TEMP\ISABELLE-20140617-2129.log
C:\WINDOWS\TEMP\ISABELLE-20140617-2147.log
C:\WINDOWS\TEMP\ISABELLE-20140618-0742.log
C:\WINDOWS\TEMP\ISABELLE-20140618-0758.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1123.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1136.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1319.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1543.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1558.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1613.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1628.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1643.log
C:\WINDOWS\TEMP\ISABELLE-20140618-1658.log
C:\WINDOWS\TEMP\ISABELLE-20140619-0628.log
C:\WINDOWS\TEMP\ISABELLE-20140619-0638.log
C:\WINDOWS\TEMP\ISABELLE-20140619-0638a.log
C:\WINDOWS\TEMP\ISABELLE-20140619-1740.log
C:\WINDOWS\TEMP\ISABELLE-20140619-1810.log
C:\WINDOWS\TEMP\ISABELLE-20140620-0625.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1732.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1747.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1802.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1817.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1832.log
C:\WINDOWS\TEMP\ISABELLE-20140620-1847.log
C:\WINDOWS\TEMP\ISABELLE-20140623-0625.log
C:\WINDOWS\TEMP\ISABELLE-20140623-0643.log
C:\WINDOWS\TEMP\ISABELLE-20140623-1856.log
C:\WINDOWS\TEMP\ISABELLE-20140623-1913.log
C:\WINDOWS\TEMP\ISABELLE-20140623-2011.log
C:\WINDOWS\TEMP\ISABELLE-20140623-2041.log
C:\WINDOWS\TEMP\ISABELLE-20140624-0631.log
C:\WINDOWS\TEMP\ISABELLE-20140624-1800.log
C:\WINDOWS\TEMP\ISABELLE-20140624-1816.log
C:\WINDOWS\TEMP\ISABELLE-20140624-1822.log
C:\WINDOWS\TEMP\ISABELLE-20140624-1838.log
C:\WINDOWS\TEMP\ISABELLE-20140625-1441.log
C:\WINDOWS\TEMP\ISABELLE-20140625-1628.log
C:\WINDOWS\TEMP\ISABELLE-20140625-1658.log
C:\WINDOWS\TEMP\ISABELLE-20140626-1818.log
C:\WINDOWS\TEMP\ISABELLE-20140626-1833.log
C:\WINDOWS\TEMP\ISABELLE-20140626-1913.log
C:\WINDOWS\TEMP\ISABELLE-20140626-1929.log
C:\WINDOWS\TEMP\ISABELLE-20140626-2143.log
C:\WINDOWS\TEMP\ISABELLE-20140627-0628.log
C:\WINDOWS\TEMP\ISABELLE-20140627-0638.log
C:\WINDOWS\TEMP\ISABELLE-20140627-0647.log
C:\WINDOWS\TEMP\ISABELLE-20140627-2233.log
C:\WINDOWS\TEMP\ISABELLE-20140628-0718.log
C:\WINDOWS\TEMP\ISABELLE-20140628-0734.log
C:\WINDOWS\TEMP\ISABELLE-20140628-0748.log
C:\WINDOWS\TEMP\ISABELLE-20140629-0946.log
C:\WINDOWS\TEMP\ISABELLE-20140629-0956.log
C:\WINDOWS\TEMP\ISABELLE-20140629-1011.log
C:\WINDOWS\TEMP\ISABELLE-20140629-1016.log
C:\WINDOWS\TEMP\ISABELLE-20140629-1711.log
C:\WINDOWS\TEMP\ISABELLE-20140630-1720.log
C:\WINDOWS\TEMP\ISABELLE-20140630-1736.log
C:\WINDOWS\TEMP\ISABELLE-20140630-1750.log
C:\WINDOWS\TEMP\ISABELLE-20140701-0030.log
C:\WINDOWS\TEMP\ISABELLE-20140701-0635.log
C:\WINDOWS\TEMP\ISABELLE-20140701-1827.log
C:\WINDOWS\TEMP\ISABELLE-20140701-1844.log
C:\WINDOWS\TEMP\ISABELLE-20140701-1929.log
C:\WINDOWS\TEMP\ISABELLE-20140701-2329.log
C:\WINDOWS\TEMP\ISABELLE-20140702-1251.log
C:\WINDOWS\TEMP\ISABELLE-20140702-1530.log
C:\WINDOWS\TEMP\ISABELLE-20140702-1600.log
C:\WINDOWS\TEMP\ISABELLE-20140703-0632.log
C:\WINDOWS\TEMP\ISABELLE-20140703-1721.log
C:\WINDOWS\TEMP\ISABELLE-20140703-1737.log
C:\WINDOWS\TEMP\ISABELLE-20140703-1751.log
C:\WINDOWS\TEMP\ISABELLE-20140703-1807.log
C:\WINDOWS\TEMP\ISABELLE-20140703-1837.log
C:\WINDOWS\TEMP\ISABELLE-20140704-0621.log
C:\WINDOWS\TEMP\ISABELLE-20140704-0627.log
C:\WINDOWS\TEMP\ISABELLE-20140704-1816.log
C:\WINDOWS\TEMP\ISABELLE-20140704-1831.log
C:\WINDOWS\TEMP\ISABELLE-20140704-1846.log
C:\WINDOWS\TEMP\ISABELLE-20140704-2148.log
C:\WINDOWS\TEMP\ISABELLE-20140705-0817.log
C:\WINDOWS\TEMP\ISABELLE-20140705-1319.log
C:\WINDOWS\TEMP\ISABELLE-20140705-1335.log
C:\WINDOWS\TEMP\ISABELLE-20140705-1349.log
C:\WINDOWS\TEMP\ISABELLE-20140705-1349a.log
C:\WINDOWS\TEMP\ISABELLE-20140705-1405.log
C:\WINDOWS\TEMP\ISABELLE-20140705-2145.log
C:\WINDOWS\TEMP\ISABELLE-20140706-0728.log
C:\WINDOWS\TEMP\ISABELLE-20140706-0742.log
C:\WINDOWS\TEMP\ISABELLE-20140706-0812.log
C:\WINDOWS\TEMP\ISABELLE-20140706-0842.log
C:\WINDOWS\TEMP\ISABELLE-20140706-1808.log
C:\WINDOWS\TEMP\ISABELLE-20140706-1839.log
C:\WINDOWS\TEMP\ISABELLE-20140706-1909.log
C:\WINDOWS\TEMP\ISABELLE-20140706-1939.log
C:\WINDOWS\TEMP\ISABELLE-20140708-0720.log
C:\WINDOWS\TEMP\ISABELLE-20140708-0729.log
C:\WINDOWS\TEMP\ISABELLE-20140708-1117.log
C:\WINDOWS\TEMP\ISABELLE-20140710-1927.log
C:\WINDOWS\TEMP\ISABELLE-20140710-1942.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0839.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0852.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0907.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0907a.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0914.log
C:\WINDOWS\TEMP\ISABELLE-20140711-0914a.log
C:\WINDOWS\TEMP\ISABELLE-20140713-1300.log
C:\WINDOWS\TEMP\ISABELLE-20140713-1343.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1230.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1240.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1246.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1548.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1603.log
C:\WINDOWS\TEMP\ISABELLE-20140718-1704.log
C:\WINDOWS\TEMP\ISABELLE-20140720-2211.log
C:\WINDOWS\TEMP\ISABELLE-20140720-2226.log
C:\WINDOWS\TEMP\ISABELLE-20140720-2241.log
C:\WINDOWS\TEMP\ISABELLE-20140721-2027.log
C:\WINDOWS\TEMP\ISABELLE-20140721-2042.log
C:\WINDOWS\TEMP\ISABELLE-20140721-2057.log
C:\WINDOWS\TEMP\ISABELLE-20140721-2220.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1011.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1016.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1112.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1127.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1142.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1157.log
C:\WINDOWS\TEMP\ISABELLE-20140722-1227.log
C:\WINDOWS\TEMP\ISABELLE-20140723-1132.log
C:\WINDOWS\TEMP\ISABELLE-20140723-1342.log
C:\WINDOWS\TEMP\ISABELLE-20140723-1357.log
C:\WINDOWS\TEMP\ISABELLE-20140724-0749.log
C:\WINDOWS\TEMP\ISABELLE-20140724-0804.log
C:\WINDOWS\TEMP\ISABELLE-20140724-0811.log
C:\WINDOWS\TEMP\ISABELLE-20140724-1927.log
C:\WINDOWS\TEMP\ISABELLE-20140724-2230.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1201.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1210.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1352.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1407.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1437.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1507.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1651.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1706.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1736.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1806.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1847.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1917.log
C:\WINDOWS\TEMP\ISABELLE-20140725-1947.log
C:\WINDOWS\TEMP\lpksetup-20140214-223336-0.log
C:\WINDOWS\TEMP\lpksetup-20140226-135419-0.log
C:\WINDOWS\TEMP\lpksetup-20140227-125523-0.log
C:\WINDOWS\TEMP\lpksetup-20140313-190512-0.log
C:\WINDOWS\TEMP\lpksetup-20140325-064451-0.log
C:\WINDOWS\TEMP\lpksetup-20140409-214402-0.log
C:\WINDOWS\TEMP\lpksetup-20140421-123643-0.log
C:\WINDOWS\TEMP\lpksetup-20140421-201643-0.log
C:\WINDOWS\TEMP\lpksetup-20140422-192530-0.log
C:\WINDOWS\TEMP\lpksetup-20140424-201123-0.log
C:\WINDOWS\TEMP\lpksetup-20140505-062414-0.log
C:\WINDOWS\TEMP\lpksetup-20140514-234202-0.log
C:\WINDOWS\TEMP\lpksetup-20140514-234638-0.log
C:\WINDOWS\TEMP\lpksetup-20140518-185208-0.log
C:\WINDOWS\TEMP\lpksetup-20140518-185646-0.log
C:\WINDOWS\TEMP\lpksetup-20140518-232240-0.log
C:\WINDOWS\TEMP\lpksetup-20140520-061646-0.log
C:\WINDOWS\TEMP\lpksetup-20140522-062143-0.log
C:\WINDOWS\TEMP\lpksetup-20140523-171938-0.log
C:\WINDOWS\TEMP\lpksetup-20140526-201212-0.log
C:\WINDOWS\TEMP\lpksetup-20140529-182945-0.log
C:\WINDOWS\TEMP\lpksetup-20140604-112241-0.log
C:\WINDOWS\TEMP\lpksetup-20140613-064050-0.log
C:\WINDOWS\TEMP\lpksetup-20140613-064328-0.log
C:\WINDOWS\TEMP\lpksetup-20140613-214330-0.log
C:\WINDOWS\TEMP\lpksetup-20140614-074624-0.log
C:\WINDOWS\TEMP\lpksetup-20140616-190859-0.log
C:\WINDOWS\TEMP\lpksetup-20140624-182255-0.log
C:\WINDOWS\TEMP\lpksetup-20140626-191427-0.log
C:\WINDOWS\TEMP\lpksetup-20140706-180837-0.log
C:\WINDOWS\TEMP\lpksetup-20140713-134450-0.log
C:\WINDOWS\TEMP\lpksetup-20140725-165123-0.log
C:\WINDOWS\TEMP\lpksetup-20140725-183259-0.log
C:\WINDOWS\TEMP\MpCmdRun.log
C:\WINDOWS\TEMP\MRT
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(2014032006293914F8).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(2014032506441661C).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(201404120625361108).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(201405242001011020).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(20140526201128678).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(20140604112210648).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(201406190638281F4).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(20140624182219694).log
C:\WINDOWS\TEMP\officeclicktorun.exe_c2ruidll(20140626191355658).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(2014032006294014F8).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(2014032506441761C).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(201404120625361108).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(201405242001011020).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(20140526201129678).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(20140604112211648).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(201406190638281F4).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(20140624182219694).log
C:\WINDOWS\TEMP\officeclicktorun.exe_streamserver(20140626191355658).log
C:\WINDOWS\TEMP\ood_stream.x86.fr-fr.dat
C:\WINDOWS\TEMP\ood_stream.x86.x-none.dat
C:\WINDOWS\TEMP\SecurityScan_Release.exe
C:\WINDOWS\TEMP\SetupCommonLib.log
C:\WINDOWS\TEMP\setupexe.log
C:\WINDOWS\TEMP\Silverlight0.log
C:\WINDOWS\TEMP\SilverlightMSI.log
C:\WINDOWS\TEMP\tmp3F2.tmp
C:\WINDOWS\TEMP\tmp403.tmp
C:\WINDOWS\TEMP\tmp4C5A.tmp
C:\WINDOWS\TEMP\tmp4C5B.tmp
C:\WINDOWS\TEMP\tmp50BB.tmp
C:\WINDOWS\TEMP\tmp50BC.tmp
C:\WINDOWS\TEMP\tmp51F0.tmp
C:\WINDOWS\TEMP\tmp51F1.tmp
C:\WINDOWS\TEMP\tmp65C6.tmp
C:\WINDOWS\TEMP\tmp65C7.tmp
C:\WINDOWS\TEMP\tmp663F.tmp
C:\WINDOWS\TEMP\tmp6640.tmp
C:\WINDOWS\TEMP\tmp7BEC.tmp
C:\WINDOWS\TEMP\tmp7C7A.tmp
C:\WINDOWS\TEMP\tmp8762.tmp
C:\WINDOWS\TEMP\tmp8763.tmp
C:\WINDOWS\TEMP\tmp8FC7.tmp
C:\WINDOWS\TEMP\tmp9065.tmp
C:\WINDOWS\TEMP\tmpA98C.tmp
C:\WINDOWS\TEMP\tmpA98D.tmp
C:\WINDOWS\TEMP\tmpD6A9.tmp
C:\WINDOWS\TEMP\tmpD6AA.tmp
C:\WINDOWS\TEMP\tmpD731.tmp
C:\WINDOWS\TEMP\tmpD82C.tmp
C:\WINDOWS\TEMP\tmpEC41.tmp
C:\WINDOWS\TEMP\tmpEC42.tmp
C:\WINDOWS\TEMP\TS_1B.tmp
C:\WINDOWS\TEMP\TS_1B4F.tmp
C:\WINDOWS\TEMP\TS_24F.tmp
C:\WINDOWS\TEMP\TS_3113.tmp
C:\WINDOWS\TEMP\TS_393D.tmp
C:\WINDOWS\TEMP\TS_3F1A.tmp
C:\WINDOWS\TEMP\TS_B6EA.tmp
C:\WINDOWS\TEMP\TS_C821.tmp
C:\WINDOWS\TEMP\TS_CB5E.tmp
C:\WINDOWS\TEMP\TS_DDB7.tmp
C:\WINDOWS\TEMP\TS_E2CA.tmp
C:\WINDOWS\TEMP\UpdateMgrLog.txt
C:\WINDOWS\TEMP\Updates
C:\WINDOWS\TEMP\WFVEF.tmp
C:\WINDOWS\TEMP\wmsetup.log
C:\WINDOWS\TEMP\{11765D34-F626-4E28-8A44-27D2DBCB1FF0}
C:\WINDOWS\TEMP\{1F2C382E-9D06-4B83-9AAC-15926D76803A}
C:\WINDOWS\TEMP\{B130BBEC-CD33-43B4-9DB4-45CDCFACDC67}
C:\WINDOWS\TEMP\{F04C65DD-D4BC-45D7-A7B8-5584FFA8D6CE}
C:\WINDOWS\TEMP\{F04C65DD-D4BC-45D7-A7B8-5584FFA8D6CE}\fpi.tmp
C:\WINDOWS\TEMP\{B130BBEC-CD33-43B4-9DB4-45CDCFACDC67}\fpi.tmp
C:\WINDOWS\TEMP\{1F2C382E-9D06-4B83-9AAC-15926D76803A}\fpi.tmp
C:\WINDOWS\TEMP\{11765D34-F626-4E28-8A44-27D2DBCB1FF0}\fpi.tmp
C:\WINDOWS\TEMP\Updates\Detection
C:\WINDOWS\TEMP\Updates\Detection\Version005200A4
C:\WINDOWS\TEMP\Updates\Detection\Version01320264
C:\WINDOWS\TEMP\Updates\Detection\Version02480490
C:\WINDOWS\TEMP\Updates\Detection\Version03D607AC
C:\WINDOWS\TEMP\Updates\Detection\Version0E9A1D34
C:\WINDOWS\TEMP\Updates\Detection\Version17662ECC
C:\WINDOWS\TEMP\Updates\Detection\Version1E7C3CF8
C:\WINDOWS\TEMP\Updates\Detection\Version20284050
C:\WINDOWS\TEMP\Updates\Detection\Version25B64B6C
C:\WINDOWS\TEMP\Updates\Detection\Version2A7854F0
C:\WINDOWS\TEMP\Updates\Detection\Version2A8E551C
C:\WINDOWS\TEMP\Updates\Detection\Version2C925924
C:\WINDOWS\TEMP\Updates\Detection\Version317C62F8
C:\WINDOWS\TEMP\Updates\Detection\Version4DD29BA4
C:\WINDOWS\TEMP\Updates\Detection\Version59ACB359
C:\WINDOWS\TEMP\Updates\Detection\Version5A24B449
C:\WINDOWS\TEMP\Updates\Detection\Version5D4CBA99
C:\WINDOWS\TEMP\Updates\Detection\Version60BCC179
C:\WINDOWS\TEMP\Updates\Detection\Version7218E431
C:\WINDOWS\TEMP\Updates\Detection\Version7366E6CD
C:\WINDOWS\TEMP\Updates\Detection\Version7AD8F5B1
C:\WINDOWS\TEMP\Updates\Detection\Version837706ED
C:\WINDOWS\TEMP\Updates\Detection\Version852D0A59
C:\WINDOWS\TEMP\Updates\Detection\Version881B1035
C:\WINDOWS\TEMP\Updates\Detection\Version9047208D
C:\WINDOWS\TEMP\Updates\Detection\Version92392471
C:\WINDOWS\TEMP\Updates\Detection\Version95C32B85
C:\WINDOWS\TEMP\Updates\Detection\Version996332C5
C:\WINDOWS\TEMP\Updates\Detection\Version9A0D3419
C:\WINDOWS\TEMP\Updates\Detection\Version9B6F36DD
C:\WINDOWS\TEMP\Updates\Detection\Version9B913721
C:\WINDOWS\TEMP\Updates\Detection\VersionA9BD5379
C:\WINDOWS\TEMP\Updates\Detection\VersionB5E36BC6
C:\WINDOWS\TEMP\Updates\Detection\VersionB8C7718E
C:\WINDOWS\TEMP\Updates\Detection\VersionBF217E42
C:\WINDOWS\TEMP\Updates\Detection\VersionC887910E
C:\WINDOWS\TEMP\Updates\Detection\VersionCF099E12
C:\WINDOWS\TEMP\Updates\Detection\VersionD2A5A54A
C:\WINDOWS\TEMP\Updates\Detection\VersionDBE3B7C6
C:\WINDOWS\TEMP\Updates\Detection\VersionE55DCABA
C:\WINDOWS\TEMP\Updates\Detection\VersionFD0FFA1E
C:\WINDOWS\TEMP\Updates\Detection\VersionFD0FFA1E\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionE55DCABA\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionDBE3B7C6\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionD2A5A54A\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionCF099E12\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionC887910E\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionBF217E42\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionB8C7718E\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionB5E36BC6\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\VersionA9BD5379\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version9B913721\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version9B6F36DD\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version9A0D3419\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version996332C5\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version95C32B85\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version92392471\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version9047208D\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version881B1035\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version852D0A59\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version837706ED\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version7AD8F5B1\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version7366E6CD\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version7218E431\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version60BCC179\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version5D4CBA99\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version5A24B449\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version59ACB359\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version4DD29BA4\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version317C62F8\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version2C925924\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version2A8E551C\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version2A7854F0\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version25B64B6C\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version20284050\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version1E7C3CF8\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version17662ECC\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version0E9A1D34\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version03D607AC\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version02480490\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version01320264\v32.cab
C:\WINDOWS\TEMP\Updates\Detection\Version005200A4\v32.cab
C:\WINDOWS\TEMP\MRT\10FE7F05-7F5B-4791-8939-194E0ED16AF1
C:\WINDOWS\TEMP\MRT\254C09FA-7763-4C39-8241-76517EF78744
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\History
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\MpGearSupport_20140615_095237984.log
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\RtSigs
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\RtSigs\Data
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\History\Results
C:\WINDOWS\TEMP\MRT\739B080F-EF67-4463-BAD2-CBA53FBF9FB9\History\Store
C:\WINDOWS\TEMP\MRT\254C09FA-7763-4C39-8241-76517EF78744\History
C:\WINDOWS\TEMP\MRT\254C09FA-7763-4C39-8241-76517EF78744\MpGearSupport_20140409_115034015.log
C:\WINDOWS\TEMP\MRT\254C09FA-7763-4C39-8241-76517EF78744\RtSigs
C:\WINDOWS\TEMP\MRT\254C09FA-7763-4C39-8241-76517EF78744\RtSigs\Data

le lien pour le rapport complet : http://upload.sosvirus.net/www/?a=d&i=g3OjiMOIvD