Delta search

Wizz2010 -  
Bonsoir,

Windows 8, google chrome.

Mon ordinateur a été infecté par delta-search, j'ai lancé Spybot et cela semble avoir éradiqué le problème. J'ai aussi procédé à la plupart des manipulations pour remettre une nouvelle page d'accueil sur google chrome, mais mon navigateur s'ouvre obstinément sur delta-homes.com, alors que dans les paramètres, partout où il est possible et indiqué de supprimer delta-homes, je l'ai fait.

Je ne sais comment résoudre ce problème,

Merci de votre aide.

François

9 réponses

  3.  Malekal_morte- Modérateur
    Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
    Fournir les deux rapports :

    Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

    * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
    (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

    Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

    * Lance OTL
    * En haut à droite de Analyse rapide, coche "tous les utilisateurs"
    * Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :

    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %temp%\*.exe /s
    %SYSTEMDRIVE%\*.exe
    %systemroot%\*. /mp /s
    %systemroot%\system32\consrv.dll
    %systemroot%\system32\*.dll /lockedfiles
    %windir%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    /md5start
    explorer.exe
    winlogon.exe
    services.exe
    wininit.exe
    /md5stop
    HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
    HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
    HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
    CREATERESTOREPOINT
    nslookup https://www.google.fr/?gws_rd=ssl /c
    SAVEMBR:0
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs

    * Clique sur le bouton Analyse.

    * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
    Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
    Je répète : donne le lien du rapport pjjoint ici en réponse.

    NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

    1. Wizz2010 Auteur
      Et voici le rapport d'ADwcleaner

      # AdwCleaner v3.006 - Rapport créé le 01/10/2013 à 10:42:35
      # Mis à jour le 01/10/2013 par Xplode
      # Système d'exploitation : Windows 8 (64 bits)
      # Nom d'utilisateur : Admin - FRANCOIS
      # Exécuté depuis : C:\Users\Admin\Downloads\adwcleaner.exe
      # Option : Nettoyer

      ***** [ Services ] *****

      Service Supprimé : omigaplussvc
      Service Supprimé : winzipersvc

      ***** [ Fichiers / Dossiers ] *****

      Dossier Supprimé : C:\ProgramData\BasicServe
      Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Omiga Plus
      Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
      Dossier Supprimé : C:\Program Files (x86)\BasicServe
      Dossier Supprimé : C:\Program Files (x86)\Omiga Plus
      Dossier Supprimé : C:\Program Files (x86)\WinZip Registry Optimizer
      Dossier Supprimé : C:\Program Files (x86)\WinZipper
      Dossier Supprimé : C:\Program Files (x86)\tuto4pc_fr_59
      Dossier Supprimé : C:\Users\Admin\AppData\Local\PackageAware
      Dossier Supprimé : C:\Users\Admin\AppData\Local\tuto4pc_fr_59
      Dossier Supprimé : C:\Users\Admin\AppData\Local\Temp\eIntaller
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\337
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Advanced System Protector
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Omiga Plus
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\pdfforge
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\Systweak
      Dossier Supprimé : C:\Users\Admin\AppData\Roaming\WinZipper
      Fichier Supprimé : C:\Windows\System32\roboot64.exe
      Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage
      Fichier Supprimé : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage-journal
      Fichier Supprimé : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser

      ***** [ Raccourcis ] *****

      Raccourci Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
      Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
      Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
      Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
      Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
      Raccourci Désinfecté : C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

      ***** [ Registre ] *****

      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
      Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
      Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
      Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
      Clé Supprimée : HKCU\Software\Conduit
      Clé Supprimée : HKCU\Software\Delta
      Clé Supprimée : HKCU\Software\IGearSettings
      Clé Supprimée : HKCU\Software\powerpack
      Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
      Clé Supprimée : HKLM\Software\BasicServe
      Clé Supprimée : HKLM\Software\Delta
      Clé Supprimée : HKLM\Software\delta-homesSoftware
      Clé Supprimée : HKLM\Software\omigaplusSvc
      Clé Supprimée : HKLM\Software\portaldositesSoftware
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer

      ***** [ Navigateurs ] *****

      -\\ Internet Explorer v10.0.9200.16688

      Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
      Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
      Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

      -\\ Google Chrome v29.0.1547.76

      [ Fichier : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

      *************************

      AdwCleaner[R0].txt - [7532 octets] - [01/10/2013 10:41:30]
      AdwCleaner[S0].txt - [4909 octets] - [01/10/2013 10:42:35]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4969 octets] ##########
      2. Wizz2010 Auteur
        Voici les résultats de Malware

        Malwarebytes Anti-Malware (Essai) 1.75.0.1300
        www.malwarebytes.org

        Version de la base de données: v2013.10.01.02

        Windows 8 x64 NTFS
        Internet Explorer 10.0.9200.16688
        Admin :: FRANCOIS [administrateur]

        Protection: Désactivé

        01.10.2013 10:07:19
        MBAM-log-2013-10-01 (10-27-19).txt

        Type d'examen: Examen rapide
        Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
        Options d'examen désactivées: P2P
        Elément(s) analysé(s): 201835
        Temps écoulé: 16 minute(s), 42 seconde(s)

        Processus mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Module(s) mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Clé(s) du Registre détectée(s): 5
        HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
        HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Aucune action effectuée.
        HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Aucune action effectuée.
        HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA} (PUP.Optional.WebCake.A) -> Aucune action effectuée.
        HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Aucune action effectuée.

        Valeur(s) du Registre détectée(s): 0
        (Aucun élément nuisible détecté)

        Elément(s) de données du Registre détecté(s): 0
        (Aucun élément nuisible détecté)

        Dossier(s) détecté(s): 2
        C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Aucune action effectuée.
        C:\Users\Admin\AppData\Local\Temp\ct2504091 (PUP.Optional.Conduit.A) -> Aucune action effectuée.

        Fichier(s) détecté(s): 1
        C:\Users\Admin\AppData\Roaming\Omiga Plus\wallpaper_components.exe (PUP.Optional.Desk365.A) -> Aucune action effectuée.

        (fin)
        1. Malekal_morte- Modérateur
          Désinstalle Spybot, il est dépassé et inefficace.
          Fais ce qui est demandé plus haut.
          1. Wizz2010 Auteur
            Voici le rapport de Spybot

            Search results from Spybot - Search & Destroy

            30.09.2013 16:52:23
            Scan took 01:21:10.
            90 items found.

            Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
            C:\ProgramData\Babylon\

            Babylon.Toolbar: [SBI $DEB52F26] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Roaming\Babylon\
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
            Directory.subfile.size=6305
            Directory.subfile.md5=776AFBAB9611C38820B39C324294F09B
            Directory.subfile.filedate=1380181074
            Directory.subfile.filedatetext=2013-09-26 09:37:53

            Babylon.Toolbar: [SBI $0C3B54D0] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Local\Babylon\
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab098.claroico.zpb
            Directory.subfile.size=953
            Directory.subfile.md5=4D86B379CE2451BE0B96CD9E8761F4C2
            Directory.subfile.filedate=1380181031
            Directory.subfile.filedatetext=2013-09-26 09:37:11
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab138.deltatb_dmn.zpb
            Directory.subfile.size=250
            Directory.subfile.md5=E3F94911F62443BB76C2A71BFF1B5D5B
            Directory.subfile.filedate=1380181031
            Directory.subfile.filedatetext=2013-09-26 09:37:10
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab149.spreg.zpb
            Directory.subfile.size=299
            Directory.subfile.md5=57DB174831D94469C02C82964D6512F4
            Directory.subfile.filedate=1380181031
            Directory.subfile.filedatetext=2013-09-26 09:37:11
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\bab457.TB_NewWay.dat
            Directory.subfile.size=173
            Directory.subfile.md5=16ABCACBDC0476A21299C697CA66AE90
            Directory.subfile.filedate=1380181031
            Directory.subfile.filedatetext=2013-09-26 09:37:10
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\BUsolution_vt.zpb
            Directory.subfile.size=199480
            Directory.subfile.md5=48A9BB985DE97EDEC9CB0536FE80A204
            Directory.subfile.filedate=1380181033
            Directory.subfile.filedatetext=2013-09-26 09:37:13
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\GUninstaller_cat.zpb
            Directory.subfile.size=8192
            Directory.subfile.md5=58152EC9407C504348AFBD01EE5F490E
            Directory.subfile.filedate=1380181064
            Directory.subfile.filedatetext=2013-09-26 09:37:43
            Directory.subfile=C:\Users\Admin\AppData\Local\Babylon\Setup\latest.zpb
            Directory.subfile.size=361398
            Directory.subfile.md5=E6F2BE96E7308C5DC48B9E7B65146424
            Directory.subfile.filedate=1380181027
            Directory.subfile.filedatetext=2013-09-26 09:37:07

            Delta.Toolbar: [SBI $C87F6C5D] Data (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Babylon\log_file.txt
            Properties.size=6305
            Properties.md5=776AFBAB9611C38820B39C324294F09B
            Properties.filedate=1380181074
            Properties.filedatetext=2013-09-26 09:37:53

            Delta.Toolbar: [SBI $85F92549] User settings (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\BabSolution

            Delta.Toolbar: [SBI $4FE1D2EF] User settings (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

            Delta.Toolbar: [SBI $1E0125E9] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\Delta

            Pricepeep: [SBI $7B1A2903] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\
            Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\background.html
            Directory.subfile.size=784
            Directory.subfile.md5=BA82642D3A033B95C4D7F324D84ED104
            Directory.subfile.filedate=1350059368
            Directory.subfile.filedatetext=2012-10-12 18:29:28
            Directory.subfile=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.3_0\manifest.json
            Directory.subfile.size=824
            Directory.subfile.md5=1B864E2A2F5C2E224BCEAD091501977C
            Directory.subfile.filedate=1377894700
            Directory.subfile.filedatetext=2013-08-30 22:31:40

            WebCake.BHO: [SBI $FDE5A161] Class ID (Registry Key, nothing done)
            HKEY_CLASSES_ROOT\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}

            WebCake.BHO: [SBI $3F53FBE0] Class ID (Registry Key, nothing done)
            HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

            WebCake.BHO: [SBI $8048C96E] Interface (Registry Key, nothing done)
            HKEY_CLASSES_ROOT\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}

            WebCake.BHO: [SBI $7BEA5F33] Interface (Registry Key, nothing done)
            HKEY_CLASSES_ROOT\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}

            WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

            WebCake.BHO: [SBI $5B966508] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

            WebCake.BHO: [SBI $2698E3E6] Program directory (Directory, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\
            Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
            Directory.subfile.size=56017
            Directory.subfile.md5=711EF3CDC4EB735A562F4E277328EB0B
            Directory.subfile.filedate=1372843124
            Directory.subfile.filedatetext=2013-07-03 11:18:43
            Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
            Directory.subfile.size=227984
            Directory.subfile.md5=5A8222C703B4A34F2227A652A49A2827
            Directory.subfile.filedate=1299814153
            Directory.subfile.filedatetext=2011-03-11 05:29:12
            Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
            Directory.subfile.size=4846
            Directory.subfile.md5=60E3EF9326E8C3F574A2C7B5A31FD895
            Directory.subfile.filedate=1258611124
            Directory.subfile.filedatetext=2009-11-19 08:12:03
            Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
            Directory.subfile.size=531968
            Directory.subfile.md5=E1416C9C40FD81557795D4195FB48E8D
            Directory.subfile.filedate=1368563125
            Directory.subfile.filedatetext=2013-05-14 22:25:25
            Directory.subfile=C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
            Directory.subfile.size=273408
            Directory.subfile.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
            Directory.subfile.filedate=1368563125
            Directory.subfile.filedatetext=2013-05-14 22:25:24

            WebCake.BHO: [SBI $885FF297] Library (File, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
            Properties.size=531968
            Properties.md5=E1416C9C40FD81557795D4195FB48E8D
            Properties.filedate=1368563125
            Properties.filedatetext=2013-05-14 22:25:25

            WebCake.BHO: [SBI $0A5B161A] Library (File, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
            Properties.size=273408
            Properties.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
            Properties.filedate=1368563125
            Properties.filedatetext=2013-05-14 22:25:24

            WebCake.BHO: [SBI $1107F102] Data (File, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
            Properties.size=56017
            Properties.md5=711EF3CDC4EB735A562F4E277328EB0B
            Properties.filedate=1372843124
            Properties.filedatetext=2013-07-03 11:18:43

            WebCake.BHO: [SBI $E98B8D0E] Executable (File, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
            Properties.size=227984
            Properties.md5=5A8222C703B4A34F2227A652A49A2827
            Properties.filedate=1299814153
            Properties.filedatetext=2011-03-11 05:29:12

            WebCake.BHO: [SBI $370B837B] Picture (File, nothing done)
            C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
            Properties.size=4846
            Properties.md5=60E3EF9326E8C3F574A2C7B5A31FD895
            Properties.filedate=1258611124
            Properties.filedatetext=2009-11-19 08:12:03

            Win32.Agent.qvo: [SBI $C32FED7D] Settings (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

            Win32.Agent.qvo: [SBI $37F0341B] Settings (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope

            Banyan.eSafe: [SBI $320096C0] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\eSafeSecControl

            Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

            Banyan.eSafe: [SBI $5CB84A12] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\eSafeSvc

            Banyan.eSafe: [SBI $043C19FB] Program directory (Directory, nothing done)
            C:\ProgramData\eSafe\
            Directory.subfile=C:\ProgramData\eSafe\temp_000.exe
            Directory.subfile.size=178176
            Directory.subfile.md5=1BAAF5819FD346B34E21056B33EA8D18
            Directory.subfile.filedate=1380272657
            Directory.subfile.filedatetext=2013-09-27 11:04:17
            Directory.subfile=C:\ProgramData\eSafe\log\eGdpSvc.LOG
            Directory.subfile.size=287982
            Directory.subfile.md5=DB6184A472CB8111008214E170C0640A
            Directory.subfile.filedate=1380540428
            Directory.subfile.filedatetext=2013-09-30 13:27:07
            Directory.subfile=C:\ProgramData\eSafe\log\eSafeSvc.LOG
            Directory.subfile.size=73172
            Directory.subfile.md5=8442FA73416C352FCE12DC22220944B8
            Directory.subfile.filedate=1377350508
            Directory.subfile.filedatetext=2013-08-24 15:21:48

            Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

            Banyan.eSafe: [SBI $F482B9B1] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WsysSvc

            Banyan.eSafe: [SBI $E00BC7C6] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Roaming\eIntaller\
            Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Config.ini
            Directory.subfile.size=220
            Directory.subfile.md5=02C84EFB774471CB8BA8B60487266AF6
            Directory.subfile.filedate=1372843126
            Directory.subfile.filedatetext=2013-07-03 11:18:45
            Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\Desk365.exe
            Directory.subfile.size=4356176
            Directory.subfile.md5=EE1A1AA7D1E5190FBF4C6618A47A0D3C
            Directory.subfile.filedate=1369820333
            Directory.subfile.filedatetext=2013-05-29 11:38:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
            Directory.subfile.size=361536
            Directory.subfile.md5=7D8DD3520A5B113A248B4867492E7DFE
            Directory.subfile.filedate=1372843115
            Directory.subfile.filedatetext=2013-07-03 11:18:34
            Directory.subfile=C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
            Directory.subfile.size=718392
            Directory.subfile.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
            Directory.subfile.filedate=1372843116
            Directory.subfile.filedatetext=2013-07-03 11:18:35

            Banyan.eSafe: [SBI $F391D360] Executable (File, nothing done)
            C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eGdpSvc.exe
            Properties.size=361536
            Properties.md5=7D8DD3520A5B113A248B4867492E7DFE
            Properties.filedate=1372843115
            Properties.filedatetext=2013-07-03 11:18:34

            Banyan.eSafe: [SBI $5C7F4E30] Executable (File, nothing done)
            C:\Users\Admin\AppData\Roaming\eIntaller\E40331053389440eBD20093A786092E3\eXQ.exe
            Properties.size=718392
            Properties.md5=6ACD8F5D3D77F51DDC05E0888349BFC0
            Properties.filedate=1372843116
            Properties.filedatetext=2013-07-03 11:18:35

            Elex.Desk365: [SBI $C6008D91] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\deskSvc

            Elex.Desk365: [SBI $487B5F3A] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\V9

            Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

            Elex.Desk365: [SBI $C8478A32] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\desksvc

            Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

            Elex.Desk365: [SBI $1BFEF581] Settings (Registry Key, nothing done)
            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc

            Elex.Desk365: [SBI $5898CD7C] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\accelerate
            Directory.subfile.size=0
            Directory.subfile.md5=D41D8CD98F00B204E9800998ECF8427E
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
            Directory.subfile.size=1434
            Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
            Directory.subfile.size=17864
            Directory.subfile.md5=8FE5F08FC542B868EDB34E79E4F148EF
            Directory.subfile.filedate=1372852378
            Directory.subfile.filedatetext=2013-07-03 13:52:58
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
            Directory.subfile.size=82
            Directory.subfile.md5=88D6F5361B4990FFF5192E7FEBAD7143
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
            Directory.subfile.size=220
            Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
            Directory.subfile.filedate=1372852456
            Directory.subfile.filedatetext=2013-07-03 13:54:15
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
            Directory.subfile.size=5926
            Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\components\libcef_1.1364_wallpaper.exe
            Directory.subfile.size=10434864
            Directory.subfile.md5=8E390845A88CB1E0406CE350F570CF4B
            Directory.subfile.filedate=1375536902
            Directory.subfile.filedatetext=2013-08-03 15:35:02
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png
            Directory.subfile.size=79965
            Directory.subfile.md5=39CB48E50C1687943D9D8243534A978C
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png
            Directory.subfile.size=262007
            Directory.subfile.md5=600C71AC313C6D8CB86C8DBF97808CB2
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png
            Directory.subfile.size=109761
            Directory.subfile.md5=35361BC157F356FA8B05238790C70C1E
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png
            Directory.subfile.size=311068
            Directory.subfile.md5=472564D9BE514897A479679A16AF6295
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png
            Directory.subfile.size=201084
            Directory.subfile.md5=7BA3473A9526CDB3680E823C3823AA0C
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png
            Directory.subfile.size=2031
            Directory.subfile.md5=F5B39121E867C9936CCB6268837A1894
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png
            Directory.subfile.size=3290
            Directory.subfile.md5=1FFB97EEB780E007976D68A7F5686DC9
            Directory.subfile.filedate=1372843180
            Directory.subfile.filedatetext=2013-07-03 11:19:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png
            Directory.subfile.size=3497
            Directory.subfile.md5=0CF32AB908FB25D8B4E6FE6C70B75AF4
            Directory.subfile.filedate=1372843170
            Directory.subfile.filedatetext=2013-07-03 11:19:30
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png
            Directory.subfile.size=6461
            Directory.subfile.md5=9BC9C146C55E228248D47D1F57E82A19
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png
            Directory.subfile.size=6249
            Directory.subfile.md5=8760281CEE9AA98F2C35BAE2B5A573E9
            Directory.subfile.filedate=1372843172
            Directory.subfile.filedatetext=2013-07-03 11:19:31
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866.ico
            Directory.subfile.size=55773
            Directory.subfile.md5=C8C9AFE271500BBD9B5C29E86DB8EF66
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\chrome_14ad2675c879c2db03ac308a0051e866_48_48.png
            Directory.subfile.size=3862
            Directory.subfile.md5=0945506ECF06B297C1E1BB878CFAE522
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png
            Directory.subfile.size=4447
            Directory.subfile.md5=5168E91605FEC4DB1278876CF6756E2E
            Directory.subfile.filedate=1372843173
            Directory.subfile.filedatetext=2013-07-03 11:19:33
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png
            Directory.subfile.size=1684
            Directory.subfile.md5=0DAE331466C7319B010839EC73D1EC53
            Directory.subfile.filedate=1372843176
            Directory.subfile.filedatetext=2013-07-03 11:19:36
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png
            Directory.subfile.size=2953
            Directory.subfile.md5=17025BF4A3A47BD39A43116D4EF7184C
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png
            Directory.subfile.size=1680
            Directory.subfile.md5=B25C97B3D39D2495822D4C6E018654CA
            Directory.subfile.filedate=1372843177
            Directory.subfile.filedatetext=2013-07-03 11:19:37
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png
            Directory.subfile.size=1648
            Directory.subfile.md5=E541CE7DF52E638E155AC01E7B9FD208
            Directory.subfile.filedate=1372843174
            Directory.subfile.filedatetext=2013-07-03 11:19:34
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png
            Directory.subfile.size=5533
            Directory.subfile.md5=2535026BCE2154C641326114F5AE9030
            Directory.subfile.filedate=1372843182
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431.ico
            Directory.subfile.size=82151
            Directory.subfile.md5=12CE4FAE05C5CC52955D83002528FD53
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_16_16.png
            Directory.subfile.size=1022
            Directory.subfile.md5=CEAD53A3CF9401B25986A3134ABCDB25
            Directory.subfile.filedate=1372852378
            Directory.subfile.filedatetext=2013-07-03 13:52:58
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_48_48.png
            Directory.subfile.size=5017
            Directory.subfile.md5=BD2620F7B9CEDC486EA7EFC2F7213259
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png
            Directory.subfile.size=7408
            Directory.subfile.md5=7D347C69736BC249D0ADBAF0D0125910
            Directory.subfile.filedate=1372843180
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png
            Directory.subfile.size=996
            Directory.subfile.md5=656E676249500A92897729EB7B70C356
            Directory.subfile.filedate=1372843175
            Directory.subfile.filedatetext=2013-07-03 11:19:35
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png
            Directory.subfile.size=1520
            Directory.subfile.md5=7A32F8A7144F199235F14363BD02F945
            Directory.subfile.filedate=1372843179
            Directory.subfile.filedatetext=2013-07-03 11:19:38
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_20_20.png
            Directory.subfile.size=1038
            Directory.subfile.md5=EFF0ED9BC240BAB196054F0D483B83A5
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png
            Directory.subfile.size=4991
            Directory.subfile.md5=9F708E9B2ACF92AA17B24AE420D2FC54
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_20_20.png
            Directory.subfile.size=1186
            Directory.subfile.md5=93DCE65B5F7C0B56E853ACCA19420160
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png
            Directory.subfile.size=4391
            Directory.subfile.md5=2B2A6EA0D1C20B414BDD0C64016CFBA9
            Directory.subfile.filedate=1372843163
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_downloads_20_20.png
            Directory.subfile.size=1232
            Directory.subfile.md5=1DF9CFE13710E20768B1F595420248C8
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_20_20.png
            Directory.subfile.size=1039
            Directory.subfile.md5=FFBF4646D56E393DC4555B34F67E30BF
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png
            Directory.subfile.size=3942
            Directory.subfile.md5=5F52AC5DA5722CC7F770D5D6BA036B4D
            Directory.subfile.filedate=1372843163
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png
            Directory.subfile.size=3627
            Directory.subfile.md5=6D0D3DB3615E9C65A500AF0459E85576
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png
            Directory.subfile.size=4445
            Directory.subfile.md5=B8A981866E83CE33B3142FF25988AB5F
            Directory.subfile.filedate=1372843182
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=761DD2166214981120FAD0FF9F43C479
            Directory.subfile.filedate=1372843180
            Directory.subfile.filedatetext=2013-07-03 11:19:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\barbie.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=690F18A933D2602125041B2613992063
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=690F18A933D2602125041B2613992063
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\facebook.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=6BF7864D2BC71231FF1E9B22DAE7F627
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\GameCenter.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=C43C4159B62E4EAED3C7677902627806
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\google.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=638D1346BB53FCF63CA208A6A566528E
            Directory.subfile.filedate=1372843182
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\mario.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=2A35CB9031362A53D31436247DB07EBA
            Directory.subfile.filedate=1372843180
            Directory.subfile.filedatetext=2013-07-03 11:19:40
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\twitter.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=E559051E49401DADC174EB19B59C7CA7
            Directory.subfile.filedate=1372843181
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\v9.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=BD31640E318030A99D4E7A1228D9FC1F
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\youtube.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico
            Directory.subfile.size=13942
            Directory.subfile.md5=71DA62EE593F47DB9D9560E680989B9D
            Directory.subfile.filedate=1372843182
            Directory.subfile.filedatetext=2013-07-03 11:19:41
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico
            Directory.subfile.size=99567
            Directory.subfile.md5=AA7F7C9CA7C2A3E8B33C99338E0020D3
            Directory.subfile.filedate=1372843162
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico
            Directory.subfile.size=79781
            Directory.subfile.md5=F0CFA464CDD86350DAE8E1AC6E3A25C3
            Directory.subfile.filedate=1372843163
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\imageres.dll_175.ico
            Directory.subfile.size=67173
            Directory.subfile.md5=C99AAEDA16CD6524F2C26BCBDC93E4B3
            Directory.subfile.filedate=1372852299
            Directory.subfile.filedatetext=2013-07-03 13:51:39
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico
            Directory.subfile.size=69998
            Directory.subfile.md5=31136B37FF3DBBA78520FC3B258AD009
            Directory.subfile.filedate=1372843163
            Directory.subfile.filedatetext=2013-07-03 11:19:22
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r0.jpg
            Directory.subfile.size=99071
            Directory.subfile.md5=15C2EA420C382259DEE6FFE667C4CDFB
            Directory.subfile.filedate=1372843164
            Directory.subfile.filedatetext=2013-07-03 11:19:23
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r1.jpg
            Directory.subfile.size=243668
            Directory.subfile.md5=4BD08157F258A8A75AF71C14813A9086
            Directory.subfile.filedate=1372843167
            Directory.subfile.filedatetext=2013-07-03 11:19:27
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r2.jpg
            Directory.subfile.size=260964
            Directory.subfile.md5=076AAFD7232144885A3534225ADCDCFB
            Directory.subfile.filedate=1372843165
            Directory.subfile.filedatetext=2013-07-03 11:19:24
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r3.jpg
            Directory.subfile.size=172184
            Directory.subfile.md5=6FBE69DA6CABA36B5FDD460C249F841B
            Directory.subfile.filedate=1372843171
            Directory.subfile.filedatetext=2013-07-03 11:19:31
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r4.jpg
            Directory.subfile.size=318950
            Directory.subfile.md5=9D738AF8B31FDD8A4AB3B40E45E72499
            Directory.subfile.filedate=1372843166
            Directory.subfile.filedatetext=2013-07-03 11:19:25
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r5.jpg
            Directory.subfile.size=291623
            Directory.subfile.md5=CD8D2E43E865FB2E3DB840D955DAC545
            Directory.subfile.filedate=1372843169
            Directory.subfile.filedatetext=2013-07-03 11:19:28
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r6.jpg
            Directory.subfile.size=280712
            Directory.subfile.md5=C964E70AA09130459124EA9E9C22D6B3
            Directory.subfile.filedate=1372843171
            Directory.subfile.filedatetext=2013-07-03 11:19:31
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r7.jpg
            Directory.subfile.size=242358
            Directory.subfile.md5=6AE22A47C48A0A68B5A6AFBCC78B5FB7
            Directory.subfile.filedate=1372843170
            Directory.subfile.filedatetext=2013-07-03 11:19:29
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r8.jpg
            Directory.subfile.size=256804
            Directory.subfile.md5=1E2FC86580DA26DBBA3B8D5508F9AA9C
            Directory.subfile.filedate=1372843167
            Directory.subfile.filedatetext=2013-07-03 11:19:26
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\wp\r9.jpg
            Directory.subfile.size=284621
            Directory.subfile.md5=C35ACE7A53644846A2B8207F3337A5D3
            Directory.subfile.filedate=1372843173
            Directory.subfile.filedatetext=2013-07-03 11:19:32
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.db
            Directory.subfile.size=994
            Directory.subfile.md5=563B20129235DC021C75E63DC423AF8C
            Directory.subfile.filedate=1372843170
            Directory.subfile.filedatetext=2013-07-03 11:19:30
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=04678F375785D80A9E22FF477C5417EF
            Directory.subfile.filedate=1372843169
            Directory.subfile.filedatetext=2013-07-03 11:19:28
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.db
            Directory.subfile.size=890
            Directory.subfile.md5=FEA225420438A0F53528FAE05E16A9E0
            Directory.subfile.filedate=1372843172
            Directory.subfile.filedatetext=2013-07-03 11:19:31
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico
            Directory.subfile.size=82726
            Directory.subfile.md5=91E58CABF6C3C530189E2B1031BEED59
            Directory.subfile.filedate=1372843171
            Directory.subfile.filedatetext=2013-07-03 11:19:31
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.db
            Directory.subfile.size=778
            Directory.subfile.md5=8D16FFFB1992D48E3CB4D8404C518723
            Directory.subfile.filedate=1372843174
            Directory.subfile.filedatetext=2013-07-03 11:19:34
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\35\Gmail.ico
            Directory.subfile.size=13262
            Directory.subfile.md5=43E266FA15B8F01B425D381211A8791C
            Directory.subfile.filedate=1372843174
            Directory.subfile.filedatetext=2013-07-03 11:19:33
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.db
            Directory.subfile.size=796
            Directory.subfile.md5=8DE87696714794E2552896C853386EE7
            Directory.subfile.filedate=1372843175
            Directory.subfile.filedatetext=2013-07-03 11:19:35
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\36\Outlook.ico
            Directory.subfile.size=13262
            Directory.subfile.md5=F8CCECACF455195E9FF5067D20A9CB06
            Directory.subfile.filedate=1372843175
            Directory.subfile.filedatetext=2013-07-03 11:19:35
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.db
            Directory.subfile.size=920
            Directory.subfile.md5=9C78DF11E968D9DD10247231BE2CC2C7
            Directory.subfile.filedate=1372843176
            Directory.subfile.filedatetext=2013-07-03 11:19:36
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\39\ESPN.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=9E44300746A04FC221381900153EFE3F
            Directory.subfile.filedate=1372843176
            Directory.subfile.filedatetext=2013-07-03 11:19:35
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.db
            Directory.subfile.size=872
            Directory.subfile.md5=21E8C7928D43A3B85ECBD4E1460EFF26
            Directory.subfile.filedate=1372843173
            Directory.subfile.filedatetext=2013-07-03 11:19:33
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\4\Empire.ico
            Directory.subfile.size=82726
            Directory.subfile.md5=5B186EA99E25E888A95A1D3931512287
            Directory.subfile.filedate=1372843173
            Directory.subfile.filedatetext=2013-07-03 11:19:32
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.db
            Directory.subfile.size=858
            Directory.subfile.md5=D94EFA5A58CF16DB847E542F69FD50E2
            Directory.subfile.filedate=1372843177
            Directory.subfile.filedatetext=2013-07-03 11:19:37
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=03CD38BE20AF6CB71874DAC6EE7A821C
            Directory.subfile.filedate=1372843177
            Directory.subfile.filedatetext=2013-07-03 11:19:36
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.db
            Directory.subfile.size=764
            Directory.subfile.md5=10E74A23CA1F759991A6EDF3859BC717
            Directory.subfile.filedate=1372843179
            Directory.subfile.filedatetext=2013-07-03 11:19:38
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Desk 365\app\config\42\pulse.ico
            Directory.subfile.size=15086
            Directory.subfile.md5=CCBD925EF735C7946F36FE67E63C17B3
            Directory.subfile.filedate=1372843178
            Directory.subfile.filedatetext=2013-07-03 11:19:38

            Elex.Desk365: [SBI $9BC51D3A] Configuration file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\desk_bkg_list.xml
            Properties.size=1434
            Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $8D473845] Configuration file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\desk_list.xml
            Properties.size=17864
            Properties.md5=8FE5F08FC542B868EDB34E79E4F148EF
            Properties.filedate=1372852378
            Properties.filedatetext=2013-07-03 13:52:58

            Elex.Desk365: [SBI $C29E5543] Configuration file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\desk_settings.ini
            Properties.size=82
            Properties.md5=88D6F5361B4990FFF5192E7FEBAD7143
            Properties.filedate=1372852299
            Properties.filedatetext=2013-07-03 13:51:39

            Elex.Desk365: [SBI $3C87FAD7] Configuration file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\process_mgr.xml
            Properties.size=220
            Properties.md5=0FBAFD0F852466354337E54EEF679AC2
            Properties.filedate=1372852456
            Properties.filedatetext=2013-07-03 13:54:15

            Elex.Desk365: [SBI $DF805F27] Configuration file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Desk 365\promote.xml
            Properties.size=5926
            Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $9E0CDB3D] Program directory (Directory, nothing done)
            C:\Program Files (x86)\Desk 365\
            Directory.subfile=C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
            Directory.subfile.size=1434
            Directory.subfile.md5=292ECDA960D994D90A33A5E7C3EA9F81
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Program Files (x86)\Desk 365\desk_list.xml
            Directory.subfile.size=312
            Directory.subfile.md5=59F9E2248D06B0E2F98514F3181AA08C
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Program Files (x86)\Desk 365\desk_settings.ini
            Directory.subfile.size=80
            Directory.subfile.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Program Files (x86)\Desk 365\process_mgr.xml
            Directory.subfile.size=220
            Directory.subfile.md5=0FBAFD0F852466354337E54EEF679AC2
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Program Files (x86)\Desk 365\promote.xml
            Directory.subfile.size=5926
            Directory.subfile.md5=B4D81B2192BB4FF7AC68105E338DF78D
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53
            Directory.subfile=C:\Program Files (x86)\Desk 365\recent.xml
            Directory.subfile.size=200
            Directory.subfile.md5=4B021AF446161B9B0696D14C0A94A321
            Directory.subfile.filedate=1372843133
            Directory.subfile.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $9673464D] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\desk_bkg_list.xml
            Properties.size=1434
            Properties.md5=292ECDA960D994D90A33A5E7C3EA9F81
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $CD3F2E88] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\desk_list.xml
            Properties.size=312
            Properties.md5=59F9E2248D06B0E2F98514F3181AA08C
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $CF280E34] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\desk_settings.ini
            Properties.size=80
            Properties.md5=6E8ECBF4B96757DFC8B42989C7B4C0BA
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $B607A6FD] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\process_mgr.xml
            Properties.size=220
            Properties.md5=0FBAFD0F852466354337E54EEF679AC2
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $A50DD4C3] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\promote.xml
            Properties.size=5926
            Properties.md5=B4D81B2192BB4FF7AC68105E338DF78D
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $55641D0D] Configuration file (File, nothing done)
            C:\Program Files (x86)\Desk 365\recent.xml
            Properties.size=200
            Properties.md5=4B021AF446161B9B0696D14C0A94A321
            Properties.filedate=1372843133
            Properties.filedatetext=2013-07-03 11:18:53

            Elex.Desk365: [SBI $C12C031F] Program directory (Directory, nothing done)
            C:\Program Files (x86)\Common Files\337\
            Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\icudt.dll
            Directory.subfile.size=9962568
            Directory.subfile.md5=3C9DBA4666B11E993AAEC89064340310
            Directory.subfile.filedate=1365477135
            Directory.subfile.filedatetext=2013-04-09 05:12:15
            Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\libcef.dll
            Directory.subfile.size=24984648
            Directory.subfile.md5=BD1ADEAB6F31A4FCF3279A6D9BD89278
            Directory.subfile.filedate=1365477137
            Directory.subfile.filedatetext=2013-04-09 05:12:17
            Directory.subfile=C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales\en-US.pak
            Directory.subfile.size=2898
            Directory.subfile.md5=D171F4787659D87D3B354270F2CCF3FD
            Directory.subfile.filedate=1365473635
            Directory.subfile.filedatetext=2013-04-09 04:13:54

            Systweak.RegCleanPro: [SBI $A53DF47E] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
            Directory.subfile.size=50140
            Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
            Directory.subfile.filedate=1380181133
            Directory.subfile.filedatetext=2013-09-26 09:38:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
            Directory.subfile.size=18710
            Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
            Directory.subfile.filedate=1380181133
            Directory.subfile.filedatetext=2013-09-26 09:38:53

            Systweak.RegCleanPro: [SBI $80041D24] Program directory (Directory, nothing done)
            C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat
            Directory.subfile.size=50140
            Directory.subfile.md5=95F3E130BFA356E7E0E77C0B60435B20
            Directory.subfile.filedate=1380181133
            Directory.subfile.filedatetext=2013-09-26 09:38:53
            Directory.subfile=C:\Users\Admin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_09-26-2013.log
            Directory.subfile.size=18710
            Directory.subfile.md5=FA1EB211E8217432ACCC29B031D42FAC
            Directory.subfile.filedate=1380181133
            Directory.subfile.filedatetext=2013-09-26 09:38:53

            Systweak.RegCleanPro: [SBI $B5F5AABB] Program directory (Directory, nothing done)
            C:\Program Files (x86)\RegClean Pro\
            Directory.subfile=C:\Program Files (x86)\RegClean Pro\install_left_image.bmp
            Directory.subfile.size=156296
            Directory.subfile.md5=78BAF9FF8AA0F67D1BAEBB292D8429FE
            Directory.subfile.filedate=1347881266
            Directory.subfile.filedatetext=2012-09-17 13:27:46
            Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.dat
            Directory.subfile.size=60863
            Directory.subfile.md5=509990D0870F5ECAB867B068E96A1755
            Directory.subfile.filedate=1380181018
            Directory.subfile.filedatetext=2013-09-26 09:36:58
            Directory.subfile=C:\Program Files (x86)\RegClean Pro\unins000.msg
            Directory.subfile.size=28783
            Directory.subfile.md5=5EB9758F0F53EDF4FCACDD2BD31F7AE6
            Directory.subfile.filedate=1380181018
            Directory.subfile.filedatetext=2013-09-26 09:36:57

            myPCBackup: [SBI $BE3057E0] Program directory (Directory, nothing done)
            C:\Program Files (x86)\MyPC Backup\
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\aff.conf
            Directory.subfile.size=102
            Directory.subfile.md5=9F4C693F76335096E0578ED13D4CDC1A
            Directory.subfile.filedate=1363086208
            Directory.subfile.filedatetext=2013-03-12 13:03:28
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\de_DE.mo
            Directory.subfile.size=44491
            Directory.subfile.md5=DBDEC3376419EB64DE27333DA2297458
            Directory.subfile.filedate=1379629950
            Directory.subfile.filedatetext=2013-09-20 00:32:30
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\es_ES.mo
            Directory.subfile.size=44977
            Directory.subfile.md5=6B3615B8CED981B75652112F70FCF342
            Directory.subfile.filedate=1379629950
            Directory.subfile.filedatetext=2013-09-20 00:32:30
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\fr_FR.mo
            Directory.subfile.size=45483
            Directory.subfile.md5=BC313E08C18B049684DDB423F7EB6596
            Directory.subfile.filedate=1379629950
            Directory.subfile.filedatetext=2013-09-20 00:32:30
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\it_IT.mo
            Directory.subfile.size=43717
            Directory.subfile.md5=7779773C211CE2D1636B3A42244E9C6E
            Directory.subfile.filedate=1379629950
            Directory.subfile.filedatetext=2013-09-20 00:32:30
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\pt_PT.mo
            Directory.subfile.size=39751
            Directory.subfile.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
            Directory.subfile.filedate=1379629950
            Directory.subfile.filedatetext=2013-09-20 00:32:30
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
            Directory.subfile.size=16384
            Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
            Directory.subfile.size=7168
            Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
            Directory.subfile.size=13312
            Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
            Directory.subfile.size=9216
            Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
            Directory.subfile.filedate=1380181150
            Directory.subfile.filedatetext=2013-09-26 09:39:10
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
            Directory.subfile.size=6144
            Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34

            myPCBackup: [SBI $6F31F5C9] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\aff.conf
            Properties.size=102
            Properties.md5=9F4C693F76335096E0578ED13D4CDC1A
            Properties.filedate=1363086208
            Properties.filedatetext=2013-03-12 13:03:28

            myPCBackup: [SBI $81109B34] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\de_DE.mo
            Properties.size=44491
            Properties.md5=DBDEC3376419EB64DE27333DA2297458
            Properties.filedate=1379629950
            Properties.filedatetext=2013-09-20 00:32:30

            myPCBackup: [SBI $0843065C] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\es_ES.mo
            Properties.size=44977
            Properties.md5=6B3615B8CED981B75652112F70FCF342
            Properties.filedate=1379629950
            Properties.filedatetext=2013-09-20 00:32:30

            myPCBackup: [SBI $46906119] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\fr_FR.mo
            Properties.size=45483
            Properties.md5=BC313E08C18B049684DDB423F7EB6596
            Properties.filedate=1379629950
            Properties.filedatetext=2013-09-20 00:32:30

            myPCBackup: [SBI $2150E03A] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\it_IT.mo
            Properties.size=43717
            Properties.md5=7779773C211CE2D1636B3A42244E9C6E
            Properties.filedate=1379629950
            Properties.filedatetext=2013-09-20 00:32:30

            myPCBackup: [SBI $05EA4743] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\pt_PT.mo
            Properties.size=39751
            Properties.md5=046E5ECAEA6D79DBBB952BDE37BF4F37
            Properties.filedate=1379629950
            Properties.filedatetext=2013-09-20 00:32:30

            myPCBackup: [SBI $5C7A6B4B] Program directory (Directory, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
            Directory.subfile.size=16384
            Directory.subfile.md5=60FF608113FE7F661FF40DC274E2F662
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
            Directory.subfile.size=7168
            Directory.subfile.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
            Directory.subfile.size=13312
            Directory.subfile.md5=3BE52D1F03ADF742E6109ED33D5A2D90
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
            Directory.subfile.size=9216
            Directory.subfile.md5=46831E52CAB92AF50258C8F1F3E74BDA
            Directory.subfile.filedate=1380181150
            Directory.subfile.filedatetext=2013-09-26 09:39:10
            Directory.subfile=C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
            Directory.subfile.size=6144
            Directory.subfile.md5=1042BD894D67281E7EC0E1E73B9214D8
            Directory.subfile.filedate=1379629954
            Directory.subfile.filedatetext=2013-09-20 00:32:34

            myPCBackup: [SBI $AD6AB843] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
            Properties.size=16384
            Properties.md5=60FF608113FE7F661FF40DC274E2F662
            Properties.filedate=1379629954
            Properties.filedatetext=2013-09-20 00:32:34

            myPCBackup: [SBI $559CAEF6] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\mpcb_file_cache.db
            Properties.size=7168
            Properties.md5=DDEE58D9FF66DF70415E0FC80BD34AE3
            Properties.filedate=1379629954
            Properties.filedatetext=2013-09-20 00:32:34

            myPCBackup: [SBI $B1463116] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\mpcb_queues.db
            Properties.size=13312
            Properties.md5=3BE52D1F03ADF742E6109ED33D5A2D90
            Properties.filedate=1379629954
            Properties.filedatetext=2013-09-20 00:32:34

            myPCBackup: [SBI $1D0A14D4] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\mpcb_settings.db
            Properties.size=9216
            Properties.md5=46831E52CAB92AF50258C8F1F3E74BDA
            Properties.filedate=1380181150
            Properties.filedatetext=2013-09-26 09:39:10

            myPCBackup: [SBI $FD4C0913] Data (File, nothing done)
            C:\Program Files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
            Properties.size=6144
            Properties.md5=1042BD894D67281E7EC0E1E73B9214D8
            Properties.filedate=1379629954
            Properties.filedatetext=2013-09-20 00:32:34

            Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\images-na.ssl-images-amazon.com\mercury.sol
            Properties.size=69
            Properties.md5=3FED42C2834BAB590DAEB7B6522AF1FC
            Properties.filedate=1374068724
            Properties.filedatetext=2013-07-17 15:45:24

            Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
            C:\Users\Admin\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\85L5CX8Z\localhost\FLVMediaPlayer.sol
            Properties.size=259
            Properties.md5=9DE666B62A0824E3E87819B9B8E5237E
            Properties.filedate=1375807595
            Properties.filedatetext=2013-08-06 18:46:34

            Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Internet Explorer\TypedURLs

            Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
            HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

            Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

            Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
            HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

            MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Microsoft Management Console\Recent File List

            MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

            MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

            MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

            MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

            Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

            Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

            Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

            Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

            Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

            Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

            Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

            Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

            Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
            HKEY_USERS\S-1-5-21-2532004680-2950962693-2701275448-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

            Cookie: [SBI $49804B54] Browser: Cookie (34) (Browser: Cookie, nothing done)

            Cache: [SBI $49804B54] Browser: Cache (1231) (Browser: Cache, nothing done)

            Historique: [SBI $49804B54] Browser: History (572) (Browser: History, nothing done)

            --- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

            2013-05-16 blindman.exe (2.1.18.151)
            2013-05-16 explorer.exe (2.1.18.177)
            2013-05-16 SDBootCD.exe (2.1.18.109)
            2013-05-16 SDCleaner.exe (2.1.18.110)
            2013-05-16 SDDelFile.exe (2.1.18.94)
            2013-06-18 SDDisableProxy.exe
            2013-05-16 SDFiles.exe (2.1.18.135)
            2013-03-20 SDFileScanHelper.exe (2.1.16.1)
            2013-05-16 SDFSSvc.exe (2.1.18.208)
            2013-05-16 SDHookHelper.exe (2.1.18.2)
            2013-05-16 SDHookInst32.exe (2.1.18.2)
            2013-05-16 SDHookInst64.exe (2.1.18.2)
            2013-05-16 SDImmunize.exe (2.1.18.130)
            2013-05-16 SDLogReport.exe (2.1.18.107)
            2013-05-16 SDOnAccess.exe (2.1.18.4)
            2013-05-16 SDPESetup.exe (2.1.18.3)
            2013-05-16 SDPEStart.exe (2.1.18.86)
            2013-05-16 SDPhoneScan.exe (2.1.18.28)
            2013-05-16 SDPRE.exe (2.1.18.22)
            2013-05-16 SDPrepPos.exe (2.1.18.10)
            2013-05-16 SDQuarantine.exe (2.1.18.103)
            2013-05-16 SDRootAlyzer.exe (2.1.18.116)
            2013-05-16 SDSBIEdit.exe (2.1.18.39)
            2013-05-16 SDScan.exe (2.1.18.177)
            2013-05-16 SDScript.exe (2.1.18.53)
            2013-05-16 SDSettings.exe (2.1.18.136)
            2013-05-16 SDShell.exe (2.1.18.2)
            2013-05-16 SDShred.exe (2.1.18.107)
            2013-05-16 SDSysRepair.exe (2.1.18.101)
            2013-05-16 SDTools.exe (2.1.18.150)
            2013-05-16 SDTray.exe (2.1.18.127)
            2013-05-16 SDUpdate.exe (2.1.18.91)
            2013-05-16 SDUpdSvc.exe (2.1.18.76)
            2013-05-16 SDWelcome.exe (2.1.18.129)
            2013-05-15 SDWSCSvc.exe (2.1.18.2)
            2013-06-19 spybotsd2-translation-frx.exe
            2013-09-30 unins000.exe (51.1052.0.0)
            1999-12-02 xcacls.exe
            2012-08-23 borlndmm.dll (10.0.2288.42451)
            2012-09-05 DelZip190.dll (1.9.0.107)
            2012-09-10 libeay32.dll (1.0.0.4)
            2012-09-10 libssl32.dll (1.
            1. Wizz2010 Auteur
              Je te remercie, mais j'ai déjà fait tout ça. La seule manip qu'il me reste à faire, c'est de reparamétrer la page d'accueil de google chrome.
              1. Malekal_morte- Modérateur
                Salut,

                Tu as des adwares sur ton PC.
                Passe ces deux programmes dans l'ordre.
                Lis bien les instructions, clics sur les liens et lis bien aussi.
                Prends ton temps.

                Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
                Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
                !!! Malwarebyte doit être à jour avant de faire le scan !!!
                Coche tout en faisant un clic droit / cocher tout
                puis bouton supprimer sélection pour tout supprimer.

                puis :

                Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
                Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
                Lance AdwCleaner, clique sur [Scanner].
                Le scan peux durer plusieurs minutes, patienter.
                Une fois le scan terminé, clique sur [Nettoyer]

                Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
                Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

                Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

                Discussions similaires

                mon ordinateurs portable asus in search of incredible bug trop
                Mateo

                1 réponse
                PC bloqué sur logo "asus in search of incredible"
                mikado

                1 réponse
                mode emploi delta dore driver 520 en français
                mimitte

                3 réponses
                Touche delta sur mac os x
                Pacha76

                2 réponses
                PC bloqué sur logo "asus in search of incredible
                valiceli

                17 réponses