oki :)

bonne route , je ferme ^^

Bon ben voilà, il est tout propre tout nettoyé. :hourra:
Merci beaucoup pour ton aide!

c'es t des vieux dossiers d'installation temporaires de mises à jour windows tu peux les virer

et faire le menage => http://gen-hackman.purforum.com/t50-fin-de-desinfection

Bonjour,
Oui, le temps de démarrage est devenu très acceptable et tout semble fonctionner correctement. Merci beaucoup! :victoire:
Je peux considérer qu'il est tout propre?

Il me reste des répertoires bizarres dans mon arborescence:
d:\3c6a7f545456e7afac79e77926
d:\828ab54246f40b555a35ed
d:\879fed5b840b94e0eddbe0b25fd7e363
d:\6450c867b397d41883382280ce
d:\cd694172c55a24f4727a1664f502

Sais-tu si ça peut correspondre à quelque chose ou si je peux les supprimer?

hello

sympa on a gagné 5Go sur le disque ^^

ca va mieux ?

Bonsoir,
Voici le rapport:
All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RTHDCPL deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\Microsoft\Windows\CurrentVersion\Run\\SportEventServer deleted successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"EnableFirewall"|DWORD:0 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\ASKINSTALLER\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\BrowserChoice\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\(null)\ deleted successfully.
========== FILES ==========
C:\sys\temp folder moved successfully.
C:\sys folder moved successfully.
C:\user.js moved successfully.
C:\Documents and Settings\All Users\Application Data\boost_interprocess\7063B43FD6ABCD01 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\boost_interprocess folder moved successfully.
C:\Program Files\RegCleaner.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: floriane lagors
->Temp folder emptied: 1649035463 bytes
->Temporary Internet Files folder emptied: 78484004 bytes
->Java cache emptied: 67374775 bytes
->FireFox cache emptied: 367089957 bytes
->Google Chrome cache emptied: 163034392 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 14478 bytes

User: HelpAssistant
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: LocalService
->Temp folder emptied: 115616 bytes
->Temporary Internet Files folder emptied: 29424594 bytes
->Google Chrome cache emptied: 6032794 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1316133 bytes

User: Zélia
->Temp folder emptied: 584961727 bytes
->Temporary Internet Files folder emptied: 792114687 bytes
->Java cache emptied: 30241193 bytes
->Google Chrome cache emptied: 241885212 bytes
->Apple Safari cache emptied: 44198912 bytes
->Flash cache emptied: 195683 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 335112816 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 991815419 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 66468988 bytes

Total Files Cleaned = 5 197,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 02262015_214834

Files moved on Reboot...
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\pink\realtime\processbar.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\pink\cheat_clear_all_btn.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\default\realtime\processbar.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\default\realtime\processbg.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\default\cheat_clear_all_btn.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\realtime\mainbg.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\realtime\processbar.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\realtime\processbg.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\realtime\txtbg.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\cheatselectbar.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\christmas\cheat_clear_all_btn.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\black\realtime\processbar.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\black\realtime\processbg.bmp not found!
File C:\Documents and Settings\floriane lagors\Local Settings\Temp\c1md6io1.tmp\DSONE_mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\DSONE&mini_SDHC_Evolution_V1.0_eng_sp6_20121030\_dsone\skin\black\cheat_clear_all_btn.bmp not found!
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

:reg
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 
"RTHDCPL"=-
"Alcmtr"=-
""=-
"QuickTime Task"=-
"iTunesHelper"=-
[HKU\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\Microsoft\Windows\CurrentVersion\Run] 
"SportEventServer"=-
[HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 
"EnableFirewall"=DWORD:0
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]
[-HKLM\Software\ASKINSTALLER]     
[-HKLM\Software\BrowserChoice]     
[-HKU\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\(null)] 

:files
C:\sys     
C:\user.js
C:\Documents and Settings\All Users\Application Data\boost_interprocess     
C:\Program Files\RegCleaner.exe 

:commands
[emptytemp]

hello

ouvre firefox , puis dans la barre d'adresse en haut là ou il y a normalement http...etc... tu écrit :

about:config , puis tu confirmes "oui promis je ferai attention"

ensuite tu faire recherche : [color=#FF0000][b]browser.startup.homepage[/b][/color]

tu double cliques , et tu remplaces :

[u]https://www.google.com/?trackid=sp-006");[/u] par [b][color=#FF0000]https://www.google.com"); [/color][/b]

==

Désactive ton antivirus le temps de la manipulation car OTM est détecté comme une infection à tort.
Télécharge https://www.sosvirus.net/telecharger/otm/ OTM (OldTimer) sur ton Bureau :
Double-clique sur OTM.exe afin de le lancer. (clic droit "executer en tant qu'administrateur" pour Vista/7/8 )

Copie (Ctrl+C) le texte suivant ci-dessous :
[code]
:reg
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=-
"Alcmtr"=-
""=-
"QuickTime Task"=-
"iTunesHelper"=-
[HKU\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\Microsoft\Windows\CurrentVersion\Run]
"SportEventServer"=-
[HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]
[-HKLM\Software\ASKINSTALLER]
[-HKLM\Software\BrowserChoice]
[-HKU\S-1-5-21-1241278339-2376546537-2991327093-1005\Software\(null)]

:files
C:\sys
C:\user.js
C:\Documents and Settings\All Users\Application Data\boost_interprocess
C:\Program Files\RegCleaner.exe

:commands
[emptytemp]
[/code]
Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
Clique maintenant sur le bouton MoveIt!
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\

*Le nom du rapport correspond au moment de sa création : date_heure.log

Bonsoir,
Voici mon rapport QuickDiag: http://upload.sosvirus.net/download/qkvd4nyjr6yk0qxd2u83v1lqbso4m6ig1ra1ahxk

hello c'est bon :)

[list][*]désactive ton antivirus le temps du scan
[*]Télécharge quickDiag ici : http://www.telecharger.sosvirus.net/download/quickdiag/
[*]lance-le

[img]http://www.telecharger.sosvirus.net/wp-content/uploads/2014/10/Inter_QuickDiag.jpg[/img]


[*]clique sur "[color=#FF0000]Quick[/color]" puis une fois terminé :
[*]heberge le rapport sur http://upload.sosvirus.net
[*]donne le lien obtenu dans ta prochaine réponse[/list]
[u]note[/u] : le rapport sera sur le bureau au nom de QuickDiag_date_heure.txt, et une copie du même nom sera disponible dans ton disque système ( logiquement C: )

Bonsoir,
En cliquant sur Journaux de l'application, j'obtiens un tableau avec 3 fichiers: Journal d'examen (quand je l'ouvre, toutes les données sont vides), Journal de protection daté du 22/02 et Journal de protection daté du 23/02.
Après quelques recherches, j'ai réussi à ouvrir le fichier qui semble correspondre au Journal d'examen, et voici son contenu:

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/02/22 22:48:18 +0100</date>
<logfile>mbam-log-2015-02-22 (22-48-17).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.4.1028</version>
<malware-database>v2015.02.22.06</malware-database>
<rootkit-database>v2015.02.22.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows XP Service Pack 3</osversion>
<arch>x86</arch>
<username>floriane lagors</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>425285</objects>
<time>2639</time>
<processes>0</processes>
<modules>0</modules>
<keys>46</keys>
<values>13</values>
<datas>1</datas>
<folders>12</folders>
<files>76</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}</path><vendor>PUP.Optional.MySearchDial.A</vendor><action>success</action><hash>9de152cf2367ab8b3c9a030a3ec5e21e</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}</path><vendor>PUP.Optional.MySearchDial.A</vendor><action>success</action><hash>9de152cf2367ab8b3c9a030a3ec5e21e</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>b0cea27ffe8ce94d5453cc41b44f8c74</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56256A51-B582-467e-B8D4-7786EDA79AE0}</path><vendor>Trojan.Vundo</vendor><action>success</action><hash>8bf38c954d3da2942a2e1c2454af8878</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>5628e43dcbbf72c43a6c0b0248bb847c</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks.A</vendor><action>success</action><hash>77077ea3f298201686149bafa063f40c</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>c7b7e1408604ec4a6519073fc83bf30d</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>c7b7e1408604ec4a6519073fc83bf30d</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>433b1908cfbb54e20b75182e26ddfc04</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>433b1908cfbb54e20b75182e26ddfc04</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>e19d74ad375350e63a3c779d788b32ce</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>e19d74ad375350e63a3c779d788b32ce</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>0a742df49ceec76ff0471730976c52ae</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>0a742df49ceec76ff0471730976c52ae</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>28569c85157555e14d3257efc043d52b</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>28569c85157555e14d3257efc043d52b</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks.A</vendor><action>success</action><hash>2559948d018947efc5fc3bcd25de728e</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks.A</vendor><action>success</action><hash>2559948d018947efc5fc3bcd25de728e</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>631b6ab7ccbe0c2a4e2e74a09d669e62</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}</path><vendor>PUP.Optional.SweetPacks</vendor><action>success</action><hash>631b6ab7ccbe0c2a4e2e74a09d669e62</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00A6FAF1-072E-44CF-8957-5838F569A31D}</path><vendor>PUP.Optional.Mindspark.A</vendor><action>success</action><hash>512d38e90d7d86b0123a49c113f0718f</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00A6FAF6-072E-44CF-8957-5838F569A31D}</path><vendor>PUP.Optional.MindSpark.A</vendor><action>success</action><hash>6e106ab7b1d984b22fc1e76210f38080</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00CBB66B-1D3B-46D3-9577-323A336ACB50}</path><vendor>PUP.Optional.Blabbers</vendor><action>success</action><hash>fa84051cafdbf54199f8e936d33041bf</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{07B18EA1-A523-4961-B6BB-170DE4475CCA}</path><vendor>PUP.Optional.Mindspark.A</vendor><action>success</action><hash>a8d6d34e3654bd79aba26aa0fe05718f</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>0e70e63bf892b383234585c325deb64a</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>9fdfed34b0da41f5848e3d09c63d5ca4</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>601ef52cb1d92016c8254afc699a34cc</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{963B125B-8B21-49A2-A3A8-E37092276531}</path><vendor>PUP.Optional.Blabbers</vendor><action>success</action><hash>542a48d98efc979f296742ddf0137d83</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>d1adca576129e55136db380e966def11</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E87806B5-E908-45FD-AF5E-957D83E58E68}</path><vendor>PUP.Optional.Softonic.A</vendor><action>success</action><hash>99e5859ce4a60630d9ed53bd19ea50b0</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SETUP.EXE</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>d4aa6bb64347f54169a6fd372ad7bb45</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ibgfbdggapddbjjbopabhlhianklajie</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>017dea3757337db9dd584d7ea0635ba5</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SweetIM</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>b4ca9a87f09ae65032d2742cf90a8b75</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT</path><vendor>PUP.Optional.InstallBrain.A</vendor><action>success</action><hash>96e8db46c9c1013595d8ae5039cbc63a</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TWK70</path><vendor>Malware.Trace</vendor><action>success</action><hash>dda11809c2c8ad89005a473dbd47c13f</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>2e50c160d7b380b6ce468e6d27dd629e</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>2c5278a9464448ee6ce6ee09669e43bd</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>f38b45dc6b1fb5812e2327d07e86ff01</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\eorezo</path><vendor>Rogue.Eorezo</vendor><action>success</action><hash>68166cb51d6d90a6734384cbd92b5ca4</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>611dce5395f52214097a6c76ed16f30d</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Supreme Savings</path><vendor>PUP.Optional.SupremeSavings.A</vendor><action>success</action><hash>eb93a879ef9b89adb23993353fc410f0</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SweetIM</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>007e4dd46624ec4a80842d73de258d73</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>1e60b96838520432a898a7571fe57f81</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>96e8130e14762214395f5b9fe222a55b</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TWK70</path><vendor>Malware.Trace</vendor><action>success</action><hash>aad45ac7107a62d4a5b5483c93716799</hash></key>
<key><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT</path><vendor>PUP.Optional.InstallBrain.A</vendor><action>success</action><hash>84faeb360387b086c0ad4ab4976d6d93</hash></key>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata>Ìéz—ƒ¯èEž ây‚ âÕ</valuedata><hash>433b1908cfbb54e20b75182e26ddfc04</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{EEE6C35B-6118-11DC-9C72-001320C79847}</valuename><vendor>PUP.Optional.SweetPacks.A</vendor><action>success</action><valuedata>썛愘ᇜ犜ጀ유䞘</valuedata><hash>2559948d018947efc5fc3bcd25de728e</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path><valuename>{00A6FAF6-072E-44CF-8957-5838F569A31D}</valuename><vendor>PUP.Optional.MindSpark.A</vendor><action>success</action><valuedata></valuedata><hash>6e106ab7b1d984b22fc1e76210f38080</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><valuename></valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata></valuedata><hash>e39b7fa28703a78f85fb3a0c6e9503fd</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{EEE6C35B-6118-11DC-9C72-001320C79847}</path><valuename></valuename><vendor>PUP.Optional.SweetPacks.A</vendor><action>success</action><valuedata></valuedata><hash>e5996ab75c2edd59e3de6d9b748f0000</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{00A6FAF6-072E-44cf-8957-5838F569A31D}</path><valuename></valuename><vendor>PUP.Optional.MindSpark.A</vendor><action>success</action><valuedata></valuedata><hash>017de33e7b0f3df936ba3712bb48fc04</hash></value>
<value><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT</path><valuename>URL</valuename><vendor>PUP.Optional.InstallBrain.A</vendor><action>success</action><valuedata>MYSTART</valuedata><hash>96e8db46c9c1013595d8ae5039cbc63a</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TWK70</path><valuename>n</valuename><vendor>Malware.Trace</vendor><action>success</action><valuedata>1</valuedata><hash>dda11809c2c8ad89005a473dbd47c13f</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG</path><valuename>tlbrsrchurl</valuename><vendor>PUP.Optional.Delta.A</vendor><action>success</action><valuedata></valuedata><hash>1e60b96838520432a898a7571fe57f81</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MENUEXT\&SEARCH</path><valuename></valuename><vendor>Adware.Hotbar</vendor><action>success</action><valuedata>http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000334&p=ZCxpt155YYFR&si=5930&a=GXvHT1FHukcMNISw8Ck6Aw&n=2011052106</valuedata><hash>1965928f701a03334c9af9574aba25db</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>bProtectorDefaultScope</valuename><vendor>PUP.BProtector</vendor><action>success</action><valuedata>{115915CB-790B-450B-AFA0-C8AD3ED31894}</valuedata><hash>0b73e73a6426350167ed56a18d77d828</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TWK70</path><valuename>n</valuename><vendor>Malware.Trace</vendor><action>success</action><valuedata>1</valuedata><hash>aad45ac7107a62d4a5b5483c93716799</hash></value>
<value><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT</path><valuename>URL</valuename><vendor>PUP.Optional.InstallBrain.A</vendor><action>success</action><valuedata>SWEETPACKS_SEARCH</valuedata><hash>84faeb360387b086c0ad4ab4976d6d93</hash></value>
<data><path>HKU\S-1-5-21-1241278339-2376546537-2991327093-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>Hijack.StartPage</vendor><action>replaced</action><valuedata>http://www.searchnu.com/410</valuedata><baddata>http://www.searchnu.com/410</baddata><gooddata>www.google.com</gooddata><hash>e09e9889b9d17cbae98616b47d8818e8</hash></data>
<folder><path>C:\Documents and Settings\floriane lagors\Local Settings\Application Data\Updater19962</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>e39b49d89cee85b1dc21b9a4df24ca36</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\Icons</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></folder>
<folder><path>C:\Documents and Settings\floriane lagors\AppData\LocalLow\DataMngr</path><vendor>PUP.Optional.Datamngr.A</vendor><action>success</action><hash>7fffd34e36546dc99ecca1c0b350bf41</hash></folder>
<folder><path>C:\Documents and Settings\Zélia\AppData\LocalLow\DataMngr</path><vendor>PUP.Optional.Datamngr.A</vendor><action>success</action><hash>a2dc0120ff8b44f2df8b481943c0da26</hash></folder>
<folder><path>C:\Documents and Settings\floriane lagors\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_ihkeoookbpemkdccdccdmacnidhooohk_0</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>ed91f0316b1f34023bb297cfad563fc1</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\cache</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></folder>
<folder><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></folder>
<file><path>C:\Documents and Settings\floriane lagors\Mes documents\Downloads\Setup v2 1.exe</path><vendor>PUP.Optional.DomaIQ</vendor><action>success</action><hash>4a3456cb0783bc7a7ee16af0649ccd33</hash></file>
<file><path>C:\Documents and Settings\Zélia\Mes documents\Downloads\FlvPlayerWizard.exe</path><vendor>PUP.Optional.Cooltech</vendor><action>success</action><hash>106e4fd2464447ef5d35adc521e4d828</hash></file>
<file><path>C:\Documents and Settings\Zélia\Mes documents\Downloads\Non confirmé 87328.crdownload</path><vendor>PUP.Optional.Cooltech</vendor><action>success</action><hash>fe80fc25c9c1072f415184ee0df8f50b</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\mgsqlite3.dll</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>0d713ee3e5a5d75f1c07846db3528c74</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\Shortcut_bundlesweetimsetup.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>601ed150197160d6a97af6fb7590ac54</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\che113.tmp</path><vendor>Trojan.RotBrow.A</vendor><action>success</action><hash>9fdfde433654ff377c4af0b36a9749b7</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\conduitinstaller.exe</path><vendor>PUP.Optional.Conduit.A</vendor><action>success</action><hash>df9f8b96deacb2847a6a6cd9c63a24dc</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\coupish.exe</path><vendor>PUP.Blabbers.H</vendor><action>success</action><hash>106ece53b6d443f3e42ba8f7f40e629e</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\01net\01Net_download_manager.com.exe</path><vendor>PUP.Optional.ToolbarInstaller</vendor><action>success</action><hash>a7d7a081c2c8d36357e00f3a9570b54b</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\OfferID9999\bundlesweetimsetup.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>1c629c850d7d56e0b2718b660cf9e818</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\DomaIQ.exe</path><vendor>Adware.DomaIQ</vendor><action>success</action><hash>631b6fb2721876c0abaf0fdfc045a858</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\DomaIQ10.exe</path><vendor>Adware.DomaIQ</vendor><action>success</action><hash>ff7fd0510d7dfd391a4002ecb5504eb2</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\OfferBrokerage_14003.exe</path><vendor>PUP.Optional.InstallIQ</vendor><action>success</action><hash>a3dbbd64cebc2a0c8b304ce057a942be</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\setup__120.exe</path><vendor>PUP.Optional.Amonetize.A</vendor><action>success</action><hash>2658df4211792f073a3b4ef3f809bf41</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\software\Delta Babylon.exe</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>cdb15bc678124de9809377b9b74a649c</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\DIQ\FlashPlayer_151\software\OptimizerPro.exe</path><vendor>PUP.Optional.OptimizePro.A</vendor><action>success</action><hash>037bc25f226814223e7d819d17e949b7</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\2827278562\chromeupdaterfull.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>ec92cd54206ac86e4bd8628f7f868c74</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\cnpy\Softonic_chr_1.8.29.3.exe</path><vendor>PUP.Optional.Softonic.A</vendor><action>success</action><hash>8af477aaa0ea63d3e10cd1237d8416ea</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\A8B64CB4-BAB0-7891-A600-3AEC26EE2855\MyBabylonTB.exe</path><vendor>PUP.Optional.BabylonToolBar.A</vendor><action>success</action><hash>621c38e92e5c38fe86ad231d9f62d729</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\513DAFD0-BAB0-7891-A19A-98AC597C7386\ccp.exe</path><vendor>Trojan.RotBrowse</vendor><action>success</action><hash>d2ac68b951390f278218a9e9cf36956b</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\513DAFD0-BAB0-7891-A19A-98AC597C7386\CrxInstaller.dll</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>5628d849484291a59a261b26f60bca36</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Temp\513DAFD0-BAB0-7891-A19A-98AC597C7386\Setup.exe</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>d4aa6bb64347f54169a6fd372ad7bb45</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\SetupDataMngr_Searchqu.exe</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>90ee3ae7cfbbd95d631d234881842fd1</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\MyBabylonTB_google_20120807.exe</path><vendor>PUP.Optional.Babylon.A</vendor><action>success</action><hash>7d0172af95f5b185d374c35cea167b85</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\nso1C\nsp1D.tmp\SetupDataMngr_Searchqu.exe</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>2b53ca5723676ec8fa86b0bbdb2aab55</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\nsy8\nsq9.tmp\SetupDataMngr_Searchqu.exe</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>2e50bf62e1a9f83e107076f5976ecb35</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\OfferID5\simboapp.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>097525fc5337979f091a79780ef7ef11</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\2827278562\chromeupdaterfull.exe</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>4638cc55206a330360c3599813f23fc1</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\5FCKIEM7\WSSetup[1].exe</path><vendor>PUP.Optional.InstallBrain.A</vendor><action>success</action><hash>c6b8c75a77138caa2f2deb8339cca060</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SUJVOKQ8\SkywalkerSetup[1].exe</path><vendor>PUP.Optional.Sweetpacks</vendor><action>success</action><hash>423c7ea351393ef85ef1d15511eff10f</hash></file>
<file><path>C:\WINDOWS\Installer\23cff8.msi</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>9be3d44d8efc1323d54e8b6630d543bd</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iagcajndpnfncplednpbnkahadegklfa_0.localstorage-journal</path><vendor>PUP.Optional.MySearchDial.A</vendor><action>success</action><hash>6a1441e0424842f4589d527ee61dea16</hash></file>
<file><path>C:\Documents and Settings\Zélia\Local Settings\Temp\searchqutoolbar-manifest.xml</path><vendor>PUP.Optional.Searchqu.A</vendor><action>success</action><hash>7d01b46dd9b170c618c832c59c689769</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\128.png</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\19.png</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\48.png</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\background.html</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\flavour.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\logger.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\main.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\manifest.json</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\mgHelperGC.dll</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\newtab.html</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\newtab.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\popup.html</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\popup.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\simapp.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.4.0.4_0\toolbar.js</path><vendor>PUP.Optional.WhiteSmoke.A</vendor><action>success</action><hash>6d11859c0189aa8c643db5aa7f84827e</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}</path><vendor>PUP.Optional.Datamngr.A</vendor><action>success</action><hash>7fffd34e36546dc99ecca1c0b350bf41</hash></file>
<file><path>C:\Documents and Settings\Zélia\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}</path><vendor>PUP.Optional.Datamngr.A</vendor><action>success</action><hash>a2dc0120ff8b44f2df8b481943c0da26</hash></file>
<file><path>C:\Documents and Settings\floriane lagors\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_ihkeoookbpemkdccdccdmacnidhooohk_0\3</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>ed91f0316b1f34023bb297cfad563fc1</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\back.html</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\chromeNPAPI.dll</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\fix2.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\frames.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\icon.png</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\inPage.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\jquery4toolbar.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\lock.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\manifest.json</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\witmain.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibgfbdggapddbjjbopabhlhianklajie\1.0.5_0\wittoolbar.js</path><vendor>PUP.Optional.Blabbers.A</vendor><action>success</action><hash>aad4b170a9e160d6389a363238cb42be</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\128.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\16.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\48.png</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\background.html</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\fbsim.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\logger.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\main.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\manifest.json</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\messagehandler.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\mgHelperGCFB.dll</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\simapp.js</path><vendor>PUP.Optional.SweetIM.A</vendor><action>success</action><hash>4539031ea3e7ab8b49df75fc2bd8d828</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.MySearchDial.A</vendor><action>replaced</action><baddata> "homepage": "http://start.mysearchdial.com/?f=1&a=tele_14_16_ie&cd=2XzuyEtN2Y1L1QzutDtDtByCyD0EyEtAtD0F0CzyyCyB0A0DtN0D0Tzu0SzztAyCtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCyCtCyBtA0EyBtDtG0E0CyD0CtG0AzytA0FtGyEtBtByEtGyC0B0D0AyC0EtB0EyE0BtCzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtBtC0ByD0CzyzytGyDyCtAtDtGtA0F0DyEtGzz0F0E0CtGtA0AzytByCtDyEyB0CtCzztC2Q&cr=1093694523&ir=",</baddata><gooddata></gooddata><hash>9ee00e138efca591411c29df26e0b749</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.SweetPacks.A</vendor><action>replaced</action><baddata> "homepage_url": "http://www.sweetpacks.com",</baddata><gooddata></gooddata><hash>81fd60c1543659dd541bb553a561ad53</hash></file>
<file><path>C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.MySearchDial.A</vendor><action>replaced</action><baddata> "startup_urls": [ "http://start.mysearchdial.com/?f=1&a=tele_14_16_ie&cd=2XzuyEtN2Y1L1QzutDtDtByCyD0EyEtAtD0F0CzyyCyB0A0DtN0D0Tzu0SzztAyCtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCyCtCyBtA0EyBtDtG0E0CyD0CtG0AzytA0FtGyEtBtByEtGyC0B0D0AyC0EtB0EyE0BtCzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtBtC0ByD0CzyzytGyDyCtAtDtGtA0F0DyEtGzz0F0E0CtGtA0AzytByCtDyEyB0CtCzztC2Q&cr=1093694523&ir=" ],</baddata><gooddata></gooddata><hash>0b7378a9d9b18da9404b5cacc14541bf</hash></file>
</items>
</mbam-log>

Est-ce que tu peux en tirer quelque chose?

hello , et si tu cliques sur "Journal de l'application" ?

Bonjour,
Malwarebytes Anti-Malware a bien tourné. J'ai cliqué sur "mettre en quarantaine", j'ai obtenu une fenêtre indiquant que le nettoyage avait été effectué avec succès et mon PC a redémarré. Je n'ai pas obtenu le rapport dont tu parles.
Lorsque je relance Anti-Malware, je peux afficher, dans l'histrique, la liste de ce qui est en quarantaine mais je ne réussis pas à l'exporter.

[list]
[*]Télécharge [url=http://www.telecharger.sosvirus.net/download/malwarebytes-anti-malware/]MalwareBytes[/url]
[*]Procède à l'installation de celui çi[color=#FF0000] Décocher [b]"Activer l'essai gratuit de Malwarebytes Anti-Malware Premium"[/color][/b]


[*]Clic sur [b]Mettre à jour[/b] (à droite, au centre)


[*]Clic sur [b]Examen [/b] (en haut)
[*]Sélectionne [b]Examen "Menaces"[/b]
[*]Clic sur [b]Examiner maintenant[/b]

[img]http://upload.sosvirus.net/images/2014/03/24/MBAM.png[/img]


[*]A la fin du scan clic sur [u][color=#FF0000][b]Tout mettre en quarantaine[/b][/color][/u] !
[*]Clic sur [b]Copier dans le Presse-papiers[/b]
[*]Un rapport va s'ouvrir. Copie/Colle son contenue dans ta prochaine réponse.[/list]

Voici le lien pour mon rapport AdwCleaner: http://upload.sosvirus.net/download/ienr9rvm6c8c8i6jax4es3d4rr56t89b9yff1ciz

et oui XP n'étant plus supporté par microsft ils n'envoient plus les correctifs de beug donc ton système est en train de mourrir et ne supporte plus les outils trop avancés ......

[list]
[*]Télécharge [url=http://www.telecharger.sosvirus.net/download/adwcleaner/]Adwcleaner[/url] (de [b]Xplode[/b]) sur ton [u][b]Bureau[/b][/u] !
[*]Fais clic droit dessus, [u]exécuter en tant qu'administrateur[/u] sous Windows : 7/8 et Vista, sinon double-clique pour XP
[list=1][*]Choisis l'option [color=#FF0000][b]Scanner[/b][/color]
[*]Choisis l'option [color=#FF0000][b]Nettoyer[/b][/color][/list]
[*]Accepte l'avertissement en cliquant sur [b]OK[/b]

[img]http://upload.sosvirus.net/img/images/2014/11/26/adwcleaner21dab3.png[/img]

[*]Accepte les avertissements/informations en cliquant sur [b]OK[/b]
[*]Le programme va redémarrer ton PC,
[*]Au redémarrage un rapport s'affiche, enregistre le sur ton bureau,
[*]Héberge le rapport [b][u]AdwCleaner[S0].txt[/u][/b] sur [url=http://upload.sosvirus.net/][b]SosUpload[/b][/url], puis copie/colle le lien fourni dans ta prochaine réponse.[/list]

Note : Une copie du rapport ce trouve à la racine de ton disque dur : [b][u]C:\AdwCleaner\AdwCleaner[S0].txt[/u][/b]

[list]
[*][u][b]Aide[/b][/u] : [url=http://www.sosvirus.net/adwcleaner-xplode-t82288.html][b]Tutoriel ADWCleaner[/b][/url]
[*][url=http://www.sosvirus.net/comment-heberger-fichier-sur-sosupload-t82463.html][b]Comment héberger un fichier sur SosUpload ?[/b][/url][/list]

J'ai téléchargé AdsFix mais je ne réussis pas à l'exécuter. Il fait une mise à jour et initialisation, quelques bips et il termine avec une fenêtre mise à jour faite.

salut :) une véritable poubelle numérique mdr

[list]
[*][color=#FF0000][b]Désactive ton antivirus le temps du téléchargement et de l'utilisation, le mieux étant jusqu'au prochain redémarrage.[/b][/color]
[*]Télécharge [url=http://www.aht.li/2159847/AdsFix.exe]AdsFix[/url] sur [u]ton bureau[/u].
[color=#FF0000][i]Note : Enregistrer votre travail [u]avant[/u] de continuer ![/i][/color]
[*]Lance [u]AdsFix[/u] ( [b]clic droit "executer en tant qu'administrateur" pour Vista/7/8/8.1[/b] )
[*]Pour un pc assez infecté , il peut mettre plusieurs secondes à se charger
[*]Inscrit ton pays
[*]Clique sur [b]Nettoyer[/b] , après l'avoir débloqué dans les options
[img]http://upload.sosvirus.net/img/images/2014/12/05/adsf3e0b1a.png[/img]
[i]Note : Patiente le temps du scan[/i]
[*]Laisse travailler l'outil même s'il te parait bloqué
[*]Si l'outil détecte un proxy que tu ne connais pas clic sur : "[b]Supprimer le proxy[/b]"
[*]Héberge le rapport [b]C:\AdsFix_date_heure.txt[/b] sur [url=http://upload.sosvirus.net/][b]SOSUpload[/b][/url] puis donne le lien obtenu.
[/list]
[b][u]Aide[/u][/b]:
[list]
[*][url=http://www.sosvirus.net/adsfix-g3n-ckm-t82502.html#p191515][b]Tutoriel AdsFix - Option "Nettoyage"[/b][/url]
[*][url=http://www.sosvirus.net/tutoriel-desactiver-protection-residentiel-t586.html][b]Désactiver temporairement sa protection résidentielle[/b][/url]
[/list]

Bonjour,
Je reviens vers vous avec un PC que je trouve lent au démarrage. Je ne sais pas si c'est parce que j'ai désormais l'habitude de la tablette qui démarre en quelques secondes ou si j'ai besoin de faire un bon nettoyage.
J'ai passé un ZHPDiag, voici le lien pour le rapport: http://cjoint.com/?3BvtgXxIff9
Peux-tu me dire si je peux faire quelque chose pour améliorer la rapidité de démarrage?
D'avance merci.