FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[maud33]

bonjour,
Je ne suis pas très douée en matière d'échange sur forum, ni en informatique, mais je me lance vu que mon netbook Asus est infecté par le virus qone8 depuis hier.
Après avoir lu pas mal de messages de ce forum, et tenté plusieurs manipulations, le problème persiste.
Si quelqu'un peut m'aider, ce serait vraiment sympa.
Merci

[2011N2]

Bonjour,

Passe AdwCleaner et poste le rapport : http://www.forum-entraide-informatique. ... -de-xplode

Puis passe SFTGC et poste le rapport hébergé : http://www.forum-entraide-informatique. ... c-tutoriel

Gabriel.

[maud33]

merci Gabriel pour cette rapide réponse.
J'avais déjà fait Adwcleaner ce matin, sans résultat, je l'ai refait en fin d'après midi, et la page d’accueil est revenue normale.
Je pense avoir résolu le problème.
Comment fait on pour vous joindre le rapport ?
Désolée, je suis vraiment très nulle !
bonsoir.

[2011N2]

Re,

Il y a très probablement des restes tout de même.

Fais tout simplement un copié/collé dans ton prochain message.

Gabriel.

[maud33]

Voilà le rapport :
# AdwCleaner v3.011 - Rapport créé le 04/11/2013 à 18:13:59
# Mis à jour le 03/11/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (32 bits)
# Nom d'utilisateur : PC - PC-PC
# Exécuté depuis : C:\Users\PC\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml

***** [ Raccourcis ] *****


***** [ Registre ] *****

[#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1898943A-13D3-4536-AB99-CB7A01467BA8}

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16720


-\\ Google Chrome v30.0.1599.101

[ Fichier : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [20760 octets] - [04/11/2013 06:31:27]
AdwCleaner[R1].txt - [17193 octets] - [04/11/2013 18:11:21]
AdwCleaner[S0].txt - [3240 octets] - [04/11/2013 06:34:53]
AdwCleaner[S1].txt - [1131 octets] - [04/11/2013 18:13:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1191 octets] ##########
Comment savoir s'il y a des restes ?
merci.

[2011N2]

Re,

Passe SFTGC comme indiqué dans mon premier message, et ensuite on vérifiera le PC.

Gabriel.

[maud33]

voici le rapport hyper long de SFTGC :
Spoiler: Rapport de SFTGC (Pierre13) du Lundi 04 Novembre 2013 à 20:04:57 version : 2.0.0.55
Mis à jour le 12/09/2013
Outil lancé en Mode normal et En tant qu'administrateur
Windows 7 Home Premium Service Pack 1 32 bits

Tool start in C:\Users\PC\Downloads

639 éléments supprimés = 99.71 Mo libérés. (40 s)

C:\Users\PC\AppData\Local\Temp\1916550.od
C:\Users\PC\AppData\Local\Temp\20722907.od
C:\Users\PC\AppData\Local\Temp\22713901.od
C:\Users\PC\AppData\Local\Temp\286511.od
C:\Users\PC\AppData\Local\Temp\4792101.od
C:\Users\PC\AppData\Local\Temp\acrord32_sbx
C:\Users\PC\AppData\Local\Temp\AdobeARM.log
C:\Users\PC\AppData\Local\Temp\AdwCleaner.jpg
C:\Users\PC\AppData\Local\Temp\BackupSetup.exe
C:\Users\PC\AppData\Local\Temp\Cleaning.ico
C:\Users\PC\AppData\Local\Temp\CVR1F25.tmp.cvr
C:\Users\PC\AppData\Local\Temp\CVR34CC.tmp.cvr
C:\Users\PC\AppData\Local\Temp\CVR3E76.tmp.cvr
C:\Users\PC\AppData\Local\Temp\CVR5F00.tmp.cvr
C:\Users\PC\AppData\Local\Temp\CVR95FE.tmp.cvr
C:\Users\PC\AppData\Local\Temp\CVR95FF.tmp.cvr
C:\Users\PC\AppData\Local\Temp\dd_vcredistMSI597E.txt
C:\Users\PC\AppData\Local\Temp\dd_vcredistUI597E.txt
C:\Users\PC\AppData\Local\Temp\Donate.ico
C:\Users\PC\AppData\Local\Temp\fullpackage_temp
C:\Users\PC\AppData\Local\Temp\is-BU8DP.tmp
C:\Users\PC\AppData\Local\Temp\JRT.txt
C:\Users\PC\AppData\Local\Temp\Low
C:\Users\PC\AppData\Local\Temp\mpbtrk.log
C:\Users\PC\AppData\Local\Temp\PCWC0EB.tmp
C:\Users\PC\AppData\Local\Temp\PCWC0EB.xml
C:\Users\PC\AppData\Local\Temp\Quarantine.exe
C:\Users\PC\AppData\Local\Temp\Report.ico
C:\Users\PC\AppData\Local\Temp\Scan.ico
C:\Users\PC\AppData\Local\Temp\scoped_dir_4396_21325
C:\Users\PC\AppData\Local\Temp\Setup Log 2013-11-03 #001.txt
C:\Users\PC\AppData\Local\Temp\Setup Log 2013-11-03 #002.txt
C:\Users\PC\AppData\Local\Temp\Uninstall.ico
C:\Users\PC\AppData\Local\Temp\vcredist_x86.exe
C:\Users\PC\AppData\Local\Temp\WPDNSE
C:\Users\PC\AppData\Local\Temp\~DF44F46FA01FFF856C.TMP
C:\Users\PC\AppData\Local\Temp\{8F6AB8E8-012F-422A-83E8-AE3C5D114B33}\{28006915-2739-4EBE-B5E8-49B25D32EB33}
C:\Users\PC\AppData\Local\Temp\{8F6AB8E8-012F-422A-83E8-AE3C5D114B33}\{28006915-2739-4EBE-B5E8-49B25D32EB33}\InstallHelper.dll
C:\Users\PC\AppData\Local\Temp\scoped_dir_4396_21325\chdboodilddefglllfoimeceomkpmkbi.crx
C:\Users\PC\AppData\Local\Temp\scoped_dir_4396_21325\DECODED_IMAGES
C:\Users\PC\AppData\Local\Temp\scoped_dir_4396_21325\DECODED_MESSAGE_CATALOGS
C:\Users\PC\AppData\Local\Temp\msohtmlclip1\01
C:\Users\PC\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml
C:\Users\PC\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx
C:\Users\PC\AppData\Local\Temp\jrt\APPID_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\APPID_files.dat
C:\Users\PC\AppData\Local\Temp\jrt\appinit64_null.reg
C:\Users\PC\AppData\Local\Temp\jrt\appinit_null.reg
C:\Users\PC\AppData\Local\Temp\jrt\APPPATHS.dat
C:\Users\PC\AppData\Local\Temp\jrt\APPROVEDEXTENSIONS_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\ask.bat
C:\Users\PC\AppData\Local\Temp\jrt\askCLSID.dat
C:\Users\PC\AppData\Local\Temp\jrt\askregkey_x64.dat
C:\Users\PC\AppData\Local\Temp\jrt\askregkey_x86.dat
C:\Users\PC\AppData\Local\Temp\jrt\askregvalue_x64.dat
C:\Users\PC\AppData\Local\Temp\jrt\askregvalue_x86.dat
C:\Users\PC\AppData\Local\Temp\jrt\askservices.dat
C:\Users\PC\AppData\Local\Temp\jrt\badAPPINIT.dat
C:\Users\PC\AppData\Local\Temp\jrt\badFOLDERS.cfg
C:\Users\PC\AppData\Local\Temp\jrt\badFOLDERScom.cfg
C:\Users\PC\AppData\Local\Temp\jrt\badFOLDERSstart.cfg
C:\Users\PC\AppData\Local\Temp\jrt\badLNK.cfg
C:\Users\PC\AppData\Local\Temp\jrt\badvalues.cfg
C:\Users\PC\AppData\Local\Temp\jrt\BHO_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\BHO_name.dat
C:\Users\PC\AppData\Local\Temp\jrt\browsermngr_keys.cfg
C:\Users\PC\AppData\Local\Temp\jrt\browsermngr_values.cfg
C:\Users\PC\AppData\Local\Temp\jrt\CHOICE.DAT
C:\Users\PC\AppData\Local\Temp\jrt\chrome.bat
C:\Users\PC\AppData\Local\Temp\jrt\CHRregkey_x64.cfg
C:\Users\PC\AppData\Local\Temp\jrt\CHRregkey_x86.cfg
C:\Users\PC\AppData\Local\Temp\jrt\CHR_extensions.cfg
C:\Users\PC\AppData\Local\Temp\jrt\CHR_open_x64.reg
C:\Users\PC\AppData\Local\Temp\jrt\CHR_open_x86.reg
C:\Users\PC\AppData\Local\Temp\jrt\clean_shortcut.vbs
C:\Users\PC\AppData\Local\Temp\jrt\CLSID_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\currentmd5.txt
C:\Users\PC\AppData\Local\Temp\jrt\CUT.DAT
C:\Users\PC\AppData\Local\Temp\jrt\datamngr_del.reg
C:\Users\PC\AppData\Local\Temp\jrt\defaultscope.cfg
C:\Users\PC\AppData\Local\Temp\jrt\delfolders.bat
C:\Users\PC\AppData\Local\Temp\jrt\delorphans.bat
C:\Users\PC\AppData\Local\Temp\jrt\ELEVATIONPOLICY_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\erunt
C:\Users\PC\AppData\Local\Temp\jrt\ev_clear.bat
C:\Users\PC\AppData\Local\Temp\jrt\EXT.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFbrowsermngr.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFextensions.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFpluginREG.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFplugins.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFprefs.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFregkey_x64.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFregkey_x86.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFwhtlist.cfg
C:\Users\PC\AppData\Local\Temp\jrt\FFXML.dat
C:\Users\PC\AppData\Local\Temp\jrt\FFXPI.dat
C:\Users\PC\AppData\Local\Temp\jrt\FF_open_x64.reg
C:\Users\PC\AppData\Local\Temp\jrt\FF_open_x86.reg
C:\Users\PC\AppData\Local\Temp\jrt\firefox.bat
C:\Users\PC\AppData\Local\Temp\jrt\FWCLSID.dat
C:\Users\PC\AppData\Local\Temp\jrt\FWPolicy.bat
C:\Users\PC\AppData\Local\Temp\jrt\get.bat
C:\Users\PC\AppData\Local\Temp\jrt\IEwhtlst.cfg
C:\Users\PC\AppData\Local\Temp\jrt\iexplore.bat
C:\Users\PC\AppData\Local\Temp\jrt\IE_open_x64.reg
C:\Users\PC\AppData\Local\Temp\jrt\IE_open_x86.reg
C:\Users\PC\AppData\Local\Temp\jrt\IFEO.dat
C:\Users\PC\AppData\Local\Temp\jrt\INTERFACE_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\JRT.bat
C:\Users\PC\AppData\Local\Temp\jrt\medfos.bat
C:\Users\PC\AppData\Local\Temp\jrt\MENUEXT.dat
C:\Users\PC\AppData\Local\Temp\jrt\misc.bat
C:\Users\PC\AppData\Local\Temp\jrt\modules.bat
C:\Users\PC\AppData\Local\Temp\jrt\modules.dat
C:\Users\PC\AppData\Local\Temp\jrt\moduleservices.dat
C:\Users\PC\AppData\Local\Temp\jrt\newmd5.txt
C:\Users\PC\AppData\Local\Temp\jrt\NIRCMD.DAT
C:\Users\PC\AppData\Local\Temp\jrt\NOTIFY.dat
C:\Users\PC\AppData\Local\Temp\jrt\PREAPPROVED_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\prelim.bat
C:\Users\PC\AppData\Local\Temp\jrt\PRODUCTS.dat
C:\Users\PC\AppData\Local\Temp\jrt\REGhcr.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGhkcu_and_hklm_allow.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGhkcu_and_hklm_software.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGhkcu_software_appdatalow.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGhkcu_software_microsoft.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGhklm_software_classes.cfg
C:\Users\PC\AppData\Local\Temp\jrt\REGISTRYUSERSID.cfg
C:\Users\PC\AppData\Local\Temp\jrt\runvalues.bat
C:\Users\PC\AppData\Local\Temp\jrt\runvalues_x64.cfg
C:\Users\PC\AppData\Local\Temp\jrt\runvalues_x86.cfg
C:\Users\PC\AppData\Local\Temp\jrt\S1518COMPONENTS.dat
C:\Users\PC\AppData\Local\Temp\jrt\searchlnk.bat
C:\Users\PC\AppData\Local\Temp\jrt\SED.DAT
C:\Users\PC\AppData\Local\Temp\jrt\sednewline.txt
C:\Users\PC\AppData\Local\Temp\jrt\services.dat
C:\Users\PC\AppData\Local\Temp\jrt\serviceseventlog.cfg
C:\Users\PC\AppData\Local\Temp\jrt\SETTINGS_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\SHORTCUT.DAT
C:\Users\PC\AppData\Local\Temp\jrt\STATS_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\TDL4.bat
C:\Users\PC\AppData\Local\Temp\jrt\temp
C:\Users\PC\AppData\Local\Temp\jrt\TRACING.dat
C:\Users\PC\AppData\Local\Temp\jrt\TYPELIB_clsid.dat
C:\Users\PC\AppData\Local\Temp\jrt\UNINSTALL.dat
C:\Users\PC\AppData\Local\Temp\jrt\UpgradeCodes.dat
C:\Users\PC\AppData\Local\Temp\jrt\WGET.DAT
C:\Users\PC\AppData\Local\Temp\jrt\WOW6432NODE.dat
C:\Users\PC\AppData\Local\Temp\jrt\temp\null.txt
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERDNT.E_E
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERDNTDOS.LOC
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERDNTWIN.LOC
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERUNT.EXE.manifest
C:\Users\PC\AppData\Local\Temp\jrt\erunt\ERUNT.LOC
C:\Users\PC\AppData\Local\Temp\jrt\erunt\README.TXT
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\43cf441080b24048909add36ebfff0bc.txt
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin.dmc
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\config.dmc
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\globalKeyChecker.exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\Java7.exe.config
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\software
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Boxoreinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Dealplyinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Dockings.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Iminentinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\MyBackupPcinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Qone8info.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\SaltarSmartinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\SpeedUpMyPcinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Superlyricsinfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\templateDisplays.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\templateStyle.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\temp\Wajaminfo.dfe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\software\Cloud_Backup_Setup.exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\software\Java7.exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\software\speedupmypc.exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\software\tugs_qone8.exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Boxore
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Dealply
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Iminent
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\MyBackupPc
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Qone8
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\SaltarSmart
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\SpeedUpMyPc
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Superlyrics
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Wajam
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Wajam\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Superlyrics\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\SpeedUpMyPc\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\SaltarSmart\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Qone8\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\MyBackupPc\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Iminent\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\box.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\close.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\finish.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\group.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\instalando.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\options.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\exe\welcome.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Dealply\info.html
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\base.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\boxore.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\dealply.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\iminent.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\mypcbackup.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position1A.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position2A.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position2B.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position2C.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position3A.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position3B.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position3C.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position3D.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\position4A.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\qone8.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\saltarsmart.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\speedupmypc.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\style.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\superlyrics.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\wajam.css
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\bg_app.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\boton.jpg
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\boton_xl.jpg
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\boxore-icon-gr.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\boxore-icon.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\boxore-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\bullet-short.gif
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\bullet-shortw.gif
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\bullet.gif
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\butpause.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\butplay.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\check-close.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\check.jpg
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\check.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\cross.jpg
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\dealply-logo-gris.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\dealply-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\dealply-logo2.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\hide.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\iminent-imagen-s.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\iminent-imagen.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\iminent-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\less.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\logo-win.jpg
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\more.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\mypcbackup.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\percentage-bg.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\progress.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\progress_small.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\progress_small_bg.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\screen-geaudioconverter.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\screen-gevideoconverter.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\screen-olivebrowser.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\screen-vafplayer.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\screen-zipper.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\show.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\speedupmypc-icon.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\speedupmypc-img.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\speedupmypc-img2.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\speedupmypc-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\speedupmypc-logo2.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\superlyrics-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-big.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img1-gris.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img1-small.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img1.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img1a.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img2-gris-small.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img2-gris.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-img2.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-logo.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-logo2.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css\images\wajam-logo3.png
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\Boxore\info.html
C:\Users\PC\AppData\Local\Temp\is-BU8DP.tmp\speedupmypc.tmp
C:\Users\PC\AppData\Local\Temp\fullpackage_temp\package.zip
C:\Users\PC\AppData\LocalLow\Microsoft\Windows\AppCache\container.dat
C:\Users\PC\AppData\LocalLow\Microsoft\Windows\AppCache\CXALX5KP
C:\Users\PC\AppData\LocalLow\Microsoft\Windows\AppCache\CXALX5KP\container.dat
C:\Users\PC\AppData\LocalLow\Microsoft\Silverlight\is
C:\Users\PC\AppData\LocalLow\Microsoft\Silverlight\mssl.lck
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\Services
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{FC9FD56D-E717-4A8D-A12D-9BCC23E1DC20}.ico
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\iconcache\noa94t2
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\iconcache\noa94t2\tabiconcache.dat
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7I26MV2I
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\7IT36ZPG
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\B3UQIEPP
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\container.dat
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\DWHTC1DV
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\G3LZ32E6
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\QQKQLBPU
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\YHSCPL35
C:\Users\PC\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\Z0GCVQNM
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_13D04765184245BACBADE6B481C0B93F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_86D3F159CB1C10E9A85FC2F8CF96D8A7
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_875443344522F48E1FFB0C1729FA0630
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_B57DB8F865DA0FC5E4810809B8B72CB3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_C42F1D3534355C1B83920BF5D38E426F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_E204A27DB990BF51D905481C897DF611
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_F0ED2E2E4C18AF767323D306D9F72B9E
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_F39ACCC9391BF77BE735AF24410D0112
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E1CC43385506AF5B63E01C28389BC6F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_135A427F1ED873A4BF5097F7A809FA2A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\27371171D8BBA336302695C6CEB04833
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B16E63E6837B29B5887B7E6D0600E2A_969E49E47771A30EBC6CDDE4DA48CAFA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B16E63E6837B29B5887B7E6D0600E2A_A14C45742D4B25513056BFB79CE0B0AD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3EF2DCFBD8E45DF4AF38995D1A2C2444_2768B3886E78F9A5562A7C1FBF45A9CA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_7DCDC9B86C5DA37FEB2732F7D1A586E5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_E638F9EA31276B58E6A32FDD5296AB01
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_E9FCAC30D964AFC39902EC989B1CC9E8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\678F9D319FF4D0257A34339D2BFE3CC5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\69CB1FD121A3CCB01B235A51441959D6_078DC4B2390A7EFBCA49C4D0774B67BE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6F0788892ECB795F56E658EDB1CA93AA_D0F5968EB06039612868527F6F0CF80A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_29A1C74A8488D0D84E3FA869CC305DAF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_D5EF41DE006A508D00769933DF3CDC8A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_E7C0892E831E2E197C090353CDEF322C
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_EBE41E2A58BA245BE9BCCAF6EE237757
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7BB0ACA324B4F65640EBBD7813B49595_F50459860A04752D2B14CFAE0255C9F6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_01E00B40ABF1B916483F1FABF3FED9C9
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_918340BA089892122B5626AE042DBBDE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_95BE0E24685C739E0287588432223979
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A23AC959059B7FD47962A92B5E77019F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_B8167929DF5FBDEF84BAE741CCB8D129
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_CBE43AE7F5F64D8D961C9C8AA1224695
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_DB803DFCBAD45E1B55051EE70C257C5B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\855CF405355328EC482A28D56A44CFB0_AB9A0D15E36F45DDB29557543164E99D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\855CF405355328EC482A28D56A44CFB0_C9CFC4000454F3107F0A791C77D31E7E
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_B7A98547D39CCE422104D2BD5B8188F3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\944E5B697BC46FE14AB888AE8A1EBB99_2269679B991E7B74D029ADC1DCE94782
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_CFEA3385E24D822B0027B3D9A091B242
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_EE1C98F0DB5A340329CFBF08DA0DFEC3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AF48EB7F5955EA9F651376F7F40DA1AD_077371EB491C7A22D48E25FB548AA51D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_35DB72DF5C829F76FA820993F2C82D80
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_88CAFBDD063B1FE3F28A539FD17FA023
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_8A162E81551548152558DD2C8F4B3018
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_BC4EC46B2A6D9424FFBAF3A0C035586C
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_DF54B8342BAC4B93FE5756DC304C4985
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BF58E39708831A0F34A4FFCF18BF9EA5_9867705D836C39E0A89BED99A321BC04
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_AE48409823BA0FAC6A5F3BFB4CC0E4E8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_D9893D9FEFEB2456B52A7C018C0FFC75
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_DE54C4FA15BBC43BAFB240D0C3799849
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_E8FFB3D833ACBBA2A753BCE3F81C274B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0B71F66FD9B998F312CAECDC477CE6C_5B6B7C719C2322888B48B4571D19E583
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0B71F66FD9B998F312CAECDC477CE6C_827D12AA5F451F1CD87CFCEFE3366FCA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DBC3362DBFFA16F9E029A084D14E23BE_A6D84554AA391CDF15CBB81FDFEB4FE4
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2EF7F0FB7284B9ACFD4F65D02218479
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5F99F8CA677C9C5793DF9906EE2DCB6_8FC7E010A3165444D6AD9D85D90703A0
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_13D04765184245BACBADE6B481C0B93F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_86D3F159CB1C10E9A85FC2F8CF96D8A7
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_875443344522F48E1FFB0C1729FA0630
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_B57DB8F865DA0FC5E4810809B8B72CB3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_C42F1D3534355C1B83920BF5D38E426F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_E204A27DB990BF51D905481C897DF611
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_F0ED2E2E4C18AF767323D306D9F72B9E
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_F39ACCC9391BF77BE735AF24410D0112
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1E1CC43385506AF5B63E01C28389BC6F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_135A427F1ED873A4BF5097F7A809FA2A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\27371171D8BBA336302695C6CEB04833
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B16E63E6837B29B5887B7E6D0600E2A_969E49E47771A30EBC6CDDE4DA48CAFA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B16E63E6837B29B5887B7E6D0600E2A_A14C45742D4B25513056BFB79CE0B0AD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3EF2DCFBD8E45DF4AF38995D1A2C2444_2768B3886E78F9A5562A7C1FBF45A9CA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_7DCDC9B86C5DA37FEB2732F7D1A586E5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_E638F9EA31276B58E6A32FDD5296AB01
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_E9FCAC30D964AFC39902EC989B1CC9E8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\678F9D319FF4D0257A34339D2BFE3CC5
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\69CB1FD121A3CCB01B235A51441959D6_078DC4B2390A7EFBCA49C4D0774B67BE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6F0788892ECB795F56E658EDB1CA93AA_D0F5968EB06039612868527F6F0CF80A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_29A1C74A8488D0D84E3FA869CC305DAF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_D5EF41DE006A508D00769933DF3CDC8A
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_E7C0892E831E2E197C090353CDEF322C
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_EBE41E2A58BA245BE9BCCAF6EE237757
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7BB0ACA324B4F65640EBBD7813B49595_F50459860A04752D2B14CFAE0255C9F6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_01E00B40ABF1B916483F1FABF3FED9C9
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_918340BA089892122B5626AE042DBBDE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_95BE0E24685C739E0287588432223979
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A23AC959059B7FD47962A92B5E77019F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_B8167929DF5FBDEF84BAE741CCB8D129
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_CBE43AE7F5F64D8D961C9C8AA1224695
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_DB803DFCBAD45E1B55051EE70C257C5B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\855CF405355328EC482A28D56A44CFB0_AB9A0D15E36F45DDB29557543164E99D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\855CF405355328EC482A28D56A44CFB0_C9CFC4000454F3107F0A791C77D31E7E
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_B7A98547D39CCE422104D2BD5B8188F3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\944E5B697BC46FE14AB888AE8A1EBB99_2269679B991E7B74D029ADC1DCE94782
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_CFEA3385E24D822B0027B3D9A091B242
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ACF244F1A10D4DBED0D88EBA0C43A9B5_EE1C98F0DB5A340329CFBF08DA0DFEC3
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AF48EB7F5955EA9F651376F7F40DA1AD_077371EB491C7A22D48E25FB548AA51D
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BBB768C456D9E2DCD3EF595C400D483D_64C05B9EB32FC3D0CE6CB126561EEBFF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_35DB72DF5C829F76FA820993F2C82D80
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_88CAFBDD063B1FE3F28A539FD17FA023
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_8A162E81551548152558DD2C8F4B3018
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_BC4EC46B2A6D9424FFBAF3A0C035586C
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_DF54B8342BAC4B93FE5756DC304C4985
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BF58E39708831A0F34A4FFCF18BF9EA5_9867705D836C39E0A89BED99A321BC04
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_AE48409823BA0FAC6A5F3BFB4CC0E4E8
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_D9893D9FEFEB2456B52A7C018C0FFC75
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_DE54C4FA15BBC43BAFB240D0C3799849
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_E8FFB3D833ACBBA2A753BCE3F81C274B
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0B71F66FD9B998F312CAECDC477CE6C_5B6B7C719C2322888B48B4571D19E583
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0B71F66FD9B998F312CAECDC477CE6C_827D12AA5F451F1CD87CFCEFE3366FCA
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DBC3362DBFFA16F9E029A084D14E23BE_A6D84554AA391CDF15CBB81FDFEB4FE4
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2EF7F0FB7284B9ACFD4F65D02218479
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5F99F8CA677C9C5793DF9906EE2DCB6_8FC7E010A3165444D6AD9D85D90703A0
C:\Users\PC\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\PC\AppData\LocalLow\Adobe\Linguistics
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\assets
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\ReaderMessages
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\Synchronizer\metadata
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\Synchronizer\resources
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\Synchronizer\resources\resource-17
C:\Users\PC\AppData\LocalLow\Adobe\Acrobat\11.0\Synchronizer\metadata\Synchronizer110
C:\Users\PC\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\PC\AppData\Local\Microsoft\Windows\History\Low\desktop.ini
C:\Users\PC\AppData\Local\Microsoft\Windows\History\Low\History.IE5\container.dat
C:\Users\PC\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini
C:\Users\PC\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012012112420121125
C:\Users\PC\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012012112420121125\container.dat
C:\Users\PC\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat
C:\Users\PC\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
C:\Users\PC\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013110420131105
C:\Users\PC\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013110420131105\container.dat
C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing
C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner[S0].lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner[S1].lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\Affichage.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AVSCAN-20131104-155240-1FA2AE2D.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\Disque local (C).lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\JRT.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\PILAF DE VOLAILLE AUX LÉGUMES ET AU SAFRAN.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\Système et sécurité.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\viandes.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\voucher sunnycars loc voiture0310_12654431.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\voyage andalousie.lnk
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28c8b86deab549a1.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\521a29e5d22c13b4.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ed7a5cc3cca8d52a.customDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5d696d521de238c3.automaticDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\918e0ecb43d17e23.automaticDestinations-ms
C:\Users\PC\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\adecfb853d77462a.automaticDestinations-ms
C:\Users\PC\AppData\Local\Temp\jrt
C:\Users\PC\AppData\Local\Temp\msohtmlclip1
C:\Users\PC\AppData\Local\Temp\{8F6AB8E8-012F-422A-83E8-AE3C5D114B33}
C:\Users\PC\AppData\Local\Temp\Java7.exe\a2888d717e3a465f98560a2182cad379\bin\css
C:\Windows\Prefetch\ACRORD32.EXE-6C85C486.pf
C:\Windows\Prefetch\ADWCLEANER-3.011.EXE-040CED8C.pf
C:\Windows\Prefetch\ADWCLEANER.EXE-0B5375EC.pf
C:\Windows\Prefetch\AgAppLaunch.db
C:\Windows\Prefetch\AgCx_SC2.db
C:\Windows\Prefetch\AgCx_SC4.db
C:\Windows\Prefetch\AgGlFaultHistory.db
C:\Windows\Prefetch\AgGlFgAppHistory.db
C:\Windows\Prefetch\AgGlGlobalHistory.db
C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2603439168-1043242564-1471156316-1000.db
C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2603439168-1043242564-1471156316-1000.db
C:\Windows\Prefetch\AgRobust.db
C:\Windows\Prefetch\AUDIODG.EXE-D0D776AC.pf
C:\Windows\Prefetch\AVCENTER.EXE-087DA68F.pf
C:\Windows\Prefetch\AVNOTIFY.EXE-4291C867.pf
C:\Windows\Prefetch\AVSCAN.EXE-1FDA38F3.pf
C:\Windows\Prefetch\AVSHADOW.EXE-0FF3F930.pf
C:\Windows\Prefetch\AVWSC.EXE-877F4F63.pf
C:\Windows\Prefetch\CCLEANER.EXE-CC440CDB.pf
C:\Windows\Prefetch\CHOICE.DAT-A4E5C6B9.pf
C:\Windows\Prefetch\CHROME.EXE-0548EF22.pf
C:\Windows\Prefetch\CMD.EXE-89305D47.pf
C:\Windows\Prefetch\CONHOST.EXE-3218E401.pf
C:\Windows\Prefetch\CONSENT.EXE-65F6206D.pf
C:\Windows\Prefetch\CSC.EXE-4EF173D0.pf
C:\Windows\Prefetch\CSCRIPT.EXE-E4C98DEB.pf
C:\Windows\Prefetch\CUT.DAT-EDC1E8F6.pf
C:\Windows\Prefetch\CVTRES.EXE-419E4E46.pf
C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf
C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf
C:\Windows\Prefetch\DLLHOST.EXE-BBB8B3DE.pf
C:\Windows\Prefetch\DLLHOST.EXE-C5C55E89.pf
C:\Windows\Prefetch\ERUNT.EXE-5CF8062F.pf
C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf
C:\Windows\Prefetch\FC.EXE-959DEF30.pf
C:\Windows\Prefetch\FIND.EXE-162DFE58.pf
C:\Windows\Prefetch\FINDSTR.EXE-4176B665.pf
C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0CF170F4.pf
C:\Windows\Prefetch\FSUTIL.EXE-4137D2F6.pf
C:\Windows\Prefetch\GOOGLEUPDATE.EXE-8973CEDD.pf
C:\Windows\Prefetch\GUARDGUI.EXE-C8C5CF5F.pf
C:\Windows\Prefetch\IPMGUI.EXE-2BFE8AEE.pf
C:\Windows\Prefetch\JRT.EXE-7E9F9C4E.pf
C:\Windows\Prefetch\Layout.ini
C:\Windows\Prefetch\LOGONUI.EXE-1BEE4A84.pf
C:\Windows\Prefetch\MBAM-SETUP-1.75.0.1300.EXE-D99AC07D.pf
C:\Windows\Prefetch\MBAM-SETUP-1.75.0.1300.TMP-683C1B93.pf
C:\Windows\Prefetch\MBAM.EXE-CD3441D7.pf
C:\Windows\Prefetch\MBAMGUI.EXE-00780130.pf
C:\Windows\Prefetch\MBAMSCHEDULER.EXE-AB10D18A.pf
C:\Windows\Prefetch\MBAMSERVICE.EXE-CACDA1F4.pf
C:\Windows\Prefetch\MPMINISIGSTUB.EXE-416C8264.pf
C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf
C:\Windows\Prefetch\NIRCMD.DAT-43ADD443.pf
C:\Windows\Prefetch\NOTEPAD.EXE-3D2AFDB4.pf
C:\Windows\Prefetch\NOTEPAD.EXE-EB1B961A.pf
C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
C:\Windows\Prefetch\ONENOTEM.EXE-BE9BBF53.pf
C:\Windows\Prefetch\OUTLOOK.EXE-B9F191EB.pf
C:\Windows\Prefetch\PfSvPerfStats.bin
C:\Windows\Prefetch\PING.EXE-B29F6629.pf
C:\Windows\Prefetch\PREVHOST.EXE-205F609A.pf
C:\Windows\Prefetch\READER_SL.EXE-1C905F6B.pf
C:\Windows\Prefetch\ReadyBoot
C:\Windows\Prefetch\REALPLAY.EXE-FD224278.pf
C:\Windows\Prefetch\REG.EXE-26976709.pf
C:\Windows\Prefetch\REGEDIT.EXE-4748FE01.pf
C:\Windows\Prefetch\REGSVR32.EXE-55A4EE79.pf
C:\Windows\Prefetch\RUNDLL32.EXE-125D4518.pf
C:\Windows\Prefetch\RUNDLL32.EXE-6ECA75C3.pf
C:\Windows\Prefetch\RUNDLL32.EXE-752665EB.pf
C:\Windows\Prefetch\RUNDLL32.EXE-78317C92.pf
C:\Windows\Prefetch\RUNDLL32.EXE-85E123DD.pf
C:\Windows\Prefetch\RUNDLL32.EXE-9ED3C815.pf
C:\Windows\Prefetch\RUNDLL32.EXE-AFD98684.pf
C:\Windows\Prefetch\RUNDLL32.EXE-F452D79D.pf
C:\Windows\Prefetch\SC.EXE-BC6DAF49.pf
C:\Windows\Prefetch\SDIAGNHOST.EXE-67CD1457.pf
C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-AA7A1FDD.pf
C:\Windows\Prefetch\SEARCHINDEXER.EXE-77D27BAC.pf
C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf
C:\Windows\Prefetch\SETUP.EXE-2398F76A.pf
C:\Windows\Prefetch\SFTGC.EXE-02594C19.pf
C:\Windows\Prefetch\SHORTCUT.DAT-0209506E.pf
C:\Windows\Prefetch\SHUTDOWN.EXE-B918DC57.pf
C:\Windows\Prefetch\SKYPE.EXE-40964AC7.pf
C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf
C:\Windows\Prefetch\SVCHOST.EXE-135A30D8.pf
C:\Windows\Prefetch\SVCHOST.EXE-18D06B2E.pf
C:\Windows\Prefetch\SVCHOST.EXE-8FD92526.pf
C:\Windows\Prefetch\SVCHOST.EXE-93CEEE07.pf
C:\Windows\Prefetch\TASKENG.EXE-5BAF290C.pf
C:\Windows\Prefetch\TASKHOST.EXE-437C05A8.pf
C:\Windows\Prefetch\TASKKILL.EXE-609E34DE.pf
C:\Windows\Prefetch\TASKLIST.EXE-9811F41E.pf
C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-031B6478.pf
C:\Windows\Prefetch\UPDATE.EXE-3FBE35E6.pf
C:\Windows\Prefetch\UPDRGUI.EXE-481C2DBF.pf
C:\Windows\Prefetch\VSSVC.EXE-04D079CC.pf
C:\Windows\Prefetch\W32TM.EXE-5D2265F4.pf
C:\Windows\Prefetch\WERFAULT.EXE-B7E27BE5.pf
C:\Windows\Prefetch\WERMGR.EXE-2A1BCBC7.pf
C:\Windows\Prefetch\WEVTUTIL.EXE-C09B744F.pf
C:\Windows\Prefetch\WGET.DAT-DDD9626D.pf
C:\Windows\Prefetch\WINWORD.EXE-6AC9169C.pf
C:\Windows\Prefetch\WLRMDR.EXE-DDA57653.pf
C:\Windows\Prefetch\WMIADAP.EXE-369DF1CD.pf
C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf
C:\Windows\Prefetch\WMPNETWK.EXE-BD0344CA.pf
C:\Windows\Prefetch\WUAUCLT.EXE-830BCC14.pf
C:\Windows\Prefetch\ReadyBoot\Trace10.fx
C:\Windows\Prefetch\ReadyBoot\Trace6.fx
C:\Windows\Prefetch\ReadyBoot\Trace7.fx
C:\Windows\Prefetch\ReadyBoot\Trace8.fx
C:\Windows\Prefetch\ReadyBoot\Trace9.fx

Corbeille vidée.


Fin du rapport.
Maud

[2011N2]

Re,

Fallait l'héberger comme demandé.

Fais un diagnostic de ton PC avec ZHPDiag et poste le rapport hébergé : http://www.forum-entraide-informatique. ... g-tutoriel

Gabriel.

[maud33]

Bonjour Gabriel,
Me revoilà, toujours avec cette foutue page d'accueil start.qone8, ce matin.
Hier soir j'ai tenté un copié/collé du rapport ZHPDiag, mais refusé, car trop long:!: 
Donc, j'envoie ce rapport hebergé :

http://cjoint.com/?3KfgOiv5ClQ
http://cjoint.com/?3KfgOiv5ClQ

J'espère que j'ai bien fait la manip, j'ai un doute ?
Hébergé pour 4 jours, en privé.
Lorsque j'allume mon netbook, j'ai aussi depuis quelques temps un tableau qui me dit "programme occupé/Basculer vers". Je fais basculer vers, et je retrouve le bureau.
Mais ça, c'est un problème moins grave que ce qone8.
Merci Gabriel et à plus tard.
Maud

[2011N2]

Bonjour,

Ok bien.

Fais ZHPFix comme ceci avec ces lignes, et poste le rapport.

Gabriel.

[maud33]

Ouf, j'y suis arrivée !
rapport :
Rapport de ZHPFix 2013.11.4.1 par Nicolas Coolman, Update du 03/11/2013
Fichier d'export Registre :
Run by PC at 05/11/2013 07:42:39
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 11s)

========== Clés du Registre ==========
SUPPRIMÉ: CLSID BHO: {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences
SUPPRIMÉ Chrome Site: http://start.qone8.com

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉS Temporaires Windows (0) (0 octets)
SUPPRIMÉS Flash Cookies (0) (0 octets)

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITÉ [HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ {72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
NON TRAITÉ O4 - GS \ accessoires [PC]: Run.lnk - Clé orpheline


========== Récapitulatif ==========
2 : Clés du Registre
1 : Dossiers
2 : Fichiers
2 : Préférences navigateur
1 : Restauration Système
2 : Autre


End of clean in 01mn 10s

========== Chemin de fichier rapport ==========
C:\Users\PC\AppData\Roaming\ZHP\ZHPFix[R1].txt - 05/11/2013 07:42:59 [1409]

[2011N2]

Re,

Bien.
Qone8 est toujours là ?

Tu as MBAM sur ton PC. Fais un examen complet sur tous les disques. Tu supprimeras tous les éléments détectés et me posteras le rapport. Si tu as besoin d'un tutoriel : http://www.forum-entraide-informatique. ... m-tutoriel

Gabriel.

[maud33]

Me revoilà, après avoir fait le scan Malwarebytes, et supprimé les éléments sélectionnés, puis redémarré l'ordi : zut, encore là le qone8  
lien du rapport :
http://www.cjoint.com/data3/3KfmLTFFVuT ... 36-37_.txt
Je me demande vraiment si on peut se débarasser de cette saloperie.
Je vois que d'autres personnes sont dans la même galère.
ça sent le reformatage ???
Maud

[2011N2]

Re,

Non non ne t'inquiète pas on résout toujours ce genre d'infections. C'est juste parfois plus long pour certains mais ne te fais pas de souci.

Tu n'as supprimé aucun élément détecté par MBAM ?

Gabriel.

[maud33]

bonsoir,
Oui, j'ai supprimé les éléments. Enfin je crois, car lorsque j'ai eu la liste, rien n'était coché, donc j'ai tout coché, et j'ai fait supprimer. Mais peut être qu'il ne fallait pas cocher ??
Maud

[maud33]

Pour ce soir, je ne pourrais pas être sur l'ordi, mais on se contacte demain.
Bonne soirée Gabriel, et merci pour ton aide et tes espoirs.
Maud

[2011N2]

Re,

Ah tu as posté le rapport avant la suppression alors, pas grave.

Ok demain tu me posteras un nouveau rapport ZHPDiag.

Bonne soirée à toi également,

Gabriel.

[maud33]

bonjour Gabriel,
Bien matinale ce matin, j'ai fait le scan ZHP.
La page d'accueil est toujours start.qone8.
Voici le lien du rapport :

http://www.cjoint.com/?3KggZNZ1jmb
A plus tard.
Maud

[2011N2]

Bonjour,

Ok Qone8 est là sur Chrome c'est ça ?

Sinon, connais-tu ces dossiers ?
C:\Windows\System32\愸籹_
C:\Windows\System32\䠭`

Essaye d'aller voir s'ils existent réellement (n'ouvre pas d'applications qui sont dans ces dossiers si tu ne les connais pas).

Gabriel.

[maud33]

A la fin de la liste des fichiers System 32, j'ai trouvé 6 fichiers bizarres :
Tous avec des petits icônes curieux :
Fichier 1 : du 05 10 13 - 94,7MO
Fichier 2 : du 30 09 13 - 93,9MO
Fichier 3 : du 11 09 13 - 92,6MO
Fichier 4 : du 06 11 13 - 0 octets
Fichier 5 : du 05 11 13 - 100MO
Fichier 6 : du 23 10 13 - 97,7MO
difficile de voir si les petits hiéroglyphes sont les mêmes que tu m'as adressé.
Peut être bien les fichiers 5 et 6 correspondraient.
Si je pointe sur les fichiers, aucun aperçu n'est disponible, et je n'ai pas osé double cliquer dessus.
C'est quoi ces fichiers ?
Maud

[maud33]

J'ai oublié, en réponse à ta question, oui Qone est toujours là sur Chrome.
Lorsque je veux aller sur Google Chrome, j'ai d'abord la page de qone8 qui s'ouvre, et derrière 2 onglets avec Google Chrome s'ouvrent aussi.
Maud

[2011N2]

Salut,

Ok supprime ces deux dossiers alors, c'est suspect.

Puis réinitialise Chrome comme ceci : http://www.forum-entraide-informatique. ... gle-chrome

Gabriel.

[maud33]

bonsoir Gabriel,
J'ai supprimé les deux fichiers bizarres, comme tu l'as demandé.
Je conserve les quatre autres ?
Je tente de réinitialiser google chrome, mais je ne sais pas où trouver le dossier "default" avec les fichiers favicons et Login Data  
Par contre j'ai fait une sauvegarde de mes favoris, que j'ai enregistré.
Qu'entend t-on par mot de passe enregistrés ?
Un peu compliqué pour moi !
Merci pour ton aide.
Maud

[2011N2]

Bonsoir,

Quels 4 autres fichiers ? Ils n'étaient pas dans les dossiers justement ?

Tu as tapé la commande dans "Exécuter" pour ouvrir l'emplacement de "default" ?

Pour les mots de passe enregistrés, tu sais parfois, Chrome (ou autre navigateur) te demande si tu souhaites mémoriser le mot de passe pour tel site lorsque tu te connectes.
Si des mots de passe sont sauvegardés, ils seront supprimés. Rien de grave.

Gabriel.

[maud33]

 Bonjour Gabriel,
Hier j'ai été un peu occupée et n'ai pas eu le temps de venir sur le forum.
Je crois que ça y est, je suis débarrassée de Qone8.
J'ai fais la réinitialisation de Google Chrome.
C'est OK maintenant, la connexion se fait directement avec Google.
Auparavant, j'avais viré un dossier qui n'apparaissait pas dans Programme, mais qui était bien installé sur le disqueC : c'était Doma Uninstaller.
Je l'ai supprimé et fais un nettoyage de la poubelle avec CCleaner.
J'ai ensuite repassé ZHP dont voici le rapport :
http://cjoint.com/data3/3KifsON73rS_zhpdiag07_11.txt
A priori, il n'y a plus de traces  
Est-ce que tu vois autre chose à faire ?
Je pars de chez moi vers 8h00.
Bonne journée et à plus tard.
Maud

[2011N2]

Bonjour,

Ok parfait, on finalise.
Voici la procédure : http://www.forum-entraide-informatique. ... nalisation
Tiens moi au courant de ton avancée au fur et à mesure.

Gabriel.

[Dori@n]

Bonjour,

Nous n'avons plus de nouvelle de l'auteur de ce sujet depuis plus de 10 jours. Nous considérons donc ce problème comme résolu ou abandonné par son auteur. La prochaine fois, merci de nous tenir au courant de l'évolution de votre problème, ou à faire un UP régulièrement !

Ce sujet est verrouillé, si vous souhaitez le reprendre, merci de contacter par message privé un membre de l'équipe de modération du forum.

À bientôt sur FEI !