Salut !

Ok, on à réduire de moitié les lignes malsaines, il en reste encore un cinquantaine, ce n'est donc pas fini. 

1) J'ai mis ci-dessous une liste de choses à supprimer des navigateurs (Internet Explorer & Firefox).

Pour Internet Explorer: Menu Outils ---> Gérer les modules complémentaires.

Ensuite il y a un petit menu déroulant "Afficher" à gauche de la fenêtre, choisir: Tous les modules complémentaires

Désactive, et supprime si l'option est disponible et s'ils sont présents, tous les modules de la liste ci-dessous.

webssearches

VAFPlayer

IncrediBar

Optimizer Elite Max

weDownload Manager

SupTab

WPM

OptimizerPro

2) De même pour Firefox: Menu Firefox ---> Modules complémentaires 

---> Onglet Extentions: Supprimes les modules de la liste ci-dessus s'ils s'y trouvent.

---> Onglet Plugins: Supprimes les modules de la liste ci-dessus s'ils s'y trouvent.

3) Désinstaller ce qui peut l'être via le panneau de configuration Windows - Désinstalle les choses de la liste si tu les trouve dans la liste des programmes installés.

4) Utilise à nouveau AdwCleaner une seul fois, et poste le rapport AdwCleaner[Sxxx].txt (xxx étant le plus grand nombre)

5) Pour le problème des moteurs de recherches que tu n'arrives pas à changer - Le problème vient du fait que tous les raccourcis(icônes) qui sont sur ton bureau ont été modifiés(Ceux de la barre de tâches aussi). Donc 3 solutions au choix: 

a) Supprimer les raccourcis et les recréer

b) Clic droit sur un raccourci ---> Propriété ---> Onglet Raccourci

Dans le champ "Cible", il faut supprimer tout ce qui ce trouve après:

- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" pour Firefox.

- "C:\Program Files\Internet Explorer\iexplore.exe" pour Internet explorer

Répéter l'opération pour chaque raccourci.

c) Laisser agir le Script ZHPdiag que je te donnerais au moment voulu.

6) Un nouveau Rapport ZHPDiag.

Je sais, ça fait du boulot, j'ai essayé de décrire ce que je fait habituellement chez les gens qui m'apportent leur PC, ça prend 5 min quand on connait...

Bon courage et bonne soirée.

a+

Salut,

Ok, je propose de supprimer ce qui reste avec ZHPFix qui est normalement présent sur ton bureau.

1) Clic-droit sur ZHPFix ---> Exécuter en tant qu'administrateur

2) Clique sur la grosse case Importer

3) Valide le message d'avertissement qui s'affiche

4) Fait un copier coller de l'énorme pavé ci-dessous (Une partie est liée aux l'infections, l'autre à une quantité impressionnante de lignes superflues...)

5) Clic sur Go !

6) Si ZHPFix veut redémarrer, accepte... S'il demande de confirmer le nettoyage de la corbeille, accepte...

7) Envoie le rapport ZHPFix qui apparait sur ton bureau et un nouveau rapport ZHPdiag.

8) a+

Script ZHPFix

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com =>Hijacker.WebsSearches

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com =>Hijacker.WebsSearches

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches

O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches

O4 - GS\Desktop [Public]: NewPlayer.lnk . (.Tuguu SL - NewPlayer.) -- C:\Program Files (x86)\NewPlayer\NewPlayer.exe =>PUP.VAFPlayer

O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches

O4 - GS\QuickLaunch [arthuria]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches

O4 - GS\TaskBar [arthuria]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches

O23 - Service: NewPlayer Updater Service (NewPlayerUpdaterService) . (.Pas de propriétaire - NewPlayerUpdaterService.) - C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe =>Adware.IncrediBar

[MD5.00000000000000000000000000000000] [APT] [media enhance-chromeinstaller] (...) -- C:\Program Files (x86)\media enhance\media enhance-chromeinstaller.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [media enhance-codedownloader] (...) -- C:\Program Files (x86)\media enhance\media enhance-codedownloader.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [media enhance-enabler] (...) -- C:\Program Files (x86)\media enhance\media enhance-enabler.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [media enhance-firefoxinstaller] (...) -- C:\Program Files (x86)\media enhance\media enhance-firefoxinstaller.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [media enhance-updater] (...) -- C:\Program Files (x86)\media enhance\media enhance-updater.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [PCHelpers1st] (...) -- C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe (.not file.) [0] =>PUP.OptimizerEliteMax

[MD5.00000000000000000000000000000000] [APT] [PCHelpers_period] (...) -- C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe (.not file.) [0] =>PUP.OptimizerEliteMax

[MD5.00000000000000000000000000000000] [APT] [The weDownload Manager-chromeinstaller] (...) -- C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-chromeinstaller.exe (.not file.) [0] =>PUP.weDownloadManager

[MD5.00000000000000000000000000000000] [APT] [The weDownload Manager-codedownloader] (...) -- C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-codedownloader.exe (.not file.) [0] =>PUP.weDownloadManager

[MD5.00000000000000000000000000000000] [APT] [The weDownload Manager-enabler] (...) -- C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-enabler.exe (.not file.) [0] =>PUP.weDownloadManager

[MD5.00000000000000000000000000000000] [APT] [The weDownload Manager-firefoxinstaller] (...) -- C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-firefoxinstaller.exe (.not file.) [0] =>PUP.weDownloadManager

[MD5.00000000000000000000000000000000] [APT] [The weDownload Manager-updater] (...) -- C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-updater.exe (.not file.) [0] =>PUP.weDownloadManager

O41 - Driver: (wStLib64) . (.StdLib - StdLib.) - C:\Windows\System32\drivers\wStLib64.sys =>PUP.LinkiDoo

O42 - Logiciel: NewPlayer - (.TUGUU SL.) [HKLM][64Bits] -- NewPlayer =>PUP.VAFPlayer

[HKCU\Software\Adorika]

[HKCU\Software\AppDataLow\Software\ViewPassword] =>PUP.ViewPassword

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]

[HKCU\Software\WeDlMngr] =>PUP.weDownloadManager

[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab

[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager

O43 - CFD: 25/03/2014 - 17:01:37 - [0] ----D C:\ProgramData\WPM =>PUP.WpManager

O43 - CFD: 25/03/2014 - 16:58:06 - [0] ----D C:\Users\arthuria\AppData\Roaming\SupTab =>PUP.SupTab

O43 - CFD: 24/03/2014 - 08:46:46 - [0,001] ----D C:\Users\arthuria\AppData\Local\Tuguu_SL =>PUP.VAFPlayer

O44 - LFC:[MD5.1F74AD9EF82FE78F7B328230B7F1A4E3] - 18/03/2014 - 07:46:27 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\wStLib64.sys [61112] =>PUP.LinkiDoo

O45 - LFCP:[MD5.05480EE8084364D9F33910522DAB67D2] - 19/03/2014 - 17:43:52 ---A- - C:\Windows\Prefetch\IMINENT_1712-B2FCAD5E.EXE-DFB19EE7.pf =>Adware.IMBooster

O45 - LFCP:[MD5.107FD1910A5B105925345BD3AD356B77] - 19/03/2014 - 17:44:05 ---A- - C:\Windows\Prefetch\IMINENTMINIBARIE.EXE-A27C1C77.pf =>PUP.Minibar

O45 - LFCP:[MD5.247194818CA5851B95E96E402AA6178C] - 21/03/2014 - 11:58:04 ---A- - C:\Windows\Prefetch\ANYPROTECT.EXE-53752276.pf =>PUP.AnyProtect

O58 - SDL:[MD5.1F74AD9EF82FE78F7B328230B7F1A4E3] - 18/03/2014 - 07:46:27 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\wStLib64.sys [61112] =>PUP.LinkiDoo

O61 - LFC: 24/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Tuguu_SL\NewPlayer.exe_Url_o4dtzvfairwgx2aefcjiiv2m5z1q0lha\2.1.1.2\user.config [1097] =>PUP.VAFPlayer

[HKLM\SYSTEM\CurrentControlSet\Services\NewPlayerUpdaterService] =>Adware.IncrediBar^

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\NewPlayer] =>PUP.VAFPlayer^

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro

[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro

C:\ProgramData\WPM =>PUP.WpManager^

C:\Users\arthuria\AppData\Roaming\SupTab =>PUP.SupTab^

C:\Users\arthuria\AppData\Local\Tuguu_SL =>PUP.VAFPlayer^

[HKCU\Software\AppDataLow\Software\ViewPassword] =>PUP.ViewPassword^

[HKCU\Software\WeDlMngr] =>PUP.weDownloadManager^

[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab^

[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^

O4 - GS\Desktop [Public]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline

O4 - GS\Program [Public]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

O4 - GS\QuickLaunch [arthuria]: IncrediMail 2.0.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

O4 - GS\TaskBar [arthuria]: File Explorer.lnk - Clé orpheline

O4 - GS\Desktop [arthuria]: Canon MG5300 series - Raccourci.lnk - Clé orpheline

[HKCU\Software\IM]

[HKCU\Software\IncrediMail]

[HKLM\Software\Wow6432Node\IncrediMail]

O43 - CFD: 04/03/2014 - 16:15:53 - [28,765] ----D C:\Program Files (x86)\IncrediMail

O43 - CFD: 04/03/2014 - 16:16:19 - [0] ----D C:\ProgramData\IM

O43 - CFD: 04/03/2014 - 16:15:53 - [6,716] ----D C:\ProgramData\IncrediMail

O43 - CFD: 04/03/2014 - 16:17:23 - [47,782] ----D C:\Users\arthuria\AppData\Local\IM

O43 - CFD: 24/03/2014 - 08:46:32 - [0] ----D C:\Users\arthuria\AppData\Local\newplayer

O44 - LFC:[MD5.91F19A48A1263EB63AC72A4810C490EB] - 21/03/2014 - 12:02:33 ---A- . (...) -- C:\AdwCleaner[S3].txt [497]

O44 - LFC:[MD5.745B6A0E00BE48EC39AEFAB2662C377C] - 21/03/2014 - 18:16:04 ---A- . (...) -- C:\AdwCleaner[R1].txt [1516]

O44 - LFC:[MD5.121925C23A65FF234503126782CCFF8F] - 21/03/2014 - 18:16:44 ---A- . (...) -- C:\AdwCleaner[S4].txt [288]

O44 - LFC:[MD5.92F9EB3212DBC5D6635E8F05DC656C41] - 21/03/2014 - 20:09:11 ---A- . (...) -- C:\AdwCleaner[S5].txt [1569]

O44 - LFC:[MD5.C784BB4C1BFBFC36AF5A63CF4833CD0C] - 25/03/2014 - 07:23:11 ---A- . (...) -- C:\AdwCleaner[R2].txt [1607]

O44 - LFC:[MD5.8FDC4A6011E500B29C92389BA1F1E490] - 25/03/2014 - 07:23:25 ---A- . (...) -- C:\AdwCleaner[S6].txt [288]

O44 - LFC:[MD5.9A31565340165A79BAB922A3E9BE93FF] - 25/03/2014 - 07:24:12 ---A- . (...) -- C:\AdwCleaner[S7].txt [1558]

O44 - LFC:[MD5.D86B52D610BF5F7DF2FBFE46B8AE09E6] - 25/03/2014 - 07:27:51 ---A- . (...) -- C:\AdwCleaner[R3].txt [1339]

O44 - LFC:[MD5.52C3E13D08E239E5F107E1F335143477] - 25/03/2014 - 17:10:59 ---A- . (...) -- C:\AdwCleaner[S8].txt [1401]

O44 - LFC:[MD5.E408F6B207F1C1FDDBB43B116AFA8C6A] - 27/03/2014 - 07:40:44 ---A- . (...) -- C:\AdwCleaner[S9].txt [1461]

O45 - LFCP:[MD5.6C836830D441EFADD8DA524C6487E47A] - 05/03/2014 - 13:27:25 ---A- - C:\Windows\Prefetch\INCREDIMAIL_INSTALL(1).EXE-9C7BC693.pf

O45 - LFCP:[MD5.FDC95D12D9181FD9AB35876F96453535] - 05/03/2014 - 13:28:31 ---A- - C:\Windows\Prefetch\INCREDIMAILSETUP_FR.EXE-49ED9DC0.pf

O45 - LFCP:[MD5.15A110C59D0AEF3448F3F0C69801CEC8] - 05/03/2014 - 15:54:11 ---A- - C:\Windows\Prefetch\ACVT.EXE-8C656B78.pf

O45 - LFCP:[MD5.FBC85855AB6E112B00B33B1394F4E254] - 08/03/2014 - 18:09:27 ---A- - C:\Windows\Prefetch\MAP.EXE-656D08CC.pf

O45 - LFCP:[MD5.8A0109A6D9FBC36CF3A863AD2BFDDA4A] - 12/03/2014 - 18:09:14 ---A- - C:\Windows\Prefetch\GLCND.EXE-02A191A6.pf

O45 - LFCP:[MD5.4C3C95EEADF977180E9EB7555F4A731A] - 14/03/2014 - 17:06:52 ---A- - C:\Windows\Prefetch\DOWNLOADMANAGER.EXE-42BF96FC.pf

O45 - LFCP:[MD5.BC4AA949F0FE3A9E0C90D771394C5232] - 14/03/2014 - 17:12:59 ---A- - C:\Windows\Prefetch\WLSETTINGS.EXE-D11431A8.pf

O45 - LFCP:[MD5.CE919DFF48233B2817CDADE8839C3FAD] - 17/03/2014 - 08:33:30 ---A- - C:\Windows\Prefetch\NETPLWIZ.EXE-AFF278BB.pf

O45 - LFCP:[MD5.DB65CD32851DCF0BF3F169F093F4CCDC] - 17/03/2014 - 16:48:13 ---A- - C:\Windows\Prefetch\TAPTILES.EXE-15768344.pf

O45 - LFCP:[MD5.926BA993AB00C7CD08BDAEFDE52079A4] - 17/03/2014 - 16:48:24 ---A- - C:\Windows\Prefetch\AUTHHOST.EXE-44C90B62.pf

O45 - LFCP:[MD5.FAAFDA437105164A36BE7562809D5376] - 18/03/2014 - 15:31:03 ---A- - C:\Windows\Prefetch\SETUP(1).EXE-80D4E32D.pf

O45 - LFCP:[MD5.A4057A8F6E23F5729553EFF613D2A08E] - 18/03/2014 - 15:31:08 ---A- - C:\Windows\Prefetch\SPIDENTIFIERIMPL.EXE-E4683242.pf

O45 - LFCP:[MD5.6A1E9E54BB9BBF6CC3325A53747D87A4] - 18/03/2014 - 15:32:50 ---A- - C:\Windows\Prefetch\ZZOPVEHNWKPIZH.EXE-DC6C2813.pf

O45 - LFCP:[MD5.24631A2A2C3DCD7BEA339A448F8BD3A1] - 19/03/2014 - 17:43:27 ---A- - C:\Windows\Prefetch\S1622.EXE-5CBA335A.pf

O45 - LFCP:[MD5.C1D66729FC0A4C8F35370EA967667559] - 19/03/2014 - 17:44:03 ---A- - C:\Windows\Prefetch\METRO.EXE-A1B1AD6E.pf

O45 - LFCP:[MD5.1842B3E0660BD27968B0AF7B121E2630] - 19/03/2014 - 17:44:04 ---A- - C:\Windows\Prefetch\IEXPLOREINSTALLER.EXE-F7616620.pf

O45 - LFCP:[MD5.6F676EE939560A70631834F65E4F8F0D] - 19/03/2014 - 17:45:18 ---A- - C:\Windows\Prefetch\XTLSAPP.EXE-7E8224B3.pf

O45 - LFCP:[MD5.66F242BD68D86CF01EE91FD9632AAF06] - 19/03/2014 - 17:45:19 ---A- - C:\Windows\Prefetch\FILTERAPP_C64.EXE-ED73B25E.pf

O45 - LFCP:[MD5.06DA139D42C6737BB65797568AF8FB0C] - 19/03/2014 - 18:12:06 ---A- - C:\Windows\Prefetch\UMBRELLA228.EXE-2BB0C047.pf

O45 - LFCP:[MD5.493C6798B9BA0C8EF39BC28D7FC824D2] - 20/03/2014 - 08:18:08 ---A- - C:\Windows\Prefetch\AIRAB4F.TMP-8F0695C6.pf

O45 - LFCP:[MD5.998F79DF639BD207507C9B192348D94B] - 20/03/2014 - 08:44:00 ---A- - C:\Windows\Prefetch\SPIDENTIFIERIMPL.EXE-41220DBC.pf

O45 - LFCP:[MD5.601B6EB5A8E6279BD98CE4946B1E7A61] - 21/03/2014 - 11:53:10 ---A- - C:\Windows\Prefetch\SPIDENTIFIERIMPL.EXE-43B7B568.pf

O45 - LFCP:[MD5.F28C89B15CF57E5E4D09596D00A21F12] - 21/03/2014 - 16:47:38 ---A- - C:\Windows\Prefetch\S7921.EXE-9817572A.pf

O45 - LFCP:[MD5.2F943D23597A2D27EEFA9BB70EC8FAA7] - 21/03/2014 - 16:49:37 ---A- - C:\Windows\Prefetch\SSUPSETUP_SBINSTALL2_SBINSTAL-421C7C88.pf

O45 - LFCP:[MD5.0A1BB38DA9C64BD3456DBC298BDB3380] - 21/03/2014 - 16:50:46 ---A- - C:\Windows\Prefetch\POWERSUITE-STANDALONE-SETUP.T-91CE5397.pf

O45 - LFCP:[MD5.F38B0D1F38635DA7651641899C049C3A] - 21/03/2014 - 17:33:10 ---A- - C:\Windows\Prefetch\VIEW-.EXE-95653237.pf

O45 - LFCP:[MD5.E62D6D13A3ED449E2DBDF99A2ADB530A] - 22/03/2014 - 15:26:59 ---A- - C:\Windows\Prefetch\SYSTEMSETTINGS.EXE-D8CC3B5E.pf

O45 - LFCP:[MD5.074384235633224CEF460433D2461BB8] - 22/03/2014 - 16:12:25 ---A- - C:\Windows\Prefetch\IS-C9BNN.TMP-CBA7E92F.pf

O45 - LFCP:[MD5.C8B775BBF5CC9645ADA4F7ACC9F34BDD] - 23/03/2014 - 16:45:14 ---A- - C:\Windows\Prefetch\INCREDIMAILSETUP_EN.EXE-400A63C5.pf

O45 - LFCP:[MD5.1F43F05E72DA973838110B5D41945629] - 23/03/2014 - 19:33:16 ---A- - C:\Windows\Prefetch\dynreservedpri.db

O45 - LFCP:[MD5.79D8D9672FF67B06F7EC035D6CFC4DA0] - 24/03/2014 - 08:45:07 ---A- - C:\Windows\Prefetch\SPIDENTIFIERIMPL.EXE-DA98F1F2.pf

O45 - LFCP:[MD5.95CDCF57C6B27CD2367166E26B84556C] - 24/03/2014 - 08:46:41 ---A- - C:\Windows\Prefetch\NEWPLAYER.EXE-F964A449.pf

O45 - LFCP:[MD5.C1B46948D4FA828095D69A6738BC69DD] - 24/03/2014 - 16:26:29 ---A- - C:\Windows\Prefetch\IMPCNT.EXE-67FEADF0.pf

O45 - LFCP:[MD5.67269F345363253ECF170AF4AAB8BFBF] - 25/03/2014 - 07:26:02 ---A- - C:\Windows\Prefetch\RSHP.EXE-AB399207.pf

O45 - LFCP:[MD5.D03871B5FD4B14B0837635D76D5E4A88] - 25/03/2014 - 17:12:47 ---A- - C:\Windows\Prefetch\VIAKARAOKESRV.EXE-9E0A015F.pf

O45 - LFCP:[MD5.487B87C183451EAC47DEBD8716568A0E] - 25/03/2014 - 18:01:38 ---A- - C:\Windows\Prefetch\LIFEFRAME.EXE-1B925FC4.pf

O45 - LFCP:[MD5.C0565EC79422DA98EB0383A8F8631D2A] - 26/03/2014 - 06:52:07 ---A- - C:\Windows\Prefetch\GLCND.EXE-365E148A.pf

O45 - LFCP:[MD5.9AAC048ABAA2BF192DBDD3079C8D6E6C] - 26/03/2014 - 17:08:47 ---A- - C:\Windows\Prefetch\MAHJONGG.EXE-7BABDC9C.pf

O45 - LFCP:[MD5.3DE9DF9F362A05C00CC702BE5B2A5883] - 27/03/2014 - 06:50:32 ---A- - C:\Windows\Prefetch\MY_INTEL_CPP_X64.EXE-1A95AA96.pf

O45 - LFCP:[MD5.CD4EC872F2F2101A9B7DAB8219D4F0E1] - 27/03/2014 - 06:50:52 ---A- - C:\Windows\Prefetch\IMLPP.EXE-468937FB.pf

O45 - LFCP:[MD5.00E4184AA4665DEB29D9CFB1EFE42CB8] - 27/03/2014 - 06:51:00 ---A- - C:\Windows\Prefetch\INCMAIL.EXE-32F9B55A.pf

O45 - LFCP:[MD5.0B4D8190A5340A7FCF121F61B167555A] - 27/03/2014 - 06:51:01 ---A- - C:\Windows\Prefetch\IMAPP.EXE-BB8E10B4.pf

O45 - LFCP:[MD5.EFC557AAF5FBA3F9148F15B1064D91FB] - 27/03/2014 - 06:51:19 ---A- - C:\Windows\Prefetch\IMNOTFY.EXE-8DBD7167.pf

O45 - LFCP:[MD5.287FED2B79B8D770A80706750C923762] - 27/03/2014 - 07:11:16 ---A- - C:\Windows\Prefetch\AGENTSVR.EXE-F5296855.pf

O45 - LFCP:[MD5.AEEF61F7620D8B37CB89ED360F5403F7] - 27/03/2014 - 07:40:33 ---A- - C:\Windows\Prefetch\IMBPP.EXE-3C8D9FE9.pf

O45 - LFCP:[MD5.F9D4F8515D904E44239ADA2ACC81D485] - 27/03/2014 - 07:41:12 ---A- - C:\Windows\Prefetch\PfPre_b4e98e6c.db

O45 - LFCP:[MD5.C9DC1369FDD456506F64CE295F7D4C41] - 27/03/2014 - 07:43:04 ---A- - C:\Windows\Prefetch\NEWPLAYERUPDATERSERVICE.EXE-FF9428BF.pf

O45 - LFCP:[MD5.4DFAF2598DBB55C3F911DD8A5450FB17] - 27/03/2014 - 07:43:32 ---A- - C:\Windows\Prefetch\WSHOST.EXE-05F0A3AF.pf

O61 - LFC: 24/03/2014 - 08:10:01 ----- . (...) -- C:\Users\arthuria\AppData\Local\IM\Animation\pazel.ima [20586]

O61 - LFC: 24/03/2014 - 08:10:01 ----- . (...) -- C:\Users\arthuria\AppData\Local\IM\Animation\turning_page.ima [17961]

O61 - LFC: 24/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{26BA57A3-D88A-4638-BA7D-D21A28E2D8F3}\msg.iml [5548]

O61 - LFC: 24/03/2014 - 08:10:05 ----- . (...) -- C:\Users\arthuria\AppData\Local\IM\Letter\blue.imf [42981]

O61 - LFC: 24/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{3AAE563A-CAD7-4620-AEBA-618B682DEDAE}\msg.iml [5548]

O61 - LFC: 24/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{A040EA2D-5D47-450B-AD96-7F4935DC6ECF}\msg.iml [68560]

O61 - LFC: 24/03/2014 - 08:10:06 ----- . (...) -- C:\Users\arthuria\AppData\Local\IM\Letter\congratulations.imf [9046]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\ImageThumbnail\PAD904FB-BEFE-40AA-AAAA-AAAAAAAAAAAA\thumb.bmp [13230]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\68D40B96-F65D-4374-AF8E-B45987580C7C\43DABB8D-26C5-4625-B64D-6727A4F77685.htm [48942]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\68D40B96-F65D-4374-AF8E-B45987580C7C\57A75766-372C-48F6-B532-E0E8FFD2BCAF.htm [49086]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\68D40B96-F65D-4374-AF8E-B45987580C7C\5C0A76B1-33F1-4FA9-9AD0-A4ECAAB5C7CC.htm [49122]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\PM203773-8928-45AA-AAAA-AAAAAAAAAAAA\451C8730-2172-401F-8398-D8E95C434ACD.htm [60688]

O61 - LFC: 24/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\PM203773-8928-45AA-AAAA-AAAAAAAAAAAA\897E08C1-3530-43E4-964A-C2D5E29B93C5.htm [60508]

O61 - LFC: 24/03/2014 - 08:10:08 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\LetterThumbnail\68D40B96-F65D-4374-AF8E-B45987580C7C\Thumbnail.bmp [24654]

O61 - LFC: 24/03/2014 - 08:10:08 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\LetterThumbnail\PM281617-5667-16AA-AAAA-AAAAAAAAAAAA\thumb.bmp [24654]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{249973E7-5ED9-4372-A254-A8C77A281414}\Show\textPartPrev.html [252]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{29693329-3C9C-423E-964C-A845AADA2F9F}\Show\noScriptHtmlStr_Prev(null)_7.htm [22716]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{29693329-3C9C-423E-964C-A845AADA2F9F}\Show\noScriptHtmlStr_Prev_block(null)_7.htm [20228]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{2C7E1BAD-3682-40BD-A76A-DF2E5452E6F9}\Show\noScriptHtmlStr_Prev(null)_7.htm [15916]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{39DB802C-5DC1-4763-AE06-A95F72116D00}\Show\noScriptHtmlStr_Prev(null)_7.htm [18986]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{39DB802C-5DC1-4763-AE06-A95F72116D00}\Show\noScriptHtmlStr_Prev_block(null)_7.htm [17916]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{3AAE563A-CAD7-4620-AEBA-618B682DEDAE}\Show\noScriptHtmlStr_Prev(null)_7.htm [4522]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{42E40235-A327-4C91-A4A6-7A05C2F59EF9}\Show\noScriptHtmlStr_Prev(null)_7.htm [1526]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{4B27CAB4-1457-45D0-8DD0-390173988A72}\Show\noScriptHtmlStr_Prev(null)_7.htm [4518]

O61 - LFC: 24/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{5986E3FD-C150-48DF-8399-88E26FA3D2A2}\Show\noScriptHtmlStr_Prev(null)_7.htm [7294]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{75AE96BD-743B-41FE-A0DB-9D07D99BCE61}\Show\noScriptHtmlStr_Prev(null)_7.htm [21918]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{A040EA2D-5D47-450B-AD96-7F4935DC6ECF}\Show\noScriptHtmlStr_Prev(null)_7.htm [15916]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{A7F7E824-E59C-4E5B-B6A0-903AF1E2BB80}\Show\noScriptHtmlStr_Prev(null)_9.htm [10890]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{D076D13B-89A7-4762-945B-45F16BA58764}\Show\noScriptHtmlStr_Prev(null)_7.htm [11368]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{D60DC196-25BF-4D90-9402-2DDADA940751}\Show\noScriptHtmlStr_Prev(null)_7.htm [21918]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{E9EE36FE-E5D1-41D4-AEB3-A9821542849F}\New\noScriptHtmlStr(null)_8.htm [66850]

O61 - LFC: 24/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Resource\Features\free_add_your_photo_animation12.bmp [17946]

O61 - LFC: 25/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Lex\private.tlx [755]

O61 - LFC: 25/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{247673C3-EB0E-45FD-9E87-827FBED135EB}\msg.iml [73597]

O61 - LFC: 25/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\Thumbnails\IMG_0135.JPG_thumb.bmp [24174]

O61 - LFC: 25/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\Thumbnails\IMG_0136.JPG_thumb.bmp [24174]

O61 - LFC: 25/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\msg.iml [176323]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\Thumbnails\IMG_0144.JPG_thumb.bmp [24174]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{42E40235-A327-4C91-A4A6-7A05C2F59EF9}\msg.iml [2464]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{73A10F7C-FDB3-4E30-B603-FE2FE53DC3E0}\msg.iml [30331]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{84321427-8695-4EC0-A029-3121057DFC52}\msg.iml [1440]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{A4B6878A-9CB1-4B0D-A975-785B5F686C0D}\msg.iml [82821]

O61 - LFC: 25/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{F238C8B8-3E7E-498F-9973-C44FC9562589}\msg.iml [71320]

O61 - LFC: 25/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\68D40B96-F65D-4374-AF8E-B45987580C7C\CB153C48-419A-409B-A521-BF89CC9CB056.htm [49086]

O61 - LFC: 25/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\6B1EAB49-FE46-FC5C-2749-62C18B12FBD5\642957C9-A8E7-4804-8F3B-E52818E4ECB6.htm [50464]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\8AEEB4BF-F8E8-41E1-979C-2CDCB58E8CBE.htm [87460]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{1B43669E-6EDF-4CBD-BD38-7C58C261BC90}\Show\noScriptHtmlStr_Prev(null)_7.htm [1522]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{1B43669E-6EDF-4CBD-BD38-7C58C261BC90}\Show\noScriptHtmlStr_Prev(null)_9.htm [10890]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{247673C3-EB0E-45FD-9E87-827FBED135EB}\Show\noScriptHtmlStr_Prev(null)_7.htm [24408]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{2D43A449-9467-4738-A844-DAA255164162}\Show\noScriptHtmlStr_Prev(null)_7.htm [9730]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\Show\noScriptHtmlStr_Prev(null)_7.htm [9774]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{3AAE563A-CAD7-4620-AEBA-618B682DEDAE}\Show\noScriptHtmlStrWarn__Prev(null)_7.htm [1018]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{3AAE563A-CAD7-4620-AEBA-618B682DEDAE}\Show\noScriptHtmlStr_Prev_block(null)_9.htm [10890]

O61 - LFC: 25/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{423196A3-80AE-46B3-A499-158979765FE2}\Show\noScriptHtmlStr_PrevOK_7.htm [2108]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{73A10F7C-FDB3-4E30-B603-FE2FE53DC3E0}\Forward\noScriptHtmlStr(null)_8.htm [68732]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{73A10F7C-FDB3-4E30-B603-FE2FE53DC3E0}\Show\noScriptHtmlStr_Prev(null)_7.htm [42024]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{9E8256D1-6554-4054-8FF5-38FC851E99F9}\Show\textPartPrev.html [1726]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{C268BFE6-935B-4DD7-8EA0-5173AB8D295A}\Show\noScriptHtmlStr_Prev(null)_7.htm [1526]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{C784B7DC-F69F-4CD8-9ADA-D27821ABC735}\Show\noScriptHtmlStr_Prev(null)_7.htm [7036]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{F114B30C-124B-4AD6-8DD6-C07E2D45E49E}\Show\161.gif_thumb.bmp [24174]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{F114B30C-124B-4AD6-8DD6-C07E2D45E49E}\Show\noScriptHtmlStr_Prev(null)_7.htm [12666]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{F238C8B8-3E7E-498F-9973-C44FC9562589}\Show\161.gif_thumb.bmp [24174]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{F238C8B8-3E7E-498F-9973-C44FC9562589}\Show\noScriptHtmlStr_Prev(null)_7.htm [19464]

O61 - LFC: 25/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{F238C8B8-3E7E-498F-9973-C44FC9562589}\Show\noScriptHtmlStr_Prev(null)_9.htm [10890]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_gg_1000s_best_email_bg[1].swf [48443]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_gg_upgrade_to_gold[1].swf [26786]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_gold_necktie[1].swf [5948]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_plus_get_more[1].swf [16131]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_plus_incredibackup[1].swf [11810]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_potection_center_inbox[1].swf [11896]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_potection_center_spam[1].swf [12911]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_premium_full_service[1].swf [22448]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_premium_gives_more_chubycons[1].swf [13108]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\234x60_red_remove_ad_plus[1].swf [17241]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\gg_mx[1].swf [40197]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\incredimail_left2_gold_234x60[1].swf [14435]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{D48362CB-0E8B-4A1D-A360-C34C11220108}\incredimail_left_gold_234x60[1].swf [30464]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{29C22006-6FC8-4EDB-9E18-C6B2799B7DDB}\msg.iml [11260]

O61 - LFC: 26/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{2F2C9901-31DB-462B-BFAF-F7695CA9B10D}\msg.iml [2984]

O61 - LFC: 26/03/2014 - 08:10:04 R--A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{2F2C9901-31DB-462B-BFAF-F7695CA9B10D}\Attachments\Vous_ne_pourrez_pas_deviner_ce_que_c.pdf [296848]

O61 - LFC: 26/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{4A6370F5-F0D8-4CEF-BB08-21CF8E983F73}\msg.iml [100353]

O61 - LFC: 26/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{ECA03DB1-9DE4-4E4A-9261-5FD9B42A50D5}\msg.iml [80131]

O61 - LFC: 26/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{EF61A0E7-6F40-4333-BA05-94E9ECA114AA}\msg.iml [2494]

O61 - LFC: 26/03/2014 - 08:10:05 R--A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{4A6370F5-F0D8-4CEF-BB08-21CF8E983F73}\Attachments\Vous_ne_pourrez_pas_deviner_ce_que_c.pdf [296848]

O61 - LFC: 26/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\67B503DA-2B60-399A-CFDF-5449589EA8F1\7A0BA447-9792-4101-9118-0E9C31BCE8F3.htm [50816]

O61 - LFC: 26/03/2014 - 08:10:07 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Letter\67B503DA-2B60-399A-CFDF-5449589EA8F1\C6FE9DA9-ACC7-4AE7-AAF5-A56DA2573615.htm [51610]

O61 - LFC: 26/03/2014 - 08:10:08 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\1CE5E916-43F6-4DC4-8480-E01C309789A1.htm [48756]

O61 - LFC: 26/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{2F2C9901-31DB-462B-BFAF-F7695CA9B10D}\Show\noScriptHtmlStr_Prev(null)_7.htm [1568]

O61 - LFC: 26/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{4866A3DC-C653-4BF6-A4BA-4284B81C8CE8}\Show\noScriptHtmlStr_Prev(null)_9.htm [10890]

O61 - LFC: 26/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{EF61A0E7-6F40-4333-BA05-94E9ECA114AA}\Show\noScriptHtmlStr_Prev(null)_7.htm [1522]

O61 - LFC: 26/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{EF61A0E7-6F40-4333-BA05-94E9ECA114AA}\Show\noScriptHtmlStr_Prev(null)_9.htm [10890]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imv2FC6.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imv47F3.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imv632C.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imv7156.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imv896.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imvB8A1.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imvF703.htm [78]

O61 - LFC: 26/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\IM\imvF733.htm [78]

O61 - LFC: 27/03/2014 - 08:10:01 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\content.xml [22845]

O61 - LFC: 27/03/2014 - 08:10:03 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\AccountsOrder.dat [40]

O61 - LFC: 27/03/2014 - 08:10:03 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\AddressBook\AddrBook.db3 [119808]

O61 - LFC: 27/03/2014 - 08:10:03 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\AddressBook\AddrBook.db3.bak [119808]

O61 - LFC: 27/03/2014 - 08:10:03 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\IMSys\{09839FAD-7FFF-417F-9614-D1B5C38A7C08}\101\incredicenter_v2.bmp [5348]

O61 - LFC: 27/03/2014 - 08:10:03 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\imsl.dat [8354]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\history.ix [66354]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_d_1.ix [131072]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_di_1.ix [65536]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_i_24.ix [790]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_k_24.ix [65536]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_kl_1.ix [786432]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_klh_24.ix [394]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_r_1.ix [85792]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\index_v.ix [284]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexB\indexlog.dat [2768]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\history.ix [336711]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_d_1.ix [131072]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_di_1.ix [65536]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_i_119.ix [1215]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_k_119.ix [65536]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_kl_1.ix [663552]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_klh_119.ix [322]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_r_1.ix [57093]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\index_v.ix [289]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\IndexH\indexlog.dat [2732]

O61 - LFC: 27/03/2014 - 08:10:04 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{13E143BD-9277-4376-8D0B-73F2A40499CF}\msg.iml [73689]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\MessageStore.db [128000]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{35556D52-20D9-4E68-B371-BFD8CEE78A57}\Thumbnails\IMG_0143.JPG_thumb.bmp [24174]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{46190692-4849-4BE5-B81B-622206597E6D}\msg.iml [2053]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{464BF8E9-A5A9-408C-B74B-AEF152B46721}\msg.iml [2558]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{717D7F39-CE2B-4AF2-BC3E-BDAB1BBDB521}\msg.iml [100445]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{71AE2BB3-E3BC-4FC2-A8F4-D80C8AFDC37B}\msg.iml [1581]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{AD76C9BE-3CD1-4C78-925A-6B6A379D3E17}\msg.iml [2496]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{D191ACBA-086A-4F14-B266-FFE9A2A92215}\msg.iml [3079]

O61 - LFC: 27/03/2014 - 08:10:05 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{ECEF2A3A-BE8D-4CDA-AE1D-255530B897C6}\msg.iml [82913]

O61 - LFC: 27/03/2014 - 08:10:05 R--A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{46190692-4849-4BE5-B81B-622206597E6D}\Attachments\Bastler_unterwegs.pps [3272192]

O61 - LFC: 27/03/2014 - 08:10:05 R--A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{717D7F39-CE2B-4AF2-BC3E-BDAB1BBDB521}\Attachments\Vous_ne_pourrez_pas_deviner_ce_que_c.pdf [296848]

O61 - LFC: 27/03/2014 - 08:10:05 R--A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Identities\{64CC82DB-8390-49D1-9515-54C1230F7712}\Message Store\Messages\1\{71AE2BB3-E3BC-4FC2-A8F4-D80C8AFDC37B}\Attachments\ATTFE0E.txt [162]

O61 - LFC: 27/03/2014 - 08:10:09 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{46190692-4849-4BE5-B81B-622206597E6D}\Show\textPartPrev.html [288]

O61 - LFC: 27/03/2014 - 08:10:10 ---A- . (...) -- C:\Users\arthuria\AppData\Local\IM\Runtime\Message\{AD76C9BE-3CD1-4C78-925A-6B6A379D3E17}\Show\noScriptHtmlStr_Prev(null)_7.htm [1522]

O61 - LFC: 27/03/2014 - 08:10:21 ---A- . (...) -- C:\Users\arthuria\AppData\Local\Temp\Uninst.bat [649]

O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- firefox.exe (.not file.)

O87 - FAEL: "{9A89FF9F-39BB-47CD-8FD4-8AB655EFFD8C}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe

O87 - FAEL: "{E0542C12-C4E3-49EE-B7E8-05585BD73052}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe

O87 - FAEL: "{76EB9865-DFD5-438D-9ED1-8E5231B180BA}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

O87 - FAEL: "{B1BDFCE5-352B-4B4E-9463-57ADB5058BDE}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

O87 - FAEL: "{8661FDE4-334F-491F-9EB3-41649A3DB292}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe

O87 - FAEL: "{BD565D76-8BFF-4912-A94D-185DC8ECD794}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe

[MD5.3B662692BC88E7E39DD8B93B59EEBAAE] [WIS][22/03/2014] (.IncrediMail - IncrediMail.) -- C:\Windows\Installer\969d25.msi [2710016]

Superflu (221)

Ecrivez votre message ici

Salut,

On y arrive, il reste ne reste plus que 2 lignes d'un PUP (ZHPfix ne l'a visiblement pas viré...) et les restes d'une toolbar inutile...

1) Télécharge http://www.bleepingcomputer.com/download/junkware-...

- Exécute JRT "en tant q'administrateur", appuie sur une touche quand il le demande et attends le rapport.

- Patience, pour un petit outil, je trouve que le scan est assez long... Bien 10 min je crois...

2) Relance ZHPFix, bouton Importer, colle les lignes ci-dessous et GO !

Script ZHPFix

O44 - LFC:[MD5.1F74AD9EF82FE78F7B328230B7F1A4E3] - 18/03/2014 - 07:46:27 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\wStLib64.sys [61112] =>PUP.LinkiDoo

O58 - SDL:[MD5.1F74AD9EF82FE78F7B328230B7F1A4E3] - 18/03/2014 - 07:46:27 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\wStLib64.sys [61112] =>PUP.LinkiDoo

O43 - CFD: 24/03/2014 - 08:45:06 - [0] ----D C:\Users\arthuria\AppData\Local\SearchProtect =>Toolbar.Conduit

O45 - LFCP:[MD5.BC7C5F658928990BF1D6FEC5EF6723F0] - 22/03/2014 - 16:11:49 ---A- - C:\Windows\Prefetch\SOFTONICDOWNLOADER_POUR_MY-FR-427B7414.pf =>Toolbar.Conduit

C:\Users\arthuria\AppData\Local\SearchProtect =>Toolbar.Conduit^

3) Poste un rapport ZHPDiag et le rapport JRT qui est sur ton bureau. 

4) Je te suggère d'installer http://www.filehippo.com/download_ccleaner/downloa...

- Utilise les onglets "Nettoyeur" et "Registre" de CCleaner pour faire le ménage sur ton disque et réparer les erreurs registre.

- Un tutoriel ici: http://www.vulgarisation-informatique.com/nettoyer...

- Garde ce logiciel pour nettoyer de temps à autre ton PC et registre.

5) J'ai grand espoir que ce soit terminé. 

Bon courage, a+

Salut,

Super. Pour finir, tu peux encore suivre ce tuto: http://www.commentcamarche.net/faq/34769-desactive...

En désactivant la restauration du système, on supprime tous les points de restauration probablement vérolés.

En la réactivant ensuite, on créer un point de restauration sain. 

Je pense que tu peux mettre le topic en "Résolu".

Bon Dimanche à toi.