Ordinateur infecté

platinium · le 17 avril 2014

Bonjour,

Suite à un message ouvert :

Software - Windows 7 - Ecran bleu de la mort - Windows 7

On m'a demandé de venir dans cette partie en premier lieu car mon ordinateur est infecté.

voici un premier rapport :

http://cjoint.com/?DDkuXioEw9j

Merci pour votre aide

Platinium

Apollo · le 17 avril 2014

Bonjour,

1) Télécharge Junkware Removal Tool sur le bureau: http://www.bleepingcomputer.com/download/junkware-removal-tool/

Site éditeur: http://thisisudax.org/

Sous XP, double-clique sur l'icône et presse une touche lorsque cela sera demandé.

Sous Vista/7/8, clic droit/exécuter en temps qu'administrateur.

L'outil peut demander si on souhaite vérifier la présence d'une nouvelle version Y/N >> taper Y.
S'il découvre une version obsolète, il le dira et devrez presser une touche. L'outil se fermera.

JRT_New sera créé sur le bureau;

Jette l'ancien JRT et renomme JRT_New en JRT .

Si c'est déjà la bonne version , il commencera sa recherche de malwares normalement. Patience svp.

Afin de ne pas fausser le rapport, ne passer l'outil qu'une seule fois svp!

Si l'antivirus fait des siennes: désactive-le provisoirement. Si tu ne sais pas comment faire, reporte-toi à cet article.

Poste le rapport généré à la fin de l'analyse.

NB: Le bureau disparaitra un instant, c'est normal.

>>>Si le rapport est long, l'héberger ici: http://cjoint.com ou http://dl.free.fr/

------------------------------
*** Si tu as une ancienne version d'AdwCleaner, lance-le et clique sur désinstaller.***

2) Télécharge AdwCleaner par Xplode: http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner

Enregistre-le sur le bureau (et pas ailleurs).

Afin de ne pas fausser le rapport, ne passer l'outil qu'une seule fois svp!

Si tu es sous XP double clique sur AdwCleaner pour lancer l'outil.
Si tu es sous Vista/Seven, clique droit sur AdwCleaner et choisis exécuter en temps qu'administrateur.

Clique sur Scanner et laisse travailler l'outil.

Cliquer sur Nettoyer, le bouton sera accessible.

Le rapport va s'ouvrir en fichier texte; copie la totalité de son contenu et colle-le dans ta réponse.

Le rapport est en outre sauvegardé sous C:\AdwCleaner[s0]

NB: Si l'outil "cale" en mode normal, le lancer en mode sans échec: http://www.vista-xp.fr/forum/topic93.html

A lire absolument: http://www.vista-xp.fr/forum/topic5482.html
http://www.vista-xp.fr/forum/topic10389.html

-------------------------

@++

platinium · le 17 avril 2014

Voici le résultat du scan:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Berthalie on 17/04/2014 at 17:18:27,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3004627E-F8E9-4E8B-909D-316753CBA923}
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortapp.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escorteng.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortlbr.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\esrv.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\mysearchdial
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installcore
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\esrv.mysearchdialesrvc
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\esrv.mysearchdialesrvc.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialappcore
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialappcore.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialdskbnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialdskbnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialhlpr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialhlpr.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_pour_getdataback-for-ntfs_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_pour_getdataback-for-ntfs_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_getdataback-for-ntfs_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_getdataback-for-ntfs_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A37E4D24-D27B-4851-A3DB-8004E9B14C66}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{A37E4D24-D27B-4851-A3DB-8004E9B14C66}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}

~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\shoE3F8.tmp

~~~ Folders

Successfully deleted: [Folder] "C:\Users\Berthalie\AppData\Roaming\file scout"
Successfully deleted: [Folder] "C:\Users\Berthalie\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Users\Berthalie\AppData\Roaming\mysearchdial"
Successfully deleted: [Folder] "C:\Users\Berthalie\appdata\locallow\smartbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\mysearchdial"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{1D6D1C31-2C32-4933-8120-55BCCD918119}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{36133C35-C256-4B97-8DB5-1B1AC278AD6F}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{3A8F170A-E65D-4238-8E20-7419F0421492}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{664884C5-58F0-4CB4-AB24-51E3DC0292B9}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{686586E5-7380-4EC1-A51D-92EC7CD578D4}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{6DDE13FA-181C-44C0-BCCA-21BB8FE48C87}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{8DBAE903-7821-45F0-B591-B58F225E8FEC}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{952AD7AF-6BBE-4C2C-89BB-06E44D8B5696}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{A1829961-4477-45F1-9737-E904FDBF9023}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{B471072A-7EC8-41AC-87F1-9578AE48440B}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{BF6C8F99-A2D8-4A9B-9F80-186F8DC2B072}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{C659B0F1-33C2-4236-A3E7-E42689134956}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{C9A3CDDA-15E8-46B4-94E5-BCE38C619D93}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{CACD7879-D037-4E83-BC9F-4FC217207FD7}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{E04E8A80-A99F-4559-A930-047BC8826214}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{E292CBE5-3601-4AC7-86E9-5C841868FEE2}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{E3393FDD-18D7-405E-B2DC-221F8FE178C4}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{E7A12FA3-3004-4500-9B1B-0193DDC35C26}
Successfully deleted: [Empty Folder] C:\Users\Berthalie\appdata\local\{E92F2B32-9B6A-499C-BEF1-1CC4177AD26C}

~~~ FireFox

Emptied folder: C:\Users\Berthalie\AppData\Roaming\mozilla\firefox\profiles\4dajxhn7.default\minidumps [6 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17/04/2014 at 17:23:31,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Apollo · le 17 avril 2014

re,

Ne jamais rien télécharger sur Softonic, 01.net, telecharger.com, Ask, EoRezo etc.
Va toujours chez l'éditeur ou à la rigueur sur PC Astuces qui est resté un site propre.

J'attends donc le rapport AdwCleaner.

platinium · le 17 avril 2014

Merci pour ces informations je ne savais pas du tout.

J'avais tendance effectivement à télécharger sur ces sites lorsque j'avais un problème.

J'ai essayé de me débrouiller seul mais j'ai fait pire que mieux.

Voici le rapport de Adw cleaner:

# AdwCleaner v3.023 - Rapport créé le 17/04/2014 à 21:48:27
# Mis à jour le 01/04/2014 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Berthalie - BERTHALIE-HP
# Exécuté depuis : C:\Users\Berthalie\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

[#] Service Supprimé : Update Mega Browse
[#] Service Supprimé : Util Mega Browse

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Program Files (x86)\HiDefMedia
Dossier Supprimé : C:\Program Files (x86)\LPT
[!] Dossier Supprimé : C:\Program Files (x86)\Mega Browse
Dossier Supprimé : C:\Users\Berthalie\AppData\Local\LPT
Dossier Supprimé : C:\Users\Berthalie\AppData\Local\Smartbar
Dossier Supprimé : C:\Users\Berthalie\AppData\Roaming\Tlapia
Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk
Fichier Supprimé : C:\Users\Berthalie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
Fichier Supprimé : C:\Windows\Tasks\MySearchDial.job
Fichier Supprimé : C:\Windows\System32\Tasks\MySearchDial

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\*\shell\filescout
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Clé Supprimée : HKLM\Software\Vittalia

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16866

Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [start Page]

-\\ Mozilla Firefox v28.0 (fr)

[ Fichier : C:\Users\Berthalie\AppData\Roaming\Mozilla\Firefox\Profiles\4dajxhn7.default\prefs.js ]

-\\ Google Chrome v34.0.1847.116

[ Fichier : C:\Users\Berthalie\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [5744 octets] - [17/04/2014 21:47:42]
AdwCleaner[s0].txt - [4982 octets] - [17/04/2014 21:48:27]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [5042 octets] ##########

platinium · le 17 avril 2014

PS : le rapport marque Mega browse comme supprimé mais les fenêtres Mega browse s'ouvrent encore.

Apollo · le 17 avril 2014

Ben oui, ces sites ne savent plus quoi faire pour gagner toujours plus de fric; ils modifient les programmes des autres (même des programmes de désinfection!) et y insèrent un petit espion pour t'envoyer de la pub (spam) ou un détournement de navigateur... vers leurs pourritures. Ils me dégoûtent.

1) Télécharger SFTGC.exe sur le Bureau >>>> il ne peut pas être ailleurs! L'y déplacer si nécessaire.

Fermer les applications et navigateurs.

Sous XP, double cliquer sur le fichier.
Sous les autres versions de Windows, clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.

Après l'initialisation, cliquer sur Go pour lancer le nettoyage.

Si l'antivirus chicane, désactive-le provisoirement. . Si tu ne sais pas comment faire, reporte-toi à cet article.

Un rapport va s'ouvrir à la fin.
Ce rapport est sur le bureau (SFTGC.txt)

Héberger sur http://cjoint.com pour ne pas planter le sujet. ou http://dl.free.fr/

--------------------------

Fais une analyse Complète (Personnalisée) après le scan rapide. Avec MBAM 2.0.

2) Télécharger MalwareBytes Antimalware sur le bureau. http://fr.malwarebytes.org/

MBAM 2.0 captures d'écran: http://theknitter-apollo.xooit.com/t3536-MBAM-2-0-Captures-d-cran.htm

http://www.pcastuces.com/logitheque/malwarebytes_anti-malware.htm

A la fin de l'installation, décocher la proposition de version d'essai de version Premium.

Cliquer sur Mettre à jour.

Options de langage:

Connecter les supports amovibles (USB) et cliquer sur Examiner maintenant.

Si des objets malveillants sont découverts:

A la fin de l'analyse, cliquer sur Export log et enregistrer le rapport en fichier texte.

Poster ce rapport.

Pour une analyse plus personnalisée, choisir cette option. L'analyse totale des disques, partitions et supports amovibles sera appliquée.

@++

Modifié le 17 avril 2014 par Apollo

Apollo · le 17 avril 2014

PS : le rapport marque Mega browse comme supprimé mais les fenêtres Mega browse s'ouvrent encore.

Il y a toujours des trucs à enlever avec un Fix, on s'en occupera plus tard.

@++

Modifié le 17 avril 2014 par Apollo

platinium · le 18 avril 2014

1er scan:

Rapport de SFTGC (Pierre13) du Vendredi 18 Avril 2014 à 10:05:24 version : 2.0.0.66
Mis à jour le 07/02/2014
Outil lancé en Mode normal et En tant qu'administrateur
Windows 7 Home Premium Service Pack 1 64 bits

Tool start in C:\Users\Berthalie\Downloads

714 éléments supprimés => 30.73 Mo libérés. (5 mn 24 s)

Warning !! **/!\** C:\Users\Berthalie\AppData\Local\Temp\avgnt.exe **/!\**
Warning !! **/!\** C:\Users\Berthalie\AppData\Local\Temp\Quarantine.exe **/!\**
Warning !! **/!\** C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERUNT.EXE **/!\**
Warning !! **/!\** C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERUNT.EXE.manifest **/!\**
C:\Users\Berthalie\AppData\Local\Temp\acro_rd_dir
C:\Users\Berthalie\AppData\Local\Temp\AdwCleaner.jpg
C:\Users\Berthalie\AppData\Local\Temp\AuthLog
C:\Users\Berthalie\AppData\Local\Temp\avgnt.exe
C:\Users\Berthalie\AppData\Local\Temp\Cleaning.ico
C:\Users\Berthalie\AppData\Local\Temp\Donate.ico
C:\Users\Berthalie\AppData\Local\Temp\EULA.txt
C:\Users\Berthalie\AppData\Local\Temp\HP Support Framework
C:\Users\Berthalie\AppData\Local\Temp\JRT.txt
C:\Users\Berthalie\AppData\Local\Temp\Quarantine.exe
C:\Users\Berthalie\AppData\Local\Temp\Report.ico
C:\Users\Berthalie\AppData\Local\Temp\Scan.ico
C:\Users\Berthalie\AppData\Local\Temp\Uninstall.ico
C:\Users\Berthalie\AppData\Local\Temp\WPDNSE
C:\Users\Berthalie\AppData\Local\Temp\updater_temp_truesuite\rollback
C:\Users\Berthalie\AppData\Local\Temp\updater_temp_truesuite\updatefile.xml
C:\Users\Berthalie\AppData\Local\Temp\jrt\APPID_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\APPID_files.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\appinit64_null.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\appinit_null.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\APPPATHS.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\APPROVEDEXTENSIONS_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\ask.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askCLSID.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askregkey_x64.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askregkey_x86.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askregvalue_x64.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askregvalue_x86.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\askservices.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\badAPPINIT.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\badFOLDERS.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\badFOLDERScom.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\badFOLDERSstart.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\badLNK.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\badvalues.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\BHO_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\BHO_name.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\browsermngr_keys.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\browsermngr_values.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHOICE.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\chrome.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHRregkey_x64.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHRregkey_x86.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHR_extensions.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHR_open_x64.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\CHR_open_x86.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\clean_shortcut.vbs
C:\Users\Berthalie\AppData\Local\Temp\jrt\CLSID_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\currentmd5.txt
C:\Users\Berthalie\AppData\Local\Temp\jrt\CUT.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\datamngr_del.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\defaultscope.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\delfolders.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\delorphans.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\ELEVATIONPOLICY_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt
C:\Users\Berthalie\AppData\Local\Temp\jrt\ev_clear.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\EXT.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFbrowsermngr.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFextensions.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFpluginREG.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFplugins.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFprefs.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFregkey_x64.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFregkey_x86.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFwhtlist.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFXML.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FFXPI.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FF_open_x64.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\FF_open_x86.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\firefox.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FWCLSID.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\FWPolicy.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\get.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\IEwhtlst.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\iexplore.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\IE_open_x64.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\IE_open_x86.reg
C:\Users\Berthalie\AppData\Local\Temp\jrt\IFEO.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\INTERFACE_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\JRT.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\medfos.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\MENUEXT.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\misc.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\modules.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\modules.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\moduleservices.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\newmd5.txt
C:\Users\Berthalie\AppData\Local\Temp\jrt\NIRCMD.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\NOTIFY.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\PREAPPROVED_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\prelim.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\PRODUCTS.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhcr.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhkcu_and_hklm_allow.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhkcu_and_hklm_software.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhkcu_software_appdatalow.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhkcu_software_microsoft.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGhklm_software_classes.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\REGISTRYUSERSID.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\runvalues.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\runvalues_x64.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\runvalues_x86.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\S1518COMPONENTS.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\searchlnk.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\SED.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\sednewline.txt
C:\Users\Berthalie\AppData\Local\Temp\jrt\services.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\serviceseventlog.cfg
C:\Users\Berthalie\AppData\Local\Temp\jrt\SETTINGS_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\SHORTCUT.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\STATS_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\TDL4.bat
C:\Users\Berthalie\AppData\Local\Temp\jrt\temp
C:\Users\Berthalie\AppData\Local\Temp\jrt\TRACING.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\TYPELIB_clsid.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\UNINSTALL.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\UpgradeCodes.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\WGET.DAT
C:\Users\Berthalie\AppData\Local\Temp\jrt\WOW6432NODE.dat
C:\Users\Berthalie\AppData\Local\Temp\jrt\temp\null.txt
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERDNT.E_E
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERDNTDOS.LOC
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERDNTWIN.LOC
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERUNT.EXE.manifest
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\ERUNT.LOC
C:\Users\Berthalie\AppData\Local\Temp\jrt\erunt\README.TXT
C:\Users\Berthalie\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll
C:\Users\Berthalie\AppData\LocalLow\Temp
C:\Users\Berthalie\AppData\LocalLow\Microsoft\IME12
C:\Users\Berthalie\AppData\LocalLow\Microsoft\IMJP12
C:\Users\Berthalie\AppData\LocalLow\Microsoft\IMJP8_1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\IMJP9_0
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\Low
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\Low\desktop.ini
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012014041720140418
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012014041820140419
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012014041820140419\container.dat
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012014041720140418\container.dat
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\container.dat
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\6[1].png
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\banners[1]
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\bnrcore_1.0.15[1].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\findBanner[1].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\header[1].png
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\img-banner[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\img-banner[2].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFQM9NKL\Version[1].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\1011[1].swf
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\104[1]
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\blocker.min[1].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\findBanner[1].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\findBanner[2].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\fwlink[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\iframe280[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\jquery.min[2].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\logo_v2[1].png
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QDRU5RUZ\prodinstall[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\1007[1].swf
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\6[1].css
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\banners[1]
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\bnr-tag_1.0.0[1].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\FR_Improve-my-protection[1].png
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\ie8[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\img-banner[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\reset[1].css
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA29KILR\VersionSFT[1].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\28016ffcbe8a1939af038a0db8cfb2f471a00311[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\banners[1]
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\bnrcore_1.0.15[1].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\close[1].png
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\Default[1].aspx
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\findBanner[1].txt
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\img-banner[1].htm
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\include_img_banner[1].js
C:\Users\Berthalie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DAWK5RT6\zulgames_en_160_600[1].jpg
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\- Notre Louise.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner[s0].lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8497.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8508.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8516.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8519.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8530.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8532.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8535.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\DSC_8537.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\IMG_1024.lnk
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\27120106fa37318.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28c8b86deab549a1.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a941cec0c8a3b27.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\330457123f292452.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\83b03b46dcd30a0e.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9645f58513b1a821.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\969252ce11249fdd.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms
C:\Users\Berthalie\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04AFA8793E5CDC4A81C6CD4554A30707
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_2CD9E2B64BF925DBA8B67036CF11760F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_2FFE778CED2FD9BBAB74B5314F3440CA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_A1FCA30AC310D8EAE948F012B2135AEE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_EB064852E492029495F68A42B460783D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_EC2B8F0C530DA57B6BD72F9ED19E4B95
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_F0ED2E2E4C18AF767323D306D9F72B9E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\15C9B775FA7F2C683FD76888C21180E6_E27DFEC191FB94181AFA36FA5A594D4D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\161B1C6D9CDC22FEB7269E395DF82F33_ACE2C216192F681278D474D3F3FB331A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\17704B7A99D010A5658DCB9355B65471_5FEA55F2BCB4685A54058A290E2CED24
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E1CC43385506AF5B63E01C28389BC6F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\207B9FD92391B9B2A60A89B4C965D5DF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\21253908F3CB05D51B1C2DA8B681A785
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2659C1A560AB92C9C29D4B2B25815AE8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26AD01F9C002FAD37427E734302383D8_E1DF8F31180BEED965CA2CD894B8B7B4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\27371171D8BBA336302695C6CEB04833
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\29E7A8984BC663B2CB853E44E7863708_7A5E15A14C0F182689E403969B0457BE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\30F7B429BB1DACA9B591B41E016BED66_F6024CD0767F1B4C9F060C7479C6DC83
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\36F1F6A9CDED762616E5038B5267C2B4_FDDDF8D96BA7CD7FE0C690C86100959B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\37C951188967C8EB88D99893D9D191FE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C3948BE6E525B8A8CEE9FAC91C9E392_5BEB6C6453DB87D996BDBC5D90D34AE1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C3948BE6E525B8A8CEE9FAC91C9E392_C8FA2A733FE2A95A8ABEB57315278F81
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3EF2DCFBD8E45DF4AF38995D1A2C2444_78D034884DE6DC9B5EA15551563873AC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40EB206A466C1F1175CCB23E825B3250
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40FD9B63B9878C0428E679298CD161C2_8D1C9751FDAE411510AC1F5A302695B7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4859D5BAC918334C46BD5ECFE050190D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4B60F9F3A5B2E31C4D52DC308211D7B4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\50B10292153912D05A7D970B383AACC4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_7DCDC9B86C5DA37FEB2732F7D1A586E5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_D734EC3DD00546F46D368325396086B0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_E638F9EA31276B58E6A32FDD5296AB01
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_E9FCAC30D964AFC39902EC989B1CC9E8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5495C2E4531B22B3185CE59F8E73C447
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\566A973C3ADBC70963C072413659C1CB_D359469132EB07C98DE3BB9DA14221B3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5C45AD19E3530EC4218F560AFC04C3F7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6213E171AE581D2A101181BD4DC37197_9BEC5D040F5D2F1EE3CD01FA280B5632
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6213E171AE581D2A101181BD4DC37197_A18DA6B2AACEBE44DC2555A362CF9BD1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6213E171AE581D2A101181BD4DC37197_EDE8B8BB80BB8CE893C2A5E172020DEE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\67F6625BC22310D5C99DDE12020DBD90
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\69CB1FD121A3CCB01B235A51441959D6_ECD4EA13E37531F4252022D60B1C8FCC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AFA4286D305D35CF857C64AE01F5F72
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B7AED56F69397028F35E77E6DD681FC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BDC4BD492765EED974809D29642BE4C_29CEC4282F4E8C4D0242A435219E96EA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BDC4BD492765EED974809D29642BE4C_D494156DA37C2FEABFB2C80879C32F7E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6F0788892ECB795F56E658EDB1CA93AA_72B0992C5B7BCE707348E71AF60DD251
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6F0788892ECB795F56E658EDB1CA93AA_BF10DE8014156320643C29807F220F34
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\724BA1E3D2C377A06FA5FA54F984881F_204A0CEAE21E503F798B2869C9756D5D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\72FB5B1C7905530E0DF39758E01A3573_68BBA175EC7B40C83DFC74EEDBAE81CE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\72FB5B1C7905530E0DF39758E01A3573_B9516EA745B9469F500A97DB517D7329
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_11D7BA58D75E54D622A3AD9CDF9905BB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74ED51A3D229FC7D437854B8EB97E847_3A88D3CC6A54C32191B054A2498A5470
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\778E847A069C51A89BE256E952A0B847_6A69EAF50FE22DDF702CEB4F9535D10E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EDE1350D6A4830F58081495812F0B6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\783DF2F5A7C9BC04C36663632D14B993_09E6BFC8958A4903B51F28C3DF0B32CC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\783DF2F5A7C9BC04C36663632D14B993_169DE3439FD2D9FE0AE07883B5A27A1B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\783DF2F5A7C9BC04C36663632D14B993_6C67FC20D6E627EA8FBFF0B449CB060B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_25C57F273ED293BEE5D74C4D05249BA1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_355DF12EAABE3F04A4C1AF592920E175
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_5442B1CAC753FE77C0664BB0A0BCD11E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_8102C2D9BECD09FCBB2BC1857DCCAD50
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_83F500F551B7EE7C27E10C290B448CFB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_8BF4BA22D20702BEE68EA4670A170EC1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_8E53C663229525C77803EAE589F84C54
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_CD4662E1A7F15144990B9C9F03164C3A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_FB6BD2AF592BD59C48D4520A31AC1EA3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_FC9386660504DD089A3224FBCF3C0610
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7BB0ACA324B4F65640EBBD7813B49595_062959C5931BBE6012A98652EF1175E1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7C1B7BA2D0A4C1307F3A4A532F819AA1_4AD3ACCBF8143C084378A3AE6D7BA712
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7C1B7BA2D0A4C1307F3A4A532F819AA1_FF6C5146232725C2AFED98CFFB2EB40C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\855CF405355328EC482A28D56A44CFB0_4B2274C4F7D9E7D3BB5540980456589C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\855CF405355328EC482A28D56A44CFB0_7B602C0559CEDC8151AAAA6054F02121
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\870143BC2A84A7707286615E35DA15B8_BF0C0FD39AF79DEA6B75CBCB04E75C3F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A574ED5927B3CEC9626151D220C7448
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DE3549A52F67902ED1B5FC4A6516018_EC78A5462A3E0BF522D459DB037C5E74
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EBFACB3A66359F9514D044C86BA4794
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EDCF682921FE94F4A02A43CD1A28E6B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_04445B39B6A5C29AFCDC2E600F84FCE5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_116E0776FABEE27563E59B5DCFE5B787
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_1599A1BD89E4FD9E6C0432D7F1FE2E3E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_1F847B9F56D0487C4E3C0F43B0A50367
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_37986E7148B5C3F4E2DF7D19135F4E3A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_4BF9E091F7E646918992616FB44457D6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_666F1D3A3D713572DDE776889297E3BF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_B50332442695DF0E283683ACF96E2CF4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_CA8E6BAF2163B000DBA095FE24D16796
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_CBCA69097376DA9DA7430ABB06FF62C7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9412CC2E99E8A8FC358ECAE030C18777_F705268D627529F1E6D7B07D775FF3D1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\944E5B697BC46FE14AB888AE8A1EBB99_F5AF2537D1326ADDEF00682F78B01600
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CD8982C888AB544945893084BD7523A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A1377F7115F1F126A15360369B165211
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3C4F17BF8CB09C3DF2A086B36306B5C_5A36D6657FCC1B291A94663A41B29CAF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3C4F17BF8CB09C3DF2A086B36306B5C_64D61C743A62FC6C7EEFB3648C899BA3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3C4F17BF8CB09C3DF2A086B36306B5C_725548FF661BEA9BF8B318D6DE0D65A3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3C4F17BF8CB09C3DF2A086B36306B5C_D1DFAACDA915CAB777DA6BE626C028D0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC68F0EC5FC952A7A923830D1455D48A_2C3E2A57F4FC4E8972A90353149C7FCA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC68F0EC5FC952A7A923830D1455D48A_5460A172018674FD1BB2F09B29BFAA93
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC68F0EC5FC952A7A923830D1455D48A_54A926F047C5E9ED8CC95EBC9148D686
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC68F0EC5FC952A7A923830D1455D48A_FCFC66F418C63C037A5CF64799E8FE0F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B03A867CCE8C94003ED3DCC89C3DD995_A311BEB00EC8C3DC3AA3E9E3714AB61C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B1D4D8DB6B8F8A95577A5F09D0390539_400415EBB5E3145DF4A9DA90BCA63E4A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B42E313F2D821AB5B9273588F81A55DE_D1A15199BCC0F9B8A0F830314290090D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B681B8816EE79EAEAA5CA7DA9EC0DC58
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD85B81BE34604D821EAF87C55F22BD6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_56D5A51152132FA716821C1361187213
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_872636078BFDECCA7801B30FDCF1D3E8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_CE8FCC7861C3AD5B2C06B958AD7EFCBD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_0DAD6DEE6F90D3B9E1FB7D785AB95B54
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_25AFD186FF8E97F61DEAE11E102C8C7D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_33005E9CE1439A08448B3677831DEC4A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C29AA1B9D7AA8A9381D2CBB3F631AA4B_BDCB11EDB220145E6AA04B43A6A691E0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C437972632A488222EA069E1572887C7_9AD1C6A04DF1BBA89E35E1142E44AE70
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E7EC0C85688F4738F3BE49B104BA67
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_3CA74E0A123CBB3FAC884E7D489378A4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_442F62E31D7538913A8A7C178BB02351
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_6C3560C0AC81229258617DB5E2DCE549
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_6F1839EFC65862DD6DC8C47E2F559EE9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_7E894EE055673D354892381460F8723B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_887C5B14D3A10313798BC9D6914E04D4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_9F4C1DCDD33B1F186F26F25668FE9446
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_A3F22A5A651285965E2D6280D83B8A8E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_C1E12B24931DF30EF8125657DA7A408C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_D1C8DE338CE424F23183895E7A74CCDA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_DC45763E07EB319604D041473985FAB1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0197CD123129A6D466C5F0FC1584EA2_3C6C7459D4DE3406C1DF8350D5E28578
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0197CD123129A6D466C5F0FC1584EA2_A07B271B210AFDA931AF4C4F232C0F42
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D41693DAFE5DEF0C36959FF1FCEF5C96
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D473E9C373099A94D5057303FDF0EE65_39B17C5C97CD64B7EE78FBDFB2D76D63
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D473E9C373099A94D5057303FDF0EE65_96368193DB9EC7266694A8BFD367AE68
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DBC3362DBFFA16F9E029A084D14E23BE_A6D84554AA391CDF15CBB81FDFEB4FE4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5F99F8CA677C9C5793DF9906EE2DCB6_B7A2A485FC61D92650C9D33F1FBC5CB1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5F99F8CA677C9C5793DF9906EE2DCB6_FA69CC746B175989B0FDC2BBFA2BD56B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E6DAA7489C9999D36D1B356E8A295618_33FFC905DCEFE27BD00B1C864B56ED1F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E73301198D57B204A7AC7683421E6AA2_368B0C0F5792CD75E7493A4B89330809
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F1C855F22DF0DAE61534ED3C04DC4B58
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_00F5AF71618C982E40FC3BCCA46C1720
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_7C51EAC10E1F61E24EF3E67B7197082C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F6DEB9C1F3251400F7D6EB743CB14FB4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F72943F1E01540BBACB5396C76DD6AAA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F99CAC852E278659C1E715225DD11A14_C5CBD28A214631231AF2C849ED7E6529
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FA2ED4B1D143A5F4D252B12985E8E892_BE47D82D5F48CA33260EF1F487D1A9D3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FCD2CC3451EF5F3DB8D4B7DD511B2F77_15830152B5AC9D41315595DF755D816F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FCEA474F228C13CD0DAD678431D0ACFC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\04AFA8793E5CDC4A81C6CD4554A30707
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_2CD9E2B64BF925DBA8B67036CF11760F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_2FFE778CED2FD9BBAB74B5314F3440CA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_A1FCA30AC310D8EAE948F012B2135AEE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_EB064852E492029495F68A42B460783D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_EC2B8F0C530DA57B6BD72F9ED19E4B95
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_F0ED2E2E4C18AF767323D306D9F72B9E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\15C9B775FA7F2C683FD76888C21180E6_E27DFEC191FB94181AFA36FA5A594D4D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\161B1C6D9CDC22FEB7269E395DF82F33_ACE2C216192F681278D474D3F3FB331A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\17704B7A99D010A5658DCB9355B65471_5FEA55F2BCB4685A54058A290E2CED24
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1E1CC43385506AF5B63E01C28389BC6F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\207B9FD92391B9B2A60A89B4C965D5DF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\21253908F3CB05D51B1C2DA8B681A785
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2659C1A560AB92C9C29D4B2B25815AE8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26AD01F9C002FAD37427E734302383D8_E1DF8F31180BEED965CA2CD894B8B7B4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\27371171D8BBA336302695C6CEB04833
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\29E7A8984BC663B2CB853E44E7863708_7A5E15A14C0F182689E403969B0457BE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\30F7B429BB1DACA9B591B41E016BED66_F6024CD0767F1B4C9F060C7479C6DC83
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3130B1871A126520A8C47861EFE3ED4D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\36F1F6A9CDED762616E5038B5267C2B4_FDDDF8D96BA7CD7FE0C690C86100959B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\37C951188967C8EB88D99893D9D191FE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C3948BE6E525B8A8CEE9FAC91C9E392_5BEB6C6453DB87D996BDBC5D90D34AE1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C3948BE6E525B8A8CEE9FAC91C9E392_C8FA2A733FE2A95A8ABEB57315278F81
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3EF2DCFBD8E45DF4AF38995D1A2C2444_78D034884DE6DC9B5EA15551563873AC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40EB206A466C1F1175CCB23E825B3250
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40FD9B63B9878C0428E679298CD161C2_8D1C9751FDAE411510AC1F5A302695B7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4859D5BAC918334C46BD5ECFE050190D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_569BD946168DB279A65378F7D088CFD0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_AFC22B77ED08EE3E2B28B6DE75CADDF5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4B60F9F3A5B2E31C4D52DC308211D7B4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\50B10292153912D05A7D970B383AACC4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_7DCDC9B86C5DA37FEB2732F7D1A586E5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_BD1446EE1580F7EA207C073F7ABA5015
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_D734EC3DD00546F46D368325396086B0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_E638F9EA31276B58E6A32FDD5296AB01
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_E9FCAC30D964AFC39902EC989B1CC9E8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5495C2E4531B22B3185CE59F8E73C447
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\566A973C3ADBC70963C072413659C1CB_D359469132EB07C98DE3BB9DA14221B3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5C45AD19E3530EC4218F560AFC04C3F7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6213E171AE581D2A101181BD4DC37197_9BEC5D040F5D2F1EE3CD01FA280B5632
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6213E171AE581D2A101181BD4DC37197_A18DA6B2AACEBE44DC2555A362CF9BD1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6213E171AE581D2A101181BD4DC37197_EDE8B8BB80BB8CE893C2A5E172020DEE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\67F6625BC22310D5C99DDE12020DBD90
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\69CB1FD121A3CCB01B235A51441959D6_ECD4EA13E37531F4252022D60B1C8FCC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AFA4286D305D35CF857C64AE01F5F72
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B7AED56F69397028F35E77E6DD681FC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BDC4BD492765EED974809D29642BE4C_29CEC4282F4E8C4D0242A435219E96EA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BDC4BD492765EED974809D29642BE4C_D494156DA37C2FEABFB2C80879C32F7E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6F0788892ECB795F56E658EDB1CA93AA_72B0992C5B7BCE707348E71AF60DD251
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6F0788892ECB795F56E658EDB1CA93AA_BF10DE8014156320643C29807F220F34
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\724BA1E3D2C377A06FA5FA54F984881F_204A0CEAE21E503F798B2869C9756D5D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\72FB5B1C7905530E0DF39758E01A3573_68BBA175EC7B40C83DFC74EEDBAE81CE
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\72FB5B1C7905530E0DF39758E01A3573_B9516EA745B9469F500A97DB517D7329
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_11D7BA58D75E54D622A3AD9CDF9905BB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74ED51A3D229FC7D437854B8EB97E847_3A88D3CC6A54C32191B054A2498A5470
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\778E847A069C51A89BE256E952A0B847_6A69EAF50FE22DDF702CEB4F9535D10E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EDE1350D6A4830F58081495812F0B6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\783DF2F5A7C9BC04C36663632D14B993_09E6BFC8958A4903B51F28C3DF0B32CC
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\783DF2F5A7C9BC04C36663632D14B993_169DE3439FD2D9FE0AE07883B5A27A1B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\783DF2F5A7C9BC04C36663632D14B993_6C67FC20D6E627EA8FBFF0B449CB060B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_25C57F273ED293BEE5D74C4D05249BA1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_355DF12EAABE3F04A4C1AF592920E175
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_5442B1CAC753FE77C0664BB0A0BCD11E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_8102C2D9BECD09FCBB2BC1857DCCAD50
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_83F500F551B7EE7C27E10C290B448CFB
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_8BF4BA22D20702BEE68EA4670A170EC1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_8E53C663229525C77803EAE589F84C54
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_CD4662E1A7F15144990B9C9F03164C3A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_FB6BD2AF592BD59C48D4520A31AC1EA3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_FC9386660504DD089A3224FBCF3C0610
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7BB0ACA324B4F65640EBBD7813B49595_062959C5931BBE6012A98652EF1175E1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7C1B7BA2D0A4C1307F3A4A532F819AA1_4AD3ACCBF8143C084378A3AE6D7BA712
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7C1B7BA2D0A4C1307F3A4A532F819AA1_FF6C5146232725C2AFED98CFFB2EB40C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\855CF405355328EC482A28D56A44CFB0_4B2274C4F7D9E7D3BB5540980456589C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\855CF405355328EC482A28D56A44CFB0_7B602C0559CEDC8151AAAA6054F02121
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\870143BC2A84A7707286615E35DA15B8_BF0C0FD39AF79DEA6B75CBCB04E75C3F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8A574ED5927B3CEC9626151D220C7448
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DE3549A52F67902ED1B5FC4A6516018_EC78A5462A3E0BF522D459DB037C5E74
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EBFACB3A66359F9514D044C86BA4794
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EDCF682921FE94F4A02A43CD1A28E6B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_04445B39B6A5C29AFCDC2E600F84FCE5
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_116E0776FABEE27563E59B5DCFE5B787
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_1599A1BD89E4FD9E6C0432D7F1FE2E3E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_1F847B9F56D0487C4E3C0F43B0A50367
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_37986E7148B5C3F4E2DF7D19135F4E3A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_4BF9E091F7E646918992616FB44457D6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_666F1D3A3D713572DDE776889297E3BF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_B50332442695DF0E283683ACF96E2CF4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_CA8E6BAF2163B000DBA095FE24D16796
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_CBCA69097376DA9DA7430ABB06FF62C7
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9412CC2E99E8A8FC358ECAE030C18777_F705268D627529F1E6D7B07D775FF3D1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\944E5B697BC46FE14AB888AE8A1EBB99_F5AF2537D1326ADDEF00682F78B01600
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CD8982C888AB544945893084BD7523A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A1377F7115F1F126A15360369B165211
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A3C4F17BF8CB09C3DF2A086B36306B5C_5A36D6657FCC1B291A94663A41B29CAF
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A3C4F17BF8CB09C3DF2A086B36306B5C_64D61C743A62FC6C7EEFB3648C899BA3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A3C4F17BF8CB09C3DF2A086B36306B5C_725548FF661BEA9BF8B318D6DE0D65A3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A3C4F17BF8CB09C3DF2A086B36306B5C_D1DFAACDA915CAB777DA6BE626C028D0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC68F0EC5FC952A7A923830D1455D48A_2C3E2A57F4FC4E8972A90353149C7FCA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC68F0EC5FC952A7A923830D1455D48A_5460A172018674FD1BB2F09B29BFAA93
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC68F0EC5FC952A7A923830D1455D48A_54A926F047C5E9ED8CC95EBC9148D686
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC68F0EC5FC952A7A923830D1455D48A_FCFC66F418C63C037A5CF64799E8FE0F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B03A867CCE8C94003ED3DCC89C3DD995_A311BEB00EC8C3DC3AA3E9E3714AB61C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B1D4D8DB6B8F8A95577A5F09D0390539_400415EBB5E3145DF4A9DA90BCA63E4A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B42E313F2D821AB5B9273588F81A55DE_D1A15199BCC0F9B8A0F830314290090D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B681B8816EE79EAEAA5CA7DA9EC0DC58
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD85B81BE34604D821EAF87C55F22BD6
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_56D5A51152132FA716821C1361187213
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_872636078BFDECCA7801B30FDCF1D3E8
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_CE8FCC7861C3AD5B2C06B958AD7EFCBD
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_0DAD6DEE6F90D3B9E1FB7D785AB95B54
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_25AFD186FF8E97F61DEAE11E102C8C7D
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_33005E9CE1439A08448B3677831DEC4A
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C29AA1B9D7AA8A9381D2CBB3F631AA4B_BDCB11EDB220145E6AA04B43A6A691E0
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C437972632A488222EA069E1572887C7_9AD1C6A04DF1BBA89E35E1142E44AE70
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E7EC0C85688F4738F3BE49B104BA67
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_3CA74E0A123CBB3FAC884E7D489378A4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_442F62E31D7538913A8A7C178BB02351
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_6C3560C0AC81229258617DB5E2DCE549
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_6F1839EFC65862DD6DC8C47E2F559EE9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_7E894EE055673D354892381460F8723B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_887C5B14D3A10313798BC9D6914E04D4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_9F4C1DCDD33B1F186F26F25668FE9446
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_A3F22A5A651285965E2D6280D83B8A8E
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_C1E12B24931DF30EF8125657DA7A408C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_D1C8DE338CE424F23183895E7A74CCDA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_DC45763E07EB319604D041473985FAB1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0197CD123129A6D466C5F0FC1584EA2_3C6C7459D4DE3406C1DF8350D5E28578
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0197CD123129A6D466C5F0FC1584EA2_A07B271B210AFDA931AF4C4F232C0F42
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D41693DAFE5DEF0C36959FF1FCEF5C96
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D473E9C373099A94D5057303FDF0EE65_39B17C5C97CD64B7EE78FBDFB2D76D63
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D473E9C373099A94D5057303FDF0EE65_96368193DB9EC7266694A8BFD367AE68
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DBC3362DBFFA16F9E029A084D14E23BE_A6D84554AA391CDF15CBB81FDFEB4FE4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5F99F8CA677C9C5793DF9906EE2DCB6_B7A2A485FC61D92650C9D33F1FBC5CB1
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5F99F8CA677C9C5793DF9906EE2DCB6_FA69CC746B175989B0FDC2BBFA2BD56B
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E6DAA7489C9999D36D1B356E8A295618_33FFC905DCEFE27BD00B1C864B56ED1F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E73301198D57B204A7AC7683421E6AA2_368B0C0F5792CD75E7493A4B89330809
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F1C855F22DF0DAE61534ED3C04DC4B58
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_00F5AF71618C982E40FC3BCCA46C1720
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_7C51EAC10E1F61E24EF3E67B7197082C
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F6DEB9C1F3251400F7D6EB743CB14FB4
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F72943F1E01540BBACB5396C76DD6AAA
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F99CAC852E278659C1E715225DD11A14_C5CBD28A214631231AF2C849ED7E6529
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FA2ED4B1D143A5F4D252B12985E8E892_BE47D82D5F48CA33260EF1F487D1A9D3
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FCD2CC3451EF5F3DB8D4B7DD511B2F77_15830152B5AC9D41315595DF755D816F
C:\Users\Berthalie\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FCEA474F228C13CD0DAD678431D0ACFC
C:\Users\BERTHA~1\AppData\Local\Temp\avgnt.exe
C:\Users\BERTHA~1\AppData\Local\Temp\jrt
C:\Users\BERTHA~1\AppData\Local\Temp\updater_temp_truesuite
C:\Windows\TEMP\ACLM
C:\Windows\TEMP\lpksetup-20140415-182028-0.log
C:\Windows\TEMP\lpksetup-20140416-085538-0.log
C:\Windows\TEMP\lpksetup-20140416-191412-0.log
C:\Windows\TEMP\lpksetup-20140417-090736-0.log
C:\Windows\TEMP\lpksetup-20140417-165427-0.log
C:\Windows\TEMP\lpksetup-20140417-215049-0.log
C:\Windows\TEMP\lpksetup-20140418-093351-0.log
C:\Windows\TEMP\ACLM\ACLMLog.txt
C:\Windows\Prefetch\7ZA.EXE-02AD3940.pf
C:\Windows\Prefetch\ADWCLEANER.EXE-5ED85AFA.pf
C:\Windows\Prefetch\AgAppLaunch.db
C:\Windows\Prefetch\AgCx_S1_S-1-5-21-3010290874-4165481152-1425161321-1000.snp.db
C:\Windows\Prefetch\AgCx_SC1.db
C:\Windows\Prefetch\AgCx_SC1.db.trx
C:\Windows\Prefetch\AgCx_SC2.db
C:\Windows\Prefetch\AgCx_SC3_A1B18C7DB09A93EF.db
C:\Windows\Prefetch\AgCx_SC4.db
C:\Windows\Prefetch\AgGlFaultHistory.db
C:\Windows\Prefetch\AgGlFgAppHistory.db
C:\Windows\Prefetch\AgGlGlobalHistory.db
C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3010290874-4165481152-1425161321-1000.db
C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3010290874-4165481152-1425161321-1000.db
C:\Windows\Prefetch\AgRobust.db
C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf
C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
C:\Windows\Prefetch\AVCENTER.EXE-FD66D2A7.pf
C:\Windows\Prefetch\AVWEBG7.EXE-A56FAA5E.pf
C:\Windows\Prefetch\AVWSC.EXE-9DE67EBB.pf
C:\Windows\Prefetch\CCC.EXE-B637C9BF.pf
C:\Windows\Prefetch\CCUAC.EXE-3A725DBA.pf
C:\Windows\Prefetch\CHECKUPDATE.EXE-E815963F.pf
C:\Windows\Prefetch\CHROME.EXE-D999B1BA.pf
C:\Windows\Prefetch\CLI.EXE-BB402402.pf
C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
C:\Windows\Prefetch\CUT.DAT-761EFD65.pf
C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf
C:\Windows\Prefetch\DLLHOST.EXE-40DD444D.pf
C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf
C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
C:\Windows\Prefetch\DLLHOST.EXE-61F58501.pf
C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf
C:\Windows\Prefetch\DLLHOST.EXE-E7777CC4.pf
C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf
C:\Windows\Prefetch\ERUNT.EXE-4693F4DE.pf
C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
C:\Windows\Prefetch\FC.EXE-F6221E79.pf
C:\Windows\Prefetch\FILTERAPP_C64.EXE-0C450165.pf
C:\Windows\Prefetch\FIND.EXE-9AADDA11.pf
C:\Windows\Prefetch\FINDSTR.EXE-6C611AA6.pf
C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
C:\Windows\Prefetch\FLASHPLAYERPLUGIN_12_0_0_77.E-4466A2F5.pf
C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf
C:\Windows\Prefetch\GOOGLEUPDATE.EXE-97239F27.pf
C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf
C:\Windows\Prefetch\HPCASLNOTIFICATION.EXE-F1274B82.pf
C:\Windows\Prefetch\HPCMSRV.EXE-90C8761B.pf
C:\Windows\Prefetch\HPCONNECTIONMANAGER.EXE-4032C2F3.pf
C:\Windows\Prefetch\HPSA_SERVICE.EXE-AD6579F0.pf
C:\Windows\Prefetch\HPSFREPORT.EXE-F3375220.pf
C:\Windows\Prefetch\HPTASKBAR3.EXE-A6188DE5.pf
C:\Windows\Prefetch\IASTORDATAMGRSVC.EXE-C086B157.pf
C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf
C:\Windows\Prefetch\IGFXTRAY.EXE-C444237E.pf
C:\Windows\Prefetch\IPMGUI.EXE-F9CAB886.pf
C:\Windows\Prefetch\JRT.EXE-5FE06FAC.pf
C:\Windows\Prefetch\Layout.ini
C:\Windows\Prefetch\LMS.EXE-8C70F87D.pf
C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
C:\Windows\Prefetch\LPKSETUP.EXE-90F505D8.pf
C:\Windows\Prefetch\MEGABROWSE.BROWSERADAPTER.EXE-3EB2F119.pf
C:\Windows\Prefetch\MOM.EXE-42E9F9DF.pf
C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
C:\Windows\Prefetch\NCPLUGINUPDATER.EXE-FC819644.pf
C:\Windows\Prefetch\NET.EXE-40D48057.pf
C:\Windows\Prefetch\NET1.EXE-3D280034.pf
C:\Windows\Prefetch\NIRCMD.DAT-9966FF6A.pf
C:\Windows\Prefetch\NOTEPAD.EXE-1605FA5B.pf
C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
C:\Windows\Prefetch\PfSvPerfStats.bin
C:\Windows\Prefetch\PING.EXE-371F41E2.pf
C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf
C:\Windows\Prefetch\ReadyBoot
C:\Windows\Prefetch\REG.EXE-4978446A.pf
C:\Windows\Prefetch\REGEDIT.EXE-2023FAA8.pf
C:\Windows\Prefetch\REGSVR32.EXE-D5170E12.pf
C:\Windows\Prefetch\RICONMAN.EXE-9FED550E.pf
C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
C:\Windows\Prefetch\RUNONCE.EXE-D0649312.pf
C:\Windows\Prefetch\SC.EXE-1CF1DE92.pf
C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf
C:\Windows\Prefetch\SDCLT.EXE-E10B972A.pf
C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf
C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
C:\Windows\Prefetch\SED.DAT-F9953495.pf
C:\Windows\Prefetch\SFTGC.EXE-AC281797.pf
C:\Windows\Prefetch\SHORTCUT.DAT-5F3E1825.pf
C:\Windows\Prefetch\SORT.EXE-522F521C.pf
C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf
C:\Windows\Prefetch\SVCHOST.EXE-3AB35CA7.pf
C:\Windows\Prefetch\SVCHOST.EXE-6168E4A3.pf
C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf
C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
C:\Windows\Prefetch\SVCHOST.EXE-C871F054.pf
C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
C:\Windows\Prefetch\SYNTPENH.EXE-E6DC1353.pf
C:\Windows\Prefetch\SYNTPHELPER.EXE-0A20AAC4.pf
C:\Windows\Prefetch\SYSTPLSERVICE.EXE-310A5EF4.pf
C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
C:\Windows\Prefetch\TASKKILL.EXE-E0105477.pf
C:\Windows\Prefetch\TASKLIST.EXE-178413B7.pf
C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
C:\Windows\Prefetch\UNS.EXE-E6E49771.pf
C:\Windows\Prefetch\UNSECAPP.EXE-A02905A6.pf
C:\Windows\Prefetch\UPDATE.EXE-0D8A637E.pf
C:\Windows\Prefetch\UPDATEMEGABROWSE.EXE-285323C0.pf
C:\Windows\Prefetch\UPDATERSTARTUPUTILITY.EXE-E056967B.pf
C:\Windows\Prefetch\UPDATETASK.EXE-0A2B24B8.pf
C:\Windows\Prefetch\UPDRGUI.EXE-D0FBFF97.pf
C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf
C:\Windows\Prefetch\UTILMEGABROWSE.EXE-3C226768.pf
C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
C:\Windows\Prefetch\WEVTUTIL.EXE-400D93E8.pf
C:\Windows\Prefetch\WGET.DAT-179BA804.pf
C:\Windows\Prefetch\WIRELESSOFFMSG.EXE-286C32A5.pf
C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf
C:\Windows\Prefetch\ReadyBoot\Trace1.fx
C:\Windows\Prefetch\ReadyBoot\Trace10.fx
C:\Windows\Prefetch\ReadyBoot\Trace2.fx
C:\Windows\Prefetch\ReadyBoot\Trace8.fx
C:\Windows\Prefetch\ReadyBoot\Trace9.fx

Corbeille vidée.

Fin du rapport.

2ème scan:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 18/04/2014
Scan Time: 13:39:35
Logfile: MAB 18 04 2014.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.18.03
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Berthalie

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 270549
Time Elapsed: 3 hr, 26 min, 49 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 30
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{FBC322D5-407E-4854-8C0B-555B951FD8E3}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0400EBCA-042C-4000-AA89-9713FBEDB671}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0BD19251-4B4B-4B94-AB16-617106245BB7}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44B29DDD-CF7A-454A-A275-A322A398D93F}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2DB115C-8278-4947-9A07-57B53D1C4215}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B97FC455-DB33-431D-84DB-6F1514110BD5}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E72E9312-0367-4216-BFC7-21485FA8390B}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0400EBCA-042C-4000-AA89-9713FBEDB671}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0BD19251-4B4B-4B94-AB16-617106245BB7}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44B29DDD-CF7A-454A-A275-A322A398D93F}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B2DB115C-8278-4947-9A07-57B53D1C4215}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B97FC455-DB33-431D-84DB-6F1514110BD5}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E72E9312-0367-4216-BFC7-21485FA8390B}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FBC322D5-407E-4854-8C0B-555B951FD8E3}, Quarantined, [00cb69c2b6c5da5cc3f30447be4458a8],
PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\Mega Browse, Quarantined, [4c7ff833aecdd561f2d1353f778b7987],
PUP.Optional.MegaBrowse.A, HKU\S-1-5-21-3010290874-4165481152-1425161321-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Mega Browse, Quarantined, [438856d5710ad363d2f04f25bd45ca36],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 5
PUP.Optional.DomaIQ, C:\Users\Berthalie\Downloads\Java.exe, Quarantined, [cffc1a113f3c7cbadda50e12fb06de22],
Adware.InstallBrain, C:\Users\Berthalie\Downloads\RocketPDFSetup.exe, Quarantined, [8843dd4ed4a7da5c1080cb3736cbc838],
PUP.Optional.Vittalia, C:\Users\Berthalie\Downloads\installer_adobe_photoshop_cs5_12_0_3_French.exe, Quarantined, [15b668c39dde7db9d9a888c827da7d83],
PUP.Optional.MegaBrowse.A, C:\Users\Berthalie\AppData\Roaming\Mozilla\Firefox\Profiles\4dajxhn7.default\extensions\{29b136c9-938d-4d3d-8df8-d649d9b74d02}.xpi, Quarantined, [3299d45743380f2747187ef58b777b85],
PUP.Optional.MySearchDial.A, C:\Users\Berthalie\AppData\Local\Google\Chrome\User Data\Default\preferences, Good: (), Bad: ( "startup_urls": [ "http://start.mysearchdial.com/?f=1&a=tele_14_12_ie&cd=2XzuyEtN2Y1L1Qzu0E0Czy0AyByEyEtA0DyC0B0BtBtC0AyEtN0D0Tzu0SzztCtAtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzztDtByDtCyCyCtGyD0AyBzytG0CyDtAtCtG0EtBzyyCtGyCzytBtCzyzz0CyEzy0DtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtC0EtA0FyDtA0FtG0D0B0DtDtGtDyB0BtBtG0AzyzyzztGyDtA0F0B0E0Dzz0D0C0D0BtD2Q&cr=1694690602&ir=", "http://feed.snapdo.com/?p=mKO_AwFzXIpYRaHk7fb-MO5XCXXVn8iDR8pW-E-OJbVqOPUTceunT9xDBqTAsjTjtdfC1z1hOX49TO5ZCPn_aBY2iYz3YKVLF89WMTB7iByBoy9hjW4qaNe1YW_ENzzV22LRv3PSt_J-jBqboL9fQNq2pKPZr8Wr7oL4CsXMfNxyLYS22sX98IiYaNERrx5AOZv-7Nkvj92PSBU, " ],), Replaced,[f2d981aa8dee75c12c63c29123e11de3]

Physical Sectors: 0
(No malicious items detected)

(end)

Apollo · le 18 avril 2014

Re,

1)

Fais ces vérifications de sécurité importantes stp:

http://theknitter-apollo.xooit.com/p17644.htm

Ou ici: http://www.vista-xp.fr/forum/topic13109.html#p108827

Pour Java, utiliser l'outil de Pierre13. (à partir de XP SP3!)
Poster son rapport.

Idem pour Adobe Reader (outil dédié de Pierre13 + rapport)

-----------------

2) Refais un scan ZhpDiag après ça stp et héberge son rapport...

@++

Connexion

Pas encore inscrit ?

Ordinateur infecté

Messages recommandés

platinium

Apollo

platinium

Apollo

platinium

platinium

Apollo

Apollo

platinium

Apollo

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer