:OTL
SRV - File not found [Auto | Stopped] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Planificateur LiveUpdate automatique)
IE - HKU\S-1-5-21-3151533918-4092019652-997648775-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-3151533918-4092019652-997648775-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=CDS&o=16205&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=QR&apn_dtid=YYYYYYYYRE&apn_uid=2610405E-C57B-4731-860D-1C4C4730BBCF&apn_sauid=D63B247F-AC5F-45B8-BC4A-DA5DD70F8ADE
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "WiseConvert Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "WiseConvert Customized Web Search"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&q="
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\webbooster@iminent.com: C:\Program Files\Iminent\webbooster@iminent.com
[2010/08/14 00:18:11 | 000,002,565 | ---- | M] () -- C:\Users\tapounette\AppData\Roaming\Mozilla\Firefox\Profiles\2iql75yj.default\searchplugins\askcom.xml
[2012/07/16 09:12:42 | 000,000,925 | ---- | M] () -- C:\Users\tapounette\AppData\Roaming\Mozilla\Firefox\Profiles\2iql75yj.default\searchplugins\conduit.xml
O3 - HKU\S-1-5-21-3151533918-4092019652-997648775-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O33 - MountPoints2\{0d8d84d9-d093-11df-bf4c-001fc675a56e}\Shell\AutoRun\command - "" = D:\Start.exe
O33 - MountPoints2\{18d4aa22-caf0-11df-8f21-001fc675a56e}\Shell\Auto\command - "" = D:\launcher.exe
O33 - MountPoints2\{18d4aa22-caf0-11df-8f21-001fc675a56e}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\launcher.exe
O36 - AppCertDlls: DpiSutou - (C:\Windows\system32\clicStub.dll) - File not found
[2012/08/02 15:15:14 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{8838C729-F44F-4BDF-9EC5-F0B06D6DC87F}
[2012/08/02 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{C6D952A1-65C8-40E4-AD63-07B2EBEB7B1C}
[2012/08/02 02:17:35 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{304DEBCA-B1E9-4088-9705-0EA305829FB8}
[2012/08/02 02:17:01 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{716AAE8A-9BDF-464E-A24B-4A0D9BE54C67}
[2012/08/01 08:55:33 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{6DE75374-87E6-4267-9AEC-C35531DEBC48}
[2012/08/01 08:55:17 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{56FC8B3D-1807-4034-961B-BE8477668D38}
[2012/07/31 20:55:04 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{11B16AA1-9D51-4824-B01C-BBCA6C470730}
[2012/07/31 20:54:51 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{62665141-4594-4092-A477-548F37484FBB}
[2012/07/31 08:54:09 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{9262A12A-3A15-4513-AEEF-A17433AC3F28}
[2012/07/31 08:53:46 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{2E2B00C8-D78C-4E5F-8CD4-27E9481EA88A}
[2012/07/31 08:50:30 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{A5151E49-5437-4DB5-996A-C1D45CD9426B}
[2012/07/31 08:50:16 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{06EEA6A1-50C4-4C2A-BBC7-9A2A5E949151}
[2012/07/30 02:42:32 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{B5F0ABFC-E1EB-46A7-A128-3DA96BE0DF0B}
[2012/07/30 02:42:13 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{ECE2D5D0-64A0-4B91-8297-B89DF9C52D28}
[2012/07/28 15:27:04 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{2B8E5062-9A7E-4914-A3F2-AEB369B27855}
[2012/07/28 15:26:39 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{B8B22938-60E0-47BF-BE6C-5761D8939C01}
[2012/07/27 20:35:50 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{707F07BE-4D46-4EBF-8E24-4ABDF2EFC9BD}
[2012/07/27 07:02:04 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{2D705E82-17A1-4757-9D84-F3BF9E67E161}
[2012/07/27 07:01:33 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{0DB97861-8F5D-4285-BDE2-4D4EAD2F7975}
[2012/07/24 20:14:51 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{3C86E822-A554-48A9-874E-5E9126F6BED7}
[2012/07/24 20:12:53 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{6546DD7B-8F71-4349-9B23-C35FC9973720}
[2012/07/24 03:10:38 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{87F4665B-A186-4684-ACE9-76B552A467D1}
[2012/07/24 03:09:40 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{1628FC81-7FF8-4462-9282-D1CC8262FE3A}
[2012/07/23 08:38:13 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{8B35AE81-1BE1-44AB-9AE2-93CB8FB63858}
[2012/07/23 08:38:00 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{4F5AC986-7849-4E71-B0A7-4C15903D146F}
[2012/07/22 20:37:47 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{BA84F1DC-40E6-43A6-8E20-07CD67E393CA}
[2012/07/22 20:36:49 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{03ADEDB4-A9FC-4F22-BC74-ABFF369032B0}
[2012/07/22 08:34:12 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{5A2F0649-0F56-4C69-A687-3AE97091E32E}
[2012/07/22 08:33:53 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{9DA2A8BE-29B6-423C-B0B1-99B136C5075A}
[2012/07/21 08:32:53 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{93BBE1C5-7336-4DBB-B0BB-CA3C392B0A18}
[2012/07/20 15:17:28 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{419DB40F-064B-4005-ADE9-C4D697E67715}
[2012/07/20 01:38:51 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{EEC7655C-3488-4FA1-80BF-F09EEF1C9A28}
[2012/07/20 01:38:28 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{6CE03719-8C76-4AFB-AC9C-43B90840A3EC}
[2012/07/18 08:41:15 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{40F642BD-1711-48F6-9E94-BA49A9334B68}
[2012/07/18 08:40:40 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{7B24406B-7D77-49F7-9389-B8CE1576A3A8}
[2012/07/17 08:40:16 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{7D9E0D54-0551-41F8-B2C2-BF447A9AA6E1}
[2012/07/17 08:39:55 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{D83C4EA4-1666-4EEC-A765-025959F93DED}
[2012/07/16 16:39:50 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{2E2DAF48-8B47-4BFF-B5BF-2D0AFA3716BA}
[2012/07/16 16:39:23 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{99C36F6A-C54D-4157-82E4-A67C19904F4D}
[2012/07/16 08:59:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012/07/16 08:59:21 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012/07/15 12:32:52 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{4E62FDA2-E215-461B-AB4B-DDA73CFAF83E}
[2012/07/15 12:32:30 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{F768B373-B9B5-4A85-A8E7-F6B0FB1F9BFF}
[2012/07/13 21:21:54 | 000,000,000 | ---D | C] -- C:\ProgramData\036DFF982F3131210053316F2F3B6FDA
[2012/07/13 21:24:27 | 000,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA%
[2012/07/13 21:18:05 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{CA8559C3-8256-47C0-8D92-8F818A42AD50}
[2012/07/13 21:17:27 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{7A8BB888-ABEC-4626-A02E-4E2D579F503C}
[2012/07/13 21:09:56 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{41FC6140-1143-4607-A1F6-2A21B6117D67}
[2012/07/13 21:09:40 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{F1BFD697-148D-49D8-91BF-8E930CEAD9EF}
[2012/07/09 19:49:19 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{CFE82487-39F5-42B2-BD51-82F9D19D3E68}
[2012/07/09 19:48:25 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{72020313-AFD6-4370-B5C1-AB6B868643B8}
[2012/07/09 01:56:13 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{1302F896-07B8-4FE3-B206-EFADFC5DE9C3}
[2012/07/09 01:55:20 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{F07BC5C6-71FE-47D8-8D6C-A8961892883B}
[2012/07/07 01:50:19 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{635C1F6A-5F69-47BA-B7C5-0F978F9DD48C}
[2012/07/07 01:50:05 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{A9C6F591-23EC-481C-BE23-8BACF7DB5908}
[2012/07/06 13:49:51 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{B0B2500B-745A-4872-BEA7-DE4AA94FDCED}
[2012/07/06 13:48:53 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{1B5CBF0B-09AA-4130-ADC5-C6EE5C5185F2}
[2012/07/05 19:35:53 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{C65525AD-FE3E-45BC-AAF3-E3B9D294FF3B}
[2012/07/05 01:52:51 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{BFA46D57-B790-4C26-B5BE-A150558BB335}
[2012/07/04 13:52:19 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{FCDD2057-2D9C-4DD9-9969-D66F4CCFF958}
[2012/07/04 00:53:08 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{F12910C8-4647-45EB-8D18-1B2D1F0140B0}
[2012/07/04 00:52:54 | 000,000,000 | ---D | C] -- C:\Users\tapounette\AppData\Local\{CAA541F0-6288-449D-A397-91450D8E5DD4}
[15 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2012/07/24 03:08:21 | 000,001,712 | ---- | C] () -- C:\Windows\Installer\{fb041be5-cc27-ddad-4839-68ffdab41393}\U\00000001.@
[2012/01/11 15:19:19 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{fb041be5-cc27-ddad-4839-68ffdab41393}\@
[2012/01/11 15:19:19 | 000,002,048 | -HS- | C] () -- C:\Users\tapounette\AppData\Local\{fb041be5-cc27-ddad-4839-68ffdab41393}\@

:files
ipconfig /flushdns /c
C:\Windows\Installer\{fb041be5-cc27-ddad-4839-68ffdab41393}
C:\Users\tapounette\AppData\Local\{fb041be5-cc27-ddad-4839-68ffdab41393}

:Commands
[EMPTYTEMP]
[CREATERESTOREPOINT]