start
() C:\Users\DutelLucile\AppData\Roaming\cacaoweb\cacaoweb.exe
HKLM-x32\...\Run: [IminentMessenger] => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
HKLM-x32\...\Run: [fst_fr_173] => [X]
HKU\S-1-5-21-3491887394-3781860984-689020827-1001\...\Run: [cacaoweb] => C:\Users\DutelLucile\AppData\Roaming\cacaoweb\cacaoweb.exe [497664 2014-05-19] ()
HKU\S-1-5-21-3491887394-3781860984-689020827-1001\...\Run: [iLivid] => "C:\Users\DutelLucile\AppData\Local\iLivid\iLivid.exe" -autorun
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
HKLM\...\AppCertDlls: [x64] -> c:\program files (x86)\movies toolbar\datamngr\x64\apcrtldr.dll [665088 2014-04-06] ()
ProxyEnable: Internet Explorer proxy is enabled.
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=851&systemid=406&v=u12281-310&apn_uid=3022844351384147&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=851&systemid=406&v=u12281-310&apn_uid=3022844351384147&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=54BABC8556EAC3CE&affID=119884&tsp=5027
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1399027049&from=tugs&uid=HGSTXHTS541010A9E680_JB100013176WPR176WPRX&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=851&systemid=406&v=u12281-310&apn_uid=3022844351384147&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
BHO: No Name - {11111111-1111-1111-1111-110511421146} - No File
BHO: No Name - {11111111-1111-1111-1111-110511421153} - No File
BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF Extension: Freeven pro 1.2 - C:\Users\DutelLucile\AppData\Roaming\Mozilla\Firefox\Profiles\o2fbp8aa.default-1403113895355\Extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com [2014-06-20]
FF Extension: cacaoweb - C:\Users\DutelLucile\AppData\Roaming\Mozilla\Firefox\Profiles\o2fbp8aa.default-1403113895355\Extensions\cacaoweb@cacaoweb.org [2014-06-18]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction
CHR Extension: (Freeven pro 1.2) - C:\Users\DutelLucile\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb [2014-06-19]
CHR Extension: (MediaPlayerplus) - C:\Users\DutelLucile\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-06-19]
S2 Update WebSparkle; "C:\Program Files (x86)\WebSparkle\updateWebSparkle.exe" [X]
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg [36216 2014-04-06] (Bandoo Media Inc)
2014-06-20 11:44 - 2014-06-20 11:44 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (27).exe
2014-06-20 11:43 - 2014-06-20 11:44 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (26).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (25).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (24).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (23).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (22).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (21).exe
2014-06-20 11:39 - 2014-06-20 11:39 - 00999840 _____ () C:\Users\DutelLucile\Downloads\setup (20).exe
2014-06-19 22:26 - 2014-06-19 22:26 - 00003003 _____ () C:\Users\DutelLucile\Desktop\HiJackThis.lnk
2014-06-19 22:26 - 2014-06-19 22:26 - 00000000 ____D () C:\Users\DutelLucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-06-19 22:26 - 2014-06-19 22:26 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-06-19 22:23 - 2014-06-19 22:24 - 01402880 _____ () C:\Users\DutelLucile\Downloads\hijackthis_hijackthis_2.0.4_anglais_17891.msi
2014-06-18 18:21 - 2014-06-18 18:21 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (19).exe
2014-06-18 18:21 - 2014-06-18 18:21 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (18).exe
2014-06-18 18:19 - 2014-06-18 18:19 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (17).exe
2014-06-18 18:18 - 2014-06-18 18:18 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (16).exe
2014-06-18 18:18 - 2014-06-18 18:18 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (15).exe
2014-06-18 18:17 - 2014-06-18 18:18 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (14).exe
2014-06-18 18:17 - 2014-06-18 18:17 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (13).exe
2014-06-18 18:17 - 2014-06-18 18:17 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (12).exe
2014-06-18 18:16 - 2014-06-18 18:16 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (11).exe
2014-06-18 18:12 - 2014-06-18 18:12 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (9).exe
2014-06-18 18:12 - 2014-06-18 18:12 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (8).exe
2014-06-18 18:12 - 2014-06-18 18:12 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (10).exe
2014-06-18 18:11 - 2014-06-18 18:11 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (7).exe
2014-06-18 18:11 - 2014-06-18 18:11 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (6).exe
2014-06-18 18:05 - 2014-06-18 18:05 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (5).exe
2014-06-18 18:04 - 2014-06-18 18:04 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (4).exe
2014-06-18 18:03 - 2014-06-18 18:03 - 00998400 _____ () C:\Users\DutelLucile\Downloads\setup (1).exe
2014-06-19 16:54 - 2013-10-06 14:45 - 00000000 ____D () C:\Users\DutelLucile\AppData\Roaming\cacaoweb
2014-06-19 13:53 - 2014-05-04 13:48 - 00002152 _____ () C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-4.job
2014-06-19 13:49 - 2014-05-04 13:49 - 00002198 _____ () C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-4.job
2014-06-19 13:49 - 2014-05-04 13:49 - 00001440 _____ () C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-1.job
2014-06-19 13:49 - 2014-05-04 13:48 - 00001448 _____ () C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-6.job
2014-06-19 13:48 - 2014-05-04 13:48 - 00003148 _____ () C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-3.job
2014-06-19 13:48 - 2014-05-04 13:48 - 00001410 _____ () C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-6.job
2014-06-19 13:48 - 2014-05-04 13:48 - 00001402 _____ () C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-1.job
2014-06-19 13:47 - 2014-05-04 13:47 - 00003148 _____ () C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-3.job
2014-06-19 13:15 - 2014-04-06 15:08 - 00000000 ____D () C:\Users\DutelLucile\AppData\Roaming\wp_update
2014-06-19 13:13 - 2013-10-06 14:45 - 00497664 _____ () C:\Users\DutelLucile\Desktop\cacaoweb.exe
2014-06-16 01:15 - 2014-05-02 12:38 - 00000000 ____D () C:\ProgramData\IePluginService
2014-06-15 23:47 - 2014-05-04 13:48 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-06-15 23:47 - 2014-05-04 13:47 - 00000000 ____D () C:\Program Files (x86)\Freeven pro 1.2
2014-06-15 23:47 - 2014-05-02 12:18 - 00000000 ____D () C:\ProgramData\saVVe neiT
C:\Program Files (x86)\Iminent
c:\program files (x86)\movies toolbar
C:\Program Files (x86)\Optimizer Elite Max
C:\Program Files (x86)\AnyProtectEx
C:\Users\DutelLucile\AppData\Roaming\~seggfux.exe
C:\Users\DutelLucile\AppData\Roaming\~nrftqna.exe
C:\Users\DutelLucile\AppData\Local\iLivid
Task: {082E7197-13EB-4501-ABF9-BB752B4E7899} - System32\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-1 => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe [2014-05-04] (Freeven)
Task: {125A36F1-7378-43B6-8E74-386CAE83045A} - System32\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-3 => C:\Program Files (x86)\MediaPlayerplus\6c0e75e6-f53f-4d19-b513-977d38468083-3.exe [2014-05-04] (Freeven)
Task: {27AFDB55-93B0-4D76-B1F2-02A30A39286E} - System32\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-6 => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-novainstaller.exe [2014-05-04] (Freeven)
Task: {2A0020FA-3C66-48D3-8310-66485778A68E} - System32\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-1 => C:\Program Files (x86)\Freeven pro 1.2\Freeven pro 1.2-codedownloader.exe [2014-05-04] (Freeven)
Task: {2CF2D286-0BDE-4DC4-89B3-BA310ECE575D} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: {55C26D0B-9A3C-4C63-A9D1-DD639DCCC05E} - System32\Tasks\wp_update => C:\Users\DutelLucile\AppData\Roaming\~seggfux.exe [2014-04-06] ()
Task: {5F5F0ECA-0500-4E5A-B1A0-BFA1270FAA1D} - System32\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-4 => C:\Program Files (x86)\MediaPlayerplus\6c0e75e6-f53f-4d19-b513-977d38468083-4.exe [2014-05-04] (Freeven)
Task: {63AE05C7-E8A2-42DA-BC10-0AA2C7E68BF5} - System32\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-3 => C:\Program Files (x86)\Freeven pro 1.2\8aec4433-4737-4677-8a6d-745a9f2203b9-3.exe [2014-05-04] (Freeven)
Task: {7990FEE6-FCB2-4EC5-AFA2-6630166F97E1} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: {94860861-62E7-43ED-B3F9-A72E53EA79F1} - System32\Tasks\PCHelpers_period => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe
Task: {AB2FC4D5-40DF-4424-8D81-EB77C2F90AF8} - System32\Tasks\PCHelpers1st => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe
Task: {C9AB15C2-6E89-4CAE-B5C8-50CCCBD23E28} - System32\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-4 => C:\Program Files (x86)\Freeven pro 1.2\8aec4433-4737-4677-8a6d-745a9f2203b9-4.exe [2014-05-04] (Freeven)
Task: {DB393868-C271-42CD-BAAE-A1DC05B8E9A4} - System32\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-6 => C:\Program Files (x86)\Freeven pro 1.2\Freeven pro 1.2-novainstaller.exe [2014-05-04] (Freeven)
Task: {DFFD1612-5C21-4E33-B122-5033E16944C3} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: {EF42F35D-D068-40D5-9B21-6598E82D87E5} - System32\Tasks\TaskUserUpdate_wp => C:\Users\DutelLucile\AppData\Roaming\~nrftqna.exe [2013-12-06] ()
Task: C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-1.job => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe
Task: C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-3.job => C:\Program Files (x86)\MediaPlayerplus\6c0e75e6-f53f-4d19-b513-977d38468083-3.exe
Task: C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-4.job => C:\Program Files (x86)\MediaPlayerplus\6c0e75e6-f53f-4d19-b513-977d38468083-4.exe
Task: C:\Windows\Tasks\6c0e75e6-f53f-4d19-b513-977d38468083-6.job => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-novainstaller.exe
Task: C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-1.job => C:\Program Files (x86)\Freeven pro 1.2\Freeven pro 1.2-codedownloader.exe
Task: C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-3.job => C:\Program Files (x86)\Freeven pro 1.2\8aec4433-4737-4677-8a6d-745a9f2203b9-3.exe
Task: C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-4.job => C:\Program Files (x86)\Freeven pro 1.2\8aec4433-4737-4677-8a6d-745a9f2203b9-4.exe
Task: C:\Windows\Tasks\8aec4433-4737-4677-8a6d-745a9f2203b9-6.job => C:\Program Files (x86)\Freeven pro 1.2\Freeven pro 1.2-novainstaller.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\PCHelpers1st.job => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe
Task: C:\Windows\Tasks\PCHelpers_period.job => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe
AlternateDataStreams: C:\ProgramData\Temp:728B799F
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist => ""="service"
C:\Users\DutelLucile\AppData\Local\Temp\-qqx5_g6.dll
C:\Users\DutelLucile\AppData\Local\Temp\25829-672478-openoffice.exe
C:\Users\DutelLucile\AppData\Local\Temp\84962-658111-microsoft-office-2010-professional.exe
C:\Users\DutelLucile\AppData\Local\Temp\BackupSetup.exe
C:\Users\DutelLucile\AppData\Local\Temp\COMAP.EXE
C:\Users\DutelLucile\AppData\Local\Temp\down.3688.ytab_setup.exe
C:\Users\DutelLucile\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp92nw4k.dll
C:\Users\DutelLucile\AppData\Local\Temp\Extract.exe
C:\Users\DutelLucile\AppData\Local\Temp\f.exe
C:\Users\DutelLucile\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\DutelLucile\AppData\Local\Temp\Iminent.exe
C:\Users\DutelLucile\AppData\Local\Temp\OB.exe
C:\Users\DutelLucile\AppData\Local\Temp\Optimizer_Pro.exe
C:\Users\DutelLucile\AppData\Local\Temp\setup.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP62405.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP62765.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63284.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63285.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63340.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63425.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63599.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63752.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP63805.exe
C:\Users\DutelLucile\AppData\Local\Temp\sp64126.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP64881.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP65792.exe
C:\Users\DutelLucile\AppData\Local\Temp\SP65795.exe
C:\Users\DutelLucile\AppData\Local\Temp\Tsu3ECF6313.dll
C:\Users\DutelLucile\AppData\Local\Temp\uninst1.exe
C:\Users\DutelLucile\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\DutelLucile\AppData\Local\Temp\uninstallkit.exe
C:\Users\DutelLucile\AppData\Local\Temp\vcredist_x64.exe
end