start
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [fst_fr_214] => [X]
HKLM-x32\...\Run: [stv_fr_14] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hp&ts=1402987218&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1402987513&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1402987693&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1402989274&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1402989624&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403124068&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403530758&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403601932&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403633033&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403796505&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403797076&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1403986951&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1404410272&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1404850745&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405156788&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405162819&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405860258&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405861069&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405948266&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1405964562&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1406032448&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1406040432&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1406051329&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "hxxp://istart.webssearches.com/?type=hppp&ts=1406056964&from=tugs&uid=TOSHIBAXMQ01ABD100_24AESP5NSXX24AESP5NS", "https://fr.yahoo.com?fr=hp-avast&type=avastbcl"
R2 Update Deal Keeper; C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe [321784 2014-07-24] ()
S2 Util Deal Keeper; C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe [321784 2014-07-24] ()
R1 {55dce8ba-9dec-4013-937e-adbf9317d990}w64; C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys [61120 2014-07-17] (StdLib)
2014-07-21 15:52 - 2014-07-17 16:33 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys
2014-07-21 15:05 - 2014-07-21 15:06 - 00360272 _____ () C:\Users\lilou\Downloads\SoftonicDownloader_for_myemoticons.exe
2014-07-21 15:00 - 2014-07-21 15:00 - 00011284 _____ () C:\Users\lilou\Downloads\50826.user.js
2014-07-21 14:49 - 2014-07-24 11:15 - 00000000 ____D () C:\Program Files (x86)\Deal Keeper
2014-07-17 16:33 - 2014-07-21 15:52 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys
C:\Users\lilou\AppData\Local\Temp\6_Offer_15.exe
C:\Users\lilou\AppData\Local\Temp\BackupSetup.exe
C:\Users\lilou\AppData\Local\Temp\DownloadManager.exe
C:\Users\lilou\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpq2sfbm.dll
C:\Users\lilou\AppData\Local\Temp\ICReinstall_Facemoods [1].exe
C:\Users\lilou\AppData\Local\Temp\IminentSetup_july17.exe
C:\Users\lilou\AppData\Local\Temp\optprosetup.exe
C:\Users\lilou\AppData\Local\Temp\Quarantine.exe
C:\Users\lilou\AppData\Local\Temp\vcredist_x64.exe
2014-07-21 11:39 - 2014-07-24 10:45 - 00321784 _____ () C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe
HKLM\...\StartupApproved\Run32: => "stv_fr_14"
HKCU\...\StartupApproved\StartupFolder: => "MyPC Backup.lnk"
HKCU\...\StartupApproved\Run: => "cacaoweb"
HKCU\...\StartupApproved\Run: => "Optimizer Pro"
end