SysRestore O42 - Logiciel: Internet Explorer Toolbar 4.6 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {774C0434-9948-4DEE-A14E-69CDD316E36C} [HKCU\Software\SweetIM] [HKLM\Software\Wow6432Node\SweetIM] O43 - CFD: 03/02/2013 - 04:47:04 - [0] ----D C:\Program Files (x86)\RKFree O43 - CFD: 30/10/2012 - 18:19:26 - [0,039] ---AD C:\ProgramData\rkfree O53 - SMSR:HKLM\...\startupreg\08f4dc96bbb7af09d1a37fe35c75a42f [Key] . (...) -- C:\Users\seb et audrey\AppData\Local\Temp\explorer.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~1.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\SweetIM [Key] . (...) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O81 - IFC: Internet Feature Controls [HKCU] [FEATURE_BROWSER_EMULATION] -- svchost.exe O87 - FAEL: "{6C61FF05-5EEF-4D8B-BC1A-9B919129A81F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{F8A4EAF2-8846-4A69-80E4-270B324747BC}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{AA1B8842-149C-4C2A-8158-186ED75FC417}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) O87 - FAEL: "{A6FAC116-E907-44A9-A03C-F9F7F6ED9D26}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] [HKCU\Software\SweetIM] C:\Program Files (x86)\rkfree C:\ProgramData\rkfree O90 - PUC: "4340C4778499EED41AE496DC3D613EC6" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{774C0434-9948-4DEE-A14E-69CDD316E36C}\ARPPRODUCTICON.exe [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- AskTBar Uninstall [HKCU\Software\Softonic] [HKLM\Software\Wow6432Node\AskTBar] O53 - SMSR:HKLM\...\startupreg\InboxToolbar [Key] . (...) -- C:\Program Files (x86)\Inbox Toolbar\Inbox.exe (.not file.) O69 - SBI: SearchScopes [HKCU] {45394C40-CA4E-4C87-9BC7-027CF4917ACC} - (Web Search) - http://search.conduit.com [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] [HKCU\Software\Softonic] O4 - Global Startup: C:\Users\seb et audrey\Desktop\Continue PDF Creator Installation.lnk . (...) -- C:\Users\seb et audrey\AppData\Local\Temp\ICReinstall_PDFCreatorSetup.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{30937D6A-5D1D-4A36-8B75-E29DB8B1557E}] (...) -- G:\mpman-mpmanager.exe (.not file.) O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan [HKCU\Software\IncrediMail] O43 - CFD: 04/12/2012 - 20:18:28 - [11,195] ----D C:\Program Files (x86)\McAfee Security Scan O43 - CFD: 21/01/2013 - 06:20:33 - [0,001] ----D C:\ProgramData\McAfee Security Scan O53 - SMSR:HKLM\...\startupreg\Corel File Shell Monitor [Key] . (...) -- c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\CorelIOMonitor.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{30937D6A-5D1D-4A36-8B75-E29DB8B1557E}] (...) -- G:\mpman-mpmanager.exe (.not file.) EMPTYCLSID EmptyFlash FirewallRaz EmptyTemp