start 
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Pas de fichier
2016-06-23 01:26 - 2016-06-23 01:32 - 00000000 ____D C:\ProgramData\F-Secure
2016-06-23 01:25 - 2016-06-23 01:25 - 03618856 _____ (Facebook Inc.) C:\Users\Elsa\Downloads\Fsecure_T10210376905563966T_.exe
2014-10-29 08:25 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-29 08:25 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-29 08:25 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

EmptyTemp:
end