SysRestore
O42 - Logiciel: Internet Explorer Toolbar 4.6 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {774C0434-9948-4DEE-A14E-69CDD316E36C}
[HKCU\Software\SweetIM]
[HKLM\Software\Wow6432Node\SweetIM]
O43 - CFD: 03/02/2013 - 04:47:04 - [0] ----D C:\Program Files (x86)\RKFree
O43 - CFD: 30/10/2012 - 18:19:26 - [0,039] ---AD C:\ProgramData\rkfree
O53 - SMSR:HKLM\...\startupreg\08f4dc96bbb7af09d1a37fe35c75a42f [Key] . (...) -- C:\Users\seb et audrey\AppData\Local\Temp\explorer.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~1.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SweetIM [Key] . (...) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O81 - IFC: Internet Feature Controls [HKCU] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O87 - FAEL: "{6C61FF05-5EEF-4D8B-BC1A-9B919129A81F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O87 - FAEL: "{F8A4EAF2-8846-4A69-80E4-270B324747BC}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O87 - FAEL: "{AA1B8842-149C-4C2A-8158-186ED75FC417}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.)
O87 - FAEL: "{A6FAC116-E907-44A9-A03C-F9F7F6ED9D26}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442c-B14C-3D1081953C94}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442c-B14C-3D1081953C94}]
[HKCU\Software\SweetIM]
C:\Program Files (x86)\rkfree
C:\ProgramData\rkfree
O90 - PUC: "4340C4778499EED41AE496DC3D613EC6" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{774C0434-9948-4DEE-A14E-69CDD316E36C}\ARPPRODUCTICON.exe
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- AskTBar Uninstall
[HKCU\Software\Softonic]
[HKLM\Software\Wow6432Node\AskTBar]
O53 - SMSR:HKLM\...\startupreg\InboxToolbar [Key] . (...) -- C:\Program Files (x86)\Inbox Toolbar\Inbox.exe (.not file.)
O69 - SBI: SearchScopes [HKCU] {45394C40-CA4E-4C87-9BC7-027CF4917ACC} - (Web Search) - http://search.conduit.com
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[HKCU\Software\Softonic]
O4 - Global Startup: C:\Users\seb et audrey\Desktop\Continue PDF Creator Installation.lnk . (...) -- C:\Users\seb et audrey\AppData\Local\Temp\ICReinstall_PDFCreatorSetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{30937D6A-5D1D-4A36-8B75-E29DB8B1557E}] (...) -- G:\mpman-mpmanager.exe (.not file.)
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
[HKCU\Software\IncrediMail]
O43 - CFD: 04/12/2012 - 20:18:28 - [11,195] ----D C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 21/01/2013 - 06:20:33 - [0,001] ----D C:\ProgramData\McAfee Security Scan
O53 - SMSR:HKLM\...\startupreg\Corel File Shell Monitor [Key] . (...) -- c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\CorelIOMonitor.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{30937D6A-5D1D-4A36-8B75-E29DB8B1557E}] (...) -- G:\mpman-mpmanager.exe (.not file.)
EMPTYCLSID
EmptyFlash
FirewallRaz
EmptyTemp