Rapport de ZHPDiag v1.34.44 par Nicolas Coolman, Update du 19/01/2013 Run by sandra at 04/02/2013 09:19:32 State : Nouvelle version disponible UAC : Deactivate by program ---\\ Web Browser MSIE: Internet Explorer v8.0.7601.17514 ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 2 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: AMD64 Family 16 Model 6 Stepping 3, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 2810 MB (53% free) System Restore: Activé (Enable) System drive C: has 219 GB (77%) free of 282 GB ---\\ Logged in mode ~ Computer Name: SANDRA-HP ~ User Name: sandra ~ All Users Names: sandra, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\sandra\AppData\Roaming\ ~ %Desktop% : C:\Users\sandra\Desktop\ ~ %Favorites% : C:\Users\sandra\Favorites\ ~ %LocalAppData% : C:\Users\sandra\AppData\Local\ ~ %StartMenu% : C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 219 Go of 282 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 16 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 0 Go) Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.7E04D13661FB771CA4FDBB836AD0BA49] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.27/10/2012 - 06:51:21.) -- C:\Windows\System32\wininet.dll [1188864] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Scan Generic Processes in 00mn 01s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/740 ~ Mes musiques (My Musics) : 162/429 ~ Mes Videos (My Videos) : 1/37 ~ Mes Favoris (My Favorites) : 1/21 ~ Mes Documents (My Documents) : 2/390 ~ Mon Bureau (My Desktop) : 1/118 ~ Menu demarrer (Programs) : 1/30 ~ Scan Hidden Files in 00mn 04s ---\\ Processus lancés [MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\sandra\Desktop\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.3268] [MD5.3E48A4D66B5D092FEA1B21328AF08CD3] - (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [770728] [PID.4080] [MD5.EEC2835879188CE91EFC345DBAEFE6AF] - (...) -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [148280] [PID.3876] [MD5.16F32849549A5D7B9F61641B6F386DBA] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128] [PID.3620] [MD5.775DC2AE72F972935703ADA4FFDF3749] - (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [888480] [PID.3092] [MD5.FCDD7F7DA08E82A0CC83AF8111EDFDB9] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [602680] [PID.3888] [MD5.569E547273C25B019054A12A40400ECE] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [11318784] [PID.3576] [MD5.DFABD45F0D7665E88C617A6FC93F57EC] - (...) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\IEWLauncher.exe [251344] [PID.992] [MD5.B243A59D480C566255E11DEADF7D264C] - (.Pas de propriétaire - Notifier Orange.) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\SmsNotifier.exe [1674192] [PID.1092] [MD5.4B723F33D7331F20E06F3A2FD76EC1D5] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [11312128] [PID.580] [MD5.BAA1780D73BFA212D97851FCD43F1DA3] - (...) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\HSSModule.exe [419280] [PID.960] [MD5.FEE45AD0B1EBF2C2D295B59BA593F6CD] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3521464] [PID.4304] [MD5.E4401CF27225C1D6E664E86195978562] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544] [PID.4988] [MD5.47D1F0444CE33A0CA42409A88896CD8D] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1590840] [PID.7144] [MD5.AE5A69F44C1F97EDC83237FC0B29B6FB] - (.Google Inc. - Google Crash Handler.) -- C:\Users\sandra\AppData\Local\Google\Update\1.3.21.123\GoogleCrashHandler.exe [212432] [PID.8120] [MD5.C723B02BA5BF788C9F91746BF37EACD9] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.313\SSScheduler.exe [271808] [PID.7380] [MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [3147384] [PID.2812] [MD5.7B9B0FCD86CDC2C8C4BFBD0097E982F6] - (...) -- c:\program files (x86)\socialbox\socialbox.exe [142336] [PID.552] [MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe [1248208] [PID.7588] [MD5.74EA3B22BED984C3439E4397DA5A1811] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5170688] [PID.3112] ~ Scan Processes Running in 00mn 04s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\sandra\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com G0 - GCSP: Preference [User Data\Default] http://r.orange.fr G1 - GCS: Preference [User Data\Default] None ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.5.0.3.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\sandra\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\sandra\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\sandra\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R3 - URLSearchHook: (no name) [64Bits] - {A3BC75A2-1F87-4686-AA43-5347D756017C} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) [64Bits] - {338c5d66-6b92-40a7-a216-9830d2e54103} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) [64Bits] - {adca5064-9e30-43fe-9856-58b07a3149fe} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: MSS+ Identifier [64Bits] - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} . (.McAfee, Inc. - Quick Browser Identifier for MSS+ Tool.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.313\McAfeeMSS_IE.dll O2 - BHO: Lexmark Barre d'outils [64Bits] - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} . (...) -- C:\Program Files\Lexmark Toolbar\toolband.dll O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.) O2 - BHO: WormRadar.com IESiteBlocker.NavFilter [64Bits] - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Clé orpheline O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\ O2 - BHO: Lexmark [64Bits] - {D2C5E510-BE6D-42CC-9F61-E4F939078474} . (...) -- C:\Program Files\Lexmark Printable Web\bho.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll ~ Scan BHO in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe O4 - HKLM\..\Run: [HPWirelessAssistant] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe O4 - HKLM\..\Run: [lxeamon.exe] . (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe O4 - HKLM\..\Run: [EzPrint] . (...) -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe O4 - HKCU\..\Run: [HPAdvisorDock] . (.Pas de propriétaire - HP Advisor Dock.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sandra\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe O4 - HKCU\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\sandra\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe O4 - HKCU\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_5233BE0DC0ACCE2D8CDA094B3BFF75F0] . (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O4 - HKLM\..\Wow6432Node\Run: [Norton Online Backup] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [Start_Icon225_IEWLauncher] . (...) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\IEWLauncher.exe O4 - HKLM\..\Wow6432Node\Run: [Start_SMSNotifier] . (.Pas de propriétaire - Notifier Orange.) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\SmsNotifier.exe O4 - HKLM\..\Wow6432Node\Run: [Start_HSSModule] . (...) -- C:\Program Files (x86)\Orange\Orange Clé 3G+\{67B2F852-03B0-4abd-B7DE-9BF0EA317D2C}\HSSModule.exe O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [HPAdvisorDock] . (.Pas de propriétaire - HP Advisor Dock.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sandra\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\sandra\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe O4 - HKUS\S-1-5-21-4091992130-3734699463-2662091557-1000\..\Run: [GoogleChromeAutoLaunch_5233BE0DC0ACCE2D8CDA094B3BFF75F0] . (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe ~ Scan Application in 00mn 01s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\sandra\Desktop\Assistance Livebox.lnk . (...) -- C:\Program Files (x86)\Orange\Assistance Livebox\AssistanceLivebox.exe O4 - Global Startup: C:\Users\sandra\Desktop\Contrôle parental.url . (...) -- C:\Users\sandra\Desktop\Contrôle parental.url O4 - Global Startup: C:\Users\sandra\Desktop\Free YouTube to MP3 Converter.lnk . (.DVDVideoSoft Ltd..) -- C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe O4 - Global Startup: C:\Users\sandra\Desktop\Magic Desktop.lnk . (.EasyBits Software AS.) -- C:\Program Files (x86)\EasyBits For Kids\ezSecShield.exe O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Babylon.lnk . (...) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe (.not file.) O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Jouer à HP Games.lnk . (.WildTangent, Inc..) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsole-wt.exe O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk . (.Samsung.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe O4 - Global Startup: C:\Users\sandra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline ~ Scan Global Startup in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000010\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{047D138F-96A4-4DFF-B3F5-324003BDE34E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{075BF440-0826-42D6-BD46-4709EAA4A37E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{B75F1D9F-FA17-4E7B-91CA-F6E84EFB92B1}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{047D138F-96A4-4DFF-B3F5-324003BDE34E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{075BF440-0826-42D6-BD46-4709EAA4A37E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{B75F1D9F-FA17-4E7B-91CA-F6E84EFB92B1}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{047D138F-96A4-4DFF-B3F5-324003BDE34E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{075BF440-0826-42D6-BD46-4709EAA4A37E}: DhcpNameServer = 192.168.10.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{B75F1D9F-FA17-4E7B-91CA-F6E84EFB92B1}: DhcpNameServer = 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: linkscanner [64Bits] - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) -- O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: deflate [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Andrea RT Filters Service (AERTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe O23 - Service: HPWMISVC (HPWMISVC) . (.Pas de propriétaire - HPWMISVC Application.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: lxea_device (lxea_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxeacoms.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Users\sandra\Desktop\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Users\sandra\Desktop\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Norton Online Backup (NOBU) . (.Symantec Corporation - Norton Online Backup Service.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe O23 - Service: Orange update Core Service (Orange update Core Service) . (.France Telecom SA - Orange Upd@te.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe O23 - Service: RtVOsdService Installer (RtVOsdService) . (.Realtek Semiconductor Corp. - RtVOsdService.) - C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: (vToolbarUpdater14.0.1) . (.Pas de propriétaire - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) ~ Scan Services in 00mn 02s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000UA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000UA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForSANDRA-HP$.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForsandra.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000Core] (.Facebook Inc..) -- C:\Users\sandra\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000UA] (.Facebook Inc..) -- C:\Users\sandra\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [Google Updater and Installer] (.Google Inc..) -- C:\Users\sandra\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000Core] (.Google Inc..) -- C:\Users\sandra\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-4091992130-3734699463-2662091557-1000UA] (.Google Inc..) -- C:\Users\sandra\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleForsandra] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [MD5.B77081F8221968C7DAB794B0BA55C43E] [APT] [Java Update Scheduler] (.Sun Microsystems, Inc..) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [MD5.3CB07566302BCEEB898DE270A0BEC175] [APT] [Programme de mise … jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [RecoveryCDWin7] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [Registration] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [ServicePlan] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [MD5.0883882382800C6454E59E6030AF35EC] [APT] [orangeinside] (.Orange.) -- C:\Users\sandra\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe ~ Scan Scheduled Task in 00mn 06s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys O41 - Driver: (Avgldx64) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx64.sys O41 - Driver: (Avgtdia) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdia.sys O41 - Driver: (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx64.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 15s ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM][64Bits] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07} O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {42081A74-B2BB-B64E-ABF5-9CEE13974355} O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {058EB68D-8F07-4E07-BD3B-B97D18E092F0} O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {502275B0-3DA3-44D8-8702-066525CAAE98} O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS Update Manager_is1 O42 - Logiciel: AVS Video Converter 8 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Video Converter 7_is1 O42 - Logiciel: AVS4YOU Software Navigator 1.4 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Software Navigator_is1 O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1798D459-6B8B-474B-868D-1229EADA3B95} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Reader X (10.1.5) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {9ECF7817-DB11-4FBA-9DF1-296A578D513A} O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM][64Bits] -- WT087420 O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {CCE825DB-347A-4004-A186-5F4A6FDD8547} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {D70884EA-E2CE-4539-91DB-4766CC1E5F5F} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Assistance Livebox - (.Orange.) [HKLM][64Bits] -- Assistance Livebox O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087428 O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Wireless LAN Adapter O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {30F4D459-824A-498C-826C-7721B777207F} O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087453 O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT087536 O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} O42 - Logiciel: Energy Star Digital Logo - (.Hewlett-Packard.) [HKLM][64Bits] -- {BD1A34C9-4764-4F79-AE1F-112F8C89D3D4} O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WT087361 O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3} O42 - Logiciel: Free YouTube to MP3 Converter version 3.11.37.1212 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free YouTube to MP3 Converter_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {B360E24A-BF25-4353-AA79-1B54F509024A} O42 - Logiciel: HP Game Console - (.WildTangent.) [HKLM][64Bits] -- My HP Game Console O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {4B156358-CE9C-4E9F-8CAD-79AE86A68C60} O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E342D296-DB9D-4FC7-ACB0-39926C0BFA16} O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {72D90DB3-A16A-4545-B555-868471101833} O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {5D335F5D-4185-4AD8-8E6D-64D8D4AB80D7} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96} O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {FE840F8B-9007-4496-AB62-B869ED05F4B2} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087480 O42 - Logiciel: Java(TM) 6 Update 20 (64-bit) - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86416020FF} O42 - Logiciel: Java(TM) 6 Update 37 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216037FF} O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM][64Bits] -- WT087485 O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WT087490 O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WT087380 O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: Lexmark - (.Pas de propriétaire.) [HKLM][64Bits] -- {D2C5E510-BE6D-42CC-9F61-E4F939078474} O42 - Logiciel: Lexmark Barre d'outils - (.Pas de propriétaire.) [HKLM][64Bits] -- {1017A80C-6F09-4548-A84D-EDD6AC9525F0} O42 - Logiciel: Lexmark S300-S400 Series - (.Lexmark International, Inc..) [HKLM][64Bits] -- Lexmark S300-S400 Series O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {46BA053F-57B3-4153-BDB6-D37EEC8B12D7} O42 - Logiciel: LinCity-NG 1.97.beta - (.LinCity-NG Developers.) [HKLM][64Bits] -- LinCity-NG_is1 O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC} O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM][64Bits] -- EasyBits Magic Desktop O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: MonoCalendar 0.7.2 - (.BorSanZa.) [HKLM][64Bits] -- MonoCalendar O42 - Logiciel: Norton Online Backup - (.Symantec Corporation.) [HKLM][64Bits] -- {40A66DF6-22D3-44B5-A7D3-83B118A2C0DC} O42 - Logiciel: Notification Mail - (.Orange.) [HKLM][64Bits] -- MailNotifier O42 - Logiciel: Official Video Converter - (.Aedge Performance BCN SL.) [HKLM][64Bits] -- {4DD1AF59-5121-421F-B92D-EEBF3F20345A} O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM][64Bits] -- {266517E6-D866-439D-919C-B8B1A52E6080} O42 - Logiciel: Orange Clé 3G+ - (.Orange.) [HKLM][64Bits] -- {FE19C975-AFC8-44A4-85FA-6DBAD247687D} O42 - Logiciel: Orange Inside - (.Orange.) [HKCU][64Bits] -- Orange Inside O42 - Logiciel: Orange Installeur version 1.2.5.0 - (.Orange.) [HKLM][64Bits] -- {D13FE823-C575-4451-AC37-E645A67AA581}_1.2.5.0 O42 - Logiciel: Orange update - (.Orange.) [HKLM][64Bits] -- OrangeUpdateManager O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT087394 O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU][64Bits] -- PhotoFiltre O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM][64Bits] -- {D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM][64Bits] -- WT087501 O42 - Logiciel: Player Metaboli - (.Metaboli.) [HKLM][64Bits] -- {D3A3F5C5-E95B-456D-952B-DDEC3AF68319}_is1 O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WT087396 O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} O42 - Logiciel: RtVOsd - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9} O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8} O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087510 O42 - Logiciel: Socialbox - (.Zoosk, Inc..) [HKLM][64Bits] -- com.socialbox.socialbox O42 - Logiciel: Socialbox - (.Zoosk, Inc..) [HKLM][64Bits] -- {B3A4B5A9-C9CA-7C40-F58A-9BC514BAC3BA} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: ToolbarFR - (.Orange.) [HKLM][64Bits] -- {A047FE02-C91C-41CB-898C-4ED21B86025A} O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM][64Bits] -- WT087513 O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Visual Studio 2008 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {FCDBEA60-79F0-4FAE-BBA8-55A26C609A49} O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F} O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WT087519 O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087533 O42 - Logiciel: barre d'outils Orange - (.Orange.) [HKLM][64Bits] -- OrangeToolbar O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0E5D76AD-A3FB-48D5-8400-8903B10317D3} O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM][64Bits] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI] [HKCU\Software\AVS4YOU] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Avg] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Avg] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\MarkAny] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\Orange] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Auslogics] [HKCU\Software\AutoPrntApp] [HKCU\Software\Avg] [HKCU\Software\BrowserTemp] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DVDVideoSoft] [HKCU\Software\EasyBits] [HKCU\Software\Facebook] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Lake] [HKCU\Software\Lexmark S300-S400 Series] [HKCU\Software\LexmarkInkjet] [HKCU\Software\LexmarkPhoto] [HKCU\Software\Lexmark] [HKCU\Software\LightScribe] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Netscape] [HKCU\Software\OpenOffice.org] [HKCU\Software\OrangeInside] [HKCU\Software\PDFCreator] [HKCU\Software\PTP] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\Samsung] [HKCU\Software\SisSoftware] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\SweetIM] [HKCU\Software\Synaptics] [HKCU\Software\Trolltech] [HKCU\Software\TuneUp] [HKCU\Software\WinRAR SFX] [HKCU\Software\Wow6432Node] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yummy Interactive, Inc.] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\Zylom] [HKCU\Software\cybelsoft] [HKCU\Software\kde.org] [HKCU\Software\vShare.tv] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Avg] [HKLM\Software\CXT] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\FaxManS300-S400SeriesPorts] [HKLM\Software\GEAR Software] [HKLM\Software\HPQ] [HKLM\Software\Hewlett-Packard] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\LexmarkInkjet] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SAMSUNG] [HKLM\Software\SRS Labs] [HKLM\Software\Sonic] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\TuneUp] [HKLM\Software\WildTangent] [HKLM\Software\Wow6432Node\ABBYY] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\AVG Secure Search] [HKLM\Software\Wow6432Node\AVG] [HKLM\Software\Wow6432Node\AVS4YOU] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\Apple Computer, Inc.] [HKLM\Software\Wow6432Node\Apple Inc.] [HKLM\Software\Wow6432Node\BcmSetup] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\DVDVideoSoft] [HKLM\Software\Wow6432Node\EasyBits] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Lake] [HKLM\Software\Wow6432Node\LexmarkInkjet] [HKLM\Software\Wow6432Node\Lexmark] [HKLM\Software\Wow6432Node\LightScribe] [HKLM\Software\Wow6432Node\Loader] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\Metaboli] [HKLM\Software\Wow6432Node\Mircrosoft] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\OfficialVideoConverter] [HKLM\Software\Wow6432Node\OpenOffice.org] [HKLM\Software\Wow6432Node\Orange] [HKLM\Software\Wow6432Node\P2G_Upgrade] [HKLM\Software\Wow6432Node\PDFCreator] [HKLM\Software\Wow6432Node\PDR_Upgrade] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Product_Upgrade] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Software] [HKLM\Software\Wow6432Node\Sun Microsystems] [HKLM\Software\Wow6432Node\SweetIM] [HKLM\Software\Wow6432Node\TuneUp] [HKLM\Software\Wow6432Node\WildTangent] [HKLM\Software\Wow6432Node\Win32 Services] [HKLM\Software\Wow6432Node\WinPcap] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\cybelsoft] [HKLM\Software\Wow6432Node\mcafeeupdater] [HKLM\Software\Wow6432Node\webtogo] [HKLM\Software\Wow6432Node] [HKLM\Software\cybelsoft] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 05/12/2010 - 17:11:12 - [115,536] ----D C:\Program Files (x86)\Abbyy FineReader 6.0 Sprint O43 - CFD: 19/01/2013 - 07:22:11 - [139,914] ----D C:\Program Files (x86)\Ad-Aware Antivirus O43 - CFD: 29/07/2012 - 12:05:30 - [115,449] ----D C:\Program Files (x86)\Adobe O43 - CFD: 22/11/2011 - 21:44:32 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 17/08/2010 - 03:41:43 - [87,216] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 24/10/2012 - 19:21:50 - [146,359] ----D C:\Program Files (x86)\AVG O43 - CFD: 26/06/2012 - 21:52:05 - [64,985] ----D C:\Program Files (x86)\AVS4YOU O43 - CFD: 22/11/2011 - 21:43:51 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 20/12/2012 - 10:10:41 - [537,727] ----D C:\Program Files (x86)\Common Files O43 - CFD: 17/08/2010 - 03:50:43 - [1648,011] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 20/12/2012 - 10:10:41 - [6,152] ----D C:\Program Files (x86)\DVDVideoSoft O43 - CFD: 03/01/2013 - 20:32:40 - [103,214] ----D C:\Program Files (x86)\EasyBits For Kids O43 - CFD: 29/10/2011 - 11:08:08 - [46,112] ----D C:\Program Files (x86)\Google O43 - CFD: 27/11/2012 - 08:32:48 - [803,536] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 20/12/2010 - 10:09:18 - [0] ----D C:\Program Files (x86)\HP O43 - CFD: 17/08/2010 - 03:59:36 - [271,028] ----D C:\Program Files (x86)\HP Games O43 - CFD: 27/11/2012 - 08:37:35 - [173,606] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 13/12/2012 - 09:59:05 - [5,209] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 26/01/2013 - 20:57:26 - [152,491] ----D C:\Program Files (x86)\iTunes O43 - CFD: 29/10/2012 - 12:54:25 - [84,688] ----D C:\Program Files (x86)\Java O43 - CFD: 03/12/2010 - 22:12:55 - [15,541] ----D C:\Program Files (x86)\JRE O43 - CFD: 20/08/2012 - 10:05:09 - [51,504] ----D C:\Program Files (x86)\Lexmark S300-S400 Series O43 - CFD: 20/08/2012 - 10:04:41 - [2,208] ----D C:\Program Files (x86)\Lexmark Toolbar O43 - CFD: 09/02/2011 - 15:40:16 - [54,807] ----D C:\Program Files (x86)\LinCity-NG O43 - CFD: 21/06/2012 - 09:19:53 - [2,414] ----D C:\Program Files (x86)\MarkAny O43 - CFD: 01/02/2013 - 08:08:08 - [11,322] ----D C:\Program Files (x86)\McAfee Security Scan O43 - CFD: 26/08/2012 - 20:47:34 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 17/02/2012 - 05:15:11 - [12,399] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 31/12/2010 - 09:26:03 - [39,143] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 12/05/2012 - 09:07:51 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 17/07/2010 - 16:38:21 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 04/12/2010 - 14:23:15 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 17/07/2011 - 20:43:51 - [0,482] ----D C:\Program Files (x86)\MonoCalendar O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 31/12/2010 - 09:25:34 - [63,464] ----D C:\Program Files (x86)\MSECache O43 - CFD: 26/06/2012 - 22:21:02 - [79,498] ----D C:\Program Files (x86)\OfficialVideoConverter O43 - CFD: 03/12/2010 - 21:35:12 - [20,599] R---D C:\Program Files (x86)\Online Services O43 - CFD: 03/12/2010 - 22:12:54 - [370,139] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 10/08/2012 - 10:12:11 - [185,034] ----D C:\Program Files (x86)\Orange O43 - CFD: 27/06/2012 - 09:00:53 - [32,639] ----D C:\Program Files (x86)\PDFCreator O43 - CFD: 03/12/2010 - 22:16:00 - [3,528] ----D C:\Program Files (x86)\PhotoFiltre O43 - CFD: 03/02/2011 - 09:11:41 - [4,710] ----D C:\Program Files (x86)\Player Metaboli O43 - CFD: 17/08/2010 - 03:39:08 - [13,339] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 21/06/2012 - 09:21:43 - [242,699] ----D C:\Program Files (x86)\Samsung O43 - CFD: 27/11/2011 - 20:31:42 - [0,210] ----D C:\Program Files (x86)\searchweb O43 - CFD: 06/09/2012 - 07:01:48 - [16,855] R---D C:\Program Files (x86)\Skype O43 - CFD: 14/03/2012 - 12:35:29 - [17,254] ----D C:\Program Files (x86)\Smart Organizer O43 - CFD: 13/12/2011 - 14:05:23 - [2,365] ----D C:\Program Files (x86)\Socialbox O43 - CFD: 17/07/2010 - 17:21:56 - [6,152] ----D C:\Program Files (x86)\Symantec O43 - CFD: 17/08/2010 - 03:39:30 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 19/01/2013 - 07:22:10 - [0,000] ----D C:\Program Files (x86)\Toolbar Cleaner O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 18/07/2010 - 01:55:49 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 22/06/2012 - 20:11:56 - [141,180] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 19/09/2011 - 08:11:07 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 19/09/2011 - 08:11:07 - [5,090] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 19/09/2011 - 08:11:07 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 19/09/2011 - 08:11:07 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 19/09/2011 - 08:11:07 - [6,039] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 04/02/2013 - 09:19:55 - [11,395] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 30/03/2012 - 17:12:02 - [0] ----D C:\Program Files (x86)\Zylom Games O43 - CFD: 01/11/2012 - 09:05:44 - [3,191] ----D C:\Program Files (x86)\~BabylonToolbar O43 - CFD: 29/07/2012 - 12:05:32 - [3,797] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 31/01/2013 - 12:47:12 - [43,942] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 26/01/2013 - 20:56:39 - [105,340] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 27/01/2013 - 21:01:00 - [1,968] ----D C:\Program Files (x86)\Common Files\AVG Secure Search O43 - CFD: 26/06/2012 - 21:51:56 - [92,727] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 17/08/2010 - 03:51:50 - [0,132] ----D C:\Program Files (x86)\Common Files\CyberLink O43 - CFD: 25/01/2011 - 13:56:45 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 20/12/2012 - 10:10:56 - [65,886] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft O43 - CFD: 17/07/2010 - 16:34:49 - [3,806] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 29/10/2012 - 12:55:06 - [1,202] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 17/08/2010 - 03:45:14 - [35,698] ----D C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 07/02/2012 - 13:00:58 - [132,110] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 06/09/2012 - 07:01:48 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 10/11/2011 - 16:34:00 - [9,767] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 17/07/2010 - 16:35:54 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 26/01/2013 - 20:57:27 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 19/01/2013 - 07:22:09 - [0,000] ----D C:\ProgramData\Ad-Aware Browsing Protection O43 - CFD: 08/08/2012 - 10:55:10 - [188,881] ----D C:\ProgramData\Adobe O43 - CFD: 22/11/2011 - 21:44:20 - [177,113] ----D C:\ProgramData\Apple O43 - CFD: 26/01/2013 - 20:56:39 - [56,902] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 17/08/2010 - 04:14:11 - [0,000] ----D C:\ProgramData\ATI O43 - CFD: 24/10/2012 - 19:16:28 - [250,531] ----D C:\ProgramData\AVG2013 O43 - CFD: 26/06/2012 - 21:52:14 - [0] ----D C:\ProgramData\AVS4YOU O43 - CFD: 03/12/2010 - 21:32:23 - [0] --H-D C:\ProgramData\Bureau O43 - CFD: 03/12/2010 - 22:00:54 - [0,000] --H-D C:\ProgramData\Common Files O43 - CFD: 11/10/2011 - 16:52:06 - [0,077] ----D C:\ProgramData\CyberLink O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 05/12/2010 - 17:44:59 - [0,000] ----D C:\ProgramData\Ezprint O43 - CFD: 03/12/2010 - 21:32:23 - [0] --H-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 20/12/2010 - 09:48:57 - [63,381] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 18/01/2013 - 21:19:22 - [0,259] ----D C:\ProgramData\Lavasoft O43 - CFD: 27/01/2011 - 13:05:13 - [0,438] ----D C:\ProgramData\Lexmark S300-S400 Series O43 - CFD: 04/10/2012 - 18:45:53 - [0,017] ----D C:\ProgramData\Lx_cats O43 - CFD: 01/11/2012 - 10:20:33 - [6,421] ----D C:\ProgramData\ma-config.com O43 - CFD: 27/01/2013 - 21:11:50 - [7,674] ----D C:\ProgramData\Malwarebytes O43 - CFD: 29/07/2012 - 12:06:07 - [0,262] ----D C:\ProgramData\McAfee O43 - CFD: 19/01/2013 - 07:22:11 - [0,001] ----D C:\ProgramData\McAfee Security Scan O43 - CFD: 03/12/2010 - 21:32:23 - [0] --H-D C:\ProgramData\Menu Démarrer O43 - CFD: 04/02/2013 - 08:05:51 - [160,899] ----D C:\ProgramData\MFAData O43 - CFD: 26/08/2012 - 20:47:34 - [2018,981] -S--D C:\ProgramData\Microsoft O43 - CFD: 03/12/2010 - 21:32:23 - [0] --H-D C:\ProgramData\Modèles O43 - CFD: 03/12/2010 - 21:58:45 - [0,000] ----D C:\ProgramData\Norton O43 - CFD: 17/08/2010 - 03:52:05 - [15,114] ----D C:\ProgramData\NortonInstaller O43 - CFD: 13/08/2012 - 16:00:32 - [1,680] ----D C:\ProgramData\Orange O43 - CFD: 19/01/2013 - 06:45:09 - [1,962] ----D C:\ProgramData\Recovery O43 - CFD: 05/12/2010 - 17:09:49 - [0] ----D C:\ProgramData\S300-S400 Series O43 - CFD: 21/06/2012 - 09:21:12 - [7,985] ----D C:\ProgramData\Samsung O43 - CFD: 06/09/2012 - 07:02:03 - [37,905] ----D C:\ProgramData\Skype O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 17/07/2010 - 18:54:09 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 17/07/2010 - 17:21:56 - [0,039] ----D C:\ProgramData\Symantec O43 - CFD: 14/01/2012 - 17:19:39 - [7,816] ----D C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 20/12/2012 - 10:12:20 - [0,482] ----D C:\ProgramData\TuneUp Software O43 - CFD: 26/01/2011 - 10:46:43 - [0] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 17/08/2010 - 03:59:15 - [1794,261] ----D C:\ProgramData\WildTangent O43 - CFD: 11/01/2011 - 16:13:36 - [0] ----D C:\ProgramData\Zylom O43 - CFD: 21/12/2012 - 09:39:44 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 21/12/2012 - 09:39:44 - [0] ----D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} O43 - CFD: 21/12/2012 - 09:39:44 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} O43 - CFD: 18/01/2013 - 21:24:07 - [0,001] ----D C:\Users\sandra\AppData\Roaming\Ad-Aware Antivirus O43 - CFD: 08/08/2012 - 10:54:08 - [12,958] ----D C:\Users\sandra\AppData\Roaming\Adobe O43 - CFD: 22/11/2011 - 21:47:43 - [0,190] ----D C:\Users\sandra\AppData\Roaming\Apple Computer O43 - CFD: 03/12/2010 - 21:42:16 - [0] ----D C:\Users\sandra\AppData\Roaming\ATI O43 - CFD: 24/10/2012 - 19:21:17 - [0,049] ----D C:\Users\sandra\AppData\Roaming\AVG2013 O43 - CFD: 26/06/2012 - 21:52:14 - [0,004] ----D C:\Users\sandra\AppData\Roaming\AVS4YOU O43 - CFD: 02/09/2011 - 09:02:39 - [0,151] ----D C:\Users\sandra\AppData\Roaming\com.socialbox.socialbox O43 - CFD: 14/02/2011 - 20:57:19 - [0,002] ----D C:\Users\sandra\AppData\Roaming\CyberLink O43 - CFD: 20/12/2012 - 10:10:41 - [1,888] ----D C:\Users\sandra\AppData\Roaming\DVDVideoSoft O43 - CFD: 01/06/2012 - 22:33:57 - [0,000] ----D C:\Users\sandra\AppData\Roaming\DVDVideoSoftIEHelpers O43 - CFD: 06/05/2011 - 08:45:21 - [0,169] ----D C:\Users\sandra\AppData\Roaming\Hewlett-Packard O43 - CFD: 21/12/2012 - 09:39:44 - [0] ----D C:\Users\sandra\AppData\Roaming\hpqLog O43 - CFD: 18/12/2010 - 18:29:52 - [0,004] ----D C:\Users\sandra\AppData\Roaming\Icones O43 - CFD: 03/12/2010 - 21:40:58 - [0] ----D C:\Users\sandra\AppData\Roaming\Identities O43 - CFD: 18/01/2013 - 21:26:15 - [0,001] ----D C:\Users\sandra\AppData\Roaming\LavasoftStatistics O43 - CFD: 03/12/2010 - 21:47:41 - [0,056] ----D C:\Users\sandra\AppData\Roaming\Macromedia O43 - CFD: 27/01/2013 - 21:11:59 - [6,113] ----D C:\Users\sandra\AppData\Roaming\Malwarebytes O43 - CFD: 17/08/2010 - 13:28:55 - [0] ----D C:\Users\sandra\AppData\Roaming\Media Center Programs O43 - CFD: 08/08/2012 - 10:54:08 - [11,126] -S--D C:\Users\sandra\AppData\Roaming\Microsoft O43 - CFD: 05/12/2010 - 22:14:54 - [2,563] ----D C:\Users\sandra\AppData\Roaming\OpenOffice.org O43 - CFD: 10/08/2012 - 10:10:53 - [10,984] ----D C:\Users\sandra\AppData\Roaming\Orange O43 - CFD: 06/12/2010 - 12:29:50 - [0,001] ----D C:\Users\sandra\AppData\Roaming\PhotoFiltre O43 - CFD: 05/12/2010 - 17:30:07 - [0,042] ----D C:\Users\sandra\AppData\Roaming\S300-S400 Series O43 - CFD: 21/06/2012 - 21:16:17 - [1,964] ----D C:\Users\sandra\AppData\Roaming\Samsung O43 - CFD: 09/09/2012 - 17:01:22 - [0,804] ----D C:\Users\sandra\AppData\Roaming\Skype O43 - CFD: 27/01/2013 - 10:04:46 - [1,851] ----D C:\Users\sandra\AppData\Roaming\SoftGrid Client O43 - CFD: 25/01/2011 - 13:57:41 - [0] ----D C:\Users\sandra\AppData\Roaming\TP O43 - CFD: 20/12/2012 - 10:12:19 - [0,122] ----D C:\Users\sandra\AppData\Roaming\TuneUp Software O43 - CFD: 05/12/2010 - 17:47:47 - [0,001] ----D C:\Users\sandra\AppData\Roaming\WildTangent O43 - CFD: 09/03/2011 - 13:51:33 - [0] ----D C:\Users\sandra\AppData\Roaming\Windows Live Writer O43 - CFD: 03/01/2013 - 20:28:52 - [0,016] ----D C:\Users\sandra\AppData\Roaming\_MDLogs O43 - CFD: 18/01/2013 - 21:17:37 - [0,734] ----D C:\Users\sandra\AppData\Local\adawarebp O43 - CFD: 29/07/2012 - 12:04:59 - [14,746] ----D C:\Users\sandra\AppData\Local\Adobe O43 - CFD: 22/11/2011 - 21:44:33 - [0] ----D C:\Users\sandra\AppData\Local\Apple O43 - CFD: 22/11/2011 - 21:46:47 - [5,455] ----D C:\Users\sandra\AppData\Local\Apple Computer O43 - CFD: 03/12/2010 - 21:32:30 - [0] ----D C:\Users\sandra\AppData\Local\Application Data O43 - CFD: 03/12/2010 - 21:48:45 - [1,173] ----D C:\Users\sandra\AppData\Local\Apps O43 - CFD: 03/12/2010 - 21:42:16 - [0,092] ----D C:\Users\sandra\AppData\Local\ATI O43 - CFD: 27/10/2012 - 17:25:26 - [11,529] ----D C:\Users\sandra\AppData\Local\Avg2013 O43 - CFD: 26/06/2012 - 22:01:30 - [1,936] ----D C:\Users\sandra\AppData\Local\CRE O43 - CFD: 14/02/2011 - 20:57:17 - [0,035] ----D C:\Users\sandra\AppData\Local\Cyberlink O43 - CFD: 03/12/2010 - 21:49:03 - [0] ----D C:\Users\sandra\AppData\Local\Deployment O43 - CFD: 20/01/2013 - 11:34:09 - [0] ----D C:\Users\sandra\AppData\Local\Diagnostics O43 - CFD: 19/01/2013 - 07:22:09 - [0] ----D C:\Users\sandra\AppData\Local\Downloaded Installations O43 - CFD: 20/01/2013 - 11:34:10 - [0] ----D C:\Users\sandra\AppData\Local\ElevatedDiagnostics O43 - CFD: 22/10/2011 - 19:42:31 - [7,386] ----D C:\Users\sandra\AppData\Local\Facebook O43 - CFD: 03/12/2010 - 21:49:41 - [622,017] ----D C:\Users\sandra\AppData\Local\Google O43 - CFD: 06/12/2010 - 21:32:33 - [0,012] ----D C:\Users\sandra\AppData\Local\Hewlett-Packard O43 - CFD: 03/12/2010 - 21:32:30 - [0] ----D C:\Users\sandra\AppData\Local\Historique O43 - CFD: 24/10/2012 - 19:02:13 - [9,887] ----D C:\Users\sandra\AppData\Local\MFAData O43 - CFD: 08/08/2012 - 10:54:08 - [469,866] ----D C:\Users\sandra\AppData\Local\Microsoft O43 - CFD: 30/12/2012 - 08:53:42 - [1,048] ----D C:\Users\sandra\AppData\Local\Microsoft Games O43 - CFD: 13/08/2012 - 15:59:01 - [38,388] ----D C:\Users\sandra\AppData\Local\Orange O43 - CFD: 23/01/2012 - 22:10:36 - [0] ----D C:\Users\sandra\AppData\Local\PackageAware O43 - CFD: 27/01/2013 - 21:10:50 - [0] ----D C:\Users\sandra\AppData\Local\Programs O43 - CFD: 22/06/2012 - 18:09:24 - [0,011] ----D C:\Users\sandra\AppData\Local\Samsung O43 - CFD: 25/01/2011 - 13:57:31 - [0,648] ----D C:\Users\sandra\AppData\Local\SoftGrid Client O43 - CFD: 04/02/2013 - 09:21:19 - [13,235] ----D C:\Users\sandra\AppData\Local\Temp O43 - CFD: 03/12/2010 - 21:32:30 - [0] ----D C:\Users\sandra\AppData\Local\Temporary Internet Files O43 - CFD: 27/06/2012 - 09:03:20 - [0,005] ----D C:\Users\sandra\AppData\Local\VirtualStore O43 - CFD: 17/08/2012 - 22:06:28 - [0,066] ----D C:\Users\sandra\AppData\Local\Windows Live O43 - CFD: 09/03/2011 - 13:51:41 - [0,618] ----D C:\Users\sandra\AppData\Local\Windows Live Writer O43 - CFD: 15/09/2011 - 09:07:09 - [0] ----D C:\Users\sandra\AppData\Local\{00DE81A8-7F44-4771-ADB0-5A9B5C47FDEA} O43 - CFD: 11/02/2012 - 14:29:08 - [0] ----D C:\Users\sandra\AppData\Local\{01166685-AF00-4F4E-9464-657F62B9C254} O43 - CFD: 20/02/2012 - 21:26:47 - [0] ----D C:\Users\sandra\AppData\Local\{0236DEEE-3445-4683-9198-70B5D0ED2862} O43 - CFD: 17/07/2012 - 21:32:14 - [0] ----D C:\Users\sandra\AppData\Local\{02634C9D-3437-440B-A140-AA38E0A4DA01} O43 - CFD: 11/02/2012 - 14:29:20 - [0] ----D C:\Users\sandra\AppData\Local\{029904D6-760A-48BC-A2FE-9BBAB509C67C} O43 - CFD: 16/06/2011 - 09:47:27 - [0] ----D C:\Users\sandra\AppData\Local\{02F01A46-D255-4AE7-BE2B-B337BA568E66} O43 - CFD: 26/04/2011 - 21:15:31 - [0] ----D C:\Users\sandra\AppData\Local\{0323863B-BADC-4C85-A707-E7D3DAC8781F} O43 - CFD: 22/07/2011 - 20:34:34 - [0] ----D C:\Users\sandra\AppData\Local\{03E5FF24-9E16-452F-81A6-0FAEE3ADCF7D} O43 - CFD: 18/07/2011 - 08:42:20 - [0] ----D C:\Users\sandra\AppData\Local\{045510EA-AB18-4113-96B5-D93B2945252F} O43 - CFD: 08/05/2011 - 04:30:11 - [0] ----D C:\Users\sandra\AppData\Local\{045C162E-F16D-4A4B-BC7E-A812C3245005} O43 - CFD: 11/11/2012 - 10:59:28 - [0] ----D C:\Users\sandra\AppData\Local\{0489A5AE-9E3F-4682-92FA-EFFF47167A34} O43 - CFD: 02/10/2011 - 19:15:43 - [0] ----D C:\Users\sandra\AppData\Local\{0499DC36-E2B6-460F-B808-3FE024595CD1} O43 - CFD: 21/03/2012 - 20:13:37 - [0] ----D C:\Users\sandra\AppData\Local\{056687D3-2F1E-47E7-8FD9-0BEC808FE8B4} O43 - CFD: 09/04/2012 - 20:43:58 - [0] ----D C:\Users\sandra\AppData\Local\{06230196-0FFA-4055-8F14-273E8A185365} O43 - CFD: 29/07/2011 - 18:13:54 - [0] ----D C:\Users\sandra\AppData\Local\{064E6C80-B92C-4C31-B624-8BEC8548DDAD} O43 - CFD: 27/06/2011 - 20:50:57 - [0] ----D C:\Users\sandra\AppData\Local\{068FE8C6-CD49-41D3-A139-BE82D997C84F} O43 - CFD: 08/03/2012 - 10:10:37 - [0] ----D C:\Users\sandra\AppData\Local\{06B0EDEB-32CA-4605-8815-79158F0EABD2} O43 - CFD: 17/11/2012 - 08:21:47 - [0] ----D C:\Users\sandra\AppData\Local\{06C3B048-5527-4FB2-9487-375E0AE8EA87} O43 - CFD: 29/06/2012 - 14:53:48 - [0] ----D C:\Users\sandra\AppData\Local\{0700A5F0-69FD-4657-88C9-E866278C5761} O43 - CFD: 12/06/2011 - 08:42:08 - [0] ----D C:\Users\sandra\AppData\Local\{07CF36AF-C523-48AF-8467-CD0FC791F917} O43 - CFD: 13/09/2012 - 20:53:41 - [0] ----D C:\Users\sandra\AppData\Local\{089E3433-AB56-4422-80F5-AC4F9B4C13FF} O43 - CFD: 02/05/2011 - 18:36:24 - [0] ----D C:\Users\sandra\AppData\Local\{08BB39A4-66C7-45EE-B336-B9020338F19E} O43 - CFD: 20/08/2012 - 07:44:26 - [0] ----D C:\Users\sandra\AppData\Local\{08F837B0-03E2-41CA-8B45-7ACB9E8E2563} O43 - CFD: 09/10/2011 - 22:03:00 - [0] ----D C:\Users\sandra\AppData\Local\{09046734-82A6-43D2-9025-BFF5E367AF14} O43 - CFD: 01/11/2012 - 09:04:56 - [0] ----D C:\Users\sandra\AppData\Local\{09A9C8B9-DCF5-4C59-963B-DEA2086C330F} O43 - CFD: 21/04/2011 - 09:18:45 - [0] ----D C:\Users\sandra\AppData\Local\{09C69251-11DA-4725-82E6-A3790C3BD0D3} O43 - CFD: 17/07/2011 - 08:30:18 - [0] ----D C:\Users\sandra\AppData\Local\{09E8E37C-D48E-4F7D-95F7-79375455A992} O43 - CFD: 27/05/2011 - 09:30:51 - [0] ----D C:\Users\sandra\AppData\Local\{0A2A4E29-E45E-4494-AA2B-852D67CEFDA3} O43 - CFD: 27/06/2012 - 21:29:09 - [0] ----D C:\Users\sandra\AppData\Local\{0ACB7A0D-1572-4BBA-B5A4-33C6040C0998} O43 - CFD: 04/04/2012 - 02:04:19 - [0] ----D C:\Users\sandra\AppData\Local\{0AF30CBA-693B-4EC3-AB86-045F9EB2C831} O43 - CFD: 07/07/2011 - 20:40:21 - [0] ----D C:\Users\sandra\AppData\Local\{0BD35E97-21F2-4672-9F6D-36E139547AAB} O43 - CFD: 21/05/2012 - 07:10:31 - [0] ----D C:\Users\sandra\AppData\Local\{0D0C1820-BD0A-4B5B-99AA-20109BDDABB6} O43 - CFD: 24/05/2011 - 04:27:46 - [0] ----D C:\Users\sandra\AppData\Local\{0DCB6794-3B38-49A4-9B4F-FEF6E9C4DC11} O43 - CFD: 28/10/2012 - 19:59:32 - [0] ----D C:\Users\sandra\AppData\Local\{0DE94DA5-652D-431E-AD3D-8CD3566ED559} O43 - CFD: 29/08/2011 - 13:02:05 - [0] ----D C:\Users\sandra\AppData\Local\{0E1A0A59-A3CC-410B-82A8-CBE342B067F0} O43 - CFD: 15/02/2012 - 09:55:09 - [0] ----D C:\Users\sandra\AppData\Local\{0E6FD3EC-4F54-4E75-8BFB-16D23E977C4F} O43 - CFD: 24/02/2012 - 07:42:10 - [0] ----D C:\Users\sandra\AppData\Local\{0E942C75-D422-44AD-81F5-4CBE096AA8F0} O43 - CFD: 23/06/2011 - 16:03:06 - [0] ----D C:\Users\sandra\AppData\Local\{0EEA1095-7EAF-4442-B291-C581904F84CF} O43 - CFD: 10/03/2012 - 16:00:41 - [0] ----D C:\Users\sandra\AppData\Local\{0F062AA3-B8AE-456A-BE28-AF4D54F53AEB} O43 - CFD: 24/09/2012 - 15:50:59 - [0] ----D C:\Users\sandra\AppData\Local\{0F1FF017-37B8-4362-8417-DA08D3B7F036} O43 - CFD: 21/11/2011 - 10:57:57 - [0] ----D C:\Users\sandra\AppData\Local\{0F4FB693-1A17-4F01-A6E9-94870AE2256A} O43 - CFD: 04/07/2012 - 07:40:55 - [0] ----D C:\Users\sandra\AppData\Local\{0FA4B50E-6BB0-410F-AFB9-E7BEDAC38BA7} O43 - CFD: 26/03/2012 - 08:47:12 - [0] ----D C:\Users\sandra\AppData\Local\{107D200E-451F-4834-AA9C-AD3F72E85DC9} O43 - CFD: 28/08/2012 - 09:07:16 - [0] ----D C:\Users\sandra\AppData\Local\{10F87790-463F-4F79-B479-34167A7DF1E9} O43 - CFD: 08/03/2012 - 10:10:26 - [0] ----D C:\Users\sandra\AppData\Local\{10F95282-AC6E-4FDC-AFEA-C140CC8691D3} O43 - CFD: 19/06/2012 - 20:39:00 - [0] ----D C:\Users\sandra\AppData\Local\{110BA0DC-9D35-41A2-A75D-C9ECEAA93372} O43 - CFD: 29/11/2012 - 11:06:09 - [0] ----D C:\Users\sandra\AppData\Local\{11B03B9D-C05F-4235-9288-47C67C189E21} O43 - CFD: 30/06/2012 - 07:40:08 - [0] ----D C:\Users\sandra\AppData\Local\{1250EE23-7636-4E15-9590-558A25B30518} O43 - CFD: 18/06/2012 - 18:44:56 - [0] ----D C:\Users\sandra\AppData\Local\{12FFAAA9-AF36-41C9-B764-8FF2EC2BD577} O43 - CFD: 19/06/2011 - 09:48:18 - [0] ----D C:\Users\sandra\AppData\Local\{13B2A852-C052-4972-9ED3-58B0781BD959} O43 - CFD: 24/05/2011 - 16:28:36 - [0] ----D C:\Users\sandra\AppData\Local\{13EB917C-1D6E-4F9D-A89D-451B9FCB69B2} O43 - CFD: 07/12/2011 - 17:57:02 - [0] ----D C:\Users\sandra\AppData\Local\{140157DD-CB97-453D-8AFB-83FB09138A4D} O43 - CFD: 16/09/2012 - 01:11:47 - [0] ----D C:\Users\sandra\AppData\Local\{141472CB-5E32-49F6-9C36-E79266538BD6} O43 - CFD: 22/08/2012 - 08:08:23 - [0] ----D C:\Users\sandra\AppData\Local\{14532FBD-5DE1-404C-8C42-4B194C7C6DF9} O43 - CFD: 12/08/2012 - 09:08:14 - [0] ----D C:\Users\sandra\AppData\Local\{148617B5-81A3-4BD7-87F7-A4C97DD2F085} O43 - CFD: 22/06/2011 - 04:40:09 - [0] ----D C:\Users\sandra\AppData\Local\{14D8FB25-33C0-4E83-AB00-114CA2510C0F} O43 - CFD: 06/01/2012 - 12:02:38 - [0] ----D C:\Users\sandra\AppData\Local\{14E27AA5-D300-4765-8927-4D6CA8A43DB0} O43 - CFD: 07/02/2012 - 10:06:56 - [0] ----D C:\Users\sandra\AppData\Local\{157D92FA-2686-4F6E-90CD-FEBF2BE6CF7C} O43 - CFD: 10/11/2011 - 16:59:38 - [0] ----D C:\Users\sandra\AppData\Local\{1599C8E3-ABDD-4C4A-8AC6-0817F38E175C} O43 - CFD: 06/04/2011 - 07:05:53 - [0] ----D C:\Users\sandra\AppData\Local\{15A9ED80-456D-45EC-AC0D-A2C00C6EA621} O43 - CFD: 13/03/2012 - 07:59:58 - [0] ----D C:\Users\sandra\AppData\Local\{1668F7E2-0446-47AF-92C7-CF68862F15D5} O43 - CFD: 10/08/2012 - 06:18:18 - [0] ----D C:\Users\sandra\AppData\Local\{17341A23-9BC8-4BB2-B289-24DF8B121211} O43 - CFD: 01/06/2011 - 05:44:29 - [0] ----D C:\Users\sandra\AppData\Local\{173F9366-DE14-4167-8487-BE2F35F5F5F2} O43 - CFD: 07/02/2012 - 12:55:31 - [0] ----D C:\Users\sandra\AppData\Local\{17E7DBAF-AA6F-4F5B-B650-8DD5E2DBECF2} O43 - CFD: 02/03/2012 - 09:57:51 - [0] ----D C:\Users\sandra\AppData\Local\{1805EEAB-A466-4454-93DE-D426FC21A8D4} O43 - CFD: 10/03/2012 - 16:00:31 - [0] ----D C:\Users\sandra\AppData\Local\{186388C0-8C84-4E73-87C8-6B9C0E4C78D3} O43 - CFD: 25/02/2012 - 22:14:08 - [0] ----D C:\Users\sandra\AppData\Local\{187F2376-105A-4EA2-811C-4DB208B63064} O43 - CFD: 16/05/2011 - 16:27:53 - [0] ----D C:\Users\sandra\AppData\Local\{189DE8B1-25D1-46F3-B6CF-0269615C4BD4} O43 - CFD: 27/05/2011 - 21:34:56 - [0] ----D C:\Users\sandra\AppData\Local\{18FF1286-8C9D-4A97-8EC4-AAF8339100DF} O43 - CFD: 12/06/2011 - 20:42:48 - [0] ----D C:\Users\sandra\AppData\Local\{1907213D-BE29-4519-985F-577B4A64CF72} O43 - CFD: 05/04/2011 - 04:19:31 - [0] ----D C:\Users\sandra\AppData\Local\{196821A9-E264-49DF-9942-826FDEDCC582} O43 - CFD: 30/09/2012 - 12:57:08 - [0] ----D C:\Users\sandra\AppData\Local\{196C2EC8-6467-420F-ADE8-813177A84D9B} O43 - CFD: 19/07/2012 - 08:27:37 - [0] ----D C:\Users\sandra\AppData\Local\{19E8082D-2FBB-4DA2-BA08-0036C2A6EB68} O43 - CFD: 14/11/2012 - 17:31:43 - [0] ----D C:\Users\sandra\AppData\Local\{1B9F9CE3-47C8-4775-98D8-D101702CEAA9} O43 - CFD: 21/02/2012 - 09:27:13 - [0] ----D C:\Users\sandra\AppData\Local\{1C2AF9E9-D2B5-4F6B-B273-63278FB5B3E3} O43 - CFD: 03/08/2011 - 07:56:02 - [0] ----D C:\Users\sandra\AppData\Local\{1C5CE2DC-3FD0-4A14-A259-84657DE79031} O43 - CFD: 18/06/2011 - 21:47:45 - [0] ----D C:\Users\sandra\AppData\Local\{1C772EE7-F60A-4F4A-89CB-B370456D7AD6} O43 - CFD: 11/04/2011 - 19:07:57 - [0] ----D C:\Users\sandra\AppData\Local\{1CA3F3D9-FD41-4AB9-94E6-91C859B2C085} O43 - CFD: 02/09/2011 - 07:55:43 - [0] ----D C:\Users\sandra\AppData\Local\{1D0D2A23-59BF-4414-91F8-F473D2E8B3A6} O43 - CFD: 22/02/2012 - 22:07:54 - [0] ----D C:\Users\sandra\AppData\Local\{1D29D654-8BAE-4355-9C37-B23F213C4644} O43 - CFD: 18/05/2011 - 04:40:01 - [0] ----D C:\Users\sandra\AppData\Local\{1D654040-8DF6-46BE-9C14-39E58FEDAB55} O43 - CFD: 23/04/2011 - 21:37:20 - [0] ----D C:\Users\sandra\AppData\Local\{1D78C665-984E-487B-9B8B-29A5A91DF149} O43 - CFD: 03/09/2011 - 07:47:40 - [0] ----D C:\Users\sandra\AppData\Local\{1D78F5DC-6FE5-4EE3-8C18-39B17992D19D} O43 - CFD: 09/04/2011 - 04:20:08 - [0] ----D C:\Users\sandra\AppData\Local\{1D79305F-2BEC-44E2-BF6C-7D681B926D66} O43 - CFD: 06/04/2011 - 19:08:43 - [0] ----D C:\Users\sandra\AppData\Local\{1D7B752E-B3B0-401F-95A9-F2E8686BD816} O43 - CFD: 29/06/2011 - 08:14:44 - [0] ----D C:\Users\sandra\AppData\Local\{1DD6DA07-56D9-44B8-ADB0-CAA41CF4550B} O43 - CFD: 22/06/2012 - 20:44:33 - [0] ----D C:\Users\sandra\AppData\Local\{1E8FA3DA-AEF2-4203-A5EE-673F0A61074C} O43 - CFD: 18/07/2011 - 20:42:54 - [0] ----D C:\Users\sandra\AppData\Local\{1EADFFB6-A5F5-4074-976C-37C081AB90BE} O43 - CFD: 24/02/2012 - 19:43:01 - [0] ----D C:\Users\sandra\AppData\Local\{1EB35D67-8C4B-483E-9D2D-B611501CD15D} O43 - CFD: 15/09/2011 - 09:06:47 - [0] ----D C:\Users\sandra\AppData\Local\{1F0298AE-E546-4F46-AD06-485D19698F64} O43 - CFD: 01/06/2012 - 22:37:52 - [0] ----D C:\Users\sandra\AppData\Local\{1F5DFADB-36A5-4CA6-8A3B-2E4E2DE61DF7} O43 - CFD: 19/06/2012 - 20:39:19 - [0] ----D C:\Users\sandra\AppData\Local\{1F5E52F9-E6AC-4668-9083-14966D007B0C} O43 - CFD: 10/07/2012 - 15:44:12 - [0] ----D C:\Users\sandra\AppData\Local\{1F9F9B43-2A8B-408F-A738-F25435E2FD51} O43 - CFD: 24/03/2012 - 09:43:34 - [0] ----D C:\Users\sandra\AppData\Local\{1FDDAF67-ABBA-46BB-964E-39D20DF31E4E} O43 - CFD: 11/07/2012 - 22:07:57 - [0] ----D C:\Users\sandra\AppData\Local\{1FE7795E-2483-432F-8C89-490C5E6DDAC0} O43 - CFD: 12/08/2011 - 08:06:41 - [0] ----D C:\Users\sandra\AppData\Local\{2028DDEC-9E71-46D4-AE26-2ED78E26FCE4} O43 - CFD: 07/06/2011 - 19:15:27 - [0] ----D C:\Users\sandra\AppData\Local\{20391781-1CF6-43C6-ABA3-858150F75D68} O43 - CFD: 04/05/2011 - 07:21:22 - [0] ----D C:\Users\sandra\AppData\Local\{2077A165-AEB3-4D89-ABD1-72270FBD912C} O43 - CFD: 04/06/2011 - 04:35:27 - [0] ----D C:\Users\sandra\AppData\Local\{20BBDCAD-4E36-440A-B312-9C11487D8E26} O43 - CFD: 21/03/2012 - 08:13:00 - [0] ----D C:\Users\sandra\AppData\Local\{20DFD392-6400-4422-A8D9-325D925D4AB9} O43 - CFD: 03/10/2012 - 10:57:13 - [0] ----D C:\Users\sandra\AppData\Local\{21086125-F91B-4D56-A541-D9F2A61635EF} O43 - CFD: 23/05/2011 - 09:20:54 - [0] ----D C:\Users\sandra\AppData\Local\{212D27CE-F26D-47B5-A980-AF6965607D84} O43 - CFD: 01/03/2012 - 09:24:46 - [0] ----D C:\Users\sandra\AppData\Local\{21AF9D4D-5138-4E6B-A0D5-BEBA6F8CE927} O43 - CFD: 26/06/2011 - 20:39:15 - [0] ----D C:\Users\sandra\AppData\Local\{230E0F3E-1A6F-4CC5-84F2-113B459661C7} O43 - CFD: 09/06/2011 - 06:46:22 - [0] ----D C:\Users\sandra\AppData\Local\{2388EFE2-D370-4858-AE0D-9217236C84D1} O43 - CFD: 07/09/2011 - 21:14:37 - [0] ----D C:\Users\sandra\AppData\Local\{23AF1A52-A9C9-4E1C-B479-F196B7BF1215} O43 - CFD: 09/04/2011 - 16:20:41 - [0] ----D C:\Users\sandra\AppData\Local\{241F4EE2-A3FB-46C6-9A6E-22B6A32FB66F} O43 - CFD: 19/07/2011 - 21:57:19 - [0] ----D C:\Users\sandra\AppData\Local\{246353B9-DE0A-4C33-B388-871FF24FD47F} O43 - CFD: 11/01/2012 - 11:43:32 - [0] ----D C:\Users\sandra\AppData\Local\{248D4B1E-A7CC-4DC6-8D86-98C37623F179} O43 - CFD: 24/10/2011 - 20:49:41 - [0] ----D C:\Users\sandra\AppData\Local\{24A1CABD-03E7-465D-915B-7518ED84A153} O43 - CFD: 21/05/2011 - 07:51:36 - [0] ----D C:\Users\sandra\AppData\Local\{24A856CA-89F0-4B9A-93CD-99DC0D6B1B19} O43 - CFD: 09/08/2012 - 11:06:19 - [0] ----D C:\Users\sandra\AppData\Local\{24D9EBFC-0E5F-4B5A-A860-1F3F71CC7EC2} O43 - CFD: 02/03/2012 - 22:04:07 - [0] ----D C:\Users\sandra\AppData\Local\{2559AFD7-0F42-4B51-BE85-212C88A5B811} O43 - CFD: 22/06/2012 - 18:08:58 - [0] ----D C:\Users\sandra\AppData\Local\{2597850D-7D56-4B95-B518-D7E6E2918AFD} O43 - CFD: 07/02/2012 - 13:25:47 - [0] ----D C:\Users\sandra\AppData\Local\{259ACD82-AC10-4992-8372-E84F984508C2} O43 - CFD: 30/06/2012 - 13:38:47 - [0] ----D C:\Users\sandra\AppData\Local\{25ACB713-7986-4271-878A-40B0BB584CFD} O43 - CFD: 23/08/2011 - 08:20:44 - [0] ----D C:\Users\sandra\AppData\Local\{263BCCA8-E50A-4D02-9A8E-60533E2FCC8E} O43 - CFD: 22/03/2012 - 20:14:38 - [0] ----D C:\Users\sandra\AppData\Local\{26987025-4286-4FE7-8316-329FA94A85B7} O43 - CFD: 19/04/2012 - 12:10:23 - [0] ----D C:\Users\sandra\AppData\Local\{26987C3E-215C-4E96-BE77-88A161CB576A} O43 - CFD: 17/04/2011 - 08:36:33 - [0] ----D C:\Users\sandra\AppData\Local\{26BD3600-F54F-4A7F-9EBE-5DBA12F60D52} O43 - CFD: 15/09/2011 - 11:08:13 - [0] ----D C:\Users\sandra\AppData\Local\{26D34058-DD39-4865-B0F3-FE558DB7932F} O43 - CFD: 03/10/2011 - 17:11:34 - [0] ----D C:\Users\sandra\AppData\Local\{27397729-00E2-4D30-8F5D-D1433C2E1FF7} O43 - CFD: 20/08/2012 - 22:30:20 - [0] ----D C:\Users\sandra\AppData\Local\{27744CB8-3EEA-45B2-94A0-C31EFAC22BE3} O43 - CFD: 24/07/2012 - 21:30:33 - [0] ----D C:\Users\sandra\AppData\Local\{27F0A44D-00AD-43D8-930C-553FB71DE2A4} O43 - CFD: 24/09/2012 - 02:40:44 - [0] ----D C:\Users\sandra\AppData\Local\{284C78F3-28AC-4B51-8384-1E01903C3B21} O43 - CFD: 05/09/2012 - 20:03:21 - [0] ----D C:\Users\sandra\AppData\Local\{28A37A75-4893-458D-B285-A7C63D8D5CED} O43 - CFD: 03/04/2011 - 19:44:06 - [0] ----D C:\Users\sandra\AppData\Local\{290F0FA8-948E-4FE9-8010-7D0668C0F87B} O43 - CFD: 16/05/2012 - 08:38:55 - [0] ----D C:\Users\sandra\AppData\Local\{29A6248E-BD97-4B1A-AA7A-21EC7C0BA02F} O43 - CFD: 28/10/2012 - 07:59:08 - [0] ----D C:\Users\sandra\AppData\Local\{2A7AB7C3-1627-42BE-BC10-8E0CDD7D5D48} O43 - CFD: 13/06/2011 - 08:43:21 - [0] ----D C:\Users\sandra\AppData\Local\{2A968438-9582-4FDF-B65B-EA7C8601AE47} O43 - CFD: 27/07/2011 - 09:38:01 - [0] ----D C:\Users\sandra\AppData\Local\{2ADFAF1E-DB32-415A-8973-44C568EA23AA} O43 - CFD: 05/09/2012 - 07:55:50 - [0] ----D C:\Users\sandra\AppData\Local\{2B173CF5-2B15-4F40-B881-8E6AE530CBD0} O43 - CFD: 22/03/2012 - 08:14:03 - [0] ----D C:\Users\sandra\AppData\Local\{2BDFC8A6-9457-4B97-A18E-2BA1D6ED55B9} O43 - CFD: 29/09/2011 - 17:40:44 - [0] ----D C:\Users\sandra\AppData\Local\{2CF5E47F-7A31-4D39-8A44-4F59F4BF81B3} O43 - CFD: 04/01/2012 - 16:20:15 - [0] ----D C:\Users\sandra\AppData\Local\{2D49B375-7B22-49AA-AA60-390414E50EBD} O43 - CFD: 23/01/2012 - 09:37:55 - [0] ----D C:\Users\sandra\AppData\Local\{2D576973-3807-4E08-B7ED-FFC9CA5B79FE} O43 - CFD: 14/06/2011 - 21:45:08 - [0] ----D C:\Users\sandra\AppData\Local\{2DE69DD0-2DC5-407A-B3DD-26953AA77562} O43 - CFD: 02/10/2011 - 19:15:53 - [0] ----D C:\Users\sandra\AppData\Local\{2E021BDB-71B0-4FD4-B817-00F47BBE6909} O43 - CFD: 31/05/2011 - 09:34:00 - [0] ----D C:\Users\sandra\AppData\Local\{2E12BCE3-B447-4D0A-B4E5-99037058B1CE} O43 - CFD: 01/07/2012 - 08:44:45 - [0] ----D C:\Users\sandra\AppData\Local\{2E13637C-F977-4469-AA43-B5DFB300229F} O43 - CFD: 09/05/2011 - 07:28:47 - [0] ----D C:\Users\sandra\AppData\Local\{2E4DCC7E-E4BF-4949-87E6-8A885F69EA45} O43 - CFD: 21/05/2011 - 21:19:12 - [0] ----D C:\Users\sandra\AppData\Local\{2E7DB2C0-2F81-4AC4-8741-3F9702A7D973} O43 - CFD: 13/08/2012 - 16:02:34 - [0] ----D C:\Users\sandra\AppData\Local\{2F31EDCC-60CD-45B5-A3CD-C11DA75B5C7C} O43 - CFD: 19/08/2012 - 16:38:32 - [0] ----D C:\Users\sandra\AppData\Local\{2F885304-6D18-40BF-AD14-230405F85735} O43 - CFD: 10/06/2011 - 05:50:22 - [0] ----D C:\Users\sandra\AppData\Local\{2FFDEDF2-4DD1-47F4-99DE-3FF16D3C81CD} O43 - CFD: 29/07/2012 - 14:15:57 - [0] ----D C:\Users\sandra\AppData\Local\{30D31DD5-F618-44E9-BCB4-2E0A31B549A4} O43 - CFD: 19/03/2012 - 22:13:09 - [0] ----D C:\Users\sandra\AppData\Local\{30DD1097-C035-4897-B1EB-6659BF6DAD24} O43 - CFD: 21/07/2012 - 09:57:00 - [0] ----D C:\Users\sandra\AppData\Local\{3222BF04-1945-4C31-AB8D-D2310C8EC561} O43 - CFD: 02/07/2011 - 04:44:40 - [0] ----D C:\Users\sandra\AppData\Local\{329EFC12-FF70-471A-9581-B10214A19A4A} O43 - CFD: 31/03/2012 - 20:55:09 - [0] ----D C:\Users\sandra\AppData\Local\{3314F41F-443C-462A-89E4-E9E26470775E} O43 - CFD: 16/03/2012 - 09:37:33 - [0] ----D C:\Users\sandra\AppData\Local\{3316FE8C-B309-4715-B08A-4FDE36395DA7} O43 - CFD: 16/09/2012 - 14:22:30 - [0] ----D C:\Users\sandra\AppData\Local\{33842530-E8FA-4B0A-9F27-43A566ECE342} O43 - CFD: 27/09/2012 - 07:01:34 - [0] ----D C:\Users\sandra\AppData\Local\{350FD5AF-4528-437E-A138-D11CB7D6E7F3} O43 - CFD: 31/03/2011 - 20:25:50 - [0] ----D C:\Users\sandra\AppData\Local\{35A66231-3FAA-4ACD-980F-DC12463030F1} O43 - CFD: 28/03/2012 - 09:39:45 - [0] ----D C:\Users\sandra\AppData\Local\{37778C2C-1F00-4F16-A329-C64B35C84310} O43 - CFD: 13/12/2012 - 09:34:35 - [0] ----D C:\Users\sandra\AppData\Local\{37A41574-AD53-407E-B52A-5AF4AA6985D4} O43 - CFD: 01/02/2012 - 08:13:16 - [0] ----D C:\Users\sandra\AppData\Local\{39122A2D-06E0-4F00-97D4-19934A8F637B} O43 - CFD: 17/02/2012 - 07:49:57 - [0] ----D C:\Users\sandra\AppData\Local\{39E75960-23D6-47DF-964A-2B10F524EFEF} O43 - CFD: 02/10/2011 - 11:57:30 - [0] ----D C:\Users\sandra\AppData\Local\{3A005036-B4F9-4D19-8AA0-45E3422D1BFF} O43 - CFD: 25/12/2011 - 17:48:34 - [0] ----D C:\Users\sandra\AppData\Local\{3A492CE3-9033-4619-A61B-1B958F066424} O43 - CFD: 12/03/2012 - 07:36:27 - [0] ----D C:\Users\sandra\AppData\Local\{3B4894EF-073A-43F8-BCFC-EC8D46D63CE5} O43 - CFD: 22/06/2011 - 16:40:42 - [0] ----D C:\Users\sandra\AppData\Local\{3B893C4F-0D1E-4381-B718-73608660A4F0} O43 - CFD: 30/08/2012 - 08:26:31 - [0] ----D C:\Users\sandra\AppData\Local\{3DB16DE9-2291-4AF1-9BBF-690787469F5C} O43 - CFD: 31/10/2012 - 07:47:45 - [0] ----D C:\Users\sandra\AppData\Local\{3DE8E413-98C6-4C0F-95C0-B648E1C04F1C} O43 - CFD: 10/07/2012 - 15:44:01 - [0] ----D C:\Users\sandra\AppData\Local\{3DF07C62-7707-4D05-A5B2-2D673297CE06} O43 - CFD: 27/03/2012 - 20:48:55 - [0] ----D C:\Users\sandra\AppData\Local\{3E5F8B67-641B-4B3E-982C-47D62749CD2E} O43 - CFD: 19/04/2012 - 12:10:10 - [0] ----D C:\Users\sandra\AppData\Local\{3E910914-01A6-48DD-90AC-0AC4D9964181} O43 - CFD: 11/05/2011 - 14:57:37 - [0] ----D C:\Users\sandra\AppData\Local\{3EED17A4-1F24-4F02-9082-C00D9CF3AAC9} O43 - CFD: 12/08/2011 - 08:06:54 - [0] ----D C:\Users\sandra\AppData\Local\{3F204DFA-F2BB-4FAF-B089-2FA6CA967860} O43 - CFD: 09/08/2012 - 11:06:09 - [0] ----D C:\Users\sandra\AppData\Local\{3F285630-438D-4B0A-AD27-CBD11DD8AAB2} O43 - CFD: 19/03/2012 - 22:12:51 - [0] ----D C:\Users\sandra\AppData\Local\{4001E24B-979C-4696-9656-B47FE9F7DD88} O43 - CFD: 03/12/2011 - 22:41:23 - [0] ----D C:\Users\sandra\AppData\Local\{409B23E7-40CE-4966-BB27-082C45713C81} O43 - CFD: 24/07/2011 - 15:00:51 - [0] ----D C:\Users\sandra\AppData\Local\{410538C3-4E9A-497B-A822-0DA77FE5ACB8} O43 - CFD: 17/05/2011 - 16:28:57 - [0] ----D C:\Users\sandra\AppData\Local\{41331138-0884-4862-B4EA-A2C3B677431A} O43 - CFD: 13/08/2012 - 16:02:45 - [0] ----D C:\Users\sandra\AppData\Local\{4181DDB5-4F5D-4FF5-B6B8-0768BA402CE4} O43 - CFD: 15/02/2012 - 09:55:23 - [0] ----D C:\Users\sandra\AppData\Local\{41EAF6E0-C451-4BBF-B230-8D8B4A558C00} O43 - CFD: 17/12/2011 - 16:23:48 - [0] ----D C:\Users\sandra\AppData\Local\{428D44A2-E1AE-40ED-81AC-E8592D3D7D05} O43 - CFD: 25/03/2012 - 06:58:09 - [0] ----D C:\Users\sandra\AppData\Local\{438D0AAD-00AB-4480-8586-2ACDFC5DF5FF} O43 - CFD: 03/04/2011 - 07:43:31 - [0] ----D C:\Users\sandra\AppData\Local\{43C1841B-E2E7-420D-8580-E27933A1256D} O43 - CFD: 17/02/2012 - 03:25:29 - [0] ----D C:\Users\sandra\AppData\Local\{446E429C-5B04-4FE8-A3E8-BBB472DEFE19} O43 - CFD: 11/07/2012 - 10:07:27 - [0] ----D C:\Users\sandra\AppData\Local\{44A40A68-8B23-440B-A006-F4C130ECEC75} O43 - CFD: 13/06/2012 - 22:06:56 - [0] ----D C:\Users\sandra\AppData\Local\{44E09BF3-01DE-4B42-9A7E-1131DA1E3A6B} O43 - CFD: 31/03/2012 - 08:41:02 - [0] ----D C:\Users\sandra\AppData\Local\{451FAEF7-6773-4EC2-850D-5ED873A08ED0} O43 - CFD: 30/12/2011 - 01:10:05 - [0] ----D C:\Users\sandra\AppData\Local\{460757CE-D8BC-44D4-A9B5-68F1FEA6D55A} O43 - CFD: 02/07/2012 - 08:53:57 - [0] ----D C:\Users\sandra\AppData\Local\{46D05C26-3E3C-4D10-904D-F9C81BEC8F9D} O43 - CFD: 17/03/2012 - 22:04:04 - [0] ----D C:\Users\sandra\AppData\Local\{471E8701-F98D-46FD-AF51-41865AB7512F} O43 - CFD: 12/03/2012 - 19:59:33 - [0] ----D C:\Users\sandra\AppData\Local\{475D771B-FE74-42C1-9751-5EF38A6EAB4D} O43 - CFD: 15/02/2012 - 21:56:14 - [0] ----D C:\Users\sandra\AppData\Local\{478764B4-CB6E-4FFC-B280-743E7511802B} O43 - CFD: 20/07/2012 - 20:39:21 - [0] ----D C:\Users\sandra\AppData\Local\{485D4F47-8C0B-489E-8D53-E9E514966E60} O43 - CFD: 23/04/2011 - 09:36:46 - [0] ----D C:\Users\sandra\AppData\Local\{48E08AC1-3FA4-45BC-B61A-24703EC36840} O43 - CFD: 07/04/2011 - 21:11:38 - [0] ----D C:\Users\sandra\AppData\Local\{491DE5C6-6745-4E45-B052-1F286813E188} O43 - CFD: 03/10/2011 - 09:48:27 - [0] ----D C:\Users\sandra\AppData\Local\{491F5176-CD40-4CDF-B945-06E4A559E567} O43 - CFD: 23/03/2012 - 21:42:49 - [0] ----D C:\Users\sandra\AppData\Local\{495F5E44-EB60-44AF-99A7-6FE77F22DF8F} O43 - CFD: 23/07/2011 - 20:54:17 - [0] ----D C:\Users\sandra\AppData\Local\{498FE68B-38D5-4220-B85B-AD3A0A00236F} O43 - CFD: 25/10/2012 - 20:39:02 - [0] ----D C:\Users\sandra\AppData\Local\{4A22545A-6A12-4139-A07D-285245B9EF46} O43 - CFD: 12/05/2012 - 11:17:25 - [0] ----D C:\Users\sandra\AppData\Local\{4A5548A6-E93D-45CC-8782-09CA381356B1} O43 - CFD: 28/04/2011 - 04:28:58 - [0] ----D C:\Users\sandra\AppData\Local\{4B65E608-5683-4718-88FE-797081AF1E08} O43 - CFD: 29/10/2011 - 18:11:11 - [0] ----D C:\Users\sandra\AppData\Local\{4BB0063C-29DE-4762-9683-16246F913A1C} O43 - CFD: 02/10/2011 - 11:57:20 - [0] ----D C:\Users\sandra\AppData\Local\{4BB657E1-27FF-4518-B435-C03CF15093EB} O43 - CFD: 04/06/2011 - 17:36:12 - [0] ----D C:\Users\sandra\AppData\Local\{4BC787D1-C50F-48E2-9F9E-A3B6738F3BF7} O43 - CFD: 25/09/2012 - 18:43:06 - [0] ----D C:\Users\sandra\AppData\Local\{4BDA44F1-35A5-445A-88A9-25B781F67C8C} O43 - CFD: 22/04/2011 - 09:35:51 - [0] ----D C:\Users\sandra\AppData\Local\{4C322682-9EB3-44BF-9EED-F8D61F0EEBF5} O43 - CFD: 30/07/2011 - 20:47:40 - [0] ----D C:\Users\sandra\AppData\Local\{4C4019CF-741F-4CC4-A58B-F91451287F55} O43 - CFD: 01/03/2012 - 09:24:59 - [0] ----D C:\Users\sandra\AppData\Local\{4CA14188-6AFA-451E-86A9-57A841354650} O43 - CFD: 29/04/2011 - 20:08:53 - [0] ----D C:\Users\sandra\AppData\Local\{4CA87BE5-28EB-4CF8-A36A-3F4A0264A6A1} O43 - CFD: 27/02/2012 - 10:29:03 - [0] ----D C:\Users\sandra\AppData\Local\{4CFC85C6-A958-4619-B8D0-B45D559C86D7} O43 - CFD: 06/07/2012 - 09:07:51 - [0] ----D C:\Users\sandra\AppData\Local\{4D92D8D4-F808-4963-96A0-A6151E2819E2} O43 - CFD: 02/08/2011 - 06:51:41 - [0] ----D C:\Users\sandra\AppData\Local\{4D9E33C8-A728-40DC-B060-72F9F1F16DCB} O43 - CFD: 12/07/2012 - 22:09:35 - [0] ----D C:\Users\sandra\AppData\Local\{4DA142AA-3FE0-47CA-A37C-35A67FA19F20} O43 - CFD: 16/07/2011 - 06:56:45 - [0] ----D C:\Users\sandra\AppData\Local\{4DB7A9C4-9287-4380-BC4A-A4B09B0F603E} O43 - CFD: 12/05/2011 - 06:20:01 - [0] ----D C:\Users\sandra\AppData\Local\{4DB802A5-7A13-4A0F-82AD-3DA2F7345F35} O43 - CFD: 02/02/2012 - 09:27:01 - [0] ----D C:\Users\sandra\AppData\Local\{4DBB6EAA-4ECA-4DC1-BA46-0AF2A0A9F8E2} O43 - CFD: 26/09/2012 - 18:49:03 - [0] ----D C:\Users\sandra\AppData\Local\{4E09AADC-D216-4037-B5FE-95E60A8EEA5B} O43 - CFD: 07/04/2012 - 19:21:49 - [0] ----D C:\Users\sandra\AppData\Local\{4E0C9DEB-F641-4A21-8077-865303E4BBDE} O43 - CFD: 07/04/2011 - 07:09:18 - [0] ----D C:\Users\sandra\AppData\Local\{4E1D447A-FE92-4ECC-9FAE-DC696894CF84} O43 - CFD: 03/09/2012 - 07:00:20 - [0] ----D C:\Users\sandra\AppData\Local\{4EE06943-6882-418A-A7A3-A2CB7C530ECB} O43 - CFD: 22/03/2012 - 08:14:13 - [0] ----D C:\Users\sandra\AppData\Local\{4FE21B09-00BB-40DB-B320-93C28F9FCC0E} O43 - CFD: 05/07/2012 - 06:58:18 - [0] ----D C:\Users\sandra\AppData\Local\{4FEF6296-8FC8-4C66-9BF0-BD550F519844} O43 - CFD: 10/06/2011 - 21:18:58 - [0] ----D C:\Users\sandra\AppData\Local\{5164DF59-EE37-4B42-B72E-4E1241066569} O43 - CFD: 31/07/2011 - 18:33:26 - [0] ----D C:\Users\sandra\AppData\Local\{52CFB905-A3D1-4850-B796-6DC36B2C4D67} O43 - CFD: 12/05/2012 - 11:17:35 - [0] ----D C:\Users\sandra\AppData\Local\{533BCE03-CE3E-4620-850E-ED1C8E249D74} O43 - CFD: 29/08/2012 - 09:23:00 - [0] ----D C:\Users\sandra\AppData\Local\{5367431F-A7C8-4206-B598-D0980DD6CCA9} O43 - CFD: 07/10/2012 - 08:40:38 - [0] ----D C:\Users\sandra\AppData\Local\{540652B2-BCF3-489F-A6C6-D339F1C4031F} O43 - CFD: 20/07/2012 - 08:38:34 - [0] ----D C:\Users\sandra\AppData\Local\{5458A742-C26D-478A-A92B-FE8966E5C2D9} O43 - CFD: 30/05/2011 - 07:16:38 - [0] ----D C:\Users\sandra\AppData\Local\{54F0D195-42BD-42FE-BFA6-6267742CCE36} O43 - CFD: 16/04/2011 - 20:35:59 - [0] ----D C:\Users\sandra\AppData\Local\{55831C5F-65A8-4FD2-BD23-949A2254F264} O43 - CFD: 26/08/2011 - 16:18:45 - [0] ----D C:\Users\sandra\AppData\Local\{55A64552-32BC-472B-9144-D37050C0DAF7} O43 - CFD: 24/04/2011 - 09:37:53 - [0] ----D C:\Users\sandra\AppData\Local\{565D5FFE-21E1-419C-A463-785E08B1B6B3} O43 - CFD: 22/07/2012 - 21:10:25 - [0] ----D C:\Users\sandra\AppData\Local\{56ADC716-0722-40FD-875D-232DCC23DE3B} O43 - CFD: 12/08/2012 - 09:08:24 - [0] ----D C:\Users\sandra\AppData\Local\{56BE19E9-1C18-4297-A861-498BC486134F} O43 - CFD: 20/07/2012 - 08:38:45 - [0] ----D C:\Users\sandra\AppData\Local\{5712F013-A338-44B0-B70B-5721ECF0F25D} O43 - CFD: 22/11/2011 - 17:56:30 - [0] ----D C:\Users\sandra\AppData\Local\{57298660-2D2F-48FA-9439-5D8137FFA8A6} O43 - CFD: 11/08/2011 - 08:37:51 - [0] ----D C:\Users\sandra\AppData\Local\{581F2FB5-8904-4ABD-9D91-8A7B8D471375} O43 - CFD: 09/03/2012 - 15:29:20 - [0] ----D C:\Users\sandra\AppData\Local\{5887DC19-41C5-4439-930C-FE25668358AF} O43 - CFD: 25/06/2011 - 20:38:06 - [0] ----D C:\Users\sandra\AppData\Local\{5931CF3A-4276-45C0-A2F2-8D490DF33F19} O43 - CFD: 30/06/2012 - 13:38:58 - [0] ----D C:\Users\sandra\AppData\Local\{5952123A-D016-4DE3-AB68-1CB81936B8AF} O43 - CFD: 05/02/2012 - 11:08:46 - [0] ----D C:\Users\sandra\AppData\Local\{59E846B1-8A57-43C2-BB2F-5C7482F525B4} O43 - CFD: 29/02/2012 - 09:15:58 - [0] ----D C:\Users\sandra\AppData\Local\{5A36D262-00CC-421F-B549-35BBDC2413F2} O43 - CFD: 23/02/2012 - 11:46:04 - [0] ----D C:\Users\sandra\AppData\Local\{5A6F8B83-5A5A-4139-AC0F-2EAA3E64DABF} O43 - CFD: 22/07/2012 - 09:09:40 - [0] ----D C:\Users\sandra\AppData\Local\{5A718C64-E7C9-42E8-A025-347EC6C17E92} O43 - CFD: 12/03/2012 - 19:59:22 - [0] ----D C:\Users\sandra\AppData\Local\{5B23F425-4544-452D-82C4-00F638515BDC} O43 - CFD: 17/03/2012 - 22:04:15 - [0] ----D C:\Users\sandra\AppData\Local\{5B758DC1-219A-480A-81D7-9A44212C208B} O43 - CFD: 14/06/2011 - 09:44:34 - [0] ----D C:\Users\sandra\AppData\Local\{5BAEFD17-402D-4E52-97A0-BD0B7C0F7D55} O43 - CFD: 02/01/2012 - 22:15:43 - [0] ----D C:\Users\sandra\AppData\Local\{5BB9AC0C-18BC-4FBB-BEC8-693A078AAFEF} O43 - CFD: 24/06/2012 - 21:31:56 - [0] ----D C:\Users\sandra\AppData\Local\{5C699F82-59B6-4746-B47F-B0ACFB3B9D29} O43 - CFD: 30/09/2012 - 00:19:27 - [0] ----D C:\Users\sandra\AppData\Local\{5CF86715-E529-4F19-8BF1-11BCC6A8DADC} O43 - CFD: 03/12/2011 - 22:28:11 - [0] ----D C:\Users\sandra\AppData\Local\{5D7332BA-7AED-4D65-8F87-29213E777BAF} O43 - CFD: 16/05/2012 - 08:39:07 - [0] ----D C:\Users\sandra\AppData\Local\{5DB523C4-CDDA-4CBC-B060-26AE2C0FA609} O43 - CFD: 09/07/2012 - 10:29:05 - [0] ----D C:\Users\sandra\AppData\Local\{5DDCE92D-EA52-4C05-9C0F-ADEB6996BE7C} O43 - CFD: 11/07/2012 - 10:07:15 - [0] ----D C:\Users\sandra\AppData\Local\{5E3358DF-7D31-4180-BE08-DCEEC83CB9B5} O43 - CFD: 08/07/2012 - 20:41:08 - [0] ----D C:\Users\sandra\AppData\Local\{5E709BEB-95F3-4402-86D4-C180BE7E51E5} O43 - CFD: 14/02/2012 - 14:47:57 - [0] ----D C:\Users\sandra\AppData\Local\{5EA88CC4-B6A3-45BE-B639-E9C6418B814C} O43 - CFD: 08/06/2011 - 13:41:25 - [0] ----D C:\Users\sandra\AppData\Local\{5F4A37E6-CBB4-4C88-B90F-A4EDF4A2EBB2} O43 - CFD: 02/02/2012 - 09:27:12 - [0] ----D C:\Users\sandra\AppData\Local\{607CD745-18B9-4A40-A1AF-BB56D1ECF0E9} O43 - CFD: 03/12/2011 - 22:41:12 - [0] ----D C:\Users\sandra\AppData\Local\{609A41E7-7DB6-407F-94D4-9B2617CA23F3} O43 - CFD: 19/04/2011 - 04:27:46 - [0] ----D C:\Users\sandra\AppData\Local\{60C8631D-2DA2-434C-BE5B-005E317C5D95} O43 - CFD: 02/08/2011 - 19:31:33 - [0] ----D C:\Users\sandra\AppData\Local\{60E50B63-0E57-4DC5-99DC-8EF4D94FBB3D} O43 - CFD: 28/02/2012 - 20:34:44 - [0] ----D C:\Users\sandra\AppData\Local\{61929280-D495-44C3-8B0F-5BBEC7090125} O43 - CFD: 17/07/2012 - 08:59:13 - [0] ----D C:\Users\sandra\AppData\Local\{62229B2F-875D-4D4D-922D-7D3FFAE2D60E} O43 - CFD: 28/09/2012 - 11:29:07 - [0] ----D C:\Users\sandra\AppData\Local\{6264E519-4D46-4D71-9F4E-38BC9646437C} O43 - CFD: 19/06/2011 - 21:48:51 - [0] ----D C:\Users\sandra\AppData\Local\{62AC9856-9393-4943-8DDC-8227174037A0} O43 - CFD: 20/02/2012 - 09:26:11 - [0] ----D C:\Users\sandra\AppData\Local\{63CD73FD-A512-4BB1-87FD-D1F72581CD69} O43 - CFD: 16/11/2012 - 07:39:51 - [0] ----D C:\Users\sandra\AppData\Local\{6411FC76-3BAB-4132-92B7-4CED62FCC377} O43 - CFD: 10/04/2011 - 16:28:49 - [0] ----D C:\Users\sandra\AppData\Local\{65A9ED9A-D5C5-48F9-8CBC-CEC55F9AB06D} O43 - CFD: 01/08/2011 - 10:40:35 - [0] ----D C:\Users\sandra\AppData\Local\{65C8D576-EE2E-4D39-A7A6-B91A5EF9B93F} O43 - CFD: 07/04/2012 - 07:21:36 - [0] ----D C:\Users\sandra\AppData\Local\{65FF2734-63A0-4783-97C7-0CF1543E0204} O43 - CFD: 29/05/2011 - 06:49:58 - [0] ----D C:\Users\sandra\AppData\Local\{660C979A-6B8E-4A49-AB3B-3DA707839899} O43 - CFD: 18/02/2012 - 09:23:47 - [0] ----D C:\Users\sandra\AppData\Local\{668892EF-62A5-47B2-B2CE-ACFC2FA7701C} O43 - CFD: 02/09/2011 - 07:55:55 - [0] ----D C:\Users\sandra\AppData\Local\{66CF80E5-F93B-4161-A128-F12C6B6796F8} O43 - CFD: 15/06/2011 - 21:46:52 - [0] ----D C:\Users\sandra\AppData\Local\{66F2D13D-84A4-4E44-863A-004A1ABE1A31} O43 - CFD: 14/07/2012 - 10:00:08 - [0] ----D C:\Users\sandra\AppData\Local\{670BDDDC-CDF4-4EB6-8BB8-0479BF78E0F3} O43 - CFD: 07/02/2012 - 10:20:10 - [0] ----D C:\Users\sandra\AppData\Local\{67162DB2-20C2-4E2D-8894-32CE62771E56} O43 - CFD: 21/07/2012 - 09:56:47 - [0] ----D C:\Users\sandra\AppData\Local\{6890A0AE-9EF6-486D-BD49-77FA7D54EBAF} O43 - CFD: 14/07/2012 - 22:00:38 - [0] ----D C:\Users\sandra\AppData\Local\{68F3E28F-E4D1-468A-94DC-67102BB9C6B9} O43 - CFD: 16/07/2012 - 08:57:52 - [0] ----D C:\Users\sandra\AppData\Local\{69471DF9-1DDC-4BB8-9620-41E2E56EADA0} O43 - CFD: 30/03/2012 - 17:52:33 - [0] ----D C:\Users\sandra\AppData\Local\{69A95989-FE8F-4010-B053-1D4D49C96993} O43 - CFD: 03/07/2011 - 16:23:38 - [0] ----D C:\Users\sandra\AppData\Local\{6A87F404-C597-44D1-ACB9-A571D724E880} O43 - CFD: 04/10/2012 - 03:36:43 - [0] ----D C:\Users\sandra\AppData\Local\{6A9B5D92-B77A-40A2-8F3C-77C0201892E3} O43 - CFD: 08/10/2012 - 08:41:36 - [0] ----D C:\Users\sandra\AppData\Local\{6AB5ABD8-4571-412E-8ECB-A2C0256E795A} O43 - CFD: 07/02/2012 - 10:07:07 - [0] ----D C:\Users\sandra\AppData\Local\{6B3CC2C9-5C3C-4B58-8EAE-EC392BB74B7F} O43 - CFD: 21/07/2011 - 14:36:07 - [0] ----D C:\Users\sandra\AppData\Local\{6C790B7C-DA60-4402-A321-56F2B9404322} O43 - CFD: 15/12/2012 - 13:06:29 - [0] ----D C:\Users\sandra\AppData\Local\{6DDE45FA-58A7-45FB-8B5A-89D69CDB0406} O43 - CFD: 12/11/2012 - 03:37:46 - [0] ----D C:\Users\sandra\AppData\Local\{6DE04082-5ACB-41A0-AF1D-7C8C440F006F} O43 - CFD: 24/12/2011 - 19:40:29 - [0] ----D C:\Users\sandra\AppData\Local\{6E485BAF-B224-4F8A-A18E-5DB1BD882ED6} O43 - CFD: 18/03/2012 - 10:23:53 - [0] ----D C:\Users\sandra\AppData\Local\{6E751986-4E7D-4B21-AEE0-DF2728505ECF} O43 - CFD: 19/09/2011 - 08:29:48 - [0] ----D C:\Users\sandra\AppData\Local\{70D3C8C8-9F1D-4FF0-ADB7-AC6449E45671} O43 - CFD: 10/03/2012 - 03:32:18 - [0] ----D C:\Users\sandra\AppData\Local\{71415DF3-ADB5-4189-B959-9266032E7460} O43 - CFD: 01/01/2012 - 02:07:23 - [0] ----D C:\Users\sandra\AppData\Local\{717873BE-C4EC-497E-A232-096C352A03A8} O43 - CFD: 12/02/2012 - 16:22:26 - [0] ----D C:\Users\sandra\AppData\Local\{7212BE8E-01FD-41B9-A8DD-51C6A4419E5D} O43 - CFD: 21/09/2011 - 18:47:16 - [0] ----D C:\Users\sandra\AppData\Local\{73478944-6B9C-4172-B2FC-FC81FA475EBE} O43 - CFD: 15/03/2012 - 07:40:08 - [0] ----D C:\Users\sandra\AppData\Local\{7361243C-57DC-463C-9328-416CD7812F3B} O43 - CFD: 20/09/2011 - 07:48:56 - [0] ----D C:\Users\sandra\AppData\Local\{73ABD593-DAA7-47C6-AB9D-9DEF9AABA3E4} O43 - CFD: 10/04/2012 - 20:47:46 - [0] ----D C:\Users\sandra\AppData\Local\{73F1737A-A176-4724-89FA-EEAEB84BB3C2} O43 - CFD: 17/12/2011 - 16:24:00 - [0] ----D C:\Users\sandra\AppData\Local\{7448BB61-C601-41D9-81E2-FF033C95AA55} O43 - CFD: 27/03/2012 - 02:37:25 - [0] ----D C:\Users\sandra\AppData\Local\{74D5EBDD-CAE7-4CFA-B00C-4817DB23F3F3} O43 - CFD: 03/04/2012 - 08:40:59 - [0] ----D C:\Users\sandra\AppData\Local\{74EDFE36-76A3-4FF8-9565-7941B1885ACC} O43 - CFD: 01/03/2012 - 21:41:04 - [0] ----D C:\Users\sandra\AppData\Local\{7574844C-BA2B-4402-B70A-EE590E5EFF59} O43 - CFD: 03/05/2011 - 14:40:38 - [0] ----D C:\Users\sandra\AppData\Local\{758FB579-A8CC-4E3E-9887-3D75EE4197CF} O43 - CFD: 04/05/2011 - 21:14:25 - [0] ----D C:\Users\sandra\AppData\Local\{75F28786-1FDD-4C74-A65E-118E1D688E64} O43 - CFD: 07/09/2011 - 21:14:26 - [0] ----D C:\Users\sandra\AppData\Local\{764B9401-1F7E-49AE-A6D7-51907B3C05A6} O43 - CFD: 05/06/2011 - 16:09:18 - [0] ----D C:\Users\sandra\AppData\Local\{77361E7E-C732-44E6-B1FF-7F1F0C34F805} O43 - CFD: 08/07/2012 - 20:41:27 - [0] ----D C:\Users\sandra\AppData\Local\{77688E22-598D-4E28-AB64-0FA891A20D2E} O43 - CFD: 07/03/2012 - 22:10:01 - [0] ----D C:\Users\sandra\AppData\Local\{77C6FA09-C1F3-4A0D-822D-F0266A75BAB4} O43 - CFD: 27/12/2012 - 11:14:53 - [0] ----D C:\Users\sandra\AppData\Local\{77D0CCA1-584B-4365-8F45-59491467BD11} O43 - CFD: 23/03/2012 - 21:42:36 - [0] ----D C:\Users\sandra\AppData\Local\{78654B86-75E4-4359-8884-DC839FC92061} O43 - CFD: 24/07/2012 - 03:36:30 - [0] ----D C:\Users\sandra\AppData\Local\{78E43595-A494-499E-A4D4-4D4F5B855AE4} O43 - CFD: 17/03/2012 - 10:03:39 - [0] ----D C:\Users\sandra\AppData\Local\{78F3B643-F356-450D-B1FF-604DCE452FE1} O43 - CFD: 02/05/2011 - 06:35:48 - [0] ----D C:\Users\sandra\AppData\Local\{79636275-47C5-467D-9E3F-DA8A5324C90E} O43 - CFD: 18/11/2012 - 09:40:29 - [0] ----D C:\Users\sandra\AppData\Local\{79A56414-C95D-4E62-A347-4CF72E52AC01} O43 - CFD: 21/04/2011 - 21:35:17 - [0] ----D C:\Users\sandra\AppData\Local\{79D89FCF-8339-4A27-AAD5-A5A36220E185} O43 - CFD: 29/10/2012 - 12:39:29 - [0] ----D C:\Users\sandra\AppData\Local\{7A6C81DC-E027-4440-A2BC-57951805FF6D} O43 - CFD: 16/09/2011 - 14:19:17 - [0] ----D C:\Users\sandra\AppData\Local\{7AF604B2-BC42-48AD-8EA5-69489DC6D349} O43 - CFD: 14/08/2012 - 18:32:16 - [0] ----D C:\Users\sandra\AppData\Local\{7AFEAD05-FBCC-476E-B3F6-C7ED5DEBD05B} O43 - CFD: 05/04/2012 - 06:24:48 - [0] ----D C:\Users\sandra\AppData\Local\{7B2147E8-DCE9-4F5D-B74F-559AD3C13C4E} O43 - CFD: 03/02/2012 - 20:42:28 - [0] ----D C:\Users\sandra\AppData\Local\{7BD06477-6472-4DB7-9869-EBD2EE347922} O43 - CFD: 29/03/2012 - 20:44:45 - [0] ----D C:\Users\sandra\AppData\Local\{7C566698-E532-4539-9F4A-8A4C9C61994D} O43 - CFD: 27/07/2012 - 19:55:22 - [0] ----D C:\Users\sandra\AppData\Local\{7C6B6798-B212-4A6E-B4C3-30E4F05ACFF6} O43 - CFD: 16/05/2011 - 04:27:19 - [0] ----D C:\Users\sandra\AppData\Local\{7C8BE053-50CC-466E-8D5D-F9114570A2A8} O43 - CFD: 17/08/2012 - 22:06:24 - [0] ----D C:\Users\sandra\AppData\Local\{7C9E6723-01FF-4067-BB40-1FCCFE1A2319} O43 - CFD: 06/01/2012 - 12:02:25 - [0] ----D C:\Users\sandra\AppData\Local\{7CA3AD8D-9507-4B55-B623-F42BAFA57E3A} O43 - CFD: 28/06/2011 - 08:51:42 - [0] ----D C:\Users\sandra\AppData\Local\{7CD7D1AD-0CEC-4948-A496-93DFDAEF6728} O43 - CFD: 03/10/2011 - 09:48:07 - [0] ----D C:\Users\sandra\AppData\Local\{7D22EED5-9A26-4CBF-91B0-9190760D32B4} O43 - CFD: 27/06/2011 - 08:50:22 - [0] ----D C:\Users\sandra\AppData\Local\{7D870586-3903-453B-8C26-3E97CB67F691} O43 - CFD: 21/03/2012 - 20:13:26 - [0] ----D C:\Users\sandra\AppData\Local\{7D93A2D7-93C5-4ACE-8369-E56037CAD5DE} O43 - CFD: 01/07/2011 - 10:24:54 - [0] ----D C:\Users\sandra\AppData\Local\{7DDAD314-981B-40FF-8CC8-578C17D83121} O43 - CFD: 10/11/2011 - 16:59:28 - [0] ----D C:\Users\sandra\AppData\Local\{7E6D42B1-A714-4998-A091-2EB58A8BEBC3} O43 - CFD: 24/10/2011 - 20:49:30 - [0] ----D C:\Users\sandra\AppData\Local\{7EE36BE4-2834-4096-992A-C84DF5C5A88D} O43 - CFD: 05/11/2011 - 08:21:49 - [0] ----D C:\Users\sandra\AppData\Local\{7F30F1E8-77C9-44E3-AC84-58CC9167CB16} O43 - CFD: 24/02/2012 - 07:42:24 - [0] ----D C:\Users\sandra\AppData\Local\{7F7166FD-C255-4D2E-9222-703A310F20E1} O43 - CFD: 28/07/2012 - 09:03:26 - [0] ----D C:\Users\sandra\AppData\Local\{80251B53-2BFB-460B-9097-3C80EC51BC8A} O43 - CFD: 16/02/2012 - 09:56:34 - [0] ----D C:\Users\sandra\AppData\Local\{806D45BB-3F77-4B0E-902C-D38EC25FA5D5} O43 - CFD: 06/06/2011 - 19:06:14 - [0] ----D C:\Users\sandra\AppData\Local\{81AA8B03-E793-4127-8896-67BBC93EF459} O43 - CFD: 06/07/2012 - 21:08:17 - [0] ----D C:\Users\sandra\AppData\Local\{81B3D4DF-F576-4225-8AD3-0E9CDD197F06} O43 - CFD: 11/04/2011 - 07:07:24 - [0] ----D C:\Users\sandra\AppData\Local\{82B9256D-64F2-4460-9B37-FC996BB71DF7} O43 - CFD: 06/02/2012 - 17:27:21 - [0] ----D C:\Users\sandra\AppData\Local\{82C9F978-D388-4E9D-AF4C-2C34837DD2C3} O43 - CFD: 10/04/2011 - 04:28:15 - [0] ----D C:\Users\sandra\AppData\Local\{8351E617-A617-4463-8E86-12F18B479FED} O43 - CFD: 04/04/2011 - 10:55:11 - [0] ----D C:\Users\sandra\AppData\Local\{83733AD6-FBA5-4DDE-93C5-4293018F1DD3} O43 - CFD: 22/06/2012 - 18:08:43 - [0] ----D C:\Users\sandra\AppData\Local\{84585A6A-0F17-4B8D-A0FF-C8402AEACBDF} O43 - CFD: 31/01/2012 - 08:45:26 - [0] ----D C:\Users\sandra\AppData\Local\{8474B9A9-18DF-4CBA-85D5-989F60762D7B} O43 - CFD: 13/10/2011 - 19:26:59 - [0] ----D C:\Users\sandra\AppData\Local\{84CA9200-FD6C-46EE-A429-E01CC8E50B18} O43 - CFD: 06/03/2012 - 04:17:43 - [0] ----D C:\Users\sandra\AppData\Local\{84D0F4F1-CC6A-4BCE-AF60-3B65A988347B} O43 - CFD: 22/07/2012 - 21:10:14 - [0] ----D C:\Users\sandra\AppData\Local\{84DB3324-B50F-4029-A8FF-92EE6A49C4A9} O43 - CFD: 25/02/2012 - 10:13:03 - [0] ----D C:\Users\sandra\AppData\Local\{84E24DB5-F7D5-4D47-8560-AA0BE8DCF863} O43 - CFD: 29/06/2012 - 02:50:44 - [0] ----D C:\Users\sandra\AppData\Local\{84E305E8-C792-4E66-81FF-99F78436AE96} O43 - CFD: 02/03/2012 - 09:57:37 - [0] ----D C:\Users\sandra\AppData\Local\{8514B738-9699-41BF-AD14-59C4280D90B1} O43 - CFD: 28/05/2011 - 09:35:31 - [0] ----D C:\Users\sandra\AppData\Local\{85B7E82E-358F-447A-9FE8-C6E5A4F689B4} O43 - CFD: 21/08/2012 - 11:23:36 - [0] ----D C:\Users\sandra\AppData\Local\{85D0557F-75F9-4AB8-B71D-043F9CB50207} O43 - CFD: 09/03/2012 - 15:29:10 - [0] ----D C:\Users\sandra\AppData\Local\{85D11BF2-098C-4770-A502-0FDC4527AC52} O43 - CFD: 30/10/2012 - 08:33:24 - [0] ----D C:\Users\sandra\AppData\Local\{85F53CEC-C506-436F-8A81-B03F5A3926D4} O43 - CFD: 28/02/2012 - 04:09:08 - [0] ----D C:\Users\sandra\AppData\Local\{86681D69-713B-466A-AE85-8984308F8E8A} O43 - CFD: 30/06/2011 - 09:48:05 - [0] ----D C:\Users\sandra\AppData\Local\{866F03E1-EE80-4FB0-858A-E96620D2633C} O43 - CFD: 07/03/2012 - 07:38:31 - [0] ----D C:\Users\sandra\AppData\Local\{871B66BB-1E40-4C3F-B2A5-4322D4E07E83} O43 - CFD: 23/06/2012 - 08:45:20 - [0] ----D C:\Users\sandra\AppData\Local\{8779935D-4D78-4D57-948C-C46DB9544B1B} O43 - CFD: 25/09/2012 - 06:42:44 - [0] ----D C:\Users\sandra\AppData\Local\{877C86AC-2B0D-408C-B9B6-569E4B048A8A} O43 - CFD: 24/06/2011 - 04:27:11 - [0] ----D C:\Users\sandra\AppData\Local\{879572AE-3240-4005-9B60-E1FCD05947C5} O43 - CFD: 26/08/2011 - 21:21:09 - [0] ----D C:\Users\sandra\AppData\Local\{87C99DA5-BA32-41A0-8A49-006488EA7B01} O43 - CFD: 28/06/2012 - 09:40:20 - [0] ----D C:\Users\sandra\AppData\Local\{87E5243B-D27A-4529-A893-F867DB065F80} O43 - CFD: 08/08/2012 - 22:08:36 - [0] ----D C:\Users\sandra\AppData\Local\{883DF63B-74FD-4ECC-8E49-015CAF5D7912} O43 - CFD: 14/08/2012 - 05:09:53 - [0] ----D C:\Users\sandra\AppData\Local\{8853DD9C-9EBE-479F-9634-A69F105FA78E} O43 - CFD: 13/06/2012 - 19:30:03 - [0] ----D C:\Users\sandra\AppData\Local\{8879A495-2071-4AF6-8A6E-EE7F40F05F5F} O43 - CFD: 27/03/2012 - 07:46:47 - [0] ----D C:\Users\sandra\AppData\Local\{888B94E0-ED96-4309-82DE-9DF828BD456D} O43 - CFD: 28/03/2012 - 09:39:55 - [0] ----D C:\Users\sandra\AppData\Local\{8897D621-46ED-42B5-AA17-B23C95D6E047} O43 - CFD: 24/07/2012 - 21:30:13 - [0] ----D C:\Users\sandra\AppData\Local\{8971594D-A303-44A5-84A6-889B3351979E} O43 - CFD: 03/12/2011 - 22:28:00 - [0] ----D C:\Users\sandra\AppData\Local\{89EA290E-1650-4269-BEF4-77C6634DE486} O43 - CFD: 03/07/2012 - 16:40:58 - [0] ----D C:\Users\sandra\AppData\Local\{8A153B31-28B2-4B98-A9F0-B0ED9FE277AE} O43 - CFD: 07/03/2012 - 22:10:12 - [0] ----D C:\Users\sandra\AppData\Local\{8A3A69D5-DA7D-4725-B17F-D4655F170335} O43 - CFD: 15/04/2011 - 20:33:40 - [0] ----D C:\Users\sandra\AppData\Local\{8A4F35FC-525E-4653-9523-111E5F8ADFE2} O43 - CFD: 02/03/2012 - 22:04:19 - [0] ----D C:\Users\sandra\AppData\Local\{8AB6324D-81D7-4B84-8020-A852A3906BA7} O43 - CFD: 05/07/2012 - 21:07:13 - [0] ----D C:\Users\sandra\AppData\Local\{8B4725D6-E98C-4ED1-B047-F0A091BCACD5} O43 - CFD: 24/04/2011 - 21:38:28 - [0] ----D C:\Users\sandra\AppData\Local\{8B8DD1C3-13AE-46EB-983D-30AF72139407} O43 - CFD: 06/06/2011 - 07:05:26 - [0] ----D C:\Users\sandra\AppData\Local\{8C88375D-7752-441A-9431-AB07104DF398} O43 - CFD: 23/09/2011 - 15:14:23 - [0] ----D C:\Users\sandra\AppData\Local\{8D1B7007-7C67-4B10-9DF6-EC87FEA866A1} O43 - CFD: 07/02/2012 - 10:19:59 - [0] ----D C:\Users\sandra\AppData\Local\{8D1C0903-0AFA-400D-96D2-C6F7EB930058} O43 - CFD: 01/07/2012 - 20:45:40 - [0] ----D C:\Users\sandra\AppData\Local\{8D9F7BCC-A2EC-4A71-99FC-5E0B3EDB505C} O43 - CFD: 05/07/2011 - 11:07:58 - [0] ----D C:\Users\sandra\AppData\Local\{905EAF19-DE75-4C20-98C0-E26925DF4678} O43 - CFD: 22/11/2011 - 17:56:40 - [0] ----D C:\Users\sandra\AppData\Local\{905FCE28-A289-4459-8F3F-BED3ED13C815} O43 - CFD: 03/07/2012 - 14:36:52 - [0] ----D C:\Users\sandra\AppData\Local\{9073DDFA-EBEB-4286-9F0B-F6AECA446E6A} O43 - CFD: 05/02/2012 - 11:08:25 - [0] ----D C:\Users\sandra\AppData\Local\{9104CB75-C0D5-46EE-B475-7ACB65B5B432} O43 - CFD: 16/03/2012 - 09:37:44 - [0] ----D C:\Users\sandra\AppData\Local\{912DAF56-546C-4D4A-B797-AA38E4849AFC} O43 - CFD: 17/05/2011 - 04:28:20 - [0] ----D C:\Users\sandra\AppData\Local\{91378281-80D4-4303-8893-4C09AFF5DDF3} O43 - CFD: 01/05/2011 - 09:18:59 - [0] ----D C:\Users\sandra\AppData\Local\{9154D98F-C177-42C9-8D66-613F9F4AB471} O43 - CFD: 12/01/2012 - 09:45:25 - [0] ----D C:\Users\sandra\AppData\Local\{91E6C34C-7D71-48CB-AD51-0695C88E18C4} O43 - CFD: 12/07/2012 - 22:09:23 - [0] ----D C:\Users\sandra\AppData\Local\{936C96CC-76AD-4EC7-81AD-58CD6C61E383} O43 - CFD: 22/05/2011 - 21:20:08 - [0] ----D C:\Users\sandra\AppData\Local\{93DDE558-D7CE-412C-8A1B-FBF57A40B90F} O43 - CFD: 03/09/2011 - 07:47:18 - [0] ----D C:\Users\sandra\AppData\Local\{93F911D2-B01A-4426-8565-64EB84E8B5AB} O43 - CFD: 20/06/2011 - 09:49:23 - [0] ----D C:\Users\sandra\AppData\Local\{9410A7B0-7B40-496D-963E-2F9E9BAC554D} O43 - CFD: 20/06/2011 - 21:49:57 - [0] ----D C:\Users\sandra\AppData\Local\{94156358-9185-44A7-A5EA-CA3A609A2729} O43 - CFD: 26/02/2012 - 22:15:21 - [0] ----D C:\Users\sandra\AppData\Local\{94583E8A-C083-47F0-BCAF-5D717BA5A74F} O43 - CFD: 03/05/2012 - 08:39:30 - [0] ----D C:\Users\sandra\AppData\Local\{94694B27-92D1-4336-8C3D-C77394E567C3} O43 - CFD: 31/01/2012 - 08:45:16 - [0] ----D C:\Users\sandra\AppData\Local\{951EDB9F-2AF1-4739-928A-2F4D7C2F6E44} O43 - CFD: 02/01/2012 - 14:23:15 - [0] ----D C:\Users\sandra\AppData\Local\{95EF95F9-D19B-42C4-A853-A374989B3903} O43 - CFD: 06/03/2012 - 17:50:50 - [0] ----D C:\Users\sandra\AppData\Local\{96326CFE-3E30-461A-B44C-91738EF041F3} O43 - CFD: 29/03/2012 - 07:00:01 - [0] ----D C:\Users\sandra\AppData\Local\{966F7E85-736F-4783-A5FA-3189D461EB26} O43 - CFD: 21/02/2012 - 21:37:37 - [0] ----D C:\Users\sandra\AppData\Local\{9760878B-6685-4E2E-BF66-2360A1A9FDC1} O43 - CFD: 01/01/2012 - 02:07:33 - [0] ----D C:\Users\sandra\AppData\Local\{97956E05-1000-4F83-8935-3DC18B478D3D} O43 - CFD: 22/04/2011 - 21:36:13 - [0] ----D C:\Users\sandra\AppData\Local\{97A1C095-B9D3-42A2-9100-3EC527A1B317} O43 - CFD: 20/03/2012 - 12:04:50 - [0] ----D C:\Users\sandra\AppData\Local\{97CB91A0-A31C-40BC-B571-8BC3A2BA6346} O43 - CFD: 18/03/2012 - 10:23:34 - [0] ----D C:\Users\sandra\AppData\Local\{9835BD0B-D640-40C7-B887-040FE83DB253} O43 - CFD: 19/09/2011 - 08:29:36 - [0] ----D C:\Users\sandra\AppData\Local\{984C7156-A2FB-47ED-A477-766BFC945D1C} O43 - CFD: 11/08/2012 - 12:00:02 - [0] ----D C:\Users\sandra\AppData\Local\{98F77419-6319-40C7-B399-053409393398} O43 - CFD: 23/03/2012 - 08:15:13 - [0] ----D C:\Users\sandra\AppData\Local\{991521AD-0243-4FA9-8BD5-A00D721781B9} O43 - CFD: 05/09/2011 - 19:52:08 - [0] ----D C:\Users\sandra\AppData\Local\{993B0752-B8B1-4BB8-B399-10D291B9D20F} O43 - CFD: 15/09/2011 - 11:08:24 - [0] ----D C:\Users\sandra\AppData\Local\{9958938D-29D9-4210-A426-907A1A885120} O43 - CFD: 05/07/2012 - 06:58:31 - [0] ----D C:\Users\sandra\AppData\Local\{9967B60A-B3A7-49BD-9111-A6ADF8DE338B} O43 - CFD: 02/04/2011 - 08:27:43 - [0] ----D C:\Users\sandra\AppData\Local\{9A907395-F333-4586-8CB6-7C03D8855974} O43 - CFD: 11/09/2012 - 15:06:49 - [0] ----D C:\Users\sandra\AppData\Local\{9A9CB3A7-4BE1-40BB-9152-4888F11C8EA5} O43 - CFD: 26/11/2011 - 12:51:16 - [0] ----D C:\Users\sandra\AppData\Local\{9AA83518-DEA8-4CA3-8596-6A5EB9B4B637} O43 - CFD: 20/02/2012 - 21:26:36 - [0] ----D C:\Users\sandra\AppData\Local\{9ABB62B5-D4D1-434D-A9FA-D0BAD5CF9D7E} O43 - CFD: 08/04/2011 - 09:12:12 - [0] ----D C:\Users\sandra\AppData\Local\{9AFE5EDC-D153-4849-901C-3D29AE8A1DCC} O43 - CFD: 17/06/2011 - 07:21:10 - [0] ----D C:\Users\sandra\AppData\Local\{9C69C89C-D9F6-44BF-B0B4-1894CD176409} O43 - CFD: 15/12/2011 - 07:50:38 - [0] ----D C:\Users\sandra\AppData\Local\{9C708AE6-F16B-47BD-B48E-962DBA547623} O43 - CFD: 29/07/2011 - 06:13:44 - [0] ----D C:\Users\sandra\AppData\Local\{9C99AE0E-DDE4-448B-BA1A-2BF1017EDD50} O43 - CFD: 29/09/2011 - 17:40:56 - [0] ----D C:\Users\sandra\AppData\Local\{9CC4FABB-0F70-462A-8B7D-C608C8885592} O43 - CFD: 23/07/2011 - 08:53:44 - [0] ----D C:\Users\sandra\AppData\Local\{9CE85824-B0F4-48B1-B433-4D2E278FC2CF} O43 - CFD: 04/03/2012 - 22:20:52 - [0] ----D C:\Users\sandra\AppData\Local\{9D89BBC9-7AEC-447C-A5EC-C612A881F74E} O43 - CFD: 07/06/2011 - 07:14:40 - [0] ----D C:\Users\sandra\AppData\Local\{9F3E5F78-9504-4C47-AA9E-CD2671A6A699} O43 - CFD: 06/04/2012 - 18:51:06 - [0] ----D C:\Users\sandra\AppData\Local\{9F414E95-1964-44D0-BD23-D5F44D102224} O43 - CFD: 29/06/2011 - 21:47:17 - [0] ----D C:\Users\sandra\AppData\Local\{9FF799C8-CCE9-441A-ABAA-0A7ABF9D55DB} O43 - CFD: 15/07/2012 - 19:55:45 - [0] ----D C:\Users\sandra\AppData\Local\{A00BDD68-B703-4BC5-9B02-F279FBC3A729} O43 - CFD: 01/02/2012 - 21:56:22 - [0] ----D C:\Users\sandra\AppData\Local\{A037E638-BC7D-4D7A-BDE3-997176099D5A} O43 - CFD: 19/03/2012 - 07:44:52 - [0] ----D C:\Users\sandra\AppData\Local\{A0981EFE-A072-4063-BA9D-DDE9C4C9792B} O43 - CFD: 10/04/2012 - 08:47:26 - [0] ----D C:\Users\sandra\AppData\Local\{A09DE6FF-57A2-47DF-84D2-C5B1DD507725} O43 - CFD: 18/06/2011 - 09:47:11 - [0] ----D C:\Users\sandra\AppData\Local\{A13B9431-32EC-4577-ACDF-0265D8BF1E2B} O43 - CFD: 11/03/2012 - 16:28:21 - [0] ----D C:\Users\sandra\AppData\Local\{A15D36BA-6605-4D32-8216-9BC935373FDC} O43 - CFD: 29/10/2011 - 18:11:00 - [0] ----D C:\Users\sandra\AppData\Local\{A1B3E81B-A730-4B60-9C05-4C4DB81C2059} O43 - CFD: 25/02/2012 - 10:13:18 - [0] ----D C:\Users\sandra\AppData\Local\{A1CDC8CA-A764-43D7-910D-D87C4B9EC977} O43 - CFD: 24/06/2011 - 16:27:45 - [0] ----D C:\Users\sandra\AppData\Local\{A22DB7F8-06B5-44E1-A408-658CACBCF3A3} O43 - CFD: 13/09/2012 - 07:39:41 - [0] ----D C:\Users\sandra\AppData\Local\{A231980D-96BE-4795-9BE1-268F7BD6CE58} O43 - CFD: 10/08/2012 - 23:11:41 - [0] ----D C:\Users\sandra\AppData\Local\{A24AFC72-CCC4-4D27-8C5D-DC43C6E51492} O43 - CFD: 17/08/2012 - 07:35:30 - [0] ----D C:\Users\sandra\AppData\Local\{A293F118-3276-4A60-B22F-E359DB952BFA} O43 - CFD: 19/07/2012 - 20:37:52 - [0] ----D C:\Users\sandra\AppData\Local\{A3476610-1FD0-4BEC-915C-25822CFB051C} O43 - CFD: 30/06/2011 - 21:48:38 - [0] ----D C:\Users\sandra\AppData\Local\{A3C1983F-AA14-4B8A-8A95-90F652D60EC6} O43 - CFD: 18/11/2012 - 21:54:09 - [0] ----D C:\Users\sandra\AppData\Local\{A3DA6563-8E31-47C8-8259-17F37AB13F1E} O43 - CFD: 19/02/2012 - 09:24:58 - [0] ----D C:\Users\sandra\AppData\Local\{A411DF6B-C166-45A1-9C93-BDF0386C08AB} O43 - CFD: 13/04/2012 - 06:31:22 - [0] ----D C:\Users\sandra\AppData\Local\{A4DA2F77-908D-43EF-843F-AFBC879905A6} O43 - CFD: 23/06/2012 - 08:45:09 - [0] ----D C:\Users\sandra\AppData\Local\{A4EE8C92-1FD7-4466-845F-6A3498262D1B} O43 - CFD: 18/07/2012 - 09:58:54 - [0] ----D C:\Users\sandra\AppData\Local\{A51B9887-F1A3-4FAF-802E-8652B62E8B68} O43 - CFD: 05/09/2011 - 13:21:42 - [0] ----D C:\Users\sandra\AppData\Local\{A5294E10-30E7-44BE-A020-607E90B4ECBF} O43 - CFD: 27/03/2012 - 07:46:58 - [0] ----D C:\Users\sandra\AppData\Local\{A57473B9-9DB3-42D5-BD67-7695BCDA56E3} O43 - CFD: 15/03/2012 - 07:39:51 - [0] ----D C:\Users\sandra\AppData\Local\{A5A35AD1-0292-41D7-AEF0-C3D139111CC0} O43 - CFD: 13/05/2011 - 14:23:07 - [0] ----D C:\Users\sandra\AppData\Local\{A5FCC239-37F8-4FC2-82DC-13DA10070A12} O43 - CFD: 27/03/2012 - 20:48:39 - [0] ----D C:\Users\sandra\AppData\Local\{A6460B78-905B-4C04-AD7C-BF3092BEC37F} O43 - CFD: 21/09/2011 - 18:47:26 - [0] ----D C:\Users\sandra\AppData\Local\{A6A30D7F-07C7-4748-8918-FB8CB5FF13B9} O43 - CFD: 24/02/2012 - 19:42:51 - [0] ----D C:\Users\sandra\AppData\Local\{A6FA5B16-011E-4D54-A639-643E652FAF38} O43 - CFD: 18/02/2012 - 21:24:23 - [0] ----D C:\Users\sandra\AppData\Local\{A759FCD9-7303-4C3B-8867-29E3322C5BBE} O43 - CFD: 15/03/2012 - 21:37:09 - [0] ----D C:\Users\sandra\AppData\Local\{A773FF89-9C24-4594-BDC0-1A329A7E1536} O43 - CFD: 25/03/2012 - 20:46:46 - [0] ----D C:\Users\sandra\AppData\Local\{A7B73FA4-C6D3-43AB-912B-06FF79610BE5} O43 - CFD: 16/04/2011 - 08:34:20 - [0] ----D C:\Users\sandra\AppData\Local\{A7C2F104-6F5D-4655-B184-0799C93A4F6C} O43 - CFD: 06/04/2012 - 06:50:43 - [0] ----D C:\Users\sandra\AppData\Local\{A8166BDF-EDAD-4872-A75C-45812D53A09B} O43 - CFD: 27/07/2012 - 07:54:46 - [0] ----D C:\Users\sandra\AppData\Local\{A8472810-EE73-49B0-8FF8-DBF7E3DD5351} O43 - CFD: 22/07/2012 - 09:09:24 - [0] ----D C:\Users\sandra\AppData\Local\{A85F97AB-5B93-4339-9968-3B3C006FD7AE} O43 - CFD: 29/06/2012 - 14:53:59 - [0] ----D C:\Users\sandra\AppData\Local\{A868A463-A548-4627-97BA-3F1433A2C060} O43 - CFD: 07/11/2011 - 19:14:56 - [0] ----D C:\Users\sandra\AppData\Local\{A90494B8-F285-4DAC-92A3-4C0B6C2A8C82} O43 - CFD: 16/06/2012 - 08:34:41 - [0] ----D C:\Users\sandra\AppData\Local\{A95191F5-1E5E-443E-881D-C14E4FDDE7EA} O43 - CFD: 04/01/2012 - 16:19:50 - [0] ----D C:\Users\sandra\AppData\Local\{A95905D2-639D-4ECB-87D1-0D4BD40F111E} O43 - CFD: 19/07/2011 - 08:43:28 - [0] ----D C:\Users\sandra\AppData\Local\{A95B610B-7B33-4FAC-8A48-7BB65AD5B89B} O43 - CFD: 17/06/2011 - 21:46:38 - [0] ----D C:\Users\sandra\AppData\Local\{A9659F04-775A-441A-9794-DB43AE9D3C34} O43 - CFD: 24/07/2012 - 03:36:19 - [0] ----D C:\Users\sandra\AppData\Local\{A9A79A01-2A1B-4C27-BB04-8A4FC31F2E06} O43 - CFD: 14/07/2012 - 09:59:54 - [0] ----D C:\Users\sandra\AppData\Local\{A9C7B084-7569-4B22-BAA2-D174D2999FD0} O43 - CFD: 19/04/2011 - 18:13:24 - [0] ----D C:\Users\sandra\AppData\Local\{AA2BEF4E-89C2-437E-80E9-A66375B09605} O43 - CFD: 01/06/2012 - 22:38:03 - [0] ----D C:\Users\sandra\AppData\Local\{AA31F812-2733-4662-AA6D-7D1274B497A0} O43 - CFD: 08/11/2012 - 21:46:00 - [0] ----D C:\Users\sandra\AppData\Local\{AA42F676-2B49-4B65-B195-C34AD364A5A4} O43 - CFD: 08/04/2012 - 20:14:18 - [0] ----D C:\Users\sandra\AppData\Local\{AA7B4067-6BBC-45AF-AD07-DD4759C9F968} O43 - CFD: 16/03/2012 - 22:03:03 - [0] ----D C:\Users\sandra\AppData\Local\{AACE8E7D-64FA-4D52-8DC3-54AD4FFD8609} O43 - CFD: 19/02/2012 - 21:25:34 - [0] ----D C:\Users\sandra\AppData\Local\{AAED37FD-B61E-4C35-9B70-4E5402A70C63} O43 - CFD: 05/03/2012 - 11:32:27 - [0] ----D C:\Users\sandra\AppData\Local\{AB1D8F66-EFEF-4A97-BAA2-15963C29EDA6} O43 - CFD: 20/05/2011 - 07:05:47 - [0] ----D C:\Users\sandra\AppData\Local\{AC26C652-D52E-44BA-9C6E-9B1419879B6A} O43 - CFD: 27/06/2012 - 04:43:13 - [0] ----D C:\Users\sandra\AppData\Local\{AC372EA7-D118-4C08-808E-B971B00AFAF6} O43 - CFD: 27/06/2012 - 09:28:18 - [0] ----D C:\Users\sandra\AppData\Local\{AC4E4623-17D9-476D-9732-E103BC2C1389} O43 - CFD: 15/06/2011 - 09:45:29 - [0] ----D C:\Users\sandra\AppData\Local\{AC6CB682-7BB0-4214-8A0C-C80A3F2ABF46} O43 - CFD: 14/07/2012 - 22:00:48 - [0] ----D C:\Users\sandra\AppData\Local\{ADB9E094-51D0-4536-8876-1BCFDE56BC55} O43 - CFD: 12/03/2012 - 07:36:43 - [0] ----D C:\Users\sandra\AppData\Local\{ADD5916A-533A-41CD-92B4-EE04A8210038} O43 - CFD: 28/08/2012 - 21:07:39 - [0] ----D C:\Users\sandra\AppData\Local\{AE00E8A3-447F-4ED2-BF12-62AFE0AE4A2D} O43 - CFD: 13/03/2012 - 08:00:09 - [0] ----D C:\Users\sandra\AppData\Local\{AF1B0339-A6AB-4072-8D2D-235B8409202E} O43 - CFD: 13/06/2012 - 22:06:34 - [0] ----D C:\Users\sandra\AppData\Local\{AF271032-2282-4C54-8A8D-474821FDC31B} O43 - CFD: 10/07/2012 - 03:43:51 - [0] ----D C:\Users\sandra\AppData\Local\{AF86A255-EC15-41FA-BC50-9AAFF2F152A9} O43 - CFD: 23/08/2011 - 08:21:08 - [0] ----D C:\Users\sandra\AppData\Local\{AFBE34B2-1155-4A3A-8BBE-BC3B6AFCEE4E} O43 - CFD: 30/01/2012 - 19:26:21 - [0] ----D C:\Users\sandra\AppData\Local\{AFE4D090-FD78-4587-85EA-EFE87A5C4FBD} O43 - CFD: 22/02/2012 - 22:08:05 - [0] ----D C:\Users\sandra\AppData\Local\{B061C55B-371E-49D1-A543-9BAA9720BE91} O43 - CFD: 09/04/2012 - 08:14:40 - [0] ----D C:\Users\sandra\AppData\Local\{B06B6055-F228-4C09-96F3-754308A1CA5D} O43 - CFD: 27/02/2012 - 10:29:14 - [0] ----D C:\Users\sandra\AppData\Local\{B0B4EC87-4D59-4C8F-A7C0-CE6D54ED37AD} O43 - CFD: 12/01/2012 - 09:45:14 - [0] ----D C:\Users\sandra\AppData\Local\{B1AD6360-3195-4DE7-A93C-EE266C67FC42} O43 - CFD: 18/09/2012 - 02:55:52 - [0] ----D C:\Users\sandra\AppData\Local\{B21B7AF0-BE86-4A6C-9F80-48AF103E66C7} O43 - CFD: 28/07/2011 - 11:23:16 - [0] ----D C:\Users\sandra\AppData\Local\{B2E7B881-3E4F-4D48-90CD-35506658CEE7} O43 - CFD: 26/06/2012 - 16:02:06 - [0] ----D C:\Users\sandra\AppData\Local\{B33E981E-8B3A-4F34-A4C0-91C238F0A268} O43 - CFD: 02/07/2012 - 21:05:47 - [0] ----D C:\Users\sandra\AppData\Local\{B354C21B-E7BE-4C33-B6A4-2B6F9124F486} O43 - CFD: 02/10/2012 - 20:18:42 - [0] ----D C:\Users\sandra\AppData\Local\{B39F98A3-14B4-45F8-B0C3-6BAC92F778D2} O43 - CFD: 02/07/2012 - 08:54:07 - [0] ----D C:\Users\sandra\AppData\Local\{B477D46A-1289-456B-A16A-50341D2F4843} O43 - CFD: 01/04/2011 - 20:27:09 - [0] ----D C:\Users\sandra\AppData\Local\{B47ECB42-A5EF-4C85-B560-94DD5F2FF634} O43 - CFD: 11/06/2011 - 09:19:35 - [0] ----D C:\Users\sandra\AppData\Local\{B4D9773E-6CBE-4B14-908A-35598EA4D7B2} O43 - CFD: 05/03/2012 - 11:32:16 - [0] ----D C:\Users\sandra\AppData\Local\{B510BA6D-B4F9-4AC0-8786-0CC8B7441D8A} O43 - CFD: 26/06/2012 - 16:01:56 - [0] ----D C:\Users\sandra\AppData\Local\{B576BDE4-7806-4DBD-AC44-C51477BFDEB7} O43 - CFD: 28/04/2011 - 16:56:00 - [0] ----D C:\Users\sandra\AppData\Local\{B60359A7-6CB8-4B02-B6E9-CAAABC3E94A5} O43 - CFD: 22/09/2012 - 19:56:30 - [0] ----D C:\Users\sandra\AppData\Local\{B6F6E095-8502-4C3F-9950-C59C0F074449} O43 - CFD: 11/07/2012 - 22:08:08 - [0] ----D C:\Users\sandra\AppData\Local\{B72019EC-39D3-46F8-A164-A125D94CDED0} O43 - CFD: 19/07/2012 - 20:38:10 - [0] ----D C:\Users\sandra\AppData\Local\{B83ED488-6895-47C6-9DA4-308B8D52F883} O43 - CFD: 06/08/2012 - 16:07:11 - [0] ----D C:\Users\sandra\AppData\Local\{B847A5C2-DE63-4937-B0B4-2A95B7985E0F} O43 - CFD: 05/07/2012 - 21:06:50 - [0] ----D C:\Users\sandra\AppData\Local\{B8C164CB-9226-4A3D-9347-301A7C67FFD0} O43 - CFD: 13/10/2011 - 18:07:50 - [0] ----D C:\Users\sandra\AppData\Local\{B8C7CBCD-F9AF-487B-8642-9FCF22C2BF96} O43 - CFD: 01/04/2011 - 08:26:36 - [0] ----D C:\Users\sandra\AppData\Local\{B8DBFB2F-E05C-44D1-8304-86B868DF6E7A} O43 - CFD: 05/09/2011 - 19:52:19 - [0] ----D C:\Users\sandra\AppData\Local\{B8E70CDD-38E1-4A96-BEC5-075ADAAA7E95} O43 - CFD: 02/06/2011 - 20:05:51 - [0] ----D C:\Users\sandra\AppData\Local\{B97962D7-F7F8-4BE6-9730-E90668B9E7F8} O43 - CFD: 21/02/2012 - 21:37:48 - [0] ----D C:\Users\sandra\AppData\Local\{B9B4549F-E12C-44FB-9DC8-5ACE4732FDE4} O43 - CFD: 03/02/2012 - 20:42:18 - [0] ----D C:\Users\sandra\AppData\Local\{B9D51E68-F86A-4D6B-9B35-39C2A438FD5B} O43 - CFD: 19/09/2011 - 06:59:28 - [0] ----D C:\Users\sandra\AppData\Local\{BA4EBE96-EECA-4137-BD50-272AEACB90D6} O43 - CFD: 21/11/2011 - 10:58:09 - [0] ----D C:\Users\sandra\AppData\Local\{BA658A8A-63F0-4D91-BA90-8371594819AC} O43 - CFD: 15/02/2012 - 21:56:03 - [0] ----D C:\Users\sandra\AppData\Local\{BA81A369-2B68-4F0C-A7C2-69C06133EFA8} O43 - CFD: 12/07/2012 - 10:08:43 - [0] ----D C:\Users\sandra\AppData\Local\{BAB47FC0-AE5C-4B37-B236-24D19394CD14} O43 - CFD: 22/12/2012 - 12:02:39 - [0] ----D C:\Users\sandra\AppData\Local\{BAC3414B-4738-4E92-A52F-EE2F1379CD58} O43 - CFD: 15/12/2011 - 07:50:53 - [0] ----D C:\Users\sandra\AppData\Local\{BAFB88FE-4999-4986-9AD9-60AAD706CED9} O43 - CFD: 18/07/2012 - 09:58:42 - [0] ----D C:\Users\sandra\AppData\Local\{BB3E1BAB-3CBB-49B8-A5C7-15DC6706F326} O43 - CFD: 27/09/2012 - 22:46:53 - [0] ----D C:\Users\sandra\AppData\Local\{BC9EF5C9-359D-4A59-8D10-DBBD61F4FCE0} O43 - CFD: 04/09/2012 - 19:07:41 - [0] ----D C:\Users\sandra\AppData\Local\{BCD6E1FE-C6F5-4017-B333-8CAE59AD515C} O43 - CFD: 10/11/2012 - 19:38:45 - [0] ----D C:\Users\sandra\AppData\Local\{BD15FBFC-68C5-436E-9701-C82F22F690A4} O43 - CFD: 24/12/2011 - 19:40:17 - [0] ----D C:\Users\sandra\AppData\Local\{BD75E07C-D885-4FA4-8276-92379B5DA3F3} O43 - CFD: 26/08/2011 - 16:18:34 - [0] ----D C:\Users\sandra\AppData\Local\{BD9C4987-B399-4C39-BABA-5A3D0D627E2C} O43 - CFD: 29/05/2011 - 18:50:32 - [0] ----D C:\Users\sandra\AppData\Local\{BDEE2607-614B-4413-8062-069F0C0BABEB} O43 - CFD: 16/07/2011 - 20:29:43 - [0] ----D C:\Users\sandra\AppData\Local\{BDF1572F-B344-40E3-89E1-04E664B4BCCE} O43 - CFD: 01/04/2012 - 09:24:39 - [0] ----D C:\Users\sandra\AppData\Local\{BE0609A9-8727-400C-BC8A-1F51FAF4FEA9} O43 - CFD: 20/05/2011 - 19:06:37 - [0] ----D C:\Users\sandra\AppData\Local\{BE1D7A91-14B3-4F13-90AB-AE1BC72EA923} O43 - CFD: 12/04/2012 - 06:30:14 - [0] ----D C:\Users\sandra\AppData\Local\{BE7F3967-ACEA-40B1-ABC1-0031B8769AA1} O43 - CFD: 06/02/2012 - 17:27:11 - [0] ----D C:\Users\sandra\AppData\Local\{BECCA1F0-E218-4A35-836A-FCA64FCAD26F} O43 - CFD: 04/04/2012 - 11:26:08 - [0] ----D C:\Users\sandra\AppData\Local\{BF0B3C13-5B2E-4B41-BE34-462B32B19370} O43 - CFD: 04/07/2011 - 21:29:45 - [0] ----D C:\Users\sandra\AppData\Local\{BF1C2CAD-DB16-4615-908D-97C429928E4B} O43 - CFD: 20/11/2012 - 07:42:59 - [0] ----D C:\Users\sandra\AppData\Local\{BF896B45-AFE1-4667-9315-23676EE96E90} O43 - CFD: 30/12/2011 - 01:09:55 - [0] ----D C:\Users\sandra\AppData\Local\{BFC4E758-8F00-46BB-AB72-EFA91E279934} O43 - CFD: 17/07/2012 - 21:31:58 - [0] ----D C:\Users\sandra\AppData\Local\{C01CD61A-EE4E-4807-AE2D-E6713B102D34} O43 - CFD: 11/01/2012 - 11:43:21 - [0] ----D C:\Users\sandra\AppData\Local\{C15B6036-FD1E-49CE-B9D6-62A4AB95EF69} O43 - CFD: 13/07/2012 - 11:07:28 - [0] ----D C:\Users\sandra\AppData\Local\{C1BB6873-4E7D-4A0A-9AFD-31DD1F1E8AB8} O43 - CFD: 17/02/2012 - 19:50:40 - [0] ----D C:\Users\sandra\AppData\Local\{C2AF8D29-1778-4B0E-8B62-7AAE8CC48272} O43 - CFD: 26/07/2012 - 12:02:22 - [0] ----D C:\Users\sandra\AppData\Local\{C3134A04-D015-4860-AC97-6325E7720C87} O43 - CFD: 08/02/2012 - 08:58:59 - [0] ----D C:\Users\sandra\AppData\Local\{C409A5DC-9874-468F-B525-CF9E2E7CB11E} O43 - CFD: 23/07/2012 - 09:11:02 - [0] ----D C:\Users\sandra\AppData\Local\{C411A6CB-9918-4489-8241-A9CEF7102E73} O43 - CFD: 19/05/2011 - 19:00:02 - [0] ----D C:\Users\sandra\AppData\Local\{C4486805-04C6-4453-843D-A813FE5FD692} O43 - CFD: 01/10/2012 - 18:05:38 - [0] ----D C:\Users\sandra\AppData\Local\{C5C57349-00B0-4A5A-883A-B4FF1B2D73F5} O43 - CFD: 17/09/2012 - 02:52:57 - [0] ----D C:\Users\sandra\AppData\Local\{C5C7DB5A-F5B2-4F50-A09F-AE58B760075C} O43 - CFD: 07/08/2011 - 17:27:34 - [0] ----D C:\Users\sandra\AppData\Local\{C61304F9-DD3E-4AED-814D-C3D3D4D6DBF7} O43 - CFD: 12/05/2011 - 18:37:51 - [0] ----D C:\Users\sandra\AppData\Local\{C617835B-EB5F-4E42-AFA7-77965DD58425} O43 - CFD: 10/12/2011 - 22:34:43 - [0] ----D C:\Users\sandra\AppData\Local\{C6CAAE93-44CC-425E-B210-8D6F6591E6BB} O43 - CFD: 24/03/2012 - 09:43:22 - [0] ----D C:\Users\sandra\AppData\Local\{C73ED07D-646C-4916-8CC7-2271B581F22E} O43 - CFD: 30/06/2012 - 07:40:16 - [0] ----D C:\Users\sandra\AppData\Local\{C74F5903-75A2-4549-8275-779FCC47BA6E} O43 - CFD: 23/09/2011 - 15:14:34 - [0] ----D C:\Users\sandra\AppData\Local\{C7F67ABE-447F-40E0-AB09-E6D1EF5F085F} O43 - CFD: 07/03/2012 - 07:38:17 - [0] ----D C:\Users\sandra\AppData\Local\{C9F0847F-A226-45AC-A94F-5F0269FE4842} O43 - CFD: 20/07/2011 - 12:55:48 - [0] ----D C:\Users\sandra\AppData\Local\{CA43F9E9-1886-4651-8E33-45D7D0BF4615} O43 - CFD: 08/02/2012 - 08:58:49 - [0] ----D C:\Users\sandra\AppData\Local\{CA96478C-D7BD-4DE4-A12C-22F7BD0EAAD8} O43 - CFD: 17/08/2012 - 07:35:54 - [0] ----D C:\Users\sandra\AppData\Local\{CB346B16-00FB-4274-BF30-60C9F1446A55} O43 - CFD: 22/05/2011 - 09:19:45 - [0] ----D C:\Users\sandra\AppData\Local\{CB473AB9-B2CD-4EE7-B501-D53145693F5C} O43 - CFD: 26/02/2012 - 22:15:11 - [0] ----D C:\Users\sandra\AppData\Local\{CBAADDE0-85A4-45FC-BAFA-D484C0E6F963} O43 - CFD: 02/04/2012 - 06:56:31 - [0] ----D C:\Users\sandra\AppData\Local\{CBBFC4B4-7C96-43FB-843F-A6B15C06524A} O43 - CFD: 01/02/2012 - 21:56:33 - [0] ----D C:\Users\sandra\AppData\Local\{CBC92F31-1465-4619-853F-16782DCAEF23} O43 - CFD: 29/07/2012 - 14:16:09 - [0] ----D C:\Users\sandra\AppData\Local\{CC99F287-5B55-4B50-B829-0A34C1E092D3} O43 - CFD: 19/07/2012 - 08:27:51 - [0] ----D C:\Users\sandra\AppData\Local\{CCF80A1B-256E-43B6-A43F-D7219E105D10} O43 - CFD: 12/09/2012 - 07:34:32 - [0] ----D C:\Users\sandra\AppData\Local\{CCF860F4-78F3-421C-968C-EDEEC8B99928} O43 - CFD: 29/08/2011 - 13:01:55 - [0] ----D C:\Users\sandra\AppData\Local\{CCF8ABD1-2B19-4F51-ABAA-7235CA05B09F} O43 - CFD: 17/09/2012 - 14:53:15 - [0] ----D C:\Users\sandra\AppData\Local\{CD1FDFE9-2816-4F8C-B996-5AE15DE22FB6} O43 - CFD: 26/09/2012 - 06:48:40 - [0] ----D C:\Users\sandra\AppData\Local\{CD8D5968-5027-412F-A803-09870EF37E50} O43 - CFD: 04/07/2011 - 08:32:11 - [0] ----D C:\Users\sandra\AppData\Local\{CE0F2C92-54BE-4199-A570-E77773F4E30B} O43 - CFD: 15/06/2011 - 09:46:01 - [0] ----D C:\Users\sandra\AppData\Local\{CE927C40-9523-46F8-9605-5441447D2421} O43 - CFD: 01/07/2012 - 08:31:57 - [0] ----D C:\Users\sandra\AppData\Local\{CED75A90-C951-4A60-82D1-B1EF3C21CC16} O43 - CFD: 26/11/2011 - 12:51:27 - [0] ----D C:\Users\sandra\AppData\Local\{CF256DD7-CA1C-413E-850D-077B8DEC20C4} O43 - CFD: 02/07/2011 - 20:49:47 - [0] ----D C:\Users\sandra\AppData\Local\{CF75F40A-1B38-4026-9F30-40648E8A27F4} O43 - CFD: 07/07/2011 - 13:47:26 - [0] ----D C:\Users\sandra\AppData\Local\{CFDE9D9D-1320-4251-A293-DFF06D61A523} O43 - CFD: 07/05/2011 - 14:26:17 - [0] ----D C:\Users\sandra\AppData\Local\{D06DA0BD-88C7-4555-90F6-9FA0338059BC} O43 - CFD: 21/05/2012 - 07:10:06 - [0] ----D C:\Users\sandra\AppData\Local\{D082959F-073C-4D0A-8AF8-DF36141946D8} O43 - CFD: 08/05/2011 - 16:30:44 - [0] ----D C:\Users\sandra\AppData\Local\{D0D48EE3-AFA7-4EBF-81E5-B8B928450AB3} O43 - CFD: 25/05/2011 - 04:33:15 - [0] ----D C:\Users\sandra\AppData\Local\{D193C9FF-AB55-411F-A732-315113DF177D} O43 - CFD: 05/04/2012 - 18:25:10 - [0] ----D C:\Users\sandra\AppData\Local\{D2826916-EC7E-4FD0-8F13-B971B0D1F430} O43 - CFD: 20/04/2011 - 07:07:59 - [0] ----D C:\Users\sandra\AppData\Local\{D2FB1C9E-3548-438A-8683-F0A382AA4D6E} O43 - CFD: 26/07/2011 - 09:18:47 - [0] ----D C:\Users\sandra\AppData\Local\{D35D37B9-637D-48AC-879D-FC90B2173B68} O43 - CFD: 03/05/2012 - 08:39:46 - [0] ----D C:\Users\sandra\AppData\Local\{D54E72E4-0A00-4E33-8F1C-74E6745AF197} O43 - CFD: 02/10/2012 - 07:05:39 - [0] ----D C:\Users\sandra\AppData\Local\{D64C7DA0-26B6-4330-B00E-898BA949D462} O43 - CFD: 03/10/2011 - 17:11:44 - [0] ----D C:\Users\sandra\AppData\Local\{D6AD54EF-681F-47CD-8DA1-8BAD2431BD43} O43 - CFD: 14/02/2012 - 14:47:46 - [0] ----D C:\Users\sandra\AppData\Local\{D71801B6-8FE3-458E-8DFE-8A9B1BD68288} O43 - CFD: 05/12/2011 - 13:04:13 - [0] ----D C:\Users\sandra\AppData\Local\{D7C79141-69E8-4488-B8FB-FB83CC9593EF} O43 - CFD: 25/07/2011 - 08:42:55 - [0] ----D C:\Users\sandra\AppData\Local\{D858AA9A-F5DE-4489-869E-46167D537A56} O43 - CFD: 29/09/2012 - 08:47:10 - [0] ----D C:\Users\sandra\AppData\Local\{D8D4A756-86C6-43A8-B21B-77BDDBFB3B6C} O43 - CFD: 02/06/2011 - 07:58:57 - [0] ----D C:\Users\sandra\AppData\Local\{D9520FEF-5A71-4DB2-88DF-843768A14CC0} O43 - CFD: 25/07/2012 - 21:31:26 - [0] ----D C:\Users\sandra\AppData\Local\{D9655309-5594-4ABD-B573-EE18DD2346BA} O43 - CFD: 05/04/2011 - 18:08:53 - [0] ----D C:\Users\sandra\AppData\Local\{D9D3EC18-F9C2-4787-84BA-E6D2D1EEC67C} O43 - CFD: 07/02/2012 - 12:55:20 - [0] ----D C:\Users\sandra\AppData\Local\{D9F1AF26-7764-4E06-82D5-1E1C9A447DD0} O43 - CFD: 22/03/2012 - 20:14:48 - [0] ----D C:\Users\sandra\AppData\Local\{DA289E11-A1B9-4018-8E73-BA7A850E98E8} O43 - CFD: 12/07/2012 - 10:08:33 - [0] ----D C:\Users\sandra\AppData\Local\{DA3EC975-8617-4498-A499-52CB92E109DD} O43 - CFD: 07/11/2011 - 19:15:07 - [0] ----D C:\Users\sandra\AppData\Local\{DA54CDC4-664B-4C63-8DDB-948988B8554F} O43 - CFD: 14/08/2012 - 18:32:27 - [0] ----D C:\Users\sandra\AppData\Local\{DA65E12F-D0AD-4746-AFDE-F3A8A2ACC08E} O43 - CFD: 02/01/2012 - 22:15:30 - [0] ----D C:\Users\sandra\AppData\Local\{DAC424FB-C87E-43F1-8930-9E9E941D7D2F} O43 - CFD: 20/03/2012 - 12:04:37 - [0] ----D C:\Users\sandra\AppData\Local\{DB2EFE48-8494-4542-90BB-A5328A7814A7} O43 - CFD: 30/08/2012 - 20:40:54 - [0] ----D C:\Users\sandra\AppData\Local\{DB50E6BC-DA32-49F7-A245-4CD421F1E257} O43 - CFD: 01/03/2012 - 21:41:16 - [0] ----D C:\Users\sandra\AppData\Local\{DBC972ED-E88D-4DB4-B772-1FB07F7B24B4} O43 - CFD: 09/03/2012 - 03:19:29 - [0] ----D C:\Users\sandra\AppData\Local\{DBDD559D-7DC4-46D9-B903-E9A8B7CF996C} O43 - CFD: 13/06/2012 - 19:30:14 - [0] ----D C:\Users\sandra\AppData\Local\{DC022A3F-3619-401F-BAC3-56A99EDF4D3F} O43 - CFD: 25/06/2012 - 09:47:55 - [0] ----D C:\Users\sandra\AppData\Local\{DC47F19C-96F9-4800-86DC-1B254CFE4240} O43 - CFD: 27/07/2011 - 21:38:23 - [0] ----D C:\Users\sandra\AppData\Local\{DC5B0929-4BCC-4402-9009-942B2EDCA8AD} O43 - CFD: 15/05/2011 - 10:57:59 - [0] ----D C:\Users\sandra\AppData\Local\{DC863146-9FFE-47F6-B1D9-AE69E12A6931} O43 - CFD: 07/02/2012 - 13:25:37 - [0] ----D C:\Users\sandra\AppData\Local\{DC8F3860-99A4-4CC2-A29A-EDE891EFF8F5} O43 - CFD: 26/02/2012 - 10:14:34 - [0] ----D C:\Users\sandra\AppData\Local\{DCAEBC91-5978-4027-AA81-B8E6A66A6661} O43 - CFD: 30/04/2011 - 09:09:17 - [0] ----D C:\Users\sandra\AppData\Local\{DCB23937-3BEC-4B2C-BDCF-B78C0ADFD561} O43 - CFD: 28/07/2012 - 21:04:15 - [0] ----D C:\Users\sandra\AppData\Local\{DD481CBF-3530-4EAF-A415-F7271233A2B5} O43 - CFD: 25/02/2012 - 22:13:58 - [0] ----D C:\Users\sandra\AppData\Local\{DE41573E-4E61-4FDF-A44C-8C456D90D377} O43 - CFD: 15/09/2012 - 07:58:09 - [0] ----D C:\Users\sandra\AppData\Local\{DE956032-90E7-4E07-BCEB-B90678B46510} O43 - CFD: 22/06/2012 - 20:44:45 - [0] ----D C:\Users\sandra\AppData\Local\{DF68074B-00F4-4E47-8F8A-9DF643236259} O43 - CFD: 16/03/2012 - 22:02:49 - [0] ----D C:\Users\sandra\AppData\Local\{DF97BCA7-44E3-402E-B68E-88ED34937EEE} O43 - CFD: 03/06/2011 - 14:33:47 - [0] ----D C:\Users\sandra\AppData\Local\{DFEC7D00-27F2-4865-8141-9BF2096BD4FD} O43 - CFD: 18/04/2011 - 08:42:50 - [0] ----D C:\Users\sandra\AppData\Local\{E048DF19-C9B7-45F4-B4A0-70111427A9BB} O43 - CFD: 11/03/2012 - 16:28:10 - [0] ----D C:\Users\sandra\AppData\Local\{E0B90D03-F655-4DB6-8524-7B176DC01DC7} O43 - CFD: 21/03/2012 - 08:12:46 - [0] ----D C:\Users\sandra\AppData\Local\{E0CA15DC-D530-4877-9359-422A6FA2B656} O43 - CFD: 19/09/2011 - 06:59:39 - [0] ----D C:\Users\sandra\AppData\Local\{E1215361-D4BF-4500-8D50-58D7A17DD542} O43 - CFD: 02/04/2012 - 20:40:36 - [0] ----D C:\Users\sandra\AppData\Local\{E1786C40-1E9F-4C89-8415-DE459278C279} O43 - CFD: 06/07/2012 - 09:07:39 - [0] ----D C:\Users\sandra\AppData\Local\{E1B4A77E-8D6F-4125-A603-4365CF6477F0} O43 - CFD: 23/02/2012 - 11:46:15 - [0] ----D C:\Users\sandra\AppData\Local\{E1B7E0DD-C488-4F50-B373-A0CD9F4233F2} O43 - CFD: 06/05/2011 - 07:28:29 - [0] ----D C:\Users\sandra\AppData\Local\{E1BD63F0-3EB4-447C-94E9-537CA29ECA16} O43 - CFD: 13/12/2011 - 14:00:35 - [0] ----D C:\Users\sandra\AppData\Local\{E298E1F1-E542-4686-B565-4C058BC61E1D} O43 - CFD: 28/07/2012 - 21:04:30 - [0] ----D C:\Users\sandra\AppData\Local\{E3032DB3-4A65-4C15-907C-A93EC77E9BC4} O43 - CFD: 01/09/2012 - 10:19:08 - [0] ----D C:\Users\sandra\AppData\Local\{E325A940-D7A8-4703-A269-E98A26FE9983} O43 - CFD: 21/06/2011 - 09:50:30 - [0] ----D C:\Users\sandra\AppData\Local\{E32C75F1-B11F-4543-B68C-781EAC2CEBF5} O43 - CFD: 12/02/2012 - 16:22:15 - [0] ----D C:\Users\sandra\AppData\Local\{E3678B81-9CEE-479D-A1B1-91EC6AC50453} O43 - CFD: 21/02/2012 - 09:27:24 - [0] ----D C:\Users\sandra\AppData\Local\{E3B9A5E7-2EF4-4FBF-A919-D5738781A54A} O43 - CFD: 17/04/2011 - 20:36:55 - [0] ----D C:\Users\sandra\AppData\Local\{E3E23191-5A15-45A8-AB33-2838D9BF63AB} O43 - CFD: 23/03/2012 - 08:15:24 - [0] ----D C:\Users\sandra\AppData\Local\{E4BB8B83-3CD4-47D6-A551-7DE21155BDF4} O43 - CFD: 16/02/2012 - 09:56:45 - [0] ----D C:\Users\sandra\AppData\Local\{E5F498A1-7287-43ED-A56D-C6D339B4E3EA} O43 - CFD: 15/07/2012 - 10:05:57 - [0] ----D C:\Users\sandra\AppData\Local\{E68A0E87-F637-4342-87AB-89E12B498243} O43 - CFD: 30/04/2011 - 21:18:25 - [0] ----D C:\Users\sandra\AppData\Local\{E6FBDC10-257A-43B1-A1A1-D4BCFC9E8989} O43 - CFD: 22/02/2012 - 10:07:27 - [0] ----D C:\Users\sandra\AppData\Local\{E746073C-96B2-413B-8E60-3ED157224511} O43 - CFD: 05/12/2011 - 13:04:03 - [0] ----D C:\Users\sandra\AppData\Local\{E74A4DA5-1704-4FF6-846C-8FF928D29C6B} O43 - CFD: 13/07/2012 - 11:07:17 - [0] ----D C:\Users\sandra\AppData\Local\{E7A8003A-197F-464A-829E-C3B5E583A3A1} O43 - CFD: 08/04/2012 - 08:13:37 - [0] ----D C:\Users\sandra\AppData\Local\{E7AA54A9-886A-4C9A-8B47-827CF6D8BAFC} O43 - CFD: 01/06/2011 - 19:30:59 - [0] ----D C:\Users\sandra\AppData\Local\{E932B270-9A62-4697-B937-BFAB07F5D0EE} O43 - CFD: 06/08/2012 - 16:07:22 - [0] ----D C:\Users\sandra\AppData\Local\{E969AD27-2F43-4DB8-BFC8-C9A0AC50DBFE} O43 - CFD: 29/02/2012 - 09:16:13 - [0] ----D C:\Users\sandra\AppData\Local\{E9FD142E-C709-4C51-BB92-DC2F2E3CEF70} O43 - CFD: 13/12/2011 - 14:00:21 - [0] ----D C:\Users\sandra\AppData\Local\{EA43A00C-C8F6-42E9-87A9-D17128FA5674} O43 - CFD: 10/09/2012 - 10:45:22 - [0] ----D C:\Users\sandra\AppData\Local\{EAB2F944-3CE9-45CD-9CE3-2D7DCFA9455E} O43 - CFD: 26/02/2012 - 10:14:44 - [0] ----D C:\Users\sandra\AppData\Local\{EBA20A2E-F261-4F5F-8136-06E736992F41} O43 - CFD: 23/01/2012 - 09:37:40 - [0] ----D C:\Users\sandra\AppData\Local\{EBDAB544-9DDB-4932-97B4-3CCDA33DDDD9} O43 - CFD: 05/11/2011 - 08:21:36 - [0] ----D C:\Users\sandra\AppData\Local\{EC5FC20A-0448-41D6-A4E4-52CC93CA6068} O43 - CFD: 11/08/2011 - 08:37:39 - [0] ----D C:\Users\sandra\AppData\Local\{EC7EE6CA-8999-40DC-8CCA-177C431091EC} O43 - CFD: 17/08/2012 - 22:06:00 - [0] ----D C:\Users\sandra\AppData\Local\{ECC35B35-0FD5-4848-8856-5121A30658A8} O43 - CFD: 20/04/2011 - 21:18:12 - [0] ----D C:\Users\sandra\AppData\Local\{ECF733A5-9A06-40B5-A516-8AB257C5A158} O43 - CFD: 17/03/2012 - 10:03:29 - [0] ----D C:\Users\sandra\AppData\Local\{ED5AEBE5-A846-408B-B817-6B075B6117ED} O43 - CFD: 09/10/2011 - 22:03:15 - [0] ----D C:\Users\sandra\AppData\Local\{ED8DDBD0-E0A7-4696-8161-048E869D06CC} O43 - CFD: 19/11/2012 - 09:54:32 - [0] ----D C:\Users\sandra\AppData\Local\{EDFB3B5A-3C68-4741-BA5E-A0395CD58949} O43 - CFD: 25/07/2011 - 20:43:31 - [0] ----D C:\Users\sandra\AppData\Local\{EDFE7CEB-4A5E-4A9B-B53E-EBAB1BFDA4FD} O43 - CFD: 16/07/2012 - 20:58:33 - [0] ----D C:\Users\sandra\AppData\Local\{EECF4D4A-180B-4E1F-9789-FFEA22127A69} O43 - CFD: 23/09/2012 - 08:45:27 - [0] ----D C:\Users\sandra\AppData\Local\{EF33947C-39DF-4DC1-97FC-8FC9F4C7FDA6} O43 - CFD: 02/01/2012 - 14:23:05 - [0] ----D C:\Users\sandra\AppData\Local\{EF84D925-2EB1-4B92-9278-E22B4A3E9AD7} O43 - CFD: 26/03/2012 - 08:47:23 - [0] ----D C:\Users\sandra\AppData\Local\{F04C700F-FC89-4149-8371-C8EBB74F5018} O43 - CFD: 19/05/2011 - 06:59:28 - [0] ----D C:\Users\sandra\AppData\Local\{F0CB27FE-F425-4282-AACB-F29D0699025B} O43 - CFD: 23/07/2012 - 09:10:50 - [0] ----D C:\Users\sandra\AppData\Local\{F0E5C519-4AFE-423A-90CE-0DAEA2285C4E} O43 - CFD: 05/05/2011 - 09:45:09 - [0] ----D C:\Users\sandra\AppData\Local\{F142CD29-4F8D-4531-A0C4-98DC4C9D3DCF} O43 - CFD: 28/06/2012 - 09:40:10 - [0] ----D C:\Users\sandra\AppData\Local\{F2EDA637-9021-43DC-89F8-DBDC92D045C0} O43 - CFD: 11/03/2012 - 04:27:57 - [0] ----D C:\Users\sandra\AppData\Local\{F4039BD3-C95D-42D5-8965-73B07716BCB2} O43 - CFD: 17/07/2011 - 20:41:33 - [0] ----D C:\Users\sandra\AppData\Local\{F441AD17-CAF5-41DB-B4AB-3FC2269A2157} O43 - CFD: 31/08/2012 - 09:17:44 - [0] ----D C:\Users\sandra\AppData\Local\{F4662F5E-E426-40A6-AFFC-D1939C67D83E} O43 - CFD: 19/03/2012 - 07:44:37 - [0] ----D C:\Users\sandra\AppData\Local\{F47D1B73-858F-4E81-87DF-422D70D6E180} O43 - CFD: 29/04/2011 - 07:03:41 - [0] ----D C:\Users\sandra\AppData\Local\{F4D832C8-AF26-4DEA-B963-C0D6F03E3771} O43 - CFD: 20/02/2012 - 09:26:00 - [0] ----D C:\Users\sandra\AppData\Local\{F5128FDF-CFF7-4D2F-9743-5146B2143A78} O43 - CFD: 06/07/2012 - 21:08:28 - [0] ----D C:\Users\sandra\AppData\Local\{F5EF367B-DC71-4250-899D-4E5168F11BD8} O43 - CFD: 01/07/2012 - 08:44:58 - [0] ----D C:\Users\sandra\AppData\Local\{F62DC308-C1F0-4671-BCF4-D094A6D3ACD9} O43 - CFD: 02/07/2012 - 21:05:37 - [0] ----D C:\Users\sandra\AppData\Local\{F6D1CC6E-1CB3-4A6C-ADD7-06BE5A35CB52} O43 - CFD: 05/09/2011 - 13:21:29 - [0] ----D C:\Users\sandra\AppData\Local\{F6D40054-DC3D-48C4-BFB9-5C63939A0F44} O43 - CFD: 01/07/2012 - 20:45:29 - [0] ----D C:\Users\sandra\AppData\Local\{F70B544D-46B0-4A18-AB7E-276BBFA87BCD} O43 - CFD: 07/12/2011 - 17:57:12 - [0] ----D C:\Users\sandra\AppData\Local\{F743C89C-F523-496F-83C9-40157AE4ADD1} O43 - CFD: 25/06/2011 - 08:37:34 - [0] ----D C:\Users\sandra\AppData\Local\{F7EF9DF9-71B4-480C-958A-2C00044DAAB0} O43 - CFD: 12/09/2012 - 19:34:50 - [0] ----D C:\Users\sandra\AppData\Local\{F8094A13-563F-4CD6-827A-2BA95A39958D} O43 - CFD: 14/12/2012 - 07:38:49 - [0] ----D C:\Users\sandra\AppData\Local\{F827CFC0-080F-4DDB-8F48-2D20724E952A} O43 - CFD: 25/03/2012 - 20:46:31 - [0] ----D C:\Users\sandra\AppData\Local\{F938E44C-64ED-4208-AB62-4A4C7C2F1AB3} O43 - CFD: 20/07/2012 - 20:39:10 - [0] ----D C:\Users\sandra\AppData\Local\{F9FC1845-B351-4312-9C9E-2F82D4C2620A} O43 - CFD: 04/03/2012 - 22:21:15 - [0] ----D C:\Users\sandra\AppData\Local\{FA486D07-CA37-4E65-B261-7BA647DC58D1} O43 - CFD: 22/02/2012 - 10:07:10 - [0] ----D C:\Users\sandra\AppData\Local\{FAF6D26A-8E3B-4343-B940-C7F7F6925406} O43 - CFD: 26/06/2011 - 08:38:41 - [0] ----D C:\Users\sandra\AppData\Local\{FB380CCB-C3BE-44DD-8520-70A1BB3CDE2C} O43 - CFD: 27/04/2011 - 12:57:04 - [0] ----D C:\Users\sandra\AppData\Local\{FB77FBA8-AFCB-4593-8755-AF7FC50CBCAE} O43 - CFD: 16/08/2012 - 11:44:27 - [0] ----D C:\Users\sandra\AppData\Local\{FB7ECCC8-5EC9-4C89-AF1F-23144CA6EAD1} O43 - CFD: 04/10/2012 - 15:59:50 - [0] ----D C:\Users\sandra\AppData\Local\{FB95DAD3-0094-4DEA-B245-8698A36FCF51} O43 - CFD: 26/08/2011 - 21:21:19 - [0] ----D C:\Users\sandra\AppData\Local\{FC53FEBF-1CF4-4673-BF78-72705C528B79} O43 - CFD: 09/07/2012 - 10:29:27 - [0] ----D C:\Users\sandra\AppData\Local\{FC596CAE-E5BD-492E-B47A-2B66E2135B48} O43 - CFD: 30/05/2011 - 21:33:24 - [0] ----D C:\Users\sandra\AppData\Local\{FD2CBB18-0B2D-4C19-ACC8-10D0CB38D0F7} O43 - CFD: 15/03/2012 - 21:36:59 - [0] ----D C:\Users\sandra\AppData\Local\{FD5A2EAF-7D67-49BA-9CE5-E2E5BF737BEA} O43 - CFD: 13/10/2011 - 19:26:47 - [0] ----D C:\Users\sandra\AppData\Local\{FD870190-9EB7-4504-B9DB-5DE02C7ABCE2} O43 - CFD: 20/09/2011 - 07:48:46 - [0] ----D C:\Users\sandra\AppData\Local\{FDE4556D-19B0-43DD-AA0E-3565F7280B56} O43 - CFD: 13/04/2011 - 16:34:52 - [0] ----D C:\Users\sandra\AppData\Local\{FE7F8C2E-1021-4603-8323-9EAE0973433F} O43 - CFD: 16/09/2011 - 14:19:05 - [0] ----D C:\Users\sandra\AppData\Local\{FEB4F405-EA97-48B8-A72F-AFFC2CB8F8DA} O43 - CFD: 14/09/2012 - 12:49:32 - [0] ----D C:\Users\sandra\AppData\Local\{FF6EBD40-14D9-485C-A0C2-1242BDAC9ABE} O43 - CFD: 25/12/2011 - 17:48:46 - [0] ----D C:\Users\sandra\AppData\Local\{FF7F7CFE-9E34-4E54-98D4-B60F9CCE8898} O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 12/07/2012 - 11:06:44 - [0,000] R---D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 26/06/2012 - 21:52:00 - [0,001] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU O43 - CFD: 15/01/2013 - 20:39:23 - [0,002] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 17/07/2011 - 20:43:51 - [0] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoCalendar O43 - CFD: 10/08/2012 - 10:10:41 - [0] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Application O43 - CFD: 10/08/2012 - 10:12:25 - [0,003] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orange O43 - CFD: 03/12/2010 - 22:16:00 - [0] ----D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre O43 - CFD: 19/01/2013 - 07:22:12 - [0,002] R---D C:\Users\sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Scan Program Folder in 01mn 04s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.DC2BE596FC9B15339F7C9D88585927FF] - 04/02/2013 - 08:13:00 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1851426] O44 - LFC:[MD5.E43D08DFB2007AC591058ECE2AC472A7] - 04/02/2013 - 08:01:55 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.A5CFD1C527FB554D386368705DD763F5] - 30/01/2013 - 20:12:40 ---A- . (...) -- C:\Windows\setupact.log [71477] O44 - LFC:[MD5.01B132E8C1E366CBFF1723A034EE626D] - 30/01/2013 - 20:08:01 ---A- . (...) -- C:\Windows\PFRO.log [431066] O44 - LFC:[MD5.2F0248BDF0793E36C715EA884971D1E3] - 30/01/2013 - 13:55:55 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc009.dat [44544] O44 - LFC:[MD5.262AD2E54872F266A0F3933585E81030] - 30/01/2013 - 13:55:55 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc00C.dat [44544] O44 - LFC:[MD5.1C3C7525688E91A3CD970229D654D412] - 30/01/2013 - 13:55:55 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh009.dat [44544] O44 - LFC:[MD5.05AE59316EDB438E7771727BC6FC0F99] - 30/01/2013 - 13:55:55 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh00C.dat [44544] O44 - LFC:[MD5.56A742EAEC32B58FB6CED932B99CC307] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1551488] O44 - LFC:[MD5.2F0248BDF0793E36C715EA884971D1E3] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [106816] O44 - LFC:[MD5.262AD2E54872F266A0F3933585E81030] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [131182] O44 - LFC:[MD5.1C3C7525688E91A3CD970229D654D412] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [616694] O44 - LFC:[MD5.05AE59316EDB438E7771727BC6FC0F99] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [705166] O44 - LFC:[MD5.56A742EAEC32B58FB6CED932B99CC307] - 30/01/2013 - 13:55:55 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1551488] O44 - LFC:[MD5.C6E38782C64F7306F965D631D5D92D77] - 27/01/2013 - 21:01:52 ---A- . (...) -- C:\AdwCleaner[S1].txt [56341] O44 - LFC:[MD5.CEBB5A5A9638E71791AD3D84729938B2] - 27/01/2013 - 21:01:52 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [121] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 21/01/2013 - 18:13:25 . (.Microsoft - Système de classement GRB.) -- C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt [21504] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 21/01/2013 - 18:13:25 ---A- . (...) -- C:\Windows\SysNative\HP_ActiveX_Patch_NOT_DETECTED.txt [0] O44 - LFC:[MD5.D74463B44734FCEF013E842CA4563236] - 19/01/2013 - 11:47:27 . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\FNTCACHE.DAT [51712] O44 - LFC:[MD5.D74463B44734FCEF013E842CA4563236] - 19/01/2013 - 11:47:27 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [304112] O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\SysNative\grb.rs [21504] O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\System32\grb.rs [21504] O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\SysNative\pegibbfc.rs [44544] O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs [44544] O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\SysNative\usk.rs [30720] O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\System32\usk.rs [30720] O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\SysNative\cob-au.rs [40960] O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\cob-au.rs [40960] O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\SysNative\djctq.rs [15360] O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\System32\djctq.rs [15360] O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\SysNative\fpb.rs [46592] O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\System32\fpb.rs [46592] O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\SysNative\oflc-nz.rs [45568] O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs [45568] O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\SysNative\csrr.rs [43520] O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 18/01/2013 - 22:51:48 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\System32\csrr.rs [43520] O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 18/01/2013 - 22:51:47 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\SysNative\pegi-pt.rs [20480] O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 18/01/2013 - 22:51:47 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs [20480] O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 18/01/2013 - 22:51:47 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\SysNative\pegi.rs [20480] O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 18/01/2013 - 22:51:47 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\System32\pegi.rs [20480] O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\SysNative\cero.rs [55296] O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\System32\cero.rs [55296] O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\SysNative\esrb.rs [51712] O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\esrb.rs [51712] O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\SysNative\oflc.rs [23552] O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\System32\oflc.rs [23552] O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\SysNative\pegi-fi.rs [20480] O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 18/01/2013 - 22:51:46 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs [20480] O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 18/01/2013 - 22:50:33 . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\conhost.exe [40960] O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\SysNative\locale.nls [420064] O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\System32\locale.nls [420064] O44 - LFC:[MD5.639774C9ACD063F028F6084ABF5593AD] - 23/11/2012 - 04:13:57 . (...) -- C:\Windows\System32\taskhost.exe [1551488] ~ Scan Files in 00mn 13s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{2b13ed7c-3cf7-11e1-9fc2-90fba6c05453}\AutoRun\command. (...) -- F:\Setup.exe (.not file.) O51 - MPSK:{83245ddd-0bb1-11e1-bdb0-90fba6c05453}\AutoRun\command. (...) -- F:\DPFMate.exe (.not file.) ~ Scan Keys in 00mn 06s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) (None) ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.483DF0B58CA532E5240E59DC41F30AA2] - 23/09/2009 - 02:39:56 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\SysWOW64\drivers\RtsUStor.sys [225280] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.34 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 30/06/2010 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 08/10/2009 - C:\Windows\System32\DRIVERS\amdsata.sys (amdsata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMDSATA O64 - Services: CurCS - 22/10/2012 - C:\Windows\System32\DRIVERS\avgidsdrivera.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER O64 - Services: CurCS - 15/10/2012 - C:\Windows\System32\DRIVERS\avgidsha.sys (AVGIDSHA) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHA O64 - Services: CurCS - 02/10/2012 - C:\Windows\System32\DRIVERS\avgldx64.sys (Avgldx64) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX64 O64 - Services: CurCS - 21/09/2012 - C:\Windows\System32\DRIVERS\avgloga.sys (Avgloga) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGA O64 - Services: CurCS - 15/11/2012 - C:\Windows\System32\DRIVERS\avgmfx64.sys (Avgmfx64) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX64 O64 - Services: CurCS - 14/09/2012 - C:\Windows\System32\DRIVERS\avgrkx64.sys (Avgrkx64) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX64 O64 - Services: CurCS - 21/09/2012 - C:\Windows\System32\DRIVERS\avgtdia.sys (Avgtdia) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIA O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\avgtpx64.sys (avgtp) .(.AVG Technologies - Pas de description.) - LEGACY_AVGTP O64 - Services: CurCS - 14/12/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 11/02/2011 - C:\Windows\System32\drivers\npf.sys (npf) .(.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) - LEGACY_NPF O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Scan Services in 00mn 02s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\sandra\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {26460390-85D8-4AA5-96F5-DDC499E807C7} - (Search the web (Babylon)) - http://search.babylon.com O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} [DefaultScope] - (Orange) - http://r.orange.fr O69 - SBI: SearchScopes [HKCU] {D06F7514-BAFF-4E8E-B491-5B1A657D1A98} - (Yahoo) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {EA8E9A96-7A95-48FF-9AB2-B4F45F0931A1} - (Wikipedia) - http://fr.wikipedia.org O69 - SBI: SearchScopes [HKCU] {FBB2C306-B429-4FD7-93FF-A9707FBC3FB8} - (Bing) - http://www.bing.com ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.CA65BEF63020C73A7E1BA0F67297140B] [SPRF][25/12/2012] (...) -- C:\Users\sandra\AppData\Local\Temp\jkgaaft4.dll [36864] [MD5.1FFB2EBE1F95C5E5AEC1512EA686049C] [SPRF][30/09/2012] (...) -- C:\Users\sandra\AppData\LocalLow\dt.dat [27520] [MD5.D00AB75158F880E77314BE5DF7678023] [SPRF][01/06/2012] (.DVDVideoSoft Ltd. - Free YouTube to MP3 Converter 3.11.22.508 Setup.) -- C:\Users\sandra\Desktop\FreeYouTubeToMP3Converter.exe [27688592] [MD5.5A45A7E3E12BE51844B741945FB8E85E] [SPRF][01/06/2012] (.Iminent - IMinent bootstrapper.) -- C:\Users\sandra\Desktop\IminentSetup_2-KFRPtAWP-1_.exe [825312] ~ Scan Files in 00mn 01s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{396F256E-33E0-407E-8822-2892F4DB6E32}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{0090CBE1-B258-4CF8-8C50-91AC72BD7CCF}" | In - Public - P6 - TRUE | .(.EasyBits Software AS - EasyBits My First Browser.) -- C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe O87 - FAEL: "{E24E25F4-911C-477B-A2B8-F2F83F014F49}" | In - Public - P17 - TRUE | .(.EasyBits Software AS - EasyBits My First Browser.) -- C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe O87 - FAEL: "{9BC88DAF-2BCE-421B-B5C8-9AF8B4F8E7A9}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDVD 9.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.exe O87 - FAEL: "{4BB84698-9517-40E3-9574-970814B74D13}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{642433A8-0FB4-4C20-8A1C-AD1861A9430F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{A1C3894E-7731-4E73-929A-92C5B0E0FC84}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{D7B03FC0-0F02-48B7-A4EB-128CD526E823}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{B9BA8F38-BBF4-4C72-ABCA-79623AC078B9}" | In - Private - P6 - TRUE | .(.ABBYY (BIT Software) - FineScanManager.) -- C:\Program Files (x86)\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe O87 - FAEL: "{ECD6879A-20FE-42F2-8F9B-722A5E0098A7}" | In - Private - P17 - TRUE | .(.ABBYY (BIT Software) - FineScanManager.) -- C:\Program Files (x86)\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe O87 - FAEL: "{F19A7506-9FF1-4500-87B0-5CBBE5467913}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe (.not file.) O87 - FAEL: "{FE7B63FA-8099-43A0-9E35-183E410BE716}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe (.not file.) O87 - FAEL: "{898C9CFB-C06B-45C1-A220-82CEEF55390C}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{CE4DFFE9-AFEB-4E34-84D9-0726D38D5C21}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{329DAB1B-4D4E-4910-97EC-68824FAC87E4}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{F9AA85BC-FF20-4AB9-A0B8-B7E3AE22003F}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{1222DF9F-3D30-4EEE-B79C-CF60432012DC}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "TCP Query User{BD6323F1-FEA3-43CB-93EC-B4D71B2337BE}C:\users\sandra\appdata\local\google\chrome\application\chrome.exe" | In - Private - P6 - TRUE | .(.Google Inc..) -- C:\users\sandra\appdata\local\google\chrome\application\chrome.exe O87 - FAEL: "UDP Query User{8CB2A4F1-08EF-4A38-A233-CF8EE5F1FC2C}C:\users\sandra\appdata\local\google\chrome\application\chrome.exe" | In - Private - P17 - TRUE | .(.Google Inc..) -- C:\users\sandra\appdata\local\google\chrome\application\chrome.exe O87 - FAEL: "{F6BCA1AD-8F62-4905-8F81-A73F7679BB4D}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxeacoms.exe O87 - FAEL: "{C637B9B8-E099-4BC2-8CAB-8E944EC4C30E}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "{FFB2863C-597A-4E79-87C6-D7FD31642AC5}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) O87 - FAEL: "{72DCB911-C618-4A86-9EDF-90D8AD1EBAC4}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) O87 - FAEL: "{A230242F-535A-4B06-A38E-88515159903B}" | In - Private - P6 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{558B76F5-DAA1-426F-A91C-8DA095E14B54}" | In - Private - P17 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{30825086-AD42-4647-9A94-91F6AE7C541C}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{5719BBE8-09C9-49A1-8B6B-CF60050BF331}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{411590BA-46C1-454B-BA02-A8A2725B6BFA}" |In - Public - P6 - TRUE | .(...) -- E:\fscommand\CKSocketServer.exe (.not file.) O87 - FAEL: "{DF8F3A1F-13DC-4032-90D5-475F6E9E5CAC}" |In - Public - P17 - TRUE | .(...) -- E:\fscommand\CKSocketServer.exe (.not file.) O87 - FAEL: "{65693082-E6BC-458E-8669-EACA8D791E01}" | In - Public - P6 - TRUE | .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe O87 - FAEL: "{34C3A70D-239E-4A7D-A449-6BAED37B8F30}" | In - Public - P17 - TRUE | .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe O87 - FAEL: "{0158F07D-1EEB-4F8E-8483-1251C8579784}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEAcoms.exe O87 - FAEL: "{5F15D338-4235-41D9-A9DB-7C823C66589D}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEAcoms.exe O87 - FAEL: "{F39B2BC5-CE73-42E2-9453-4A244D0C3C63}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{AF8EA232-C5A8-4D49-B770-C6B66C487180}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) O87 - FAEL: "{433AC635-9BE2-4D50-B80D-33F56BFE6B0D}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\sandra\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe O87 - FAEL: "{87DB096A-C597-4B41-B833-676650A51338}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe O87 - FAEL: "{B050B930-80B8-4472-94C2-A4C375D8E9C0}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe O87 - FAEL: "{09A2792B-0178-41F1-B4EA-DA347D98CC26}" | In - Private - P6 - TRUE | .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe O87 - FAEL: "{3419BF4C-3B77-411F-BD97-D2667F6E37B6}" | In - Private - P17 - TRUE | .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe O87 - FAEL: "{93115BBC-16DD-48DC-BFAC-D4F00D3D17D2}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe O87 - FAEL: "{E82F2EF3-FBBF-462B-A9EB-3D78D5311C64}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe O87 - FAEL: "{62C2511F-8574-4048-BC13-F36489EE8608}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe O87 - FAEL: "{B800021F-8C01-4B1D-AD51-AC3702FCD77E}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe O87 - FAEL: "{953A3F77-4FEC-4069-8267-0F8E2D463E52}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe O87 - FAEL: "{45E0C85F-EE77-4B82-9B4D-F8E07C40E225}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe O87 - FAEL: "{9A81446C-0349-4BDD-BC14-32BF2E5D9E9E}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe ~ Scan Firewall in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : v2.10152 - (19/01/2013) Clés trouvées (Keys found) : 3 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 3 [HKCU\Software\SweetIM] =>PUP.SweetIM [HKCU\Software\vShare.tv] =>PUP.VShareRedir [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent C:\Program Files (x86)\searchweb =>Toolbar.Babylon C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.Agent C:\Users\sandra\Desktop\IminentSetup_2-KFRPtAWP-1_.exe =>Adware.IMBooster C:\Users\sandra\Desktop\IminentSetup_2-KFRPtAWP-1_.exe => Infection PUP (Adware.IMBooster) ~ Scan Additionnel in 00mn 18s ---\\ Product Upgrade Codes (O90) O90 - PUC: "00004159070000000000000000F01FEC" . (.Microsoft Office 2010.) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe O90 - PUC: "00006FCA9B229EC4896DC2FC53B9CA70" . (.ABBYY FineReader 6.0 Sprint.) -- C:\Windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\ARPPRODUCTICON.exe O90 - PUC: "03E9C206838F2DA4D82C62C591D2A4CA" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{602C9E30-F838-4AD2-8DC2-265C192D4AAC}\maconfico O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "098990BCF5D15D11E99A0005AB3E711E" . (.PowerDirector.) -- C:\Windows\Installer\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\ARPPRODUCTICON.exe O90 - PUC: "0A8DDC0FB3E5579FAA457C5274E70576" . (.ccc-core-static.) -- C:\Windows\Installer\{F0CDD8A0-5E3B-F975-AA54-C725477E5067}\ARPPRODUCTICON.exe O90 - PUC: "0BCD4392EE8F0E114A5A8BCAF6798BE8" . (.Google Earth Plug-in.) -- C:\Windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}\ARPPRODUCTICON.exe O90 - PUC: "1038C85769625584FA5435B4210089A0" . (.Samsung Kies.) -- C:\Windows\Installer\{758C8301-2696-4855-AF45-534B1200980A}\ARPPRODUCTICON.exe O90 - PUC: "114202EE62C28E947948B11CBD7FED69" . (.HP Support Assistant.) -- C:\Windows\Installer\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\ARPPRODUCTICON.exe O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "280A7E6ED74A9507CADB63DF0A6259CE" . (.Catalyst Control Center Graphics Full New.) -- C:\Windows\Installer\{E6E7A082-A47D-7059-ACBD-36FDA02695EC}\ARPPRODUCTICON.exe O90 - PUC: "2A7527EE2A93F2D4D9CA9F2FB5A81E8D" . (.Skype™ 5.10.) -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe O90 - PUC: "42A8F02877C846B39DA02CD312B1DE9A" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{820F8A24-8C77-3B64-D90A-C23D211BEDA9}\ARPPRODUCTICON.exe O90 - PUC: "42C6FBF1DF1C10144AB2C065F4E9E897" . (.PowerStarter.) -- C:\Windows\Installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\ARPPRODUCTICON.exe O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico O90 - PUC: "47A18024BB2BE46BBA5FC9EE31793455" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{42081A74-B2BB-B64E-ABF5-9CEE13974355}\ARPPRODUCTICON.exe O90 - PUC: "579C91EF8CFA4A4458AFD6AB2D7486D7" . (.Orange Clé 3G+.) -- C:\Windows\Installer\{FE19C975-AFC8-44A4-85FA-6DBAD247687D}\Application_icon O90 - PUC: "623DD63D08278D11798C00109267C0EB" . (.PhotoNow.) -- C:\Windows\Installer\{D36DD326-7280-11D8-97C8-000129760CBE}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.5) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico O90 - PUC: "692D243ED9BD7CF4CA0B9329C6B0AF61" . (.HP Quick Launch.) -- C:\Windows\Installer\{E342D296-DB9D-4FC7-ACB0-39926C0BFA16}\_6FEFF9B68218417F98F549.exe O90 - PUC: "6ACC21AC8C4A69752CE9A4ADE9D55E69" . (.Catalyst Control Center Graphics Previews Vista.) -- C:\Windows\Installer\{CA12CCA6-A4C8-5796-C29E-4ADA9E5DE596}\ARPPRODUCTICON.exe O90 - PUC: "6E715662668DD93419C98B1B5AE20608" . (.OpenOffice.org 3.2.) -- C:\Windows\Installer\{266517E6-D866-439D-919C-B8B1A52E6080}\soffice.ico O90 - PUC: "6FC1B390F00C89DB8A7B2CD0A03B0647" . (.Catalyst Control Center Graphics Light.) -- C:\Windows\Installer\{093B1CF6-C00F-BD98-A8B7-C20D0AB36074}\ARPPRODUCTICON.exe O90 - PUC: "6FD66A043D225B447A3D381B812A0CCD" . (.Norton Online Backup.) -- C:\Windows\Installer\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}\MainIcon.ico O90 - PUC: "701043F6AA9F6C745BC43C1AF91155F3" . (.Hewlett-Packard ACLM.NET v1.2.1.1.) -- C:\Windows\Installer\{6F340107-F9AA-47C6-B54C-C3A19F11553F}\ARPPRODUCTICON.exe O90 - PUC: "7187FCE911BDABF4D91F92A675D815A3" . (.Adobe Shockwave Player 11.5.) -- C:\Windows\Installer\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}\ARPPRODUCTICON.exe O90 - PUC: "71CA7D3F4FF18A14BB81F33CC956EA9B" . (.RtVOsd.) -- C:\Windows\Installer\{F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9}\_6FEFF9B68218417F98F549.exe O90 - PUC: "7E9E38FE9EFFA68B499C598D5FFE3202" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{EF83E9E7-FFE9-B86A-94C9-95D8F5EF2320}\ARPPRODUCTICON.exe O90 - PUC: "853651B4C9ECF9E4C8DA97EA686AC806" . (.HP Power Manager.) -- C:\Windows\Installer\{4B156358-CE9C-4E9F-8CAD-79AE86A68C60}\_6FEFF9B68218417F98F549.exe O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe O90 - PUC: "907018673D7AD86419761A87C0E167C6" . (.Windows Live FolderShare.) -- C:\Windows\Installer\{76810709-A7D3-468D-9167-A1780C1E766C}\FolderShare48x48.ico O90 - PUC: "954D4F03A428C89428C677127B7702F7" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{30F4D459-824A-498C-826C-7721B777207F}\ARPPRODUCTICON.exe O90 - PUC: "9C43A1DB467497F4EAF111F2C8983D4D" . (.Energy Star Digital Logo.) -- C:\Windows\Installer\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}\_6FEFF9B68218417F98F549.exe O90 - PUC: "9CA6158A1FAA9F747966302E4DDCCB8F" . (.PowerDVD.) -- C:\Windows\Installer\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\ARPPRODUCTICON.exe O90 - PUC: "A42E063B52FB3534AA97B1455F9020A4" . (.HP Documentation.) -- C:\Windows\Installer\{B360E24A-BF25-4353-AA79-1B54F509024A}\NotebookDocs.exe O90 - PUC: "A5F814BA2BA4B99991AEB89B3C117BC0" . (.Catalyst Control Center Graphics Full Existing.) -- C:\Windows\Installer\{AB418F5A-4AB2-999B-19EA-8BB9C311B70C}\ARPPRODUCTICON.exe O90 - PUC: "A9E0FC7FB84D2494597352E90D65D84F" . (.Iminent.) -- C:\Windows\Installer\{F7CF0E9A-D48B-4942-9537-259ED0568DF4}\imbooster.ico O90 - PUC: "AA0C6A0E0858FC28D3F5F5238FEDA910" . (.ccc-utility64.) -- C:\Windows\Installer\{E0A6C0AA-8580-82CF-3D5F-5F32F8DE9A01}\ARPPRODUCTICON.exe O90 - PUC: "AE48807DEC2E935419BD7466CCE1F5F5" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}\Installer.ico O90 - PUC: "B8F048EF70096944BA268B96DE504F2B" . (.HP Wireless Assistant.) -- C:\Windows\Installer\{FE840F8B-9007-4496-AB62-B869ED05F4B2}\WA_tray_32_on.exe O90 - PUC: "BA0A2B44E214C8F40B851D8EEACCFD5F" . (.PowerRecover.) -- C:\Windows\Installer\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}\ARPPRODUCTICON.exe O90 - PUC: "BD528ECCA74340041A68F5A4F6DD5874" . (.Apple Application Support.) -- C:\Windows\Installer\{CCE825DB-347A-4004-A186-5F4A6FDD8547}\WinInstall.ico O90 - PUC: "C7D8BF048FF62FA4CBB8B0D13BA20FB4" . (.HP Advisor.) -- C:\Windows\Installer\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}\ARPPRODUCTICON.exe O90 - PUC: "C971C95CD8669A946BAE1012CCCF2134" . (.LabelPrint.) -- C:\Windows\Installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\ARPPRODUCTICON.exe O90 - PUC: "D5F533D558148DA4E8D6468D4DBA087D" . (.HP Software Framework.) -- C:\Windows\Installer\{5D335F5D-4185-4AD8-8E6D-64D8D4AB80D7}\app_1.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "DA67D5E0BF3A5D84480098301B30713D" . (.iTunes.) -- C:\Windows\Installer\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}\Installer.ico O90 - PUC: "E227301EF7E738756358ED3707094807" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{E103722E-7E7F-5783-3685-DE7370908470}\ARPPRODUCTICON.exe O90 - PUC: "E5A8DAD8A6B6CD4C2D7A20DC6607F213" . (.Catalyst Control Center Core Implementation.) -- C:\Windows\Installer\{8DAD8A5E-6B6A-C4DC-D2A7-02CD66702F31}\ARPPRODUCTICON.exe O90 - PUC: "F350AB643B753514DB6B3DE7CEB8217D" . (.LightScribe System Software.) -- C:\Windows\Installer\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}\ARPPRODUCTICON.exe ~ Scan Files in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Demand 18/01/2013 251400 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 18/11/2009 98208 | (AERTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe SR - | Auto 30/06/2010 203264 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 11/08/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 15/11/2012 5814904 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe SR - | Auto 22/10/2012 196664 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 30/12/1899 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe SR - | Demand 30/09/2010 246520 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe SR - | Auto 29/10/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Demand 29/10/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 27/09/2012 86528 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe SR - | Auto 18/06/2010 103992 | (HP Wireless Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe SR - | Demand 10/08/2012 1001376 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SR - | Auto 27192 | (HPWMISVC) . (...) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe SR - | Demand 12/12/2012 641504 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 19/05/2010 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe SR - | Auto 1052328 | (lxea_device) . (...) - C:\Windows\system32\lxeacoms.exe SR - | Demand 28/10/2012 427976 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Users\sandra\Desktop\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Users\sandra\Desktop\Malwarebytes' Anti-Malware\mbamservice.exe SR - | Demand 26/10/2012 234776 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee Security Scan\3.0.313\McCHSvc.exe SR - | Auto 01/06/2010 2804568 | (NOBU) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SR - | Auto 18/09/2012 1082016 | (Orange update Core Service) . (.France Telecom SA.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe SR - | Auto 17/06/2010 315392 | (RtVOsdService) . (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe SR - | Auto 13/07/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 945328 | (vToolbarUpdater14.0.1) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 03s End of the scan (2069 lines in 02mn 50s)(0)