Rapport de ZHPDiag v1.3.5.60 par Nicolas Coolman, Update du 12/02/2013
Run by Delia at 14/02/2013 12:37:55
State : 
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
MFIE: Mozilla Firefox 19.0 v19.0

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4043 MB (48% free)
System Restore: Activé (Enable)
System drive C: has 516 GB (88%) free of 581 GB

---\\ Logged in mode
~ Computer Name: DELIA-HP
~ User Name: Delia
~ All Users Names: HomeGroupUser$, Delia, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Delia\AppData\Roaming\
~ %Desktop% : C:\Users\Delia\Desktop\
~ %Favorites% : C:\Users\Delia\Favorites\
~ %LocalAppData% : C:\Users\Delia\AppData\Local\
~ %StartMenu% : C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 516 Go of 581 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 15 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.435E9C764E1EF70058580996452BE6A2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/01/2013 - 02:12:03.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/194
~ Mes musiques (My Musics) : 1/1513
~ Mes Favoris (My Favorites) : 1/41
~ Mes Documents (My Documents) : 2/200
~ Mon Bureau (My Desktop) : 1/819
~ Menu demarrer (Programs) : 1/29
~ Scan Hidden Files in 00mn 02s



---\\ Processus lancés
[MD5.12E33DD823D74680DE6F33BFA359EFB3] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe   [766536] [PID.2864]
[MD5.8EDE61AD829449DC37458C29B73B6788] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe   [2736128] [PID.3140]
[MD5.B0033D0723317C9D71B3BB80245D1FA5] - (.Spotify Ltd - Spotify.) -- C:\Users\Delia\AppData\Roaming\Spotify\spotify.exe   [7880664] [PID.3480]
[MD5.8FEDBE7A5D3E5F91FD4B96DAFA4DD197] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Delia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe   [1199576] [PID.3872]
[MD5.C0B97E53A0E39A48EEA2DCD500EEA07A] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [283160] [PID.648]
[MD5.D59ABED205F424BD4C52419479930BE9] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe   [586296] [PID.4276]
[MD5.894CE4301565675306C05BC50B9523DE] - (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe   [318520] [PID.4292]
[MD5.B77081F8221968C7DAB794B0BA55C43E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254896] [PID.4960]
[MD5.17BE4BAEC3D4FE887BC5F446FEF4FD97] - (.F-Secure Corporation - F-Secure Host Process.) -- C:\Program Files (x86)\SFR\Pack Sécurité\fshoster32.exe   [163536] [PID.1888]
[MD5.B41552B522C101326A849641F4E823C2] - (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSM32.exe   [311976] [PID.4608]
[MD5.71B7498C93B1CEF51F10A33ED8693A05] - (.Motorola, Inc. - Bluetooth Media Player Controller.) -- C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe   [1367816] [PID.3304]
[MD5.B00F98FF6FE8682FF941BEB2559BF191] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe   [136488] [PID.1544]
[MD5.EF14CC1647B1DFB2ED9B8BD1E9222197] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [917400] [PID.5496]
[MD5.8906FFADDF99ACCB5C751E75E879481F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [5676032] [PID.1496]
[MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65192] [PID.1604]
[MD5.F401929EE0CC92BFE7F15161CA535383] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55184] [PID.1700]
[MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe   [514232] [PID.1804]
[MD5.B50C3AD8A850FA494D87AF943C011F2F] - (.F-Secure Corporation - F-Secure ORSP Service.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\CCF_Reputation\fsorsp.exe   [62160] [PID.2032]
[MD5.AC2B58DA5C00B277E2A4FA4783DF9AE9] - (.F-Secure Corporation - F-Secure Gatekeeper Handler 32-bit.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\FSGK32.exe   [618040] [PID.1120]
[MD5.F630DD7564EBB7248A13B1CC774D9EA6] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe   [26680] [PID.520]
[MD5.FA4A45C179AB0E0F1A31B9751D4B18D7] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe   [73728] [PID.2064]
[MD5.85B16A92B117A5A800032ECD904B86DB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe   [399432] [PID.2116]
[MD5.20E2469DB709FC675E655CEAA11BE312] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe   [676936] [PID.2136]
[MD5.C3CDDD18F43D44AB713CF8C4916F7696] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe   [219496] [PID.2432]
[MD5.13693B6354DD6E72DC5131DA7D764B90] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe   [508776] [PID.2672]
[MD5.72794D112CBAFF3BC0C29BF7350D4741] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe   [822624] [PID.2968]
[MD5.C2251C602EDFC49E71D13D660AB7F625] - (.F-Secure Corporation - F-Secure Management Agent.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSMA32.exe   [213672] [PID.2552]
[MD5.EC005A25AB3CA6EE4E6A3753898760ED] - (.F-Secure Corporation - F-Secure Scanner Manager 32-bit.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\fssm32.exe   [1019448] [PID.3668]
[MD5.9B7EDD3FE7C211C36E921D34D18A3A0A] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe   [1001376] [PID.4544]
[MD5.C5A75EB48E2344ABDC162BDA79E16841] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe   [130384] [PID.4196]
[MD5.B25F192EA1F84A316EB7C19EFCCCF33D] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [13336] [PID.6224]
[MD5.C463A25F01C6237295917417C5E9E344] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [325656] [PID.7052]
[MD5.3A1ECEF8D49FC1A786A6CCD5A86A8878] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2656280] [PID.7800]
~ Scan Processes Running in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Delia\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Premier utilisateur" v. ()
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Delia\AppData\Roaming\Mozilla\Firefox\Profiles\nbfpg1n5.default\prefs.js
M3 - MFPP: Plugins - [Delia] -- C:\Users\Delia\AppData\Roaming\Mozilla\Firefox\Profiles\nbfpg1n5.default\searchplugins\badoo.xml
M3 - MFPP: Plugins - [Delia] -- C:\Users\Delia\AppData\Roaming\Mozilla\Firefox\Profiles\nbfpg1n5.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Delia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Delia - nbfpg1n5.default] http://badoo.com
M2 - MFEP: prefs.js [Delia - nbfpg1n5.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20130129 (.WOT Services Oy.)
M2 - MFEP: prefs.js [Delia - nbfpg1n5.default\{e001c731-5e37-4538-a5cb-8168736a2360}] [] Bitdefender QuickScan v0.9.9.119 (.Echipa R&D Bitdefender.)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://badoo.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R3 - URLSearchHook: (no name) [64Bits] - {ef79f67a-6ad7-4715-a0f8-932fca442023} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: LitmusBHO [64Bits] - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} . (.F-Secure Corporation - Litmus.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\OnlineSafety\BPP\iescript\BaseLitmus.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
~ Scan BHO in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [BTMTrayAgent] . (...) -- C:\Program Files\Motorola\Bluetooth\btmshell.dll 
O4 - HKLM\..\Run: [HPWirelessAssistant] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe 
O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Delia\AppData\Roaming\Spotify\Spotify.exe 
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Delia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [HPOSD] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure Hoster (44996)] . (.F-Secure Corporation - F-Secure Host Process.) -- C:\Program Files (x86)\SFR\Pack Sécurité\fshoster32.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure Manager] . (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSM32.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-4116979909-149554694-641919655-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-21-4116979909-149554694-641919655-1000\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Delia\AppData\Roaming\Spotify\Spotify.exe 
O4 - HKUS\S-1-5-21-4116979909-149554694-641919655-1000\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Delia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
O4 - HKUS\S-1-5-21-4116979909-149554694-641919655-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk . (.Spotify Ltd.)  -- C:\Users\Delia\AppData\Roaming\Spotify\spotify.exe
O4 - Global Startup: C:\Users\Delia\Desktop\1. Windows Live Messenger.lnk . (.Microsoft Corporation.)  -- C:\Users\Delia\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
O4 - Global Startup: C:\Users\Delia\Desktop\Aller sur MSN.fr.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Delia\Desktop\Spotify.lnk . (.Spotify Ltd.)  -- C:\Users\Delia\AppData\Roaming\Spotify\spotify.exe
O4 - Global Startup: C:\Users\Delia\Desktop\Transfert de fichiers et paramètres Windows.lnk . (.Microsoft Corporation.)  -- C:\Users\Delia\Desktop\Transfert de fichiers et paramètres Windows\x86\MigSetup.exe
O4 - Global Startup: C:\Users\Delia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.BitTorrent, Inc..)  -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
O4 - Global Startup: C:\Users\Delia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 [64Bits] - {bd707fe6-39f6-4bda-9265-86a76719bdc5} . (...) -- C:\Program Files\Motorola\Bluetooth\bluetooth.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{F37EA236-29E9-4324-9F6D-12B9F5742180}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{FCB0DB41-090D-47D0-89BB-28B87F0FB385}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{F37EA236-29E9-4324-9F6D-12B9F5742180}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{FCB0DB41-090D-47D0-89BB-28B87F0FB385}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{F37EA236-29E9-4324-9F6D-12B9F5742180}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{FCB0DB41-090D-47D0-89BB-28B87F0FB385}: DhcpNameServer = 192.168.1.254
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Motorola, Inc. - Bluetooth OBEX Service.) - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: F-Secure Dll Hoster (fshoster) . (.F-Secure Corporation - F-Secure Host Process.) - C:\Program Files (x86)\SFR\Pack Sécurité\fshoster32.exe
O23 - Service: F-Secure ORSP Client (FSORSPClient) . (.F-Secure Corporation - F-Secure ORSP Service.) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\CCF_Reputation\fsorsp.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe
O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling  (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service:  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 17s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\HPCeeScheduleForDELIA-HP$.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\HPCeeScheduleForDelia.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Scheduled scanning task.job
[MD5.EC807244904FA170C299AB06D87FBDBE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForDelia] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
[MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForDELIA-HP$] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
[MD5.B00F98FF6FE8682FF941BEB2559BF191] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
[MD5.F595629E501FC8AA8A0AFC149D37C68F] [APT] [Scheduled scanning task] (...) -- C:\Program Files (x86)\SFR\PACKSC~1\apps\COMPUT~1\ANTI-V~1\fsav.exe
[MD5.C098C0F61D295AA44EB34D1A1F4BC60B] [APT] [ServicePlan] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
[MD5.00000000000000000000000000000000] [APT] [{35907784-50F7-4A50-8299-01C6E57EE7FC}] (...) -- C:\Program Files (x86)\Aurora\uninstall\helper.exe (.not file.)
[MD5.4F41A028621A1D0348E11FFB5D723AE8] [APT] [{FA6310F1-4D75-45B5-98E9-2728AFED55A7}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
[MD5.BB39BDE1B48950DE534F57815BEA9E6A] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
~ Scan Scheduled Task in 00mn 06s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (F-Secure HIPS) . (.F-Secure Corporation - HIPS 64-bit kernel module.) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\HIPS\drivers\fshs.sys
O41 - Driver:  (FSES) . (.F-Secure Corporation - F-Secure Email Scanning Driver (64 bit).) - C:\Windows\System32\drivers\fses.sys
O41 - Driver:  (FSFW) . (.F-Secure Corporation - F-Secure Internet Shield Driver (64 bit).) - C:\Windows\System32\drivers\fsdfw.sys
O41 - Driver:  (fsvista) . (...) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {2E794F67-DAC1-C4A3-9128-0C841DF8A1BE}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.5) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}
O42 - Logiciel: Agatha Christie - Peril at End House - (.WildTangent.) [HKLM][64Bits] -- WT089362
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {122ADF8C-DDA1-480C-9936-C88F2825B265}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087428
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM][64Bits] -- BitTorrent
O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM][64Bits] -- WT089308
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Bounce Symphony - (.WildTangent.) [HKLM][64Bits] -- WT087330
O42 - Logiciel: Build-a-Lot - The Elizabethan Era - (.WildTangent.) [HKLM][64Bits] -- WT089303
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WT089359
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {5486C37D-73E8-4C31-A3FA-D796494F8286}
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087453
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Computer Security 12.56.100.0 (release) - (.F-Secure Corporation.) [HKLM][64Bits] -- {658FDBCA-B7A1-43E4-A849-9F0812473331}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT087536
O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}
O42 - Logiciel: Energy Star Digital Logo - (.Hewlett-Packard.) [HKLM][64Bits] -- {BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}
O42 - Logiciel: F-Secure CCF Reputation - (.F-Secure.) [HKLM][64Bits] -- {00000000-2778-5BED-8199-52EB14D8D22F}
O42 - Logiciel: F-Secure Network CCF 1.02.111 - (.F-Secure Corporation.) [HKLM][64Bits] -- {53E0DD16-FE2D-4A4B-A66A-984397C49204}
O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WT087361
O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WT089328
O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {B4EFABD5-5744-4ED8-BA47-C1704BB684D2}
O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}
O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}
O42 - Logiciel: HP CloudDrive - (.Zecter Inc..) [HKLM][64Bits] -- ZumoDrive
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {66F0F1EB-A7B1-4592-BE90-404CD9E49053}
O42 - Logiciel: HP Game Console - (.WildTangent.) [HKLM][64Bits] -- My HP Game Console
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP On Screen Display - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}
O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AF306BD8-F9D1-4627-89B9-246E59074A05}
O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EB58480C-0721-483C-B354-9D35A147999F}
O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {802C068E-0576-4F25-8137-D54B7DB0FC5E}
O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C}
O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {5D335F5D-4185-4AD8-8E6D-64D8D4AB80D7}
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {48EE0E00-86DE-47A5-8D00-B5D72A70BCCD}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087480
O42 - Logiciel: Intel(R) Display Audio Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Java(TM) 6 Update 22 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86416022FF}
O42 - Logiciel: Java(TM) 6 Update 39 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216033FF}
O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM][64Bits] -- WT087485
O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WT087490
O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WT087380
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.65.1.1000 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 19.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 19.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Online Safety 1.57.21481.0 - (.F-Secure Corporation.) [HKLM][64Bits] -- {C36AF60F-3A4E-5B20-AF4F-5BF3227BDAE0}
O42 - Logiciel: Pack Sécurité - (.F-Secure Corporation.) [HKLM][64Bits] -- F-Secure ServiceEnabler 44996
O42 - Logiciel: Pack Sécurité - (.F-Secure Corporation.) [HKLM][64Bits] -- {F96077EB-8673-42E0-B87D-6092D94FA0A0}
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT087394
O42 - Logiciel: PictureMover - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {264FE20A-757B-492a-B0C3-4009E2997D8A}
O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM][64Bits] -- WT087501
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WT087396
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {0E64B098-8018-4256-BA23-C316A43AD9B0}
O42 - Logiciel: Ralink Motorola BC8 Bluetooth 3.0+HS Adapter - (.Motorola, Inc..) [HKLM][64Bits] -- 1DF1F719-D43A-46E8-950F-65A8D96C678A.MBT_is1
O42 - Logiciel: Ralink RT5390 802.11b/g/n WiFi Adapter - (.Ralink.) [HKLM][64Bits] -- {8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
O42 - Logiciel: Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {C7231F7C-6530-4E65-ADA6-5B392CF5BEB1}
O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087510
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: VideoLAN Movie Creator - (.Pas de propriétaire.) [HKLM][64Bits] -- VLMC
O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM][64Bits] -- WT087513
O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WT087519
O42 - Logiciel: WinRAR 4.11 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087533
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AlterGeo]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Badoo]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bitdefender]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\EasyBits]
[HKCU\Software\F-Secure]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\KeyHoleTV]
[HKCU\Software\LightScribe]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Motorola]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\PictureMover]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Safe Browser]
[HKCU\Software\Skype]
[HKCU\Software\Synaptics]
[HKCU\Software\Trolltech]
[HKCU\Software\VirginMega]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\vlmc]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\GEAR Software]
[HKLM\Software\HPQ]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Motorola]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Data Fellows]
[HKLM\Software\Wow6432Node\EasyBits]
[HKLM\Software\Wow6432Node\F-Secure]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IDT]
[HKLM\Software\Wow6432Node\Insyde]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\LightScribe]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\Motorola]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OldTimer Tools]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Ralink]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\Win32 Services]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Wow6432Node]
[HKLM\Software\Wow6432Node\Zecter]
[HKLM\Software\Wow6432Node\fssg]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Zecter]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/06/2011 - 21:15:37 - [113,547] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 26/07/2011 - 10:44:22 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 14/03/2011 - 01:37:35 - [65,463] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 22/08/2012 - 06:51:41 - [1,334] ----D C:\Program Files (x86)\BitTorrent
O43 - CFD: 24/10/2011 - 11:25:51 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 23/10/2012 - 20:44:07 - [239,494] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 12/11/2012 - 22:34:25 - [97,279] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 12/11/2012 - 22:28:23 - [93,648] ----D C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 04/11/2012 - 18:56:43 - [588,704] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 13/03/2011 - 06:00:15 - [325,365] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 12/11/2012 - 22:35:07 - [83,573] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 14/03/2011 - 01:37:52 - [31,399] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/02/2013 - 09:37:31 - [6,229] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 17/06/2012 - 21:40:12 - [145,570] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 07/02/2013 - 09:23:02 - [85,630] ----D C:\Program Files (x86)\Java
O43 - CFD: 09/11/2012 - 22:21:10 - [12,644] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 22/06/2012 - 00:10:36 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 17/02/2012 - 03:14:26 - [12,399] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client
O43 - CFD: 08/09/2011 - 09:43:48 - [6,414] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 12/05/2012 - 09:36:10 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 13/03/2011 - 06:05:11 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 22/06/2011 - 22:39:43 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 14/02/2013 - 11:32:09 - [91,314] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 08/02/2013 - 22:52:50 - [39,240] ----D C:\Program Files (x86)\Mozilla Firefox.bak
O43 - CFD: 14/02/2013 - 11:32:10 - [0,323] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 16/06/2011 - 19:51:36 - [20,913] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 14/03/2011 - 01:54:15 - [61,443] ----D C:\Program Files (x86)\PictureMover
O43 - CFD: 20/05/2012 - 13:52:26 - [72,431] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 14/03/2011 - 01:46:18 - [12,244] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 03/07/2011 - 10:40:33 - [476,806] ----D C:\Program Files (x86)\SFR
O43 - CFD: 03/10/2012 - 11:04:11 - [16,855] R---D C:\Program Files (x86)\Skype
O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 06/02/2012 - 00:43:15 - [53,187] ----D C:\Program Files (x86)\VLMC
O43 - CFD: 13/03/2011 - 14:13:38 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 15/04/2012 - 23:52:18 - [178,078] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 26/06/2011 - 21:46:53 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 26/06/2011 - 21:46:53 - [5,090] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 26/06/2011 - 21:46:52 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 26/06/2011 - 21:46:53 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 26/06/2011 - 21:46:53 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 30/01/2013 - 19:09:25 - [4,110] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 14/02/2013 - 12:38:06 - [11,466] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 16/06/2011 - 21:15:40 - [3,797] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 17/06/2012 - 21:39:33 - [104,349] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 08/09/2011 - 09:43:48 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 13/03/2011 - 06:12:07 - [1,979] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 14/03/2011 - 01:37:52 - [13,160] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 23/10/2012 - 20:44:07 - [1,202] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 14/03/2011 - 01:50:48 - [36,134] ----D C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 14/03/2011 - 01:47:46 - [0,618] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 06/04/2012 - 11:29:14 - [26,980] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/03/2011 - 01:35:45 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 03/10/2012 - 11:04:11 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 03/07/2011 - 10:36:59 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 09/11/2011 - 23:09:51 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 13/03/2011 - 06:02:20 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 08/12/2012 - 22:36:33 - [152,795] ----D C:\ProgramData\Adobe
O43 - CFD: 24/10/2011 - 11:26:23 - [171,057] ----D C:\ProgramData\Apple
O43 - CFD: 17/06/2012 - 21:39:33 - [75,270] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 14/03/2011 - 02:02:50 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 16/06/2011 - 19:49:46 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 12/11/2012 - 22:34:24 - [0,009] ----D C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 14/05/2012 - 22:59:15 - [2,520] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 02/11/2012 - 10:08:27 - [317,613] ----D C:\ProgramData\f-secure
O43 - CFD: 16/06/2011 - 19:49:46 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 02/10/2012 - 21:17:59 - [0,023] ----D C:\ProgramData\FLEXnet
O43 - CFD: 03/07/2011 - 10:39:45 - [0,046] ----D C:\ProgramData\fssg
O43 - CFD: 09/07/2011 - 14:08:39 - [6,318] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 29/06/2012 - 16:02:25 - [16,460] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 16/06/2011 - 19:49:46 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 22/06/2012 - 00:10:36 - [-1734,170] -S--D C:\ProgramData\Microsoft
O43 - CFD: 16/06/2011 - 19:49:46 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 10/03/2012 - 00:37:19 - [0,034] ----D C:\ProgramData\Mozilla
O43 - CFD: 03/07/2011 - 10:42:39 - [0,015] ----D C:\ProgramData\Norton
O43 - CFD: 14/03/2011 - 01:54:34 - [9,737] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 14/03/2011 - 01:54:15 - [0,056] ----D C:\ProgramData\PictureMover
O43 - CFD: 14/03/2011 - 01:47:30 - [3,773] ----D C:\ProgramData\Ralink Driver
O43 - CFD: 03/10/2012 - 11:04:08 - [37,864] ----D C:\ProgramData\Skype
O43 - CFD: 13/03/2011 - 06:00:17 - [0,406] ----D C:\ProgramData\Stardock
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 13/03/2011 - 06:13:17 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 14/03/2011 - 01:52:49 - [0,395] ----D C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 08/09/2011 - 12:05:48 - [0] ----D C:\ProgramData\VirtualizedApplications
O43 - CFD: 13/03/2011 - 06:00:13 - [-2006,890] ----D C:\ProgramData\WildTangent
O43 - CFD: 26/07/2011 - 10:46:10 - [0,852] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 04/11/2012 - 18:54:49 - [39,643] ----D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
O43 - CFD: 30/06/2011 - 15:58:50 - [6,949] ----D C:\Users\Delia\AppData\Roaming\Adobe
O43 - CFD: 26/07/2011 - 10:46:42 - [0,192] ----D C:\Users\Delia\AppData\Roaming\Apple Computer
O43 - CFD: 16/06/2011 - 19:58:39 - [0] ----D C:\Users\Delia\AppData\Roaming\ATI
O43 - CFD: 14/02/2013 - 09:35:59 - [3,388] ----D C:\Users\Delia\AppData\Roaming\BitTorrent
O43 - CFD: 16/08/2011 - 22:04:20 - [0] ----D C:\Users\Delia\AppData\Roaming\CyberLink
O43 - CFD: 07/07/2011 - 23:00:00 - [0,182] ----D C:\Users\Delia\AppData\Roaming\F-Secure
O43 - CFD: 09/07/2011 - 14:08:47 - [0,126] ----D C:\Users\Delia\AppData\Roaming\Hewlett-Packard
O43 - CFD: 23/10/2011 - 12:17:01 - [0,316] ----D C:\Users\Delia\AppData\Roaming\hpqlog
O43 - CFD: 16/06/2011 - 19:57:15 - [0] ----D C:\Users\Delia\AppData\Roaming\Identities
O43 - CFD: 16/06/2011 - 19:57:38 - [0] ----D C:\Users\Delia\AppData\Roaming\Intel Corporation
O43 - CFD: 16/06/2011 - 19:58:56 - [0,001] ----D C:\Users\Delia\AppData\Roaming\Macromedia
O43 - CFD: 14/06/2012 - 21:58:06 - [0,565] ----D C:\Users\Delia\AppData\Roaming\Malwarebytes
O43 - CFD: 14/03/2011 - 10:21:55 - [0] ----D C:\Users\Delia\AppData\Roaming\Media Center Programs
O43 - CFD: 12/11/2012 - 22:27:37 - [10,295] -S--D C:\Users\Delia\AppData\Roaming\Microsoft
O43 - CFD: 16/06/2011 - 20:12:31 - [119,989] ----D C:\Users\Delia\AppData\Roaming\Mozilla
O43 - CFD: 16/06/2011 - 19:58:38 - [14,377] ----D C:\Users\Delia\AppData\Roaming\PictureMover
O43 - CFD: 09/02/2013 - 22:37:52 - [0,258] ----D C:\Users\Delia\AppData\Roaming\QuickScan
O43 - CFD: 12/09/2011 - 18:22:42 - [19,269] ----D C:\Users\Delia\AppData\Roaming\SecondLife
O43 - CFD: 11/11/2012 - 14:09:45 - [2,999] ----D C:\Users\Delia\AppData\Roaming\Skype
O43 - CFD: 22/01/2013 - 16:29:32 - [0,965] ----D C:\Users\Delia\AppData\Roaming\SoftGrid Client
O43 - CFD: 14/02/2013 - 12:26:13 - [43,861] ----D C:\Users\Delia\AppData\Roaming\Spotify
O43 - CFD: 16/06/2011 - 19:57:36 - [0] ----D C:\Users\Delia\AppData\Roaming\Synaptics
O43 - CFD: 08/09/2011 - 09:44:40 - [0] ----D C:\Users\Delia\AppData\Roaming\TP
O43 - CFD: 16/01/2012 - 22:01:03 - [0,001] ----D C:\Users\Delia\AppData\Roaming\WildTangent
O43 - CFD: 08/09/2011 - 11:45:52 - [0,000] ----D C:\Users\Delia\AppData\Roaming\Windows Live Writer
O43 - CFD: 30/01/2013 - 19:10:00 - [0,000] ----D C:\Users\Delia\AppData\Roaming\WinRAR
O43 - CFD: 16/07/2011 - 22:15:51 - [0,004] ----D C:\Users\Delia\AppData\Roaming\_MDLogs
O43 - CFD: 30/06/2011 - 15:58:50 - [14,665] ----D C:\Users\Delia\AppData\Local\Adobe
O43 - CFD: 26/07/2011 - 10:44:24 - [31,084] ----D C:\Users\Delia\AppData\Local\Apple
O43 - CFD: 26/07/2011 - 10:46:22 - [3,046] ----D C:\Users\Delia\AppData\Local\Apple Computer
O43 - CFD: 16/06/2011 - 19:49:59 - [0] ----D C:\Users\Delia\AppData\Local\Application Data
O43 - CFD: 16/06/2011 - 19:58:39 - [0,051] ----D C:\Users\Delia\AppData\Local\ATI
O43 - CFD: 04/02/2013 - 08:11:02 - [1,790] ----D C:\Users\Delia\AppData\Local\CrashDumps
O43 - CFD: 22/08/2012 - 06:52:10 - [1,691] ----D C:\Users\Delia\AppData\Local\CRE
O43 - CFD: 16/08/2011 - 22:04:20 - [0,032] ----D C:\Users\Delia\AppData\Local\CyberLink
O43 - CFD: 22/08/2012 - 08:42:15 - [0] ----D C:\Users\Delia\AppData\Local\Diagnostics
O43 - CFD: 12/11/2012 - 22:26:37 - [162,554] ----D C:\Users\Delia\AppData\Local\Google
O43 - CFD: 16/06/2011 - 19:57:19 - [0,009] ----D C:\Users\Delia\AppData\Local\Hewlett-Packard
O43 - CFD: 16/06/2011 - 19:57:36 - [0,002] ----D C:\Users\Delia\AppData\Local\Hewlett-Packard_Company
O43 - CFD: 16/06/2011 - 19:49:59 - [0] ----D C:\Users\Delia\AppData\Local\Historique
O43 - CFD: 09/06/2012 - 09:20:58 - [0] ----D C:\Users\Delia\AppData\Local\Macromedia
O43 - CFD: 15/04/2012 - 23:53:27 - [391,693] ----D C:\Users\Delia\AppData\Local\Microsoft
O43 - CFD: 16/01/2012 - 21:58:21 - [0] ----D C:\Users\Delia\AppData\Local\MigWiz
O43 - CFD: 16/06/2011 - 20:12:22 - [64,789] ----D C:\Users\Delia\AppData\Local\Mozilla
O43 - CFD: 16/06/2011 - 19:56:48 - [0,000] ----D C:\Users\Delia\AppData\Local\RemEngine
O43 - CFD: 15/04/2012 - 23:49:07 - [123,020] ----D C:\Users\Delia\AppData\Local\SecondLife
O43 - CFD: 08/09/2011 - 09:44:33 - [0,617] ----D C:\Users\Delia\AppData\Local\SoftGrid Client
O43 - CFD: 14/02/2013 - 11:31:30 - [87,324] ----D C:\Users\Delia\AppData\Local\Spotify
O43 - CFD: 14/02/2013 - 12:38:25 - [41,525] ----D C:\Users\Delia\AppData\Local\Temp
O43 - CFD: 16/06/2011 - 19:49:59 - [0] ----D C:\Users\Delia\AppData\Local\Temporary Internet Files
O43 - CFD: 01/11/2012 - 18:29:01 - [0,336] ----D C:\Users\Delia\AppData\Local\VirtualStore
O43 - CFD: 18/08/2012 - 10:22:25 - [0,145] ----D C:\Users\Delia\AppData\Local\Windows Live
O43 - CFD: 12/06/2012 - 09:53:23 - [0,618] ----D C:\Users\Delia\AppData\Local\Windows Live Writer
O43 - CFD: 12/07/2012 - 20:59:40 - [0] ----D C:\Users\Delia\AppData\Local\{0020F3F2-E088-4AB6-8A96-8C43B9F7CD51}
O43 - CFD: 10/09/2012 - 21:23:00 - [0] ----D C:\Users\Delia\AppData\Local\{0035C729-52E1-42DA-A674-FE2D9A80CBF4}
O43 - CFD: 27/09/2012 - 09:45:46 - [0] ----D C:\Users\Delia\AppData\Local\{00707C1C-8312-4C91-B05D-01486FD33360}
O43 - CFD: 24/10/2012 - 21:57:38 - [0] ----D C:\Users\Delia\AppData\Local\{0086732E-884F-4B06-BCDE-3527D033303A}
O43 - CFD: 10/10/2012 - 07:10:22 - [0] ----D C:\Users\Delia\AppData\Local\{01313689-789C-49C4-BE44-EFF8922316F4}
O43 - CFD: 15/10/2012 - 07:53:59 - [0] ----D C:\Users\Delia\AppData\Local\{018114D3-F4EB-4DA7-B281-849A11A552DC}
O43 - CFD: 10/11/2012 - 16:13:59 - [0] ----D C:\Users\Delia\AppData\Local\{028DD10A-7F80-4311-AE8A-4A00A5553D71}
O43 - CFD: 08/08/2012 - 22:46:03 - [0] ----D C:\Users\Delia\AppData\Local\{02C3A025-9A5A-4AA5-8EC6-2BFB50BB4DB1}
O43 - CFD: 09/09/2012 - 10:39:28 - [0] ----D C:\Users\Delia\AppData\Local\{037D1C6E-88DF-4FCF-B3E2-70BE5A160E78}
O43 - CFD: 04/07/2012 - 10:29:22 - [0] ----D C:\Users\Delia\AppData\Local\{03EB55AC-2791-4B26-9DFF-21985E97E8FB}
O43 - CFD: 28/01/2013 - 21:07:34 - [0] ----D C:\Users\Delia\AppData\Local\{044B07C3-7A00-4C5B-9C73-495849B2FD5F}
O43 - CFD: 19/06/2012 - 19:34:40 - [0] ----D C:\Users\Delia\AppData\Local\{056B6CEB-6908-44B3-BCCF-D5357AB318AF}
O43 - CFD: 07/12/2012 - 08:50:41 - [0] ----D C:\Users\Delia\AppData\Local\{05883732-F6C0-4EF0-B042-A3CAD46B32AD}
O43 - CFD: 07/11/2012 - 08:28:31 - [0] ----D C:\Users\Delia\AppData\Local\{05884CC4-0517-4A93-A05A-1589C8A288AB}
O43 - CFD: 18/07/2012 - 23:11:36 - [0] ----D C:\Users\Delia\AppData\Local\{05B09830-632B-437A-99B7-AC26EE51810D}
O43 - CFD: 18/07/2012 - 10:53:05 - [0] ----D C:\Users\Delia\AppData\Local\{0637942F-F79C-4386-8557-7E014B4CD540}
O43 - CFD: 19/09/2012 - 18:23:27 - [0] ----D C:\Users\Delia\AppData\Local\{063F004E-0556-4CBD-BE58-C508D0F12F01}
O43 - CFD: 11/09/2012 - 21:42:27 - [0] ----D C:\Users\Delia\AppData\Local\{0773F174-3CBE-4AC6-967C-E0477354159E}
O43 - CFD: 07/02/2013 - 00:05:13 - [0] ----D C:\Users\Delia\AppData\Local\{07C42631-537A-422E-BFCC-A94BED457CCB}
O43 - CFD: 20/07/2012 - 06:25:51 - [0] ----D C:\Users\Delia\AppData\Local\{09FA4C8E-9802-4B85-B040-EDC1A1EFD082}
O43 - CFD: 09/09/2012 - 21:18:24 - [0] ----D C:\Users\Delia\AppData\Local\{0AA89DBE-971B-4A46-ACBB-A679651A31A7}
O43 - CFD: 04/07/2012 - 10:16:43 - [0] ----D C:\Users\Delia\AppData\Local\{0BA99E7F-A550-4B93-85E0-9AA45E920BB7}
O43 - CFD: 21/12/2012 - 21:38:58 - [0] ----D C:\Users\Delia\AppData\Local\{0C496EB1-7FE4-4932-A709-B5E8FE6AD88E}
O43 - CFD: 12/07/2012 - 08:58:59 - [0] ----D C:\Users\Delia\AppData\Local\{0D00EC7C-877F-4D2C-AE85-58BC8F8C1BD6}
O43 - CFD: 23/09/2012 - 12:45:51 - [0] ----D C:\Users\Delia\AppData\Local\{0DD3FFA8-2693-4AAC-96A8-6A54EF12ED97}
O43 - CFD: 23/07/2012 - 14:11:08 - [0] ----D C:\Users\Delia\AppData\Local\{0E95D8A1-2AAF-4B55-93CF-E64B0E6016BE}
O43 - CFD: 14/07/2012 - 22:29:04 - [0] ----D C:\Users\Delia\AppData\Local\{0EC3AE91-1A96-4CFD-B135-5CAAF699E439}
O43 - CFD: 06/08/2012 - 13:35:39 - [0] ----D C:\Users\Delia\AppData\Local\{10374D6B-3BBE-4A19-9585-1204406DB8D1}
O43 - CFD: 14/07/2012 - 09:48:03 - [0] ----D C:\Users\Delia\AppData\Local\{103F7CEB-1801-4E13-8782-9F659632EF61}
O43 - CFD: 10/12/2012 - 21:44:24 - [0] ----D C:\Users\Delia\AppData\Local\{1150E034-E962-4803-BBFC-91BA07948DC9}
O43 - CFD: 01/11/2012 - 17:44:22 - [0] ----D C:\Users\Delia\AppData\Local\{11E11E19-147F-4E27-B280-FC3AA61F261F}
O43 - CFD: 11/01/2013 - 00:30:48 - [0] ----D C:\Users\Delia\AppData\Local\{12BAFD20-5E2B-43F2-9ABF-CAD25A0BBC62}
O43 - CFD: 10/08/2012 - 20:10:49 - [0] ----D C:\Users\Delia\AppData\Local\{12E4DBA2-7379-41BA-BF3C-A8F0EC45AE90}
O43 - CFD: 18/12/2012 - 20:18:59 - [0] ----D C:\Users\Delia\AppData\Local\{1384CED7-86E7-46BD-A93D-5A5E6A3092A9}
O43 - CFD: 25/06/2012 - 15:14:59 - [0] ----D C:\Users\Delia\AppData\Local\{14E7BD66-35EB-4D7E-9124-D6491D767371}
O43 - CFD: 23/08/2012 - 09:10:27 - [0] ----D C:\Users\Delia\AppData\Local\{14EA262A-33F1-4619-A07B-445ECCE04452}
O43 - CFD: 28/06/2012 - 22:57:19 - [0] ----D C:\Users\Delia\AppData\Local\{1565D4AD-66C5-4B07-833F-4DDDAF41A951}
O43 - CFD: 13/08/2012 - 21:30:37 - [0] ----D C:\Users\Delia\AppData\Local\{185A38E4-C9AA-4832-B57B-48C75FE199D8}
O43 - CFD: 22/06/2012 - 09:46:53 - [0] ----D C:\Users\Delia\AppData\Local\{1A1486DF-A8C7-4A24-85A9-E47613F61EEE}
O43 - CFD: 01/01/2013 - 11:48:38 - [0] ----D C:\Users\Delia\AppData\Local\{1BDF5F2B-68AC-47B7-B150-7CE2EA9616AA}
O43 - CFD: 25/12/2012 - 20:06:33 - [0] ----D C:\Users\Delia\AppData\Local\{1CCC528E-50F1-4DAA-A041-BF1C77687574}
O43 - CFD: 27/12/2012 - 09:16:21 - [0] ----D C:\Users\Delia\AppData\Local\{203ED8B0-D29F-44FE-85E9-04C6D85ED1BB}
O43 - CFD: 23/08/2012 - 21:29:21 - [0] ----D C:\Users\Delia\AppData\Local\{2078307D-228B-4E06-9BA1-9D2B8A502DF4}
O43 - CFD: 05/09/2012 - 22:08:34 - [0] ----D C:\Users\Delia\AppData\Local\{2219744B-849E-498B-8542-388F27D43159}
O43 - CFD: 08/02/2013 - 09:17:07 - [0] ----D C:\Users\Delia\AppData\Local\{226345F5-0674-4E77-A8A0-459C6B9D7EB4}
O43 - CFD: 20/06/2012 - 21:30:45 - [0] ----D C:\Users\Delia\AppData\Local\{241079F5-398B-4736-8BAC-AD5F7BFB853C}
O43 - CFD: 04/12/2012 - 23:23:03 - [0] ----D C:\Users\Delia\AppData\Local\{2545B5F3-11F1-4F22-9E27-432B8B6C77BE}
O43 - CFD: 24/07/2012 - 13:13:23 - [0] ----D C:\Users\Delia\AppData\Local\{27CDAA23-16D8-45CE-A584-B630FC478FCC}
O43 - CFD: 09/11/2012 - 21:13:19 - [0] ----D C:\Users\Delia\AppData\Local\{285EC11B-D04B-4CEE-B63E-DBD89A9CB112}
O43 - CFD: 05/11/2012 - 09:40:08 - [0] ----D C:\Users\Delia\AppData\Local\{29343176-79D3-4C1A-B6EB-272F77265524}
O43 - CFD: 20/06/2012 - 08:05:23 - [0] ----D C:\Users\Delia\AppData\Local\{296C70B2-5377-4494-A296-942FD16E351E}
O43 - CFD: 11/10/2012 - 20:49:34 - [0] ----D C:\Users\Delia\AppData\Local\{29F4B5C0-B35F-4DC8-9E89-7295550F2042}
O43 - CFD: 25/06/2012 - 15:14:48 - [0] ----D C:\Users\Delia\AppData\Local\{2A2CEFEF-E767-4AFA-B5DA-DE5C45CF87D1}
O43 - CFD: 20/06/2012 - 08:05:11 - [0] ----D C:\Users\Delia\AppData\Local\{2B5A8EB9-7D5D-4451-BBFF-8D91535FF219}
O43 - CFD: 25/06/2012 - 12:03:25 - [0] ----D C:\Users\Delia\AppData\Local\{2CC46B54-1797-40B5-A172-C98DF607A4F7}
O43 - CFD: 05/11/2012 - 21:17:27 - [0] ----D C:\Users\Delia\AppData\Local\{2D04DE95-FA8D-4537-A0CE-EE6657FF5863}
O43 - CFD: 28/12/2012 - 22:02:01 - [0] ----D C:\Users\Delia\AppData\Local\{2D1EC40A-6537-4B75-A071-96C9113C696F}
O43 - CFD: 27/06/2012 - 10:55:37 - [0] ----D C:\Users\Delia\AppData\Local\{2E2D9EC9-00DD-44E8-8116-D4CE2B5448CD}
O43 - CFD: 22/01/2013 - 10:34:02 - [0] ----D C:\Users\Delia\AppData\Local\{2E6F70A7-AD62-4E78-A612-9D69FBA7ACC8}
O43 - CFD: 20/12/2012 - 21:25:29 - [0] ----D C:\Users\Delia\AppData\Local\{309EE857-418E-4C54-AD9A-305E848A358E}
O43 - CFD: 13/09/2012 - 09:36:39 - [0] ----D C:\Users\Delia\AppData\Local\{315E9802-2A40-4605-A27B-8061F3249D08}
O43 - CFD: 20/09/2012 - 20:33:50 - [0] ----D C:\Users\Delia\AppData\Local\{31E04FDC-8143-48A5-9274-941A4AAA8506}
O43 - CFD: 10/02/2013 - 22:16:41 - [0] ----D C:\Users\Delia\AppData\Local\{32D5F234-F110-44C2-8976-57983001922B}
O43 - CFD: 28/06/2012 - 22:57:30 - [0] ----D C:\Users\Delia\AppData\Local\{339E8C57-1307-4060-8E75-82D3B061D033}
O43 - CFD: 24/07/2012 - 13:13:35 - [0] ----D C:\Users\Delia\AppData\Local\{33C43FB4-BF03-463F-B100-DC63B602C5D4}
O43 - CFD: 25/08/2012 - 19:41:11 - [0] ----D C:\Users\Delia\AppData\Local\{33E66855-8243-45C3-9877-1BC629218D39}
O43 - CFD: 06/10/2012 - 20:53:11 - [0] ----D C:\Users\Delia\AppData\Local\{34632887-46C4-4B36-8147-5AF78ACA5E55}
O43 - CFD: 28/10/2012 - 14:45:12 - [0] ----D C:\Users\Delia\AppData\Local\{35016EE8-079E-4D16-A2F0-9161A781D660}
O43 - CFD: 27/09/2012 - 21:46:20 - [0] ----D C:\Users\Delia\AppData\Local\{350950D3-D53C-4048-A4D2-6DD507B68723}
O43 - CFD: 18/09/2012 - 21:41:05 - [0] ----D C:\Users\Delia\AppData\Local\{35F66142-7588-4A01-9FB9-90A00D9DCC35}
O43 - CFD: 13/02/2013 - 15:02:50 - [0] ----D C:\Users\Delia\AppData\Local\{363ACC25-D10E-40C3-BE3A-D91AA12DB10C}
O43 - CFD: 21/01/2013 - 11:24:35 - [0] ----D C:\Users\Delia\AppData\Local\{370682D9-DD05-4564-909C-5932E5D2D347}
O43 - CFD: 24/07/2012 - 11:33:02 - [0] ----D C:\Users\Delia\AppData\Local\{37ABC62C-A451-403A-968C-87FFC2579BC1}
O43 - CFD: 13/07/2012 - 09:18:14 - [0] ----D C:\Users\Delia\AppData\Local\{38D27AA5-6E6B-4E48-824F-18301DCEEF37}
O43 - CFD: 23/06/2012 - 22:56:48 - [0] ----D C:\Users\Delia\AppData\Local\{395690BD-6FB0-4A1C-B396-E52D2F0BB387}
O43 - CFD: 24/01/2013 - 21:11:41 - [0] ----D C:\Users\Delia\AppData\Local\{39F8FEE8-F504-4BE0-889F-8FA307846FDD}
O43 - CFD: 16/06/2012 - 21:07:00 - [0] ----D C:\Users\Delia\AppData\Local\{3D03649C-64BE-4445-B1B3-182AC6AA3B31}
O43 - CFD: 18/01/2013 - 23:13:20 - [0] ----D C:\Users\Delia\AppData\Local\{3D1CB528-F210-40C3-ACE5-1BE5FC291F82}
O43 - CFD: 31/12/2012 - 19:22:59 - [0] ----D C:\Users\Delia\AppData\Local\{3EECD777-D88F-4B2A-8073-813C93613B99}
O43 - CFD: 13/07/2012 - 21:18:51 - [0] ----D C:\Users\Delia\AppData\Local\{3F17D46A-C521-4CEB-B38D-7A4ADC01D7F3}
O43 - CFD: 09/12/2012 - 20:14:49 - [0] ----D C:\Users\Delia\AppData\Local\{3F63F2A2-DE1E-4102-9A78-11C1AD136B19}
O43 - CFD: 02/10/2012 - 08:18:59 - [0] ----D C:\Users\Delia\AppData\Local\{402124A3-F206-4492-A485-0BA355BC6DEB}
O43 - CFD: 17/08/2012 - 21:38:52 - [0] ----D C:\Users\Delia\AppData\Local\{4178E42D-CA9A-4217-978D-61088A7FD852}
O43 - CFD: 01/01/2013 - 23:49:03 - [0] ----D C:\Users\Delia\AppData\Local\{4219D284-E21E-4719-9698-3D95CE7693C2}
O43 - CFD: 26/06/2012 - 07:29:11 - [0] ----D C:\Users\Delia\AppData\Local\{4276A391-A650-406F-BF4D-8459F1FD7B98}
O43 - CFD: 11/01/2013 - 22:15:00 - [0] ----D C:\Users\Delia\AppData\Local\{459DABEB-DF26-4575-AAFC-E1F3F9A32D87}
O43 - CFD: 08/08/2012 - 05:50:00 - [0] ----D C:\Users\Delia\AppData\Local\{4628EC4A-12BD-4F5F-9A60-6D08A6A74DD3}
O43 - CFD: 08/09/2012 - 22:23:05 - [0] ----D C:\Users\Delia\AppData\Local\{4865F8EC-2414-4C68-B682-169C80BDB203}
O43 - CFD: 26/12/2012 - 17:41:34 - [0] ----D C:\Users\Delia\AppData\Local\{48A1E58E-496C-4EBA-A510-2EFA783CB07A}
O43 - CFD: 07/01/2013 - 10:14:13 - [0] ----D C:\Users\Delia\AppData\Local\{4CBF9ED0-77AB-4565-9F84-B16608E8DDF6}
O43 - CFD: 26/08/2012 - 21:05:29 - [0] ----D C:\Users\Delia\AppData\Local\{4E164CFF-0997-4884-9298-C626B46588FE}
O43 - CFD: 16/06/2012 - 02:55:27 - [0] ----D C:\Users\Delia\AppData\Local\{4E6563F9-7911-40B6-BEF5-C8D4C92E69DD}
O43 - CFD: 15/10/2012 - 20:41:38 - [0] ----D C:\Users\Delia\AppData\Local\{51D71CE6-8047-4FC5-A2A7-AD08DE9ABCFB}
O43 - CFD: 24/06/2012 - 11:33:08 - [0] ----D C:\Users\Delia\AppData\Local\{54F25F73-51E1-4AE0-B4FC-B6FE1447C667}
O43 - CFD: 11/08/2012 - 08:22:41 - [0] ----D C:\Users\Delia\AppData\Local\{576EAA4B-7976-4409-9E28-6FB6BE40DA10}
O43 - CFD: 20/07/2012 - 06:25:40 - [0] ----D C:\Users\Delia\AppData\Local\{57BA04A9-6519-4698-85B8-C30CDD499181}
O43 - CFD: 06/07/2012 - 16:25:16 - [0] ----D C:\Users\Delia\AppData\Local\{582F80EE-722C-4A53-A93E-9E31490649D3}
O43 - CFD: 09/10/2012 - 09:52:47 - [0] ----D C:\Users\Delia\AppData\Local\{5900B18B-B7C7-4165-829B-0D1B2CD22AB0}
O43 - CFD: 23/06/2012 - 10:56:20 - [0] ----D C:\Users\Delia\AppData\Local\{5928FA30-64A6-4ACB-8F25-F2985F66F44A}
O43 - CFD: 01/10/2012 - 18:15:08 - [0] ----D C:\Users\Delia\AppData\Local\{598B2B91-93BC-4214-8565-F5D541BB4C58}
O43 - CFD: 22/09/2012 - 21:57:02 - [0] ----D C:\Users\Delia\AppData\Local\{5A1F588C-A338-4188-A44A-F2C3DC4C5F57}
O43 - CFD: 13/10/2012 - 08:45:40 - [0] ----D C:\Users\Delia\AppData\Local\{5A72A0B6-DE5C-496A-826E-9593F827A060}
O43 - CFD: 06/08/2012 - 19:51:56 - [0] ----D C:\Users\Delia\AppData\Local\{5B499A7E-9CE1-491B-B2D5-FC875E469E69}
O43 - CFD: 14/02/2013 - 09:42:42 - [0] ----D C:\Users\Delia\AppData\Local\{5B9CD8EB-6B3D-49F8-B675-D2049616C2F7}
O43 - CFD: 17/07/2012 - 22:16:59 - [0] ----D C:\Users\Delia\AppData\Local\{5C850882-8B46-487A-9C89-966D2B332D0C}
O43 - CFD: 08/08/2012 - 05:50:22 - [0] ----D C:\Users\Delia\AppData\Local\{5C94A9BE-9E5D-4407-AE2E-6814E0171558}
O43 - CFD: 14/12/2012 - 10:44:56 - [0] ----D C:\Users\Delia\AppData\Local\{5CE0AFBE-B473-4E41-99F5-DE82B04805EE}
O43 - CFD: 05/12/2012 - 21:28:58 - [0] ----D C:\Users\Delia\AppData\Local\{5D1CF40A-A907-4294-8038-D60AF5D0A3A2}
O43 - CFD: 26/06/2012 - 19:29:51 - [0] ----D C:\Users\Delia\AppData\Local\{5DD810BB-602E-4052-830D-4359DE70CA83}
O43 - CFD: 27/08/2012 - 21:14:20 - [0] ----D C:\Users\Delia\AppData\Local\{5E2940CB-3469-493C-A1F1-BCD134A672BF}
O43 - CFD: 14/08/2012 - 09:53:43 - [0] ----D C:\Users\Delia\AppData\Local\{5F608C99-4664-4C9D-BC9D-B4B4A1533466}
O43 - CFD: 04/07/2012 - 11:16:55 - [0] ----D C:\Users\Delia\AppData\Local\{5FD14543-12DF-4FFC-AE4A-4673970B2C0E}
O43 - CFD: 18/12/2012 - 19:18:15 - [0] ----D C:\Users\Delia\AppData\Local\{61308CCC-5444-413C-9CA8-87DAD1D6C0C9}
O43 - CFD: 25/10/2012 - 20:55:23 - [0] ----D C:\Users\Delia\AppData\Local\{6221F43D-940A-4114-B0AB-9284F6613DCE}
O43 - CFD: 23/07/2012 - 20:10:38 - [0] ----D C:\Users\Delia\AppData\Local\{62A8AAD5-025D-46CB-A593-71EA6AC6FB42}
O43 - CFD: 17/07/2012 - 22:16:49 - [0] ----D C:\Users\Delia\AppData\Local\{63021C1F-FBAE-437C-929A-575ECE25418D}
O43 - CFD: 11/11/2012 - 13:58:47 - [0] ----D C:\Users\Delia\AppData\Local\{64284B07-7D8F-442B-841B-69F811173421}
O43 - CFD: 12/07/2012 - 08:59:20 - [0] ----D C:\Users\Delia\AppData\Local\{655D3C3B-7745-4A4A-BD62-B91337CE7140}
O43 - CFD: 07/02/2013 - 21:14:53 - [0] ----D C:\Users\Delia\AppData\Local\{65655584-2A2B-4206-86F5-74AE962737DD}
O43 - CFD: 29/06/2012 - 16:05:04 - [0] ----D C:\Users\Delia\AppData\Local\{67222A2A-B6D7-473F-99B2-F933A4532A4B}
O43 - CFD: 20/09/2012 - 06:24:02 - [0] ----D C:\Users\Delia\AppData\Local\{68661883-0244-4CA1-A9C5-26897E9CDCB6}
O43 - CFD: 16/07/2012 - 10:12:17 - [0] ----D C:\Users\Delia\AppData\Local\{694EBB2C-2925-4DDB-BEBF-2313BE2E00FA}
O43 - CFD: 10/01/2013 - 10:09:54 - [0] ----D C:\Users\Delia\AppData\Local\{6AD6705A-508E-48A1-B209-2CEBC6013652}
O43 - CFD: 02/01/2013 - 21:07:14 - [0] ----D C:\Users\Delia\AppData\Local\{6C4B616E-878D-419D-95A4-4298C2B16F5E}
O43 - CFD: 10/07/2012 - 21:57:29 - [0] ----D C:\Users\Delia\AppData\Local\{6C61FC17-A537-4893-8BF5-E9BB0DDF5486}
O43 - CFD: 22/12/2012 - 09:39:23 - [0] ----D C:\Users\Delia\AppData\Local\{6CC38911-3960-464D-856A-8BF8505069B2}
O43 - CFD: 28/10/2012 - 01:25:11 - [0] ----D C:\Users\Delia\AppData\Local\{6D71F8FA-6004-47F0-AAC1-5E1721C93B99}
O43 - CFD: 28/06/2012 - 10:57:05 - [0] ----D C:\Users\Delia\AppData\Local\{6E54EE69-A414-4119-BC68-0E053AD29FEA}
O43 - CFD: 20/12/2012 - 09:19:45 - [0] ----D C:\Users\Delia\AppData\Local\{6F4404BE-6CF3-49CF-AA69-EC1E34D82517}
O43 - CFD: 12/10/2012 - 18:16:32 - [0] ----D C:\Users\Delia\AppData\Local\{6F9D29C5-682C-496A-8DCC-56C560F684EC}
O43 - CFD: 04/01/2013 - 17:02:07 - [0] ----D C:\Users\Delia\AppData\Local\{7040A61E-51FD-44FE-A96A-27D84089B734}
O43 - CFD: 15/06/2012 - 09:52:18 - [0] ----D C:\Users\Delia\AppData\Local\{70D50337-395C-4398-9407-13C50C001F96}
O43 - CFD: 16/10/2012 - 14:38:13 - [0] ----D C:\Users\Delia\AppData\Local\{736C75B9-2114-4BB9-9331-AA13D9C8E9B1}
O43 - CFD: 12/12/2012 - 09:15:31 - [0] ----D C:\Users\Delia\AppData\Local\{74490C98-B822-4D14-A947-2B9CBD9C0DF7}
O43 - CFD: 28/08/2012 - 22:28:41 - [0] ----D C:\Users\Delia\AppData\Local\{7490EE71-9945-4A5F-BB32-AC3C780D4104}
O43 - CFD: 14/10/2012 - 12:08:10 - [0] ----D C:\Users\Delia\AppData\Local\{74B02341-6A06-4390-A69E-5D93A558135C}
O43 - CFD: 22/12/2012 - 22:27:59 - [0] ----D C:\Users\Delia\AppData\Local\{74D04C2D-1A67-435F-818C-88DB53CAC850}
O43 - CFD: 08/10/2012 - 20:25:57 - [0] ----D C:\Users\Delia\AppData\Local\{774C98FD-02B2-40AA-826E-90CD227BAC30}
O43 - CFD: 10/08/2012 - 20:10:59 - [0] ----D C:\Users\Delia\AppData\Local\{7B4782BC-B3CC-4D6F-866C-15E82C97E804}
O43 - CFD: 08/01/2013 - 10:15:04 - [0] ----D C:\Users\Delia\AppData\Local\{7BA369C6-4BEF-4926-9F6A-598AA6EAAA17}
O43 - CFD: 17/12/2012 - 19:32:16 - [0] ----D C:\Users\Delia\AppData\Local\{7BF66899-3118-4E1D-9AAE-B05A3C6E1222}
O43 - CFD: 04/07/2012 - 11:14:19 - [0] ----D C:\Users\Delia\AppData\Local\{7C57EB10-AA48-438C-A967-DAA9A793ED43}
O43 - CFD: 16/08/2012 - 10:03:40 - [0] ----D C:\Users\Delia\AppData\Local\{7D785594-4193-4FDC-A5F3-257BA7F947B8}
O43 - CFD: 11/07/2012 - 08:15:05 - [0] ----D C:\Users\Delia\AppData\Local\{7E6FFBE6-6992-41A1-95D0-022234621488}
O43 - CFD: 16/08/2012 - 20:32:23 - [0] ----D C:\Users\Delia\AppData\Local\{7EC1A92F-A3EC-46F5-89DA-E9E2D1DA00E5}
O43 - CFD: 16/08/2012 - 21:30:00 - [0] ----D C:\Users\Delia\AppData\Local\{7F8EC0CA-5CDE-44E4-BDFD-84F85D564833}
O43 - CFD: 20/01/2013 - 09:41:50 - [0] ----D C:\Users\Delia\AppData\Local\{7FAB3C74-6B82-42DC-9DEC-B6CD3F43EB43}
O43 - CFD: 16/01/2013 - 19:54:16 - [0] ----D C:\Users\Delia\AppData\Local\{8005F852-E7C6-4620-9214-AE82BFB44A0D}
O43 - CFD: 16/12/2012 - 19:53:50 - [0] ----D C:\Users\Delia\AppData\Local\{8019E118-3C86-41FE-BEC4-2F0F39FEE2EB}
O43 - CFD: 06/10/2012 - 08:52:45 - [0] ----D C:\Users\Delia\AppData\Local\{8020C12A-C5C5-4630-B67B-1824717A9B7E}
O43 - CFD: 11/10/2012 - 08:49:09 - [0] ----D C:\Users\Delia\AppData\Local\{80C0F386-5118-426B-9974-001909B5BFF1}
O43 - CFD: 03/10/2012 - 10:32:28 - [0] ----D C:\Users\Delia\AppData\Local\{816E341B-9F53-4576-B4CF-7833B733A224}
O43 - CFD: 14/07/2012 - 22:28:54 - [0] ----D C:\Users\Delia\AppData\Local\{833A1FD0-ABFD-4E71-B14B-E4E4D906A1BB}
O43 - CFD: 29/06/2012 - 13:55:51 - [0] ----D C:\Users\Delia\AppData\Local\{859B23EC-222F-48C5-94E7-76CB0C9064AD}
O43 - CFD: 02/02/2013 - 14:11:41 - [0] ----D C:\Users\Delia\AppData\Local\{85AF51FC-3D87-4163-8D13-3FDA4AC96B53}
O43 - CFD: 24/08/2012 - 09:29:58 - [0] ----D C:\Users\Delia\AppData\Local\{860C5E95-E6CE-4FB6-9393-B8F630A483A4}
O43 - CFD: 15/01/2013 - 12:45:04 - [0] ----D C:\Users\Delia\AppData\Local\{86D555A4-4962-4B8C-8A32-B0ED773D13AA}
O43 - CFD: 23/01/2013 - 23:07:08 - [0] ----D C:\Users\Delia\AppData\Local\{87F21F66-D15F-4049-B706-061ECF6C6308}
O43 - CFD: 30/08/2012 - 17:11:51 - [0] ----D C:\Users\Delia\AppData\Local\{87F4A9B5-0B2E-4DED-BFB7-063BFD25FD3E}
O43 - CFD: 18/10/2012 - 22:55:19 - [0] ----D C:\Users\Delia\AppData\Local\{88D67600-7A75-4337-8830-EC17B74CCEF7}
O43 - CFD: 21/09/2012 - 20:32:46 - [0] ----D C:\Users\Delia\AppData\Local\{88FD700E-CBC0-4D73-9154-ED550B2DCCFD}
O43 - CFD: 01/02/2013 - 09:03:22 - [0] ----D C:\Users\Delia\AppData\Local\{8A356ABD-8730-49EB-A8E9-EC6D0E2DE2C5}
O43 - CFD: 14/01/2013 - 21:47:29 - [0] ----D C:\Users\Delia\AppData\Local\{8C77D515-F530-4D7A-B1A6-0AEBFA1480B3}
O43 - CFD: 29/06/2012 - 14:01:08 - [0] ----D C:\Users\Delia\AppData\Local\{8E92F920-5209-44C1-9ED1-00BE532327D2}
O43 - CFD: 30/12/2012 - 12:17:13 - [0] ----D C:\Users\Delia\AppData\Local\{90315C2D-02E8-418D-8D07-A5DE9DA3F5CE}
O43 - CFD: 15/07/2012 - 22:11:06 - [0] ----D C:\Users\Delia\AppData\Local\{9201EC35-17BD-41B2-88B6-CE8E8AB55CC9}
O43 - CFD: 27/01/2013 - 23:10:56 - [0] ----D C:\Users\Delia\AppData\Local\{9316E5B4-3A5E-49CA-AAFB-4AC8235BB5EB}
O43 - CFD: 16/07/2012 - 22:43:38 - [0] ----D C:\Users\Delia\AppData\Local\{9410DA48-9A6B-459A-8B6C-1BD6ACC0245B}
O43 - CFD: 19/07/2012 - 17:41:35 - [0] ----D C:\Users\Delia\AppData\Local\{94F963BD-9EC1-4EB5-AAFE-FFE826594D80}
O43 - CFD: 07/01/2013 - 22:14:38 - [0] ----D C:\Users\Delia\AppData\Local\{957D593A-8553-4FCD-8853-D9E91EC6178E}
O43 - CFD: 19/12/2012 - 09:50:33 - [0] ----D C:\Users\Delia\AppData\Local\{9593CD27-E257-4572-98C6-CCC9173A1410}
O43 - CFD: 08/12/2012 - 22:34:04 - [0] ----D C:\Users\Delia\AppData\Local\{97926387-24DE-4AA7-BAF1-8EA262EAB968}
O43 - CFD: 26/09/2012 - 21:45:11 - [0] ----D C:\Users\Delia\AppData\Local\{97D3FEC9-D217-482C-A3B3-B022E48E49B0}
O43 - CFD: 13/12/2012 - 22:44:32 - [0] ----D C:\Users\Delia\AppData\Local\{98D9614F-ABFB-4C6E-8506-7A28C8F2D156}
O43 - CFD: 23/12/2012 - 10:28:29 - [0] ----D C:\Users\Delia\AppData\Local\{99461A12-1483-42CB-A210-E08F7B03BC9F}
O43 - CFD: 09/08/2012 - 22:25:42 - [0] ----D C:\Users\Delia\AppData\Local\{9A5D8FFE-F6B4-452F-BF22-6C95C2862A91}
O43 - CFD: 07/08/2012 - 21:19:51 - [0] ----D C:\Users\Delia\AppData\Local\{9A87EDE2-9D7D-466D-9897-561BDB0353A8}
O43 - CFD: 18/08/2012 - 10:22:22 - [0] ----D C:\Users\Delia\AppData\Local\{9B2F1A87-5EDB-406C-A5C5-2524BF11B673}
O43 - CFD: 13/07/2012 - 09:17:53 - [0] ----D C:\Users\Delia\AppData\Local\{9C40BA63-4BE4-4C87-9011-38D265DAE21D}
O43 - CFD: 06/12/2012 - 16:15:12 - [0] ----D C:\Users\Delia\AppData\Local\{9CACCBB9-D35D-485A-A49D-2F08128A922E}
O43 - CFD: 09/07/2012 - 10:54:22 - [0] ----D C:\Users\Delia\AppData\Local\{9D680CB8-7A3B-41F3-A610-A23730DB0A36}
O43 - CFD: 23/10/2012 - 20:22:23 - [0] ----D C:\Users\Delia\AppData\Local\{9EE981D5-6ACF-456D-8B1A-CB3A5FA2E3AD}
O43 - CFD: 11/12/2012 - 15:01:10 - [0] ----D C:\Users\Delia\AppData\Local\{A08E7795-F1A9-41A4-A989-E3E2BBD8D276}
O43 - CFD: 13/07/2012 - 21:19:00 - [0] ----D C:\Users\Delia\AppData\Local\{A0CCCCCA-7226-47D9-9881-D14DD2A02B34}
O43 - CFD: 16/07/2012 - 22:43:47 - [0] ----D C:\Users\Delia\AppData\Local\{A171910C-FC37-4B52-98A2-92F435FFA09D}
O43 - CFD: 14/02/2013 - 08:16:31 - [0] ----D C:\Users\Delia\AppData\Local\{A2B0DB14-5E52-4AC0-9DEE-322EA08FD35C}
O43 - CFD: 30/10/2012 - 10:18:53 - [0] ----D C:\Users\Delia\AppData\Local\{A40E0D6E-2C52-4116-9757-3DCAFC638698}
O43 - CFD: 14/01/2013 - 00:45:02 - [0] ----D C:\Users\Delia\AppData\Local\{A4355372-78B1-48B0-A3D6-754CDF48DFD8}
O43 - CFD: 04/11/2012 - 10:51:14 - [0] ----D C:\Users\Delia\AppData\Local\{A490B74C-6346-411C-8B6F-09AFB0940EBE}
O43 - CFD: 20/01/2013 - 21:42:15 - [0] ----D C:\Users\Delia\AppData\Local\{A4AC9B51-6536-42B8-9B47-3908AC39B853}
O43 - CFD: 18/07/2012 - 10:53:14 - [0] ----D C:\Users\Delia\AppData\Local\{A5204496-FAD2-4C3D-A28A-A91C27E6DF2D}
O43 - CFD: 26/10/2012 - 21:20:58 - [0] ----D C:\Users\Delia\AppData\Local\{A5476518-85DD-4843-B9CC-BC35AA388B61}
O43 - CFD: 03/10/2012 - 20:27:11 - [0] ----D C:\Users\Delia\AppData\Local\{A6693045-1CE3-4F29-8FC2-96028991F808}
O43 - CFD: 29/01/2013 - 17:53:07 - [0] ----D C:\Users\Delia\AppData\Local\{A6B254C4-E611-42C3-9402-2DF104E1847A}
O43 - CFD: 01/10/2012 - 20:18:34 - [0] ----D C:\Users\Delia\AppData\Local\{A6C00168-A478-4EF6-A106-7F58D28F2A51}
O43 - CFD: 12/12/2012 - 22:32:49 - [0] ----D C:\Users\Delia\AppData\Local\{A704D7A0-057E-4F41-AD7D-A8270432C29F}
O43 - CFD: 02/11/2012 - 10:06:07 - [0] ----D C:\Users\Delia\AppData\Local\{A7B46DB4-448A-4102-94B5-D78BB9BDF374}
O43 - CFD: 24/06/2012 - 23:33:37 - [0] ----D C:\Users\Delia\AppData\Local\{A7D54A2B-5E23-4C0D-B78D-102B3063BDED}
O43 - CFD: 24/08/2012 - 22:01:52 - [0] ----D C:\Users\Delia\AppData\Local\{A7F59761-4947-4DF7-802F-04DA87827DC2}
O43 - CFD: 06/02/2013 - 08:01:18 - [0] ----D C:\Users\Delia\AppData\Local\{A84664D7-C53C-4160-B86A-8844B56DAA52}
O43 - CFD: 19/07/2012 - 17:41:45 - [0] ----D C:\Users\Delia\AppData\Local\{A9DC9DAB-43F9-4D7B-8289-D4757C81A8B2}
O43 - CFD: 27/10/2012 - 13:24:47 - [0] ----D C:\Users\Delia\AppData\Local\{AA1183B6-0544-4DB7-8C1B-B462A8B3F099}
O43 - CFD: 22/08/2012 - 06:33:39 - [0] ----D C:\Users\Delia\AppData\Local\{AA79B892-C2D3-4CEA-B9A9-DBB44099C135}
O43 - CFD: 18/10/2012 - 08:47:55 - [0] ----D C:\Users\Delia\AppData\Local\{AA9724A0-5C35-417C-869A-545EF42A516E}
O43 - CFD: 25/01/2013 - 13:54:47 - [0] ----D C:\Users\Delia\AppData\Local\{AB214BD5-992A-4491-8F05-79F17C1E289E}
O43 - CFD: 27/12/2012 - 23:01:56 - [0] ----D C:\Users\Delia\AppData\Local\{AB3F16F6-44DB-4E4B-8ABA-EDB61F0CBDC0}
O43 - CFD: 01/11/2012 - 00:20:48 - [0] ----D C:\Users\Delia\AppData\Local\{ABCDFA69-DF05-403C-909A-D0DF0F15B063}
O43 - CFD: 27/01/2013 - 11:08:49 - [0] ----D C:\Users\Delia\AppData\Local\{ABD04383-22B6-4126-97C5-FF5E21B748C0}
O43 - CFD: 30/01/2013 - 20:17:02 - [0] ----D C:\Users\Delia\AppData\Local\{AC707AFA-C363-4A85-9549-0ABB8643346F}
O43 - CFD: 22/09/2012 - 08:37:44 - [0] ----D C:\Users\Delia\AppData\Local\{AD455662-ECC5-4F71-A325-1657FE2E4B4F}
O43 - CFD: 02/10/2012 - 20:40:00 - [0] ----D C:\Users\Delia\AppData\Local\{AD60A61D-0DD8-4524-A107-FB2415346184}
O43 - CFD: 04/10/2012 - 08:27:38 - [0] ----D C:\Users\Delia\AppData\Local\{AE3B407D-2B59-4141-A133-D3541BD36C77}
O43 - CFD: 08/01/2013 - 23:36:40 - [0] ----D C:\Users\Delia\AppData\Local\{AF60A003-4236-4652-AD70-9F23DD4FFE73}
O43 - CFD: 21/06/2012 - 09:31:43 - [0] ----D C:\Users\Delia\AppData\Local\{AF872A4A-8F82-488E-BBCD-257B20D4323D}
O43 - CFD: 29/06/2012 - 15:47:00 - [0] ----D C:\Users\Delia\AppData\Local\{AFCE10A5-008E-4538-A137-F745970AAB43}
O43 - CFD: 27/06/2012 - 22:56:27 - [0] ----D C:\Users\Delia\AppData\Local\{B4932DFB-CE1B-4780-A65D-BE0F83F81AC9}
O43 - CFD: 21/09/2012 - 20:37:21 - [0] ----D C:\Users\Delia\AppData\Local\{B4DEDD1F-0885-4763-85A8-85F6359ABCA0}
O43 - CFD: 16/07/2012 - 10:12:07 - [0] ----D C:\Users\Delia\AppData\Local\{B52193DB-762A-46D2-9B3E-11700A1FF4BC}
O43 - CFD: 11/07/2012 - 08:15:15 - [0] ----D C:\Users\Delia\AppData\Local\{B59E7D99-7F98-4481-9690-EB1AD6347217}
O43 - CFD: 28/08/2012 - 09:15:50 - [0] ----D C:\Users\Delia\AppData\Local\{B6068E47-4FFC-47C8-8269-B9D4897EA985}
O43 - CFD: 10/02/2013 - 10:16:16 - [0] ----D C:\Users\Delia\AppData\Local\{B6945DC3-D53B-4731-9E13-65290AD88E1A}
O43 - CFD: 16/01/2013 - 00:45:29 - [0] ----D C:\Users\Delia\AppData\Local\{B6B7F7C9-C327-4B2A-B295-2238AB818C57}
O43 - CFD: 29/08/2012 - 06:20:51 - [0] ----D C:\Users\Delia\AppData\Local\{B6BC697B-9A6D-4B28-8802-72906B0DF631}
O43 - CFD: 26/08/2012 - 13:56:15 - [0] ----D C:\Users\Delia\AppData\Local\{B6EF18AD-DDED-4C1F-9158-188D894CD8AA}
O43 - CFD: 30/01/2013 - 07:57:08 - [0] ----D C:\Users\Delia\AppData\Local\{BA323DC3-F71A-48A0-8189-6913AF9F2B1A}
O43 - CFD: 20/06/2012 - 21:30:33 - [0] ----D C:\Users\Delia\AppData\Local\{BA7D4327-AF55-4708-9E48-8D9C1765EFCE}
O43 - CFD: 15/07/2012 - 22:11:28 - [0] ----D C:\Users\Delia\AppData\Local\{BCC149D4-9C88-47EB-BAB9-F40BAC0A08ED}
O43 - CFD: 25/07/2012 - 19:16:55 - [0] ----D C:\Users\Delia\AppData\Local\{BEC41648-FD2C-4FD7-B821-D4AAB50D60F9}
O43 - CFD: 01/02/2013 - 21:03:47 - [0] ----D C:\Users\Delia\AppData\Local\{BED68886-9E22-473C-A16D-D1CD4C97F9D2}
O43 - CFD: 17/01/2013 - 09:12:46 - [0] ----D C:\Users\Delia\AppData\Local\{BF466B95-9844-43FB-9722-9BEDD2D42F0B}
O43 - CFD: 03/11/2012 - 20:59:36 - [0] ----D C:\Users\Delia\AppData\Local\{BFA2C16C-A8F8-4BD9-B1E0-8D0C649AC6B3}
O43 - CFD: 22/06/2012 - 09:47:03 - [0] ----D C:\Users\Delia\AppData\Local\{C0B8A464-D4DB-47EF-A220-17688C5519AC}
O43 - CFD: 22/08/2012 - 21:03:07 - [0] ----D C:\Users\Delia\AppData\Local\{C44EB141-F1A6-4AF3-B29E-188708D316CC}
O43 - CFD: 08/08/2012 - 22:45:51 - [0] ----D C:\Users\Delia\AppData\Local\{C4E815DF-9202-4165-8785-F2731BD8BC16}
O43 - CFD: 05/10/2012 - 20:52:20 - [0] ----D C:\Users\Delia\AppData\Local\{C4FD94BA-1B00-4A27-8D03-04B570CA5CE9}
O43 - CFD: 24/12/2012 - 16:08:21 - [0] ----D C:\Users\Delia\AppData\Local\{C52722E3-D6C5-45B8-A2F5-F936B50C07DF}
O43 - CFD: 27/06/2012 - 22:56:16 - [0] ----D C:\Users\Delia\AppData\Local\{C674F783-74E5-42B6-A482-4B1C493D995C}
O43 - CFD: 09/08/2012 - 22:25:32 - [0] ----D C:\Users\Delia\AppData\Local\{C6D715BC-0B35-4C16-9B00-2FC952553D2C}
O43 - CFD: 06/09/2012 - 22:20:24 - [0] ----D C:\Users\Delia\AppData\Local\{C6EEE693-7378-4225-825D-D7522E774069}
O43 - CFD: 27/06/2012 - 10:55:48 - [0] ----D C:\Users\Delia\AppData\Local\{C7617601-E8A7-42B9-B2A2-E952E56A6781}
O43 - CFD: 24/06/2012 - 23:33:26 - [0] ----D C:\Users\Delia\AppData\Local\{C7F6BFB6-BDBC-4452-B861-5350AA10A244}
O43 - CFD: 31/01/2013 - 08:24:21 - [0] ----D C:\Users\Delia\AppData\Local\{C9BBAB10-B90E-491C-B24A-06317DCF6245}
O43 - CFD: 08/11/2012 - 09:33:00 - [0] ----D C:\Users\Delia\AppData\Local\{C9DCA94E-E656-42E8-8E2E-09DCEF94D5F3}
O43 - CFD: 11/07/2012 - 20:52:45 - [0] ----D C:\Users\Delia\AppData\Local\{C9F2A042-1AEB-4C38-913D-A7850EE04B8B}
O43 - CFD: 03/02/2013 - 22:47:41 - [0] ----D C:\Users\Delia\AppData\Local\{CB0A59A8-D6B7-41F0-93EB-FCC1551D6269}
O43 - CFD: 23/06/2012 - 22:56:37 - [0] ----D C:\Users\Delia\AppData\Local\{CBB7DA30-943F-4F29-B0B5-735D429ABB64}
O43 - CFD: 11/07/2012 - 20:52:55 - [0] ----D C:\Users\Delia\AppData\Local\{CDD1981F-A330-4FB0-9726-92975F09FE30}
O43 - CFD: 19/01/2013 - 20:41:59 - [0] ----D C:\Users\Delia\AppData\Local\{CE5FE908-D6E9-4E6C-941D-D12596365187}
O43 - CFD: 09/01/2013 - 18:27:11 - [0] ----D C:\Users\Delia\AppData\Local\{CEAE13C4-10FF-44B2-899C-8CE1DB6BA62C}
O43 - CFD: 16/08/2012 - 21:29:50 - [0] ----D C:\Users\Delia\AppData\Local\{CFCE9850-2765-4E10-AA56-68A8224307F8}
O43 - CFD: 18/07/2012 - 23:11:45 - [0] ----D C:\Users\Delia\AppData\Local\{D0AB9134-F703-4682-BDBA-6031C2638D73}
O43 - CFD: 05/01/2013 - 23:04:39 - [0] ----D C:\Users\Delia\AppData\Local\{D1A8C680-8047-4828-91CA-2D7820488373}
O43 - CFD: 17/10/2012 - 20:47:20 - [0] ----D C:\Users\Delia\AppData\Local\{D1C2E1CC-C162-402E-B66D-028CCF59713E}
O43 - CFD: 14/07/2012 - 09:48:14 - [0] ----D C:\Users\Delia\AppData\Local\{D5AA7AC8-0102-47A1-8D06-DE0A842E6644}
O43 - CFD: 03/02/2013 - 10:47:16 - [0] ----D C:\Users\Delia\AppData\Local\{D5D4F33C-011D-48C1-8E1C-8D11FB3A106C}
O43 - CFD: 29/08/2012 - 21:16:36 - [0] ----D C:\Users\Delia\AppData\Local\{D5ECF759-BDE7-4B28-9718-5DB457E90EE8}
O43 - CFD: 21/06/2012 - 09:31:54 - [0] ----D C:\Users\Delia\AppData\Local\{D629E1BC-8BC1-4CBF-AD8F-42A1D4B0CA45}
O43 - CFD: 18/08/2012 - 10:22:12 - [0] ----D C:\Users\Delia\AppData\Local\{D686EB26-9A3E-42BC-94F7-C57CFA48A61D}
O43 - CFD: 18/01/2013 - 10:05:27 - [0] ----D C:\Users\Delia\AppData\Local\{D87372FF-5722-4621-A355-73A0CFF584A7}
O43 - CFD: 07/10/2012 - 10:01:43 - [0] ----D C:\Users\Delia\AppData\Local\{DA088D24-E1CA-4BE7-A60C-632C49EC4238}
O43 - CFD: 04/10/2012 - 20:50:33 - [0] ----D C:\Users\Delia\AppData\Local\{DC990399-0446-4722-9439-A2A4153E08E8}
O43 - CFD: 02/10/2012 - 21:19:59 - [0] ----D C:\Users\Delia\AppData\Local\{DCB7F663-F6C8-49B5-ABEF-25132D788CD0}
O43 - CFD: 17/08/2012 - 21:38:23 - [0] ----D C:\Users\Delia\AppData\Local\{DDEAC6A1-12F1-4E75-9464-54E8BCF2CBA5}
O43 - CFD: 11/02/2013 - 21:23:42 - [0] ----D C:\Users\Delia\AppData\Local\{DEA3F3AD-3664-4A6E-9BA3-8C19114370B1}
O43 - CFD: 12/02/2013 - 21:51:13 - [0] ----D C:\Users\Delia\AppData\Local\{DF20F336-8C2E-4B4E-AC81-B6AF2145E933}
O43 - CFD: 14/06/2012 - 17:26:59 - [0] ----D C:\Users\Delia\AppData\Local\{DF49ADA0-10B8-4B3E-9DE7-120B1D1CA747}
O43 - CFD: 20/11/2012 - 12:10:09 - [0] ----D C:\Users\Delia\AppData\Local\{E057A2F9-B95E-42B9-B804-22C979581A8B}
O43 - CFD: 31/12/2012 - 00:17:38 - [0] ----D C:\Users\Delia\AppData\Local\{E096961A-6BD3-4350-A7BD-2DA0C117A6F7}
O43 - CFD: 17/09/2012 - 21:38:53 - [0] ----D C:\Users\Delia\AppData\Local\{E19365DE-9AAA-4422-90D6-4CFA6BFEB217}
O43 - CFD: 10/12/2012 - 09:24:46 - [0] ----D C:\Users\Delia\AppData\Local\{E2CD61EF-3E56-44ED-A3E5-D048066304E7}
O43 - CFD: 04/02/2013 - 20:49:37 - [0] ----D C:\Users\Delia\AppData\Local\{E3A97F83-A051-4E0E-852D-9BE912668B77}
O43 - CFD: 27/08/2012 - 09:13:44 - [0] ----D C:\Users\Delia\AppData\Local\{E995ED05-0B31-401D-938A-B8D27FB7D5BC}
O43 - CFD: 14/02/2013 - 08:11:29 - [0] ----D C:\Users\Delia\AppData\Local\{EA67E96C-90E3-432A-BB71-3090AEE2869E}
O43 - CFD: 26/06/2012 - 19:29:39 - [0] ----D C:\Users\Delia\AppData\Local\{EBF95AD1-59DA-4149-B971-8348506CD95E}
O43 - CFD: 15/12/2012 - 20:20:19 - [0] ----D C:\Users\Delia\AppData\Local\{EC392480-19CE-4C95-AE39-6778FF350999}
O43 - CFD: 07/09/2012 - 21:36:21 - [0] ----D C:\Users\Delia\AppData\Local\{EC76BF99-28E8-4100-A2BC-3E6DD77D8091}
O43 - CFD: 29/10/2012 - 12:10:36 - [0] ----D C:\Users\Delia\AppData\Local\{EDC8EC00-6740-46D2-ACE5-57F7DB7C0EC5}
O43 - CFD: 20/08/2012 - 22:13:38 - [0] ----D C:\Users\Delia\AppData\Local\{EE791B79-4023-4446-99FD-BB09AE8A5113}
O43 - CFD: 12/09/2012 - 21:36:04 - [0] ----D C:\Users\Delia\AppData\Local\{EF975708-15CB-4E3E-B665-BD8727C23BBD}
O43 - CFD: 14/12/2012 - 22:45:21 - [0] ----D C:\Users\Delia\AppData\Local\{F0429ED8-D5C0-481F-901C-CB07265E5B77}
O43 - CFD: 13/08/2012 - 21:30:49 - [0] ----D C:\Users\Delia\AppData\Local\{F073E7C0-2417-4E00-B8B2-1B8828750E2E}
O43 - CFD: 08/02/2013 - 22:50:02 - [0] ----D C:\Users\Delia\AppData\Local\{F13BF5CB-B1C0-48A3-90D9-641091304FCF}
O43 - CFD: 29/12/2012 - 20:50:01 - [0] ----D C:\Users\Delia\AppData\Local\{F15E798C-EE57-4797-ABF3-3CB529C304CB}
O43 - CFD: 08/10/2012 - 08:25:33 - [0] ----D C:\Users\Delia\AppData\Local\{F26766EB-5B79-432F-AF7D-E130FEE0EEF8}
O43 - CFD: 09/02/2013 - 20:35:01 - [0] ----D C:\Users\Delia\AppData\Local\{F2B40EFB-0731-4F5E-A20B-81F5157A9E84}
O43 - CFD: 26/01/2013 - 18:33:18 - [0] ----D C:\Users\Delia\AppData\Local\{F38B44D9-BBED-44E0-A264-1B2A846570FB}
O43 - CFD: 14/06/2012 - 17:26:48 - [0] ----D C:\Users\Delia\AppData\Local\{F48143F3-3FDF-4EDE-90F0-E99850BED3D1}
O43 - CFD: 04/01/2013 - 01:16:10 - [0] ----D C:\Users\Delia\AppData\Local\{F4B5E285-81B4-48CB-9126-8F10BC1589DD}
O43 - CFD: 18/06/2012 - 16:04:22 - [0] ----D C:\Users\Delia\AppData\Local\{F562CBC7-DE98-4E3F-BF8D-F785684E10FD}
O43 - CFD: 29/06/2012 - 14:07:41 - [0] ----D C:\Users\Delia\AppData\Local\{F7B8A4C0-C085-4393-82D1-E3FED529ADBA}
O43 - CFD: 21/06/2012 - 21:46:17 - [0] ----D C:\Users\Delia\AppData\Local\{FAC791F0-EC1C-409A-B076-399EC56AE7C8}
O43 - CFD: 31/08/2012 - 07:27:47 - [0] ----D C:\Users\Delia\AppData\Local\{FACF520C-5334-42AB-AFEA-FA9AB67EC4CC}
O43 - CFD: 08/11/2012 - 23:35:14 - [0] ----D C:\Users\Delia\AppData\Local\{FAD2FFE7-3252-4855-9DF6-0A053CC3F4E0}
O43 - CFD: 05/01/2013 - 09:59:26 - [0] ----D C:\Users\Delia\AppData\Local\{FB9B04E1-B297-4341-A755-56D39BAB59B9}
O43 - CFD: 07/11/2012 - 20:28:55 - [0] ----D C:\Users\Delia\AppData\Local\{FC3C5F74-FE29-49A8-B6F6-284EF81096A5}
O43 - CFD: 26/06/2012 - 07:29:00 - [0] ----D C:\Users\Delia\AppData\Local\{FE4E46E2-6C9A-4858-9B2A-47AE985DBA4F}
O43 - CFD: 21/06/2012 - 21:46:06 - [0] ----D C:\Users\Delia\AppData\Local\{FFD9B561-3022-45B9-B025-A5DAA4197EF3}
O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/07/2012 - 08:58:18 - [0,000] R---D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 05/10/2011 - 19:09:09 - [0] ----D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyHoleTV
O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 12/07/2012 - 08:58:18 - [0,000] R---D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 06/02/2012 - 00:43:15 - [0,004] ----D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VideoLAN Movie Creator
O43 - CFD: 30/01/2013 - 19:09:25 - [0,003] ----D C:\Users\Delia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Scan Program Folder in 00mn 12s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.DEDB7CC1C2CF231A785F88F3DE75E088] - 14/02/2013 - 12:36:13 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1292444]
O44 - LFC:[MD5.C0C28B8DC446B1E35D2A4C466A91A4DC] - 14/02/2013 - 11:29:35 ---A- . (...) -- C:\Windows\setupact.log   [7818]
O44 - LFC:[MD5.6DE34CC5B5CD5BC57A55A87311200903] - 14/02/2013 - 11:29:34 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.07F74A701506538A7C50DCC5651988D6] - 14/02/2013 - 09:39:06  . (...) -- C:\Windows\System32\FNTCACHE.DAT   []
O44 - LFC:[MD5.07F74A701506538A7C50DCC5651988D6] - 14/02/2013 - 09:39:06 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [276904]
O44 - LFC:[MD5.613BDC120384EEDCB0DE8937CC0256EE] - 14/02/2013 - 09:37:14 ---A- . (...) -- C:\AdwCleaner[S20].txt   [2340]
O44 - LFC:[MD5.64F6BC182ABCFBB2B8B099CC02642125] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1590134]
O44 - LFC:[MD5.055F4A662B721356F1CFD97FB8DAEFC7] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [109284]
O44 - LFC:[MD5.839629A6307D44BD91E854A16EAA70BD] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [133650]
O44 - LFC:[MD5.F9567CB1E72013F82BACCA1B21380EE9] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [621966]
O44 - LFC:[MD5.7286F64C4FF670D2595BF8FA0D680B2C] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [710438]
O44 - LFC:[MD5.64F6BC182ABCFBB2B8B099CC02642125] - 14/02/2013 - 08:17:26 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1590134]
O44 - LFC:[MD5.311D2940C68B327FBDBE2A0C443117EF] - 10/02/2013 - 14:51:08 ---A- . (...) -- C:\AdwCleaner[S19].txt   [2279]
O44 - LFC:[MD5.69428E338C3F7E49CF4DB4CC8BB22518] - 10/02/2013 - 01:05:34 ---A- . (...) -- C:\Windows\PFRO.log   [670]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/02/2013 - 20:44:57  . (...) -- C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt   []
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/02/2013 - 20:44:57 ---A- . (...) -- C:\Windows\SysNative\HP_ActiveX_Patch_NOT_DETECTED.txt   [0]
O44 - LFC:[MD5.01FAFED33A272D5BB62573E4FD4084FC] - 07/02/2013 - 09:07:18 ---A- . (...) -- C:\AdwCleaner[S18].txt   [2218]
O44 - LFC:[MD5.476BD64B5E5E792580618B329DFB0B54] - 30/01/2013 - 19:43:12 ---A- . (...) -- C:\AdwCleaner[S17].txt   [2351]
O44 - LFC:[MD5.BA57B0E91A4F7C769A65D5D732321895] - 27/01/2013 - 11:14:45 ---A- . (...) -- C:\AdwCleaner[S16].txt   [2096]
O44 - LFC:[MD5.A3E581252060EEC0A9C7D2B419087306] - 24/01/2013 - 23:05:57 ---A- . (...) -- C:\Windows\MEMORY.DMP   [464732077]
O44 - LFC:[MD5.F492F84D5E87418FE786D24ECFE5955A] - 20/01/2013 - 17:38:51 ---A- . (...) -- C:\AdwCleaner[S15].txt   [2035]
O44 - LFC:[MD5.B7FA5D68F3C25F50A8B0A8C53D2A1225] - 18/01/2013 - 23:26:47 ---A- . (...) -- C:\AdwCleaner[S14].txt   [1974]
O44 - LFC:[MD5.697492F34B0EAF688E75F6DE7A3ED783] - 16/01/2013 - 19:54:58 ---A- . (...) -- C:\AdwCleaner[S13].txt   [1913]
~ Scan Files in 00mn 20s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\APSDaemon  [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O53 - SMSR:HKLM\...\startupreg\Badoo Desktop  [Key] . (...) -- C:\ProgramData\Badoo\Badoo desktop\1.6.55.1183\Badoo.desktop.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\iTunesHelper  [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O53 - SMSR:HKLM\...\startupreg\msnmsgr  [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O53 - SMSR:HKLM\...\startupreg\Skype  [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O53 - SMSR:HKLM\...\startupreg\Spotify Web Helper  [Key] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Delia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.5C368F4B04ED2A923E6AFCA2D37BAFF5] - 27/05/2011 - 11:20:12 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys   [43320]
O58 - SDL:[MD5.343786E182B9C9AE3066E00DEC650F50] - 02/11/2012 - 10:07:39 ---A- . (...) -- C:\Windows\SysWOW64\drivers\fsbts.sys   [42672]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: OTL - (.OldTimer.)
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 31/12/2010 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 08/01/2013 - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys - F-Secure Gatekeeper (F-Secure Gatekeeper)  .(...) - LEGACY_F-SECURE_GATEKEEPER
O64 - Services: CurCS - 08/01/2013 - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\HIPS\drivers\fshs.sys (F-Secure HIPS)  .(.F-Secure Corporation - HIPS 64-bit kernel module.) - LEGACY_F-SECURE_HIPS
O64 - Services: CurCS - 02/11/2012 - C:\Windows\System32\Drivers\fsbts.sys - fsbts (fsbts)  .(...) - LEGACY_FSBTS
O64 - Services: CurCS - 15/03/2012 - C:\Windows\System32\drivers\fses.sys (FSES)  .(.F-Secure Corporation - F-Secure Email Scanning Driver (64 bit).) - LEGACY_FSES
O64 - Services: CurCS - 15/03/2012 - C:\Windows\System32\drivers\fsdfw.sys (FSFW)  .(.F-Secure Corporation - F-Secure Internet Shield Driver (64 bit).) - LEGACY_FSFW
O64 - Services: CurCS - 15/03/2012 - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys - F-Secure Vista Support Driver (fsvista)  .(...) - LEGACY_FSVISTA
O64 - Services: CurCS - 17/12/2010 - C:\Windows\System32\DRIVERS\igdpmd64.sys (intelkmd)  .(.Intel Corporation - Intel Graphics Kernel Mode Driver.) - LEGACY_INTELKMD
O64 - Services: CurCS - 29/09/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector)  .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [Delia - nbfpg1n5.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {8A244612-A1F7-11E0-95C0-E71F4824019B} - (Search) - http://badoo.com
O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {b7fca997-d0fb-4fe0-8afd-255e89cf9671} - (Yahoo) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://fr.wikipedia.org
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com
O69 - SBI: SearchScopes [HKCU] {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {F1148FAB-8721-482A-8DCC-13D75108EC17} - (BittorrentBar_FR Customized Web Search) - http://search.conduit.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.C6AA274F69EBDD86F75B7E3E4FA58AF4] [SPRF][31/01/2013] (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Users\Delia\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe   [915376]
[MD5.4ADCFEE16EE9978F06157634669D36FB] [SPRF][11/11/2012] (.OldTimer Tools - Pas de description.) -- C:\Users\Delia\Desktop\OTL.exe   [602112]
[MD5.EE75E89ED6B4B52B392492BBD0A0345E] [SPRF][30/01/2013] (...) -- C:\Users\Delia\Desktop\wrar411fr.exe   [1576633]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{9DC6A0A8-B975-47D3-8EB0-AF207BD0DC51}" |In - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\ezSharedSvcHost.exe (.not file.)
O87 - FAEL: "{41876D3B-B708-4420-9070-8043D6276950}" | In - None - P6 - TRUE | .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\zumodrive.exe
O87 - FAEL: "{655E12D3-DDDC-489C-86FD-E04F043B3577}" | Out - None - P6 - TRUE | .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\zumodrive.exe
O87 - FAEL: "{B5CC992A-5303-4F01-926C-87D816D79369}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{243B4821-191B-416A-9433-D352A73FD87D}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{ACFB6750-1B5C-4AA7-9B06-ADA5C908F7B4}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{1942B5AC-76C4-409D-AB3F-21AE2092B840}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{4D2095F7-1518-41D1-BA1E-693370B415B9}" | In - None - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{C036961E-2A0E-421E-A19A-6C1ED3B2EBF1}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{D7D8D912-A598-4DD7-994B-F70589F3D241}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{AF770823-9462-4B0A-A92E-52F4A9E11B98}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{34247580-195C-4845-B587-D762AA75FF72}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{5E988A45-084B-45FD-B05B-B57E0B2C46B8}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{31E1EECB-3CD8-4FA3-8DFC-AC2607F75DCE}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{5D2605DE-43FD-47A9-983D-BE5AE19FCB52}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "TCP Query User{8DA04206-9A15-4F9D-9BF8-5AA187A88FC2}C:\users\delia\appdata\roaming\spotify\spotify.exe" | In - Public - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\delia\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "UDP Query User{6EA42EB5-448E-4512-ACC8-874E7D66CD3A}C:\users\delia\appdata\roaming\spotify\spotify.exe" | In - Public - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\delia\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "TCP Query User{EA85F6D7-E071-44B4-8224-8358A97DBEDB}C:\users\delia\appdata\roaming\spotify\spotify.exe" | In - Private - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\delia\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "UDP Query User{AF8DC2EB-6F13-406F-8078-AEBA63FB1136}C:\users\delia\appdata\roaming\spotify\spotify.exe" | In - Private - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\delia\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "{8E0FACF7-838A-4592-9638-E2199D85AFDD}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
O87 - FAEL: "{076FD120-6E56-41CF-A39E-4A7CF705518D}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
O87 - FAEL: "{F4923DD4-19B3-4FBB-8BBE-1E5808C4C716}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
~ Scan Firewall in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : v2.10682 - (12/02/2013)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32]   =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS]   =>Toolbar.Babylon
~ Scan Additionnel in 00mn 09s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "00004159070000000000000000F01FEC" . (.Microsoft Office 2010.) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe
O90 - PUC: "00E0EE84ED685A74D8005B7DA207CBDC" . (.HP Wireless Assistant.) -- C:\Windows\Installer\{48EE0E00-86DE-47A5-8D00-B5D72A70BCCD}\WA_tray_32_on.exe
O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "114202EE62C28E947948B11CBD7FED69" . (.HP Support Assistant.) -- C:\Windows\Installer\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\ARPPRODUCTICON.exe
O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
O90 - PUC: "1C4235E6CF4867F4A9A36CE5708FE06E" . (.Complément Messenger.) -- C:\Windows\Installer\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}\CompanionIcon
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "2A7527EE2A93F2D4D9CA9F2FB5A81E8D" . (.Skype™ 5.10.) -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "2C1A65825C073CE4FA7F5E5BE155032A" . (.HP Client Services.) -- C:\Windows\Installer\{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}\ARPPRODUCTICON.exe
O90 - PUC: "42444D4938A3E52CBC5770305770412C" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{94D44424-3A83-C25E-CB75-0703750714C2}\ARPPRODUCTICON.exe
O90 - PUC: "45B438B3B4CE2E84FB6C30FFD50AF626" . (.Adobe Shockwave Player 11.5.) -- C:\Windows\Installer\{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "4EE8B9B9BDE22C14FAE2367ED573DCFD" . (.HP On Screen Display.) -- C:\Windows\Installer\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}\_853F67D554F05449430E7E.exe
O90 - PUC: "5DBAFE4B44758DE4AB741C07B46B482D" . (.HP 3D DriveGuard.) -- C:\Windows\Installer\{B4EFABD5-5744-4ED8-BA47-C1704BB684D2}\controlPanelIcon.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.5) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "701043F6AA9F6C745BC43C1AF91155F3" . (.Hewlett-Packard ACLM.NET v1.2.1.1.) -- C:\Windows\Installer\{6F340107-F9AA-47C6-B54C-C3A19F11553F}\ARPPRODUCTICON.exe
O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico
O90 - PUC: "76F497E21CAD3A4C1982C048D18F1AEB" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{2E794F67-DAC1-C4A3-9128-0C841DF8A1BE}\ARPPRODUCTICON.exe
O90 - PUC: "7B65D4CC81F6B0747843BADC57CB4F1F" . (.HP Auto.) -- C:\Windows\Installer\{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}\ARPPRODUCTICON.exe
O90 - PUC: "883658EADAFA357418FD9DB6910D1AC7" . (.HP Setup Manager.) -- C:\Windows\Installer\{AE856388-AFAD-4753-81DF-D96B19D0A17C}\ARPPRODUCTICON.exe
O90 - PUC: "890B46E081086524AB323C614AA39D0B" . (.QuickTime.) -- C:\Windows\Installer\{0E64B098-8018-4256-BA23-C316A43AD9B0}\Installer.ico
O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe
O90 - PUC: "8BD0F7DF69E046D4DAD4B9A539A62F8A" . (.LightScribe System Software.) -- C:\Windows\Installer\{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}\ARPPRODUCTICON.exe
O90 - PUC: "8DB603FA1D9F7264989B42E69570A450" . (.HP Power Manager.) -- C:\Windows\Installer\{AF306BD8-F9D1-4627-89B9-246E59074A05}\_853F67D554F05449430E7E.exe
O90 - PUC: "9C43A1DB467497F4EAF111F2C8983D4D" . (.Energy Star Digital Logo.) -- C:\Windows\Installer\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "A02EF462B757a2940B3C04902E99D7A8" . (.PictureMover.) -- C:\Windows\Installer\{264FE20A-757B-492a-B0C3-4009E2997D8A}\ARPPRODUCTICON.exe
O90 - PUC: "A9FAC21F3081D0166C6822E05389C099" . (.ccc-utility64.) -- C:\Windows\Installer\{F12CAF9A-1803-610D-C686-220E35980C99}\ARPPRODUCTICON.exe
O90 - PUC: "AAB3A04886C41854C9A7F6D8C65F139B" . (.iTunes.) -- C:\Windows\Installer\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}\Installer.ico
O90 - PUC: "AF0C485B7305BD2C38993A5113100B66" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{B584C0FA-5037-C2DB-8399-A3153101B066}\ARPPRODUCTICON.exe
O90 - PUC: "B785D3DEE2B9F1F927E3EC31F728AC58" . (.ccc-core-static.) -- C:\Windows\Installer\{ED3D587B-9B2E-9F1F-723E-CE137F82CA85}\ARPPRODUCTICON.exe
O90 - PUC: "BE1F0F661B7A2954EB0904C49D4E0935" . (.HP Documentation.) -- C:\Windows\Installer\{66F0F1EB-A7B1-4592-BE90-404CD9E49053}\NotebookDocs.exe
O90 - PUC: "C08485BE1270C3843B45D9531A7499F9" . (.HP Quick Launch.) -- C:\Windows\Installer\{EB58480C-0721-483C-B354-9D35A147999F}\_853F67D554F05449430E7E.exe
O90 - PUC: "C7F1327C035656E4DA6AB593C25FEB1B" . (.Recovery Manager.) -- C:\Windows\Installer\{C7231F7C-6530-4E65-ADA6-5B392CF5BEB1}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "C8FDA2211ADDC08499638CF882522B56" . (.Apple Application Support.) -- C:\Windows\Installer\{122ADF8C-DDA1-480C-9936-C88F2825B265}\WinInstall.ico
O90 - PUC: "CD13597D7D58F7990438EC5605F5B1E7" . (.Catalyst Control Center Profiles Mobile.) -- C:\Windows\Installer\{D79531DC-85D7-997F-4083-CE65505F1B7E}\ARPPRODUCTICON.exe
O90 - PUC: "D5F533D558148DA4E8D6468D4DBA087D" . (.HP Software Framework.) -- C:\Windows\Installer\{5D335F5D-4185-4AD8-8E6D-64D8D4AB80D7}\app_1.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D73C68458E3713C43AAF7D6994F42868" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{5486C37D-73E8-4C31-A3FA-D796494F8286}\ARPPRODUCTICON.exe
O90 - PUC: "E4D18CB341E0D274D24ABC159D2AB1EA" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{3BC81D4E-0E14-472D-2DA4-CB51D9A21BAE}\ARPPRODUCTICON.exe
O90 - PUC: "F06FA63CE4A302B5FAF4B53F22B7AD0E" . (.Online Safety 1.57.21481.0.) -- C:\Windows\Installer\{C36AF60F-3A4E-5B20-AF4F-5BF3227BDAE0}\icon.ico
O90 - PUC: "FAEB67A6F1D637247AB9AD48012A5EB6" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}\Installer.ico
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: My Bluetooth - {862D80CE-A2A4-45D4-8008-7F40766F5FEA}
~ Scan MNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 18/12/2012 65192 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 08/02/2013 251248 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 03/03/2009 89600 |  (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AESTSr64.exe
SR - | Auto 31/12/2010 203776 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 24/05/2012 55184 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Demand 30/11/2010 4150864 |  (Bluetooth Device Manager) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
SR - | Demand 30/11/2010 1188616 |  (Bluetooth Media Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
SR - | Auto 30/11/2010 679176 |  (Bluetooth OBEX Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
SR - | Auto 30/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 30/12/1899 0 |  (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe
SS - | Demand 14/03/2011 647680 |  (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SR - | Demand 14/03/2011 1028096 |  (FLEXnet Licensing Service 64) . (.Macrovision Europe Ltd..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
SR - | Demand 15/03/2012 914088 |  (FSDFWD) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\FWES\Program\fsdfwd.exe
SR - | Auto 21/06/2012 163536 |  (fshoster) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\fshoster32.exe
SR - | Demand 15/03/2012 213672 |  (FSMA) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSMA32.exe
SR - | Auto 15/03/2012 62160 |  (FSORSPClient) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\apps\CCF_Reputation\fsorsp.exe
SS - | Demand 19/06/2010 246520 |  (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
SR - | Auto 27/09/2012 86528 |  (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
SR - | Auto 21/07/2010 103992 |  (HP Wireless Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
SR - | Auto 05/08/2010 291896 |  (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
SR - | Demand 10/08/2012 1001376 |  (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SR - | Auto 27/05/2011 30520 |  (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe
SR - | Auto 09/11/2010 26680 |  (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
SR - | Auto 13/09/2010 13336 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SS - | Demand 07/06/2012 936848 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 22/11/2010 73728 |  (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
SR - | Auto 23/11/2010 325656 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 29/09/2012 399432 |  (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 29/09/2012 676936 |  (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Demand 14/02/2013 115608 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 13/07/2012 160944 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 02/12/2010 275968 |  (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe
SR - | Auto 23/11/2010 2656280 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 00s



End of the scan (1501 lines in 01mn 26s)(0)