Rapport de ZHPDiag v1.3.5.100 par Nicolas Coolman, Update du 19/02/2013 Run by Damien at 19/02/2013 18:23:28 State : High Elevated Privileges : OK UAC : Activate by user ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 MFIE: Mozilla Firefox 16.0.2 v16.0.2 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8102 MB (68% free) System Restore: Activé (Enable) System drive C: has 256 GB (63%) free of 404 GB ---\\ Logged in mode ~ Computer Name: DAMIEN-PC ~ User Name: Damien ~ All Users Names: UpdatusUser, Damien, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Damien\AppData\Roaming\ ~ %Desktop% : C:\Users\Damien\Desktop\ ~ %Favorites% : C:\Users\Damien\Favorites\ ~ %LocalAppData% : C:\Users\Damien\AppData\Local\ ~ %StartMenu% : C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 256 Go of 404 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 120 Go of 503 Go) E:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.19/10/2011 - 03:54:37.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/11/2012 - 07:04:11.) -- C:\Windows\System32\wininet.dll [1392128] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:32.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.19/10/2011 - 04:02:02.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:22.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:58.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/10/2011 - 03:34:22.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/596 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/4 ~ Mes Documents (My Documents) : 1/9171 ~ Mon Bureau (My Desktop) : 1/375 ~ Menu demarrer (Programs) : 1/25 ~ Scan Hidden Files in 00mn 15s ---\\ Processus lancés [MD5.9A2F3F65C483A017E59BAFA52CADD823] - (.ASUSTek Computer Inc. - USB Charger+.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [504488] [PID.2768] [MD5.7D2C5F5A9DF7AE26B4E62E2D7032B96B] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [82944] [PID.2888] [MD5.710346F1C319257A754A7C0ACC99A480] - (.ASUSTeK Computer Inc. - ASUS Live Update.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1548448] [PID.2896] [MD5.F05FC2C0FECF55B05351AA760166F18F] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608] [PID.2592] [MD5.A391896CD406E6377F5CEF31FDC12019] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe [155648] [PID.3472] [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.3492] [MD5.35048D8E8A0BF7A797CD5757ACD7EED0] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816] [PID.4052] [MD5.88155D3D23CA8A1DFB1F45EE3E4C8DF8] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe [969104] [PID.4676] [MD5.7EE22E13DEC8A6D18F4643C1EA34B0F0] - (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\ASUS SonicMaster\SonicMasterTray.exe [984400] [PID.5088] [MD5.79A3B950988F8D2B81906D0C0473158B] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.2516] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.4024] [MD5.B166415C55E416022B3339EBD6CB216E] - (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312] [PID.4420] [MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136] [PID.4204] [MD5.B77081F8221968C7DAB794B0BA55C43E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896] [PID.4188] [MD5.18EE9A1BB848BF0C08052E595A456C63] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [389168] [PID.3188] [MD5.E60E9D5F229CB8DA347D48ADD6E8DC47] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [917984] [PID.3696] [MD5.B204707E5F48E90427DA6874E72345F9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16864] [PID.5540] [MD5.476FD5F12C0FF32CDF0A179320FCB726] - (.Adobe Systems, Inc. - Adobe Flash Player 11.5 r502.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_149.exe [1808240] [PID.5576] [MD5.F6E3D406A555A557D0F7CF085362EB4C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5687296] [PID.5508] [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.1580] [MD5.7910158929571214A959D5A6D16DD9C0] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1620] [MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808] [PID.1652] [MD5.8165C8825C726A7D5EFDF863A2D1C28F] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [92800] [PID.1204] [MD5.543A4EF0923BF70D126625B034EF25AF] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [189728] [PID.2104] [MD5.0416266CCBC2B95EAE2C6E0AA5D228FD] - (.Splashtop Inc. - Windows Metadata Export Service.) -- C:\ASUS.SYS\SIONExportService.exe [338208] [PID.2152] [MD5.8D82A1DB500C559B0128256444B588E3] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe [100992] [PID.2316] [MD5.F620772888B6E3EDEF5C3E71E3D447F0] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [92632] [PID.2872] [MD5.5DC2F453E0A89515096CF0EA8E46C10D] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [166528] [PID.2880] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.3148] [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [113208] [PID.3436] [MD5.616F6E52CAE254727A886BA8EDA1BEEA] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152] [PID.3616] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.3928] [MD5.0803906D607A9B83184447B75B60ECC2] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.6012] [MD5.EB79C6C91A99930015EF29AE7FA802D1] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2655768] [PID.3780] ~ Scan Processes Running in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Damien\AppData\Roaming\Mozilla\Firefox\Profiles\py0eyq45.default\prefs.js M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml M0 - MFSP: prefs.js [Damien - py0eyq45.default] http://www.facebook.com M2 - MFEP: prefs.js [Damien - py0eyq45.default\{C9B68337-E93A-44EA-94DC-CB300EC06444}] [] IMinent Toolbar v4.51.0 (.IMinent.) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Blog This in Windows Live [64Bits] - {2adefb8e-b923-35e6-86e2-2b7841f5d2a2} . (...) -- mscoree.dll (.not file.) O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Run: [SynAsusAcpi] C:\Program Files (x86)\Synaptics\SynTP\SynAsusAcpi.exe (.not file.) O4 - HKLM\..\Run: [IntelTBRunOnce] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [SonicMasterTray] . (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\ASUS SonicMaster\SonicMasterTray.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [Wireless Console 3] . (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-21-558853410-2708724727-1561618419-1001\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Damien\Desktop\Compte chèque.lnk . (...) -- C:\Users\Damien\Documents\Damien\Autres\banque - comptes\Comptes_Chèques.ods O4 - Global Startup: C:\Users\Damien\Desktop\PowerDirector.lnk . (.CyberLink Corp..) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O4 - Global Startup: C:\Users\Damien\Desktop\Stats inters.lnk . (...) -- C:\Users\Damien\Documents\Damien\Pompiers\Stats_inters.ods O4 - Global Startup: C:\Users\Damien\Desktop\uTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O4 - Global Startup: C:\Users\Damien\Desktop\XnView.lnk . (.XnView, http://www.xnview.com.) -- C:\Program Files (x86)\XnView\xnview.exe O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files (x86)\uTorrent\uTorrent.exe ~ Scan Global Startup in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1B157901-79E8-42F5-99D2-061337C35926}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{1B157901-79E8-42F5-99D2-061337C35926}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{1B157901-79E8-42F5-99D2-061337C35926}: DhcpNameServer = 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Scan Winlogon in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 301.) - C:\Windows\system32\nvinitx.dll ~ Scan AppInit DLL in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe O23 - Service: ASUS InstantOn Service (ASUS InstantOn) . (.ASUS - ASUS InstantOn Program.) - C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 301.4.) - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ~ Scan Services in 00mn 04s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [MD5.7D2C5F5A9DF7AE26B4E62E2D7032B96B] [APT] [ACMON] (.ASUS.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [MD5.EC807244904FA170C299AB06D87FBDBE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [MD5.710346F1C319257A754A7C0ACC99A480] [APT] [ASUS Live Update] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [MD5.09C748AB133FA903E115793B714EE786] [APT] [ASUS P4G] (.ASUS.) -- C:\Program Files\P4G\BatteryLife.exe [MD5.7529BF17445E16315A95B450CE985C11] [APT] [AsusVibeSchedule] (...) -- C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [MD5.F05FC2C0FECF55B05351AA760166F18F] [APT] [ATKOSD2] (.ASUS.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [MD5.74660C1E9139D95F4E006E8E49EA4986] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [MD5.9A2F3F65C483A017E59BAFA52CADD823] [APT] [USBChargerPlus] (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [MD5.E60E9D5F229CB8DA347D48ADD6E8DC47] [APT] [{35D72C81-22A6-4A9D-BC61-5B9AD86A0D18}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe ~ Scan Scheduled Task in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys O41 - Driver: (ATKWMIACPIIO) . (.ASUS - ATK WMIACPI Utility.) - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: (nvkflt) . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) - C:\Windows\System32\DRIVERS\nvkflt.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {BE930E38-7BB3-45B6-85B2-5251F374F844} O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {D39F0676-163E-4595-A917-E28F99BBD4D2} O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158} O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {FA540E67-095C-4A1B-97BA-4D547DEC9AF4} O42 - Logiciel: ASUS Music Maker - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_MSI_mm17_silver_asus O42 - Logiciel: ASUS Music Maker - (.MAGIX AG.) [HKLM][64Bits] -- {DD47370C-E0F1-407F-9DB0-3FF98907F1BC} O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {33B98264-A889-4913-A0CA-C364A75032B3} O42 - Logiciel: ASUS SonicMaster - (.Synopsys.) [HKLM][64Bits] -- {09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F} O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D} O42 - Logiciel: ASUS USB Charger Plus - (.ASUS.) [HKLM][64Bits] -- {A859E3E5-C62F-4BFA-AF1D-2B95E03166AF} O42 - Logiciel: ASUS Video Magic - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: ASUS Video Magic - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1} O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM][64Bits] -- ASUS WebStorage O42 - Logiciel: ASUSDVD - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} O42 - Logiciel: ASUSDVD - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4517-A278-C41E8DAEAB3B} O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Photoshop Lightroom 3.5 64-bit - (.Adobe.) [HKLM][64Bits] -- {44713725-8CC8-4710-B727-DC13A3665F9C} O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- AmUStor O42 - Logiciel: Asmedia ASM104x USB 3.0 Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {E4FB0B39-C991-4EE7-95DD-1A1A7857D33D} O42 - Logiciel: Assassin's Creed II - (.Ubisoft.) [HKLM][64Bits] -- {8570BEE8-0CA3-4977-9AB1-80ED93F0513C} O42 - Logiciel: AsusScr_N5_En - (.ASUS.) [HKLM][64Bits] -- AsusScr_N5_En O42 - Logiciel: AsusVibe2.0 - (.ASUSTEK.) [HKLM][64Bits] -- Asus Vibe2.0 O42 - Logiciel: BorderMaker - (.SEMANTICA.) [HKLM][64Bits] -- BorderMaker O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Canon Utilities EOS Utility - (.Canon Inc..) [HKLM][64Bits] -- EOS Utility O42 - Logiciel: Corel PaintShop Pro X4 - (.Corel Corporation.) [HKLM][64Bits] -- _{00580795-581C-4587-B9F2-37320D7AB37F} O42 - Logiciel: Corel PaintShop Pro X4 - (.Corel Corporation.) [HKLM][64Bits] -- {00AE1A2D-7BC2-4359-A0EC-E19F36E391BB} O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755} O42 - Logiciel: HP Deskjet F4500 All-in-One Driver 14.0 Rel. 6 - (.HP.) [HKLM][64Bits] -- {0AFFEA39-60AF-4C4F-BB47-4A1F7CB12129} O42 - Logiciel: ICA - (.Corel Corporation.) [HKLM][64Bits] -- {00580795-581C-4587-B9F2-37320D7AB37F} O42 - Logiciel: IPM_PSP_COM - (.Corel Corporation.) [HKLM][64Bits] -- {00BEE329-BAAB-49FF-9B66-55E4B12B9ADD} O42 - Logiciel: InstantOn for NB - (.ASUS.) [HKLM][64Bits] -- {749F674B-2674-47E8-879C-5626A06B2A91} O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Intel(R) Turbo Boost Technology Monitor 2.0 - (.Intel.) [HKLM][64Bits] -- {B77EFA0B-9BD3-4122-9F9A-15A963B5EA24} O42 - Logiciel: Java(TM) 6 Update 39 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216035FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: Logiciel de photoreflex - (.CEWE COLOR AG u Co. OHG.) [HKLM][64Bits] -- Logiciel de photoreflex O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Mises à jour NVIDIA 1.8.15 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update O42 - Logiciel: Mozilla Firefox 16.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 16.0.2 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Mozilla Thunderbird 17.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 17.0.2 (x86 fr) O42 - Logiciel: Music Now! - (.Splashtop Inc..) [HKLM][64Bits] -- InstallShield_{7C6A4E35-5EEE-426A-A7BF-EA95CDC54DEA} O42 - Logiciel: Music Now! - (.Splashtop Inc..) [HKLM][64Bits] -- {7C6A4E35-5EEE-426A-A7BF-EA95CDC54DEA} O42 - Logiciel: NVIDIA Logiciel système PhysX 9.12.0213 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9} O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.16.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver O42 - Logiciel: NVIDIA Pilote graphique 301.42 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: Nuance PDF Reader - (.Nuance Communications, Inc..) [HKLM][64Bits] -- {B480904D-F73F-4673-B034-8A5F492C9184} O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM][64Bits] -- {05653DE1-6567-40C6-B930-39D399B64369} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: PSPPContent - (.Corel Corporation.) [HKLM][64Bits] -- {006CAAEF-CA96-4181-AC22-FE56D61432E4} O42 - Logiciel: PSPPHelp - (.Corel Corporation.) [HKLM][64Bits] -- {00D74A7A-F7AD-4D00-ABD2-0973836292C7} O42 - Logiciel: PSPPro64 - (.Corel Corporation.) [HKLM][64Bits] -- {0015DE8E-8D9F-403E-8E5A-4098410E6125} O42 - Logiciel: PWR Option - (.ASUS.) [HKLM][64Bits] -- {B7B60C4F-0DB8-42EF-8EDC-5F21D4C2D73F} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Setup - (.Nom de votre société.) [HKLM][64Bits] -- {00D13418-7DDF-4D3D-A237-E297B103BB6B} O42 - Logiciel: Skype™ 6.2 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {9017CEAF-BE5A-4F73-8A0E-C87E26971E55} O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM][64Bits] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533} O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM][64Bits] -- {888F1505-C2B3-4FDE-835D-36353EBD4754} O42 - Logiciel: VLC media player 2.0.1 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D} O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {C4BC5A5F-4A97-47CC-99C3-AB8E10572AFE} O42 - Logiciel: XnView 1.98.8 - (.Gougelet Pierre-e.) [HKLM][64Bits] -- XnView_is1 O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM][64Bits] -- avast O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM][64Bits] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\ASUS] [HKCU\Software\ATK0100] [HKCU\Software\AVAST Software] [HKCU\Software\Adobe Lightroom] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\BitTorrent] [HKCU\Software\CDDB] [HKCU\Software\Canon] [HKCU\Software\CeWe Color] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Corel] [HKCU\Software\CyberLink] [HKCU\Software\ECAREME] [HKCU\Software\FLEXnet] [HKCU\Software\Free PDF Unlocker] [HKCU\Software\HP] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\Lake] [HKCU\Software\Macromedia] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\OpenOffice.org] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Synaptics] [HKCU\Software\TomTom] [HKCU\Software\Trolltech] [HKCU\Software\Ubisoft] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\Valve] [HKCU\Software\Winamp] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\Zeon] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ASUS] [HKLM\Software\ATI Technologies] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CoreSecurity] [HKLM\Software\Cyberlink] [HKLM\Software\DTS] [HKLM\Software\DeviceVM] [HKLM\Software\ECAREME] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IM Providers] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\SonicFocus] [HKLM\Software\Sonic] [HKLM\Software\Splashtop Inc.] [HKLM\Software\Synaptics] [HKLM\Software\Waves Audio] [HKLM\Software\Wow6432Node\AGEIA Technologies] [HKLM\Software\Wow6432Node\ASIO] [HKLM\Software\Wow6432Node\ASUS] [HKLM\Software\Wow6432Node\ATK0100] [HKLM\Software\Wow6432Node\AVAST Software] [HKLM\Software\Wow6432Node\Activision] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AsLdr] [HKLM\Software\Wow6432Node\Bunndle] [HKLM\Software\Wow6432Node\CDDB] [HKLM\Software\Wow6432Node\Canon] [HKLM\Software\Wow6432Node\Canon_Inc_IC] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\Corel] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\ECAREME] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\HPS] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\ICE] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\Iminent] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Lake] [HKLM\Software\Wow6432Node\MAGIX] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\NVIDIA Corporation] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\Oberon Media] [HKLM\Software\Wow6432Node\OpenOffice.org] [HKLM\Software\Wow6432Node\PDFCreator] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Protexis] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\ScanSoft] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Splashtop Inc.] [HKLM\Software\Wow6432Node\TomTom] [HKLM\Software\Wow6432Node\TwonkyMedia] [HKLM\Software\Wow6432Node\Ubisoft] [HKLM\Software\Wow6432Node\Valve] [HKLM\Software\Wow6432Node\VideoLAN] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\XnView] [HKLM\Software\Wow6432Node\Zeon] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node\trendmicro] [HKLM\Software\Wow6432Node] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 20/01/2012 - 04:26:33 - [2,950] ----D C:\Program Files (x86)\AmIcoSingLun O43 - CFD: 20/01/2012 - 04:27:39 - [2,193] ----D C:\Program Files (x86)\ASM104xUSB3 O43 - CFD: 29/12/2012 - 11:25:11 - [161,277] ----D C:\Program Files (x86)\ASUS O43 - CFD: 20/01/2012 - 04:32:11 - [210,428] ----D C:\Program Files (x86)\ASUS Music Maker O43 - CFD: 07/04/2012 - 12:48:21 - [4,825] ----D C:\Program Files (x86)\BorderMaker O43 - CFD: 05/04/2012 - 20:59:11 - [46,320] ----D C:\Program Files (x86)\Canon O43 - CFD: 16/02/2013 - 08:36:02 - [98,998] ----D C:\Program Files (x86)\Common Files O43 - CFD: 05/04/2012 - 19:16:35 - [327,141] ----D C:\Program Files (x86)\Corel O43 - CFD: 29/12/2012 - 12:54:29 - [974,432] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 03/06/2012 - 16:27:41 - [67,200] ----D C:\Program Files (x86)\HP O43 - CFD: 29/12/2012 - 12:51:47 - [89,989] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 20/01/2012 - 04:26:15 - [14,842] ----D C:\Program Files (x86)\Intel O43 - CFD: 31/01/2013 - 20:39:59 - [7,122] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 08/02/2013 - 19:05:08 - [84,880] ----D C:\Program Files (x86)\Java O43 - CFD: 07/04/2012 - 15:07:01 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 18/05/2012 - 13:30:46 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 19/10/2011 - 05:20:02 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 19/10/2011 - 05:08:55 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 27/10/2012 - 20:36:38 - [39,968] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 10/01/2013 - 10:55:20 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 09/01/2013 - 18:02:18 - [43,369] ----D C:\Program Files (x86)\Mozilla Thunderbird O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 24/03/2012 - 19:37:53 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 24/07/2012 - 10:03:15 - [0,333] ----D C:\Program Files (x86)\Notepad++ O43 - CFD: 19/10/2011 - 05:11:28 - [42,963] ----D C:\Program Files (x86)\Nuance O43 - CFD: 04/09/2012 - 16:53:02 - [97,401] ----D C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 01/04/2012 - 17:39:03 - [342,483] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 22/04/2012 - 15:19:43 - [34,654] ----D C:\Program Files (x86)\PDFCreator O43 - CFD: 24/10/2012 - 17:53:53 - [231,213] ----D C:\Program Files (x86)\Photoreflex O43 - CFD: 20/01/2012 - 04:26:53 - [14,279] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 16/02/2013 - 08:36:02 - [17,137] R---D C:\Program Files (x86)\Skype O43 - CFD: 20/01/2012 - 04:27:36 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 17/02/2013 - 17:42:23 - [48,823] ----D C:\Program Files (x86)\TomTom HOME 2 O43 - CFD: 30/04/2012 - 13:45:34 - [0,021] ----D C:\Program Files (x86)\TomTom International B.V O43 - CFD: 09/09/2012 - 11:57:57 - [1908,644] ----D C:\Program Files (x86)\Ubisoft O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 10/12/2012 - 18:08:23 - [0,924] ----D C:\Program Files (x86)\uTorrent O43 - CFD: 01/04/2012 - 17:32:57 - [88,797] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 01/09/2012 - 09:11:05 - [30,609] ----D C:\Program Files (x86)\Winamp O43 - CFD: 30/03/2012 - 04:27:49 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 22/04/2012 - 15:00:58 - [329,401] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 30/03/2012 - 04:27:49 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 30/03/2012 - 04:27:49 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 30/03/2012 - 04:27:49 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 18/02/2011 - 21:09:10 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 30/03/2012 - 04:28:04 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 30/03/2012 - 19:52:31 - [16,175] ----D C:\Program Files (x86)\XnView O43 - CFD: 19/02/2013 - 18:23:52 - [15,130] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 05/04/2012 - 20:58:54 - [1,785] ----D C:\Program Files (x86)\Common Files\Canon O43 - CFD: 03/06/2012 - 16:28:00 - [0,951] ----D C:\Program Files (x86)\Common Files\Hewlett-Packard O43 - CFD: 03/06/2012 - 16:28:00 - [0,092] ----D C:\Program Files (x86)\Common Files\HP O43 - CFD: 20/01/2012 - 04:26:49 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 20/01/2012 - 04:22:44 - [13,589] ----D C:\Program Files (x86)\Common Files\Intel O43 - CFD: 22/10/2012 - 18:47:55 - [1,202] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 29/12/2012 - 13:01:23 - [0,063] ----D C:\Program Files (x86)\Common Files\MAGIX Services O43 - CFD: 19/10/2011 - 05:34:59 - [21,092] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 19/10/2011 - 05:26:30 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media O43 - CFD: 20/01/2012 - 04:26:17 - [0,154] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 05/04/2012 - 19:18:23 - [1,620] ----D C:\Program Files (x86)\Common Files\Protexis O43 - CFD: 23/03/2012 - 13:32:42 - [4,559] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 16/02/2013 - 08:36:02 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 30/12/2012 - 18:51:36 - [0,517] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 30/03/2012 - 04:28:04 - [9,767] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 19/10/2011 - 05:11:54 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 11/11/2012 - 13:54:32 - [309,434] ----D C:\ProgramData\Adobe O43 - CFD: 20/01/2012 - 04:26:33 - [0,001] ----D C:\ProgramData\AmUStor O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 14/08/2012 - 11:59:04 - [0,004] ----D C:\ProgramData\Asus O43 - CFD: 20/01/2012 - 04:32:01 - [55,672] ----D C:\ProgramData\ASUS Music Maker O43 - CFD: 19/10/2011 - 05:25:11 - [0,002] ----D C:\ProgramData\ASUS WebStorage O43 - CFD: 23/03/2012 - 13:19:12 - [14,054] ----D C:\ProgramData\AVAST Software O43 - CFD: 22/03/2012 - 13:47:27 - [4,685] ----D C:\ProgramData\ChangeFolderView O43 - CFD: 05/04/2012 - 19:20:27 - [452,782] ----D C:\ProgramData\Corel O43 - CFD: 30/01/2013 - 21:11:36 - [0,086] ----D C:\ProgramData\CyberLink O43 - CFD: 14/08/2012 - 11:59:50 - [0] ----D C:\ProgramData\Deadtime Stories O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 19/10/2011 - 05:11:26 - [18,933] ----D C:\ProgramData\Downloaded Installations O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 19/10/2011 - 05:11:28 - [3,807] ----D C:\ProgramData\FLEXnet O43 - CFD: 22/03/2012 - 13:44:27 - [0,900] ----D C:\ProgramData\FolderView O43 - CFD: 03/06/2012 - 16:24:53 - [0,323] ----D C:\ProgramData\HP O43 - CFD: 24/10/2012 - 17:58:04 - [2,088] ----D C:\ProgramData\hps O43 - CFD: 20/01/2012 - 04:26:02 - [0,002] ----D C:\ProgramData\Intel O43 - CFD: 20/01/2012 - 04:32:13 - [5,557] ----D C:\ProgramData\MAGIX O43 - CFD: 09/04/2012 - 13:26:20 - [0] ----D C:\ProgramData\McAfee O43 - CFD: 07/04/2012 - 15:09:37 - [566,537] -S--D C:\ProgramData\Microsoft O43 - CFD: 28/04/2012 - 11:35:04 - [0,034] ----D C:\ProgramData\Mozilla O43 - CFD: 24/03/2012 - 15:34:13 - [0,000] ----D C:\ProgramData\Nuance O43 - CFD: 04/09/2012 - 16:54:23 - [19,317] ----D C:\ProgramData\NVIDIA O43 - CFD: 20/01/2012 - 04:23:18 - [3,436] ----D C:\ProgramData\NVIDIA Corporation O43 - CFD: 20/01/2012 - 04:30:44 - [0,002] ----D C:\ProgramData\P4G O43 - CFD: 31/03/2012 - 15:02:22 - [0,003] ----D C:\ProgramData\Protexis O43 - CFD: 19/10/2011 - 05:11:29 - [1,216] ----D C:\ProgramData\ScanSoft O43 - CFD: 16/02/2013 - 08:36:05 - [74,118] ----D C:\ProgramData\Skype O43 - CFD: 20/01/2012 - 04:27:09 - [0,009] ----D C:\ProgramData\SonicFocus O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 01/04/2012 - 17:38:20 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 14/08/2012 - 11:58:25 - [0,902] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 10/12/2012 - 20:23:59 - [0,094] ----D C:\ProgramData\tmp O43 - CFD: 30/04/2012 - 13:48:14 - [0,401] ----D C:\ProgramData\TomTom O43 - CFD: 27/03/2012 - 20:07:57 - [3,232] ----D C:\ProgramData\Trend Micro O43 - CFD: 09/09/2012 - 12:00:26 - [0] ----D C:\ProgramData\Ubisoft O43 - CFD: 20/01/2012 - 04:43:48 - [0,000] ----D C:\ProgramData\USBChargerPlus O43 - CFD: 27/03/2012 - 20:39:18 - [7,770] ----D C:\Users\Damien\AppData\Roaming\Adobe O43 - CFD: 22/03/2012 - 17:54:30 - [0,001] ----D C:\Users\Damien\AppData\Roaming\ASUS WebStorage O43 - CFD: 27/03/2012 - 21:15:17 - [5,330] ----D C:\Users\Damien\AppData\Roaming\Corel O43 - CFD: 27/01/2013 - 19:18:26 - [4,160] ----D C:\Users\Damien\AppData\Roaming\CyberLink O43 - CFD: 10/04/2012 - 19:52:32 - [0,001] ----D C:\Users\Damien\AppData\Roaming\dvdcss O43 - CFD: 27/01/2013 - 19:08:21 - [0,038] ----D C:\Users\Damien\AppData\Roaming\DVDVideoSoft O43 - CFD: 24/03/2012 - 15:34:14 - [0,000] ----D C:\Users\Damien\AppData\Roaming\FLEXnet O43 - CFD: 22/03/2012 - 13:44:46 - [0] ----D C:\Users\Damien\AppData\Roaming\Identities O43 - CFD: 23/03/2012 - 13:24:59 - [0,001] ----D C:\Users\Damien\AppData\Roaming\Macromedia O43 - CFD: 29/01/2013 - 20:25:57 - [0,110] ----D C:\Users\Damien\AppData\Roaming\MCommon O43 - CFD: 14/07/2009 - 08:44:38 - [0] ----D C:\Users\Damien\AppData\Roaming\Media Center Programs O43 - CFD: 05/02/2013 - 17:05:59 - [9,938] -S--D C:\Users\Damien\AppData\Roaming\Microsoft O43 - CFD: 23/03/2012 - 13:27:37 - [30,896] ----D C:\Users\Damien\AppData\Roaming\Mozilla O43 - CFD: 24/07/2012 - 10:03:15 - [0,163] ----D C:\Users\Damien\AppData\Roaming\Notepad++ O43 - CFD: 24/03/2012 - 15:34:13 - [0,000] ----D C:\Users\Damien\AppData\Roaming\Nuance O43 - CFD: 01/04/2012 - 17:48:03 - [4,302] ----D C:\Users\Damien\AppData\Roaming\OpenOffice.org O43 - CFD: 22/04/2012 - 15:19:32 - [0,002] ----D C:\Users\Damien\AppData\Roaming\pdfforge O43 - CFD: 17/02/2013 - 10:50:11 - [4,403] ----D C:\Users\Damien\AppData\Roaming\Skype O43 - CFD: 24/03/2012 - 15:33:02 - [214,399] ----D C:\Users\Damien\AppData\Roaming\Thunderbird O43 - CFD: 23/03/2012 - 13:32:43 - [10,631] ----D C:\Users\Damien\AppData\Roaming\Todae O43 - CFD: 30/04/2012 - 13:45:44 - [1,429] ----D C:\Users\Damien\AppData\Roaming\TomTom O43 - CFD: 09/09/2012 - 12:00:26 - [0,002] ----D C:\Users\Damien\AppData\Roaming\Ubisoft O43 - CFD: 05/04/2012 - 19:20:06 - [0,030] ----D C:\Users\Damien\AppData\Roaming\Ulead Systems O43 - CFD: 19/02/2013 - 18:23:11 - [2,747] ----D C:\Users\Damien\AppData\Roaming\uTorrent O43 - CFD: 18/02/2013 - 23:05:04 - [1,146] ----D C:\Users\Damien\AppData\Roaming\vlc O43 - CFD: 17/02/2013 - 11:13:33 - [0,085] ----D C:\Users\Damien\AppData\Roaming\Winamp O43 - CFD: 19/02/2013 - 13:59:00 - [0,203] ----D C:\Users\Damien\AppData\Roaming\WinLive O43 - CFD: 18/02/2013 - 23:01:01 - [463,574] ----D C:\Users\Damien\AppData\Roaming\XnView O43 - CFD: 24/03/2012 - 15:34:11 - [0,450] ----D C:\Users\Damien\AppData\Roaming\Zeon O43 - CFD: 27/03/2012 - 20:39:18 - [1016,964] ----D C:\Users\Damien\AppData\Local\Adobe O43 - CFD: 22/03/2012 - 13:44:01 - [0] ----D C:\Users\Damien\AppData\Local\Application Data O43 - CFD: 07/05/2012 - 15:42:45 - [1,310] ----D C:\Users\Damien\AppData\Local\ASUS O43 - CFD: 19/05/2012 - 12:33:09 - [0] ----D C:\Users\Damien\AppData\Local\Axialis O43 - CFD: 05/04/2012 - 20:51:05 - [0,010] ----D C:\Users\Damien\AppData\Local\CANON_INC O43 - CFD: 27/03/2012 - 21:13:31 - [12,903] ----D C:\Users\Damien\AppData\Local\Corel PaintShop Pro O43 - CFD: 17/02/2013 - 17:51:10 - [2,389] ----D C:\Users\Damien\AppData\Local\CrashDumps O43 - CFD: 29/12/2012 - 12:52:27 - [0,002] ----D C:\Users\Damien\AppData\Local\Cyberlink O43 - CFD: 10/10/2012 - 20:31:54 - [0] ----D C:\Users\Damien\AppData\Local\Diagnostics O43 - CFD: 17/02/2013 - 17:41:58 - [51,840] ----D C:\Users\Damien\AppData\Local\Downloaded Installations O43 - CFD: 10/07/2012 - 09:32:06 - [0] ----D C:\Users\Damien\AppData\Local\ElevatedDiagnostics O43 - CFD: 22/03/2012 - 13:44:01 - [0] ----D C:\Users\Damien\AppData\Local\Historique O43 - CFD: 20/06/2012 - 17:09:21 - [0] ----D C:\Users\Damien\AppData\Local\Macromedia O43 - CFD: 06/01/2013 - 12:35:28 - [303,354] ----D C:\Users\Damien\AppData\Local\Microsoft O43 - CFD: 23/03/2012 - 13:27:30 - [90,503] ----D C:\Users\Damien\AppData\Local\Mozilla O43 - CFD: 22/03/2012 - 17:53:36 - [0,039] ----D C:\Users\Damien\AppData\Local\Power2Go O43 - CFD: 19/02/2013 - 18:22:23 - [1,097] ----D C:\Users\Damien\AppData\Local\Temp O43 - CFD: 22/03/2012 - 13:44:01 - [0] ----D C:\Users\Damien\AppData\Local\Temporary Internet Files O43 - CFD: 31/03/2012 - 08:45:43 - [9,379] ----D C:\Users\Damien\AppData\Local\Thunderbird O43 - CFD: 30/04/2012 - 13:45:44 - [1,856] ----D C:\Users\Damien\AppData\Local\TomTom O43 - CFD: 09/09/2012 - 12:38:44 - [0,001] ----D C:\Users\Damien\AppData\Local\Ubisoft Game Launcher O43 - CFD: 05/07/2012 - 13:01:00 - [2,414] ----D C:\Users\Damien\AppData\Local\VirtualStore O43 - CFD: 06/02/2013 - 10:13:37 - [0,273] ----D C:\Users\Damien\AppData\Local\Windows Live O43 - CFD: 02/06/2012 - 10:29:22 - [0] ----D C:\Users\Damien\AppData\Local\{00EE7882-2F81-4FE6-BF72-43F33C55B30A} O43 - CFD: 22/05/2012 - 19:27:47 - [0] ----D C:\Users\Damien\AppData\Local\{0107B3E7-9D09-4B6F-85B6-C5BCC5F7AA88} O43 - CFD: 21/04/2012 - 17:15:09 - [0] ----D C:\Users\Damien\AppData\Local\{01189507-2E80-470A-A955-3B2ED1ED6C35} O43 - CFD: 21/04/2012 - 12:47:20 - [0] ----D C:\Users\Damien\AppData\Local\{0156D434-074E-4611-9621-FF3C9B36C1A6} O43 - CFD: 15/06/2012 - 09:00:05 - [0] ----D C:\Users\Damien\AppData\Local\{017F58CA-1D36-4512-A73A-9FC64A52A5C6} O43 - CFD: 27/04/2012 - 17:14:40 - [0] ----D C:\Users\Damien\AppData\Local\{0284A191-3175-41E8-A78F-AD86AC787C36} O43 - CFD: 20/07/2012 - 21:56:54 - [0] ----D C:\Users\Damien\AppData\Local\{02A5A215-EED7-467C-B9A4-9CC8EDB93B32} O43 - CFD: 08/08/2012 - 19:21:59 - [0] ----D C:\Users\Damien\AppData\Local\{02B3D68E-40AA-4100-B2A8-1C557EC34A94} O43 - CFD: 25/07/2012 - 09:13:12 - [0] ----D C:\Users\Damien\AppData\Local\{0387C8D4-A23B-4E32-983F-422AAA9DFB55} O43 - CFD: 13/06/2012 - 19:13:55 - [0] ----D C:\Users\Damien\AppData\Local\{053CEF11-2BD3-4A6A-871F-19EF008C0516} O43 - CFD: 06/05/2012 - 10:52:42 - [0] ----D C:\Users\Damien\AppData\Local\{05C5B5C3-6D15-418E-A837-B5EEC17C15FE} O43 - CFD: 16/02/2013 - 08:29:24 - [0] ----D C:\Users\Damien\AppData\Local\{06ACA09C-26AD-4818-8F35-1328D36F74C3} O43 - CFD: 17/08/2012 - 11:31:30 - [0] ----D C:\Users\Damien\AppData\Local\{06B53B46-B176-47EC-8B01-E89BA5C18AD5} O43 - CFD: 30/06/2012 - 09:13:58 - [0] ----D C:\Users\Damien\AppData\Local\{08843DF7-2CD3-4D75-878A-903F32FDCC26} O43 - CFD: 03/07/2012 - 07:17:20 - [0] ----D C:\Users\Damien\AppData\Local\{09BEBC59-B5D0-4476-9946-2E8A845B9D36} O43 - CFD: 28/07/2012 - 08:30:11 - [0] ----D C:\Users\Damien\AppData\Local\{09F5EB11-E88A-4F74-88A3-1C54561D4642} O43 - CFD: 05/05/2012 - 08:26:07 - [0] ----D C:\Users\Damien\AppData\Local\{09F60269-065C-4FEF-92CC-6C1F2EDB11AD} O43 - CFD: 24/05/2012 - 20:28:30 - [0] ----D C:\Users\Damien\AppData\Local\{0A415219-C83B-4A7F-8D36-5A2C33E2CD29} O43 - CFD: 18/05/2012 - 17:22:24 - [0] ----D C:\Users\Damien\AppData\Local\{0B10BA4E-7A65-43DD-AF0A-6F24F3C0355F} O43 - CFD: 31/07/2012 - 20:37:18 - [0] ----D C:\Users\Damien\AppData\Local\{0B329C25-245B-4D0D-9DC1-6D916D3D18FD} O43 - CFD: 23/05/2012 - 19:09:56 - [0] ----D C:\Users\Damien\AppData\Local\{0CBC6CF9-5454-460A-8640-076E93B77087} O43 - CFD: 04/07/2012 - 08:16:29 - [0] ----D C:\Users\Damien\AppData\Local\{0CE39994-E4EE-488F-8164-B636DDC1FE9B} O43 - CFD: 01/06/2012 - 17:30:51 - [0] ----D C:\Users\Damien\AppData\Local\{0D93073C-7F23-4C84-8C2E-D7A9579A9C7A} O43 - CFD: 19/06/2012 - 06:59:16 - [0] ----D C:\Users\Damien\AppData\Local\{0DC4F19D-A42E-41E9-B334-9D09B771BF41} O43 - CFD: 29/06/2012 - 07:31:22 - [0] ----D C:\Users\Damien\AppData\Local\{0EA98166-311C-4790-9D37-8BC35A1D0113} O43 - CFD: 29/03/2012 - 21:13:55 - [0] ----D C:\Users\Damien\AppData\Local\{0F61F409-A4EE-452C-9622-CD0C4C0D727B} O43 - CFD: 31/08/2012 - 12:11:32 - [0] ----D C:\Users\Damien\AppData\Local\{102C31C2-91A4-4EEB-82F3-49E7313E41D6} O43 - CFD: 20/04/2012 - 20:39:10 - [0] ----D C:\Users\Damien\AppData\Local\{114A66ED-A9F9-42D0-A553-A4E874981439} O43 - CFD: 12/05/2012 - 09:00:58 - [0] ----D C:\Users\Damien\AppData\Local\{124F599B-A808-448B-BAC9-BD0026B503C3} O43 - CFD: 14/06/2012 - 07:51:02 - [0] ----D C:\Users\Damien\AppData\Local\{125B27A1-2390-428F-89B8-EF18259CCFD8} O43 - CFD: 19/05/2012 - 08:05:32 - [0] ----D C:\Users\Damien\AppData\Local\{13F16E77-8A8A-4D63-94E0-9A304A494A84} O43 - CFD: 05/07/2012 - 20:32:58 - [0] ----D C:\Users\Damien\AppData\Local\{14B59AB5-DE46-4B74-9E03-BC31F297F8F9} O43 - CFD: 13/04/2012 - 07:42:16 - [0] ----D C:\Users\Damien\AppData\Local\{164CA6E4-567B-45C2-8FFF-53F175655C83} O43 - CFD: 08/05/2012 - 07:57:05 - [0] ----D C:\Users\Damien\AppData\Local\{16683466-562C-40F2-A891-0E5EB14BD743} O43 - CFD: 06/04/2012 - 08:14:20 - [0] ----D C:\Users\Damien\AppData\Local\{17FF3EB9-34EB-495E-8099-051B5F02DB13} O43 - CFD: 26/07/2012 - 07:30:37 - [0] ----D C:\Users\Damien\AppData\Local\{19BD2C45-DEE3-42E7-9CBF-53A2AA150C30} O43 - CFD: 14/08/2012 - 08:15:59 - [0] ----D C:\Users\Damien\AppData\Local\{19CBCE5C-D5A7-4FFB-9E78-1192089EAB25} O43 - CFD: 08/07/2012 - 08:45:50 - [0] ----D C:\Users\Damien\AppData\Local\{1A0B820E-0797-4748-8F5C-134691490F90} O43 - CFD: 30/03/2012 - 18:13:27 - [0] ----D C:\Users\Damien\AppData\Local\{1AC504B7-5E7E-4DA8-A201-5CFB8FF94C42} O43 - CFD: 05/07/2012 - 08:31:28 - [0] ----D C:\Users\Damien\AppData\Local\{1C10CB8A-C18A-4326-B7E8-A9F08BC104B8} O43 - CFD: 20/04/2012 - 20:38:57 - [0] ----D C:\Users\Damien\AppData\Local\{1CA789B3-16CE-454A-B0CC-E574F3C6714B} O43 - CFD: 04/07/2012 - 08:16:40 - [0] ----D C:\Users\Damien\AppData\Local\{1D9365E6-1BC6-4E68-BF1B-F1E90BA9CE42} O43 - CFD: 21/05/2012 - 16:52:23 - [0] ----D C:\Users\Damien\AppData\Local\{1E5F66B4-DB5B-4A08-A3B6-DC0EDF6FDF9E} O43 - CFD: 22/04/2012 - 14:53:00 - [0] ----D C:\Users\Damien\AppData\Local\{1EA2BB6C-FD71-41B4-A2F5-82EB6FD98CC1} O43 - CFD: 17/05/2012 - 21:18:59 - [0] ----D C:\Users\Damien\AppData\Local\{1ED8B6CD-B0C0-4A2D-A7B7-A89A6C21080A} O43 - CFD: 22/04/2012 - 12:50:34 - [0] ----D C:\Users\Damien\AppData\Local\{1EE59772-C717-4EF5-B13D-B983D2BC5690} O43 - CFD: 06/07/2012 - 08:34:03 - [0] ----D C:\Users\Damien\AppData\Local\{1FC59C42-0910-47BF-B69E-656471C62A4B} O43 - CFD: 10/04/2012 - 21:36:49 - [0] ----D C:\Users\Damien\AppData\Local\{1FD13957-7670-4441-A28A-ED4B1E71503E} O43 - CFD: 18/04/2012 - 18:18:18 - [0] ----D C:\Users\Damien\AppData\Local\{1FF66C95-823D-4141-855F-9356AED29599} O43 - CFD: 05/05/2012 - 08:25:36 - [0] ----D C:\Users\Damien\AppData\Local\{21D10CDF-03AC-4914-98AE-C383866B1AAA} O43 - CFD: 04/07/2012 - 20:17:48 - [0] ----D C:\Users\Damien\AppData\Local\{22E90AA5-2CCA-47D8-AE93-C8ECF0B2639F} O43 - CFD: 08/06/2012 - 16:04:31 - [0] ----D C:\Users\Damien\AppData\Local\{22FE03CB-EF03-4402-8E83-B36B83BAE769} O43 - CFD: 05/09/2012 - 16:18:44 - [0] ----D C:\Users\Damien\AppData\Local\{23DE47CC-1540-4BA3-88DE-D78912AA3E65} O43 - CFD: 12/07/2012 - 16:05:26 - [0] ----D C:\Users\Damien\AppData\Local\{23EE508D-F47C-43D5-BFFA-F7A7DD9CED2A} O43 - CFD: 26/06/2012 - 18:40:13 - [0] ----D C:\Users\Damien\AppData\Local\{240FD6FE-1288-425E-AFB8-D7D3D3AA59F8} O43 - CFD: 13/04/2012 - 20:02:31 - [0] ----D C:\Users\Damien\AppData\Local\{247E8982-CA5E-4ED0-A2A2-683D42DBA603} O43 - CFD: 03/05/2012 - 17:50:58 - [0] ----D C:\Users\Damien\AppData\Local\{281AD6C4-57F0-47FF-9EF4-B476F365E32C} O43 - CFD: 20/07/2012 - 09:55:36 - [0] ----D C:\Users\Damien\AppData\Local\{282EB261-D9F3-49D7-A547-DAC8C156D299} O43 - CFD: 09/06/2012 - 09:03:02 - [0] ----D C:\Users\Damien\AppData\Local\{292B76B2-4194-4FB6-949B-85D7275A78F2} O43 - CFD: 05/08/2012 - 12:15:06 - [0] ----D C:\Users\Damien\AppData\Local\{2AAEA912-EE3F-4876-9647-A464EFB07B57} O43 - CFD: 08/08/2012 - 07:21:08 - [0] ----D C:\Users\Damien\AppData\Local\{2AC6771C-555F-4136-80CD-D5B09BCD57D6} O43 - CFD: 22/04/2012 - 14:53:12 - [0] ----D C:\Users\Damien\AppData\Local\{2BC1CFFC-4664-47A3-AE0C-2CC9442C98D3} O43 - CFD: 11/07/2012 - 17:21:25 - [0] ----D C:\Users\Damien\AppData\Local\{2BDB8114-874B-4D40-BA9B-27582D4AA2B2} O43 - CFD: 06/09/2012 - 20:42:22 - [0] ----D C:\Users\Damien\AppData\Local\{2C7097EB-DF36-452C-B1D9-EA67F425F1B7} O43 - CFD: 06/06/2012 - 15:51:39 - [0] ----D C:\Users\Damien\AppData\Local\{2E178189-85B8-4C5C-929B-F18C6BCB41DA} O43 - CFD: 10/07/2012 - 09:00:48 - [0] ----D C:\Users\Damien\AppData\Local\{2F04A7EB-1A4D-4417-B61B-269E92447AC6} O43 - CFD: 08/04/2012 - 11:18:34 - [0] ----D C:\Users\Damien\AppData\Local\{2F50EC36-0282-4F76-B27C-B1C6A880E29D} O43 - CFD: 26/04/2012 - 06:33:49 - [0] ----D C:\Users\Damien\AppData\Local\{2F639BEB-D052-45A8-810B-E684FE02C41E} O43 - CFD: 16/08/2012 - 22:54:46 - [0] ----D C:\Users\Damien\AppData\Local\{2FD1B1FC-43EC-4ACE-BF98-E1101AB02C5F} O43 - CFD: 29/04/2012 - 14:26:16 - [0] ----D C:\Users\Damien\AppData\Local\{309B285A-0DFD-4A96-9DD0-0C3C495A741E} O43 - CFD: 24/03/2012 - 14:54:04 - [0] ----D C:\Users\Damien\AppData\Local\{315E31E9-3235-408E-A436-45699D1C45F2} O43 - CFD: 10/07/2012 - 21:01:59 - [0] ----D C:\Users\Damien\AppData\Local\{3254381D-7CE5-4A43-87E9-0979ECE4765B} O43 - CFD: 24/07/2012 - 09:11:21 - [0] ----D C:\Users\Damien\AppData\Local\{341981EF-6EB6-4042-91E6-A5D00EACEB8B} O43 - CFD: 16/07/2012 - 14:17:39 - [0] ----D C:\Users\Damien\AppData\Local\{34B07D86-55C6-4554-B157-E7062DA43C27} O43 - CFD: 20/07/2012 - 21:56:43 - [0] ----D C:\Users\Damien\AppData\Local\{34E83915-6ADE-4A82-A847-9C25485B1916} O43 - CFD: 16/07/2012 - 14:17:50 - [0] ----D C:\Users\Damien\AppData\Local\{3617060E-1C9E-4233-AF4B-09A2A7748DE1} O43 - CFD: 15/04/2012 - 07:32:55 - [0] ----D C:\Users\Damien\AppData\Local\{368FD66D-7854-4F08-B043-B3D909E8315E} O43 - CFD: 13/06/2012 - 19:23:33 - [0] ----D C:\Users\Damien\AppData\Local\{36CE4A65-4D02-4462-84FB-B480B85B7E62} O43 - CFD: 15/07/2012 - 10:16:20 - [0] ----D C:\Users\Damien\AppData\Local\{37704B11-3822-4080-9A32-E216F0F5EEBE} O43 - CFD: 04/09/2012 - 15:38:59 - [0] ----D C:\Users\Damien\AppData\Local\{38AEAF13-3BA1-4A07-8EF7-F420E2A6316E} O43 - CFD: 17/06/2012 - 10:40:57 - [0] ----D C:\Users\Damien\AppData\Local\{38E4DD73-B390-4076-9AE2-98D8078ACDBA} O43 - CFD: 27/07/2012 - 08:51:21 - [0] ----D C:\Users\Damien\AppData\Local\{3992FD80-F9C2-4335-B599-582EE2D64A87} O43 - CFD: 17/04/2012 - 17:58:59 - [0] ----D C:\Users\Damien\AppData\Local\{39BCBA9A-AC46-4C45-A927-41AC7CB7E04A} O43 - CFD: 09/08/2012 - 07:22:46 - [0] ----D C:\Users\Damien\AppData\Local\{3ABFB3A7-22CA-49A7-85EA-624144BFA7CD} O43 - CFD: 29/04/2012 - 15:04:24 - [0] ----D C:\Users\Damien\AppData\Local\{3ADAD757-23C9-4C5E-8053-B93F03F05F01} O43 - CFD: 07/06/2012 - 16:53:05 - [0] ----D C:\Users\Damien\AppData\Local\{3B88B288-D565-4182-8F31-288C04619092} O43 - CFD: 26/06/2012 - 06:39:00 - [0] ----D C:\Users\Damien\AppData\Local\{3C981ED3-6368-4267-9092-FD14AFB6B267} O43 - CFD: 09/04/2012 - 21:11:22 - [0] ----D C:\Users\Damien\AppData\Local\{3D08016D-D95A-413B-82D4-F4702079F9BD} O43 - CFD: 16/09/2012 - 08:47:08 - [0] ----D C:\Users\Damien\AppData\Local\{3E8FA338-5BF3-479A-B5A4-1AD51166501E} O43 - CFD: 13/07/2012 - 18:02:40 - [0] ----D C:\Users\Damien\AppData\Local\{3EB09668-B258-48FB-84CB-F95DE8078198} O43 - CFD: 18/04/2012 - 08:30:25 - [0] ----D C:\Users\Damien\AppData\Local\{3F140D19-91F5-4B8D-9C24-587C7077DFD6} O43 - CFD: 06/08/2012 - 19:37:01 - [0] ----D C:\Users\Damien\AppData\Local\{4086CBD6-E636-4DEE-8645-6AD6F8F774E1} O43 - CFD: 16/05/2012 - 09:34:21 - [0] ----D C:\Users\Damien\AppData\Local\{410920E9-32DB-4B38-814C-1BAEE8BEDEFA} O43 - CFD: 10/08/2012 - 19:25:38 - [0] ----D C:\Users\Damien\AppData\Local\{41490DD0-CE80-4A68-BDD3-06D8CCDDCEF1} O43 - CFD: 22/06/2012 - 16:43:44 - [0] ----D C:\Users\Damien\AppData\Local\{41B286D8-5407-49AD-B488-9F9AD6FBD0FB} O43 - CFD: 24/06/2012 - 15:38:10 - [0] ----D C:\Users\Damien\AppData\Local\{42817B71-180A-4073-BB26-A6AEAA576FC2} O43 - CFD: 09/08/2012 - 19:23:42 - [0] ----D C:\Users\Damien\AppData\Local\{42F27589-84FF-42D0-828E-13F96F057D9B} O43 - CFD: 09/08/2012 - 07:22:56 - [0] ----D C:\Users\Damien\AppData\Local\{4476EE68-985B-4693-AC85-C28D98EA2283} O43 - CFD: 16/08/2012 - 22:54:35 - [0] ----D C:\Users\Damien\AppData\Local\{45C371CF-30D2-4C43-B559-F4AA1F4D3E35} O43 - CFD: 22/05/2012 - 07:26:22 - [0] ----D C:\Users\Damien\AppData\Local\{46900FF5-B3A7-4B4E-841A-240134D3A165} O43 - CFD: 10/07/2012 - 21:01:50 - [0] ----D C:\Users\Damien\AppData\Local\{47999AFF-ABB6-4F77-8627-5EAC263B6518} O43 - CFD: 02/04/2012 - 20:01:25 - [0] ----D C:\Users\Damien\AppData\Local\{47D1C8E7-1AFB-471C-A4EE-6C0AD35E581C} O43 - CFD: 17/04/2012 - 17:58:49 - [0] ----D C:\Users\Damien\AppData\Local\{4A0FD677-83F6-4E17-956E-E687733940BA} O43 - CFD: 23/07/2012 - 08:41:31 - [0] ----D C:\Users\Damien\AppData\Local\{4A4D7AF3-4A63-4652-A3A5-B8917DE7A138} O43 - CFD: 07/08/2012 - 09:24:42 - [0] ----D C:\Users\Damien\AppData\Local\{4B38A232-E600-4795-95D6-80B2186CD481} O43 - CFD: 13/04/2012 - 07:43:24 - [0] ----D C:\Users\Damien\AppData\Local\{4B466C2F-6353-4F32-8503-9272AEA9CED8} O43 - CFD: 14/07/2012 - 11:46:16 - [0] ----D C:\Users\Damien\AppData\Local\{4C317CEE-A294-4439-8A93-1569034AA33A} O43 - CFD: 21/07/2012 - 09:57:58 - [0] ----D C:\Users\Damien\AppData\Local\{4CBFB415-A41B-44BD-B99A-18A400B75943} O43 - CFD: 27/05/2012 - 11:06:56 - [0] ----D C:\Users\Damien\AppData\Local\{4E65D46C-0622-4106-ACD1-884B571350A1} O43 - CFD: 22/07/2012 - 18:45:47 - [0] ----D C:\Users\Damien\AppData\Local\{51785A98-6DD4-42B2-80A1-BFF87116256C} O43 - CFD: 03/06/2012 - 20:50:31 - [0] ----D C:\Users\Damien\AppData\Local\{51F5F7A9-B46E-4EB0-813B-1CB481C6CF77} O43 - CFD: 24/07/2012 - 21:12:27 - [0] ----D C:\Users\Damien\AppData\Local\{53109F1F-9682-4222-A76B-5C4BA95B1ECA} O43 - CFD: 09/08/2012 - 19:23:32 - [0] ----D C:\Users\Damien\AppData\Local\{53676391-7DA6-4E78-907E-8648A292707C} O43 - CFD: 03/09/2012 - 17:07:40 - [0] ----D C:\Users\Damien\AppData\Local\{53703EE2-72D7-4EAE-B3FE-60479D2CA494} O43 - CFD: 08/08/2012 - 07:20:59 - [0] ----D C:\Users\Damien\AppData\Local\{53DE6E31-0211-4865-8272-B9262C206BFF} O43 - CFD: 14/06/2012 - 07:50:53 - [0] ----D C:\Users\Damien\AppData\Local\{53E07D9B-7A3F-4DCB-A230-60E6CDFF0253} O43 - CFD: 29/06/2012 - 07:31:59 - [0] ----D C:\Users\Damien\AppData\Local\{54142C4C-E4DF-4702-B7A5-15B7297449B3} O43 - CFD: 02/09/2012 - 14:09:07 - [0] ----D C:\Users\Damien\AppData\Local\{54C45C32-53E8-4486-8E47-C51844391C9C} O43 - CFD: 20/06/2012 - 07:22:57 - [0] ----D C:\Users\Damien\AppData\Local\{557CBF3E-AEB3-48BF-A06A-44BF70D8566F} O43 - CFD: 17/07/2012 - 14:07:50 - [0] ----D C:\Users\Damien\AppData\Local\{5692D10A-7DBF-461D-BBF5-C64F30051A7C} O43 - CFD: 08/07/2012 - 08:46:02 - [0] ----D C:\Users\Damien\AppData\Local\{57369190-21F8-4863-9D5C-DD2D9F358BF2} O43 - CFD: 19/07/2012 - 09:50:48 - [0] ----D C:\Users\Damien\AppData\Local\{58178737-B612-4033-8B42-834C42ED3711} O43 - CFD: 20/05/2012 - 08:27:19 - [0] ----D C:\Users\Damien\AppData\Local\{5B3DC7E7-1783-40D2-99CB-485B9ED71A60} O43 - CFD: 17/07/2012 - 14:08:02 - [0] ----D C:\Users\Damien\AppData\Local\{5C04D1E4-FE6A-48A2-93B0-471C9E4C4EC0} O43 - CFD: 04/06/2012 - 16:51:15 - [0] ----D C:\Users\Damien\AppData\Local\{5D75FDD0-4A9B-43BB-AB53-45466695C614} O43 - CFD: 21/07/2012 - 09:57:48 - [0] ----D C:\Users\Damien\AppData\Local\{5F99812E-78DB-4DFA-8803-CEBE9D49D129} O43 - CFD: 31/03/2012 - 08:40:19 - [0] ----D C:\Users\Damien\AppData\Local\{606A7684-45EA-420D-A8CB-79EA0AC76D60} O43 - CFD: 16/04/2012 - 19:34:25 - [0] ----D C:\Users\Damien\AppData\Local\{6081A10B-267B-4567-B881-BF9AC57EA6D5} O43 - CFD: 27/04/2012 - 17:14:11 - [0] ----D C:\Users\Damien\AppData\Local\{61E34952-5FFB-4383-B76D-C168C3D21943} O43 - CFD: 07/05/2012 - 08:47:24 - [0] ----D C:\Users\Damien\AppData\Local\{624FF9A1-C1E4-490E-8F9B-0295B440085F} O43 - CFD: 19/04/2012 - 11:40:15 - [0] ----D C:\Users\Damien\AppData\Local\{62F0FC94-E0D4-4C18-82B4-AAA0CA9582F9} O43 - CFD: 19/05/2012 - 08:05:06 - [0] ----D C:\Users\Damien\AppData\Local\{6397DC9C-64E6-419B-B55C-83E4CB465005} O43 - CFD: 26/04/2012 - 18:35:44 - [0] ----D C:\Users\Damien\AppData\Local\{63B0B7DB-2752-4405-935F-E14EE18E3A31} O43 - CFD: 17/08/2012 - 11:31:17 - [0] ----D C:\Users\Damien\AppData\Local\{63B2932D-A219-42EB-ACD6-F211702EF0F2} O43 - CFD: 04/05/2012 - 19:32:27 - [0] ----D C:\Users\Damien\AppData\Local\{64E721C7-ACCA-40A0-8E70-8335028E857E} O43 - CFD: 30/06/2012 - 09:15:16 - [0] ----D C:\Users\Damien\AppData\Local\{652575A4-8A42-4BE4-8DC9-B903B3A8C6BF} O43 - CFD: 11/05/2012 - 17:45:39 - [0] ----D C:\Users\Damien\AppData\Local\{65485A4F-B91F-4F1A-9439-5E06A12C3972} O43 - CFD: 12/08/2012 - 09:27:04 - [0] ----D C:\Users\Damien\AppData\Local\{659E578D-877B-4BE2-BCAE-D3DF150B39BA} O43 - CFD: 18/06/2012 - 17:10:37 - [0] ----D C:\Users\Damien\AppData\Local\{65E03AF7-D2A5-4EEE-8CC6-09921613DA0D} O43 - CFD: 30/05/2012 - 22:15:27 - [0] ----D C:\Users\Damien\AppData\Local\{670647CA-46B0-43FA-A4AB-2BC669D5B76F} O43 - CFD: 06/08/2012 - 07:35:34 - [0] ----D C:\Users\Damien\AppData\Local\{672DE6A1-A1C1-4F33-A449-B283EB419B4B} O43 - CFD: 20/06/2012 - 19:25:01 - [0] ----D C:\Users\Damien\AppData\Local\{67C6EF9B-1A61-4BE8-8FFB-625F4FB43E2C} O43 - CFD: 21/04/2012 - 12:47:30 - [0] ----D C:\Users\Damien\AppData\Local\{68B7B640-2800-4ED0-A267-F8AB167D8218} O43 - CFD: 15/08/2012 - 21:32:32 - [0] ----D C:\Users\Damien\AppData\Local\{6944FFC0-38B9-420B-B5F7-38F05550A8A3} O43 - CFD: 05/08/2012 - 12:14:44 - [0] ----D C:\Users\Damien\AppData\Local\{6984A522-413A-4057-A005-DE691D11C17A} O43 - CFD: 21/07/2012 - 21:58:51 - [0] ----D C:\Users\Damien\AppData\Local\{698570D9-D7F7-4D1D-B72E-22DC0F809B44} O43 - CFD: 22/07/2012 - 18:45:35 - [0] ----D C:\Users\Damien\AppData\Local\{6B941AF3-3184-4968-B6C2-CBA2C50BC732} O43 - CFD: 23/07/2012 - 08:41:49 - [0] ----D C:\Users\Damien\AppData\Local\{6C70DFD8-7D26-4E24-9E19-E0F4B3267CBF} O43 - CFD: 08/06/2012 - 16:04:59 - [0] ----D C:\Users\Damien\AppData\Local\{6CAF5782-60F4-4CC4-A624-B94C3729D3FE} O43 - CFD: 17/05/2012 - 09:17:31 - [0] ----D C:\Users\Damien\AppData\Local\{6D54B40A-E581-48C7-98E3-1AA2A3590BA0} O43 - CFD: 25/07/2012 - 18:47:24 - [0] ----D C:\Users\Damien\AppData\Local\{6DCB8F0B-5079-437A-8E5A-84FF6149E230} O43 - CFD: 05/07/2012 - 08:31:38 - [0] ----D C:\Users\Damien\AppData\Local\{6E1FC3D7-9015-4CE2-80E7-54AC16E84516} O43 - CFD: 13/04/2012 - 20:02:21 - [0] ----D C:\Users\Damien\AppData\Local\{6E416425-28D8-4801-AA0A-DA377D2E55E4} O43 - CFD: 24/04/2012 - 18:29:27 - [0] ----D C:\Users\Damien\AppData\Local\{6EBBAAE3-2656-47DA-B413-A7E052E73DC2} O43 - CFD: 07/08/2012 - 09:24:52 - [0] ----D C:\Users\Damien\AppData\Local\{6F6113C3-0C4B-4BD1-A87F-09E35B06FF5A} O43 - CFD: 18/05/2012 - 13:33:41 - [0] ----D C:\Users\Damien\AppData\Local\{6F9E449A-7748-41A8-8170-7DAD7DE15A12} O43 - CFD: 13/06/2012 - 06:44:33 - [0] ----D C:\Users\Damien\AppData\Local\{705E0467-8209-4743-BCE3-E50D37DAEF7C} O43 - CFD: 09/09/2012 - 18:52:06 - [0] ----D C:\Users\Damien\AppData\Local\{7200FFD8-9FEC-4F66-BE33-BDD5ED26CC57} O43 - CFD: 23/05/2012 - 19:10:20 - [0] ----D C:\Users\Damien\AppData\Local\{72474191-32A8-448E-A666-3CDAB680F39D} O43 - CFD: 16/08/2012 - 09:33:50 - [0] ----D C:\Users\Damien\AppData\Local\{72C0112E-18CF-4A61-AFC2-C1CC42F714BB} O43 - CFD: 04/05/2012 - 19:32:58 - [0] ----D C:\Users\Damien\AppData\Local\{72D5AEA0-AB52-4467-B48E-968087298B26} O43 - CFD: 24/04/2012 - 18:29:16 - [0] ----D C:\Users\Damien\AppData\Local\{74EDCB3C-64EA-4555-B531-DAD593CFDE10} O43 - CFD: 29/03/2012 - 21:14:32 - [0] ----D C:\Users\Damien\AppData\Local\{7609DE9C-2E2D-4A03-B7A3-2962F74B049A} O43 - CFD: 09/07/2012 - 18:51:58 - [0] ----D C:\Users\Damien\AppData\Local\{774ABC6F-500F-44C4-B5AB-30DC890DB9CF} O43 - CFD: 27/06/2012 - 19:16:20 - [0] ----D C:\Users\Damien\AppData\Local\{7872BBC4-7A10-4568-B20D-27DD4E278F64} O43 - CFD: 09/06/2012 - 09:02:35 - [0] ----D C:\Users\Damien\AppData\Local\{7882017B-E447-42AE-8294-186200DF888F} O43 - CFD: 25/05/2012 - 21:10:40 - [0] ----D C:\Users\Damien\AppData\Local\{7926E063-4DBC-4B2B-8752-D852E4532A1F} O43 - CFD: 04/05/2012 - 07:17:55 - [0] ----D C:\Users\Damien\AppData\Local\{79937A6D-6788-4413-B22F-ED4B82821C97} O43 - CFD: 08/08/2012 - 19:21:50 - [0] ----D C:\Users\Damien\AppData\Local\{79EF041D-0920-4054-8167-996A873ADE5F} O43 - CFD: 16/05/2012 - 09:34:32 - [0] ----D C:\Users\Damien\AppData\Local\{7A2AB387-B503-421B-B77E-1370FEC3BD8D} O43 - CFD: 31/07/2012 - 20:37:29 - [0] ----D C:\Users\Damien\AppData\Local\{7B7C060D-A70B-44EC-8141-86632BF06908} O43 - CFD: 18/08/2012 - 10:09:17 - [0] ----D C:\Users\Damien\AppData\Local\{7B9C1379-0102-4077-9CC9-182CFB2E9320} O43 - CFD: 14/06/2012 - 20:58:22 - [0] ----D C:\Users\Damien\AppData\Local\{7BC25D7C-6E28-48CF-9FD1-D4C24C02CE1E} O43 - CFD: 15/05/2012 - 21:01:00 - [0] ----D C:\Users\Damien\AppData\Local\{7C67C899-EBB8-4CA3-B382-B1774B9BDA60} O43 - CFD: 17/04/2012 - 17:59:10 - [0] ----D C:\Users\Damien\AppData\Local\{7D235F5E-8370-4999-B02A-8AD246C2D443} O43 - CFD: 19/08/2012 - 11:27:33 - [0] ----D C:\Users\Damien\AppData\Local\{7D3C7B5B-9D2F-4C1A-BE5A-EC367995684E} O43 - CFD: 25/04/2012 - 06:30:58 - [0] ----D C:\Users\Damien\AppData\Local\{7D84CB4E-7DD2-4318-AB57-A3DB8B5B3EA1} O43 - CFD: 14/08/2012 - 08:16:09 - [0] ----D C:\Users\Damien\AppData\Local\{7ED9D34E-5C9E-44A8-A5CC-3F03AAABBB85} O43 - CFD: 23/06/2012 - 08:39:51 - [0] ----D C:\Users\Damien\AppData\Local\{80027DBC-60E5-45CE-A9A4-B572E01D5634} O43 - CFD: 24/05/2012 - 20:28:41 - [0] ----D C:\Users\Damien\AppData\Local\{81E7C474-6861-40AB-AF3D-3832AD66298D} O43 - CFD: 06/08/2012 - 19:36:51 - [0] ----D C:\Users\Damien\AppData\Local\{81E9AC2F-4125-47BB-BAE0-F0E519DBDF13} O43 - CFD: 01/08/2012 - 16:37:14 - [0] ----D C:\Users\Damien\AppData\Local\{826CBC70-6499-4672-ADC6-671D30B08597} O43 - CFD: 22/08/2012 - 20:08:24 - [0] ----D C:\Users\Damien\AppData\Local\{8401CCBA-CF44-45C8-82F5-DC264883A0CB} O43 - CFD: 07/06/2012 - 19:58:45 - [0] ----D C:\Users\Damien\AppData\Local\{840E267F-6E46-47B0-BA29-840D68C79C41} O43 - CFD: 11/07/2012 - 17:21:03 - [0] ----D C:\Users\Damien\AppData\Local\{84FEC52D-B1FC-4D08-AE9A-5BAFBADDB0B4} O43 - CFD: 07/07/2012 - 12:39:13 - [0] ----D C:\Users\Damien\AppData\Local\{84FF99D4-409C-49EB-91F0-F8257657AA19} O43 - CFD: 10/08/2012 - 07:24:50 - [0] ----D C:\Users\Damien\AppData\Local\{872009C0-BC2C-4D38-9B56-B6CB4BB7E021} O43 - CFD: 19/07/2012 - 21:54:10 - [0] ----D C:\Users\Damien\AppData\Local\{87252BAF-2307-4A5F-A783-4087F3DDDE50} O43 - CFD: 31/05/2012 - 18:31:57 - [0] ----D C:\Users\Damien\AppData\Local\{89095928-9AD9-4FB2-83B4-B9F0E3DFD371} O43 - CFD: 12/08/2012 - 22:12:30 - [0] ----D C:\Users\Damien\AppData\Local\{8913A415-7696-4D3B-8EBB-AA1B5EB4A4D4} O43 - CFD: 03/07/2012 - 19:18:20 - [0] ----D C:\Users\Damien\AppData\Local\{8918AF63-7D05-45C4-9BD5-46F3BC018E55} O43 - CFD: 27/05/2012 - 11:07:41 - [0] ----D C:\Users\Damien\AppData\Local\{892A754C-B381-432B-B96D-6AA2CB502693} O43 - CFD: 03/06/2012 - 20:50:20 - [0] ----D C:\Users\Damien\AppData\Local\{893AA197-D21A-4537-AD4E-DDB6C40A4F10} O43 - CFD: 28/06/2012 - 17:46:08 - [0] ----D C:\Users\Damien\AppData\Local\{899C4CD4-0DE6-41AB-A581-F359DDCA3C7E} O43 - CFD: 20/08/2012 - 20:17:25 - [0] ----D C:\Users\Damien\AppData\Local\{89B0F132-5294-4815-8571-3BF3292A9FD5} O43 - CFD: 21/06/2012 - 09:31:57 - [0] ----D C:\Users\Damien\AppData\Local\{8A576BE8-8333-482C-A592-6F6FE5941D7F} O43 - CFD: 24/06/2012 - 15:37:44 - [0] ----D C:\Users\Damien\AppData\Local\{8A70B338-2C19-465A-9A52-5115FFD3259C} O43 - CFD: 20/07/2012 - 09:55:26 - [0] ----D C:\Users\Damien\AppData\Local\{8AB67185-DA86-4DC4-9756-AEEE16A9C03D} O43 - CFD: 16/08/2012 - 09:33:41 - [0] ----D C:\Users\Damien\AppData\Local\{8B21E23C-C833-4330-B1ED-9191F422E83B} O43 - CFD: 03/07/2012 - 07:17:08 - [0] ----D C:\Users\Damien\AppData\Local\{8CE2B2E7-F036-40E2-A0B4-DA71CAD2B22C} O43 - CFD: 26/06/2012 - 18:40:22 - [0] ----D C:\Users\Damien\AppData\Local\{8D85F4C9-FDF8-40B5-BE62-597A8EDAD51A} O43 - CFD: 23/04/2012 - 17:38:53 - [0] ----D C:\Users\Damien\AppData\Local\{8FA2A6EF-4BE2-482F-87D5-F8B86941834D} O43 - CFD: 11/08/2012 - 09:16:38 - [0] ----D C:\Users\Damien\AppData\Local\{8FFE6052-7824-403C-93BB-F17CEE19D777} O43 - CFD: 19/07/2012 - 09:50:58 - [0] ----D C:\Users\Damien\AppData\Local\{9149BD36-DFCD-4760-9B39-7189434B1F6B} O43 - CFD: 19/06/2012 - 19:01:15 - [0] ----D C:\Users\Damien\AppData\Local\{91A6D82F-E288-4C57-8E44-C3D8B8312E3C} O43 - CFD: 15/08/2012 - 09:22:52 - [0] ----D C:\Users\Damien\AppData\Local\{91DD1F99-20B6-40D6-AE64-26D6DA638FAB} O43 - CFD: 18/04/2012 - 08:30:12 - [0] ----D C:\Users\Damien\AppData\Local\{91E7471B-6C9D-4305-800E-5AFC9F22D2F0} O43 - CFD: 29/06/2012 - 19:32:54 - [0] ----D C:\Users\Damien\AppData\Local\{93A39391-C196-4146-8393-D1203E1EE1D7} O43 - CFD: 04/07/2012 - 20:17:38 - [0] ----D C:\Users\Damien\AppData\Local\{93E046F8-F874-4956-AEA4-4C090D6186D3} O43 - CFD: 14/05/2012 - 19:05:55 - [0] ----D C:\Users\Damien\AppData\Local\{94368418-F976-40C3-96D4-3A6F7DBC9034} O43 - CFD: 20/05/2012 - 08:27:46 - [0] ----D C:\Users\Damien\AppData\Local\{95C03EC6-F865-4434-A2EB-92127327DBFF} O43 - CFD: 21/05/2012 - 16:52:49 - [0] ----D C:\Users\Damien\AppData\Local\{966728D6-C24B-4189-967C-287F4D230B6B} O43 - CFD: 15/08/2012 - 09:23:04 - [0] ----D C:\Users\Damien\AppData\Local\{96F1FD2C-89ED-4651-9B08-35BBD04BBE76} O43 - CFD: 01/05/2012 - 21:09:25 - [0] ----D C:\Users\Damien\AppData\Local\{97531D24-A365-447B-AAF2-3C154A64A5C7} O43 - CFD: 06/09/2012 - 05:34:44 - [0] ----D C:\Users\Damien\AppData\Local\{98A71FE3-EEC1-4B42-9BF8-282CDCCBA624} O43 - CFD: 30/08/2012 - 19:44:33 - [0] ----D C:\Users\Damien\AppData\Local\{99233C72-3A20-40D9-8D02-AB4CF5EDBF4F} O43 - CFD: 16/06/2012 - 11:22:35 - [0] ----D C:\Users\Damien\AppData\Local\{9A03A86F-3554-43DA-B456-7AB55812C361} O43 - CFD: 12/08/2012 - 09:27:16 - [0] ----D C:\Users\Damien\AppData\Local\{9A056543-F1F6-4D29-A2E5-62F17F0E00E3} O43 - CFD: 18/07/2012 - 18:39:54 - [0] ----D C:\Users\Damien\AppData\Local\{9A0599DB-7412-4891-96E0-00592DF09840} O43 - CFD: 24/05/2012 - 08:27:04 - [0] ----D C:\Users\Damien\AppData\Local\{9A310012-B42C-48F9-B93B-F65949B01F19} O43 - CFD: 08/05/2012 - 07:55:53 - [0] ----D C:\Users\Damien\AppData\Local\{9A89F918-E6F0-44D8-A4C5-4665821AE464} O43 - CFD: 25/07/2012 - 18:47:14 - [0] ----D C:\Users\Damien\AppData\Local\{9B38E555-86E6-4AB9-84B0-03C5F6E95F94} O43 - CFD: 03/07/2012 - 19:18:10 - [0] ----D C:\Users\Damien\AppData\Local\{9B583EBC-1172-4AE7-9A60-9C0A4FFAFED0} O43 - CFD: 26/04/2012 - 18:35:22 - [0] ----D C:\Users\Damien\AppData\Local\{9B64FD1A-FC62-4988-9DD5-20DDA2C22168} O43 - CFD: 02/05/2012 - 18:42:35 - [0] ----D C:\Users\Damien\AppData\Local\{9C43C9BE-A08C-4F49-A4B7-8DAE29CB14F4} O43 - CFD: 29/04/2012 - 15:04:09 - [0] ----D C:\Users\Damien\AppData\Local\{9C77CD26-B3FF-44A6-B9DD-5DFC140A6432} O43 - CFD: 18/07/2012 - 18:39:44 - [0] ----D C:\Users\Damien\AppData\Local\{9D99DE29-507C-43D5-B42C-FC98DD74D493} O43 - CFD: 10/08/2012 - 19:25:48 - [0] ----D C:\Users\Damien\AppData\Local\{9FF227BA-0522-4990-B7E5-80AC1C06A953} O43 - CFD: 21/04/2012 - 08:57:01 - [0] ----D C:\Users\Damien\AppData\Local\{A01CD6AB-D321-4026-9EAD-DA17BD6D039C} O43 - CFD: 10/08/2012 - 07:24:40 - [0] ----D C:\Users\Damien\AppData\Local\{A04BAAE8-C79F-46ED-93B3-4577C2F91887} O43 - CFD: 05/06/2012 - 15:47:31 - [0] ----D C:\Users\Damien\AppData\Local\{A26C1050-4CE6-45E8-AF8D-163E8DFC2B1D} O43 - CFD: 15/04/2012 - 07:32:45 - [0] ----D C:\Users\Damien\AppData\Local\{A400D44C-832D-401F-B803-88B134412A65} O43 - CFD: 14/06/2012 - 20:59:10 - [0] ----D C:\Users\Damien\AppData\Local\{A53A34E5-982B-4650-BFD4-129FDF984923} O43 - CFD: 14/04/2012 - 08:27:52 - [0] ----D C:\Users\Damien\AppData\Local\{A567185C-2102-4B18-846F-A77ACA816B1C} O43 - CFD: 18/08/2012 - 22:10:53 - [0] ----D C:\Users\Damien\AppData\Local\{A5861B8A-6EB1-494F-B3C1-88F5692EF4DF} O43 - CFD: 22/05/2012 - 07:25:55 - [0] ----D C:\Users\Damien\AppData\Local\{A5F78C66-932D-404B-9455-7BE45A6589AF} O43 - CFD: 29/04/2012 - 14:25:42 - [0] ----D C:\Users\Damien\AppData\Local\{A60D039E-B075-4BA6-8A45-F5C9754A3A7B} O43 - CFD: 04/08/2012 - 10:16:21 - [0] ----D C:\Users\Damien\AppData\Local\{A6D1C5EF-AB9B-4877-B5AA-4228A2D1B504} O43 - CFD: 22/05/2012 - 19:27:35 - [0] ----D C:\Users\Damien\AppData\Local\{A7DA1613-057C-4890-907A-D43C39DC0AA2} O43 - CFD: 19/04/2012 - 11:40:03 - [0] ----D C:\Users\Damien\AppData\Local\{A856E095-5979-4AD8-A834-255433FFB0AB} O43 - CFD: 03/05/2012 - 17:50:17 - [0] ----D C:\Users\Damien\AppData\Local\{A94153F8-BE15-4860-ADB6-00B07CAC6268} O43 - CFD: 26/07/2012 - 07:30:46 - [0] ----D C:\Users\Damien\AppData\Local\{A9C9A333-F437-4A94-B343-15F434A6DCF4} O43 - CFD: 20/05/2012 - 08:24:06 - [0] ----D C:\Users\Damien\AppData\Local\{AAC5B0AE-7751-4657-AF8C-F840385490EC} O43 - CFD: 21/08/2012 - 13:50:34 - [0] ----D C:\Users\Damien\AppData\Local\{AE3BE5A6-25AB-42AD-A384-3DBF04C27CF1} O43 - CFD: 01/08/2012 - 16:37:03 - [0] ----D C:\Users\Damien\AppData\Local\{AF7A5BE3-32C4-48EE-86D5-098BFB10F4C4} O43 - CFD: 01/05/2012 - 21:09:35 - [0] ----D C:\Users\Damien\AppData\Local\{B10886E8-CB28-4172-94F8-C73E7FFD89CE} O43 - CFD: 23/04/2012 - 17:39:29 - [0] ----D C:\Users\Damien\AppData\Local\{B1AD8BDC-8D36-4EEA-A91E-F94421D1E6F3} O43 - CFD: 07/07/2012 - 12:39:02 - [0] ----D C:\Users\Damien\AppData\Local\{B1C1C768-81B0-4BB6-8827-B02E8C5ACF2D} O43 - CFD: 22/06/2012 - 16:42:47 - [0] ----D C:\Users\Damien\AppData\Local\{B2EAD33B-7B19-42EA-83EE-CA3F66AEC0FF} O43 - CFD: 09/05/2012 - 17:43:27 - [0] ----D C:\Users\Damien\AppData\Local\{B38F0791-8A45-4AFD-895E-9C1C37107CD8} O43 - CFD: 21/07/2012 - 21:59:01 - [0] ----D C:\Users\Damien\AppData\Local\{B3BF65A2-1BAC-495C-AC28-2CEBDAD6D81B} O43 - CFD: 02/06/2012 - 10:31:22 - [0] ----D C:\Users\Damien\AppData\Local\{B420A17E-A47D-4A75-AEF5-F631937DC53F} O43 - CFD: 30/04/2012 - 07:36:56 - [0] ----D C:\Users\Damien\AppData\Local\{B53DBF57-3C93-48EC-811E-67DCC37D9AB4} O43 - CFD: 30/09/2012 - 20:35:18 - [0] ----D C:\Users\Damien\AppData\Local\{B676CC15-25EB-42D6-8DFD-0F86D83DE33A} O43 - CFD: 01/04/2012 - 17:19:08 - [0] ----D C:\Users\Damien\AppData\Local\{B74639D4-20F5-4BBF-86EB-A35AE33B19F5} O43 - CFD: 11/05/2012 - 17:46:29 - [0] ----D C:\Users\Damien\AppData\Local\{B7DA6502-F4D2-424D-9B93-F861965D5744} O43 - CFD: 21/12/2012 - 12:39:12 - [0] ----D C:\Users\Damien\AppData\Local\{B8076763-6747-4DC6-A0D0-12216B205462} O43 - CFD: 08/07/2012 - 21:06:47 - [0] ----D C:\Users\Damien\AppData\Local\{B8DCC574-3D45-4958-83BE-2925F7C580A1} O43 - CFD: 12/05/2012 - 09:00:34 - [0] ----D C:\Users\Damien\AppData\Local\{B94662E1-0CFC-4E9F-A83D-F00D9CCCCE2F} O43 - CFD: 23/06/2012 - 08:39:09 - [0] ----D C:\Users\Damien\AppData\Local\{BB704F51-4DFB-4C66-BB5C-5436664245B3} O43 - CFD: 04/04/2012 - 18:17:32 - [0] ----D C:\Users\Damien\AppData\Local\{BBD73769-D2C1-4399-97BF-88736910C81E} O43 - CFD: 01/05/2012 - 09:01:25 - [0] ----D C:\Users\Damien\AppData\Local\{BC46CFAF-9242-4F3A-BEC1-ABE9596FC2F1} O43 - CFD: 02/07/2012 - 17:50:56 - [0] ----D C:\Users\Damien\AppData\Local\{BCF651C2-3B5C-4B7F-979D-E8E45CDA29C9} O43 - CFD: 15/08/2012 - 21:32:42 - [0] ----D C:\Users\Damien\AppData\Local\{BDBFE944-95F3-4D79-A84A-F8A530729B77} O43 - CFD: 06/05/2012 - 10:53:40 - [0] ----D C:\Users\Damien\AppData\Local\{BEA5E8EE-E1AA-453A-BF2A-0F80BCF8BD86} O43 - CFD: 12/04/2012 - 18:48:13 - [0] ----D C:\Users\Damien\AppData\Local\{BEB89445-B469-439A-9FB2-4BE352587180} O43 - CFD: 18/04/2012 - 18:18:08 - [0] ----D C:\Users\Damien\AppData\Local\{BF0D1198-FA18-4C01-B571-DFB9B8B09EC7} O43 - CFD: 11/04/2012 - 18:22:27 - [0] ----D C:\Users\Damien\AppData\Local\{BFCDA23E-406E-466D-8F00-AC6E9383C83A} O43 - CFD: 05/06/2012 - 19:57:34 - [0] ----D C:\Users\Damien\AppData\Local\{C08D3DDE-C943-4B30-9A02-B9A4DD3B5467} O43 - CFD: 03/08/2012 - 18:05:59 - [0] ----D C:\Users\Damien\AppData\Local\{C0C64752-B31C-4348-B7A2-3AAA0E7F6E4A} O43 - CFD: 24/05/2012 - 08:26:36 - [0] ----D C:\Users\Damien\AppData\Local\{C1F263B1-B4D5-44D9-9FC3-AE3AC2F63D17} O43 - CFD: 28/04/2012 - 11:34:07 - [0] ----D C:\Users\Damien\AppData\Local\{C2902F65-CF16-45DC-9C3B-3FB11A1080C3} O43 - CFD: 13/04/2012 - 18:33:57 - [0] ----D C:\Users\Damien\AppData\Local\{C2F4CBAC-2D03-498D-BFAB-B24D1C095224} O43 - CFD: 30/07/2012 - 09:13:21 - [0] ----D C:\Users\Damien\AppData\Local\{C528E1A5-E7E5-48F1-8E44-063AC3E208CF} O43 - CFD: 21/04/2012 - 17:15:20 - [0] ----D C:\Users\Damien\AppData\Local\{C5C8FF57-9D72-41E7-9F4C-0EBAE12A229D} O43 - CFD: 31/05/2012 - 18:32:26 - [0] ----D C:\Users\Damien\AppData\Local\{C6F2E55E-85BB-419D-A6E5-242C91A42DD3} O43 - CFD: 20/06/2012 - 07:24:06 - [0] ----D C:\Users\Damien\AppData\Local\{C7256C6C-1292-469B-9714-8C473E07D0D0} O43 - CFD: 27/07/2012 - 08:51:31 - [0] ----D C:\Users\Damien\AppData\Local\{C7E4628A-A88B-42A8-8786-F65197F2229B} O43 - CFD: 14/07/2012 - 11:46:04 - [0] ----D C:\Users\Damien\AppData\Local\{C7FB66AA-28E1-4CE9-B61F-49F6F1D61B97} O43 - CFD: 14/04/2012 - 08:27:40 - [0] ----D C:\Users\Damien\AppData\Local\{CA7C9D05-9BEF-42B9-9B8E-E217AA52DBD8} O43 - CFD: 13/08/2012 - 19:00:08 - [0] ----D C:\Users\Damien\AppData\Local\{CBE5B2A6-5624-42F7-A0AB-4C0D6399F24F} O43 - CFD: 05/05/2012 - 20:28:03 - [0] ----D C:\Users\Damien\AppData\Local\{CC00FEA9-7226-4ED0-A56C-5DD089D5B361} O43 - CFD: 26/05/2012 - 10:44:05 - [0] ----D C:\Users\Damien\AppData\Local\{CD180AE2-218A-49C8-BCA5-B37C87C82D1A} O43 - CFD: 13/05/2012 - 09:52:01 - [0] ----D C:\Users\Damien\AppData\Local\{CD4F2932-8976-4384-A329-9F93563429CB} O43 - CFD: 28/07/2012 - 08:30:21 - [0] ----D C:\Users\Damien\AppData\Local\{CF3BB8E7-74D3-4C31-9DE0-486ED5E17255} O43 - CFD: 01/07/2012 - 10:38:03 - [0] ----D C:\Users\Damien\AppData\Local\{CFCDA3B7-FE8E-40E8-A75C-F76D93BCBD88} O43 - CFD: 06/07/2012 - 08:33:52 - [0] ----D C:\Users\Damien\AppData\Local\{CFE0FEA0-02F2-4B30-AB4A-20B0E6D37F65} O43 - CFD: 22/04/2012 - 15:10:50 - [0] ----D C:\Users\Damien\AppData\Local\{D14EE081-0E9C-431E-943B-3363F34E001E} O43 - CFD: 30/07/2012 - 21:14:34 - [0] ----D C:\Users\Damien\AppData\Local\{D155B016-5FA4-44A7-A667-72BBC309743B} O43 - CFD: 25/04/2012 - 18:32:25 - [0] ----D C:\Users\Damien\AppData\Local\{D1A041CA-0DC3-43B0-A71E-E84F74DA9C88} O43 - CFD: 27/06/2012 - 19:15:13 - [0] ----D C:\Users\Damien\AppData\Local\{D1A9D48A-2C46-4810-8100-E1D928B48EB2} O43 - CFD: 14/05/2012 - 19:06:23 - [0] ----D C:\Users\Damien\AppData\Local\{D1CE6F01-9EF4-44DF-9683-304B6E2ADB9B} O43 - CFD: 25/04/2012 - 06:30:48 - [0] ----D C:\Users\Damien\AppData\Local\{D2413EFC-43C2-4EDE-A12A-58D3549D3B04} O43 - CFD: 21/04/2012 - 12:00:51 - [0] ----D C:\Users\Damien\AppData\Local\{D45C33B2-5D7A-4029-8686-912CDBC8970A} O43 - CFD: 04/05/2012 - 07:16:50 - [0] ----D C:\Users\Damien\AppData\Local\{D69DE69A-E842-42DE-AA75-0B233739533F} O43 - CFD: 30/07/2012 - 09:13:33 - [0] ----D C:\Users\Damien\AppData\Local\{D73F2149-1D29-4EF4-9684-B12AAF4B1332} O43 - CFD: 12/07/2012 - 16:05:36 - [0] ----D C:\Users\Damien\AppData\Local\{D8E44FC0-6235-408A-90D7-D7B4494E315D} O43 - CFD: 30/05/2012 - 22:16:10 - [0] ----D C:\Users\Damien\AppData\Local\{DA465332-DF35-4759-B7DB-5242F958836A} O43 - CFD: 17/05/2012 - 09:16:38 - [0] ----D C:\Users\Damien\AppData\Local\{DA7F3625-109F-4148-A211-14FBCB1D93EC} O43 - CFD: 19/06/2012 - 07:00:07 - [0] ----D C:\Users\Damien\AppData\Local\{DAE88EF1-D8D9-4FEE-A16D-8C12CC3FBAE4} O43 - CFD: 06/06/2012 - 15:53:06 - [0] ----D C:\Users\Damien\AppData\Local\{DAFEF7DB-25B6-4C72-B4D8-7F1575533650} O43 - CFD: 01/06/2012 - 17:29:31 - [0] ----D C:\Users\Damien\AppData\Local\{DB27FA7B-E1A8-4A59-A061-42624353FFA4} O43 - CFD: 13/08/2012 - 18:59:58 - [0] ----D C:\Users\Damien\AppData\Local\{DB976607-3139-44B6-B402-0720B7A18DEA} O43 - CFD: 26/04/2012 - 06:33:39 - [0] ----D C:\Users\Damien\AppData\Local\{DBC13675-F4B6-4463-A564-1BDF03AEA256} O43 - CFD: 18/05/2012 - 17:22:07 - [0] ----D C:\Users\Damien\AppData\Local\{DC062A19-690F-41AD-8CD7-DCF3514C6518} O43 - CFD: 26/05/2012 - 10:44:25 - [0] ----D C:\Users\Damien\AppData\Local\{DC36D3B7-1963-43F2-A66E-CA1B97D4CC7E} O43 - CFD: 03/04/2012 - 18:45:11 - [0] ----D C:\Users\Damien\AppData\Local\{DC5E5AEC-CC51-4BD5-9C0E-35631C6ED3DC} O43 - CFD: 21/04/2012 - 12:00:40 - [0] ----D C:\Users\Damien\AppData\Local\{DC7E0786-F12D-4EDC-875C-8EE7CF74CB46} O43 - CFD: 09/04/2012 - 09:10:26 - [0] ----D C:\Users\Damien\AppData\Local\{DCE6BB54-0304-47A2-9B38-07B340C0D5C4} O43 - CFD: 06/08/2012 - 07:35:44 - [0] ----D C:\Users\Damien\AppData\Local\{DD7F1918-69C6-4774-90F3-FEB898192FFE} O43 - CFD: 02/07/2012 - 17:50:45 - [0] ----D C:\Users\Damien\AppData\Local\{DE2D1D14-C056-4754-B512-F2F1546ADC2E} O43 - CFD: 26/06/2012 - 06:38:17 - [0] ----D C:\Users\Damien\AppData\Local\{DE33577F-CAD2-482F-A61A-2009415A2785} O43 - CFD: 29/06/2012 - 19:33:04 - [0] ----D C:\Users\Damien\AppData\Local\{DF6C1AF5-0FE8-4AAA-88B0-FE3DF3FBDBD3} O43 - CFD: 24/07/2012 - 09:11:31 - [0] ----D C:\Users\Damien\AppData\Local\{E0DAC999-583E-4131-A484-1616C7FAE745} O43 - CFD: 15/07/2012 - 10:16:30 - [0] ----D C:\Users\Damien\AppData\Local\{E13CEB5B-4A3B-473A-937D-20202693D854} O43 - CFD: 01/07/2012 - 10:37:52 - [0] ----D C:\Users\Damien\AppData\Local\{E20E4D5C-0F32-4145-9742-A613E9B9AC04} O43 - CFD: 20/06/2012 - 19:25:11 - [0] ----D C:\Users\Damien\AppData\Local\{E2E49182-8407-4FF6-BACB-BE6FDD2EFCDB} O43 - CFD: 03/06/2012 - 08:48:36 - [0] ----D C:\Users\Damien\AppData\Local\{E2E51BD5-FF62-45F2-AF45-F67FBCC92E6A} O43 - CFD: 07/06/2012 - 19:59:07 - [0] ----D C:\Users\Damien\AppData\Local\{E2F262BE-2304-4ECA-9798-C6899E82E8E1} O43 - CFD: 25/04/2012 - 18:32:15 - [0] ----D C:\Users\Damien\AppData\Local\{E35D2F92-1845-4FCB-A85B-2F77FDC19EDA} O43 - CFD: 13/07/2012 - 18:02:30 - [0] ----D C:\Users\Damien\AppData\Local\{E3D76CCA-910D-48CD-8582-4A263390DDF7} O43 - CFD: 13/06/2012 - 19:23:23 - [0] ----D C:\Users\Damien\AppData\Local\{E4A38846-2F85-4CE5-8D1F-57B5D3AE1CFA} O43 - CFD: 09/07/2012 - 18:52:09 - [0] ----D C:\Users\Damien\AppData\Local\{E4D8343F-FEB4-4C8D-9326-240EFABFA684} O43 - CFD: 05/05/2012 - 20:27:53 - [0] ----D C:\Users\Damien\AppData\Local\{E623F67A-C184-4FB1-A5D4-367ECFE50D9A} O43 - CFD: 03/06/2012 - 08:49:18 - [0] ----D C:\Users\Damien\AppData\Local\{E723C709-34EE-4284-B8F6-0081485E73AC} O43 - CFD: 10/04/2012 - 09:36:13 - [0] ----D C:\Users\Damien\AppData\Local\{E7355A6F-BF1A-4EBC-92BE-A591D4A4AC3C} O43 - CFD: 15/05/2012 - 21:01:48 - [0] ----D C:\Users\Damien\AppData\Local\{E742A58D-C231-45F1-B0F6-253545C1B40A} O43 - CFD: 22/04/2012 - 15:10:40 - [0] ----D C:\Users\Damien\AppData\Local\{E770FDF2-F5B7-4F1F-8B8A-49D8FC73E505} O43 - CFD: 28/04/2012 - 11:34:42 - [0] ----D C:\Users\Damien\AppData\Local\{E7B252B7-CFBD-4739-8734-55406D952EE9} O43 - CFD: 22/08/2012 - 08:08:02 - [0] ----D C:\Users\Damien\AppData\Local\{E7F71344-1D5B-47AB-AED7-511D8F473394} O43 - CFD: 19/07/2012 - 21:54:20 - [0] ----D C:\Users\Damien\AppData\Local\{E7FD753D-8B90-4ED2-89A9-3A780C861424} O43 - CFD: 02/05/2012 - 18:42:01 - [0] ----D C:\Users\Damien\AppData\Local\{E8360FD6-3A8E-4FF4-9C90-62B2365C5169} O43 - CFD: 18/08/2012 - 22:10:43 - [0] ----D C:\Users\Damien\AppData\Local\{E877676F-BD1B-48F5-9C57-97A868525663} O43 - CFD: 05/07/2012 - 20:32:49 - [0] ----D C:\Users\Damien\AppData\Local\{E935CACD-3026-4BA3-AF8A-9A155001D9D6} O43 - CFD: 18/08/2012 - 10:09:07 - [0] ----D C:\Users\Damien\AppData\Local\{EB59D66C-8DDB-45B5-9983-42937133DAA1} O43 - CFD: 24/09/2012 - 18:25:08 - [0] ----D C:\Users\Damien\AppData\Local\{EBECBBC3-C2BC-4B1C-8F94-866F715D8F14} O43 - CFD: 11/08/2012 - 09:16:27 - [0] ----D C:\Users\Damien\AppData\Local\{EC21F584-2D0C-4F89-AD2C-FFC9D28F09DD} O43 - CFD: 05/04/2012 - 17:48:30 - [0] ----D C:\Users\Damien\AppData\Local\{ECD21021-92A6-4A47-A5FA-026E75A124E3} O43 - CFD: 28/06/2012 - 17:47:28 - [0] ----D C:\Users\Damien\AppData\Local\{ED7BA89D-E1D6-487B-92EF-E44219AADFD2} O43 - CFD: 21/04/2012 - 08:56:51 - [0] ----D C:\Users\Damien\AppData\Local\{EDAFB123-B5BB-4951-9E2B-3E62EEA6E358} O43 - CFD: 24/07/2012 - 21:12:37 - [0] ----D C:\Users\Damien\AppData\Local\{EF337D27-1A44-48C9-A0E6-27D5D969ED51} O43 - CFD: 07/04/2012 - 09:01:25 - [0] ----D C:\Users\Damien\AppData\Local\{EF36BF48-1FC4-4916-8A65-08EAEA92D2A7} O43 - CFD: 04/08/2012 - 10:16:10 - [0] ----D C:\Users\Damien\AppData\Local\{F026A068-69A0-4826-B9EC-EA961C6DF26D} O43 - CFD: 16/04/2012 - 19:34:35 - [0] ----D C:\Users\Damien\AppData\Local\{F04CCEB4-366A-45C1-BD40-F62DD9F779CC} O43 - CFD: 19/06/2012 - 19:01:06 - [0] ----D C:\Users\Damien\AppData\Local\{F12FA2C3-459B-4D0B-893E-D6DEF640B9E2} O43 - CFD: 07/06/2012 - 05:50:24 - [0] ----D C:\Users\Damien\AppData\Local\{F25832FD-DA4A-4110-BD00-0ABB0830480E} O43 - CFD: 30/10/2012 - 20:17:46 - [0] ----D C:\Users\Damien\AppData\Local\{F2DA3BFC-2CE9-478C-9BD8-7F6CA99EC4C0} O43 - CFD: 13/05/2012 - 09:52:45 - [0] ----D C:\Users\Damien\AppData\Local\{F40A77A2-292A-4A68-9ED7-A30CCB443AF3} O43 - CFD: 03/12/2012 - 13:02:35 - [0] ----D C:\Users\Damien\AppData\Local\{F52F96C7-E850-4D36-93C2-A60B6D9CB40A} O43 - CFD: 17/04/2012 - 17:58:36 - [0] ----D C:\Users\Damien\AppData\Local\{F585A0DC-9486-43F3-BAFD-8306727FB75E} O43 - CFD: 12/08/2012 - 22:12:40 - [0] ----D C:\Users\Damien\AppData\Local\{F6ED9233-9CD2-43AF-A5A7-C23AB56C97B1} O43 - CFD: 05/06/2012 - 19:58:13 - [0] ----D C:\Users\Damien\AppData\Local\{F74008BD-8903-4AD6-9FB7-FA289A130E13} O43 - CFD: 30/07/2012 - 21:14:43 - [0] ----D C:\Users\Damien\AppData\Local\{F791C14B-25BE-4968-952F-AAD3E2E3FF79} O43 - CFD: 25/05/2012 - 21:11:17 - [0] ----D C:\Users\Damien\AppData\Local\{F8263543-81D4-447D-BA46-8DBCB12883AB} O43 - CFD: 27/03/2012 - 20:02:22 - [0] ----D C:\Users\Damien\AppData\Local\{F841A11A-9647-4A2E-B59C-C84FC5C7FBAA} O43 - CFD: 20/08/2012 - 08:16:50 - [0] ----D C:\Users\Damien\AppData\Local\{F89CBB7A-7212-4162-9AA7-ABFD042CD364} O43 - CFD: 07/05/2012 - 08:46:58 - [0] ----D C:\Users\Damien\AppData\Local\{F9A79B7F-828E-457B-B159-BE3C766BA7ED} O43 - CFD: 27/03/2012 - 20:02:12 - [0] ----D C:\Users\Damien\AppData\Local\{FAE0C0B8-0715-4DF4-9B64-6E1774A2699A} O43 - CFD: 01/05/2012 - 09:00:55 - [0] ----D C:\Users\Damien\AppData\Local\{FB689ED5-B2BE-4A9E-BFF8-6678575A22F5} O43 - CFD: 09/05/2012 - 17:43:52 - [0] ----D C:\Users\Damien\AppData\Local\{FBE7B205-5D25-4393-A51E-861B15285878} O43 - CFD: 10/07/2012 - 09:00:37 - [0] ----D C:\Users\Damien\AppData\Local\{FC3E11D3-E927-454F-909A-5B6AE1002E19} O43 - CFD: 13/06/2012 - 06:44:09 - [0] ----D C:\Users\Damien\AppData\Local\{FC7555F2-F0A0-469E-B9BE-0256CB05B300} O43 - CFD: 30/04/2012 - 07:37:23 - [0] ----D C:\Users\Damien\AppData\Local\{FCCAB2CA-4EE3-4B5F-B07D-FFB7523A9662} O43 - CFD: 24/03/2012 - 14:54:32 - [0] ----D C:\Users\Damien\AppData\Local\{FCCCDCE8-7469-4F5D-A84D-0CCA498FF1A0} O43 - CFD: 21/06/2012 - 09:31:32 - [0] ----D C:\Users\Damien\AppData\Local\{FCDF2F97-BA04-4C42-8785-D54832475C02} O43 - CFD: 17/05/2012 - 21:18:48 - [0] ----D C:\Users\Damien\AppData\Local\{FCFA2EE6-9C20-49E7-921B-72ACE670F614} O43 - CFD: 03/08/2012 - 18:05:49 - [0] ----D C:\Users\Damien\AppData\Local\{FEBA06DB-3AD4-4249-9EF8-92372BCDD649} O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 26/07/2012 - 10:22:36 - [0,000] R---D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 20/01/2012 - 04:38:41 - [0,002] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic O43 - CFD: 07/04/2012 - 12:48:21 - [0] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BorderMaker O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 26/07/2012 - 10:22:36 - [0,001] R---D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Scan Program Folder in 00mn 31s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.B18E827A9A6C536BB799B2EA0924073A] - 19/02/2013 - 18:14:31 --H-- . (...) -- C:\dvmexp.idx [177] O44 - LFC:[MD5.7E9A32C5734D32DE88872F0B69223C0E] - 19/02/2013 - 17:38:06 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1852234] O44 - LFC:[MD5.B0EC8C6756A84C17ADB89B58786DD8E4] - 19/02/2013 - 17:33:41 ---A- . (...) -- C:\Windows\setupact.log [280] O44 - LFC:[MD5.20F07602881ADE117C7A7F6DB155F6C4] - 19/02/2013 - 17:33:38 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.3CC71EF44E39592B78159359B942D29C] - 19/02/2013 - 12:04:54 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc009.dat [44544] O44 - LFC:[MD5.A3CDD83F1A2B1F7DB46238F0C2476911] - 19/02/2013 - 12:04:54 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc00C.dat [44544] O44 - LFC:[MD5.9741182272D1788F648AD6EAE495502B] - 19/02/2013 - 12:04:54 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh009.dat [44544] O44 - LFC:[MD5.1D5FA9F623BB38FFE6F6885908C2D27E] - 19/02/2013 - 12:04:54 . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh00C.dat [44544] O44 - LFC:[MD5.55478C671384A8F39AB456E87965C57B] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1692470] O44 - LFC:[MD5.3CC71EF44E39592B78159359B942D29C] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [124832] O44 - LFC:[MD5.A3CDD83F1A2B1F7DB46238F0C2476911] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [152544] O44 - LFC:[MD5.9741182272D1788F648AD6EAE495502B] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [663560] O44 - LFC:[MD5.1D5FA9F623BB38FFE6F6885908C2D27E] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [756718] O44 - LFC:[MD5.55478C671384A8F39AB456E87965C57B] - 19/02/2013 - 12:04:54 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1692470] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/02/2013 - 16:59:03 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.0A317D41E5E7003CE209C0E3518AB0FE] - 31/01/2013 - 20:42:20 . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\FNTCACHE.DAT [51712] O44 - LFC:[MD5.0A317D41E5E7003CE209C0E3518AB0FE] - 31/01/2013 - 20:42:20 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [385144] O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 31/01/2013 - 20:06:42 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll [46080] O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 31/01/2013 - 20:06:42 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [46080] O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 31/01/2013 - 20:06:42 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll [367616] O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 31/01/2013 - 20:06:42 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [367616] O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\SysNative\grb.rs [21504] O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\System32\grb.rs [21504] O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\SysNative\pegi-pt.rs [20480] O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs [20480] O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\SysNative\pegi.rs [20480] O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\System32\pegi.rs [20480] O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\SysNative\pegibbfc.rs [44544] O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs [44544] O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\SysNative\usk.rs [30720] O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\System32\usk.rs [30720] O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\SysNative\cob-au.rs [40960] O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\cob-au.rs [40960] O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\SysNative\djctq.rs [15360] O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\System32\djctq.rs [15360] O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\SysNative\fpb.rs [46592] O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\System32\fpb.rs [46592] O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\SysNative\oflc-nz.rs [45568] O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs [45568] O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\SysNative\csrr.rs [43520] O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 31/01/2013 - 19:58:27 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\System32\csrr.rs [43520] O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\SysNative\cero.rs [55296] O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\System32\cero.rs [55296] O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\SysNative\esrb.rs [51712] O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\esrb.rs [51712] O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\SysNative\oflc.rs [23552] O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\System32\oflc.rs [23552] O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\SysNative\pegi-fi.rs [20480] O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 31/01/2013 - 19:58:25 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs [20480] O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 31/01/2013 - 19:57:32 . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\conhost.exe [40960] O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\SysNative\locale.nls [420064] O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\System32\locale.nls [420064] ~ Scan Files in 00mn 20s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.CE54BF3DBF6B60F3580265C3CB97E59D] - 13/02/2013 - 12:57:25 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.A02989ABE917F47DED036E6DD9FBD870] - 15/02/2013 - 15:30:47 ---A- - C:\Windows\Prefetch\AgCx_SC4.db O45 - LFCP:[MD5.A40F762E246801FB6F25435A8BA7915E] - 17/02/2013 - 17:01:29 ---A- - C:\Windows\Prefetch\SCALC.EXE-E0287F6E.pf O45 - LFCP:[MD5.663B263C7F8FFE656BCBD5170E441A8D] - 17/02/2013 - 17:04:19 ---A- - C:\Windows\Prefetch\ASUSVIBELAUNCHER.EXE-1FFCB8BF.pf O45 - LFCP:[MD5.9EFF6638547F9BF6127ED0B36E535D77] - 17/02/2013 - 17:41:56 ---A- - C:\Windows\Prefetch\V2_9_3_2962_WIN.EXE-D6CE08E8.pf O45 - LFCP:[MD5.F54805B3612A6849CF72640A9832D336] - 17/02/2013 - 17:41:58 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf O45 - LFCP:[MD5.D76EAFCBDA114403B26798576BD45EAB] - 17/02/2013 - 17:42:19 ---A- - C:\Windows\Prefetch\ISBEW64.EXE-D20A4C29.pf O45 - LFCP:[MD5.0CBE94C3C031E7A70C7E6B99BCB8C5AE] - 17/02/2013 - 17:42:23 ---A- - C:\Windows\Prefetch\TASKKILL.EXE-E0105477.pf O45 - LFCP:[MD5.8437CE79713A2A8205836F4B5D88E13B] - 17/02/2013 - 17:42:32 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-E09A077A.pf O45 - LFCP:[MD5.5DFF3341F0EAD2129B959798A798DFE3] - 17/02/2013 - 17:42:34 ---A- - C:\Windows\Prefetch\TOMTOMHOMESERVICE.EXE-7F7301AA.pf O45 - LFCP:[MD5.DF4E9D765E8D9FC20B38BA66E47FDE01] - 17/02/2013 - 18:08:33 ---A- - C:\Windows\Prefetch\TOMTOMHOME.EXE-5C6B8B9D.pf O45 - LFCP:[MD5.FF299DA1A09ABBEF49A41AC88C7F8315] - 17/02/2013 - 18:08:42 ---A- - C:\Windows\Prefetch\TOMTOMHOMERUNNER.EXE-7784BEE7.pf O45 - LFCP:[MD5.882977E3B4603A9450F3EDCB2C0AF137] - 17/02/2013 - 18:08:42 ---A- - C:\Windows\Prefetch\TOMTOMHOMERUNTIME.EXE-007B2194.pf O45 - LFCP:[MD5.01C7A9DE1E57DBD57E42F2A2E69622B1] - 17/02/2013 - 18:09:51 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-9B04053C.pf O45 - LFCP:[MD5.B61D460727E0843B149AF8A54C17760B] - 17/02/2013 - 20:21:50 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A4E4F302.pf O45 - LFCP:[MD5.3E7CB1E7D390C01D350DD2FB93AADF31] - 17/02/2013 - 22:04:24 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx O45 - LFCP:[MD5.1C0284F72854C7A5CA99EDBEFA0B0AB5] - 17/02/2013 - 22:05:25 ---A- - C:\Windows\Prefetch\AgCx_SC1.db O45 - LFCP:[MD5.44E819A83A97ED9105CE8AD57B3F7E34] - 18/02/2013 - 12:05:24 ---A- - C:\Windows\Prefetch\IGFXEXT.EXE-D5F523DB.pf O45 - LFCP:[MD5.29A4084F584FF0B07D69F2F88318C134] - 18/02/2013 - 12:05:31 ---A- - C:\Windows\Prefetch\ATKOSD2.EXE-8FADD2D9.pf O45 - LFCP:[MD5.70D064A988638B2CD0FCD87C34E9A4F5] - 18/02/2013 - 12:05:40 ---A- - C:\Windows\Prefetch\APRP.EXE-A549635F.pf O45 - LFCP:[MD5.1CEADA77C3A6478530D3D9713A0970B3] - 18/02/2013 - 12:05:43 ---A- - C:\Windows\Prefetch\SYNTPHELPER.EXE-0A20AAC4.pf O45 - LFCP:[MD5.EDB0F25825DCDF1FC4F2C4387E137A38] - 18/02/2013 - 12:12:49 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-89118538.pf O45 - LFCP:[MD5.C08C97753710C81499CBA8EE0D2FCF6A] - 18/02/2013 - 20:09:14 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf O45 - LFCP:[MD5.CF468D9D1D5A858B705D6C08F305647C] - 18/02/2013 - 22:15:51 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf O45 - LFCP:[MD5.BCF15B048F0D6D671F57315D2FCAA223] - 18/02/2013 - 22:15:57 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf O45 - LFCP:[MD5.346F3870D220A5DBB2922F6DD48B4F0C] - 18/02/2013 - 22:25:51 ---A- - C:\Windows\Prefetch\CSC.EXE-BE9AC2DF.pf O45 - LFCP:[MD5.97ADD93A5AEA8710638B0E6D0C630EA7] - 18/02/2013 - 22:25:51 ---A- - C:\Windows\Prefetch\CVTRES.EXE-2B9D810D.pf O45 - LFCP:[MD5.4FCB4C1C3582608E1DC8DEFAD33055E0] - 18/02/2013 - 22:25:53 ---A- - C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf O45 - LFCP:[MD5.5D24B29B61BA79FE33FB26B66027FBDB] - 18/02/2013 - 22:25:57 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf O45 - LFCP:[MD5.B8C9F4D5FD7D9F044CCB8E0BDB804021] - 18/02/2013 - 22:25:57 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf O45 - LFCP:[MD5.05D18FDC49161740095681FDB508297A] - 18/02/2013 - 22:26:02 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf O45 - LFCP:[MD5.F1BEF04D8A5D64537838A62C984EEDA6] - 18/02/2013 - 22:35:04 ---A- - C:\Windows\Prefetch\JAVAW.EXE-95D02C48.pf O45 - LFCP:[MD5.B6BF227851D6ADBA9FCEE93ECB95CB2F] - 18/02/2013 - 22:35:04 ---A- - C:\Windows\Prefetch\JAVAWS.EXE-446541A7.pf O45 - LFCP:[MD5.046CBEB0307FC3900FDD23FF6E120B6A] - 18/02/2013 - 23:01:03 ---A- - C:\Windows\Prefetch\XNVIEW.EXE-DBD5D74B.pf O45 - LFCP:[MD5.52DBC917F73A4BA9BE7BDC14613D4A6D] - 18/02/2013 - 23:05:04 ---A- - C:\Windows\Prefetch\VLC.EXE-CC6F4A79.pf O45 - LFCP:[MD5.3E7AE30EC8FB7A8C6C1C184E6642F801] - 19/02/2013 - 09:56:59 ---A- - C:\Windows\Prefetch\ATKOSD.EXE-C5A3162B.pf O45 - LFCP:[MD5.632E2F0FDE4B75C65EF67F3292DBB006] - 19/02/2013 - 09:57:00 ---A- - C:\Windows\Prefetch\ACENGSVR.EXE-591E7F61.pf O45 - LFCP:[MD5.44BE5DD18290684C1933271F795FA4D0] - 19/02/2013 - 09:57:00 ---A- - C:\Windows\Prefetch\KBFILTR.EXE-3F28552B.pf O45 - LFCP:[MD5.29C365A78BD369968CE1A0C049985719] - 19/02/2013 - 09:57:01 ---A- - C:\Windows\Prefetch\ASSCRPRO.EXE-2426B5AB.pf O45 - LFCP:[MD5.FA4BC1DB091CE6C71223A3E8111A9F1B] - 19/02/2013 - 09:57:06 ---A- - C:\Windows\Prefetch\IGFXPERS.EXE-254DBA08.pf O45 - LFCP:[MD5.1DF47A55AFAE1ABA1CB203477C44FD68] - 19/02/2013 - 09:57:14 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-0E293DD6.pf O45 - LFCP:[MD5.D30293A4CDBC49C5C60499442A5B4A13] - 19/02/2013 - 09:57:18 ---A- - C:\Windows\Prefetch\SIGNAL~1.EXE-B603C50B.pf O45 - LFCP:[MD5.4FEFAD3887136B4FB4CA9288D0BA2E72] - 19/02/2013 - 09:57:19 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-AE62E46F.pf O45 - LFCP:[MD5.91ED8D12859C8739C6F82804C768F26F] - 19/02/2013 - 09:57:24 ---A- - C:\Windows\Prefetch\WCOURIER.EXE-D1BF49F5.pf O45 - LFCP:[MD5.8E615BF4807E2A363D5397A6FF6EE2C3] - 19/02/2013 - 10:02:39 ---A- - C:\Windows\Prefetch\SIMPRESS.EXE-29A991DE.pf O45 - LFCP:[MD5.7205976223379DA926595E5DF230FA8E] - 19/02/2013 - 10:05:06 ---A- - C:\Windows\Prefetch\COREL PAINTSHOP PRO.EXE-E85F5C22.pf O45 - LFCP:[MD5.C07336EFF7CF42046627317E599EE665] - 19/02/2013 - 10:18:38 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf O45 - LFCP:[MD5.0C0B4FF22B8AEDCA843974E081503A3C] - 19/02/2013 - 10:19:39 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf O45 - LFCP:[MD5.E49CA589123DFDF27472083B17989017] - 19/02/2013 - 10:33:05 ---A- - C:\Windows\Prefetch\PDFREADER.EXE-2E3EE20A.pf O45 - LFCP:[MD5.8B4ED049FEB546B94943DA88058F8D1B] - 19/02/2013 - 10:33:16 ---A- - C:\Windows\Prefetch\AGENT.EXE-D5774666.pf O45 - LFCP:[MD5.9EBEC7BB72A8646C3C03C95154266B03] - 19/02/2013 - 10:47:54 ---A- - C:\Windows\Prefetch\FLASHUTIL64_11_5_502_149_ACTI-65780E33.pf O45 - LFCP:[MD5.C9735A524E04D425F0A5BC5352178632] - 19/02/2013 - 10:52:44 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf O45 - LFCP:[MD5.F91AA08C4C0BF3408166D49173CE03DE] - 19/02/2013 - 10:52:49 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-EEE13F6D.pf O45 - LFCP:[MD5.62F4FD57375F62592BA617840DA460FE] - 19/02/2013 - 10:52:50 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-3ACEEBA3.pf O45 - LFCP:[MD5.33DD033CDB7249FDA4DFF21B8DF8EE35] - 19/02/2013 - 11:19:39 ---A- - C:\Windows\Prefetch\SOFFICE.BIN-7F88D3BE.pf O45 - LFCP:[MD5.C49E55B811C78019ADA55976D2A897B0] - 19/02/2013 - 11:19:39 ---A- - C:\Windows\Prefetch\SOFFICE.EXE-8BFABAE3.pf O45 - LFCP:[MD5.E8957919654091126DCD928B216F2743] - 19/02/2013 - 11:19:39 ---A- - C:\Windows\Prefetch\SWRITER.EXE-0A49A450.pf O45 - LFCP:[MD5.0CC87D61F42A0AE9BA6BC41366F95743] - 19/02/2013 - 11:30:10 ---A- - C:\Windows\Prefetch\WLXPHOTOGALLERY.EXE-F184FD87.pf O45 - LFCP:[MD5.1ACDC2EA7CAF35985D45EAD471FED4CD] - 19/02/2013 - 12:02:38 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf O45 - LFCP:[MD5.9054D5FFBA479A871542BA68D828088B] - 19/02/2013 - 12:04:17 ---A- - C:\Windows\Prefetch\NVCPLUI.EXE-7CA4CFE6.pf O45 - LFCP:[MD5.E1ADEF994A2847F2C6BB771988167B33] - 19/02/2013 - 12:04:32 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-AA8BA970.pf O45 - LFCP:[MD5.EC6A6567F74319A08F8988F26C3AEBE5] - 19/02/2013 - 12:04:37 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf O45 - LFCP:[MD5.A702183283E0CAB55B31C55535FC06EF] - 19/02/2013 - 12:04:44 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F96F308C.pf O45 - LFCP:[MD5.2CA595BA4D2E6CBA8A7682260FBB691C] - 19/02/2013 - 12:31:22 ---A- - C:\Windows\Prefetch\Layout.ini O45 - LFCP:[MD5.4EF2587DDA71C391913894B1B7E51B2B] - 19/02/2013 - 12:34:33 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf O45 - LFCP:[MD5.98DF560C6F3FF3EF75C2096700E380F4] - 19/02/2013 - 12:41:21 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-50F8B8EA.pf O45 - LFCP:[MD5.B94D8BB1EA6E1D521D25F79BD15464EF] - 19/02/2013 - 12:41:33 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf O45 - LFCP:[MD5.96B81DD64EC9C83BFD98FC69DCCCE1B1] - 19/02/2013 - 12:41:33 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf O45 - LFCP:[MD5.AAE92F0A8F04C8FFA4E9920FC2999655] - 19/02/2013 - 13:22:12 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf O45 - LFCP:[MD5.390704BFBC70B4705579CEABA98A2D4B] - 19/02/2013 - 13:23:14 ---A- - C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf O45 - LFCP:[MD5.9E892741802CCB393D5E4AF4119CDF48] - 19/02/2013 - 13:25:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf O45 - LFCP:[MD5.6DAABAAA0008CD16F1F97223CDDAE3EF] - 19/02/2013 - 13:25:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf O45 - LFCP:[MD5.97599CFF503896E37CD39956BBC6483E] - 19/02/2013 - 13:26:10 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-558853410-2708724727-1561618419-1001.db O45 - LFCP:[MD5.572ABEA20E01B1788C00D7E06BDE212E] - 19/02/2013 - 13:26:10 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-558853410-2708724727-1561618419-1001.db O45 - LFCP:[MD5.5C6C6BE7A6B8D17A375D5C6E2E36F25C] - 19/02/2013 - 13:28:24 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf O45 - LFCP:[MD5.4B3C33706A8534CC5CFDE0CDA582EDBC] - 19/02/2013 - 13:59:36 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf O45 - LFCP:[MD5.DACC3335582DCB8F43F20546DADEB80A] - 19/02/2013 - 13:59:46 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-37549B7E.pf O45 - LFCP:[MD5.F24288D9B1AC608CA070E4503BAF952A] - 19/02/2013 - 13:59:50 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin O45 - LFCP:[MD5.907D5854987E0F40020F0B5F26CB7990] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\CLMLSVC.EXE-2A642111.pf O45 - LFCP:[MD5.A8DDFF48906CA2B9D4BE23F2DDD0FB14] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\LPKSETUP.EXE-90F505D8.pf O45 - LFCP:[MD5.A491B6FA22C53771D5DE062581AF4D10] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-D5170E12.pf O45 - LFCP:[MD5.98435DBBC56032238FD9E591826BD5C1] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-C775D18D.pf O45 - LFCP:[MD5.5C86ECFD63695DEB82EC153EBE72F963] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf O45 - LFCP:[MD5.3CEFE6A03BE6B44A12C5B0AC4056AAE5] - 19/02/2013 - 17:34:37 ---A- - C:\Windows\Prefetch\WDC.EXE-37A6A0A3.pf O45 - LFCP:[MD5.E4F7DCDF06BF488E5ED40583AF0B279D] - 19/02/2013 - 17:34:38 ---A- - C:\Windows\Prefetch\HKCMD.EXE-AE1DFF3B.pf O45 - LFCP:[MD5.FE9EC5076964915363279DB989EE0C31] - 19/02/2013 - 17:34:38 ---A- - C:\Windows\Prefetch\IGFXTRAY.EXE-C444237E.pf O45 - LFCP:[MD5.5A182DE8DAA7286FA3B72AE9C80E012B] - 19/02/2013 - 17:34:42 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-BF1A352E.pf O45 - LFCP:[MD5.7B41168FC4524FDFE38B1E4BC671D3AE] - 19/02/2013 - 17:34:42 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-FD126C57.pf O45 - LFCP:[MD5.63F420544A23B8D20415A40EEBA4AD97] - 19/02/2013 - 17:34:49 ---A- - C:\Windows\Prefetch\SYNASUSACPI.EXE-5FD3745D.pf O45 - LFCP:[MD5.5F140F4B89DE24BAA04D6CD5CD17F919] - 19/02/2013 - 17:34:50 ---A- - C:\Windows\Prefetch\AMICOSINGLUN64.EXE-2E50420D.pf O45 - LFCP:[MD5.B29F9C71AFD9D0626B3238386E9B0B18] - 19/02/2013 - 17:34:50 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf O45 - LFCP:[MD5.30CF16BBD1334781EF88C4AB5A9F078D] - 19/02/2013 - 17:34:51 ---A- - C:\Windows\Prefetch\RAVBG64.EXE-44375395.pf O45 - LFCP:[MD5.866D63FCD0FB98466D05C1C6F81CCAA7] - 19/02/2013 - 17:34:51 ---A- - C:\Windows\Prefetch\WSCRIPT.EXE-52CF1F0C.pf O45 - LFCP:[MD5.ACBCFE169BBA2864379B0ADEEBF8DFD9] - 19/02/2013 - 17:34:52 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf O45 - LFCP:[MD5.39C2AC091600674ACBFFA088FD990193] - 19/02/2013 - 17:34:55 ---A- - C:\Windows\Prefetch\NVTRAY.EXE-DB83881B.pf O45 - LFCP:[MD5.E265F792C62838D777AEDA699F4BACFD] - 19/02/2013 - 17:34:55 ---A- - C:\Windows\Prefetch\RAVCPL64.EXE-D6B4B613.pf O45 - LFCP:[MD5.B7F5E6EAD6EC76FF7F0FB54C4EA9D622] - 19/02/2013 - 17:34:57 ---A- - C:\Windows\Prefetch\SYNTPENH.EXE-E6DC1353.pf O45 - LFCP:[MD5.460044EF664766E8A14B09B931BF2838] - 19/02/2013 - 17:35:01 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf O45 - LFCP:[MD5.8BE4D508EF1822F9E2763A98F267BBD8] - 19/02/2013 - 17:35:02 ---A- - C:\Windows\Prefetch\DMEDIA.EXE-7CE60415.pf O45 - LFCP:[MD5.49DE9CA84ED6FCE281E807EBFBC15F71] - 19/02/2013 - 17:35:03 ---A- - C:\Windows\Prefetch\SONICMASTERTRAY.EXE-7D858325.pf O45 - LFCP:[MD5.7505EEFD896DFDDA1986FDD09ECA8164] - 19/02/2013 - 17:35:04 ---A- - C:\Windows\Prefetch\AVASTUI.EXE-56B29A08.pf O45 - LFCP:[MD5.398E6288DA54F2B9B3B79F0BC059D564] - 19/02/2013 - 17:35:16 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf O45 - LFCP:[MD5.D238F2E94AA72A71083DB28F2128497D] - 19/02/2013 - 17:35:43 ---A- - C:\Windows\Prefetch\TURBOBOOST.EXE-C4055C7C.pf O45 - LFCP:[MD5.53C3138AA60FBCCDEB208E77C8C48F77] - 19/02/2013 - 17:35:47 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf O45 - LFCP:[MD5.E7C6012D9C2CDE7B8D5374BCA9B9E40B] - 19/02/2013 - 17:35:59 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf O45 - LFCP:[MD5.154B050D1DE46AC6B893B8D23B58CDEE] - 19/02/2013 - 17:35:59 ---A- - C:\Windows\Prefetch\THUNDERBIRD.EXE-A0DA674F.pf O45 - LFCP:[MD5.5BC7B03680266245F270E110BC99172B] - 19/02/2013 - 17:36:16 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_5_502_14-6AA9340C.pf O45 - LFCP:[MD5.AEE31FDFC48D64D4D5E7B5E0B78A785A] - 19/02/2013 - 17:36:16 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf O45 - LFCP:[MD5.07282E4617C4BE7CC60A242670FE4AD2] - 19/02/2013 - 17:36:17 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf O45 - LFCP:[MD5.86DF1585BB9AADF026ED30E6646416AD] - 19/02/2013 - 17:36:18 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf O45 - LFCP:[MD5.21222C33252F28B9CDE840141B644371] - 19/02/2013 - 17:36:28 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-40F9D24E.pf O45 - LFCP:[MD5.1E7F40FE3F174518B72330C7BFCDA4DD] - 19/02/2013 - 17:36:30 ---A- - C:\Windows\Prefetch\LMS.EXE-8C70F87D.pf O45 - LFCP:[MD5.8AB1A91346F9450DAC92FA28DEE709B2] - 19/02/2013 - 17:36:30 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf O45 - LFCP:[MD5.C82044904D4607FAF29A6A9AF596B71A] - 19/02/2013 - 17:36:34 ---A- - C:\Windows\Prefetch\UNS.EXE-E6E49771.pf O45 - LFCP:[MD5.59214C7613DB8A0424854E006C2EB8BE] - 19/02/2013 - 17:37:20 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf O45 - LFCP:[MD5.766E5AC855C80ED300FFFB33E9BDE5FA] - 19/02/2013 - 17:37:37 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf O45 - LFCP:[MD5.7A68C3EFFDCB03B1DEE6CC304A4965CF] - 19/02/2013 - 17:38:11 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf O45 - LFCP:[MD5.A71D32E03EB8CB0CD5F4EF61EDE84274] - 19/02/2013 - 17:46:52 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf O45 - LFCP:[MD5.3FEE3D5382D4DA0BAE2A17937A65D005] - 19/02/2013 - 17:48:59 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-E7777CC4.pf O45 - LFCP:[MD5.011848BCE9BBC83193896A67E2A44022] - 19/02/2013 - 18:09:45 ---A- - C:\Windows\Prefetch\RIBBONS.SCR-9E2C8FF1.pf O45 - LFCP:[MD5.3852888AC6E58D3032A15A907AC9FCB0] - 19/02/2013 - 18:19:41 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db O45 - LFCP:[MD5.1100E9E0B0CC31CCCACB726218B169F8] - 19/02/2013 - 18:19:41 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db O45 - LFCP:[MD5.4010D6338EC72915FE5CC43E80C173BE] - 19/02/2013 - 18:19:41 ---A- - C:\Windows\Prefetch\AgRobust.db O45 - LFCP:[MD5.8E35A809953EB2CC21098AD2456D3B94] - 19/02/2013 - 18:19:42 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db O45 - LFCP:[MD5.EC5795ADA8EDC9F2ABDF3814AA0C13A4] - 19/02/2013 - 18:20:32 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf O45 - LFCP:[MD5.C37524F1F3E9808E1D0E08E6E6368D3D] - 19/02/2013 - 18:21:19 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf O45 - LFCP:[MD5.0B3A1C4789AB1570C0B2965EC6AB512F] - 19/02/2013 - 18:21:27 ---A- - C:\Windows\Prefetch\CCLEANER64.EXE-779BD542.pf O45 - LFCP:[MD5.78121649179C416936D436F062C58E6F] - 19/02/2013 - 18:21:44 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf O45 - LFCP:[MD5.339AFFDD05B907DB78F60D207A43A7AD] - 19/02/2013 - 18:21:53 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf O45 - LFCP:[MD5.23B9CBBB92AD4A333C9599C1ADAB0B47] - 19/02/2013 - 18:22:16 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-179EAC7F.pf O45 - LFCP:[MD5.731302A153C23C3709B774B82D78C24B] - 19/02/2013 - 18:22:23 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf O45 - LFCP:[MD5.2A1BE8DB64BC1C61D029F70456EA1C8A] - 19/02/2013 - 18:22:23 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf O45 - LFCP:[MD5.0585C5A398E0984864078AF494A33DC2] - 19/02/2013 - 18:22:40 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf O45 - LFCP:[MD5.289824F7B0348E7ECF2D08CA11D47A0B] - 19/02/2013 - 18:22:40 ---A- - C:\Windows\Prefetch\WIFIEXPORT.EXE-3D4BA7B5.pf O45 - LFCP:[MD5.FEBD6F223F1380DC2F146D8775F62D6C] - 19/02/2013 - 18:22:52 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf O45 - LFCP:[MD5.E964538BA1959B22592C654D767F1ACF] - 19/02/2013 - 18:22:57 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf O45 - LFCP:[MD5.889600F7A2293DA2F0FDDE4CF4BE3764] - 19/02/2013 - 18:23:35 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf O45 - LFCP:[MD5.309418498A28AAFBACA39AAA34E77C1E] - 19/02/2013 - 18:23:36 ---A- - C:\Windows\Prefetch\WIMAXCONSOLE.EXE-067BD93A.pf O45 - LFCP:[MD5.0895430998C43B10EE596DA0DB593176] - 19/02/2013 - 18:23:39 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf O45 - LFCP:[MD5.5FCCBDE94D90D6E69272F44C41860470] - 19/02/2013 - 18:23:51 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf ~ Scan Prefetcher in 00mn 01s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{50944245-3aa0-11e2-84a7-5404a6ab29ba}\AutoRun\command. (...) -- F:\LaunchU3.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe O53 - SMSR:HKLM\...\startupreg\ASUSWebStorage [Key] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O53 - SMSR:HKLM\...\startupreg\Nuance PDF Reader-reminder [Key] . (.Nuance Communications, Inc. - Ereg.) -- C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe O53 - SMSR:HKLM\...\startupreg\RemoteControl10 [Key] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O53 - SMSR:HKLM\...\startupreg\TomTomHOME.exe [Key] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe O53 - SMSR:HKLM\...\startupreg\UpdatePSTShortCut [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe O53 - SMSR:HKLM\...\startupreg\WinampAgent [Key] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.16F6F6B7903B913AB41AB848C8BB5658] - 15/10/2011 - 03:04:40 ----- . (.ASUSTek Computer Inc. - ASUS Charger driver.) -- C:\Windows\SysWOW64\drivers\AiCharger.sys [17152] ~ Scan Drivers in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 16/02/2013 - 08:37:09 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\chatsync\38\381fd4d7ad2a65fe.dat [2008] O61 - LFC:Last File Created 16/02/2013 - 08:37:09 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\chatsync\ec\ec7163b3512bb44a.dat [1972] O61 - LFC:Last File Created 16/02/2013 - 08:47:53 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\chatsync\f4\f4425e1997a52248.dat [1733] O61 - LFC:Last File Created 16/02/2013 - 08:54:46 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\8F903698240FE799F61EEDA8595181137B996156.heu [150] O61 - LFC:Last File Created 16/02/2013 - 08:54:46 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\ABD49354324081CEBB8F60184CF5FEE81F0F9298.heu [149] O61 - LFC:Last File Created 16/02/2013 - 08:54:46 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\B63185FCA5D2BDBB568593F2BF232E87E5A20A7E.heu [149] O61 - LFC:Last File Created 16/02/2013 - 08:54:46 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\D888AEE0CE49F58A35C32EB138EDD00F0D6B9FAE.heu [149] O61 - LFC:Last File Created 16/02/2013 - 08:54:47 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\4BAE91DBAEF0CEEC0FCE5505D96DDEA865EDBFC1.heu [149] O61 - LFC:Last File Created 16/02/2013 - 08:54:47 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\84D36BDF5E2577BFB0B8CE6A12A8646BB1AADDDD.heu [149] O61 - LFC:Last File Created 16/02/2013 - 09:20:15 ---A- C:\Users\Damien\AppData\Local\Windows Live\uxcore_msnmsgr_00.etl [12288] O61 - LFC:Last File Created 16/02/2013 - 09:20:15 ---A- C:\Users\Damien\AppData\Local\Windows Live\uxcore_msnmsgr_01.etl [8192] O61 - LFC:Last File Created 16/02/2013 - 09:34:14 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Plat.sbd\Volaille [285668] O61 - LFC:Last File Created 16/02/2013 - 09:34:15 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Plat.sbd\Volaille.msf [15533] O61 - LFC:Last File Created 16/02/2013 - 09:48:08 ---A- C:\Users\Damien\Documents\Damien\Autres\annonces leboncoin\texte.txt [458] O61 - LFC:Last File Created 16/02/2013 - 09:58:06 ----- C:\Users\Damien\AppData\Roaming\uTorrent\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD.torrent [17407] O61 - LFC:Last File Created 16/02/2013 - 09:58:06 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD.torrent [17407] O61 - LFC:Last File Created 16/02/2013 - 09:58:38 ---A- C:\Users\Damien\Downloads\louis de funés La Soupe Aux Choux.torrent [14138] O61 - LFC:Last File Created 16/02/2013 - 10:00:21 ---A- C:\Users\Damien\Documents\Damien\Pompiers\Stats_inters.ods [38047] O61 - LFC:Last File Created 16/02/2013 - 10:48:06 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E02.FASTSUB.VOSTFR.HDTV.XviD.avi [574946208] O61 - LFC:Last File Created 16/02/2013 - 10:53:34 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E01.FASTSUB.VOSTFR.HDTV.XviD.avi [574901764] O61 - LFC:Last File Created 16/02/2013 - 11:03:51 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E03.FASTSUB.VOSTFR.HDTV.XviD.avi [575219742] O61 - LFC:Last File Created 16/02/2013 - 11:27:55 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\MediaCache\affiche2012_0_0.bmp [19254] O61 - LFC:Last File Created 16/02/2013 - 11:30:01 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\test.xml [6696] O61 - LFC:Last File Created 16/02/2013 - 11:30:20 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\AutoSave\C-_Users_Damien_Desktop_photos festival_montage_20130216113020.pds [123646] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\LibraryFolderData\EffectFolder.xml [281] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\LibraryFolderData\ParticleFolder.xml [185] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\LibraryFolderData\PinPFolder.xml [257] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\LibraryFolderData\TextFolder.xml [557] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\LibraryFolderData\TransitionFolder.xml [405] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\AppData\Roaming\CyberLink\PowerDirector\8.0\library.cfg [508] O61 - LFC:Last File Created 16/02/2013 - 11:34:32 ---A- C:\Users\Damien\Documents\CyberLink\PowerDirector\8.0\MyTitles\TitleBK\BK.xml [268] O61 - LFC:Last File Created 16/02/2013 - 11:57:55 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\abook.mab [29700] O61 - LFC:Last File Created 16/02/2013 - 21:25:40 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E12.FASTSUB.VOSTFR.HDTV.XviD.avi [575442904] O61 - LFC:Last File Created 16/02/2013 - 21:26:16 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E08.FASTSUB.VOSTFR.HDTV.XviD.avi [575538588] O61 - LFC:Last File Created 16/02/2013 - 21:28:23 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E09.FASTSUB.VOSTFR.HDTV.XviD.avi [480270336] O61 - LFC:Last File Created 16/02/2013 - 21:28:41 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E10.FASTSUB.VOSTFR.HDTV.XviD.avi [472950784] O61 - LFC:Last File Created 16/02/2013 - 21:28:48 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E11.FASTSUB.VOSTFR.HDTV.XviD.avi [477194240] O61 - LFC:Last File Created 16/02/2013 - 21:28:49 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E06.FASTSUB.VOSTFR.HDTV.XviD.avi [575499012] O61 - LFC:Last File Created 16/02/2013 - 21:28:49 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E07.FASTSUB.VOSTFR.HDTV.XviD.avi [577814930] O61 - LFC:Last File Created 16/02/2013 - 21:28:51 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E05.FASTSUB.VOSTFR.HDTV.XviD.avi [575097906] O61 - LFC:Last File Created 16/02/2013 - 21:28:56 ---A- C:\Users\Damien\Downloads\Dexter - Saison 07 Complete - FASTSUB VOSTFR HDTV XviD\Dexter.S07E04.FASTSUB.VOSTFR.HDTV.XviD.avi [615943734] O61 - LFC:Last File Created 17/02/2013 - 09:51:49 ---A- C:\Users\Damien\AppData\Roaming\Skype\shared_dynco\dc.db [1622016] O61 - LFC:Last File Created 17/02/2013 - 09:51:49 ---A- C:\Users\Damien\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1108592] O61 - LFC:Last File Created 17/02/2013 - 09:51:57 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\eas.db [65536] O61 - LFC:Last File Created 17/02/2013 - 09:51:57 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\eas.db-journal [41552] O61 - LFC:Last File Created 17/02/2013 - 09:52:01 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\msn.db [61440] O61 - LFC:Last File Created 17/02/2013 - 09:52:01 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\msn.db-journal [37448] O61 - LFC:Last File Created 17/02/2013 - 09:52:02 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\chatsync\8c\8c65d2e3fdda303a.dat [1664] O61 - LFC:Last File Created 17/02/2013 - 09:52:07 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\chatsync\07\07c31bcccbee9bc7.dat [2235] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\381814F6F5270FFBB27E244D6138BC023AF911D5.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\440AE73B017A477382DEFF7C0DBE4896FED21079.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\6344DCC80A9A6A3676DCEA0C92C8C45EFD2F3220.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\6DDB94AE3365798230849FA0F931AC132FE417D1.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\871F12AF0853C06E4EB80A1CCAB295CEADBB817A.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:45:37 ---A- C:\Users\Damien\AppData\Roaming\Adobe\Flash Player\AssetCache\8QHTUK75\C3306B26751D6A80EB1FCB651912469AE18819AB.heu [150] O61 - LFC:Last File Created 17/02/2013 - 10:50:02 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\dc.db [45056] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\bistats.db [65536] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\bistats.db-journal [37448] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\config.xml [10262] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\httpfe\cookies.dat [2] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\main.db [626688] O61 - LFC:Last File Created 17/02/2013 - 10:50:05 ---A- C:\Users\Damien\AppData\Roaming\Skype\sol22dier\main.db-journal [222128] O61 - LFC:Last File Created 17/02/2013 - 10:50:11 ---A- C:\Users\Damien\AppData\Roaming\Skype\shared.xml [67650] O61 - LFC:Last File Created 17/02/2013 - 17:01:32 ---A- C:\Users\Damien\AppData\Local\Temp\Cookies\41DTFIKH.txt [193] O61 - LFC:Last File Created 17/02/2013 - 17:01:32 ---A- C:\Users\Damien\AppData\Local\Temp\Cookies\ELPIHZS2.txt [129] O61 - LFC:Last File Created 17/02/2013 - 17:07:17 ---A- C:\Users\Damien\Documents\Damien\Autres\banque - comptes\Comptes_Chèques.ods [77200] O61 - LFC:Last File Created 17/02/2013 - 17:24:06 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\7\25\350AAd01 [17940] O61 - LFC:Last File Created 17/02/2013 - 17:26:07 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\3\D9\ADAD1d01 [16846] O61 - LFC:Last File Created 17/02/2013 - 17:26:08 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\1\03\27053d01 [16500] O61 - LFC:Last File Created 17/02/2013 - 17:26:08 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\1\F0\877E2d01 [16389] O61 - LFC:Last File Created 17/02/2013 - 17:26:08 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\6\14\1C7B4d01 [18369] O61 - LFC:Last File Created 17/02/2013 - 17:26:08 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\8\01\1D441d01 [57101] O61 - LFC:Last File Created 17/02/2013 - 17:26:08 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\B\2E\002C8d01 [30901] O61 - LFC:Last File Created 17/02/2013 - 17:28:09 ---A- C:\Users\Damien\AppData\Local\Temp\__PDFCORE_FMP.dat [111071] O61 - LFC:Last File Created 17/02/2013 - 17:28:42 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\07\FA6BCd01 [38607] O61 - LFC:Last File Created 17/02/2013 - 17:29:37 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP [8677108] O61 - LFC:Last File Created 17/02/2013 - 17:29:39 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP.msf [13153] O61 - LFC:Last File Created 17/02/2013 - 17:29:46 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\F2\B6F2Dd01 [53408] O61 - LFC:Last File Created 17/02/2013 - 17:31:18 ---A- C:\Users\Damien\Documents\Damien\Pompiers\2013 Scenario FMA INC et DIV.pdf [129802] O61 - LFC:Last File Created 17/02/2013 - 17:31:18 ---A- C:\Users\Damien\Documents\Damien\Pompiers\2013 Scénario FMA SAP.pdf [691888] O61 - LFC:Last File Created 17/02/2013 - 17:31:21 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP.sbd\Formation [4082035] O61 - LFC:Last File Created 17/02/2013 - 17:31:22 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP.sbd\Formation.msf [9138] O61 - LFC:Last File Created 17/02/2013 - 17:31:43 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\F2\33FE9d01 [18902] O61 - LFC:Last File Created 17/02/2013 - 17:31:43 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\3\29\1B519d01 [30728] O61 - LFC:Last File Created 17/02/2013 - 17:31:47 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\E2\E8F51d01 [29379] O61 - LFC:Last File Created 17/02/2013 - 17:32:48 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\3B\F3C6Dd01 [27561] O61 - LFC:Last File Created 17/02/2013 - 17:32:48 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Archives [9043116] O61 - LFC:Last File Created 17/02/2013 - 17:32:49 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Archives.msf [19151] O61 - LFC:Last File Created 17/02/2013 - 17:33:16 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP.sbd\JSP [1390659] O61 - LFC:Last File Created 17/02/2013 - 17:33:17 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\SP.sbd\JSP.msf [11346] O61 - LFC:Last File Created 17/02/2013 - 17:34:17 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\9\F9\E4E78d01 [72330] O61 - LFC:Last File Created 17/02/2013 - 17:34:17 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\C\33\621F2d01 [18665] O61 - LFC:Last File Created 17/02/2013 - 17:34:23 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\8\79\CD183d01 [49017] O61 - LFC:Last File Created 17/02/2013 - 17:34:42 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\A5\61380d01 [26274] O61 - LFC:Last File Created 17/02/2013 - 17:34:42 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\E\B7\E5BE3d01 [40623] O61 - LFC:Last File Created 17/02/2013 - 17:34:49 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Dessert [650308] O61 - LFC:Last File Created 17/02/2013 - 17:34:50 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Dessert.msf [33466] O61 - LFC:Last File Created 17/02/2013 - 17:36:55 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\41\354ADd01 [46325] O61 - LFC:Last File Created 17/02/2013 - 17:36:55 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\9\4D\A19C4d01 [38415] O61 - LFC:Last File Created 17/02/2013 - 17:36:55 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\06\C177Ed01 [38828] O61 - LFC:Last File Created 17/02/2013 - 17:36:55 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\F\E9\3F8D3d01 [18953] O61 - LFC:Last File Created 17/02/2013 - 17:40:43 ---A- C:\Users\Damien\AppData\Local\Temp\KLAA201302171740430\branding.jar [239440] O61 - LFC:Last File Created 17/02/2013 - 17:41:55 ---A- C:\Users\Damien\AppData\Local\Downloaded Installations\{D7D09457-F496-40AB-AACC-644D59B0F1A6}\1036.MST [136704] O61 - LFC:Last File Created 17/02/2013 - 17:41:58 ---A- C:\Users\Damien\AppData\Local\Downloaded Installations\{D7D09457-F496-40AB-AACC-644D59B0F1A6}\TomTom HOME.msi [27091456] O61 - LFC:Last File Created 17/02/2013 - 17:42:33 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\compreg.dat [133463] O61 - LFC:Last File Created 17/02/2013 - 17:42:33 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\extensions.cache [229] O61 - LFC:Last File Created 17/02/2013 - 17:42:33 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\extensions.rdf [3367] O61 - LFC:Last File Created 17/02/2013 - 17:42:33 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\xpti.dat [100989] O61 - LFC:Last File Created 17/02/2013 - 17:44:24 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\program\TomTom_application_for_Carminat_TomTom_LIVE\program.png [6321] O61 - LFC:Last File Created 17/02/2013 - 17:45:23 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\program\TomTom_application_for_Carminat_TomTom_LIVE\9.846_1165624_RC12.CAB-Camiron-RC12.cab [66888067] O61 - LFC:Last File Created 17/02/2013 - 17:45:23 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\program\TomTom_application_for_Carminat_TomTom_LIVE\9.toc [2773] O61 - LFC:Last File Created 17/02/2013 - 17:45:24 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-2\Radar_FR_TomTom.cab [45386] O61 - LFC:Last File Created 17/02/2013 - 17:45:24 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-2\Radar_FR_TomTom.toc [7136] O61 - LFC:Last File Created 17/02/2013 - 17:45:24 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-2\icon-dangerzones.gif [410] O61 - LFC:Last File Created 17/02/2013 - 17:45:24 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-2\preview-dangerzones.png [1651] O61 - LFC:Last File Created 17/02/2013 - 17:45:25 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-3\icon-dangerzones.gif [410] O61 - LFC:Last File Created 17/02/2013 - 17:45:25 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-3\preview-dangerzones.png [1651] O61 - LFC:Last File Created 17/02/2013 - 17:45:26 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\ephemeris\QuickGPSfix-1\ephemeris.png [6788] O61 - LFC:Last File Created 17/02/2013 - 17:45:26 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-3\Safety_Cam_FR_Premium.cab [102455] O61 - LFC:Last File Created 17/02/2013 - 17:45:26 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\safetycamera\Zones_de_Danger_FR_TomTom-3\Safety_Cam_FR_Premium.toc [7172] O61 - LFC:Last File Created 17/02/2013 - 17:45:27 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\ephemeris\QuickGPSfix-1\Ephemeris.cab [59686] O61 - LFC:Last File Created 17/02/2013 - 17:45:27 ---A- C:\Users\Damien\Documents\TomTom\HOME\Download\complete\ephemeris\QuickGPSfix-1\Ephemeris.toc [3537] O61 - LFC:Last File Created 17/02/2013 - 17:46:31 ---A- C:\Users\Damien\AppData\Local\Temp\TomTomMapPatches [4377] O61 - LFC:Last File Created 17/02/2013 - 17:46:31 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\MapShareDownloadCache\MapCache1554986387.bin [730002] O61 - LFC:Last File Created 17/02/2013 - 17:47:47 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\TomTomHOME_Exception.txt [170] O61 - LFC:Last File Created 17/02/2013 - 17:51:12 ---A- C:\Users\Damien\AppData\Local\CrashDumps\TomTomHOMERuntime.exe.6096.dmp [2505536] O61 - LFC:Last File Created 17/02/2013 - 18:08:32 ---A- C:\Users\Damien\AppData\Local\TomTom\HOME\Profiles\5tg6cxt5.default\XUL.mfl [491908] O61 - LFC:Last File Created 17/02/2013 - 18:08:33 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\cookies.sqlite-journal [512] O61 - LFC:Last File Created 17/02/2013 - 18:08:34 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\Resources\itemmetadata.tlvvoc.xml [5481] O61 - LFC:Last File Created 17/02/2013 - 18:09:18 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\pluginreg.dat [5306] O61 - LFC:Last File Created 17/02/2013 - 18:09:38 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\cert8.db [65536] O61 - LFC:Last File Created 17/02/2013 - 18:09:38 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\key3.db [16384] O61 - LFC:Last File Created 17/02/2013 - 18:09:38 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\mimeTypes.rdf [251] O61 - LFC:Last File Created 17/02/2013 - 18:09:38 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\places.sqlite-journal [0] O61 - LFC:Last File Created 17/02/2013 - 18:09:38 ---A- C:\Users\Damien\AppData\Roaming\TomTom\HOME\Profiles\5tg6cxt5.default\prefs.js [8918] O61 - LFC:Last File Created 17/02/2013 - 19:52:14 ----- C:\Users\Damien\AppData\Roaming\uTorrent\La_Princesse_Et_La_Grenouille_DVDRip_French_XVid_mlive.avi.torrent [14358] O61 - LFC:Last File Created 17/02/2013 - 19:52:14 ---A- C:\Users\Damien\Downloads\La_Princesse_Et_La_Grenouille_DVDRip_French_XVid_mlive.avi.torrent [14358] O61 - LFC:Last File Created 17/02/2013 - 20:10:24 ---A- C:\Users\Damien\Downloads\La_Princesse_Et_La_Grenouille_DVDRip_French_XVid_mlive.avi [733734912] O61 - LFC:Last File Created 18/02/2013 - 12:05:33 -SHA- C:\Users\Damien\AppData\Local\Temp\Cookies\index.dat [32768] O61 - LFC:Last File Created 18/02/2013 - 12:05:33 -SHA- C:\Users\Damien\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768] O61 - LFC:Last File Created 18/02/2013 - 12:05:33 -SHA- C:\Users\Damien\AppData\Local\Temp\History\History.IE5\index.dat [16384] O61 - LFC:Last File Created 18/02/2013 - 19:36:52 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dlimagecache\3DDBA22B544682A0E7262C72A8BC11698604B20E [32963] O61 - LFC:Last File Created 18/02/2013 - 19:39:15 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Drafts [0] O61 - LFC:Last File Created 18/02/2013 - 19:39:15 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Drafts.msf [1891] O61 - LFC:Last File Created 18/02/2013 - 19:39:15 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Plat [565099] O61 - LFC:Last File Created 18/02/2013 - 19:39:17 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Marmiton.sbd\Plat.msf [27681] O61 - LFC:Last File Created 18/02/2013 - 19:44:33 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\addons.sqlite [524288] O61 - LFC:Last File Created 18/02/2013 - 19:46:34 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\4\8D\77864d01 [30880] O61 - LFC:Last File Created 18/02/2013 - 19:46:34 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\blocklist.xml [30880] O61 - LFC:Last File Created 18/02/2013 - 20:10:06 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\3\70\48DE7d01 [19028] O61 - LFC:Last File Created 18/02/2013 - 20:10:06 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\9\F2\C2AE2d01 [56787] O61 - LFC:Last File Created 18/02/2013 - 21:39:05 ----- C:\Users\Damien\AppData\Roaming\uTorrent\Le roi Lion (les 3) French by [SG_TE@M].torrent [21503] O61 - LFC:Last File Created 18/02/2013 - 21:39:05 ---A- C:\Users\Damien\Downloads\Le roi Lion (les 3) French by [SG_TE@M].torrent [21503] O61 - LFC:Last File Created 18/02/2013 - 21:41:46 ---A- C:\Users\Damien\Downloads\Le roi Lion (les 3) French by [SG_TE@M]\le roi lion (les 3).nfo [2097] O61 - LFC:Last File Created 18/02/2013 - 22:32:43 ---A- C:\Users\Damien\Downloads\Le roi Lion (les 3) French by [SG_TE@M]\Le Roi Lion.avi [716389908] O61 - LFC:Last File Created 18/02/2013 - 22:32:43 ---A- C:\Users\Damien\Downloads\Le roi Lion (les 3) French by [SG_TE@M]\Walt Disney - Le Roi Lion 2 - DivX - Fr.avi [712058880] O61 - LFC:Last File Created 18/02/2013 - 22:32:54 ---A- C:\Users\Damien\Downloads\Le roi Lion (les 3) French by [SG_TE@M]\Le.Roi.Lion.3.avi [734511104] O61 - LFC:Last File Created 18/02/2013 - 23:01:00 ---A- C:\Users\Damien\AppData\Roaming\XnView\category.db [12288] O61 - LFC:Last File Created 18/02/2013 - 23:01:01 ---A- C:\Users\Damien\AppData\Roaming\XnView\XnView.db [480805888] O61 - LFC:Last File Created 18/02/2013 - 23:05:37 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\93\5CBC7d01 [37870] O61 - LFC:Last File Created 18/02/2013 - 23:05:37 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\4\F2\C24DFd01 [22200] O61 - LFC:Last File Created 18/02/2013 - 23:05:37 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\B\58\88CF9d01 [19589] O61 - LFC:Last File Created 18/02/2013 - 23:05:38 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\C\00\F30B8d01 [21752] O61 - LFC:Last File Created 18/02/2013 - 23:05:41 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\downloads.sqlite [65536] O61 - LFC:Last File Created 18/02/2013 - 23:05:47 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\permissions.sqlite [65536] O61 - LFC:Last File Created 18/02/2013 - 23:07:24 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dht.dat.old [4066] O61 - LFC:Last File Created 18/02/2013 - 23:07:24 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\rss.dat.old [99] O61 - LFC:Last File Created 19/02/2013 - 09:57:24 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dlimagecache\2278AC1C97963C2A81B5E42DDF2BCA6353BA0B56 [53139] O61 - LFC:Last File Created 19/02/2013 - 10:05:05 ---A- C:\Users\Damien\AppData\Roaming\Corel\Messages\540226262_017002\FR\MessageCache2\Messages\1350939189915\body.htm [2482] O61 - LFC:Last File Created 19/02/2013 - 10:05:05 ---A- C:\Users\Damien\AppData\Roaming\Corel\Messages\540226262_017002\FR\MessageCache2\Messages\1350939189915\detail.htm [2378] O61 - LFC:Last File Created 19/02/2013 - 10:05:12 ---A- C:\Users\Damien\AppData\Local\Temp\TWAIN.LOG [0] O61 - LFC:Last File Created 19/02/2013 - 10:05:12 ---A- C:\Users\Damien\AppData\Local\Temp\Twain001.Mtx [2] O61 - LFC:Last File Created 19/02/2013 - 10:05:12 ---A- C:\Users\Damien\AppData\Roaming\Corel\Messages\540226262_017002\FR\MessageCache2\Workflow\shared\Images\popup_offer_pspx5ult_feb2013.jpg [119169] O61 - LFC:Last File Created 19/02/2013 - 10:05:13 ---A- C:\Users\Damien\AppData\Local\Corel PaintShop Pro\14.0\Cache\LastDBFilter.PspCache [56] O61 - LFC:Last File Created 19/02/2013 - 10:05:15 ---A- C:\Users\Damien\AppData\Roaming\Corel\Messages\540226262_017002\FR\MessageCache2\Messages\Messages.xml [4360] O61 - LFC:Last File Created 19/02/2013 - 10:05:15 ---A- C:\Users\Damien\AppData\Roaming\Corel\Messages\540226262_017002\FR\MessageCache2\Workflow\WorkflowMessages.xml [32711] O61 - LFC:Last File Created 19/02/2013 - 10:07:09 ---A- C:\Users\Damien\AppData\Local\Corel PaintShop Pro\14.0\Cache\USE.PspCache [32244] O61 - LFC:Last File Created 19/02/2013 - 10:07:09 ---A- C:\Users\Damien\AppData\Local\Temp\PCULog0.txt [954] O61 - LFC:Last File Created 19/02/2013 - 10:07:10 ---A- C:\Users\Damien\AppData\Local\Corel PaintShop Pro\14.0\Database\ImageDB.db [376832] O61 - LFC:Last File Created 19/02/2013 - 10:18:23 ---A- C:\Users\Damien\AppData\Roaming\OpenOffice.org\3\user\config\standard.sog [4504] O61 - LFC:Last File Created 19/02/2013 - 10:33:25 ---A- C:\Users\Damien\AppData\Roaming\Nuance\PDF6\SPServers.dat [12] O61 - LFC:Last File Created 19/02/2013 - 10:38:56 ---A- C:\Users\Damien\Documents\Fleur\JSP\POWER POINT jsp.odp [7981784] O61 - LFC:Last File Created 19/02/2013 - 11:10:39 ---A- C:\Users\Damien\AppData\Local\Windows Live\uxcore_WLXPhotoGallery_01.etl [12288] O61 - LFC:Last File Created 19/02/2013 - 11:30:23 ---A- C:\Users\Damien\AppData\Local\Windows Live\uxcore_WLXPhotoGallery_00.etl [12288] O61 - LFC:Last File Created 19/02/2013 - 12:01:50 ---A- C:\Users\Damien\Documents\Fleur\JSP\POWER POINT jsp2.odp [8322459] O61 - LFC:Last File Created 19/02/2013 - 12:01:59 ---A- C:\Users\Damien\AppData\Roaming\OpenOffice.org\3\user\registrymodifications.xcu [257959] O61 - LFC:Last File Created 19/02/2013 - 12:01:59 ---A- C:\Users\Damien\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\log.txt [20511] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\0\53\98B6Bd01 [19889] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\5B\6D678d01 [17927] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\3\50\84197d01 [24274] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\5\A8\7A3A8d01 [21893] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\F\97\39D4Ed01 [22430] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Roaming\MCommon\WindowsLiveUpdate.exe [106134] O61 - LFC:Last File Created 19/02/2013 - 13:23:19 ---A- C:\Users\Damien\AppData\Roaming\MCommon\uinfo.dat [21] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\48\0C46Bd01 [20199] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\6B\16227d01 [20850] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\CF\3555Cd01 [24787] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\4\08\AA9B4d01 [28578] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\4\EF\7CCDEd01 [75621] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\9\4A\984C2d01 [77102] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\F2\46D2Ad01 [18750] O61 - LFC:Last File Created 19/02/2013 - 13:23:20 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\D\64\F252Ed01 [29100] O61 - LFC:Last File Created 19/02/2013 - 13:23:50 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\5\74\0B7E8d01 [37870] O61 - LFC:Last File Created 19/02/2013 - 13:23:50 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\7\43\47D7Ed01 [17672] O61 - LFC:Last File Created 19/02/2013 - 13:23:50 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\B\5C\7CF96d01 [18101] O61 - LFC:Last File Created 19/02/2013 - 13:24:10 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.orange.fr\Inbox [2239526] O61 - LFC:Last File Created 19/02/2013 - 13:24:10 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.orange.fr\Trash [5890501] O61 - LFC:Last File Created 19/02/2013 - 13:24:25 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Inbox.msf [31684] O61 - LFC:Last File Created 19/02/2013 - 13:29:57 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.orange.fr\Trash.msf [58644] O61 - LFC:Last File Created 19/02/2013 - 13:50:30 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\folderTree.json [748] O61 - LFC:Last File Created 19/02/2013 - 13:50:31 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\cert8.db [98304] O61 - LFC:Last File Created 19/02/2013 - 13:50:31 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\key3.db [16384] O61 - LFC:Last File Created 19/02/2013 - 13:50:31 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\virtualFolders.dat [10] O61 - LFC:Last File Created 19/02/2013 - 13:59:25 --HA- C:\Users\Damien\AppData\Local\IconCache.db [17340596] O61 - LFC:Last File Created 19/02/2013 - 13:59:26 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dht.dat [4014] O61 - LFC:Last File Created 19/02/2013 - 13:59:26 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\rss.dat [99] O61 - LFC:Last File Created 19/02/2013 - 17:34:52 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\settings.dat.old [83074] O61 - LFC:Last File Created 19/02/2013 - 17:35:54 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\_CACHE_MAP_ [16660] O61 - LFC:Last File Created 19/02/2013 - 17:35:54 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\cookies.sqlite-shm [32768] O61 - LFC:Last File Created 19/02/2013 - 17:35:57 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\2\A0\FD924d01 [63519] O61 - LFC:Last File Created 19/02/2013 - 17:35:57 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\places.sqlite-shm [32768] O61 - LFC:Last File Created 19/02/2013 - 17:35:57 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\places.sqlite-wal [0] O61 - LFC:Last File Created 19/02/2013 - 17:35:57 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\prefs.js [14395] O61 - LFC:Last File Created 19/02/2013 - 17:36:08 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.orange.fr\Inbox.msf [9229] O61 - LFC:Last File Created 19/02/2013 - 17:36:18 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\localstore.rdf [10509] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\0\2F\FB167d01 [67198] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\0\6E\B2D83d01 [22884] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\0\B4\CFBBDd01 [23610] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\1\1D\E2AADd01 [16815] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\3\73\84B71d01 [50324] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\4\97\93EE6d01 [19609] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\5\AE\5DAE5d01 [46870] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\A\5A\AB573d01 [27847] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\B\88\C1F33d01 [46064] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\C\46\9D59Bd01 [18109] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\C\CD\0DBB6d01 [33874] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\D\14\BEB9Ad01 [44057] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\E\0B\E1D44d01 [79907] O61 - LFC:Last File Created 19/02/2013 - 17:36:25 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\F\88\F0C7Ed01 [37274] O61 - LFC:Last File Created 19/02/2013 - 17:36:32 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\_CACHE_002_ [124901] O61 - LFC:Last File Created 19/02/2013 - 17:36:32 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\_CACHE_003_ [518595] O61 - LFC:Last File Created 19/02/2013 - 17:36:36 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Inbox [10879336] O61 - LFC:Last File Created 19/02/2013 - 17:36:36 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Trash [64461660] O61 - LFC:Last File Created 19/02/2013 - 17:36:37 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\cookies.sqlite [524288] O61 - LFC:Last File Created 19/02/2013 - 17:36:42 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\_CACHE_CLEAN_ [1] O61 - LFC:Last File Created 19/02/2013 - 17:36:46 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\Trash.msf [348033] O61 - LFC:Last File Created 19/02/2013 - 17:36:46 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\cookies.sqlite-wal [0] O61 - LFC:Last File Created 19/02/2013 - 17:36:52 ---A- C:\Users\Damien\AppData\Local\Thunderbird\Profiles\0af9r6bf.default\Cache\_CACHE_001_ [218035] O61 - LFC:Last File Created 19/02/2013 - 17:37:57 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\global-messages-db.sqlite [4751360] O61 - LFC:Last File Created 19/02/2013 - 17:40:54 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\session.json [387] O61 - LFC:Last File Created 19/02/2013 - 18:04:52 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\settings.dat [83176] O61 - LFC:Last File Created 19/02/2013 - 18:15:36 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dht_feed.dat.old [2] O61 - LFC:Last File Created 19/02/2013 - 18:15:56 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.orange.fr\popstate.dat [217138] O61 - LFC:Last File Created 19/02/2013 - 18:16:24 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\Mail\pop.googlemail.com\popstate.dat [64] O61 - LFC:Last File Created 19/02/2013 - 18:20:16 ---A- C:\Users\Damien\Downloads\ZHPDiag2.exe [5400765] O61 - LFC:Last File Created 19/02/2013 - 18:20:42 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\dht_feed.dat [2] O61 - LFC:Last File Created 19/02/2013 - 18:21:10 ---A- C:\Users\Damien\AppData\Roaming\Thunderbird\Profiles\0af9r6bf.default\panacea.dat [9699] O61 - LFC:Last File Created 19/02/2013 - 18:22:40 ---A- C:\Users\Damien\AppData\Local\Temp\volume_temp_info [133] O61 - LFC:Last File Created 19/02/2013 - 18:23:11 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\resume.dat.old [95509] O61 - LFC:Last File Created 19/02/2013 - 18:25:11 ---A- C:\Users\Damien\AppData\Roaming\uTorrent\resume.dat [95238] ~ Scan Files in 02mn 39s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 03/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASMMAP64) .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64 O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK O64 - Services: CurCS - 30/10/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 15/10/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI O64 - Services: CurCS - 07/09/2011 - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ATKWMIACPIIO) .(.ASUS - ATK WMIACPI Utility.) - LEGACY_ATKWMIACPIIO O64 - Services: CurCS - 15/05/2012 - C:\Windows\System32\DRIVERS\nvkflt.sys (nvkflt) .(.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) - LEGACY_NVKFLT O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 30/11/2010 - C:\Windows\System32\DRIVERS\TurboB.sys (TurboB) .(.Intel(R) Corporation - TurboB Device Driver.) - LEGACY_TURBOB ~ Scan Services in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.0D3B680986310AE5540578C0E481C6A0] [SPRF][06/10/2010] (...) -- C:\ProgramData\FullRemove.exe [131984] [MD5.6A68E02BEF1CC1A63EFFE5E2AF6E9582] [SPRF][17/02/2013] (...) -- C:\Users\Damien\AppData\Local\Temp\__PDFCORE_FMP.dat [111071] [MD5.21F26110DFE7257A3AF5959BED3B6B42] [SPRF][01/09/2012] (...) -- C:\Program Files (x86)\in_wm.dll [313344] ~ Scan Files in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{6C8FA682-FDF1-4EE5-B6E2-A81ECB407C3D}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe O87 - FAEL: "{398E3995-8B64-404B-AFD5-81E95B33C13D}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe O87 - FAEL: "{92080569-8FC8-4C1E-84B6-CBE70C3D2C5E}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{D1988D10-645E-437A-9470-F749CB2EC537}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema 10 Main Program.) -- C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe O87 - FAEL: "{8FB96157-6C19-43B9-B33D-8C02DA6749B9}" | In - None - P17 - TRUE | .(.CyberLink Corp. - ASUSDVD.) -- C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD10.exe O87 - FAEL: "{DE69E839-7A6B-4CE4-AC74-A936C040A084}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O87 - FAEL: "{88DA6288-31B3-4280-8DF6-44D72B124D97}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O87 - FAEL: "TCP Query User{54ECA4AB-E9DF-476D-9FEE-723C6225640D}C:\program files (x86)\winamp\winamp.exe" | In - Public - P6 - TRUE | .(.Nullsoft, Inc. - Winamp.) -- C:\program files (x86)\winamp\winamp.exe O87 - FAEL: "UDP Query User{E30C3F36-C458-4F61-A38E-71A8228776C4}C:\program files (x86)\winamp\winamp.exe" | In - Public - P17 - TRUE | .(.Nullsoft, Inc. - Winamp.) -- C:\program files (x86)\winamp\winamp.exe O87 - FAEL: "{F2CABD60-F869-4178-8CC7-3E7FE2498523}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O87 - FAEL: "{22280877-B802-423C-9F67-716DB650F219}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O87 - FAEL: "{FBC46ECD-E2B2-4363-AE24-4A974C51C372}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe O87 - FAEL: "{67EF8134-19F1-47C1-B02C-9F673748FD9A}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe O87 - FAEL: "{2AA505FE-18C8-4B2F-A155-192409E2396E}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe O87 - FAEL: "{954F3B50-1162-44A4-91D9-71099A7E7D71}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe O87 - FAEL: "{FDE9BF7B-0AF5-4B2C-A23C-5406730A2F1A}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe O87 - FAEL: "{4C7B90E9-7983-4356-AB7E-444052246791}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe O87 - FAEL: "{D7D71EB4-57BD-40AA-838E-D897DE80C267}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - UPlayBrowser Application.) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\UPlayBrowser.exe O87 - FAEL: "{C0B75959-DB52-42E7-ACB2-F0A8A9A8A000}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - UPlayBrowser Application.) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed II\UPlayBrowser.exe O87 - FAEL: "{DC3C2E41-BD24-41DF-8470-2771C142FBFA}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ~ Scan Firewall in 00mn 00s ---\\ Scan Additionnel (O88) Database Version : v2.10791 - (19/02/2013) Clés trouvées (Keys found) : 98 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster [HKCU\Software\Softonic] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent ~ Scan Additionnel in 00mn 11s ---\\ Recherche détournement de DNS routeur (O89) (None) ---\\ Product Upgrade Codes (O90) O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "098990BCF5D15D11E99A0005AB3E711E" . (.PowerDirector.) -- C:\Windows\Installer\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\ARPPRODUCTICON.exe O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "1ED3565076566C049B03933D996B3496" . (.OpenOffice.org 3.3.) -- C:\Windows\Installer\{05653DE1-6567-40C6-B930-39D399B64369}\soffice.ico O90 - PUC: "21F1DBD139DE0C947ACC65BCED841885" . (.ASUS LifeFrame3.) -- C:\Windows\Installer\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}\_853F67D554F05449430E7E.exe O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe O90 - PUC: "3F7A4F31CBAE1624FAB6317177F77055" . (.Fast Boot.) -- C:\Windows\Installer\{13F4A7F3-EABC-4261-AF6B-1317777F0755}\_6FEFF9B68218417F98F549.exe O90 - PUC: "42C6FBF1DF1C10144AB2C065F4E9E897" . (.PowerStarter.) -- C:\Windows\Installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\ARPPRODUCTICON.exe O90 - PUC: "46289B33988A31940AAC3C467A05233B" . (.ASUS Power4Gear Hybrid.) -- C:\Windows\Installer\{33B98264-A889-4913-A0CA-C364A75032B3}\_6FEFF9B68218417F98F549.exe O90 - PUC: "50FA96906FF400C4496034952983EDD0" . (.ASUS Splendid Video Enhancement Technology.) -- C:\Windows\Installer\{0969AF05-4FF6-4C00-9406-43599238DE0D}\_853F67D554F05449430E7E.exe O90 - PUC: "527317448CC801747B72CD313A66F5C9" . (.Adobe Photoshop Lightroom 3.5 64-bit.) -- C:\Windows\Installer\{44713725-8CC8-4710-B727-DC13A3665F9C}\ARPPRODUCTICON.exe O90 - PUC: "53E4A6C7EEE5A6247AFBAE59DC5CD4AE" . (.Music Now!.) -- C:\Windows\Installer\{7C6A4E35-5EEE-426A-A7BF-EA95CDC54DEA}\ARPPRODUCTICON.exe O90 - PUC: "59708500C18578549B2F7323D0A73BF7" . (.ICA.) -- c:\Windows\Installer\{00580795-581C-4587-B9F2-37320D7AB37F}\ARPPRODUCTICON.exe O90 - PUC: "5E3E958AF26CAFB4FAD1B2590E1366FA" . (.ASUS USB Charger Plus.) -- C:\Windows\Installer\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}\_853F67D554F05449430E7E.exe O90 - PUC: "6760F93DE36159549A712EF899BB4D2D" . (.ASUS AI Recovery.) -- C:\Windows\Installer\{D39F0676-163E-4595-A917-E28F99BBD4D2}\_6FEFF9B68218417F98F549.exe O90 - PUC: "76E045AFC590B1A479ABD445D7CEA94F" . (.ASUS Live Update.) -- C:\Windows\Installer\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}\MyIcon O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico O90 - PUC: "81431D00FDD7D3D42A732E791B30BBB6" . (.Setup.) -- c:\Windows\Installer\{00D13418-7DDF-4D3D-A237-E297B103BB6B}\ARPPRODUCTICON.exe O90 - PUC: "923EEB00BAABFF94B966554E1BB2A9DD" . (.IPM_PSP_COM.) -- c:\Windows\Installer\{00BEE329-BAAB-49FF-9B66-55E4B12B9ADD}\ARPPRODUCTICON.exe O90 - PUC: "93B0BF4E199C7EE459DDA1A187753DD3" . (.Asmedia ASM104x USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}\ARPPRODUCTICON.exe O90 - PUC: "A7A47D00DA7F00D4BA2D90373826297C" . (.PSPPHelp.) -- c:\Windows\Installer\{00D74A7A-F7AD-4D00-ABD2-0973836292C7}\ARPPRODUCTICON.exe O90 - PUC: "B0AFE77B3DB92214F9A9519A365BAE42" . (.Intel(R) Turbo Boost Technology Monitor 2.0.) -- C:\Windows\Installer\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}\ARPPRODUCTICON.exe O90 - PUC: "B476F94747628E7478C965620AB6A219" . (.InstantOn for NB.) -- C:\Windows\Installer\{749F674B-2674-47E8-879C-5626A06B2A91}\_6FEFF9B68218417F98F549.exe O90 - PUC: "D2A1EA002CB795340ACE1EF9633E19BB" . (.Corel PaintShop Pro X4.) -- c:\Windows\Installer\{00AE1A2D-7BC2-4359-A0EC-E19F36E391BB}\ARPPRODUCTICON.exe O90 - PUC: "D409084BF37F37640B43A8F594C21948" . (.Nuance PDF Reader.) -- C:\Windows\Installer\{B480904D-F73F-4673-B034-8A5F492C9184}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "DE532CED4A8571542A874CE1D8EABAB3" . (.PowerDVD.) -- C:\Windows\Installer\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\ARPPRODUCTICON.exe O90 - PUC: "E19212F84440D1B49B9F34077AE343D6" . (.WinFlash.) -- C:\Windows\Installer\{8F21291E-0444-4B1D-B9F9-4370A73E346D}\MyIcon O90 - PUC: "E339C5BAD7C503D43B41C9384AB949EB" . (.ATK Package.) -- C:\Windows\Installer\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}\_294823.exe O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.2.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O90 - PUC: "E8ED5100F9D8E304E8A5048914E01652" . (.PSPPro64.) -- c:\Windows\Installer\{0015DE8E-8D9F-403E-8E5A-4098410E6125}\ARPPRODUCTICON.exe O90 - PUC: "E9BB5554517E06241A878EFE2D6B353E" . (.Alcor Micro USB Card Reader.) -- C:\Windows\Installer\{4555BB9E-E715-4260-A178-E8EFD2B653E3}\ARPPRODUCTICON.exe O90 - PUC: "EC9BCB90B469ADB4EA645B0ABAFED1F3" . (.ASUS SonicMaster.) -- C:\Windows\Installer\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}\ARPPRODUCTICON.exe O90 - PUC: "F4C06B7B8BD0FE24E8CDF5124D2C7DF3" . (.PWR Option.) -- C:\Windows\Installer\{B7B60C4F-0DB8-42EF-8EDC-5F21D4C2D73F}\_853F67D554F05449430E7E.exe O90 - PUC: "F5A5CB4C79A4CC74993CBAE80175A2EF" . (.Wireless Console 3.) -- C:\Windows\Installer\{C4BC5A5F-4A97-47CC-99C3-AB8E10572AFE}\_853F67D554F05449430E7E.exe O90 - PUC: "FAEC7109A5EB37F4A8E08CE76279E155" . (.TomTom HOME.) -- C:\Windows\Installer\{9017CEAF-BE5A-4F73-8A0E-C87E26971E55}\ARPPRODUCTICON.exe O90 - PUC: "FEAAC60069AC1814CA22EF656D41234E" . (.PSPPContent.) -- c:\Windows\Installer\{006CAAEF-CA96-4181-AC22-FE56D61432E4}\ARPPRODUCTICON.exe ~ Scan Files in 00mn 00s ---\\ MyComputer Name Space (O92) O92 - MNS: ASUS WebStorage Drive - {d6044399-0b9e-4084-a9ac-c4b7c7800fcf} ~ Scan MNS in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 08/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 25/01/2011 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe SR - | Auto 16/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe SR - | Auto 01/12/2011 92800 | (ASUS InstantOn) . (.ASUS.) - C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe SR - | Auto 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe SR - | Auto 30/10/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe SR - | Auto 06/10/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SS - | Demand 08/01/2013 115760 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe SR - | Auto 15/05/2012 889664 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SS - | Auto 15/05/2012 1262400 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe SR - | Auto 10/03/2010 189728 | (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe SR - | Demand 247152 | (RichVideo) . (...) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe SS - | Auto 07/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 05/12/2012 92632 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe SR - | Demand 30/11/2010 149504 | (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe SR - | Auto 06/10/2010 2655768 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Demand 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 01s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ Scan MBR in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Damien at 19/02/2013 18:28:56 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 04s End of the scan (2076 lines in 05mn 28s)(0)