Rapport de ZHPDiag v1.3.5.100 par Nicolas Coolman, Update du 19/02/2013 Run by Pilla at 20/02/2013 20:10:41 State : Version à jour. High Elevated Privileges : OK UAC : Deactivate by program ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 GCIE: Google Chrome v24.0.1312.57 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6091 MB (56% free) System Restore: Activé (Enable) System drive C: has 136 GB (19%) free of 681 GB ---\\ Logged in mode ~ Computer Name: PILLA-HP ~ User Name: Pilla ~ All Users Names: Pilla, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Pilla\AppData\Roaming\ ~ %Desktop% : C:\Users\Pilla\Desktop\ ~ %Favorites% : C:\Users\Pilla\Favorites\ ~ %LocalAppData% : C:\Users\Pilla\AppData\Local\ ~ %StartMenu% : C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 136 Go of 681 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 18 Go) E:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.03/09/2011 - 13:45:34.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.435E9C764E1EF70058580996452BE6A2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/01/2013 - 02:12:03.) -- C:\Windows\System32\wininet.dll [1392128] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.03/09/2011 - 13:46:59.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Scan Generic Processes in 00mn 01s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/4183 ~ Mes musiques (My Musics) : 1/948 ~ Mes Videos (My Videos) : 2/6 ~ Mes Favoris (My Favorites) : 1/56 ~ Mes Documents (My Documents) : 2/408 ~ Mon Bureau (My Desktop) : 1/269 ~ Menu demarrer (Programs) : 1/27 ~ Scan Hidden Files in 00mn 01s ---\\ Processus lancés [MD5.2CF497C586D50F7D402BEC33156E0AF4] - (.HP - TouchControl.) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe [642888] [PID.3112] [MD5.7D6D810C7A6B7A37F9F61687AFC5F9A0] - (.HP - BioMonitor.) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe [142664] [PID.3212] [MD5.E7CAAE5C682A19E7C6FF77D9136EBA5C] - (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1084840] [PID.3700] [MD5.4F17353DA4564D44EA81C6C954811946] - (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe [436728] [PID.3724] [MD5.41D1214B86A06FD29423A797EBDA17E4] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160] [PID.3932] [MD5.9D51EA92A612B37E76E5E4621650C50A] - (.Renesas Electronics Corporation - USB 3.0 Monitor.) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288] [PID.3956] [MD5.D59ABED205F424BD4C52419479930BE9] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296] [PID.3152] [MD5.B63E5C7807334A3A8F731062F15462CC] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008] [PID.3140] [MD5.894CE4301565675306C05BC50B9523DE] - (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520] [PID.3764] [MD5.D3AC38E80E928CC61A22650E04423BB8] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328] [PID.3804] [MD5.982C048CF2B5828F93592BA7C07593EC] - (.SweetIM Technologies Ltd. - SweetIM Instant Messenger Enhancer.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [114992] [PID.3784] [MD5.45945F39F2F6D08A0FAEC275E68FFC5A] - (.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [295728] [PID.3820] [MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848] [PID.3060] [MD5.0FEC41A21705FEF73C09FE51C055CF80] - (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1573584] [PID.2376] [MD5.E400FC5C0D9C18C232035F154418CACE] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [385248] [PID.3676] [MD5.952EC643565C42DFC27B88BF69C36556] - (.Bandoo Media, inc - Data Manager.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe [1694608] [PID.4168] [MD5.CDB517386A26AE420CB24BDB3CD88779] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448] [PID.4268] [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [PID.4340] [MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ysWOW64\RunDll32.exe [0] [PID.4612] [MD5.DF3EC5F7ABD8AC1BE5C0C9486029826E] - (.Broadcom Corporation. - Bluetooth Headset Skype Proxy.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe [13600] [PID.3544] [MD5.827CE65F92C905FAD09159AC85A28E5F] - (.Nokia - Microsoft Bluetooth Media Server.) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe [148520] [PID.4852] [MD5.8911702CC546B76FE8F9C61987C68C43] - (.Microsoft Corporation - Internet Low-Mic Utility Tool.) -- C:\Program Files (x86)\Internet Explorer\IELowutil.exe [222720] [PID.8864] [MD5.E8946C692B6ADBDBB45E09BEA6D4948A] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe [690888] [PID.9368] [MD5.F6E3D406A555A557D0F7CF085362EB4C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5687296] [PID.8428] [MD5.2074A85A6B8F84A5A9C60B915B465FAF] - (.HP - HP Service.) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [265544] [PID.844] [MD5.5A36F8FC0065F24DB928DE5B737BE943] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752] [PID.1856] [MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1116] [MD5.D19C4EE2AC7C47B8F5F84FFF1A789D8A] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [63960] [PID.1648] [MD5.59B9154153C67E464EF50CF51A90A7D5] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816] [PID.2016] [MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.2112] [MD5.F630DD7564EBB7248A13B1CC774D9EA6] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [26680] [PID.2292] [MD5.0A0B8BB3357510EB4F5F53762B94BDEF] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe [565472] [PID.4072] [MD5.7B1637E5E0476CE22E8D76AC1203205E] - (.Hewlett-Packard Company - hpqwmiex Module.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [799800] [PID.3872] [MD5.C15B813F2FDB44F87F23312472C6E790] - (.Nokia - ServiceLayer Module.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [720936] [PID.3712] [MD5.983FC69644DDF0486C8DFEA262948D1A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.852] [MD5.D7E0BED3EA21D7BDDD410ADE51708D90] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.5980] [MD5.E040F0064D39F73BB4995D494F3DCBB8] - (.Hewlett-Packard Development Company L.P. - HP Connection Manager Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [1071160] [PID.4868] [MD5.A678E5DDD974903DD71F503BDCACA218] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656280] [PID.3384] ~ Scan Processes Running in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Pilla\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com G0 - GCSP: Preference [User Data\Default] http://www.searchnu.com G1 - GCS: Preference [User Data\Default] http://dts.search-results.com ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: TSBHO Class [64Bits] - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} . (.HP - Website Log On.) -- C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\ O2 - BHO: Searchqu Toolbar [64Bits] - {99079a25-328f-4bd4-be04-00955acaa0a7} . (.Pas de propriétaire - dtx Dynamic Link Library.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll O2 - BHO: DataMngr [64Bits] - {9D717F81-9148-4f12-8568-69135F087DB0} . (.Bandoo Media, inc - Url Helper.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\BrowserConnection.dll O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.) O2 - BHO: Ask Toolbar BHO [64Bits] - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Avira SearchFree Toolbar.) -- C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: SWEETIE [64Bits] - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O2 - BHO: Yontoo Layers [64Bits] - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} . (.Yontoo LLC - Yontoo Runtime.) -- C:\Program Files (x86)\Yontoo\YontooIEClient.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} Clé orpheline O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKCU\..\Run: [NokiaSuite.exe] . (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe O4 - HKCU\..\Run: [qmsrt] C:\Users\Pilla\AppData\Roaming\qmsrt.dll (.not file.) O4 - HKCU\..\Run: [MyTomTomSA.exe] . (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Wow6432Node\Run: [NUSB3MON] . (.Renesas Electronics Corporation - USB 3.0 Monitor.) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe O4 - HKLM\..\Wow6432Node\Run: [HPConnectionManager] . (.Hewlett-Packard Development Company L.P. - HPCMDelayStart Application.) -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [HPOSD] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Wow6432Node\Run: [SweetIM] . (.SweetIM Technologies Ltd. - SweetIM Instant Messenger Enhancer.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe O4 - HKLM\..\Wow6432Node\Run: [Sweetpacks Communicator] . (.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] . (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [DATAMNGR] . (.Bandoo Media, inc - Data Manager.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-21-1030028451-803183202-3925039935-1000\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKUS\S-1-5-21-1030028451-803183202-3925039935-1000\..\Run: [NokiaSuite.exe] . (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe O4 - HKUS\S-1-5-21-1030028451-803183202-3925039935-1000\..\Run: [qmsrt] C:\Users\Pilla\AppData\Roaming\qmsrt.dll (.not file.) O4 - HKUS\S-1-5-21-1030028451-803183202-3925039935-1000\..\Run: [MyTomTomSA.exe] . (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\All Users\Desktop\Adobe Reader X.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe O4 - Global Startup: C:\Users\All Users\Desktop\Avira Control Center.lnk . (.Avira Operations GmbH & Co. KG.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe O4 - Global Startup: C:\Users\All Users\Desktop\BlackBerry Desktop Software.lnk . (.Research In Motion.) -- C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe O4 - Global Startup: C:\Users\All Users\Desktop\Choix de navigateur .lnk . (.Microsoft Corporation.) -- C:\Windows\System32\browserchoice.exe O4 - Global Startup: C:\Users\All Users\Desktop\Civilization III Complete Edition.lnk . (.© 2001-2004 Atari Inc..) -- C:\Program Files (x86)\Firaxis Games\Civilization III Complete\Conquests\Civ3Conquests.exe O4 - Global Startup: C:\Users\All Users\Desktop\eBay.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - Global Startup: C:\Users\All Users\Desktop\Epson Easy Photo Print.lnk . (.SEIKO EPSON CORPORATION.) -- C:\Program Files (x86)\Epson Software\Easy Photo Print\EPQuicker.exe O4 - Global Startup: C:\Users\All Users\Desktop\EPSON Scan.lnk . (.SEIKO EPSON CORP..) -- C:\Windows\twain_32\escndv\escndv.exe O4 - Global Startup: C:\Users\All Users\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\All Users\Desktop\Guide d'utilisation EPSON SX235 Series.lnk . (...) -- C:\Program Files (x86)\Epson Software\Epson Manual\EPSON SX235 Series\fr\Useg\index.htm O4 - Global Startup: C:\Users\All Users\Desktop\Guide réseau EPSON SX235 Series.lnk . (...) -- C:\Program Files (x86)\Epson Software\Epson Manual\EPSON SX235 Series\fr\Netg\index.htm O4 - Global Startup: C:\Users\All Users\Desktop\iLivid Download Manager.lnk . (...) -- C:\Program Files (x86)\iLivid\ilivid.exe O4 - Global Startup: C:\Users\All Users\Desktop\Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe O4 - Global Startup: C:\Users\All Users\Desktop\MBRCheck.lnk . (...) -- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe O4 - Global Startup: C:\Users\All Users\Desktop\MiniTool Power Data Recovery 6.5.lnk . (.MiniTool Solution Ltd..) -- C:\Program Files (x86)\PowerDataRecovery\PowerDataRecovery.exe O4 - Global Startup: C:\Users\All Users\Desktop\Nokia Suite.lnk . (.Nokia.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe O4 - Global Startup: C:\Users\All Users\Desktop\Paint.NET.lnk . (...) -- C:\Program Files (x86)\Paint.NET\PaintDotNet.exe (.not file.) O4 - Global Startup: C:\Users\All Users\Desktop\Skype.lnk . (.Skype Technologies S.A..) -- C:\Program Files (x86)\Online Services\Skype\SkypeSetup.exe O4 - Global Startup: C:\Users\All Users\Desktop\Snapfish.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - Global Startup: C:\Users\All Users\Desktop\VirginMega DownloadManager v3.lnk . (...) -- C:\Program Files (x86)\VirginMega DownloadManager v3\VirginMega DownloadManager v3.exe O4 - Global Startup: C:\Users\All Users\Desktop\WildTangent Games App - hp.lnk . (...) -- C:\Program Files (x86)\HP Games\onplay\onplay.exe O4 - Global Startup: C:\Users\All Users\Desktop\ZHPDiag.lnk . (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe O4 - Global Startup: C:\Users\All Users\Desktop\ZHPFix.lnk . (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe O4 - Global Startup: C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Pilla\Desktop\Continue vGrabber Installation.lnk . (...) -- C:\Users\Pilla\AppData\Local\Temp\ICReinstall_video_downloader.exe (.not file.) O4 - Global Startup: C:\Users\Pilla\Desktop\Find and Mount.lnk . (...) -- C:\Program Files\A-FF Find and Mount\FindAndMount.exe O4 - Global Startup: C:\Users\Pilla\Desktop\PC Inspector File Recovery.lnk . (...) -- C:\Program Files (x86)\Convar\PC Inspector File Recovery\Filerecovery.exe O4 - Global Startup: C:\Users\Pilla\Desktop\SweetPcFix.url . (...) -- C:\Users\Pilla\Desktop\SweetPcFix.url O4 - Global Startup: C:\Users\Pilla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\OFFICE11\OUTLOOK.EXE O4 - Global Startup: C:\Users\Pilla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\Pilla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Global Startup in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 [64Bits] - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{7A4EBA85-CEB4-4918-9C39-091D31B537CE}: DhcpNameServer = 172.168.11.12 O17 - HKLM\System\CCS\Services\Tcpip\..\{E2D4FA0B-31DA-4C9A-8C94-62F5AD73AF06}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{7A4EBA85-CEB4-4918-9C39-091D31B537CE}: DhcpNameServer = 172.168.11.12 O17 - HKLM\System\CS1\Services\Tcpip\..\{E2D4FA0B-31DA-4C9A-8C94-62F5AD73AF06}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{7A4EBA85-CEB4-4918-9C39-091D31B537CE}: DhcpNameServer = 172.168.11.12 O17 - HKLM\System\CS2\Services\Tcpip\..\{E2D4FA0B-31DA-4C9A-8C94-62F5AD73AF06}: DhcpNameServer = 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (...) -- ~ Scan Protocole Additionnel in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Scan Winlogon in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (.Bandoo Media, inc - Data Manager.) - C:\Program Files (x86)\WI3C8A~1\Datamngr\x64\datamngr.dll ~ Scan AppInit DLL in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Se (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Program Files\IDT\WDM\AESTSr64.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Avira Scheduler.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.exe O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe O23 - Service: TrueSuiteService (FPLService) . (.HP - HP Service.) - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) ~ Scan Services in 00mn 05s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [MD5.24A63F38DF514E6774A850A0710760A4] [APT] [ServicePlan] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.8770614C14BB04EB4BAFF370ED38B4AE] [APT] [HPSA Upgrade] (.Hewlett-Packard.) -- C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [MD5.00000000000000000000000000000000] [APT] [HPSAObjUtilTask] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe (.not file.) ~ Scan Scheduled Task in 00mn 06s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\System32\DRIVERS\avkmgr.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- ABBYY FineReader 9.0 Sprint O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- {F9000000-0018-0000-0000-074957833700} O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {9A11B072-9CE7-ABB9-2F65-EC971A7B839D} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Reader X (10.1.4) MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-AA0000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player O42 - Logiciel: Agatha Christie - Peril at End House - (.WildTangent.) [HKLM][64Bits] -- WT089362 O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE} O42 - Logiciel: AuthenTec TrueAPI - (.AuthenTec, Inc..) [HKLM][64Bits] -- {054EF02F-95D8-48F4-9EEB-2F9CE3072ED8} O42 - Logiciel: Avira Free Antivirus - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop O42 - Logiciel: Avira SearchFree Toolbar plus Web Protection Updater - (.Ask.com.) [HKCU][64Bits] -- {79A765E1-C399-405B-85AF-466F52E918B0} O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089453 O42 - Logiciel: Big Rig Europe - (.WildTangent.) [HKLM][64Bits] -- WT089497 O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {1E03DB52-D5CB-4338-A338-E526DD4D4DB1} O42 - Logiciel: BlackBerry Desktop Software 7.1 - (.Research In Motion Ltd..) [HKLM][64Bits] -- BlackBerry_Desktop O42 - Logiciel: BlackBerry Desktop Software 7.1 - (.Research In Motion Ltd..) [HKLM][64Bits] -- {7A3E6E1C-CF5A-4CE9-B8D6-A2F9B7BA18FC} O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM][64Bits] -- WT089308 O42 - Logiciel: Bounce Symphony - (.WildTangent.) [HKLM][64Bits] -- WT087330 O42 - Logiciel: Broadcom 2070 Bluetooth 3.0 - (.Broadcom Corporation.) [HKLM][64Bits] -- {436E0B79-2CFB-4E5F-9380-E17C1B25D0C5} O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Wireless LAN Adapter O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WT089359 O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {949D6B51-10E8-4CD4-A81E-064E38240415} O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089454 O42 - Logiciel: Civilization III Complete Edition - (.2K Games.) [HKLM][64Bits] -- InstallShield_{2157961D-0507-44A8-BCF2-1EE2D439E8DF} O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WT089492 O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT087536 O42 - Logiciel: EPSON SX235 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON SX235 Series O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM][64Bits] -- EPSON Scanner O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} O42 - Logiciel: Energy Star Digital Logo - (.Hewlett-Packard.) [HKLM][64Bits] -- {BD1A34C9-4764-4F79-AE1F-112F8C89D3D4} O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {A02D7029-C4EF-44C1-9FD4-C0D3CA518113} O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {8ED43F7E-A8F6-4898-AF11-B6158F2EDF94} O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {3E31400D-274E-4647-916C-2CACC3741799} O42 - Logiciel: Evernote v. 4.2.2 - (.Evernote Corp..) [HKLM][64Bits] -- {F761359C-9CED-45AE-9A51-9D6605CD55C4} O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WT087361 O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WT089328 O42 - Logiciel: Find and Mount 2.32 - (.A-FF Data Recovery.) [HKLM][64Bits] -- Find and Mount_is1 O42 - Logiciel: Fishdom - (.WildTangent.) [HKLM][64Bits] -- WT089493 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Guide d'utilisation EPSON SX235 Series - (.Pas de propriétaire.) [HKLM][64Bits] -- EPSON SX235 Series Useg O42 - Logiciel: Guide réseau EPSON SX235 Series - (.Pas de propriétaire.) [HKLM][64Bits] -- EPSON SX235 Series Netg O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F0F4DE4E-9EC6-4E63-A386-39E3421D3D83} O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} O42 - Logiciel: HP Connection Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {795AADBF-58C2-42D0-B779-E730702A247E} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP DVB-T TV Tuner 8.0.64.43 - (.Pas de propriétaire.) [HKLM][64Bits] -- HP DVB-T TV Tuner O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {83A375B6-6FC2-4F8A-948E-E506DB9DCDF0} O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall O42 - Logiciel: HP On Screen Display - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF} O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {872B1C80-38EC-4A31-A25C-980820593900} O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EB58480C-0721-483C-B354-9D35A147999F} O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {210A03F5-B2ED-4947-B27E-516F50CBB292} O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} O42 - Logiciel: HP SimplePass 2011 - (.Hewlett-Packard.) [HKLM][64Bits] -- {BCFAA37D-A6DB-43BF-A351-43F183E52D07} O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6384C914-A4BC-40B6-8059-29AD4E65F4B6} O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: Intel(R) Display Audio Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} O42 - Logiciel: Java 7 Update 6 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217006FF} O42 - Logiciel: Java(TM) 6 Update 24 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86416024FF} O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WT087490 O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: MSVC80_x64_v2 - (.Nokia.) [HKLM][64Bits] -- {4D668D4F-FAA2-4726-834C-31F4614F312E} O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM][64Bits] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} O42 - Logiciel: MSVC90_x64 - (.Nokia.) [HKLM][64Bits] -- {AB071C8B-873C-459F-ACA9-9EBE03C3E89B} O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM][64Bits] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Mah Jong Medley - (.WildTangent.) [HKLM][64Bits] -- WT087393 O42 - Logiciel: Malwarebytes Anti-Malware version 1.65.1.1000 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: MiniTool Power Data Recovery - (.MiniTool Solution Ltd..) [HKLM][64Bits] -- MiniTool Power Data Recovery_is1 O42 - Logiciel: MyTomTom 3.2.0.802 - (.TomTom.) [HKLM][64Bits] -- MyTomTom O42 - Logiciel: Mystery P.I. - The London Caper - (.WildTangent.) [HKLM][64Bits] -- WT089460 O42 - Logiciel: Namco All-Stars PAC-MAN - (.WildTangent.) [HKLM][64Bits] -- WT089484 O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM][64Bits] -- {A57025CC-5F2E-4D01-B387-06DB10500D43} O42 - Logiciel: Nokia Suite - (.Nokia.) [HKLM][64Bits] -- Nokia Suite O42 - Logiciel: Nokia Suite - (.Nokia.) [HKLM][64Bits] -- {7964AE02-9127-42C0-A917-2CE4CD4EFE3B} O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM][64Bits] -- {DA5B2BDC-F654-4A88-A669-4D34BC7846A1} O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM][64Bits] -- FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D O42 - Logiciel: Paint.NET v3.5.10 - (.dotPDN LLC.) [HKLM][64Bits] -- {529125EF-E3AC-4B74-97E6-F688A7C0F1C0} O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT087394 O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WT089458 O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WT087396 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {0E64B098-8018-4256-BA23-C316A43AD9B0} O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C} O42 - Logiciel: Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {DBCD5E64-7379-4648-9444-8A6558DCB614} O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996} O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- {5442DAB8-7177-49E1-8B22-09A049EA5996} O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087510 O42 - Logiciel: SweetIM for Messenger 3.6 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {0965F857-DAAD-4F93-8054-0E2EC3C8C5B0} O42 - Logiciel: SweetPacks Toolbar for Internet Explorer 4.6 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {4183178B-4D4E-48A7-9257-454BA90A760E} O42 - Logiciel: Synaptics TouchPad Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App O42 - Logiciel: Update Manager for SweetPacks 1.0 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {FB697452-8CA4-46B4-98B1-165C922A2EF3} O42 - Logiciel: Validity WBF DDK - (.Validity Sensors, Inc..) [HKLM][64Bits] -- {7C54D017-21BB-43AE-9746-33E78AF4A425} O42 - Logiciel: VirginMega DownloadManager V3 - (.VirginMega.) [HKLM][64Bits] -- VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1 O42 - Logiciel: VirginMega DownloadManager V3 - (.VirginMega.) [HKLM][64Bits] -- {39E30665-B93F-C0D6-7668-28F85E77E39A} O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM][64Bits] -- WT087513 O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {4412F224-3849-4461-A3E9-DEEF8D252790} O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WT087519 O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp O42 - Logiciel: Windows iLivid Toolbar - (.Bandoo Media, Inc.) [HKLM][64Bits] -- Searchqu Toolbar O42 - Logiciel: Yontoo 1.10.02 - (.Yontoo LLC.) [HKLM][64Bits] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B} O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089455 O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM][64Bits] -- iLivid O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM][64Bits] -- {8D15E1B2-D2B7-4A17-B44B-D2DDE5981406} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\APN] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\AskToolbar] [HKCU\Software\AppDataLow\Software\CallingID] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\searchqutoolbar] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\AskToolbar] [HKCU\Software\Atola] [HKCU\Software\Avira] [HKCU\Software\CDDB] [HKCU\Software\CallingID] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Convar] [HKCU\Software\Cygwin] [HKCU\Software\DataMngr] [HKCU\Software\DataMngr_Toolbar] [HKCU\Software\EPSON] [HKCU\Software\EasyBits] [HKCU\Software\Extended Systems] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\InstallCore] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\LG Media Player] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MiniTool Solution Ltd.] [HKCU\Software\MozillaPlugins] [HKCU\Software\Netscape] [HKCU\Software\Nokia] [HKCU\Software\Norton] [HKCU\Software\ODBC] [HKCU\Software\Paint.NET] [HKCU\Software\Policies] [HKCU\Software\Research In Motion] [HKCU\Software\SecuROM] [HKCU\Software\SweetIM] [HKCU\Software\Symantec] [HKCU\Software\Synaptics] [HKCU\Software\TomTom] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\Widcomm] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\ilivid] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Broadcom] [HKLM\Software\BrowserChoice] [HKLM\Software\CBSTEST] [HKLM\Software\CXT] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\DataMngr] [HKLM\Software\EPSON] [HKLM\Software\EpsonNet] [HKLM\Software\HPQ] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDT] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\ODBC] [HKLM\Software\PC Connectivity Solution] [HKLM\Software\Paint.NET] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Sonic] [HKLM\Software\Synaptics] [HKLM\Software\Tarma Installer] [HKLM\Software\Widcomm] [HKLM\Software\Wow6432Node\ABBYY] [HKLM\Software\Wow6432Node\APN] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\Apple Computer, Inc.] [HKLM\Software\Wow6432Node\Apple Inc.] [HKLM\Software\Wow6432Node\AskToolbar] [HKLM\Software\Wow6432Node\AuthenTec] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\BreakAway Games] [HKLM\Software\Wow6432Node\CDDB] [HKLM\Software\Wow6432Node\CallingID] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\Cygwin] [HKLM\Software\Wow6432Node\DataMngr] [HKLM\Software\Wow6432Node\EPSON] [HKLM\Software\Wow6432Node\EasyBits] [HKLM\Software\Wow6432Node\EpsonNet] [HKLM\Software\Wow6432Node\Evernote] [HKLM\Software\Wow6432Node\Extended Systems] [HKLM\Software\Wow6432Node\Firaxis Games] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\IDT] [HKLM\Software\Wow6432Node\Infogrames Interactive] [HKLM\Software\Wow6432Node\Infogrames] [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\MimarSinan] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\Nokia Mobile Phones] [HKLM\Software\Wow6432Node\Nokia] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\PC Connectivity Solution] [HKLM\Software\Wow6432Node\PCSuite] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\Research In Motion] [HKLM\Software\Wow6432Node\SEIKO EPSON CORPORATION] [HKLM\Software\Wow6432Node\SOFTWARE] [HKLM\Software\Wow6432Node\SearchquMediabarTb] [HKLM\Software\Wow6432Node\Sony Corporation] [HKLM\Software\Wow6432Node\SweetIM] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\TomTom] [HKLM\Software\Wow6432Node\Validity] [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\WildTangent] [HKLM\Software\Wow6432Node\Win32 Services] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\X-AVCSD] [HKLM\Software\Wow6432Node\ilivid] [HKLM\Software\Wow6432Node] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 07/01/2012 - 22:19:45 - [173,312] ----D C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint O43 - CFD: 31/12/2011 - 23:16:26 - [455,681] ----D C:\Program Files (x86)\Adobe O43 - CFD: 17/10/2012 - 21:18:31 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 20/11/2012 - 20:33:54 - [9,753] ----D C:\Program Files (x86)\Ask.com O43 - CFD: 10/11/2011 - 17:30:08 - [67,287] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 20/11/2012 - 20:32:37 - [209,846] ----D C:\Program Files (x86)\Avira O43 - CFD: 17/01/2013 - 21:12:30 - [440,619] ----D C:\Program Files (x86)\Common Files O43 - CFD: 12/02/2012 - 15:05:50 - [6,869] ----D C:\Program Files (x86)\Convar O43 - CFD: 10/11/2011 - 17:43:59 - [118,983] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 07/01/2012 - 22:14:06 - [7,906] ----D C:\Program Files (x86)\epson O43 - CFD: 07/01/2012 - 22:16:34 - [177,186] ----D C:\Program Files (x86)\Epson Software O43 - CFD: 03/09/2011 - 04:05:13 - [278,016] ----D C:\Program Files (x86)\Evernote O43 - CFD: 01/12/2012 - 16:27:05 - [1835,926] ----D C:\Program Files (x86)\Firaxis Games O43 - CFD: 01/12/2012 - 17:17:16 - [0,000] ----D C:\Program Files (x86)\GameSpy Arcade O43 - CFD: 29/08/2012 - 19:01:28 - [349,772] ----D C:\Program Files (x86)\Google O43 - CFD: 18/01/2012 - 01:39:56 - [511,917] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 10/11/2011 - 17:36:42 - [1,553] ----D C:\Program Files (x86)\HP O43 - CFD: 03/09/2011 - 04:09:04 - [326,317] ----D C:\Program Files (x86)\HP Games O43 - CFD: 10/11/2011 - 17:46:17 - [35,844] ----D C:\Program Files (x86)\HP SimplePass 2011 O43 - CFD: 17/01/2013 - 19:37:02 - [121,341] ----D C:\Program Files (x86)\iLivid O43 - CFD: 01/12/2012 - 17:17:54 - [49,466] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 10/11/2011 - 17:30:27 - [32,721] ----D C:\Program Files (x86)\Intel O43 - CFD: 14/02/2013 - 12:10:13 - [6,006] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 29/08/2012 - 19:11:18 - [121,858] ----D C:\Program Files (x86)\Java O43 - CFD: 19/02/2013 - 22:13:21 - [0] ----D C:\Program Files (x86)\MagicBerry for Blackberry O43 - CFD: 20/12/2012 - 21:19:29 - [12,762] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 10/11/2011 - 17:48:45 - [18,986] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 28/03/2012 - 20:43:59 - [156,955] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 13/05/2012 - 02:01:22 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 03/09/2011 - 04:14:05 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 27/12/2011 - 03:01:36 - [0,140] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 28/03/2012 - 20:43:44 - [38,094] ----D C:\Program Files (x86)\MSECache O43 - CFD: 27/12/2011 - 02:55:05 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 23/09/2012 - 22:06:31 - [17,351] ----D C:\Program Files (x86)\MyTomTom 3 O43 - CFD: 14/05/2012 - 22:58:42 - [131,487] ----D C:\Program Files (x86)\Nokia O43 - CFD: 25/12/2011 - 22:45:45 - [19,737] R---D C:\Program Files (x86)\Online Services O43 - CFD: 14/05/2012 - 22:58:09 - [21,028] ----D C:\Program Files (x86)\PC Connectivity Solution O43 - CFD: 14/02/2012 - 14:08:15 - [58,004] ----D C:\Program Files (x86)\PowerDataRecovery O43 - CFD: 17/10/2012 - 21:21:13 - [72,431] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 10/11/2011 - 17:31:22 - [14,556] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 10/11/2011 - 17:33:35 - [0,614] ----D C:\Program Files (x86)\Renesas Electronics O43 - CFD: 17/01/2013 - 21:12:30 - [62,288] ----D C:\Program Files (x86)\Research In Motion O43 - CFD: 02/06/2012 - 21:02:18 - [10,991] ----D C:\Program Files (x86)\SweetIM O43 - CFD: 17/02/2012 - 20:51:33 - [0,021] ----D C:\Program Files (x86)\TomTom International B.V O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 31/12/2011 - 23:16:27 - [1,275] ----D C:\Program Files (x86)\VirginMega DownloadManager v3 O43 - CFD: 03/09/2011 - 04:05:27 - [9,282] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 26/12/2011 - 00:57:20 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 17/01/2013 - 19:36:27 - [13,277] ----D C:\Program Files (x86)\Windows iLivid Toolbar O43 - CFD: 21/06/2012 - 17:24:43 - [175,242] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 26/12/2011 - 00:57:22 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 26/12/2011 - 00:57:22 - [5,092] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 26/12/2011 - 00:57:21 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 04:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 26/12/2011 - 00:57:24 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 02/06/2012 - 21:00:22 - [0,756] ----D C:\Program Files (x86)\Yontoo O43 - CFD: 20/02/2013 - 20:10:50 - [15,130] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 07/01/2012 - 22:18:51 - [7,724] ----D C:\Program Files (x86)\Common Files\ABBYY O43 - CFD: 28/02/2012 - 18:59:44 - [18,337] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 31/12/2011 - 23:16:26 - [37,554] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 17/10/2012 - 21:18:42 - [60,284] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 10/11/2011 - 17:46:17 - [10,487] ----D C:\Program Files (x86)\Common Files\AuthenTec O43 - CFD: 26/12/2011 - 17:57:28 - [0,082] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 07/01/2012 - 22:12:28 - [1,609] ----D C:\Program Files (x86)\Common Files\EPSON O43 - CFD: 01/12/2012 - 16:24:22 - [4,237] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 10/11/2011 - 17:30:27 - [13,589] ----D C:\Program Files (x86)\Common Files\Intel O43 - CFD: 29/08/2012 - 19:12:10 - [1,184] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 21/06/2012 - 17:23:58 - [117,999] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 14/05/2012 - 22:58:43 - [11,508] ----D C:\Program Files (x86)\Common Files\Nokia O43 - CFD: 10/11/2011 - 17:27:45 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 17/01/2013 - 21:12:45 - [47,774] ----D C:\Program Files (x86)\Common Files\Research In Motion O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 26/02/2012 - 16:15:32 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 27/12/2011 - 03:14:33 - [22,748] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 10/11/2011 - 17:47:53 - [0,225] ----D C:\Program Files (x86)\Common Files\Telespree O43 - CFD: 03/09/2011 - 04:11:48 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 17/01/2013 - 21:12:41 - [45,921] ----D C:\Program Files (x86)\Common Files\XCPCSync.OEM O43 - CFD: 07/01/2012 - 22:18:51 - [1,642] ----D C:\ProgramData\ABBYY O43 - CFD: 29/08/2012 - 19:08:14 - [210,996] ----D C:\ProgramData\Adobe O43 - CFD: 17/10/2012 - 21:18:31 - [21,667] ----D C:\ProgramData\Apple O43 - CFD: 17/10/2012 - 21:21:00 - [25,578] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 06:08:56 - [-485,167] --H-D C:\ProgramData\Application Data O43 - CFD: 10/11/2011 - 17:57:27 - [0,000] ----D C:\ProgramData\ATI O43 - CFD: 20/11/2012 - 20:32:37 - [187,981] ----D C:\ProgramData\Avira O43 - CFD: 17/01/2013 - 19:36:23 - [0,000] ----D C:\ProgramData\boost_interprocess O43 - CFD: 25/12/2011 - 22:43:11 - [0] --H-D C:\ProgramData\Bureau O43 - CFD: 14/07/2009 - 06:08:56 - [0,039] R-H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 06:08:56 - [41,665] R---D C:\ProgramData\Documents O43 - CFD: 10/11/2011 - 17:46:14 - [39,206] ----D C:\ProgramData\Downloaded Installations O43 - CFD: 18/03/2012 - 15:13:25 - [8,775] ----D C:\ProgramData\EPSON O43 - CFD: 25/12/2011 - 22:43:11 - [0] --H-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 06:08:56 - [0] R-H-D C:\ProgramData\Favorites O43 - CFD: 29/08/2012 - 19:00:39 - [0,012] ----D C:\ProgramData\Google O43 - CFD: 18/01/2012 - 01:35:31 - [2,785] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 26/02/2012 - 23:06:13 - [16,499] ----D C:\ProgramData\Malwarebytes O43 - CFD: 25/12/2011 - 22:43:11 - [0] --H-D C:\ProgramData\Menu Démarrer O43 - CFD: 13/02/2012 - 00:34:11 - [671,130] -S--D C:\ProgramData\Microsoft O43 - CFD: 25/12/2011 - 22:43:11 - [0] --H-D C:\ProgramData\Modèles O43 - CFD: 14/05/2012 - 22:59:09 - [25,364] ----D C:\ProgramData\Nokia O43 - CFD: 01/07/2012 - 13:48:01 - [465,507] ----D C:\ProgramData\NokiaInstallerCache O43 - CFD: 26/02/2012 - 16:19:09 - [0,016] ----D C:\ProgramData\Norton O43 - CFD: 10/11/2011 - 17:44:45 - [10,126] ----D C:\ProgramData\NortonInstaller O43 - CFD: 14/05/2012 - 22:59:12 - [0,072] ----D C:\ProgramData\PC Suite O43 - CFD: 17/01/2013 - 21:12:37 - [0,060] ----D C:\ProgramData\Research In Motion O43 - CFD: 14/07/2009 - 06:08:56 - [0,317] R---D C:\ProgramData\Start Menu O43 - CFD: 03/09/2011 - 04:18:46 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 02/06/2012 - 21:02:18 - [1,519] ----D C:\ProgramData\SweetIM O43 - CFD: 04/09/2012 - 22:29:07 - [0,002] ----D C:\ProgramData\Synaptics O43 - CFD: 02/06/2012 - 21:00:22 - [1,767] ----D C:\ProgramData\Tarma Installer O43 - CFD: 10/11/2011 - 17:48:26 - [0,086] ----D C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Templates O43 - CFD: 07/01/2012 - 22:17:22 - [0,003] ----D C:\ProgramData\UDL O43 - CFD: 11/11/2011 - 03:26:59 - [-1764,857] ----D C:\ProgramData\WildTangent O43 - CFD: 17/01/2013 - 19:36:45 - [6,036] --H-D C:\ProgramData\{B49A644A-1076-4A3D-B124-DAA7862F2318} O43 - CFD: 18/01/2012 - 01:40:15 - [45,266] ----D C:\ProgramData\{D3B41B92-9BC2-43EB-916A-4FA9E8191837} O43 - CFD: 03/09/2011 - 04:19:22 - [34,794] ----D C:\ProgramData\{E91883C8-8CDC-46A4-A45F-CB40EB82ED60} O43 - CFD: 31/12/2011 - 23:15:56 - [14,767] ----D C:\Users\Pilla\AppData\Roaming\Adobe O43 - CFD: 18/10/2012 - 22:10:30 - [0,025] ----D C:\Users\Pilla\AppData\Roaming\Apple Computer O43 - CFD: 25/12/2011 - 22:53:45 - [0] ----D C:\Users\Pilla\AppData\Roaming\ATI O43 - CFD: 20/11/2012 - 20:39:34 - [0] ----D C:\Users\Pilla\AppData\Roaming\Avira O43 - CFD: 23/10/2012 - 18:49:53 - [0,726] ----D C:\Users\Pilla\AppData\Roaming\Epson O43 - CFD: 20/11/2012 - 20:33:11 - [0] ----D C:\Users\Pilla\AppData\Roaming\Google O43 - CFD: 18/01/2012 - 01:35:35 - [0,044] ----D C:\Users\Pilla\AppData\Roaming\Hewlett-Packard O43 - CFD: 18/01/2012 - 01:39:07 - [0,382] ----D C:\Users\Pilla\AppData\Roaming\hpqlog O43 - CFD: 25/12/2011 - 22:52:09 - [0] ----D C:\Users\Pilla\AppData\Roaming\Identities O43 - CFD: 25/12/2011 - 22:52:45 - [0] ----D C:\Users\Pilla\AppData\Roaming\Intel Corporation O43 - CFD: 26/12/2011 - 14:38:24 - [0,032] ----D C:\Users\Pilla\AppData\Roaming\LG Electronics O43 - CFD: 26/12/2011 - 00:23:03 - [14,551] ----D C:\Users\Pilla\AppData\Roaming\Macromedia O43 - CFD: 26/02/2012 - 23:06:18 - [2,112] ----D C:\Users\Pilla\AppData\Roaming\Malwarebytes O43 - CFD: 11/11/2011 - 03:19:21 - [0] ----D C:\Users\Pilla\AppData\Roaming\Media Center Programs O43 - CFD: 14/12/2012 - 22:48:38 - [29,011] -S--D C:\Users\Pilla\AppData\Roaming\Microsoft O43 - CFD: 01/07/2012 - 13:48:17 - [6,491] ----D C:\Users\Pilla\AppData\Roaming\Nokia O43 - CFD: 14/05/2012 - 23:08:35 - [20,735] ----D C:\Users\Pilla\AppData\Roaming\PC Suite O43 - CFD: 17/01/2013 - 21:14:41 - [3,184] ----D C:\Users\Pilla\AppData\Roaming\Research In Motion O43 - CFD: 25/12/2011 - 22:52:40 - [0] ----D C:\Users\Pilla\AppData\Roaming\Synaptics O43 - CFD: 31/12/2011 - 23:16:31 - [0,001] ----D C:\Users\Pilla\AppData\Roaming\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1 O43 - CFD: 18/02/2012 - 11:38:08 - [0] ----D C:\Users\Pilla\AppData\Roaming\Windows Live Writer O43 - CFD: 17/01/2013 - 21:52:42 - [0,004] ----D C:\Users\Pilla\AppData\Roaming\_MDLogs O43 - CFD: 07/01/2012 - 22:19:26 - [0] ----D C:\Users\Pilla\AppData\Local\ABBYY O43 - CFD: 31/12/2011 - 23:15:41 - [15,042] ----D C:\Users\Pilla\AppData\Local\Adobe O43 - CFD: 20/11/2012 - 20:33:26 - [0,159] ----D C:\Users\Pilla\AppData\Local\APN O43 - CFD: 17/10/2012 - 21:18:32 - [0] ----D C:\Users\Pilla\AppData\Local\Apple O43 - CFD: 25/12/2011 - 22:43:23 - [0] ----D C:\Users\Pilla\AppData\Local\Application Data O43 - CFD: 26/02/2012 - 16:17:06 - [4,830] ----D C:\Users\Pilla\AppData\Local\AskToolbar O43 - CFD: 25/12/2011 - 22:53:45 - [0,053] ----D C:\Users\Pilla\AppData\Local\ATI O43 - CFD: 25/12/2011 - 22:53:00 - [0] ----D C:\Users\Pilla\AppData\Local\Broadcom O43 - CFD: 20/02/2013 - 10:25:48 - [70,138] ----D C:\Users\Pilla\AppData\Local\CrashDumps O43 - CFD: 12/02/2013 - 23:12:56 - [0,367] ----D C:\Users\Pilla\AppData\Local\Diagnostics O43 - CFD: 19/02/2013 - 23:25:59 - [0,070] ----D C:\Users\Pilla\AppData\Local\DoNotTrackPlus O43 - CFD: 23/07/2012 - 18:19:30 - [0] ----D C:\Users\Pilla\AppData\Local\ElevatedDiagnostics O43 - CFD: 20/11/2012 - 20:33:15 - [389,644] ----D C:\Users\Pilla\AppData\Local\Google O43 - CFD: 25/12/2011 - 22:51:43 - [0,001] ----D C:\Users\Pilla\AppData\Local\Hewlett-Packard O43 - CFD: 25/12/2011 - 22:52:36 - [0,003] ----D C:\Users\Pilla\AppData\Local\Hewlett-Packard_Company O43 - CFD: 08/01/2012 - 00:57:09 - [0,000] ----D C:\Users\Pilla\AppData\Local\Hewlett-Packard_Developme O43 - CFD: 25/12/2011 - 22:43:23 - [0] ----D C:\Users\Pilla\AppData\Local\Historique O43 - CFD: 17/01/2013 - 19:37:45 - [0,014] ----D C:\Users\Pilla\AppData\Local\Ilivid Player O43 - CFD: 14/12/2012 - 22:48:39 - [-1944,138] ----D C:\Users\Pilla\AppData\Local\Microsoft O43 - CFD: 06/06/2012 - 23:43:42 - [1,303] ----D C:\Users\Pilla\AppData\Local\Nokia O43 - CFD: 14/05/2012 - 23:08:20 - [0,001] ----D C:\Users\Pilla\AppData\Local\NokiaAccount O43 - CFD: 17/01/2013 - 19:36:03 - [0] ----D C:\Users\Pilla\AppData\Local\PackageAware O43 - CFD: 21/01/2013 - 20:20:21 - [0] ----D C:\Users\Pilla\AppData\Local\Paint.NET O43 - CFD: 17/01/2013 - 21:32:20 - [0] ----D C:\Users\Pilla\AppData\Local\Programs O43 - CFD: 25/12/2011 - 22:51:42 - [0,000] ----D C:\Users\Pilla\AppData\Local\RemEngine O43 - CFD: 17/01/2013 - 21:14:00 - [1,680] ----D C:\Users\Pilla\AppData\Local\Research In Motion O43 - CFD: 20/02/2013 - 20:10:38 - [1620,345] ----D C:\Users\Pilla\AppData\Local\Temp O43 - CFD: 25/12/2011 - 22:43:23 - [0] ----D C:\Users\Pilla\AppData\Local\Temporary Internet Files O43 - CFD: 17/02/2012 - 20:51:39 - [6,513] ----D C:\Users\Pilla\AppData\Local\TomTom O43 - CFD: 25/12/2011 - 22:45:03 - [0] ----D C:\Users\Pilla\AppData\Local\VirtualStore O43 - CFD: 06/02/2013 - 09:54:04 - [0,090] ----D C:\Users\Pilla\AppData\Local\Windows Live O43 - CFD: 15/01/2013 - 15:47:39 - [0,618] ----D C:\Users\Pilla\AppData\Local\Windows Live Writer O43 - CFD: 20/02/2013 - 09:42:33 - [0] ----D C:\Users\Pilla\AppData\Local\{0076F0D7-3122-4E76-B2E1-636EFA1B0F38} O43 - CFD: 29/05/2012 - 07:48:06 - [0] ----D C:\Users\Pilla\AppData\Local\{009C20B6-1463-42E6-9406-6593F8D42A6F} O43 - CFD: 14/02/2013 - 10:20:37 - [0] ----D C:\Users\Pilla\AppData\Local\{00EF465B-4310-4B45-87E7-36A9EB698937} O43 - CFD: 10/07/2012 - 23:42:57 - [0] ----D C:\Users\Pilla\AppData\Local\{012E4BDB-ADC2-4C4A-B624-D258FC18EBC2} O43 - CFD: 14/06/2012 - 17:46:34 - [0] ----D C:\Users\Pilla\AppData\Local\{012EDD1E-15F6-4D6A-A516-4FD024B4184B} O43 - CFD: 21/06/2012 - 15:37:24 - [0] ----D C:\Users\Pilla\AppData\Local\{0247BF2B-877E-44F2-9199-747C7483371B} O43 - CFD: 11/02/2012 - 08:44:14 - [0] ----D C:\Users\Pilla\AppData\Local\{030C674B-154F-402E-B023-F1FF6780C688} O43 - CFD: 08/02/2013 - 07:46:11 - [0] ----D C:\Users\Pilla\AppData\Local\{051FBE91-CFCB-4615-8702-1547937F5DAF} O43 - CFD: 09/07/2012 - 21:27:59 - [0] ----D C:\Users\Pilla\AppData\Local\{05321A77-1D28-47A8-8D5F-FD9F0E9574EE} O43 - CFD: 18/01/2013 - 18:54:05 - [0] ----D C:\Users\Pilla\AppData\Local\{05BBAD88-5B92-4933-B982-AE86B7E9C61D} O43 - CFD: 09/02/2012 - 22:58:33 - [0] ----D C:\Users\Pilla\AppData\Local\{06C50A6D-BB07-4426-9706-7D2C5933690A} O43 - CFD: 25/02/2012 - 08:22:19 - [0] ----D C:\Users\Pilla\AppData\Local\{06DCFB0D-5793-422A-8BBA-A5266A86F7AB} O43 - CFD: 10/02/2012 - 09:10:41 - [0] ----D C:\Users\Pilla\AppData\Local\{07D10B77-4912-4EC0-B103-1EFC8152DB3E} O43 - CFD: 11/04/2012 - 17:20:02 - [0] ----D C:\Users\Pilla\AppData\Local\{07FACA6E-D72C-48A1-8F52-6F83137A734D} O43 - CFD: 24/07/2012 - 21:25:06 - [0] ----D C:\Users\Pilla\AppData\Local\{085178AF-E2E8-4F4C-82AE-33D104F92967} O43 - CFD: 29/04/2012 - 22:03:20 - [0] ----D C:\Users\Pilla\AppData\Local\{08A07FBC-C468-46B5-8E44-C82B89E945EC} O43 - CFD: 22/07/2012 - 10:29:42 - [0] ----D C:\Users\Pilla\AppData\Local\{08B235BD-95D2-4185-BC7E-C8775BFFC226} O43 - CFD: 09/02/2012 - 22:58:44 - [0] ----D C:\Users\Pilla\AppData\Local\{09E099C0-5A22-462E-AC7A-1F548E1B9EED} O43 - CFD: 29/05/2012 - 18:32:45 - [0] ----D C:\Users\Pilla\AppData\Local\{0A43845B-9C42-479E-A437-CED4D7DC453B} O43 - CFD: 19/03/2012 - 01:08:16 - [0] ----D C:\Users\Pilla\AppData\Local\{0A7F2388-64BC-41F3-B600-94751DC2C8EB} O43 - CFD: 10/09/2012 - 17:50:05 - [0] ----D C:\Users\Pilla\AppData\Local\{0AE28AA8-D256-4496-8754-98552C96A91E} O43 - CFD: 28/11/2012 - 20:53:43 - [0] ----D C:\Users\Pilla\AppData\Local\{0B7CC0B2-F205-442C-A728-E2BFF2633233} O43 - CFD: 04/02/2013 - 11:39:38 - [0] ----D C:\Users\Pilla\AppData\Local\{0B84D50F-6D1A-4629-8D35-6C7A4956FC68} O43 - CFD: 23/10/2012 - 17:40:40 - [0] ----D C:\Users\Pilla\AppData\Local\{0BDA33FD-7E14-4F51-A9E2-E418CF1DEBDD} O43 - CFD: 27/02/2012 - 05:35:41 - [0] ----D C:\Users\Pilla\AppData\Local\{0C0B3F34-0371-4EF8-A161-167287A83FBB} O43 - CFD: 10/05/2012 - 17:24:01 - [0] ----D C:\Users\Pilla\AppData\Local\{0DDFFDA7-A002-43EE-878B-24E819CE4D1A} O43 - CFD: 07/05/2012 - 09:32:19 - [0] ----D C:\Users\Pilla\AppData\Local\{0DE2D0AE-730F-4A30-8DB8-3201BA74E9AA} O43 - CFD: 28/08/2012 - 22:58:21 - [0] ----D C:\Users\Pilla\AppData\Local\{0E459D06-D3A0-4B54-80A9-30D212D98DCB} O43 - CFD: 18/02/2012 - 11:31:34 - [0] ----D C:\Users\Pilla\AppData\Local\{0EB3E00E-215F-4715-8D71-29BD5D235448} O43 - CFD: 18/07/2012 - 10:48:27 - [0] ----D C:\Users\Pilla\AppData\Local\{0F6989EC-BE04-4A92-B03C-0D35BCD3EB24} O43 - CFD: 17/06/2012 - 10:35:59 - [0] ----D C:\Users\Pilla\AppData\Local\{0F84D701-D288-485D-A71D-957786EE0BDB} O43 - CFD: 29/05/2012 - 07:48:17 - [0] ----D C:\Users\Pilla\AppData\Local\{0FFFF304-B0F8-41EC-8007-FF842FC6439A} O43 - CFD: 04/01/2013 - 11:41:04 - [0] ----D C:\Users\Pilla\AppData\Local\{10720C93-F00E-41C9-B716-ACD4F30BE539} O43 - CFD: 01/05/2012 - 12:38:26 - [0] ----D C:\Users\Pilla\AppData\Local\{10FEF556-DBE6-4066-91AD-6077A7B23373} O43 - CFD: 22/05/2012 - 20:51:14 - [0] ----D C:\Users\Pilla\AppData\Local\{117E4849-3CFD-4B15-A06A-FB744B6BAEE4} O43 - CFD: 20/06/2012 - 08:11:21 - [0] ----D C:\Users\Pilla\AppData\Local\{12154834-843F-4C1A-886A-B1A8B3FCB454} O43 - CFD: 14/04/2012 - 14:28:12 - [0] ----D C:\Users\Pilla\AppData\Local\{1244AF10-8CE9-4CF2-B186-063D772ADDC7} O43 - CFD: 06/02/2013 - 08:49:58 - [0] ----D C:\Users\Pilla\AppData\Local\{128D02ED-C3A8-4D6D-A899-2027920DC3B4} O43 - CFD: 15/06/2012 - 09:10:50 - [0] ----D C:\Users\Pilla\AppData\Local\{13139F9F-4671-4177-AC77-0E67A8BF38C5} O43 - CFD: 13/01/2012 - 12:57:41 - [0] ----D C:\Users\Pilla\AppData\Local\{13326C2F-CE34-40E0-AB8D-766C86C6D486} O43 - CFD: 09/06/2012 - 17:33:55 - [0] ----D C:\Users\Pilla\AppData\Local\{14F437F6-9FC8-4C9B-8196-62888631313E} O43 - CFD: 22/05/2012 - 20:51:03 - [0] ----D C:\Users\Pilla\AppData\Local\{15095B82-E66D-4B89-8D92-C8C77DD05445} O43 - CFD: 30/10/2012 - 22:19:44 - [0] ----D C:\Users\Pilla\AppData\Local\{1540F05F-07A3-4DF3-9D00-1FF2B7898B23} O43 - CFD: 23/01/2013 - 09:00:44 - [0] ----D C:\Users\Pilla\AppData\Local\{15A67CEB-B424-4602-836E-F76D8D7B8AF6} O43 - CFD: 05/02/2012 - 20:59:59 - [0] ----D C:\Users\Pilla\AppData\Local\{1602A9CB-AC1F-4EB1-927A-E1CD0C3386EC} O43 - CFD: 19/06/2012 - 11:39:56 - [0] ----D C:\Users\Pilla\AppData\Local\{17F493F8-845F-4964-BBA2-E8A25655F00E} O43 - CFD: 07/10/2012 - 12:11:01 - [0] ----D C:\Users\Pilla\AppData\Local\{192FD17C-FD84-479D-8468-41BE31E0ABF6} O43 - CFD: 01/02/2013 - 19:57:00 - [0] ----D C:\Users\Pilla\AppData\Local\{19804232-1905-4748-9B47-2089359484F4} O43 - CFD: 24/01/2012 - 22:53:54 - [0] ----D C:\Users\Pilla\AppData\Local\{19E16812-3029-4F82-8D72-D78BC5059E06} O43 - CFD: 07/04/2012 - 08:25:51 - [0] ----D C:\Users\Pilla\AppData\Local\{1A0C313B-E212-4B68-996B-58C436F3BFC8} O43 - CFD: 11/12/2012 - 20:28:36 - [0] ----D C:\Users\Pilla\AppData\Local\{1AB51948-F828-4EAA-8E96-EE74425DFBA8} O43 - CFD: 02/04/2012 - 19:28:39 - [0] ----D C:\Users\Pilla\AppData\Local\{1B89A7BD-1711-431B-8BDA-6FAFCE3F4AA4} O43 - CFD: 09/06/2012 - 22:38:14 - [0] ----D C:\Users\Pilla\AppData\Local\{1C43E45E-0919-49F5-A5C7-D14FC745EC64} O43 - CFD: 03/09/2012 - 07:51:13 - [0] ----D C:\Users\Pilla\AppData\Local\{1C7E27EB-CC2B-4BE4-A7BA-5DCA8E29B4AF} O43 - CFD: 05/09/2012 - 17:56:42 - [0] ----D C:\Users\Pilla\AppData\Local\{1CF5AF21-63DF-4EC4-9FAA-0857BA727720} O43 - CFD: 17/04/2012 - 20:26:14 - [0] ----D C:\Users\Pilla\AppData\Local\{1D0F5A8A-FDCA-4F71-B010-D31A324AD05F} O43 - CFD: 24/07/2012 - 21:24:56 - [0] ----D C:\Users\Pilla\AppData\Local\{1D34324B-CA31-4717-A94C-9206937DFB51} O43 - CFD: 28/09/2012 - 17:27:10 - [0] ----D C:\Users\Pilla\AppData\Local\{1DB580D2-1174-4B88-AD88-AD3DE38BD4BE} O43 - CFD: 04/05/2012 - 18:17:25 - [0] ----D C:\Users\Pilla\AppData\Local\{1DBC32DA-FF0D-469A-AF59-71B2F41BC653} O43 - CFD: 09/01/2012 - 21:35:41 - [0] ----D C:\Users\Pilla\AppData\Local\{1E7E7EE0-0CAD-4AF2-9CFB-F85C130049CF} O43 - CFD: 26/01/2012 - 18:23:58 - [0] ----D C:\Users\Pilla\AppData\Local\{1EBD72D4-3E0E-4388-9418-03EE443EC78A} O43 - CFD: 17/01/2013 - 20:59:16 - [0] ----D C:\Users\Pilla\AppData\Local\{1ED1F07D-91E5-461F-9ACE-D46E6DF0005E} O43 - CFD: 26/02/2012 - 21:38:06 - [0] ----D C:\Users\Pilla\AppData\Local\{1F47B95E-46F2-4FEA-B89B-57E479EAD73F} O43 - CFD: 05/05/2012 - 09:36:35 - [0] ----D C:\Users\Pilla\AppData\Local\{1FAB14AA-0F1A-4A45-B4E2-E9C15EA6DC54} O43 - CFD: 21/05/2012 - 21:06:29 - [0] ----D C:\Users\Pilla\AppData\Local\{1FAF01F5-62EE-4556-95F7-3B79A6C4B58D} O43 - CFD: 05/06/2012 - 19:49:33 - [0] ----D C:\Users\Pilla\AppData\Local\{20456808-028C-4217-B36A-A7D0548AEE8F} O43 - CFD: 06/06/2012 - 17:10:41 - [0] ----D C:\Users\Pilla\AppData\Local\{2046531A-D01E-4929-99ED-E5D27481891E} O43 - CFD: 01/09/2012 - 23:32:40 - [0] ----D C:\Users\Pilla\AppData\Local\{2083B0FB-21EB-43D2-8109-3132730BF100} O43 - CFD: 21/09/2012 - 16:59:05 - [0] ----D C:\Users\Pilla\AppData\Local\{2084A1A4-B171-44C4-902C-BF6532E94509} O43 - CFD: 05/02/2013 - 20:30:30 - [0] ----D C:\Users\Pilla\AppData\Local\{213B9E0B-E66E-4562-80C3-A8084DF487BB} O43 - CFD: 13/07/2012 - 00:29:38 - [0] ----D C:\Users\Pilla\AppData\Local\{21A5F670-EC94-44F8-9231-7CD9A849AD5D} O43 - CFD: 18/10/2012 - 22:15:09 - [0] ----D C:\Users\Pilla\AppData\Local\{22D91341-3B3C-41AF-ADA8-B97390B8E580} O43 - CFD: 07/07/2012 - 22:55:37 - [0] ----D C:\Users\Pilla\AppData\Local\{236EFE07-F602-4965-9296-9C1A5C8408C3} O43 - CFD: 29/04/2012 - 22:03:30 - [0] ----D C:\Users\Pilla\AppData\Local\{23D0E314-40A5-4C28-989E-4D383FB03B1B} O43 - CFD: 09/06/2012 - 18:57:06 - [0] ----D C:\Users\Pilla\AppData\Local\{253D4A39-2F43-4E97-B292-BA1C3CF95D94} O43 - CFD: 25/07/2012 - 19:15:27 - [0] ----D C:\Users\Pilla\AppData\Local\{2577F17C-4CB4-4FA3-B34B-5CA4C18704D2} O43 - CFD: 30/08/2012 - 20:57:29 - [0] ----D C:\Users\Pilla\AppData\Local\{25E69FCC-FAEB-4047-9E11-81AC5CB7557C} O43 - CFD: 14/12/2012 - 21:47:29 - [0] ----D C:\Users\Pilla\AppData\Local\{27F9E5A5-51B7-4797-9CE4-9D06C3C048FA} O43 - CFD: 09/02/2013 - 07:47:08 - [0] ----D C:\Users\Pilla\AppData\Local\{2800D852-B151-4247-A92A-B8404357D704} O43 - CFD: 30/01/2013 - 21:24:04 - [0] ----D C:\Users\Pilla\AppData\Local\{28EDF364-D5B9-4034-9D94-A0D11DFBC110} O43 - CFD: 22/12/2012 - 08:45:33 - [0] ----D C:\Users\Pilla\AppData\Local\{2946470C-3851-415D-9EB5-66C5A142336C} O43 - CFD: 26/02/2012 - 15:04:22 - [0] ----D C:\Users\Pilla\AppData\Local\{2985A6B1-7ADD-4D4E-98BB-C4BC868AC920} O43 - CFD: 30/05/2012 - 20:02:10 - [0] ----D C:\Users\Pilla\AppData\Local\{29A55511-D58C-4CA2-8022-BEA839BE5573} O43 - CFD: 14/10/2012 - 21:05:08 - [0] ----D C:\Users\Pilla\AppData\Local\{2AC0524E-19B6-49C9-A80A-C0EECB95A9AE} O43 - CFD: 12/09/2012 - 17:57:25 - [0] ----D C:\Users\Pilla\AppData\Local\{2B1A7858-C1F4-4503-AED7-456C476EFC8F} O43 - CFD: 03/02/2013 - 23:39:03 - [0] ----D C:\Users\Pilla\AppData\Local\{2C33E24A-4856-4381-AFF0-F474AAE3A845} O43 - CFD: 07/12/2012 - 11:49:36 - [0] ----D C:\Users\Pilla\AppData\Local\{2C9D4D4A-BE7B-433A-9927-64EC5BAB1BC8} O43 - CFD: 06/05/2012 - 10:42:28 - [0] ----D C:\Users\Pilla\AppData\Local\{2D0E3BC4-1AB2-471D-9F2A-881C8DEA8F3B} O43 - CFD: 13/06/2012 - 20:29:29 - [0] ----D C:\Users\Pilla\AppData\Local\{2D54ECF8-3334-4C4B-A8C8-4B9C4A7D65E6} O43 - CFD: 28/03/2012 - 19:36:05 - [0] ----D C:\Users\Pilla\AppData\Local\{2D776DC2-8033-4288-9538-64EBD0D584A4} O43 - CFD: 08/05/2012 - 20:19:42 - [0] ----D C:\Users\Pilla\AppData\Local\{2E9AD490-9DED-467B-AD62-010411BE14EE} O43 - CFD: 18/02/2012 - 05:20:03 - [0] ----D C:\Users\Pilla\AppData\Local\{2EA3146E-B361-44D7-9C95-9F055FEEB417} O43 - CFD: 19/04/2012 - 18:43:22 - [0] ----D C:\Users\Pilla\AppData\Local\{3044605E-BD93-4049-B5A6-4EF4A441AFFA} O43 - CFD: 09/01/2012 - 21:35:52 - [0] ----D C:\Users\Pilla\AppData\Local\{30627C01-3DA8-4801-B7F8-9CD197A4E089} O43 - CFD: 01/01/2012 - 12:39:33 - [0] ----D C:\Users\Pilla\AppData\Local\{30F8D4FD-B53D-4DF4-8B84-57DADC0E15A9} O43 - CFD: 21/05/2012 - 21:06:19 - [0] ----D C:\Users\Pilla\AppData\Local\{321A4402-6F87-4B52-A528-71328FCF5594} O43 - CFD: 26/06/2012 - 00:43:46 - [0] ----D C:\Users\Pilla\AppData\Local\{32558654-38BD-429E-9479-834A0630F491} O43 - CFD: 20/04/2012 - 19:22:14 - [0] ----D C:\Users\Pilla\AppData\Local\{329F2542-E592-41F6-B1EB-E1AE0BB77AC9} O43 - CFD: 05/05/2012 - 09:36:23 - [0] ----D C:\Users\Pilla\AppData\Local\{32F3245A-DF51-4844-842C-48531EBB78CF} O43 - CFD: 02/09/2012 - 13:33:56 - [0] ----D C:\Users\Pilla\AppData\Local\{33342014-B45B-4647-81F9-7E0A28DE31A4} O43 - CFD: 24/02/2012 - 19:21:09 - [0] ----D C:\Users\Pilla\AppData\Local\{3349E3CC-1907-4E52-B053-D5431F95DFE6} O43 - CFD: 01/03/2012 - 19:05:56 - [0] ----D C:\Users\Pilla\AppData\Local\{3492D8B8-7F42-4FAB-8752-98F21B6B2D93} O43 - CFD: 21/10/2012 - 01:07:17 - [0] ----D C:\Users\Pilla\AppData\Local\{3570B89F-F865-432F-A337-1AE4EE2214C3} O43 - CFD: 05/07/2012 - 18:34:09 - [0] ----D C:\Users\Pilla\AppData\Local\{35B23B1B-7C64-466B-98A5-576631704230} O43 - CFD: 19/06/2012 - 18:23:36 - [0] ----D C:\Users\Pilla\AppData\Local\{3626E2F3-B78B-487E-9E07-D71626D229EA} O43 - CFD: 15/12/2012 - 15:32:46 - [0] ----D C:\Users\Pilla\AppData\Local\{3671B51B-ECE0-4D2C-BDC1-E8849D5A0143} O43 - CFD: 23/05/2012 - 16:51:59 - [0] ----D C:\Users\Pilla\AppData\Local\{36D23601-1F4D-4050-A496-0A2A0C8C3F67} O43 - CFD: 04/09/2012 - 22:30:57 - [0] ----D C:\Users\Pilla\AppData\Local\{371A97A2-4A04-42D2-A407-9191339D6100} O43 - CFD: 05/01/2012 - 00:19:59 - [0] ----D C:\Users\Pilla\AppData\Local\{37240248-7F50-4C82-A700-4B06F8505C36} O43 - CFD: 08/06/2012 - 10:37:19 - [0] ----D C:\Users\Pilla\AppData\Local\{37D860B3-B61F-4923-8693-6B7E352016A4} O43 - CFD: 23/06/2012 - 10:48:04 - [0] ----D C:\Users\Pilla\AppData\Local\{391ECAC4-3CFF-4A86-AF90-B66930F2BCC6} O43 - CFD: 24/11/2012 - 09:47:01 - [0] ----D C:\Users\Pilla\AppData\Local\{391EFCCF-81FE-4776-9F7F-F811EE10359A} O43 - CFD: 18/07/2012 - 10:48:40 - [0] ----D C:\Users\Pilla\AppData\Local\{398200A2-2141-44EE-B73A-6A8DF02DEB7B} O43 - CFD: 19/07/2012 - 21:53:04 - [0] ----D C:\Users\Pilla\AppData\Local\{39A94FB6-2898-41CF-A4F8-50D22757DBA5} O43 - CFD: 06/06/2012 - 17:10:20 - [0] ----D C:\Users\Pilla\AppData\Local\{3A389FF0-C243-4044-9074-AFCBBD38044C} O43 - CFD: 31/05/2012 - 18:10:04 - [0] ----D C:\Users\Pilla\AppData\Local\{3A53820E-B4E7-4011-B59C-AFC0B089FB2A} O43 - CFD: 21/06/2012 - 17:31:02 - [0] ----D C:\Users\Pilla\AppData\Local\{3AB33959-F4D8-47B0-9902-90D36C641FE0} O43 - CFD: 28/03/2012 - 19:36:15 - [0] ----D C:\Users\Pilla\AppData\Local\{3D20C399-DB75-4F46-AA45-94E26D61412B} O43 - CFD: 12/06/2012 - 14:28:07 - [0] ----D C:\Users\Pilla\AppData\Local\{3E34EDFB-A06B-475C-B926-A6CA042266B9} O43 - CFD: 01/09/2012 - 10:17:03 - [0] ----D C:\Users\Pilla\AppData\Local\{3E5ABBFF-0537-42CE-835C-DF562087349A} O43 - CFD: 04/07/2012 - 02:16:13 - [0] ----D C:\Users\Pilla\AppData\Local\{3E888327-54FB-431A-BFAE-2B8152488EB6} O43 - CFD: 26/01/2013 - 10:16:48 - [0] ----D C:\Users\Pilla\AppData\Local\{3F11A185-8712-4B89-BF2A-7116502C4A62} O43 - CFD: 08/07/2012 - 10:56:33 - [0] ----D C:\Users\Pilla\AppData\Local\{3F596D10-5B81-4632-9D16-EDCED9B9BECF} O43 - CFD: 06/06/2012 - 12:08:16 - [0] ----D C:\Users\Pilla\AppData\Local\{3F5CA1A8-A3A5-48C9-A022-703A04314DB3} O43 - CFD: 28/03/2012 - 22:02:04 - [0] ----D C:\Users\Pilla\AppData\Local\{40422ED7-00C5-4A52-8131-179815641CD9} O43 - CFD: 14/05/2012 - 08:06:23 - [0] ----D C:\Users\Pilla\AppData\Local\{413AD547-EE2F-4AF1-9BD2-3052603FD15F} O43 - CFD: 30/04/2012 - 06:15:13 - [0] ----D C:\Users\Pilla\AppData\Local\{4143A0FD-E45E-42B7-8BEA-CC444065EE33} O43 - CFD: 18/02/2012 - 11:38:29 - [0] ----D C:\Users\Pilla\AppData\Local\{4154A1C5-05AB-407E-8FBF-840817E1D9F6} O43 - CFD: 18/02/2012 - 05:19:52 - [0] ----D C:\Users\Pilla\AppData\Local\{4168BE50-6E5D-49C2-A583-19056CDB2B63} O43 - CFD: 14/06/2012 - 08:57:47 - [0] ----D C:\Users\Pilla\AppData\Local\{41D9F104-1B64-452D-B0B5-33D2D7CFABE7} O43 - CFD: 20/06/2012 - 17:33:44 - [0] ----D C:\Users\Pilla\AppData\Local\{43613F81-B16B-4BD4-863D-9C6B8DD7C03C} O43 - CFD: 10/02/2012 - 10:45:36 - [0] ----D C:\Users\Pilla\AppData\Local\{4533AEB9-640C-4DF1-B262-CE745AFE48EE} O43 - CFD: 27/11/2012 - 19:21:01 - [0] ----D C:\Users\Pilla\AppData\Local\{4566624F-1862-4D62-8FEA-3C356D5007E7} O43 - CFD: 06/11/2012 - 11:44:07 - [0] ----D C:\Users\Pilla\AppData\Local\{456C0FB6-8AA7-4EA8-9085-0F0EDA28583C} O43 - CFD: 31/08/2012 - 16:59:48 - [0] ----D C:\Users\Pilla\AppData\Local\{46B506AF-3714-4FDF-9369-E9CE4531E45E} O43 - CFD: 20/08/2012 - 19:05:53 - [0] ----D C:\Users\Pilla\AppData\Local\{4776F6A8-18A8-4B42-9EE5-3A5D247FD2C6} O43 - CFD: 18/09/2012 - 06:00:58 - [0] ----D C:\Users\Pilla\AppData\Local\{479B2C67-653B-48D9-8ACE-1F27DFD7DD7B} O43 - CFD: 25/04/2012 - 20:13:12 - [0] ----D C:\Users\Pilla\AppData\Local\{47A05ABD-BCCE-46F4-BDD6-06848AA274CA} O43 - CFD: 11/02/2012 - 08:44:04 - [0] ----D C:\Users\Pilla\AppData\Local\{47C78914-F5AF-4A41-8B13-4A5EF6BD6DDD} O43 - CFD: 28/01/2013 - 21:16:59 - [0] ----D C:\Users\Pilla\AppData\Local\{48628BB0-ACFC-4792-8380-1FABE1224B76} O43 - CFD: 23/09/2012 - 10:58:50 - [0] ----D C:\Users\Pilla\AppData\Local\{48712E88-463E-41F3-971B-04DD14BB8B09} O43 - CFD: 15/07/2012 - 21:14:30 - [0] ----D C:\Users\Pilla\AppData\Local\{48FDA1F3-98A4-46E4-867B-6C864B5AA2C7} O43 - CFD: 16/03/2012 - 07:59:48 - [0] ----D C:\Users\Pilla\AppData\Local\{4918D66D-C63C-434D-99EA-2463878FF54E} O43 - CFD: 16/10/2012 - 19:50:32 - [0] ----D C:\Users\Pilla\AppData\Local\{4925BAA6-4E16-4A35-96AC-84EAE9EFC173} O43 - CFD: 11/03/2012 - 14:47:59 - [0] ----D C:\Users\Pilla\AppData\Local\{49ADC1CE-10B6-4D1D-A11B-C5C21FB105D6} O43 - CFD: 28/03/2012 - 22:01:50 - [0] ----D C:\Users\Pilla\AppData\Local\{4A83245D-2915-43F2-B67C-FD749180C0A9} O43 - CFD: 22/10/2012 - 16:40:03 - [0] ----D C:\Users\Pilla\AppData\Local\{4DADD964-6425-4411-89E8-63F383E38258} O43 - CFD: 18/10/2012 - 22:11:41 - [0] ----D C:\Users\Pilla\AppData\Local\{4E58EB5D-C6F2-4C80-8A72-9F7F92978D81} O43 - CFD: 09/06/2012 - 07:32:04 - [0] ----D C:\Users\Pilla\AppData\Local\{4EBFA608-DB3B-4E60-ABBC-217621D9110D} O43 - CFD: 05/07/2012 - 18:33:57 - [0] ----D C:\Users\Pilla\AppData\Local\{4F7F1571-8CFC-4798-AD15-063643A0C8B5} O43 - CFD: 26/01/2012 - 18:23:48 - [0] ----D C:\Users\Pilla\AppData\Local\{4FF46B0D-71F0-4D1F-BC0B-5CE03B3E0848} O43 - CFD: 18/03/2012 - 13:54:30 - [0] ----D C:\Users\Pilla\AppData\Local\{4FF97022-8F9A-402A-898B-F03C79B43414} O43 - CFD: 20/12/2012 - 20:41:32 - [0] ----D C:\Users\Pilla\AppData\Local\{50B83DAD-09DB-4449-BB26-38166015E83D} O43 - CFD: 16/07/2012 - 09:46:19 - [0] ----D C:\Users\Pilla\AppData\Local\{50D8E5FB-0927-4AE0-B715-AE089E74D065} O43 - CFD: 26/06/2012 - 00:43:36 - [0] ----D C:\Users\Pilla\AppData\Local\{5146F071-3A17-446E-BEDB-E763B6C33BE3} O43 - CFD: 20/06/2012 - 08:11:09 - [0] ----D C:\Users\Pilla\AppData\Local\{516EC9D6-43BF-4EA7-AD5C-D01064570865} O43 - CFD: 06/01/2012 - 21:06:19 - [0] ----D C:\Users\Pilla\AppData\Local\{52DFA082-9523-4D0B-9F79-E223B1879C64} O43 - CFD: 14/01/2012 - 10:45:05 - [0] ----D C:\Users\Pilla\AppData\Local\{53F0B472-A349-43DD-80F4-4EC02EA8F131} O43 - CFD: 21/06/2012 - 17:21:00 - [0] ----D C:\Users\Pilla\AppData\Local\{54362333-6DA0-475D-9FE3-F0A736E0118B} O43 - CFD: 09/07/2012 - 21:27:49 - [0] ----D C:\Users\Pilla\AppData\Local\{5465D259-D329-4316-9018-E75A8510119C} O43 - CFD: 07/07/2012 - 02:18:51 - [0] ----D C:\Users\Pilla\AppData\Local\{54AEB6A8-9C0A-4421-A0DC-60B5FBA6D858} O43 - CFD: 19/03/2012 - 18:20:18 - [0] ----D C:\Users\Pilla\AppData\Local\{54D5241E-7F13-410D-A4F9-091A6AA1DBCB} O43 - CFD: 18/04/2012 - 22:19:44 - [0] ----D C:\Users\Pilla\AppData\Local\{555AE504-AEAA-4A17-8774-D6D78B145D2A} O43 - CFD: 29/05/2012 - 08:48:21 - [0] ----D C:\Users\Pilla\AppData\Local\{56D1D743-7768-40B0-9430-7B283E46DA57} O43 - CFD: 20/02/2012 - 19:17:54 - [0] ----D C:\Users\Pilla\AppData\Local\{57559284-6A3D-4E0E-AF33-C64B79ADE46E} O43 - CFD: 01/02/2013 - 07:56:25 - [0] ----D C:\Users\Pilla\AppData\Local\{57B239FF-F9EA-47C9-A600-AD662AC34032} O43 - CFD: 20/06/2012 - 17:59:32 - [0] ----D C:\Users\Pilla\AppData\Local\{57F30B5C-4142-45EC-A47D-F3719CE7B138} O43 - CFD: 15/02/2013 - 10:13:18 - [0] ----D C:\Users\Pilla\AppData\Local\{5A1C5E2B-C50E-4EAF-8467-4846018E320A} O43 - CFD: 15/04/2012 - 23:49:04 - [0] ----D C:\Users\Pilla\AppData\Local\{5A1CFD4D-A391-4043-A395-B76E3EAAF488} O43 - CFD: 04/07/2012 - 17:57:54 - [0] ----D C:\Users\Pilla\AppData\Local\{5A672FB5-FA45-45E1-8C6D-FA309528E7A8} O43 - CFD: 13/06/2012 - 06:42:02 - [0] ----D C:\Users\Pilla\AppData\Local\{5D42A2B8-506D-48B7-9D81-FC25BC4BC0CC} O43 - CFD: 27/04/2012 - 17:50:04 - [0] ----D C:\Users\Pilla\AppData\Local\{5DC8EAE4-645C-4CFA-AFFC-B578D3216647} O43 - CFD: 12/06/2012 - 14:27:57 - [0] ----D C:\Users\Pilla\AppData\Local\{5DD1467C-46AA-494E-AB64-D5D8EDB19A64} O43 - CFD: 16/07/2012 - 09:45:57 - [0] ----D C:\Users\Pilla\AppData\Local\{5DEA0FCF-1983-4554-92B9-E9FF0E827E43} O43 - CFD: 02/07/2012 - 22:25:01 - [0] ----D C:\Users\Pilla\AppData\Local\{5E094217-3792-40CF-8B61-080410C5D25B} O43 - CFD: 02/02/2013 - 20:49:32 - [0] ----D C:\Users\Pilla\AppData\Local\{5E1FDFA8-F2D8-4937-B5AE-EC154E28B3DE} O43 - CFD: 23/07/2012 - 17:40:50 - [0] ----D C:\Users\Pilla\AppData\Local\{5E72C7D6-E2FF-4BB9-B5A1-517B75E12F13} O43 - CFD: 18/01/2012 - 01:22:35 - [0] ----D C:\Users\Pilla\AppData\Local\{5ED973C0-F5B4-468A-A88E-EE04DEB393CD} O43 - CFD: 06/02/2012 - 19:34:24 - [0] ----D C:\Users\Pilla\AppData\Local\{5F24C0A6-F7BD-4B7B-BB4B-7A132BA9288A} O43 - CFD: 13/11/2012 - 05:14:44 - [0] ----D C:\Users\Pilla\AppData\Local\{5F5F59BC-7BA8-43E1-B045-76F03BECCC68} O43 - CFD: 22/11/2012 - 20:38:32 - [0] ----D C:\Users\Pilla\AppData\Local\{5FA37CDF-ACBD-49ED-BF06-05243CC0DA61} O43 - CFD: 15/07/2012 - 21:14:41 - [0] ----D C:\Users\Pilla\AppData\Local\{5FE323A7-4705-47F3-895F-E5D23C8439B5} O43 - CFD: 16/12/2012 - 17:55:35 - [0] ----D C:\Users\Pilla\AppData\Local\{6094866C-3665-41CE-B99F-50931BD6EBBA} O43 - CFD: 16/03/2012 - 09:50:37 - [0] ----D C:\Users\Pilla\AppData\Local\{6095EA3A-77F4-475E-916E-517AE5782C07} O43 - CFD: 11/09/2012 - 17:32:16 - [0] ----D C:\Users\Pilla\AppData\Local\{61394D20-BED0-458A-B3C6-830425637207} O43 - CFD: 09/06/2012 - 18:56:57 - [0] ----D C:\Users\Pilla\AppData\Local\{61E234A4-8794-4181-9928-432E6681AD76} O43 - CFD: 21/05/2012 - 17:39:25 - [0] ----D C:\Users\Pilla\AppData\Local\{6212AAD6-0307-4521-A04D-030CBAAB60AB} O43 - CFD: 19/01/2013 - 13:45:37 - [0] ----D C:\Users\Pilla\AppData\Local\{6295074D-8BFA-4544-9312-0B63DDA3BE22} O43 - CFD: 04/05/2012 - 06:31:00 - [0] ----D C:\Users\Pilla\AppData\Local\{62B55A53-D1A9-4012-952D-D37EA93F4923} O43 - CFD: 28/10/2012 - 10:22:20 - [0] ----D C:\Users\Pilla\AppData\Local\{62FDD5A5-44BC-4ED2-99B4-A18C663E06F0} O43 - CFD: 04/06/2012 - 20:28:04 - [0] ----D C:\Users\Pilla\AppData\Local\{6355ED3D-C0DD-4AC5-8797-FDD50D723E20} O43 - CFD: 27/06/2012 - 23:10:10 - [0] ----D C:\Users\Pilla\AppData\Local\{64833119-1443-4E48-B613-2161C7A14C2B} O43 - CFD: 19/02/2013 - 09:41:24 - [0] ----D C:\Users\Pilla\AppData\Local\{65462FF6-BC1F-411E-B212-08679DE69A6F} O43 - CFD: 13/04/2012 - 23:20:12 - [0] ----D C:\Users\Pilla\AppData\Local\{6688B16F-E62D-4624-B981-76EFA922389D} O43 - CFD: 13/06/2012 - 11:55:20 - [0] ----D C:\Users\Pilla\AppData\Local\{67119228-2FA7-455E-BE2C-F5F5896CA6A7} O43 - CFD: 19/02/2013 - 21:41:59 - [0] ----D C:\Users\Pilla\AppData\Local\{677EBA61-4F3C-44EF-804D-4688A6DFCEB0} O43 - CFD: 20/01/2013 - 12:04:00 - [0] ----D C:\Users\Pilla\AppData\Local\{67E17EDD-E1D6-48C6-BAB5-A1EDF1A8FCB5} O43 - CFD: 13/06/2012 - 11:55:30 - [0] ----D C:\Users\Pilla\AppData\Local\{67FA7FA1-ED7F-444A-A1E4-AE6E970E349E} O43 - CFD: 21/08/2012 - 10:06:38 - [0] ----D C:\Users\Pilla\AppData\Local\{686FA385-A177-4C38-B48A-371F61FA9014} O43 - CFD: 21/01/2013 - 20:13:00 - [0] ----D C:\Users\Pilla\AppData\Local\{6892860F-2279-4F14-927E-D2A71E328E47} O43 - CFD: 06/06/2012 - 12:07:54 - [0] ----D C:\Users\Pilla\AppData\Local\{69DE7083-4074-4179-8A8B-D4EF44A9129B} O43 - CFD: 20/02/2012 - 20:45:28 - [0] ----D C:\Users\Pilla\AppData\Local\{6A4A14BB-A272-490F-917E-D5C4F6772518} O43 - CFD: 11/03/2012 - 15:10:48 - [0] ----D C:\Users\Pilla\AppData\Local\{6A5881BC-3371-40A3-9BE3-73055ADF78EE} O43 - CFD: 25/02/2012 - 08:22:08 - [0] ----D C:\Users\Pilla\AppData\Local\{6C0FE88E-2EB3-4E01-B986-9DA9BEEA964B} O43 - CFD: 29/05/2012 - 08:48:31 - [0] ----D C:\Users\Pilla\AppData\Local\{6CE2F39F-3F0F-4FC0-8E9C-657A42B3638A} O43 - CFD: 19/09/2012 - 17:55:31 - [0] ----D C:\Users\Pilla\AppData\Local\{6D7746D0-4931-4F72-83EA-925771CDEF7A} O43 - CFD: 07/05/2012 - 09:32:08 - [0] ----D C:\Users\Pilla\AppData\Local\{6DA5FD65-4826-4BBF-A0D8-9126287E523C} O43 - CFD: 09/01/2013 - 18:31:46 - [0] ----D C:\Users\Pilla\AppData\Local\{6E548318-8431-4ECC-BEC2-E6BC8AD36A0F} O43 - CFD: 13/04/2012 - 23:11:26 - [0] ----D C:\Users\Pilla\AppData\Local\{701DAE99-9D2B-4D02-93BF-B98D727AFF1E} O43 - CFD: 09/06/2012 - 11:43:52 - [0] ----D C:\Users\Pilla\AppData\Local\{704AF02A-7063-44C7-AA87-CB93C7A22E71} O43 - CFD: 26/11/2012 - 18:35:19 - [0] ----D C:\Users\Pilla\AppData\Local\{70A42509-0B31-49F0-9A85-7F17CC956E71} O43 - CFD: 18/07/2012 - 22:49:47 - [0] ----D C:\Users\Pilla\AppData\Local\{713DBE89-1FA3-4802-8EF1-4C73DFC5312E} O43 - CFD: 16/06/2012 - 09:59:07 - [0] ----D C:\Users\Pilla\AppData\Local\{71549D13-64A9-46FE-B0B5-ED4BAB153A1D} O43 - CFD: 15/04/2012 - 23:48:42 - [0] ----D C:\Users\Pilla\AppData\Local\{72E6DE30-1E76-4CBA-9552-1004BD9A8472} O43 - CFD: 20/02/2012 - 19:18:05 - [0] ----D C:\Users\Pilla\AppData\Local\{735AE8B4-F6C4-4E00-9C68-5CE61F8D243F} O43 - CFD: 20/03/2012 - 00:54:20 - [0] ----D C:\Users\Pilla\AppData\Local\{736700B4-9B75-4449-9FEF-D313E868A4E0} O43 - CFD: 29/09/2012 - 13:30:36 - [0] ----D C:\Users\Pilla\AppData\Local\{73C5ACC2-1D71-47A9-B88D-3C7FF57F7971} O43 - CFD: 21/06/2012 - 17:31:13 - [0] ----D C:\Users\Pilla\AppData\Local\{73C8AA90-35CA-44A5-AD38-3F63298CF3A7} O43 - CFD: 15/10/2012 - 10:57:08 - [0] ----D C:\Users\Pilla\AppData\Local\{7415EA4A-9013-480C-A37D-CA68EFA7BACD} O43 - CFD: 01/07/2012 - 10:22:20 - [0] ----D C:\Users\Pilla\AppData\Local\{743B0819-C9BF-4E81-BD76-B668312D5401} O43 - CFD: 21/10/2012 - 13:07:51 - [0] ----D C:\Users\Pilla\AppData\Local\{75BBCC60-F8FF-4633-BCEA-3905181D4DAD} O43 - CFD: 17/02/2013 - 14:58:34 - [0] ----D C:\Users\Pilla\AppData\Local\{76F91636-CC16-4F2F-B770-F00837900FC0} O43 - CFD: 20/09/2012 - 17:39:25 - [0] ----D C:\Users\Pilla\AppData\Local\{77D56FE1-03E7-4AB7-AB28-5B9BB3B1390C} O43 - CFD: 16/02/2013 - 13:21:07 - [0] ----D C:\Users\Pilla\AppData\Local\{77E3ACD7-BFA6-43A4-96B8-C2398975A8D2} O43 - CFD: 11/01/2013 - 10:21:41 - [0] ----D C:\Users\Pilla\AppData\Local\{77E8B38E-C09F-48B7-8340-B7404F40A454} O43 - CFD: 07/05/2012 - 13:15:33 - [0] ----D C:\Users\Pilla\AppData\Local\{7899436B-BC2A-4A31-B41D-0C8FBE6FF914} O43 - CFD: 19/06/2012 - 11:40:11 - [0] ----D C:\Users\Pilla\AppData\Local\{78AFD7D4-6210-48E3-806D-B867063D3A1F} O43 - CFD: 05/01/2012 - 00:20:09 - [0] ----D C:\Users\Pilla\AppData\Local\{796CBE97-6101-4C57-895B-C021354C1CCC} O43 - CFD: 14/06/2012 - 08:57:58 - [0] ----D C:\Users\Pilla\AppData\Local\{79838188-8964-4740-8A4C-70421E084D58} O43 - CFD: 07/07/2012 - 02:18:41 - [0] ----D C:\Users\Pilla\AppData\Local\{7987A144-6482-4E6D-95B4-159F113F539F} O43 - CFD: 14/11/2012 - 18:18:37 - [0] ----D C:\Users\Pilla\AppData\Local\{79B81A4E-9B1B-4262-A22E-535CDAA0BB01} O43 - CFD: 04/06/2012 - 19:24:39 - [0] ----D C:\Users\Pilla\AppData\Local\{7A22A394-A857-406C-8E5C-65A9ADF4DD01} O43 - CFD: 20/03/2012 - 00:54:30 - [0] ----D C:\Users\Pilla\AppData\Local\{7A3F29E3-BAC3-475E-A20B-C87DD998B712} O43 - CFD: 20/06/2012 - 17:59:44 - [0] ----D C:\Users\Pilla\AppData\Local\{7A6DA2C3-1698-4F4F-9CDE-8AC1070C039F} O43 - CFD: 13/06/2012 - 06:42:12 - [0] ----D C:\Users\Pilla\AppData\Local\{7AAF496B-B7DC-4041-A85B-1ED1D7463492} O43 - CFD: 18/04/2012 - 22:19:35 - [0] ----D C:\Users\Pilla\AppData\Local\{7DA13943-9579-4FE3-B4BB-169A0013F748} O43 - CFD: 05/03/2012 - 19:21:52 - [0] ----D C:\Users\Pilla\AppData\Local\{7DA9C5A3-B84B-44E4-B901-573D1D8E9B65} O43 - CFD: 07/05/2012 - 17:35:11 - [0] ----D C:\Users\Pilla\AppData\Local\{7E16E60C-0745-403D-B7F3-7928E828D6C8} O43 - CFD: 08/07/2012 - 10:56:43 - [0] ----D C:\Users\Pilla\AppData\Local\{7F5877E5-7F35-416B-8F13-95B83BF84CEF} O43 - CFD: 04/07/2012 - 17:58:03 - [0] ----D C:\Users\Pilla\AppData\Local\{8009C22F-5DC8-4F98-A73A-43FE4C2BB011} O43 - CFD: 25/01/2013 - 12:58:46 - [0] ----D C:\Users\Pilla\AppData\Local\{8164550B-1F37-4558-A3DF-9B4CC0E82E8B} O43 - CFD: 31/05/2012 - 18:10:14 - [0] ----D C:\Users\Pilla\AppData\Local\{82CA631E-2C0E-4EFE-849F-39A3A78452ED} O43 - CFD: 23/01/2012 - 18:04:25 - [0] ----D C:\Users\Pilla\AppData\Local\{83FBDC6B-C766-4485-96FB-D1C47741E21C} O43 - CFD: 16/03/2012 - 07:59:25 - [0] ----D C:\Users\Pilla\AppData\Local\{83FE4D1C-84F9-4BA4-9827-4FE57CF7BE95} O43 - CFD: 05/06/2012 - 10:16:49 - [0] ----D C:\Users\Pilla\AppData\Local\{840F5222-66F4-4018-B502-775CEC93AA13} O43 - CFD: 29/01/2013 - 09:49:09 - [0] ----D C:\Users\Pilla\AppData\Local\{853C19F7-93B3-409F-80FB-6F0C64B2DE5A} O43 - CFD: 24/06/2012 - 12:24:24 - [0] ----D C:\Users\Pilla\AppData\Local\{85B1A44B-CA64-4CFB-843A-A2DCC375BD58} O43 - CFD: 07/05/2012 - 13:15:45 - [0] ----D C:\Users\Pilla\AppData\Local\{85B65569-6F32-48ED-A5BB-A274809D952F} O43 - CFD: 22/01/2013 - 10:43:15 - [0] ----D C:\Users\Pilla\AppData\Local\{85D856EB-6072-430D-AD48-7060E77B0C02} O43 - CFD: 24/05/2012 - 23:37:47 - [0] ----D C:\Users\Pilla\AppData\Local\{85E7CC70-021F-47C2-9DA9-16EF333D60DB} O43 - CFD: 13/01/2013 - 12:45:25 - [0] ----D C:\Users\Pilla\AppData\Local\{86665531-8627-4DA9-A857-7500188C9C5A} O43 - CFD: 21/06/2012 - 15:37:35 - [0] ----D C:\Users\Pilla\AppData\Local\{86EA2FF3-7BFD-4572-BE19-58954D4CCAA6} O43 - CFD: 27/06/2012 - 11:09:18 - [0] ----D C:\Users\Pilla\AppData\Local\{87490EFA-51A8-473A-BE55-E82059FBEB1A} O43 - CFD: 02/06/2012 - 15:52:21 - [0] ----D C:\Users\Pilla\AppData\Local\{87B47E1A-BCB7-47AC-B94D-09767D0491A2} O43 - CFD: 11/02/2013 - 18:31:25 - [0] ----D C:\Users\Pilla\AppData\Local\{884E0C03-5E1A-485A-A796-6E48FBFE8801} O43 - CFD: 09/02/2013 - 19:47:42 - [0] ----D C:\Users\Pilla\AppData\Local\{8888A2A2-7E1A-4FB1-8FFC-555BD77A635B} O43 - CFD: 18/11/2012 - 11:22:04 - [0] ----D C:\Users\Pilla\AppData\Local\{8897316A-E7AB-435B-B84E-991424A73DD7} O43 - CFD: 08/05/2012 - 14:08:21 - [0] ----D C:\Users\Pilla\AppData\Local\{889BD5B6-CE75-4A91-AFE8-A9B5CDCB05F2} O43 - CFD: 07/01/2012 - 22:09:45 - [0] ----D C:\Users\Pilla\AppData\Local\{89E203BA-A2FB-427C-98D7-2260AF3BDAFA} O43 - CFD: 04/05/2012 - 18:17:15 - [0] ----D C:\Users\Pilla\AppData\Local\{89F1FBDC-C0A0-4214-A4AA-95E3CCF5793E} O43 - CFD: 12/01/2012 - 22:17:16 - [0] ----D C:\Users\Pilla\AppData\Local\{8D711A78-073B-4FC1-AC0C-4E264EDFC846} O43 - CFD: 29/02/2012 - 20:23:53 - [0] ----D C:\Users\Pilla\AppData\Local\{8F0BC059-6C87-436E-BC54-33282556B4E5} O43 - CFD: 27/01/2012 - 19:17:12 - [0] ----D C:\Users\Pilla\AppData\Local\{8F20AA05-0A50-4040-AA53-EEEFBF87A851} O43 - CFD: 05/05/2012 - 09:23:12 - [0] ----D C:\Users\Pilla\AppData\Local\{8F94AFD7-1583-4D77-98FD-41A909E5B996} O43 - CFD: 25/09/2012 - 17:58:41 - [0] ----D C:\Users\Pilla\AppData\Local\{8F9FBD99-85F2-4116-BB93-D6B12E3ABE96} O43 - CFD: 17/02/2012 - 17:56:58 - [0] ----D C:\Users\Pilla\AppData\Local\{8FD10262-BF0F-4C27-9E8C-35E3987093DF} O43 - CFD: 01/10/2012 - 18:09:51 - [0] ----D C:\Users\Pilla\AppData\Local\{8FDCB447-CE76-4553-8C2E-99ABE701E7EC} O43 - CFD: 07/06/2012 - 13:31:47 - [0] ----D C:\Users\Pilla\AppData\Local\{8FFBA81D-A743-43F0-B0E0-012DB31E7DF3} O43 - CFD: 30/09/2012 - 10:35:58 - [0] ----D C:\Users\Pilla\AppData\Local\{904B212D-9BA0-4DB2-805C-5566B619EBB3} O43 - CFD: 17/07/2012 - 08:51:15 - [0] ----D C:\Users\Pilla\AppData\Local\{90ABD463-6384-452C-8C43-0B658E14D2EF} O43 - CFD: 24/06/2012 - 12:24:35 - [0] ----D C:\Users\Pilla\AppData\Local\{90DD8848-4E69-4ADB-92C2-132EAB3DAC6B} O43 - CFD: 18/02/2012 - 11:38:38 - [0] ----D C:\Users\Pilla\AppData\Local\{9178B7B8-6FB6-4BF5-9AF0-A4A6F7175230} O43 - CFD: 07/01/2012 - 22:09:34 - [0] ----D C:\Users\Pilla\AppData\Local\{9397319E-8B9E-4569-8419-AEB975FE721E} O43 - CFD: 25/05/2012 - 07:19:36 - [0] ----D C:\Users\Pilla\AppData\Local\{93DF1287-096C-457A-BE8D-C08D0ADCF3E8} O43 - CFD: 18/07/2012 - 22:49:38 - [0] ----D C:\Users\Pilla\AppData\Local\{940F6CC9-5BD4-4B77-AE70-DA4BA17B32E5} O43 - CFD: 03/09/2012 - 19:51:47 - [0] ----D C:\Users\Pilla\AppData\Local\{949016A8-7768-4647-8DDE-D025830776EC} O43 - CFD: 23/05/2012 - 16:52:09 - [0] ----D C:\Users\Pilla\AppData\Local\{949AD61C-D5E5-45DC-8FF0-F61D7E2A9DC7} O43 - CFD: 08/06/2012 - 21:37:29 - [0] ----D C:\Users\Pilla\AppData\Local\{949F8ACB-4B0D-4D17-BD33-D51666C98930} O43 - CFD: 21/08/2012 - 18:32:56 - [0] ----D C:\Users\Pilla\AppData\Local\{9507603B-C00C-4C98-8071-C211603F7027} O43 - CFD: 02/12/2012 - 17:27:38 - [0] ----D C:\Users\Pilla\AppData\Local\{9524E8A7-887B-40B1-AA03-41DC03A5B4F2} O43 - CFD: 31/01/2013 - 19:11:35 - [0] ----D C:\Users\Pilla\AppData\Local\{95DAC217-CF65-4306-B68C-CADB06DA1CE5} O43 - CFD: 14/03/2012 - 20:08:53 - [0] ----D C:\Users\Pilla\AppData\Local\{95DF7DD1-7898-4612-9708-7EA1075F0BE1} O43 - CFD: 11/02/2013 - 00:13:23 - [0] ----D C:\Users\Pilla\AppData\Local\{96079DA0-D206-4A29-B8A2-C8ED76993A9B} O43 - CFD: 17/03/2012 - 11:08:16 - [0] ----D C:\Users\Pilla\AppData\Local\{9633F7B7-CC64-4C39-96B7-11904A77C70F} O43 - CFD: 10/05/2012 - 16:05:29 - [0] ----D C:\Users\Pilla\AppData\Local\{96370ACD-CF4E-436F-A7D3-9123A199A1D3} O43 - CFD: 11/10/2012 - 17:34:04 - [0] ----D C:\Users\Pilla\AppData\Local\{967A8209-BC9F-468A-964B-20F7C6428F23} O43 - CFD: 25/06/2012 - 12:42:59 - [0] ----D C:\Users\Pilla\AppData\Local\{969E14BA-D0C9-47E2-89CB-A0F8447C8C67} O43 - CFD: 08/05/2012 - 20:19:52 - [0] ----D C:\Users\Pilla\AppData\Local\{96CFA71C-E2DF-4C80-8C80-223F2C65BD7B} O43 - CFD: 12/01/2012 - 07:04:35 - [0] ----D C:\Users\Pilla\AppData\Local\{984BCE68-5F6D-4EB7-9BD5-A2EE917F65FF} O43 - CFD: 25/10/2012 - 22:58:36 - [0] ----D C:\Users\Pilla\AppData\Local\{985E86FC-7353-4039-8257-2609C95B10FB} O43 - CFD: 17/07/2012 - 08:51:05 - [0] ----D C:\Users\Pilla\AppData\Local\{98F92F0A-B289-4852-8C8C-FE4212155730} O43 - CFD: 12/01/2012 - 07:04:26 - [0] ----D C:\Users\Pilla\AppData\Local\{99B5EE73-88E4-42BE-A6CC-76E89135B374} O43 - CFD: 19/03/2012 - 18:20:04 - [0] ----D C:\Users\Pilla\AppData\Local\{9A40861C-506D-4406-9322-57D56706B4AB} O43 - CFD: 14/04/2012 - 14:28:02 - [0] ----D C:\Users\Pilla\AppData\Local\{9A7DB7A4-6A2F-4DF5-83BE-ADBC5DB00306} O43 - CFD: 25/05/2012 - 07:19:25 - [0] ----D C:\Users\Pilla\AppData\Local\{9A995AB7-8666-4883-B219-1139B91C0B87} O43 - CFD: 09/07/2012 - 04:11:42 - [0] ----D C:\Users\Pilla\AppData\Local\{9A9B65FC-EE13-4D4E-903A-5CA6ED43B8F5} O43 - CFD: 27/05/2012 - 12:44:42 - [0] ----D C:\Users\Pilla\AppData\Local\{9AD6E999-CA73-42EE-A045-A83FC2E99AC6} O43 - CFD: 29/11/2012 - 19:59:44 - [0] ----D C:\Users\Pilla\AppData\Local\{9CA8DB84-984D-4F03-8930-F7673DA4F805} O43 - CFD: 29/02/2012 - 20:23:29 - [0] ----D C:\Users\Pilla\AppData\Local\{9D264667-A9BC-49F7-8F98-59B1C3596A3F} O43 - CFD: 09/05/2012 - 12:44:34 - [0] ----D C:\Users\Pilla\AppData\Local\{9E71DDC5-AF22-48F3-B750-447097B98CF7} O43 - CFD: 06/01/2013 - 12:00:04 - [0] ----D C:\Users\Pilla\AppData\Local\{9E8CA655-420D-484B-AB52-6754D8FECB42} O43 - CFD: 19/06/2012 - 18:23:47 - [0] ----D C:\Users\Pilla\AppData\Local\{9F96EBE1-1B20-4490-B50A-F22B9E48D703} O43 - CFD: 13/07/2012 - 00:29:21 - [0] ----D C:\Users\Pilla\AppData\Local\{9FD234CD-4B2D-4D0D-8333-469CDFE7D349} O43 - CFD: 12/02/2013 - 19:03:00 - [0] ----D C:\Users\Pilla\AppData\Local\{A112A5E8-8386-445A-87EC-94102E29B893} O43 - CFD: 05/03/2012 - 19:22:13 - [0] ----D C:\Users\Pilla\AppData\Local\{A2308276-2DB3-4A1E-B008-089E2486F42B} O43 - CFD: 12/11/2012 - 08:40:12 - [0] ----D C:\Users\Pilla\AppData\Local\{A25FC7D3-9CD1-4DDF-8140-B56EEA930B69} O43 - CFD: 22/07/2012 - 22:30:23 - [0] ----D C:\Users\Pilla\AppData\Local\{A3BC22BF-D63A-470D-B7B6-014CA184BD27} O43 - CFD: 27/06/2012 - 23:10:19 - [0] ----D C:\Users\Pilla\AppData\Local\{A3F7484B-85F1-4375-9E30-90123540A596} O43 - CFD: 17/03/2012 - 11:32:29 - [0] ----D C:\Users\Pilla\AppData\Local\{A3F85095-D05D-4999-82F6-517513EFC868} O43 - CFD: 28/02/2012 - 18:56:56 - [0] ----D C:\Users\Pilla\AppData\Local\{A4337649-A525-4348-B673-92B84B0F70A8} O43 - CFD: 26/02/2012 - 16:20:41 - [0] ----D C:\Users\Pilla\AppData\Local\{A48FDC3B-DFC9-4DFA-8D67-03AED340C2AD} O43 - CFD: 26/02/2012 - 16:21:13 - [0] ----D C:\Users\Pilla\AppData\Local\{A526B87E-9573-4E3A-B0F3-6D0E26A1EEB8} O43 - CFD: 10/05/2012 - 16:05:40 - [0] ----D C:\Users\Pilla\AppData\Local\{A635C4D0-85CE-4E7A-83B7-D4C223E86B71} O43 - CFD: 11/03/2012 - 14:47:48 - [0] ----D C:\Users\Pilla\AppData\Local\{A6375358-FE81-472E-A392-AB2094A4FE5C} O43 - CFD: 20/07/2012 - 10:46:21 - [0] ----D C:\Users\Pilla\AppData\Local\{A6E9A006-3F6D-4DE9-AF5E-FB19FDE45816} O43 - CFD: 30/06/2012 - 08:37:20 - [0] ----D C:\Users\Pilla\AppData\Local\{A6EC56D4-08B3-4F4F-8B69-CB6EC4779877} O43 - CFD: 26/07/2012 - 22:44:33 - [0] ----D C:\Users\Pilla\AppData\Local\{A6FF0A2A-CE65-46DF-8051-88CF2A1A0923} O43 - CFD: 08/12/2012 - 20:25:10 - [0] ----D C:\Users\Pilla\AppData\Local\{A7009950-8612-4117-A902-8B485EBBADB6} O43 - CFD: 26/06/2012 - 13:25:29 - [0] ----D C:\Users\Pilla\AppData\Local\{A818D3EB-B659-4689-8E45-64EF908AAB97} O43 - CFD: 21/04/2012 - 12:08:17 - [0] ----D C:\Users\Pilla\AppData\Local\{A84D3B7D-320D-4425-92CB-C55541069E7B} O43 - CFD: 18/12/2012 - 19:14:30 - [0] ----D C:\Users\Pilla\AppData\Local\{A90DA42E-3FCD-4CDB-9521-4B215F3C2B6F} O43 - CFD: 19/10/2012 - 11:26:20 - [0] ----D C:\Users\Pilla\AppData\Local\{A913F79A-0168-4455-8459-A391647CA49E} O43 - CFD: 26/07/2012 - 22:44:43 - [0] ----D C:\Users\Pilla\AppData\Local\{A94E6708-DA30-4305-A2AC-A31D19014833} O43 - CFD: 14/06/2012 - 17:46:25 - [0] ----D C:\Users\Pilla\AppData\Local\{A97C236A-BD37-4B6D-90E8-5CC58768714E} O43 - CFD: 20/06/2012 - 17:33:34 - [0] ----D C:\Users\Pilla\AppData\Local\{AC6AAF19-235E-49CE-BA16-1BD9D0214C5E} O43 - CFD: 16/03/2012 - 13:17:32 - [0] ----D C:\Users\Pilla\AppData\Local\{AD196271-9D18-4217-BCBA-726D70CF332D} O43 - CFD: 25/06/2012 - 00:25:19 - [0] ----D C:\Users\Pilla\AppData\Local\{AD616865-ADA7-40DD-A3B1-000B3E4A44F9} O43 - CFD: 02/02/2013 - 08:48:57 - [0] ----D C:\Users\Pilla\AppData\Local\{AD9D1F5E-AB8C-4DD5-8412-FFD6BCAAE35B} O43 - CFD: 11/07/2012 - 22:18:35 - [0] ----D C:\Users\Pilla\AppData\Local\{AE861B99-0551-40F5-8AD2-76B810BC5AA4} O43 - CFD: 27/01/2012 - 19:17:23 - [0] ----D C:\Users\Pilla\AppData\Local\{AEEAAC17-CE06-43FC-AF1B-BE7754595D00} O43 - CFD: 19/04/2012 - 18:43:12 - [0] ----D C:\Users\Pilla\AppData\Local\{AF2B3DEC-C3C6-4E7D-82F1-A1BFA4230D40} O43 - CFD: 17/11/2012 - 00:23:16 - [0] ----D C:\Users\Pilla\AppData\Local\{AF37A88C-ED79-46C2-8AA2-5293E3F7FE43} O43 - CFD: 11/07/2012 - 22:18:46 - [0] ----D C:\Users\Pilla\AppData\Local\{AFF3E215-41AC-471A-B4F5-5D77816BB76D} O43 - CFD: 27/02/2012 - 05:35:31 - [0] ----D C:\Users\Pilla\AppData\Local\{AFFDB343-6DE7-4123-9A90-2334D5DBB1DE} O43 - CFD: 09/07/2012 - 04:11:21 - [0] ----D C:\Users\Pilla\AppData\Local\{B09578B2-E581-4110-8691-8DCE8F0C10D1} O43 - CFD: 09/04/2012 - 13:57:55 - [0] ----D C:\Users\Pilla\AppData\Local\{B1215BEB-C2C3-4532-8764-59D34B691701} O43 - CFD: 22/09/2012 - 07:48:41 - [0] ----D C:\Users\Pilla\AppData\Local\{B2188DFF-DDD8-47BC-892D-6E13135E1520} O43 - CFD: 08/09/2012 - 16:45:18 - [0] ----D C:\Users\Pilla\AppData\Local\{B27B60F4-1C0C-4884-A409-AE950735FAC2} O43 - CFD: 20/11/2012 - 18:29:39 - [0] ----D C:\Users\Pilla\AppData\Local\{B2A7D7B2-FD4A-4C88-8995-ABB4F5AD0AE1} O43 - CFD: 06/02/2013 - 20:50:32 - [0] ----D C:\Users\Pilla\AppData\Local\{B2ACC225-4435-49E2-8E8E-0841AEE28BE3} O43 - CFD: 22/08/2012 - 09:36:26 - [0] ----D C:\Users\Pilla\AppData\Local\{B2DED6B3-0552-43C3-B9CC-0FDBCC5D1708} O43 - CFD: 16/03/2012 - 09:50:26 - [0] ----D C:\Users\Pilla\AppData\Local\{B34CFA2B-916A-4669-AFE6-B74540E72B29} O43 - CFD: 04/06/2012 - 20:28:14 - [0] ----D C:\Users\Pilla\AppData\Local\{B3945638-4F39-4536-B339-EEF7AA8E401D} O43 - CFD: 17/02/2013 - 01:21:42 - [0] ----D C:\Users\Pilla\AppData\Local\{B532B639-71D2-46DF-8F48-6D266C05E9AC} O43 - CFD: 13/12/2012 - 18:51:14 - [0] ----D C:\Users\Pilla\AppData\Local\{B63E0D14-8A3F-4393-BCA0-37E31DBD1BEE} O43 - CFD: 12/01/2013 - 16:58:54 - [0] ----D C:\Users\Pilla\AppData\Local\{B678C0B5-56C8-4C4B-A494-262AD91F4099} O43 - CFD: 06/10/2012 - 17:19:35 - [0] ----D C:\Users\Pilla\AppData\Local\{B6ECDAAA-0984-4BAB-A54B-DE69757BC41E} O43 - CFD: 08/05/2012 - 12:49:37 - [0] ----D C:\Users\Pilla\AppData\Local\{B703D738-A442-440B-9ABD-C42C9502211D} O43 - CFD: 18/03/2012 - 13:54:19 - [0] ----D C:\Users\Pilla\AppData\Local\{B74899D6-331F-42F0-B663-2426AC41FCE0} O43 - CFD: 21/06/2012 - 17:21:09 - [0] ----D C:\Users\Pilla\AppData\Local\{B7A9B273-683C-4C81-A745-1DE0772348E8} O43 - CFD: 08/10/2012 - 18:34:34 - [0] ----D C:\Users\Pilla\AppData\Local\{B81586FF-2F6A-4862-A43C-4B8FB41CF383} O43 - CFD: 01/04/2012 - 11:10:59 - [0] ----D C:\Users\Pilla\AppData\Local\{B851245F-D0A5-4FD3-B72B-F75CF6E53E45} O43 - CFD: 16/01/2013 - 09:16:56 - [0] ----D C:\Users\Pilla\AppData\Local\{B88A687A-4D94-40D9-A241-0FDE122DFD05} O43 - CFD: 09/11/2012 - 08:42:27 - [0] ----D C:\Users\Pilla\AppData\Local\{B8AC7D3E-2705-49C6-9B73-F031932E1018} O43 - CFD: 07/06/2012 - 13:31:38 - [0] ----D C:\Users\Pilla\AppData\Local\{B90C70C2-904B-49D6-95B7-2DBC63FFA009} O43 - CFD: 26/06/2012 - 13:25:41 - [0] ----D C:\Users\Pilla\AppData\Local\{B93B9F8E-26A2-4D89-96EF-EBB0BF1DF985} O43 - CFD: 02/07/2012 - 22:25:13 - [0] ----D C:\Users\Pilla\AppData\Local\{BA07B651-C733-4F86-AB7E-8294A2CC4EA6} O43 - CFD: 03/06/2012 - 09:01:11 - [0] ----D C:\Users\Pilla\AppData\Local\{BA75A286-D095-4CE9-B908-4A737E887B0C} O43 - CFD: 14/01/2012 - 10:45:15 - [0] ----D C:\Users\Pilla\AppData\Local\{BB1B2285-5502-45CC-8585-219B3B51424D} O43 - CFD: 04/01/2012 - 01:33:46 - [0] ----D C:\Users\Pilla\AppData\Local\{BB5B6B60-BAA5-4574-9A22-5B0645A7EBA6} O43 - CFD: 09/06/2012 - 11:43:42 - [0] ----D C:\Users\Pilla\AppData\Local\{BC3C4B35-5CBE-40D4-80F6-D2D02DE59821} O43 - CFD: 07/05/2012 - 17:35:23 - [0] ----D C:\Users\Pilla\AppData\Local\{BC98CBA7-8D89-4F70-8232-0E53B92F103E} O43 - CFD: 06/05/2012 - 10:42:38 - [0] ----D C:\Users\Pilla\AppData\Local\{BD19AE60-AA2C-4E61-8F3A-27A82E9EFB65} O43 - CFD: 25/04/2012 - 20:13:00 - [0] ----D C:\Users\Pilla\AppData\Local\{BE8B0321-06AF-4B08-B645-34958336DE69} O43 - CFD: 09/12/2012 - 10:46:32 - [0] ----D C:\Users\Pilla\AppData\Local\{BEA28971-34EC-4780-80D4-CBA0FEEBE8B6} O43 - CFD: 18/02/2012 - 11:31:46 - [0] ----D C:\Users\Pilla\AppData\Local\{BF6E0D8C-A80D-47A4-8D90-E70DA7581339} O43 - CFD: 17/10/2012 - 18:17:23 - [0] ----D C:\Users\Pilla\AppData\Local\{BFBD89AD-BD89-4BE8-B94B-DC9B9EDC8BBF} O43 - CFD: 13/06/2012 - 20:29:40 - [0] ----D C:\Users\Pilla\AppData\Local\{C0034407-C0D5-4985-8EEE-07304FE2BCE4} O43 - CFD: 11/03/2012 - 21:34:27 - [0] ----D C:\Users\Pilla\AppData\Local\{C0154671-7217-4C52-A9B8-E91E4E9A4B9D} O43 - CFD: 23/01/2012 - 18:04:15 - [0] ----D C:\Users\Pilla\AppData\Local\{C075963D-0632-47ED-B5E1-C32FF6B01281} O43 - CFD: 01/03/2012 - 19:05:45 - [0] ----D C:\Users\Pilla\AppData\Local\{C0DF1580-F555-4D19-9C52-BAD719EACE1A} O43 - CFD: 19/12/2012 - 17:59:26 - [0] ----D C:\Users\Pilla\AppData\Local\{C14767C0-48FA-4D81-AC0D-BB64470BD259} O43 - CFD: 05/12/2012 - 22:00:14 - [0] ----D C:\Users\Pilla\AppData\Local\{C1D08C00-F8BD-4969-ACC9-CC8FA22FC5AB} O43 - CFD: 23/06/2012 - 22:48:50 - [0] ----D C:\Users\Pilla\AppData\Local\{C27FA261-A154-4D4B-B28D-B9F0289ED404} O43 - CFD: 30/06/2012 - 08:37:20 - [0] ----D C:\Users\Pilla\AppData\Local\{C367AC81-46AF-47F4-BFCA-CC78C1CC5AAE} O43 - CFD: 10/12/2012 - 11:58:37 - [0] ----D C:\Users\Pilla\AppData\Local\{C36D76B2-8172-41D0-BFA7-751D4F4331C5} O43 - CFD: 30/11/2012 - 16:43:43 - [0] ----D C:\Users\Pilla\AppData\Local\{C3B9F45E-80F7-48B5-A58B-25845AAFDF0A} O43 - CFD: 15/01/2013 - 15:41:00 - [0] ----D C:\Users\Pilla\AppData\Local\{C401B2B6-363E-44A2-A9AC-C1E4B4C13495} O43 - CFD: 08/06/2012 - 10:37:29 - [0] ----D C:\Users\Pilla\AppData\Local\{C47DE1AB-BBD7-4B26-9CDF-1D09B7D506B0} O43 - CFD: 18/01/2012 - 01:22:45 - [0] ----D C:\Users\Pilla\AppData\Local\{C5371A78-7B2F-4701-8BFE-2A130DB8298F} O43 - CFD: 27/09/2012 - 18:35:28 - [0] ----D C:\Users\Pilla\AppData\Local\{C578586B-7E88-4438-849F-AAB19382279C} O43 - CFD: 11/03/2012 - 21:34:37 - [0] ----D C:\Users\Pilla\AppData\Local\{C5F1BBC8-94E0-4EA9-B453-A25F27849399} O43 - CFD: 16/09/2012 - 10:25:33 - [0] ----D C:\Users\Pilla\AppData\Local\{C612D669-78BC-465F-A840-466CAAB24817} O43 - CFD: 09/06/2012 - 07:32:13 - [0] ----D C:\Users\Pilla\AppData\Local\{C615E7D3-192F-4211-AF49-E3FFD6872363} O43 - CFD: 07/01/2013 - 19:55:12 - [0] ----D C:\Users\Pilla\AppData\Local\{C72C7464-6440-49D2-83E7-B7947204E86E} O43 - CFD: 14/09/2012 - 17:07:20 - [0] ----D C:\Users\Pilla\AppData\Local\{C8179A0A-C4DD-4EFD-BAFB-D01D7514F6D5} O43 - CFD: 02/07/2012 - 10:24:06 - [0] ----D C:\Users\Pilla\AppData\Local\{C8457AA5-A168-4A72-955F-9B9474F3C783} O43 - CFD: 30/04/2012 - 06:15:24 - [0] ----D C:\Users\Pilla\AppData\Local\{C8656F1C-A234-474F-8530-D65E32B5001B} O43 - CFD: 30/10/2012 - 00:25:32 - [0] ----D C:\Users\Pilla\AppData\Local\{C920BEEC-D351-43AD-854F-6EAFC22D3484} O43 - CFD: 08/06/2012 - 21:37:39 - [0] ----D C:\Users\Pilla\AppData\Local\{C95E3051-BE46-4C61-A667-26EC27939445} O43 - CFD: 04/06/2012 - 19:24:49 - [0] ----D C:\Users\Pilla\AppData\Local\{CAADC374-F155-4485-BF66-E4E76677FB86} O43 - CFD: 19/10/2012 - 23:45:39 - [0] ----D C:\Users\Pilla\AppData\Local\{CB03765A-C0E4-4DA6-AC77-C0ACCAB352AE} O43 - CFD: 02/07/2012 - 10:24:16 - [0] ----D C:\Users\Pilla\AppData\Local\{CB718108-2863-466E-A102-A80A0D38C141} O43 - CFD: 11/11/2012 - 12:29:52 - [0] ----D C:\Users\Pilla\AppData\Local\{CC18E1A5-396A-458C-B836-9D4DCA49D57A} O43 - CFD: 14/10/2012 - 09:04:33 - [0] ----D C:\Users\Pilla\AppData\Local\{CC2B9EE6-9D8A-4639-B084-116B35772565} O43 - CFD: 14/05/2012 - 18:43:56 - [0] ----D C:\Users\Pilla\AppData\Local\{CC43167A-6CAC-4BDE-BBAC-ACF98A29AA09} O43 - CFD: 12/01/2013 - 16:55:06 - [0] ----D C:\Users\Pilla\AppData\Local\{CC4EF4D8-3301-4FB6-85F4-CF519F0125C5} O43 - CFD: 10/11/2012 - 20:15:17 - [0] ----D C:\Users\Pilla\AppData\Local\{CD307EB1-5906-4186-A4A3-427145E9E54E} O43 - CFD: 27/01/2013 - 00:25:23 - [0] ----D C:\Users\Pilla\AppData\Local\{CDA105F3-A665-4BA0-94A9-1CF92C85C815} O43 - CFD: 27/06/2012 - 11:09:29 - [0] ----D C:\Users\Pilla\AppData\Local\{CF1820F9-4248-4864-8881-0C5D93EAECF5} O43 - CFD: 07/11/2012 - 14:41:29 - [0] ----D C:\Users\Pilla\AppData\Local\{D07AAD68-F747-4C62-BDBA-7BAE6F9876D6} O43 - CFD: 02/06/2012 - 15:52:11 - [0] ----D C:\Users\Pilla\AppData\Local\{D088A3C2-B399-4410-B243-75A7E38A2F3D} O43 - CFD: 10/10/2012 - 18:44:30 - [0] ----D C:\Users\Pilla\AppData\Local\{D15A2105-C863-4F67-9CE0-2D960B8990D7} O43 - CFD: 06/01/2012 - 01:02:45 - [0] ----D C:\Users\Pilla\AppData\Local\{D1FD6D8D-7CE8-406B-9506-2D1B92396D71} O43 - CFD: 25/07/2012 - 19:15:37 - [0] ----D C:\Users\Pilla\AppData\Local\{D20B9D27-DED3-49BA-8416-1D2CBA1B6131} O43 - CFD: 07/02/2012 - 01:04:50 - [0] ----D C:\Users\Pilla\AppData\Local\{D25DE0C6-17A6-4C2B-9C67-0A5F69AD8D08} O43 - CFD: 01/01/2012 - 12:39:18 - [0] ----D C:\Users\Pilla\AppData\Local\{D2A86878-714E-4BAC-98AE-9D9BDACFBECF} O43 - CFD: 16/03/2012 - 13:17:22 - [0] ----D C:\Users\Pilla\AppData\Local\{D2B7D4FE-9C52-4570-A827-F5B5041F3D40} O43 - CFD: 25/06/2012 - 00:25:10 - [0] ----D C:\Users\Pilla\AppData\Local\{D33FF475-5138-4174-96C6-440C0F3BD3D7} O43 - CFD: 21/04/2012 - 12:08:07 - [0] ----D C:\Users\Pilla\AppData\Local\{D3C9DB18-A572-4018-BE16-9EFFDC5570F8} O43 - CFD: 05/05/2012 - 09:23:02 - [0] ----D C:\Users\Pilla\AppData\Local\{D426145E-5C80-44F8-95AB-C5BE32DE841B} O43 - CFD: 13/12/2012 - 18:46:22 - [0] ----D C:\Users\Pilla\AppData\Local\{D433F58B-3A71-4E51-A51C-7EC91D32F997} O43 - CFD: 05/02/2013 - 08:29:55 - [0] ----D C:\Users\Pilla\AppData\Local\{D45B3DD9-E0EA-4B4B-AD38-8F950542E8D0} O43 - CFD: 08/06/2012 - 17:15:03 - [0] ----D C:\Users\Pilla\AppData\Local\{D4BA10CA-DA80-4469-BFA2-F1E9D55C4F5D} O43 - CFD: 05/01/2013 - 11:45:28 - [0] ----D C:\Users\Pilla\AppData\Local\{D5A6F7F0-B80A-4250-9BB6-6F05C63DA9DF} O43 - CFD: 21/01/2013 - 08:12:36 - [0] ----D C:\Users\Pilla\AppData\Local\{D5C640F4-9FAE-4FFF-BE77-E9BDAC797FAD} O43 - CFD: 23/01/2013 - 21:01:18 - [0] ----D C:\Users\Pilla\AppData\Local\{D5EF2DD1-AF5D-4AE1-8F38-7F3EF5404031} O43 - CFD: 19/11/2012 - 18:42:56 - [0] ----D C:\Users\Pilla\AppData\Local\{D624A6B1-A893-416B-98C9-7347902614F9} O43 - CFD: 17/09/2012 - 17:47:39 - [0] ----D C:\Users\Pilla\AppData\Local\{D6B59CD7-A73E-4F43-B817-6A05B26D92DB} O43 - CFD: 10/02/2012 - 09:10:31 - [0] ----D C:\Users\Pilla\AppData\Local\{D7404719-5BBA-4BB3-9773-1CBE43274EBB} O43 - CFD: 22/07/2012 - 22:30:33 - [0] ----D C:\Users\Pilla\AppData\Local\{D826006B-793C-4F15-B715-6C99358484D7} O43 - CFD: 04/01/2013 - 23:41:39 - [0] ----D C:\Users\Pilla\AppData\Local\{D8CBD521-03EC-4173-B3D5-DD651C5A0A8B} O43 - CFD: 10/02/2012 - 10:45:26 - [0] ----D C:\Users\Pilla\AppData\Local\{D945A81C-3425-4E81-B490-37EFE89DA79F} O43 - CFD: 04/09/2012 - 22:14:07 - [0] ----D C:\Users\Pilla\AppData\Local\{D954EA67-236D-424D-88F5-01ABB6AE40B0} O43 - CFD: 08/05/2012 - 14:08:12 - [0] ----D C:\Users\Pilla\AppData\Local\{D9797482-38AD-45C7-A0C7-6B01C3C4ACF2} O43 - CFD: 13/09/2012 - 17:11:43 - [0] ----D C:\Users\Pilla\AppData\Local\{DA126B98-7E09-41E2-B37C-F5186AF7FB7B} O43 - CFD: 29/05/2012 - 18:32:54 - [0] ----D C:\Users\Pilla\AppData\Local\{DA1958FB-1488-4222-A403-080917263581} O43 - CFD: 07/09/2012 - 05:07:10 - [0] ----D C:\Users\Pilla\AppData\Local\{DA58FAD3-FE79-4E09-AE05-BCC4176BF1D2} O43 - CFD: 27/05/2012 - 12:44:33 - [0] ----D C:\Users\Pilla\AppData\Local\{DAFDC214-D287-4899-BAAE-2077949D9AE3} O43 - CFD: 08/06/2012 - 17:14:53 - [0] ----D C:\Users\Pilla\AppData\Local\{DB239748-234D-4661-BDDC-B98CE15572B2} O43 - CFD: 14/05/2012 - 08:06:11 - [0] ----D C:\Users\Pilla\AppData\Local\{DB7EE0B8-A965-4F45-81F6-B3E8DE353A14} O43 - CFD: 21/11/2012 - 19:16:27 - [0] ----D C:\Users\Pilla\AppData\Local\{DC564C35-3BD7-465C-AFBA-0385B0698E7D} O43 - CFD: 28/05/2012 - 07:29:19 - [0] ----D C:\Users\Pilla\AppData\Local\{DC7BFC26-E024-409F-A001-9532794668F0} O43 - CFD: 27/04/2012 - 17:50:26 - [0] ----D C:\Users\Pilla\AppData\Local\{DCA3EC2D-703A-4854-8E45-3C9F711346A5} O43 - CFD: 18/09/2012 - 18:01:32 - [0] ----D C:\Users\Pilla\AppData\Local\{DE3880D3-EEC9-4B96-A111-772C04951041} O43 - CFD: 09/11/2012 - 20:43:01 - [0] ----D C:\Users\Pilla\AppData\Local\{DEBC5ED3-0E02-4E3B-9EF9-5AB15E890908} O43 - CFD: 07/07/2012 - 22:55:48 - [0] ----D C:\Users\Pilla\AppData\Local\{DF2F0B97-A4AB-4B80-A5F0-1EE9A0CADDA0} O43 - CFD: 08/05/2012 - 12:49:27 - [0] ----D C:\Users\Pilla\AppData\Local\{DFAC3E66-DF39-47F4-9A99-9DE68DFD8C2F} O43 - CFD: 17/04/2012 - 20:26:24 - [0] ----D C:\Users\Pilla\AppData\Local\{E04A70EE-F07F-4089-8F2C-A822B6640454} O43 - CFD: 20/04/2012 - 19:22:26 - [0] ----D C:\Users\Pilla\AppData\Local\{E07482BD-21A5-4A05-B67B-73E1569FABED} O43 - CFD: 20/01/2012 - 15:44:04 - [0] ----D C:\Users\Pilla\AppData\Local\{E0C0A8DD-BC6C-4EF5-8275-03D6001902F9} O43 - CFD: 21/07/2012 - 13:54:34 - [0] ----D C:\Users\Pilla\AppData\Local\{E0C3AE40-F146-4256-8653-76BB952BB24B} O43 - CFD: 09/09/2012 - 11:06:10 - [0] ----D C:\Users\Pilla\AppData\Local\{E0F6AFFE-AD4E-47CE-9326-9C5C487A76FF} O43 - CFD: 10/06/2012 - 11:56:03 - [0] ----D C:\Users\Pilla\AppData\Local\{E18B5429-7529-4C5D-898E-D834689546E9} O43 - CFD: 06/12/2012 - 19:21:31 - [0] ----D C:\Users\Pilla\AppData\Local\{E307003F-F028-43EC-80DA-4FD0904C1B07} O43 - CFD: 24/05/2012 - 23:37:37 - [0] ----D C:\Users\Pilla\AppData\Local\{E31D850D-FDF7-42DD-9E38-487FE24671E8} O43 - CFD: 30/05/2012 - 20:01:59 - [0] ----D C:\Users\Pilla\AppData\Local\{E36B0E49-4AEF-4DA2-891E-77D185297C9C} O43 - CFD: 09/06/2012 - 17:34:05 - [0] ----D C:\Users\Pilla\AppData\Local\{E3DAC967-F6AD-4847-9353-D88AD67ABA6A} O43 - CFD: 24/09/2012 - 17:44:25 - [0] ----D C:\Users\Pilla\AppData\Local\{E3ED588F-F1A5-4800-AA96-F51572306605} O43 - CFD: 12/01/2012 - 22:17:26 - [0] ----D C:\Users\Pilla\AppData\Local\{E401D07B-A98E-40B4-A40B-60D983A0DBC1} O43 - CFD: 01/05/2012 - 12:38:03 - [0] ----D C:\Users\Pilla\AppData\Local\{E429591A-DA4D-42E8-8426-6E2DDC0C696E} O43 - CFD: 21/07/2012 - 13:54:23 - [0] ----D C:\Users\Pilla\AppData\Local\{E4C1BF04-0400-4BED-A76D-983B820A0286} O43 - CFD: 01/07/2012 - 22:23:38 - [0] ----D C:\Users\Pilla\AppData\Local\{E4CBA2AA-FC12-47C1-A15F-8380D6A31868} O43 - CFD: 02/12/2012 - 02:43:22 - [0] ----D C:\Users\Pilla\AppData\Local\{E59F1BFC-2EB4-40B0-B605-2596EDF2AFA1} O43 - CFD: 06/01/2012 - 21:06:29 - [0] ----D C:\Users\Pilla\AppData\Local\{E652EA4A-0B05-44F0-872F-11CCC7D61E34} O43 - CFD: 01/07/2012 - 10:22:36 - [0] ----D C:\Users\Pilla\AppData\Local\{E71E5DF9-E691-4B18-AA7C-3AA6AF5D4E37} O43 - CFD: 20/02/2012 - 20:45:17 - [0] ----D C:\Users\Pilla\AppData\Local\{E7407332-E039-47FE-B596-CA087F3E2802} O43 - CFD: 20/01/2012 - 15:43:54 - [0] ----D C:\Users\Pilla\AppData\Local\{E77EC8B2-3C6C-419F-8B46-5D215FCD3E84} O43 - CFD: 20/07/2012 - 10:46:09 - [0] ----D C:\Users\Pilla\AppData\Local\{E79A941C-44CD-4291-A95C-6356513C6A7F} O43 - CFD: 10/06/2012 - 11:55:52 - [0] ----D C:\Users\Pilla\AppData\Local\{E7B195D5-766A-4C61-967C-888874DFDE6B} O43 - CFD: 06/02/2012 - 19:34:34 - [0] ----D C:\Users\Pilla\AppData\Local\{E8D3B1F6-DF7C-4EA9-AC30-4F798AA7CD45} O43 - CFD: 18/02/2013 - 09:40:15 - [0] ----D C:\Users\Pilla\AppData\Local\{E8D5CDA6-5BEE-45D8-A917-95826C029796} O43 - CFD: 17/12/2012 - 20:37:50 - [0] ----D C:\Users\Pilla\AppData\Local\{E900E9C2-730D-416B-ACA9-62D7E8AD63E4} O43 - CFD: 25/01/2013 - 00:46:01 - [0] ----D C:\Users\Pilla\AppData\Local\{E9417E7A-60E0-4E92-8A43-7CFD0498386B} O43 - CFD: 30/01/2013 - 09:23:29 - [0] ----D C:\Users\Pilla\AppData\Local\{E9A0948C-8206-4793-94D4-F9F70CEE9790} O43 - CFD: 24/02/2012 - 19:20:59 - [0] ----D C:\Users\Pilla\AppData\Local\{E9A0C98C-DFA6-47B0-B5B8-E78BFA7E9946} O43 - CFD: 23/08/2012 - 20:32:26 - [0] ----D C:\Users\Pilla\AppData\Local\{EB6F972C-7CF3-456B-B475-0FD2E2FD1FD0} O43 - CFD: 09/12/2012 - 22:47:07 - [0] ----D C:\Users\Pilla\AppData\Local\{EB896A33-EBDC-471E-A53C-45FB91EE1D78} O43 - CFD: 14/05/2012 - 18:43:44 - [0] ----D C:\Users\Pilla\AppData\Local\{EC2416C8-8ED1-453B-884B-7BC35FAF5807} O43 - CFD: 03/12/2012 - 17:50:22 - [0] ----D C:\Users\Pilla\AppData\Local\{EC971AC4-2243-4EE2-8DDD-19E6C032C239} O43 - CFD: 03/02/2013 - 11:38:40 - [0] ----D C:\Users\Pilla\AppData\Local\{ECFF80AD-1290-4F05-9F65-01801E54F855} O43 - CFD: 10/01/2013 - 19:16:52 - [0] ----D C:\Users\Pilla\AppData\Local\{ED421C8A-8D75-49F0-AD48-84B24FE8CBD5} O43 - CFD: 17/03/2012 - 11:08:05 - [0] ----D C:\Users\Pilla\AppData\Local\{ED4CBB51-5DCC-4A39-838D-1816D5AFCEAB} O43 - CFD: 11/03/2012 - 15:10:35 - [0] ----D C:\Users\Pilla\AppData\Local\{ED713898-47AD-4698-B2D4-42F71F4F4AC8} O43 - CFD: 17/03/2012 - 11:32:05 - [0] ----D C:\Users\Pilla\AppData\Local\{EE2B5A76-8B39-4182-AF62-EFF8646983C8} O43 - CFD: 28/02/2012 - 18:57:08 - [0] ----D C:\Users\Pilla\AppData\Local\{EE8E51E9-9CAE-40CA-BED0-85987F4F93FE} O43 - CFD: 07/02/2012 - 01:04:40 - [0] ----D C:\Users\Pilla\AppData\Local\{EFFAFA1B-E4CA-47E6-9597-A2881FF03FFB} O43 - CFD: 19/03/2012 - 01:08:06 - [0] ----D C:\Users\Pilla\AppData\Local\{F040D765-8576-4CC1-81CA-EDFDAD24277C} O43 - CFD: 04/05/2012 - 06:31:23 - [0] ----D C:\Users\Pilla\AppData\Local\{F0BA9447-354E-4342-AD0D-2545A3040894} O43 - CFD: 17/12/2012 - 21:35:40 - [0] ----D C:\Users\Pilla\AppData\Local\{F251F2F7-2AB3-45E0-AC70-0EDC3FB9AA89} O43 - CFD: 06/01/2012 - 01:02:23 - [0] ----D C:\Users\Pilla\AppData\Local\{F28A3960-DD95-4529-AA08-B826636A8AB1} O43 - CFD: 18/02/2013 - 21:40:50 - [0] ----D C:\Users\Pilla\AppData\Local\{F312478E-EBD8-4101-8066-F5526AB5DA31} O43 - CFD: 09/06/2012 - 22:38:23 - [0] ----D C:\Users\Pilla\AppData\Local\{F331F59D-ABA7-4C47-8D4A-40BDD2DC2E25} O43 - CFD: 26/02/2012 - 21:37:56 - [0] ----D C:\Users\Pilla\AppData\Local\{F3B980FA-A724-4CB7-9A47-AABC5984A5A4} O43 - CFD: 21/12/2012 - 20:42:32 - [0] ----D C:\Users\Pilla\AppData\Local\{F4098AC3-8E40-4CDF-914F-F6F291298718} O43 - CFD: 05/06/2012 - 10:16:59 - [0] ----D C:\Users\Pilla\AppData\Local\{F5B4DB72-EE59-4BCC-AA02-23E2C8EC0EC5} O43 - CFD: 04/07/2012 - 02:15:59 - [0] ----D C:\Users\Pilla\AppData\Local\{F5EBBAD5-2756-45D8-B50A-1A935E8F92C2} O43 - CFD: 12/10/2012 - 08:17:31 - [0] ----D C:\Users\Pilla\AppData\Local\{F640B94B-5989-4155-931D-B7B43C954D85} O43 - CFD: 03/06/2012 - 09:00:49 - [0] ----D C:\Users\Pilla\AppData\Local\{F675D842-90F7-438D-ADC0-D171D71B515D} O43 - CFD: 23/07/2012 - 17:40:26 - [0] ----D C:\Users\Pilla\AppData\Local\{F74F3397-81B6-4934-B28C-82C2194A6D9E} O43 - CFD: 22/08/2012 - 21:37:00 - [0] ----D C:\Users\Pilla\AppData\Local\{F7B167E9-261C-4D21-9D86-58D16BD92CA0} O43 - CFD: 24/01/2012 - 22:53:45 - [0] ----D C:\Users\Pilla\AppData\Local\{F8E7E2C9-DA9B-4EED-B783-FC038F3B2BA9} O43 - CFD: 26/09/2012 - 18:19:46 - [0] ----D C:\Users\Pilla\AppData\Local\{F8FC5C7A-3418-409A-886B-5C0AB06AB224} O43 - CFD: 05/06/2012 - 19:49:44 - [0] ----D C:\Users\Pilla\AppData\Local\{F964D877-8895-4F51-AF77-5A422CE04CC1} O43 - CFD: 30/09/2012 - 22:36:20 - [0] ----D C:\Users\Pilla\AppData\Local\{F9AE840F-355A-461A-ABD1-19D5F67DC06B} O43 - CFD: 28/05/2012 - 07:29:09 - [0] ----D C:\Users\Pilla\AppData\Local\{FA90A6C0-42B9-46D4-8171-8A81D4BCA672} O43 - CFD: 29/08/2012 - 18:55:48 - [0] ----D C:\Users\Pilla\AppData\Local\{FC01D038-1FBD-4932-BAE8-FFBA9877F714} O43 - CFD: 17/01/2013 - 08:58:41 - [0] ----D C:\Users\Pilla\AppData\Local\{FC50D425-491E-4901-B845-79BD6223886C} O43 - CFD: 09/05/2012 - 12:44:47 - [0] ----D C:\Users\Pilla\AppData\Local\{FC72400A-EB2E-46A4-BABE-CD244AB206EE} O43 - CFD: 08/04/2012 - 02:13:22 - [0] ----D C:\Users\Pilla\AppData\Local\{FCBDF090-6E21-4134-97BE-202A52EC6980} O43 - CFD: 13/01/2012 - 12:57:32 - [0] ----D C:\Users\Pilla\AppData\Local\{FD9AA65A-6EED-431B-886C-0C573A629536} O43 - CFD: 06/11/2012 - 11:49:54 - [0] ----D C:\Users\Pilla\AppData\Local\{FDCBB1A9-EC37-4C60-A742-D6016D04059E} O43 - CFD: 05/01/2013 - 23:46:02 - [0] ----D C:\Users\Pilla\AppData\Local\{FE98792B-1CAC-4499-B072-7F1A4470DAC2} O43 - CFD: 14/01/2013 - 11:09:20 - [0] ----D C:\Users\Pilla\AppData\Local\{FF1FF022-458C-4A5B-8DD0-A84809FE76EC} O43 - CFD: 10/05/2012 - 17:24:11 - [0] ----D C:\Users\Pilla\AppData\Local\{FF99CACE-5C8D-43F3-9F22-781289B8957E} O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 13/07/2012 - 09:53:05 - [0,000] R---D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 12/02/2012 - 15:05:50 - [0,004] ----D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar O43 - CFD: 01/12/2012 - 17:17:17 - [0] ----D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firaxis Games O43 - CFD: 01/12/2012 - 17:18:41 - [0,000] ----D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 13/07/2012 - 09:53:05 - [0,000] R---D C:\Users\Pilla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Scan Program Folder in 00mn 25s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.1FA371CE351DFDE095A5B22D8572D1FD] - 20/02/2013 - 15:38:27 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1247256] O44 - LFC:[MD5.DF782E33B061C8E9812ABD38C7FCBC00] - 20/02/2013 - 00:44:08 ---A- . (...) -- C:\Windows\setupact.log [101689] O44 - LFC:[MD5.D1ED0A07ECE7B7AB06BEC7B025C1E1FB] - 20/02/2013 - 00:44:06 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.0C366303D7F1BC260CC89784EB80794E] - 19/02/2013 - 22:45:55 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1549936] O44 - LFC:[MD5.C1283B14B5F0F7C1412BCA15156C5066] - 19/02/2013 - 22:45:55 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [106622] O44 - LFC:[MD5.EFDC0EFCE95F87076975D438F3E43F6A] - 19/02/2013 - 22:45:55 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [130988] O44 - LFC:[MD5.1BF0D7FD0D3E10253569DE61CF33FD19] - 19/02/2013 - 22:45:55 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [616242] O44 - LFC:[MD5.768586AFCCBA8DCAB772D9690D9F2B45] - 19/02/2013 - 22:45:55 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [704714] O44 - LFC:[MD5.39533E6D8E23728D490C9D380AED72B9] - 19/02/2013 - 22:39:58 ---A- . (...) -- C:\Windows\PFRO.log [477460] O44 - LFC:[MD5.E745CAF4F3C181411C3E090BF18B88E3] - 14/02/2013 - 12:12:01 . (...) -- C:\Windows\System32\FNTCACHE.DAT [] O44 - LFC:[MD5.E745CAF4F3C181411C3E090BF18B88E3] - 14/02/2013 - 12:12:01 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [290088] ~ Scan Files in 01mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{977c7224-9942-11e1-b0e2-402cf423ee03}\AutoRun\command. (...) -- F:\USBAutoRun.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) (None) ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.5C368F4B04ED2A923E6AFCA2D37BAFF5] - 13/05/2011 - 17:57:58 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [43320] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 07/05/2011 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 07/11/2012 - C:\Windows\System32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 15/04/2011 - C:\Windows\System32\DRIVERS\igdpmd64.sys (intelkmd) .(.Intel Corporation - Intel Graphics Kernel Mode Driver.) - LEGACY_INTELKMD O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 25/02/2011 - C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys (SliceDisk5) .(.Atola - SliceDisk driver.) - LEGACY_SLICEDISK5 ~ Scan Services in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {2fa28606-de77-4029-af96-b231e3b8f827} - (Ask.com) - http://eu.ask.com O69 - SBI: SearchScopes [HKCU] {631B693F-374E-43F6-ACDD-0C8527E68067} - (Propositions de recherche Amazon.fr) - http://www.amazon.fr O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} [DefaultScope] - (Search Results) - http://dts.search-results.com O69 - SBI: SearchScopes [HKCU] {b7fca997-d0fb-4fe0-8afd-255e89cf9671} - (Yahoo) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://fr.wikipedia.org O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com O69 - SBI: SearchScopes [HKCU] {EC067CF4-7A31-4A54-B67E-F11F0022F31F} - (Ask Search) - http://websearch.ask.com ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.FF7DCF20C45DCC83642A6226D9F1D8E8] [SPRF][18/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\1EDCA198-5B46-4ABC-B6C6-F5FD7A00C542.dat [1726] [MD5.D5F56314E12769235B0CD314C3AE11AF] [SPRF][25/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\32C0E5C8-D481-46D0-8174-924B0F606D15.dat [1726] [MD5.2B43D10A40D4942B4F3B68DD401F8BF1] [SPRF][15/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\426090D5-C261-4D6F-B5A6-45CF71915CBD.dat [1726] [MD5.B30EB289A96121C93B10F58EDF02E8A8] [SPRF][09/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\7C910BD7-091B-48BD-81F3-B3C5262C8BF8.dat [1726] [MD5.E92604E043F51C604B6D1AC3BCD3A202] [SPRF][21/12/2011] (.Igor Pavlov - 7-Zip Standalone Console.) -- C:\Users\Pilla\AppData\Local\Temp\7za.exe [536064] [MD5.4BB7BB2D65C621FCACDD47B59FCD5775] [SPRF][18/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\85AF26E0-6664-438A-A125-AFEB496E8D90.dat [1726] [MD5.84DECD78A6262523E46ECE77F0EE5AB0] [SPRF][09/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\8CD2935A-268E-461F-9CE8-3AAA052C1D94.dat [1726] [MD5.47ACD8AEDA897792ECBCDE0645B5B51E] [SPRF][15/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\A467064F-A5A4-41E2-AD3F-2FA75D7696B7.dat [1726] [MD5.C7225B392E228FE9F593586D39D6C23D] [SPRF][18/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\C435AED9-638D-488E-964E-D665862B74D9.dat [1726] [MD5.213F595091DB0FC297988F430D03D5A5] [SPRF][25/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\C5E39F92-3AB0-4334-BD80-60DC06C8A95A.dat [1726] [MD5.268D08F56BE1169E567BBCFC933515FB] [SPRF][18/02/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\D4C4D161-9133-4658-A7CD-8A56CB5BEE3A.dat [1726] [MD5.F6959F0CACD35E5430B44F0876EFE55A] [SPRF][06/12/2011] (...) -- C:\Users\Pilla\AppData\Local\Temp\installhelper.dll [1508352] [MD5.EE622B2CD2D3C5CD950D49BD1708A9D4] [SPRF][20/02/2012] (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Users\Pilla\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe [909600] [MD5.3397FB83B1E01CDEA47E5478AC4D7A68] [SPRF][10/08/2012] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\Pilla\AppData\Local\Temp\jre-7u6-windows-i586-iftw.exe [894952] [MD5.8A4AF3B0695F29186AD02E2FD766FA3B] [SPRF][02/06/2012] (.SweetIM Technologies Ltd. - SQLite DLL.) -- C:\Users\Pilla\AppData\Local\Temp\mgsqlite3.dll [393016] [MD5.BCB0728F4B117855765CE8FE883B5E9B] [SPRF][14/05/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\NOSEventMessages.dll [1536] [MD5.34CCBAB2BF9A2F934585CCA9FA7DE85D] [SPRF][27/03/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\OptChrome.exe [155648] [MD5.4549464B138D72190C2D75E3FD1083AB] [SPRF][17/01/2013] (...) -- C:\Users\Pilla\AppData\Local\Temp\pool.bin [256] [MD5.A8CEBC5788C03B67A52949194B5167B4] [SPRF][01/07/2012] (.Ask - Wrapper Application.) -- C:\Users\Pilla\AppData\Local\Temp\setup.exe [4031184] [MD5.8D7204EAE6E87FB5120EBA9A14527BC2] [SPRF][17/01/2013] (...) -- C:\Users\Pilla\AppData\Local\Temp\SetupDataMngr_Searchqu.exe [3580608] [MD5.BF04155512587F3FE62E221C8A585C5C] [SPRF][14/05/2012] (.SweetIM Technologies Ltd. - SweetIM Installer by SweetPacks.) -- C:\Users\Pilla\AppData\Local\Temp\Shortcut_BundleSweetIMSetup.exe [6097200] [MD5.1A3D1A7349253561EF89D017F6EDD5FC] [SPRF][02/06/2012] (.SweetIM Technologies Lt - This installer.) -- C:\Users\Pilla\AppData\Local\Temp\SIMEEIInstaller.exe [2626512] [MD5.27BCA7F55743101C6AC7D2C205DFE64E] [SPRF][18/01/2012] (.Hewlett-Packard - Pas de description.) -- C:\Users\Pilla\AppData\Local\Temp\sp54373.exe [48461176] [MD5.4A107650E97347C3A1A29A7E4E878A8E] [SPRF][20/10/2011] (.Hewlett Packard Inc - HP Software Framework.) -- C:\Users\Pilla\AppData\Local\Temp\SP54714.exe [6580120] [MD5.8D03B10F0DCED524A88A3FF4B370F50D] [SPRF][18/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\sqlite3.exe [465408] [MD5.72412B526BCC716382E62B7939DCFD8F] [SPRF][26/05/2011] (...) -- C:\Users\Pilla\AppData\Local\Temp\SRAssetsHelper.dll [1085952] [MD5.4788286DF8C8077E0434B261C11F6331] [SPRF][18/01/2012] (...) -- C:\Users\Pilla\AppData\Local\Temp\temp.bat [295] [MD5.C90B895088357BCB4669B47FB38BF8F8] [SPRF][17/01/2013] (...) -- C:\Users\Pilla\AppData\Local\Temp\thanks.bat [84] [MD5.0980ED49BA5D6F1D108DDC67C5672689] [SPRF][21/06/2011] (.Hewlett-Packard Company - HP Support Assistant Uninstaller.) -- C:\Users\Pilla\AppData\Local\Temp\UninstallHPSA.exe [449592] [MD5.0980ED49BA5D6F1D108DDC67C5672689] [SPRF][21/06/2011] (.Hewlett-Packard Company - HP Support Assistant Uninstaller.) -- C:\Users\Pilla\AppData\Local\Temp\UninstallHPTCA.exe [449592] [MD5.6016D8B234681299012D09D161F52574] [SPRF][27/03/2012] (.Yontoo LLC - Yontoo Runtime.) -- C:\Users\Pilla\AppData\Local\Temp\YontooIEClient.dll [792864] [MD5.FBAB280D0CAC5E21C72F0A1A7B5B9608] [SPRF][26/12/2011] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Pilla\AppData\Local\Temp\_is1F09.exe [455600] [MD5.7E090632163DA5F5A5580F85A70CB984] [SPRF][20/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Pilla\Desktop\ZHPDiag2.exe [5400765] ~ Scan Files in 00mn 05s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{FBDD4FE3-534D-4AA8-B3F6-EBC1EE674378}" |In - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\ezSharedSvcHost.exe (.not file.) O87 - FAEL: "{7D139F20-0FF2-4EED-BE16-C2309700F814}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe (.not file.) O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "{C9780177-F209-4275-9611-B33A1EC898DE}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{C2B7690F-5CE5-4B3D-A907-663822E13A6B}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{CB377550-3ADA-408A-BCF6-1904DB9DA523}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{BCA07295-2C1A-40C8-A6D2-33E686F36FC5}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{4D44943B-813B-4F4E-AA7B-58896D66CAB4}" |In - Private - P6 - TRUE | .(...) -- E:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.) O87 - FAEL: "{A9B3E474-2AED-43DC-8DC4-C01B777F04DF}" |In - Private - P17 - TRUE | .(...) -- E:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.) O87 - FAEL: "TCP Query User{49355303-3601-449C-ADBB-4FFE37DFFD3F}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeven O87 - FAEL: "UDP Query User{5FE3AC8E-489B-465F-A498-21044C57A7DE}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeve O87 - FAEL: "TCP Query User{768219D6-CBBB-4915-9361-7D7035B0BD0A}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eevent O87 - FAEL: "UDP Query User{EFA4F202-109D-42E2-9211-09E11B07EFF4}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeven O87 - FAEL: "{AD6F4ADA-7D63-4516-9D2B-3A00A2051AAB}" | In - None - P17 - TRUE | .(.Nokia - Nokia Suite.) -- C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe O87 - FAEL: "{DB1F0F41-4F9A-4C92-90BD-5ADEA054B272}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Common Files\nokia\service layer\a\nsl_host_process.exe (.not file.) O87 - FAEL: "{452F804B-574C-4191-9326-EC5C3F6064E2}" | In - Private - P6 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe O87 - FAEL: "{46D19F11-727F-4E8C-B8DA-2E7FCD001E0A}" | In - Private - P17 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe O87 - FAEL: "{49D40495-A5AE-482A-B767-2D554D45A50E}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{2D0A873F-CA9C-4214-85B5-557679A282CF}" | In - Private - P6 - TRUE | .(.Visicom Media Inc. - DTX broker.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe O87 - FAEL: "{E58DBC44-834D-4B04-BB89-930BD51EFD89}" | In - Private - P17 - TRUE | .(.Visicom Media Inc. - DTX broker.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe O87 - FAEL: "{E53E71EE-9D44-4A00-80B8-C03B0028A9D1}" | In - Private - P6 - TRUE | .(.Research In Motion - BlackBerry Desktop Software.) -- C:\Program Files (x86)\Research In Motion\BlackBerry desktop\Rim.desktop.exe O87 - FAEL: "{93DE729F-B29B-4C11-9671-ACCC57F97520}" | In - Private - P17 - TRUE | .(.Research In Motion - BlackBerry Desktop Software.) -- C:\Program Files (x86)\Research In Motion\BlackBerry desktop\Rim.desktop.exe ~ Scan Firewall in 00mn 00s ---\\ Scan Additionnel (O88) Database Version : v2.10791 - (19/02/2013) Clés trouvées (Keys found) : 254 Valeurs trouvées (Values found) : 2 Dossiers trouvés (Folders found) : 12 Fichiers trouvés (Files found) : 13 [HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] =>Adware.Yontoo [HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] =>Adware.Yontoo [HKLM\Software\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo [HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Adware.AskSBAR [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}] =>Adware.Bandoo [HKLM\Software\Classes\TypeLib\{4d3b167e-5fd8-4276-8fd7-9df19c1e4d19}] =>PUP.SweetIM [HKLM\Software\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}] =>Adware.Bandoo [HKLM\Software\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask [HKLM\Software\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}] =>Adware.Bandoo [HKLM\Software\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}] =>Adware.Bandoo [HKLM\Software\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR [HKLM\Software\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask [HKLM\Software\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}] =>Spyware.Soft2PC [HKLM\Software\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}] =>Spyware.Soft2PC [HKLM\Software\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}] =>Adware.Yontoo [HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}] =>Adware.Yontoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKLM\Software\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Adware.Yontoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}] =>PUP.SweetIM [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Adware.Yontoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Adware.Yontoo [HKLM\Software\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\BrowserConnection.dll] =>Adware.Bandoo [HKLM\Software\Classes\AppID\DNSBHO.dll] =>Adware.Bandoo [HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\sweetim.exe] =>PUP.SweetIM [HKLM\Software\Classes\BrowserConnection.Loader] =>Adware.Bandoo [HKLM\Software\Classes\BrowserConnection.Loader.1] =>Adware.Bandoo [HKLM\Software\Classes\DnsBHO.BHO] =>Adware.Bandoo [HKLM\Software\Classes\DnsBHO.BHO.1] =>Adware.Bandoo [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Adware.AskSBAR [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Adware.AskSBAR [HKLM\Software\Classes\ilivid] => [HKLM\Software\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo [HKLM\Software\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo [HKLM\Software\Classes\sim-packages] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160] =>Adware.Bandoo [HKLM\Software\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E0C8759C69912A4485AD49572CE7CA3] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\758F5690DAAD39F40845E0E23C8C5C0B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\758F5690DAAD39F40845E0E23C8C5C0B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\758F5690DAAD39F40845E0E23C8C5C0B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\758F5690DAAD39F40845E0E23C8C5C0B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\758F5690DAAD39F40845E0E23C8C5C0B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\B8713814E4D47A84297554B49AA067E0] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\B8713814E4D47A84297554B49AA067E0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B8713814E4D47A84297554B49AA067E0] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\B8713814E4D47A84297554B49AA067E0] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\B8713814E4D47A84297554B49AA067E0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch [HKCU\Software\APN] =>Toolbar.Ask [HKLM\Software\Wow6432Node\APN] =>Toolbar.Ask [HKCU\Software\AskToolbar] =>Toolbar.AskTBar [HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar [HKLM\Software\Wow6432Node\AskToolbar] =>Toolbar.AskTBar [HKCU\Software\DataMngr] =>Adware.Bandoo [HKLM\Software\DataMngr] =>Adware.Bandoo [HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo [HKCU\Software\DataMngr_Toolbar] =>Toolbar.Agent [HKCU\Software\ilivid] =>Adware.Bandoo [HKLM\Software\Wow6432Node\ilivid] =>Adware.Bandoo [HKLM\Software\Wow6432Node\SearchquMediabarTb] =>Adware.Bandoo [HKCU\Software\AppDataLow\Software\searchqutoolbar] =>Adware.Bandoo [HKCU\Software\SweetIM] =>PUP.SweetIM [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM [HKLM\Software\Tarma Installer] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASAPI32] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASMANCS] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}] =>Toolbar.Bing [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4183178B-4D4E-48A7-9257-454BA90A760E}] =>PUP.SweetIM [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Toolbar.AskBar [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iLivid] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Agent [HKLM\Software\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F] =>PUP.SweetIM [HKCU\Software\InstallCore] =>Adware.InstallCore [HKLM\Software\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] =>Toolbar.Agent [HKLM\Software\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\25BD30E1BC5D83343A835E62DDD4D41B] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM [HKLM\Software\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}] =>PUP.SweetIM [HKLM\Software\Classes\MediaPlayer.GraphicsUtils] =>PUP.SweetIM [HKLM\Software\Classes\MediaPlayer.GraphicsUtils.1] =>PUP.SweetIM [HKLM\Software\Classes\MgMediaPlayer.GifAnimator] =>PUP.SweetIM [HKLM\Software\Classes\MgMediaPlayer.GifAnimator.1] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM [HKLM\Software\Classes\SWEETIE.IEToolbar] =>PUP.SweetIM [HKLM\Software\Classes\SWEETIE.IEToolbar.1] =>PUP.SweetIM [HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook] =>PUP.SweetIM [HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1] =>PUP.SweetIM [HKLM\Software\Classes\Toolbar3.SWEETIE] =>PUP.SweetIM [HKLM\Software\Classes\Toolbar3.SWEETIE.1] =>PUP.SweetIM [HKLM\Software\Classes\YontooIEClient.Api] =>Adware.Yontoo [HKLM\Software\Classes\YontooIEClient.Api.1] =>Adware.Yontoo [HKLM\Software\Classes\YontooIEClient.Layers] =>Adware.Yontoo [HKLM\Software\Classes\YontooIEClient.Layers.1] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\SWEETIE.IEToolbar] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\SWEETIE.IEToolbar.1] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Toolbar3.SWEETIE] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Toolbar3.SWEETIE.1] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\YontooIEClient.Api] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\YontooIEClient.Api.1] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\YontooIEClient.Layers] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\YontooIEClient.Layers.1] =>Adware.Yontoo [HKLM\Software\Classes\AppID\YontooIEClient.DLL] =>Adware.Yontoo [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe] =>PUP.SweetIM [HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{99079A25-328F-4BD4-BE04-00955ACAA0A7} =>Adware.Bandoo [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Adware.AskSBAR C:\Program Files (x86)\yontoo =>Adware.Yontoo C:\Program Files (x86)\Ask.com =>Toolbar.AskBar C:\Program Files (x86)\SweetIM =>PUP.SweetIM C:\Program Files (x86)\Windows iLivid Toolbar =>Adware.Bandoo C:\ProgramData\{B49A644A-1076-4A3D-B124-DAA7862F2318} =>Adware.Bandoo C:\ProgramData\SweetIM =>PUP.SweetIM C:\Users\Pilla\AppData\Local\AskToolbar =>Toolbar.AskTBar C:\Users\Pilla\AppData\LocalLow\AskToolbar =>Toolbar.AskTBar C:\Users\Pilla\AppData\LocalLow\searchquband =>Adware.Bandoo C:\Users\Pilla\AppData\LocalLow\searchqutoolbar =>Adware.Bandoo C:\Users\Pilla\AppData\LocalLow\SweetIM =>PUP.SweetIM C:\Users\Pilla\AppData\Local\Temp\AskSearch =>Toolbar.AskBarDis C:\Users\Pilla\AppData\Local\Temp\Shortcut_BundleSweetIMSetup.exe =>PUP.SweetIM C:\Users\Pilla\AppData\Local\Temp\SIMEEIInstaller.exe =>PUP.SweetIM C:\Users\Pilla\AppData\Local\Temp\YontooIEClient.dll =>Adware.Yontoo C:\Users\Pilla\AppData\Local\Temp\YontooLayers.crx =>Adware.Yontoo C:\Users\Pilla\AppData\Local\Temp\YontooLayers.pem =>Adware.Yontoo C:\Users\Pilla\AppData\Local\Temp\searchqu.ini =>Adware.Bandoo C:\Users\Pilla\AppData\Local\Temp\searchqutoolbar-manifest.xml =>Adware.Bandoo C:\Users\Pilla\AppData\Local\Temp\SetupDataMngr_Searchqu.exe =>Adware.Bandoo C:\Users\Pilla\AppData\Local\Temp\mgsqlite3.dll => PUP.SweetIM ~ Scan Additionnel in 00mn 35s ---\\ Product Upgrade Codes (O90) O90 - PUC: "0000009F810000000000709475387300" . (.ABBYY FineReader 9.0 Sprint.) -- C:\Windows\Installer\{F9000000-0018-0000-0000-074957833700}\ARPPRODUCTICON.exe O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- C:\Windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe O90 - PUC: "00004159070000000000000000F01FEC" . (.Microsoft Office 2010.) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe O90 - PUC: "057978BEDBCC3104FB5D20494DADB50D" . (.Apple Application Support.) -- C:\Windows\Installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}\WinInstall.ico O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "08C1B278CE8313A42AC5898002959300" . (.HP Power Manager.) -- C:\Windows\Installer\{872B1C80-38EC-4A31-A25C-980820593900}\_853F67D554F05449430E7E.exe O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "130FAC3B982381C541A93C050C4BD3D6" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{B3CAF031-3289-5C18-149A-C350C0B43D6D}\ARPPRODUCTICON.exe O90 - PUC: "15B6D9498E014DC48AE160E483424051" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{949D6B51-10E8-4CD4-A81E-064E38240415}\ARPPRODUCTICON.exe O90 - PUC: "1C3023F7DB52E23E4F0732231EDAE5FD" . (.Catalyst Control Center Profiles Mobile.) -- C:\Windows\Installer\{7F3203C1-25BD-E32E-F470-2332E1AD5EDF}\ARPPRODUCTICON.exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "20EA469772190C249A71C24EDCE4EFB3" . (.Nokia Suite.) -- C:\Windows\Installer\{7964AE02-9127-42C0-A917-2CE4CD4EFE3B}\ARPPRODUCTICON.exe O90 - PUC: "254796BF4AC84B64891B61C529A2E23F" . (.Update Manager for SweetPacks 1.0.) -- C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}\ARPPRODUCTICON.exe O90 - PUC: "25BD30E1BC5D83343A835E62DDD4D41B" . (.Bing Bar.) -- C:\Windows\Installer\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}\icon_installer_ico O90 - PUC: "270B11A97EC99BBAF256CE79A1B738D9" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{9A11B072-9CE7-ABB9-2F65-EC971A7B839D}\ARPPRODUCTICON.exe O90 - PUC: "2C1A65825C073CE4FA7F5E5BE155032A" . (.HP Client Services.) -- C:\Windows\Installer\{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}\ARPPRODUCTICON.exe O90 - PUC: "419C4836CB4A6B04089592DAE4564F6B" . (.HP Software Framework.) -- C:\Windows\Installer\{6384C914-A4BC-40B6-8059-29AD4E65F4B6}\app_1.exe O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico O90 - PUC: "46E5DCBD973784644944A85685CD6B41" . (.Recovery Manager.) -- C:\Windows\Installer\{DBCD5E64-7379-4648-9444-8A6558DCB614}\_6FEFF9B68218417F98F549.exe O90 - PUC: "4EE8B9B9BDE22C14FAE2367ED573DCFD" . (.HP On Screen Display.) -- C:\Windows\Installer\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}\_853F67D554F05449430E7E.exe O90 - PUC: "68AB67CA7DA7FFFFB744AA0000000010" . (.Adobe Reader X (10.1.4) MUI.) -- C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\SC_Reader.ico O90 - PUC: "6B573A382CF6A8F449E85E60BDD9DC0F" . (.HP Documentation.) -- C:\Windows\Installer\{83A375B6-6FC2-4F8A-948E-E506DB9DCDF0}\NotebookDocs.exe O90 - PUC: "710D45C7BB12EA347964337EA84F4A52" . (.Validity WBF DDK.) -- C:\Windows\Installer\{7C54D017-21BB-43AE-9746-33E78AF4A425}\ValidityLogo.ico O90 - PUC: "758F5690DAAD39F40845E0E23C8C5C0B" . (.SweetIM for Messenger 3.6.) -- C:\Windows\Installer\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}\ARPPRODUCTICON.exe O90 - PUC: "7B65D4CC81F6B0747843BADC57CB4F1F" . (.HP Auto.) -- C:\Windows\Installer\{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}\ARPPRODUCTICON.exe O90 - PUC: "883658EADAFA357418FD9DB6910D1AC7" . (.HP Setup Manager.) -- C:\Windows\Installer\{AE856388-AFAD-4753-81DF-D96B19D0A17C}\ARPPRODUCTICON.exe O90 - PUC: "890B46E081086524AB323C614AA39D0B" . (.QuickTime.) -- C:\Windows\Installer\{0E64B098-8018-4256-BA23-C316A43AD9B0}\Installer.ico O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe O90 - PUC: "8BAD244577171E94B822900A94AE9569" . (.Renesas Electronics USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{5442DAB8-7177-49E1-8B22-09A049EA5996}\ARPPRODUCTICON.exe O90 - PUC: "97B0E634BFC2F5E439081EC7B1520D5C" . (.Broadcom 2070 Bluetooth 3.0.) -- C:\Windows\Installer\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}\ARPPRODUCTICON.exe O90 - PUC: "9C43A1DB467497F4EAF111F2C8983D4D" . (.Energy Star Digital Logo.) -- C:\Windows\Installer\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}\_6FEFF9B68218417F98F549.exe O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Avira SearchFree Toolbar plus Web Protection.) -- c:\program files (x86)\ask.com\cb_cf03.ico O90 - PUC: "AF12BD544F3B9D022AC1C5ED2B3351CA" . (.ccc-utility64.) -- C:\Windows\Installer\{45DB21FA-B3F4-20D9-A21C-5CDEB23315AC}\ARPPRODUCTICON.exe O90 - PUC: "B8713814E4D47A84297554B49AA067E0" . (.SweetPacks Toolbar for Internet Explorer 4.6.) -- C:\Windows\Installer\{4183178B-4D4E-48A7-9257-454BA90A760E}\ARPPRODUCTICON.exe O90 - PUC: "C0403E1900063D11C8EF10054038389C" . (.Microsoft Office Professional Edition 2003.) -- C:\Windows\Installer\{91E3040C-6000-11D3-8CFE-0150048383C9}\misc.exe,6 O90 - PUC: "C08485BE1270C3843B45D9531A7499F9" . (.HP Quick Launch.) -- C:\Windows\Installer\{EB58480C-0721-483C-B354-9D35A147999F}\_853F67D554F05449430E7E.exe O90 - PUC: "C1E6E3A7A5FC9EC48B6D2A9F7BAB81CF" . (.BlackBerry Desktop Software 7.1.) -- C:\Windows\Installer\{7A3E6E1C-CF5A-4CE9-B8D6-A2F9B7BA18FC}\ARPPRODUCTICON.exe O90 - PUC: "C953167FDEC9EA54A915D96650DC554C" . (.Evernote v. 4.2.2.) -- C:\Windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico O90 - PUC: "CC52075AE2F510D43B7860BD0105D034" . (.Nokia Connectivity Cable Driver.) -- C:\Windows\Installer\{A57025CC-5F2E-4D01-B387-06DB10500D43}\ARPPRODUCTICON.exe O90 - PUC: "CDB2B5AD456F88A46A96D443CB87641A" . (.PC Connectivity Solution.) -- C:\Windows\Installer\{DA5B2BDC-F654-4A88-A669-4D34BC7846A1}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "D73AAFCBBD6AFB343A15341F385ED270" . (.HP SimplePass 2011.) -- C:\Windows\Installer\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}\ARPPRODUCTICON.exe O90 - PUC: "E035518E8D41733ED312A6A15B9FDD9D" . (.Catalyst Control Center.) -- C:\Windows\Installer\{E815530E-14D8-E337-3D21-6A1AB5F9DDD9}\ARPPRODUCTICON.exe O90 - PUC: "E4ED4F0F6CE936E43A68933E24D1D338" . (.HP 3D DriveGuard.) -- C:\Windows\Installer\{F0F4DE4E-9EC6-4E63-A386-39E3421D3D83}\controlPanelIcon.exe O90 - PUC: "E692F811CA811CAA879F0BFF28970D90" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{118F296E-18AC-AAC1-78F9-B0FF8279D009}\ARPPRODUCTICON.exe O90 - PUC: "E7F34DE86F8A8984FA116B51F8E2FD49" . (.Epson Event Manager.) -- C:\Windows\Installer\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}\icon.exe O90 - PUC: "F20FE4508D594F84E9BEF2C93E70E28D" . (.AuthenTec TrueAPI.) -- C:\Windows\Installer\{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}\ARPPRODUCTICON.exe O90 - PUC: "FBA4A157CB3A07AA23252C581FA062B5" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{751A4ABF-A3BC-AA70-3252-C285F10A265B}\ARPPRODUCTICON.exe O90 - PUC: "FBDAA5972C850D247B977E0307A242E7" . (.HP Connection Manager.) -- C:\Windows\Installer\{795AADBF-58C2-42D0-B779-E730702A247E}\ARPPRODUCTICON.exe O90 - PUC: "FE521925CA3E47B4796E6F887A0C1F0C" . (.Paint.NET v3.5.10.) -- C:\Windows\Installer\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}\_853F67D554F05449430E7E.exe ~ Scan Files in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/05/2009 759048 | (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe SR - | Auto 27/07/2012 63960 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 03/03/2009 89600 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AESTSr64.exe SR - | Auto 07/05/2011 203776 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 14/02/2013 86752 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 14/02/2013 110816 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 14/02/2013 565472 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe SS - | Demand 01/03/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe SR - | Auto 29/07/2010 951584 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe SR - | Auto 07/01/2012 168448 | (EPSON_EB_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.exe SR - | Auto 07/01/2012 131072 | (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe SR - | Auto 30/12/1899 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe SR - | Auto 17/02/2011 265544 | (FPLService) . (.HP.) - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 29/08/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 29/08/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 31/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 11/10/2010 346168 | (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe SR - | Demand 15/02/2011 1071160 | (hpCMSrv) . (.Hewlett-Packard Development Company L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe SR - | Demand 28/02/2011 799800 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SR - | Auto 13/05/2011 30520 | (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe SR - | Auto 09/11/2010 26680 | (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe SR - | Auto 13/01/2011 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Auto 22/12/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 25/02/2011 249648 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe SR - | Demand 22/04/2012 720936 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe SR - | Auto 11/03/2011 297984 | (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe SR - | Auto 22/12/2010 2656280 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 02s End of the scan (2114 lines in 02mn 40s)(0)