cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.5.84 Par Nicolas Coolman (2015\07\05)
~ Démarré par flo et flo (Administrator) (2015/07/05 18:36:44)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\flo et flo\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\flo et flo\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 7, 32-bit Service Pack 1 (Build 7601)

---\\ Informations sur les produits Windows (3) - 75s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Activation Technologies : OK

---\\ Logiciels de protection (1) - 7s
Panda Antivirus Pro 2012 v11.00.00

---\\ Surveillance de Logiciels (2) - 9s
Adobe Flash Player 16 NPAPI
Adobe Reader X

---\\ Informations sur le système (6) - 1s
~ Operating System: x86 Family 20 Model 2 Stepping 0, AuthenticAMD
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 3664796
~ System Restore: Activé (Enable)
~ System drive C: has 222 GB free of 464 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: FLOETFLO-VAIO
~ User Name: flo et flo
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 222 GB free of 464 GB (System)

---\\ Recherche particulière de fichiers génériques (23) - 15s
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2616320]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96256]
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1888256]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [245632]

---\\ Processus lancés (34) - 46s
[MD5.341457B79B3FC31A80C346C767045879] - (.Panda Security, S.L. - Anti-malware protection support executable.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\psksvc.exe [28992] [PID.876]
[MD5.F7F79FCB3331BC2DB57572E33A5A969D] - (.Panda Security, S.L. - TPSrv Application.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe [156960] [PID.960]
[MD5.10093078F831C6A14F98B59A06FF4796] - (.Panda Security, S.L. - Internet resident proxy.) -- C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe [107776] [PID.1016]
[MD5.B0E268479C1A1F33BE702848B097466E] - (.Advanced Micro Devices, Inc. - Service Fusion Utility.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400] [PID.776]
[MD5.110496CF8143FEA63B7A31DAD175829B] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [656672] [PID.1284]
[MD5.78B7642B0C51F24F0835C0226540D58B] - (.Panda Security, S.L. - Panda Software Controler.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrlS.exe [173312] [PID.1092]
[MD5.3BB71BD8B4873C5FECA890EFC6BF9257] - (.Panda Security, S.L. - Panda Function Service.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe [202016] [PID.1884]
[MD5.2AE3F6B23448443BBEF5DE207159213B] - (.Panda Security, S.L. - Panda Process Protection Service.) -- C:\Program Files\Common Files\Panda Security\PavShld\PavPrSrv.exe [62768] [PID.1728]
[MD5.97005413310966001FB6F4A5C503149C] - (.Panda Security, S.L. - Enhanced On-Access Anti-Malware Service.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe [314176] [PID.2180]
[MD5.63694C307273062A2167AE4CE80730EF] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe [398176] [PID.2624]
[MD5.7E205B446FE9FB5AD6F919074FA8E1A6] - (.Panda Security, S.L. - Enhanced On-Access Anti-Malware Protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\AVENGINE.EXE [225600] [PID.2680]
[MD5.4E0DCC29F15990307DC5023A56228BEF] - (.Sony Corporation - VAIO Gate.) -- C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [1473888] [PID.3788]
[MD5.196C450F2779D0B462C444DA4906EA7F] - (.Panda Security S.L. - Panda Interface Manager Service.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe [108288] [PID.2428]
[MD5.DCB1F83AD167D16D263CE57C94E9EEDF] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [64704] [PID.2084]
[MD5.E91A96AE3959A494C777D2C3D5C1B29A] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1873192] [PID.3200]
[MD5.440699F90786EF6A7722B4417BB0F5C7] - (.Sony Corporation - .) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2757312] [PID.3940]
[MD5.48B9248CED8A5DE4EB0917CB676CB8D5] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe [648032] [PID.2400]
[MD5.A07F57F179D23787BA2B1194B845E416] - (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\ApVxdWin.exe [1000768] [PID.2424]
[MD5.3A8BEB885C3AC9E96BE055FA00DFBC73] - (.Sony Corporation - VAIO Event Service (Service Sub Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe [180928] [PID.2972]
[MD5.3A8BEB885C3AC9E96BE055FA00DFBC73] - (.Sony Corporation - VAIO Event Service (Service Sub Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe [180928] [PID.3484]
[MD5.C861851A0BBD9903E324487011AA3705] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.2568]
[MD5.9165C53D497582353D452E66799D5DB8] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [836896] [PID.3916]
[MD5.9068764C2EB601FF3725BE1616EE9AFA] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe [2839840] [PID.4284]
[MD5.D28C5A1411BB0B47E05E0D6AAF896690] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.4108]
[MD5.F0472B4CCAD7B429C7B3FFD1285C7EE1] - (.Sony Corporation - VAIO Smart Network Service.) -- C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [866952] [PID.6104]
[MD5.001433A00C21E1BDBA381C4C80D38022] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.5396]
[MD5.F651AB3BB03A257DD602E7371DC121BA] - (.Sony Corporation - VAIO Smart Network.) -- C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe [3454904] [PID.4528]
[MD5.0FFE4C9475C1FBC4D59527620130237F] - (.Sony Corporation - VAIO Update.) -- C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [1028144] [PID.4924]
[MD5.F568DCCCB1DD1255F7C409DD2375D0E7] - (.Sony Corporation - VUAgent.) -- C:\Program Files\Sony\VAIO Update\VUAgent.exe [1228336] [PID.1168]
[MD5.1FE69F3C1CA1CF4B7EC7E2E9090FFFDC] - (.ArcSoft, Inc. - MgiSvr.) -- C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024] [PID.4872]
[MD5.AC452294A31DA9B8B4001B3F66097D08] - (.Sony Corporation - VCSystemTray.) -- C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [792176] [PID.4856]
[MD5.9AD6D303981B2296A2647D3848D40346] - (.Sony Corporation - VAIOCare.) -- C:\Program Files\Sony\VAIO Care\VCService.exe [61552] [PID.2104]
[MD5.7342F5B2FE3CD9FCF8C2D50D8445C259] - (.Sony Corporation - VCAgent.) -- C:\Program Files\Sony\VAIO Care\VCAgent.exe [33392] [PID.2296]
[MD5.19BECD908ED58DE837426964C26DC5FC] - (.Sony Corporation - CheckRecoveryPartition.) -- C:\Program Files\Sony\VAIO Care Recovery\CheckRecoveryPartition.exe [16472] [PID.2416]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (3) - 7s
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_16_0_0_305.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@mcafee.com/McAfeeMssPlugin] - (.McAfee.) -- C:\Program Files\Sony\MSS\3.8.130\npMcAfeeMss.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (15) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://sony.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (R5) (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 1s
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 1s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (3) - 9s
O2 - BHO: RichMediaViewV1release1107 - {188f01ee-ed73-44cf-a6d5-e3ec645d5e13} . (...) -- C:\Program Files\RichMediaViewV1\RichMediaViewV1release1107\ie\RichMediaViewV1release1107.dll (.not file.) =>PUP.MediaViewer
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} . (...) -- c:\progra~1\mcafee\msk\mskapbho.dll (.not file.)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du sytème (O4) (16) - 7s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ISBMgr.exe] . (.Sony Corporation - .) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [APVXDWIN] . (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\ApVxdWin.exe
O4 - HKLM\..\Run: [SCANINICIO] . (.Panda Security, S.L. - Inicio Programado.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKCU\..\Run: [Qiyfyqr] C:\Users\flo et flo\AppData\Roaming\Xyiw\qoezu.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-1022121045-1528365417-4194274729-1001\..\Run: [Qiyfyqr] C:\Users\flo et flo\AppData\Roaming\Xyiw\qoezu.exe (.not file.)
O4 - HKUS\S-1-5-21-1022121045-1528365417-4194274729-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

---\\ Modification Domaine/Adresses DNS (O17) (9) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpDomain = lan

---\\ Protocole additionnel (O18) (2) - 21s
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll (.not file.)
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll (.not file.)

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) (1) - 1s
O20 - AppInit_DLLs: . (.Auteurs - .) - C:\Windows\System32\

---\\ Liste des services NT non Microsoft et non désactivés (O23) (16) - 6s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc. - Service Fusion Utility.) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Panda Software Controller (Panda Software Controller) . (.Panda Security, S.L. - Panda Software Controler.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrlS.exe
O23 - Service: Panda Function Service (PAVFNSVR) . (.Panda Security, S.L. - Panda Function Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) . (.Panda Security, S.L. - Panda Process Protection Service.) - C:\Program Files\Common Files\Panda Security\PavShld\PavPrSrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) . (.Panda Security, S.L. - Enhanced On-Access Anti-Malware Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
O23 - Service: PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation - Device Information Provider.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: Panda IManager Service (PSIMSVC) . (.Panda Security S.L. - Panda Interface Manager Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) . (.Panda Security, S.L. - Anti-malware protection support executable.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\psksvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Panda TPSrv (TPSrv) . (.Panda Security, S.L. - TPSrv Application.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
O23 - Service: CamMonitor (uCamMonitor) . (.ArcSoft, Inc. - MgiSvr.) - C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: VAIO Event Service (VAIO Event Service) . (.Sony Corporation - VAIO Event Service (Service Module).) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VSNService (VSNService) . (.Sony Corporation - VAIO Smart Network Service.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

---\\ Tâches planifiées en automatique (O39) (12) - 20s
[MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.4E0DCC29F15990307DC5023A56228BEF] [APT] [SONY\VAIO Gate\VAIO Gate] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [1473888]
[MD5.D0DECA5338E515F8BE60A9BD57C356AA] [APT] [Sony Corporation\VAIO Improvement\VAIOImprovementUploader] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2027752]
[MD5.65C23DFD51D64A5A768536047DCEDB3E] [APT] [Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [208224]
[MD5.00000000000000000000000000000000] [APT] [Sony Corporation\VAIO Smart Network\VSN Logon Start] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Smart Network\VSNClient /Start (.not file.) [0]
[MD5.0FFE4C9475C1FBC4D59527620130237F] [APT] [Sony Corporation\VAIO Update\VAIO Update] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [1028144]
[MD5.360B29B2EEC725B20F529FE0885A975D] [APT] [Sony Corporation\VAIO Update\VAIO Update Self Repair] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Update\VUSR.exe [2145328]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3556]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3802]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\USER_ESRV_SVC [3150]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{91ECF322-F518-4A55-B8DF-C2B228ED1C9E} [3176]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{D75DB892-5E2E-423C-944F-1EBE1585A44E} [3184]

---\\ Logiciels installés (O42) (73) - 39s
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe Flash Player 16 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: VAIO - PMB VAIO Edition Plug-in - (.Sony Corporation.) [HKLM] -- InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}
O42 - Logiciel: VAIO - PMB VAIO Edition Guide - (.Sony Corporation.) [HKLM] -- InstallShield_{66081CDD-C1FE-415F-BB3A-F2622BA27461}
O42 - Logiciel: VAIO Easy Connect - (.Sony Corporation.) [HKLM] -- InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}
O42 - Logiciel: monAlbumPhoto - (.monAlbumPhoto.) [HKLM] -- monAlbumPhoto_is1
O42 - Logiciel: Stellar Phoenix Windows Data Recovery - Home - (.Stellar Information Systems Ltd.) [HKLM] -- Stellar Phoenix Windows Data Recovery - Home_is1
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: VAIO Hero Screensaver - Summer 2011 Screensaver - (...) [HKLM] -- VAIO Hero Screensaver - Summer 2011 Screensaver
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01}
O42 - Logiciel: VAIO - Lecture à distance avec PlayStation®3 - (.Sony Corporation.) [HKLM] -- {07441A52-E208-478A-92B7-5C337CA8C131}
O42 - Logiciel: VAIO Smart Network - (.Sony Corporation.) [HKLM] -- {0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}
O42 - Logiciel: VAIO Improvement Validation - (.Sony Corporation.) [HKLM] -- {17E76DF8-5D02-4C73-B03D-156AD18D3295}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Skype™ 6.22 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java(TM) 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}
O42 - Logiciel: PMB VAIO Edition Plug-in - (.Sony Corporation.) [HKLM] -- {270380EB-8812-42E1-8289-53700DB840D2}
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {2C303EE0-A595-3543-A71A-931C7AC40EDE}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: VAIO Improvement - (.Sony Corporation.) [HKLM] -- {3A26D9BD-0F73-432D-B522-2BA18138F7EF}
O42 - Logiciel: VESx86 - (.Sony Corporation.) [HKLM] -- {3A94F54D-A8A4-4B82-B346-92B4D56A2708}
O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: VAIO Care - (.Sony Corporation.) [HKLM] -- {4F8C2D44-78FE-4601-A639-69711DBB50CD}
O42 - Logiciel: VAIO Sample Contents - (.Sony Corporation.) [HKLM] -- {547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}
O42 - Logiciel: AMD Media Foundation Decoders - (.ATI Technologies Inc..) [HKLM] -- {578401DB-5B21-FD5D-67EA-F1E271A10527}
O42 - Logiciel: Outil de restauration de données VAIO - (.Sony Corporation.) [HKLM] -- {57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}
O42 - Logiciel: Prise en charge du transfert VAIO - (.Sony Corporation.) [HKLM] -- {5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}
O42 - Logiciel: ArcSoft Magic-i Visual Effects 2 - (.ArcSoft.) [HKLM] -- {61438020-DDD4-42FA-99A2-50225441980A}
O42 - Logiciel: SSLx86 - (.Sony Corporation .) [HKLM] -- {63C43435-F428-42BA-8E7B-5848749D9262}
O42 - Logiciel: PMB VAIO Edition Guide - (.Sony Corporation.) [HKLM] -- {66081CDD-C1FE-415F-BB3A-F2622BA27461}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Media Gallery - (.Sony Corporation.) [HKLM] -- {6F663FE6-3ED0-4ABF-816C-44744F7ACABA}
O42 - Logiciel: VAIO Control Center - (.Sony Corporation.) [HKLM] -- {72042FA6-5609-489F-A8EA-3C2DD650F667}
O42 - Logiciel: VAIO - Clavier à distance - (.Sony Corporation.) [HKLM] -- {7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}
O42 - Logiciel: VAIO Event Service - (.Sony Corporation.) [HKLM] -- {73D8886A-D416-4687-B609-0D3836BA410C}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: PMB VAIO Edition Plug-in - (.Sony Corporation.) [HKLM] -- {79ACFD18-AD87-480B-88E0-CF74DD9BBA63}
O42 - Logiciel: VAIO Easy Connect - (.Sony Corporation.) [HKLM] -- {7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}
O42 - Logiciel: PMB VAIO Edition Plug-in - (.Sony Corporation.) [HKLM] -- {8356CB97-A48F-44CB-837A-A12838DC4669}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: VCCx86 - (.Sony Corporation.) [HKLM] -- {9B088046-8A01-4355-99DD-8530C022F682}
O42 - Logiciel: VU5x86 - (.Sony Corporation .) [HKLM] -- {9D12A8B5-9D41-4465-BF11-70719EB0CD02}
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM] -- {9F8E6025-423A-2A9F-3951-71E9BE2A85E7}
O42 - Logiciel: VAIO Update - (.Sony Corporation.) [HKLM] -- {9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408}
O42 - Logiciel: VSNx86 - (.Sony Corporation.) [HKLM] -- {A49A517F-5332-4665-922C-6D9AD31ADD4F}
O42 - Logiciel: VAIO Gate - (.Sony Corporation.) [HKLM] -- {A7C30414-2382-4086-B0D6-01A88ABA21C3}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Reader X (10.1.10) MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-AA0000000001}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {B0F02BA9-4ED6-4818-B213-4CFDC1844E61}
O42 - Logiciel: Panda Secure Vault 5 - (.AceBIT GmbH.) [HKLM] -- {B1D3568D-BC21-4C50-92A5-2396570DF1DE}_is1
O42 - Logiciel: PMB - (.Sony Corporation.) [HKLM] -- {B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}
O42 - Logiciel: VAIO Gate Default - (.Sony Corporation.) [HKLM] -- {B7546697-2A80-4256-A24B-1C33163F535B}
O42 - Logiciel: VWSTx86 - (.Sony Corporation.) [HKLM] -- {B8991D99-88FD-41F2-8C32-DB70278D5C30}
O42 - Logiciel: Manuel VAIO - (.Sony Corporation.) [HKLM] -- {C6E893E7-E5EA-4CD5-917C-5443E753FCBD}
O42 - Logiciel: ArcSoft WebCam Companion 4 - (.ArcSoft.) [HKLM] -- {C793AD32-2BB8-4CC4-ABD3-A1469C21593C}
O42 - Logiciel: VIx86 - (.Sony Corporation.) [HKLM] -- {D17C2A58-E0EA-4DD7-A2D6-C448FD25B6F6}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: VAIO Care Recovery - (.Sony Corporation.) [HKLM] -- {E232C355-EE55-44A6-8AE5-24815A3C4F8B}
O42 - Logiciel: Panda Antivirus Pro 2012 - (.Panda Security.) [HKLM] -- {E55FB276-73C9-4776-AB53-BC028C0509ED}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: VAIO - Media Gallery - (.Sony Corporation.) [HKLM] -- {FA870BF1-44A1-4B7D-93E1-C101369AF0C1}
O42 - Logiciel: DMUninstaller - (...) [HKLM] -- DMUninstaller

---\\ HKCU & HKLM Software Keys (98) - 39s
HKLM\SOFTWARE\AceBIT
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\ArcSoft
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\Avid
HKLM\SOFTWARE\Broadcom
HKLM\SOFTWARE\BrowserChoice
HKLM\SOFTWARE\CBSTEST
HKLM\SOFTWARE\Client
HKLM\SOFTWARE\DTS
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\MAP-DN
HKLM\SOFTWARE\mcafeeupdater
HKLM\SOFTWARE\MediaPlayerV1
HKLM\SOFTWARE\MediaPlayerV1alpha5365
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Panda Security
HKLM\SOFTWARE\Panda Software
HKLM\SOFTWARE\Pinnacle Systems
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Reg
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RichMediaViewV1
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SonicFocus
HKLM\SOFTWARE\Sony
HKLM\SOFTWARE\Sony Corporation
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Stellar information Systems ltd.
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\Widcomm
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ArcSoft
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Avid
HKCU\SOFTWARE\CanonBJ
HKCU\SOFTWARE\Convar
HKCU\SOFTWARE\eMule 0.50a
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MAP-DN
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\monAlbumPhoto
HKCU\SOFTWARE\mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OfferBLVD
HKCU\SOFTWARE\Panda Software
HKCU\SOFTWARE\Philips Songbird
HKCU\SOFTWARE\Pinnacle Systems
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Reg
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Smartbar =>Hijacker.SmartBar
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Sony Corporation
HKCU\SOFTWARE\Stellar information Systems ltd.
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\VOB
HKCU\SOFTWARE\Widcomm
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (604) - 99s
O43 - CFD: 2014/10/08 14:17:42 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2011/10/11 05:17:34 - [] D -- C:\Program Files\AMD APP
O43 - CFD: 2013/08/15 14:20:28 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2011/10/11 06:03:49 - [] D -- C:\Program Files\ArcSoft
O43 - CFD: 2011/10/11 05:10:07 - [] D -- C:\Program Files\ATI
O43 - CFD: 2011/10/11 05:17:18 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 2012/01/26 22:53:16 - [] D -- C:\Program Files\AVAST Software
O43 - CFD: 2014/12/07 10:56:15 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2014/02/22 13:29:16 - [] D -- C:\Program Files\Convar
O43 - CFD: 2011/10/11 14:52:55 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 2012/01/18 14:55:04 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2015/07/05 18:24:28 - [] D -- C:\Program Files\Google
O43 - CFD: 2013/07/24 14:33:26 - [0] D -- C:\Program Files\GUM3C06.tmp
O43 - CFD: 2014/10/08 15:53:58 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/02/06 19:09:51 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2011/10/11 05:24:04 - [] D -- C:\Program Files\Java
O43 - CFD: 2012/02/04 13:44:32 - [] D -- C:\Program Files\McAfee
O43 - CFD: 2015/07/05 18:28:07 - [0] D -- C:\Program Files\Microsoft
O43 - CFD: 2011/05/28 01:27:12 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2012/06/14 21:31:19 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2014/07/24 09:54:56 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2011/10/11 05:49:05 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2012/01/22 19:01:52 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2012/02/13 23:14:30 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 2012/01/22 19:01:07 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2014/09/19 11:42:03 - [] D -- C:\Program Files\monAlbumPhoto
O43 - CFD: 2013/05/16 18:09:40 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2012/06/14 21:30:43 - [] D -- C:\Program Files\MSECache
O43 - CFD: 2011/10/11 06:15:00 - [] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 2011/10/11 06:26:37 - [] D -- C:\Program Files\Nascom
O43 - CFD: 2012/02/04 13:29:54 - [] D -- C:\Program Files\Panda Security
O43 - CFD: 2013/05/10 21:50:17 - [0] D -- C:\Program Files\Philips
O43 - CFD: 2014/09/07 22:07:09 - [] D -- C:\Program Files\Pinnacle
O43 - CFD: 2011/10/11 05:17:49 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2014/12/07 10:56:16 - [] RD -- C:\Program Files\Skype
O43 - CFD: 2014/01/16 18:44:04 - [] D -- C:\Program Files\Software
O43 - CFD: 2015/02/04 16:23:14 - [] D -- C:\Program Files\Sony
O43 - CFD: 2014/02/22 12:05:03 - [] D -- C:\Program Files\Stellar Phoenix Windows Data Recovery
O43 - CFD: 2011/10/11 05:18:17 - [] D -- C:\Program Files\Synaptics
O43 - CFD: 2011/10/11 05:14:15 - [0] HD -- C:\Program Files\Temp
O43 - CFD: 2009/07/14 06:53:23 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2011/10/11 05:19:01 - [] D -- C:\Program Files\WIDCOMM
O43 - CFD: 2013/07/24 23:33:22 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2014/07/10 10:51:17 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2014/05/28 14:54:11 - [] D -- C:\Program Files\Windows Live
O43 - CFD: 2011/10/11 14:52:55 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2013/12/13 18:41:01 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2012/01/18 14:55:04 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2011/10/11 14:52:55 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2010/11/20 23:33:48 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2011/10/11 14:52:55 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/07/05 18:34:05 - [] D -- C:\Program Files\ZHPFix
O43 - CFD: 2014/06/17 16:28:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:46:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2011/10/11 05:17:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
O43 - CFD: 2011/10/11 06:03:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Webcam Suite
O43 - CFD: 2011/10/11 05:01:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2009/07/14 06:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/02/15 19:30:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2014/07/23 22:05:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2014/09/19 11:42:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\monAlbumPhoto
O43 - CFD: 2012/02/04 13:29:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Antivirus Pro 2012
O43 - CFD: 2011/10/11 06:24:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayStation Outils
O43 - CFD: 2011/10/11 06:14:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB
O43 - CFD: 2014/12/07 10:56:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2011/10/11 06:35:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
O43 - CFD: 2015/02/04 16:23:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2014/02/22 12:04:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Windows Data Recovery - Home
O43 - CFD: 2011/05/28 01:27:11 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/02/04 16:23:10 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
O43 - CFD: 2012/06/28 18:51:35 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2015/07/05 17:52:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2015/07/05 18:37:27 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2014/10/08 13:16:46 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2015/02/04 16:45:55 - [] D -- C:\ProgramData\albumphoto
O43 - CFD: 2011/10/11 05:16:35 - [] D -- C:\ProgramData\AMD
O43 - CFD: 2013/08/15 14:20:19 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2013/08/15 14:56:55 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2012/02/02 13:42:24 - [] D -- C:\ProgramData\ArcSoft
O43 - CFD: 2011/10/11 06:40:44 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2012/02/04 13:42:57 - [0] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2012/01/18 14:55:04 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2012/01/22 19:52:07 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2012/01/18 14:55:04 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2014/12/05 18:02:41 - [] D -- C:\ProgramData\iolo
O43 - CFD: 2012/02/13 22:07:29 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2012/01/18 14:55:04 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/07/05 18:28:07 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2012/01/18 14:55:04 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2014/10/08 12:54:47 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2012/10/18 14:13:16 - [] D -- C:\ProgramData\Panda Security
O43 - CFD: 2012/05/06 02:38:40 - [] D -- C:\ProgramData\Panda Software
O43 - CFD: 2014/09/07 21:29:21 - [] D -- C:\ProgramData\Pinnacle
O43 - CFD: 2014/12/07 10:56:44 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2015/02/06 19:09:17 - [] D -- C:\ProgramData\Sony Corporation
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2011/10/11 05:24:39 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2013/11/22 18:43:11 - [0] D -- C:\ProgramData\TEMP
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2013/03/06 23:52:52 - [] D -- C:\ProgramData\{F0489EF2-D393-4114-85BA-A94D71D89543}
O43 - CFD: 2014/10/08 14:18:06 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2011/10/11 06:00:23 - [] D -- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 2015/07/05 18:37:26 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 2011/10/11 06:02:54 - [] D -- C:\Program Files\Common Files\ArcSoft
O43 - CFD: 2011/10/11 05:17:31 - [] D -- C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 2015/07/05 16:35:30 - [] D -- C:\Program Files\Common Files\Config
O43 - CFD: 2012/01/22 19:02:39 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2011/10/11 06:02:52 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2011/10/11 05:24:39 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2013/06/27 20:30:49 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2012/02/04 13:04:06 - [] D -- C:\Program Files\Common Files\Panda Security
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2014/12/07 10:56:15 - [] D -- C:\Program Files\Common Files\Skype
O43 - CFD: 2011/10/11 06:05:32 - [] D -- C:\Program Files\Common Files\Sony Shared
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2012/01/22 19:01:23 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2011/10/11 05:33:43 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 2013/05/25 22:03:57 - [0] D -- C:\Users\flo et flo\AppData\Roaming\.minecraft
O43 - CFD: 2014/10/08 14:17:36 - [] D -- C:\Users\flo et flo\AppData\Roaming\Adobe
O43 - CFD: 2013/05/21 22:07:05 - [] D -- C:\Users\flo et flo\AppData\Roaming\Aluli
O43 - CFD: 2013/08/15 15:40:37 - [] D -- C:\Users\flo et flo\AppData\Roaming\Apple Computer
O43 - CFD: 2013/06/27 20:30:36 - [] D -- C:\Users\flo et flo\AppData\Roaming\ArcSoft
O43 - CFD: 2012/01/18 14:58:57 - [] D -- C:\Users\flo et flo\AppData\Roaming\ATI
O43 - CFD: 2014/11/27 19:42:56 - [0] D -- C:\Users\flo et flo\AppData\Roaming\EncryptStick
O43 - CFD: 2012/10/31 21:36:22 - [] D -- C:\Users\flo et flo\AppData\Roaming\Google
O43 - CFD: 2012/01/18 14:57:46 - [] D -- C:\Users\flo et flo\AppData\Roaming\Identities
O43 - CFD: 2014/10/08 16:29:58 - [0] D -- C:\Users\flo et flo\AppData\Roaming\iolo
O43 - CFD: 2013/05/21 22:07:55 - [] D -- C:\Users\flo et flo\AppData\Roaming\Macromedia
O43 - CFD: 2011/05/28 01:27:11 - [0] D -- C:\Users\flo et flo\AppData\Roaming\Media Center Programs
O43 - CFD: 2014/12/19 20:14:49 - [] SD -- C:\Users\flo et flo\AppData\Roaming\Microsoft
O43 - CFD: 2012/01/26 23:17:49 - [] D -- C:\Users\flo et flo\AppData\Roaming\Mozilla
O43 - CFD: 2012/02/04 13:28:50 - [] D -- C:\Users\flo et flo\AppData\Roaming\Panda Security
O43 - CFD: 2013/06/27 20:30:34 - [] D -- C:\Users\flo et flo\AppData\Roaming\Philips
O43 - CFD: 2013/06/27 20:30:34 - [] D -- C:\Users\flo et flo\AppData\Roaming\Philips-Songbird
O43 - CFD: 2015/02/08 12:14:28 - [] D -- C:\Users\flo et flo\AppData\Roaming\Skype
O43 - CFD: 2013/06/27 20:30:34 - [] D -- C:\Users\flo et flo\AppData\Roaming\Sony Corporation
O43 - CFD: 2013/05/23 12:40:59 - [] D -- C:\Users\flo et flo\AppData\Roaming\Ussyi
O43 - CFD: 2013/11/22 18:30:30 - [] D -- C:\Users\flo et flo\AppData\Roaming\vlc
O43 - CFD: 2013/07/18 11:36:19 - [0] D -- C:\Users\flo et flo\AppData\Roaming\Windows Live Writer
O43 - CFD: 2013/05/23 12:12:34 - [0] D -- C:\Users\flo et flo\AppData\Roaming\Xyiw
O43 - CFD: 2015/07/05 18:39:19 - [] D -- C:\Users\flo et flo\AppData\Roaming\ZHP
O43 - CFD: 2014/09/25 16:41:23 - [] D -- C:\Users\flo et flo\AppData\Local\21231
O43 - CFD: 2014/10/08 14:18:17 - [] D -- C:\Users\flo et flo\AppData\Local\Adobe
O43 - CFD: 2012/01/18 14:59:14 - [] D -- C:\Users\flo et flo\AppData\Local\AMD
O43 - CFD: 2013/08/15 14:20:31 - [] D -- C:\Users\flo et flo\AppData\Local\Apple
O43 - CFD: 2013/08/15 14:59:43 - [] D -- C:\Users\flo et flo\AppData\Local\Apple Computer
O43 - CFD: 2012/01/18 14:55:13 - [0] SHD -- C:\Users\flo et flo\AppData\Local\Application Data
O43 - CFD: 2014/09/09 21:01:55 - [] D -- C:\Users\flo et flo\AppData\Local\Apps
O43 - CFD: 2012/02/02 13:42:18 - [] D -- C:\Users\flo et flo\AppData\Local\ArcSoft
O43 - CFD: 2012/01/18 14:58:57 - [] D -- C:\Users\flo et flo\AppData\Local\ATI
O43 - CFD: 2013/10/08 18:13:51 - [] D -- C:\Users\flo et flo\AppData\Local\avgchrome
O43 - CFD: 2012/01/18 14:59:02 - [] D -- C:\Users\flo et flo\AppData\Local\Broadcom
O43 - CFD: 2014/01/16 19:09:17 - [] D -- C:\Users\flo et flo\AppData\Local\cache
O43 - CFD: 2014/09/09 21:02:31 - [0] D -- C:\Users\flo et flo\AppData\Local\Deployment
O43 - CFD: 2014/07/27 18:43:03 - [0] D -- C:\Users\flo et flo\AppData\Local\Diagnostics
O43 - CFD: 2014/08/26 20:30:23 - [] D -- C:\Users\flo et flo\AppData\Local\Downloaded Installations
O43 - CFD: 2015/01/16 02:40:30 - [] D -- C:\Users\flo et flo\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/02/04 21:10:12 - [] SHD -- C:\Users\flo et flo\AppData\Local\EmieBrowserModeList
O43 - CFD: 2014/04/23 10:31:10 - [] SHD -- C:\Users\flo et flo\AppData\Local\EmieSiteList
O43 - CFD: 2014/04/23 10:31:11 - [] SHD -- C:\Users\flo et flo\AppData\Local\EmieUserList
O43 - CFD: 2015/07/05 18:22:10 - [] D -- C:\Users\flo et flo\AppData\Local\Google
O43 - CFD: 2012/01/18 14:55:13 - [0] SHD -- C:\Users\flo et flo\AppData\Local\Historique
O43 - CFD: 2014/10/16 08:39:55 - [] D -- C:\Users\flo et flo\AppData\Local\ICSharpCode.net
O43 - CFD: 2015/01/16 02:44:32 - [] D -- C:\Users\flo et flo\AppData\Local\Microsoft
O43 - CFD: 2012/01/18 15:07:02 - [] D -- C:\Users\flo et flo\AppData\Local\Microsoft Games
O43 - CFD: 2012/01/26 23:17:21 - [] D -- C:\Users\flo et flo\AppData\Local\Mozilla
O43 - CFD: 2012/02/04 13:30:52 - [] D -- C:\Users\flo et flo\AppData\Local\Panda Security
O43 - CFD: 2013/03/06 23:57:30 - [] D -- C:\Users\flo et flo\AppData\Local\Philips-Songbird
O43 - CFD: 2014/08/26 23:17:25 - [] D -- C:\Users\flo et flo\AppData\Local\Pinnacle
O43 - CFD: 2014/08/26 21:35:08 - [] D -- C:\Users\flo et flo\AppData\Local\Pinnacle_Studio_17
O43 - CFD: 2013/11/22 18:36:58 - [] D -- C:\Users\flo et flo\AppData\Local\Programs
O43 - CFD: 2014/05/28 14:54:34 - [] D -- C:\Users\flo et flo\AppData\Local\Skype
O43 - CFD: 2014/01/16 18:44:04 - [] D -- C:\Users\flo et flo\AppData\Local\Software
O43 - CFD: 2014/11/21 18:29:51 - [] D -- C:\Users\flo et flo\AppData\Local\Sony Corporation
O43 - CFD: 2015/07/05 18:38:16 - [] D -- C:\Users\flo et flo\AppData\Local\Temp
O43 - CFD: 2012/01/18 14:55:13 - [0] SHD -- C:\Users\flo et flo\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/10/05 11:36:24 - [] D -- C:\Users\flo et flo\AppData\Local\VirtualStore
O43 - CFD: 2014/10/07 18:42:16 - [] D -- C:\Users\flo et flo\AppData\Local\Windows Live
O43 - CFD: 2013/08/12 13:33:47 - [] D -- C:\Users\flo et flo\AppData\Local\Windows Live Writer
O43 - CFD: 2012/12/21 22:02:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{01DB356A-2510-4795-9D3C-82672EFDFFF9}
O43 - CFD: 2012/02/15 00:00:04 - [0] D -- C:\Users\flo et flo\AppData\Local\{02B21CDE-8ACD-4F6F-AA42-10956D122FB5}
O43 - CFD: 2012/06/09 17:49:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{02E8B054-B5B8-45EE-8B14-D715B78CA950}
O43 - CFD: 2012/12/15 12:02:52 - [0] D -- C:\Users\flo et flo\AppData\Local\{03130304-2C0F-4D73-BCF7-01D321C4641E}
O43 - CFD: 2012/03/15 16:24:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{0326E691-28F2-4757-8385-6A3F965DA5AD}
O43 - CFD: 2013/01/15 18:26:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{0460C559-D332-444D-8A39-110A1091992D}
O43 - CFD: 2012/10/11 22:28:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{05BEFC88-6330-4CB7-BD9B-C29FDC3CAE9B}
O43 - CFD: 2012/05/05 23:32:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{06F24E53-46E5-4AD5-9456-537CCC40B9F2}
O43 - CFD: 2012/02/16 12:24:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{0766111E-716D-45ED-87D6-BE2B936B7318}
O43 - CFD: 2012/04/17 21:26:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{07D1FDD3-7C5B-4678-9486-10429BC726AC}
O43 - CFD: 2012/07/16 11:01:07 - [0] D -- C:\Users\flo et flo\AppData\Local\{07DA999D-0F3B-4754-8C81-A12C0C300E89}
O43 - CFD: 2012/12/18 11:34:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{0A63E341-873A-4BB3-A62C-ECBC51CC1642}
O43 - CFD: 2012/05/29 17:47:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{0A8359BB-F99E-433F-93E6-893CAF2C304F}
O43 - CFD: 2012/04/20 16:54:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{0B0DCEAF-1E39-4B33-8CB4-CC16BE601E3A}
O43 - CFD: 2012/04/20 16:58:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{0B9CED11-B066-47DD-AE35-186568EF5CEB}
O43 - CFD: 2012/10/31 01:27:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{0C3F624B-7FA9-46EB-81F3-916E7007F684}
O43 - CFD: 2012/02/13 19:35:24 - [0] D -- C:\Users\flo et flo\AppData\Local\{0C4857C4-4B98-4ECB-9F64-F21D0536E6EF}
O43 - CFD: 2012/02/13 19:42:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{0C5914BF-B8E5-43CF-A20F-0FADF7F4F967}
O43 - CFD: 2012/10/22 17:31:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{0CF65450-D79A-4FA9-86C2-B94A72F14088}
O43 - CFD: 2012/03/25 00:51:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{0D2EF9DD-D638-42B3-9A79-9A68529113A0}
O43 - CFD: 2012/06/29 17:20:24 - [0] D -- C:\Users\flo et flo\AppData\Local\{0D97CEAE-5968-4603-86DB-ACAAA432F801}
O43 - CFD: 2012/10/12 12:06:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{0F95212C-C842-4B78-93AA-42C2D563350C}
O43 - CFD: 2012/02/29 19:39:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{0FDA5A1B-A94E-4DEA-809B-C49234758C9B}
O43 - CFD: 2012/03/02 17:59:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{10566358-5F82-4F36-A79D-9021CA229FD6}
O43 - CFD: 2012/03/21 22:55:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{11C44F10-8B8A-4CBF-A16D-7F1BAC35D158}
O43 - CFD: 2012/03/28 21:13:58 - [0] D -- C:\Users\flo et flo\AppData\Local\{123891B3-3D5C-49C3-933E-BDD9276008E2}
O43 - CFD: 2012/05/13 19:12:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{12B02BD2-FD84-48F4-B72D-C816C251F7B1}
O43 - CFD: 2013/05/23 12:09:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{135F49DE-502B-4074-A785-4BD29DF15D96}
O43 - CFD: 2013/01/25 21:52:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{138FF04E-D787-4BF7-BCD0-358E8382B182}
O43 - CFD: 2012/02/27 22:32:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{13FEF058-94EC-4850-82EF-021B1689C16C}
O43 - CFD: 2012/10/09 10:28:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{141A268F-0E88-44AE-AA71-CEFA52EB3A14}
O43 - CFD: 2012/10/21 10:39:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{14B29F15-2003-4BBE-933D-B586725713AA}
O43 - CFD: 2012/03/08 22:42:35 - [0] D -- C:\Users\flo et flo\AppData\Local\{16552982-0900-43DF-ABA2-FCB78408F53A}
O43 - CFD: 2012/06/28 17:32:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{1773D2D6-1FC9-47FB-8434-B07F6A441543}
O43 - CFD: 2012/04/19 21:15:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{184259BC-D550-466A-8590-2EB3C47AB6CD}
O43 - CFD: 2012/03/03 14:12:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{186CFED7-1F7F-42DD-B2E5-9AE2AFE58272}
O43 - CFD: 2012/02/15 20:04:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{19866EEE-8C05-4B24-9FBC-36143EDF4639}
O43 - CFD: 2013/01/22 00:22:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{198E2579-AE80-4F1B-ABBC-37DA38527B89}
O43 - CFD: 2012/04/07 14:56:03 - [0] D -- C:\Users\flo et flo\AppData\Local\{1A7A9BC0-2188-44AC-92B5-2C5484462F37}
O43 - CFD: 2012/02/19 16:47:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{1AB38A4E-36C2-431D-A504-2FB3D266732F}
O43 - CFD: 2012/10/12 16:33:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{1B6AEFE7-1044-4369-953A-B9D86B22F9C7}
O43 - CFD: 2012/08/18 22:17:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{1C2F99A9-716E-4508-8032-99D60E5DDF9D}
O43 - CFD: 2012/03/05 19:24:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{1F3FC5A4-E460-4494-BC80-E5D37696D764}
O43 - CFD: 2012/03/19 15:16:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{20B8CAEB-99AC-43F9-87A2-DDD0B333D16A}
O43 - CFD: 2012/10/25 22:34:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{218A9A41-F3DA-4099-A47D-E2DEE7172FE0}
O43 - CFD: 2012/12/13 17:13:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{21B4131A-31C3-4338-9ED1-38F56F02A9EF}
O43 - CFD: 2012/09/18 18:59:14 - [0] D -- C:\Users\flo et flo\AppData\Local\{2245C38E-5833-41D3-BAE6-F7E7410C116C}
O43 - CFD: 2012/03/18 18:37:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{22774AA6-458A-46A8-994F-6908F783C93F}
O43 - CFD: 2012/07/12 19:51:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{2303F98D-6E96-4320-9BD5-46E1F19AC7D5}
O43 - CFD: 2012/07/06 22:45:21 - [0] D -- C:\Users\flo et flo\AppData\Local\{2335D7CC-5610-4850-97A0-F9B8900EC523}
O43 - CFD: 2012/02/20 20:42:04 - [0] D -- C:\Users\flo et flo\AppData\Local\{2345A377-6E7E-4462-8E68-A9EA52D52F9E}
O43 - CFD: 2012/07/13 18:02:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{2360B824-EA82-4AA9-96C6-07CCAC3932B7}
O43 - CFD: 2012/08/18 22:18:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{2392265A-6322-4BC7-94D8-189853E3D5A1}
O43 - CFD: 2012/03/19 23:27:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{257E0488-933A-4CC6-82B5-26F1A8733DF7}
O43 - CFD: 2012/11/30 12:45:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{2696D3DE-7C83-40C2-8624-F38AC134D416}
O43 - CFD: 2012/12/17 14:15:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{27329196-F9EA-49A0-BE82-C45E45063080}
O43 - CFD: 2012/03/01 22:06:26 - [0] D -- C:\Users\flo et flo\AppData\Local\{274D1132-FFE8-4BDD-82F2-9756B484356E}
O43 - CFD: 2012/03/25 00:51:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{279F4E41-2558-4025-B22B-B03DCBD84F94}
O43 - CFD: 2012/09/09 15:13:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{27CD5A37-AA57-4F4C-AE19-2FF289BBC0D4}
O43 - CFD: 2012/06/24 22:49:48 - [0] D -- C:\Users\flo et flo\AppData\Local\{280F3C03-F0B8-4060-B412-B0663FA62BCC}
O43 - CFD: 2012/03/31 11:35:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{28206F8E-6B66-4A58-AAC0-23F6E20B654A}
O43 - CFD: 2012/02/14 18:19:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{2A409793-6B46-4F5F-A9F7-529160FCC28A}
O43 - CFD: 2012/04/06 14:23:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{2ACF15AC-4F7B-40D7-A949-F942B2A68884}
O43 - CFD: 2012/04/07 14:56:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{2B2EB643-F8DE-4D11-A88A-9CC103A0B4FC}
O43 - CFD: 2012/09/10 22:11:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{2B7EBDFB-1164-4276-A2E2-76DD10DDAE80}
O43 - CFD: 2012/12/24 22:01:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{2C5F6479-1703-44E6-8763-2D803EC80795}
O43 - CFD: 2012/10/06 12:38:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{2CB3515F-3B64-441E-8614-4AEE7EF1A13B}
O43 - CFD: 2012/08/29 16:10:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{2DFE887B-C39D-42A9-BFF8-A79687B6080B}
O43 - CFD: 2012/06/13 16:40:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{2EB5BBE4-9652-47F5-81E2-56B96BDB9CCF}
O43 - CFD: 2012/02/04 12:24:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{2EC09B4E-1657-4A7D-AEF7-28C50FC47D21}
O43 - CFD: 2012/06/28 17:32:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{2EFE56BD-2676-4962-A4D0-283C9B7164F0}
O43 - CFD: 2012/04/23 18:43:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{3059BACE-5D20-45E3-8E30-E4EBE712654A}
O43 - CFD: 2012/05/12 17:55:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{305E75F3-40C2-472E-8AAA-38C97187D2B6}
O43 - CFD: 2012/11/22 14:53:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{3105AC07-2CF1-4F21-BCB3-3341A27D3E18}
O43 - CFD: 2013/01/08 14:15:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{315CB96D-15E8-4F2A-AD60-EB6084DB05A8}
O43 - CFD: 2012/10/07 13:50:05 - [0] D -- C:\Users\flo et flo\AppData\Local\{31899184-A443-4FDA-8408-3D9A6804452A}
O43 - CFD: 2012/06/03 13:37:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{32502FFC-AABF-48C3-9BD6-0D2148141BC2}
O43 - CFD: 2012/04/30 10:10:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{328277DC-8165-4E37-A070-0AA4E2B09B67}
O43 - CFD: 2012/03/12 22:27:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{340E428B-53A4-4860-84B5-A8ED449226FB}
O43 - CFD: 2012/10/10 13:50:07 - [0] D -- C:\Users\flo et flo\AppData\Local\{37243080-B2B9-4982-94C9-1AED66020FA6}
O43 - CFD: 2012/07/05 18:05:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{374BE506-D59C-4891-994D-B6041460A0F2}
O43 - CFD: 2012/03/21 15:51:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{383EB1C9-D26F-49DB-8FFA-A88C4F4D14ED}
O43 - CFD: 2012/10/11 07:46:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{38B9884E-E8FE-4DF4-A08B-771681F37E1A}
O43 - CFD: 2012/11/25 21:49:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{3B867E43-0429-4F5C-82D6-327DB1EB33EA}
O43 - CFD: 2012/03/25 00:19:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{3BC969E3-02B7-4B3E-AFD0-6E2403C01C40}
O43 - CFD: 2012/03/10 00:33:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{3D5CDEE7-B141-4201-A534-E45BDD9AAAAB}
O43 - CFD: 2012/03/21 22:55:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{3E6C7E5A-AE15-4C50-B0BA-235941DB8319}
O43 - CFD: 2012/04/06 17:16:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{3EFDF19C-1E29-422A-882A-B7542B83F5E3}
O43 - CFD: 2014/10/07 18:43:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{3F635019-D948-4642-940A-3F5EF8CA9070}
O43 - CFD: 2012/02/24 10:28:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{3F6F5D8A-992E-47C2-936B-94E043DE212F}
O43 - CFD: 2012/07/12 19:52:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{3F93616E-3713-44A5-AC61-0D6D7297FA3A}
O43 - CFD: 2012/03/01 19:20:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{4001E8FA-6224-4E5B-8B10-D85E1EF12B47}
O43 - CFD: 2012/06/04 20:51:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{405771A2-DC7F-4259-96EB-3031FDD964B0}
O43 - CFD: 2012/02/04 01:21:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{405B131A-30C4-4029-B8E8-517457CC9223}
O43 - CFD: 2012/09/23 17:22:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{40D80C62-75F2-4D30-A599-A92B8AB19C77}
O43 - CFD: 2012/10/31 20:05:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{40E86535-5254-4ED3-AB87-36FCE44B29A1}
O43 - CFD: 2012/10/24 11:31:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{423CAF42-06FA-49A1-A62B-3321D6F41A9B}
O43 - CFD: 2012/11/18 01:20:24 - [0] D -- C:\Users\flo et flo\AppData\Local\{425B0663-4351-41FC-8580-B967BF4F1409}
O43 - CFD: 2014/10/03 12:11:05 - [0] D -- C:\Users\flo et flo\AppData\Local\{42B173E9-E519-4DAC-B314-82CB01DD08A1}
O43 - CFD: 2012/03/13 19:01:07 - [0] D -- C:\Users\flo et flo\AppData\Local\{438D56D4-5BA0-44EC-8C9D-D7D3F93C1C0E}
O43 - CFD: 2012/03/17 16:50:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{45148DBE-5E81-46B7-9994-F983FFA42293}
O43 - CFD: 2012/11/23 14:06:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{45187FDB-B32D-4423-8DB3-5586383600C4}
O43 - CFD: 2012/06/14 21:23:52 - [0] D -- C:\Users\flo et flo\AppData\Local\{45568ACB-201E-438E-86A1-6663ACE52A7B}
O43 - CFD: 2012/05/13 19:10:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{4632137D-E4E0-4850-B727-E393269D6A0E}
O43 - CFD: 2012/03/02 17:59:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{46A973DC-FEC5-4351-96C7-2EA95790FEB1}
O43 - CFD: 2012/05/19 11:50:01 - [0] D -- C:\Users\flo et flo\AppData\Local\{46FACBCC-C523-4706-A4BE-F9D39A6D3D67}
O43 - CFD: 2012/06/02 16:36:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{4736540F-21AD-40CB-A25B-393DB7F5CACB}
O43 - CFD: 2012/06/21 21:02:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{477BEEC9-872C-4BDB-B9CF-9D2FD297807C}
O43 - CFD: 2012/11/10 19:34:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{477EF42A-C66D-4F9F-94D0-809B2FEB2A00}
O43 - CFD: 2012/12/06 03:09:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{487210F5-3212-48C6-9726-D23D1AFA4F6D}
O43 - CFD: 2012/03/14 22:37:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{4923841D-AEEC-4BA0-B230-D30150F00764}
O43 - CFD: 2012/12/30 12:30:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{49B918AB-0BD0-48B7-9CCB-E55C21E556D4}
O43 - CFD: 2012/02/04 13:46:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{4AA23298-C7BA-4E08-A74C-9F38DEA28EAF}
O43 - CFD: 2012/11/28 17:03:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{4ABE4DD0-98F7-4014-BF81-47C2D6FF0F10}
O43 - CFD: 2012/03/01 19:20:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{4B871839-13A4-458F-A35D-9AFCF0E6079F}
O43 - CFD: 2012/07/17 22:49:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{4BC47756-A3DC-47CE-AAF2-314031FC0BDB}
O43 - CFD: 2012/11/19 11:06:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{4BE30D98-C8BD-493B-8C8E-D51FF639B24E}
O43 - CFD: 2012/12/12 14:04:52 - [0] D -- C:\Users\flo et flo\AppData\Local\{4CAE9C12-AE2B-4554-85F2-AA7EBCA6BE77}
O43 - CFD: 2012/10/05 13:15:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{4D03A4ED-A647-4DF4-A199-700098A19FA7}
O43 - CFD: 2012/03/13 13:53:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{4D147147-C68D-489B-B998-E00FDED3A9BC}
O43 - CFD: 2012/10/16 22:27:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{4D9F7249-E65D-4AAC-95E6-F6DD1297D3D7}
O43 - CFD: 2012/05/12 17:55:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{4DC01582-F6B6-48FF-BB3D-1690F6302D75}
O43 - CFD: 2012/02/15 19:01:52 - [0] D -- C:\Users\flo et flo\AppData\Local\{4DDAC220-824F-48A9-B9C3-978B7AACD151}
O43 - CFD: 2012/12/22 14:30:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{4E742274-AB32-4B8A-9D4B-20A7AC15D6FC}
O43 - CFD: 2012/10/27 10:44:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{4F92E49A-E6A0-4935-B2A6-7B2E7FAFD2CC}
O43 - CFD: 2012/04/19 17:28:04 - [0] D -- C:\Users\flo et flo\AppData\Local\{4FE869E0-E794-414C-81B3-EC40D3D5FE93}
O43 - CFD: 2012/09/15 13:21:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{50407351-D09D-4B43-A31F-D1BDCA84B6CA}
O43 - CFD: 2012/05/04 17:46:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{50E21F16-8716-4662-9B4D-A9DC193C1D28}
O43 - CFD: 2012/02/09 22:25:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{50EDD6F4-A9C5-4C74-8316-EBC45A41729D}
O43 - CFD: 2012/04/28 16:23:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{514362C6-456A-48A0-89DE-F2FA390885E8}
O43 - CFD: 2012/02/13 19:37:48 - [0] D -- C:\Users\flo et flo\AppData\Local\{526B73A6-96F7-43EA-93C9-A9B4168A4ECC}
O43 - CFD: 2012/11/14 16:32:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{52B9FF1C-DA06-4038-9AC8-BB2FD2E6C5D0}
O43 - CFD: 2012/06/09 12:31:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{53448B8F-5D1E-4CEA-9400-99B80BDAA1C4}
O43 - CFD: 2012/03/09 18:05:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{54DDD7B7-6EB4-4141-AEE4-72BB8FF28F76}
O43 - CFD: 2012/06/27 19:57:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{55E0AC30-E6D0-4227-BDC0-54DFDA23881D}
O43 - CFD: 2012/11/26 13:18:01 - [0] D -- C:\Users\flo et flo\AppData\Local\{567E8524-1555-44A4-AEE5-3473BEECC0AC}
O43 - CFD: 2012/04/29 18:07:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{56D96CD4-4DD1-4284-9858-F32FE55FBB2D}
O43 - CFD: 2012/03/09 18:05:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{589340C5-CF99-4752-A395-581620F2E989}
O43 - CFD: 2012/05/13 19:12:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{58A16549-AD95-4A4B-AEB0-87EF6E80BCB6}
O43 - CFD: 2012/11/13 15:45:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{5915C024-C6B4-411B-A578-ED30D264C9AD}
O43 - CFD: 2012/06/14 22:02:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{596A1EB3-ACCD-4323-9002-4094677A6C47}
O43 - CFD: 2012/06/14 22:02:21 - [0] D -- C:\Users\flo et flo\AppData\Local\{59A02CAB-D825-4DC2-8180-52A8FCCD50BF}
O43 - CFD: 2013/08/12 13:34:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{5B0FDE1F-7672-4F35-A26B-6EBC641A219F}
O43 - CFD: 2013/01/07 11:35:14 - [0] D -- C:\Users\flo et flo\AppData\Local\{5B757AC3-08C0-4CC1-9DFC-6EB156CE13B5}
O43 - CFD: 2012/12/19 22:28:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{5B873798-2F1E-49D9-86D5-28D4623F4A75}
O43 - CFD: 2012/02/24 10:28:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{5CF6FA9A-47E6-405C-ACE0-0556CA6FE8D9}
O43 - CFD: 2012/03/19 15:19:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{5D6E2ABA-F684-4362-B966-0D3505CC7A9E}
O43 - CFD: 2012/03/08 19:09:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{5D789B28-A9A5-4C2E-9E4A-76380EB3ADA2}
O43 - CFD: 2012/02/04 01:20:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{5E5A0F2B-7315-4B6B-B99F-401537C2AA28}
O43 - CFD: 2012/05/27 18:12:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{5F0E1233-248B-4610-A1FB-7582A9FB0AAB}
O43 - CFD: 2012/12/03 15:54:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{5F1FBDE1-EA57-4952-AB87-ED4FC91A77C5}
O43 - CFD: 2012/02/02 13:42:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{5FEE5083-31B4-41A4-8980-90B5EB519966}
O43 - CFD: 2012/05/27 18:12:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{60D0FC26-F92B-48B3-A89D-6E96D188FFE0}
O43 - CFD: 2012/11/20 15:10:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{6187F7E4-1A84-4FF4-BC4A-D00443BACFD9}
O43 - CFD: 2012/08/27 11:11:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{61F221FF-2B26-42C9-AD4F-89FD720D13CC}
O43 - CFD: 2012/06/16 09:38:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{62740C40-70D5-49DB-A705-EA3C9F17A86D}
O43 - CFD: 2012/03/09 19:29:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{636523F3-5562-4679-8AF2-B14FF0A8C754}
O43 - CFD: 2012/12/08 11:39:58 - [0] D -- C:\Users\flo et flo\AppData\Local\{6434A413-8369-49C1-A228-B178EEE13BDB}
O43 - CFD: 2012/11/21 22:28:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{6435BCD4-7F2D-4E06-88F1-0FAFF1C88D58}
O43 - CFD: 2013/01/13 21:56:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{65169540-4C0C-45B0-B833-7EBFA279051C}
O43 - CFD: 2012/03/18 18:37:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{653B76E7-F4C7-484F-A88E-4DD745B8A202}
O43 - CFD: 2012/02/26 13:46:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{655AA50D-B19F-40A9-8963-1669EDBDFB85}
O43 - CFD: 2012/11/13 00:40:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{6595D08D-628C-44DF-971B-CDE417B91EA2}
O43 - CFD: 2012/11/07 11:29:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{68D23034-33B0-48A7-AEC4-0D78ECCF40DB}
O43 - CFD: 2012/02/04 13:00:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{69657CE6-D0DF-45C5-9C0A-07460816E92B}
O43 - CFD: 2012/03/04 16:17:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{69C9F3FE-5DEE-48D2-86D1-6AC913203F56}
O43 - CFD: 2012/02/05 17:49:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{6A14A37D-D75F-4B8E-9C21-6BBAB80266B1}
O43 - CFD: 2012/06/03 00:45:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{6A92CD16-FF62-4528-94EB-0A72911AED73}
O43 - CFD: 2012/05/05 23:33:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{6BF2079C-E985-4929-8D59-121D78108A41}
O43 - CFD: 2012/04/19 21:15:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{6C1AB86E-D2B4-4AC1-A476-A7311A5BFF48}
O43 - CFD: 2012/07/16 11:00:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{6CC26DC7-609D-4029-A594-6C93BA5DBC45}
O43 - CFD: 2012/02/12 21:08:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{6D6C40FF-5B3F-45B1-B0A5-B771048250BE}
O43 - CFD: 2012/11/24 02:07:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{6D8E3EC7-3A79-4703-8C3C-56299A9553EE}
O43 - CFD: 2013/07/18 11:36:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{6DA527DE-0C71-4953-A6E1-277E7DC8FCCC}
O43 - CFD: 2012/05/05 15:23:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{6DD9727C-659C-4AC2-9AC8-D4EB79BC187B}
O43 - CFD: 2012/10/26 19:34:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{6E48D963-F8DE-4E4F-9916-2368F95F9687}
O43 - CFD: 2012/08/30 19:57:58 - [0] D -- C:\Users\flo et flo\AppData\Local\{6EB74E2F-9A16-499D-9942-D7EB615F0095}
O43 - CFD: 2012/04/06 17:16:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{6F471667-2ECD-481A-8799-9EB46BF3B94E}
O43 - CFD: 2012/02/28 19:04:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{6FCB8C56-C8A9-49AC-9F56-3BBCC76BDBF3}
O43 - CFD: 2012/06/21 22:06:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{7049B3A8-98AE-476F-8A7E-9E9B2D7240BC}
O43 - CFD: 2012/06/17 17:02:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{722849A8-2A84-4A5E-AE75-E6B5EAFA03B4}
O43 - CFD: 2012/02/15 19:02:03 - [0] D -- C:\Users\flo et flo\AppData\Local\{7251FAF6-A5F5-4A8E-BF49-7EBCBC7C4D69}
O43 - CFD: 2012/04/27 18:22:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{7333B069-0DDF-459B-9381-6DE17BB539E7}
O43 - CFD: 2012/09/03 22:38:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{73975168-C403-47F2-BD26-8C10C018502B}
O43 - CFD: 2012/05/06 19:47:06 - [0] D -- C:\Users\flo et flo\AppData\Local\{742F512D-956B-4746-BFB2-CBC2F8EEF074}
O43 - CFD: 2013/01/20 23:19:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{74E85A36-457C-476F-87D6-90D0E404E1D8}
O43 - CFD: 2012/02/04 12:36:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{751DE36C-0E5E-4850-8F01-57D0FFC9A79B}
O43 - CFD: 2013/08/27 22:21:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{7543AF32-B698-40F6-9609-98693D07B2D0}
O43 - CFD: 2012/02/04 12:22:21 - [0] D -- C:\Users\flo et flo\AppData\Local\{755D9319-5140-42A7-92F0-C254602A332F}
O43 - CFD: 2013/01/16 16:44:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{75790C07-0814-414A-9E40-22789F651C37}
O43 - CFD: 2012/02/04 13:46:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{76B13828-7B57-44F7-A23C-9FDB7DDE41A4}
O43 - CFD: 2012/05/06 19:47:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{770F4E69-1A47-4BD0-AFE6-719EDAACC516}
O43 - CFD: 2014/09/07 21:10:05 - [0] D -- C:\Users\flo et flo\AppData\Local\{7731EBEA-A206-4DF4-89A5-43024020AC43}
O43 - CFD: 2012/06/09 17:49:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{780E6751-5EFE-4CC9-821C-2BCCB1142FB9}
O43 - CFD: 2012/11/09 14:11:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{780FB51D-24DB-4F20-B1BB-2342CD30E986}
O43 - CFD: 2012/02/24 23:44:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{784ACB73-AD7C-4F04-A954-303A5B9B2A01}
O43 - CFD: 2012/12/06 22:50:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{79802207-4693-4219-AA95-931BD7DE6DEC}
O43 - CFD: 2012/10/16 08:01:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{79E05F0B-5E4C-4357-B3DF-9EF47C8002C7}
O43 - CFD: 2012/03/19 23:27:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{7A958986-90BE-48DF-8D54-8EA775B99AD2}
O43 - CFD: 2012/03/11 21:52:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{7AC01C9A-9798-4F34-8E4B-9F512608AC64}
O43 - CFD: 2012/02/23 22:15:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{7B732723-C69F-48FA-86FE-E5863969F470}
O43 - CFD: 2012/06/15 15:51:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{7BFA1638-732A-4867-87DF-6CC73546B898}
O43 - CFD: 2012/07/13 18:02:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{7C29C551-132C-46D6-99D5-B25A65644868}
O43 - CFD: 2012/04/06 14:49:26 - [0] D -- C:\Users\flo et flo\AppData\Local\{7CA42BB4-A771-42D9-9D0F-40B061B616C9}
O43 - CFD: 2012/10/29 21:15:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{7E867838-E0A3-47E8-A988-BD2FE6C0D754}
O43 - CFD: 2012/11/16 18:13:58 - [0] D -- C:\Users\flo et flo\AppData\Local\{7EAA54CC-35AF-4746-927D-ED8BA76251F0}
O43 - CFD: 2012/09/24 13:03:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{7ED0EAC0-8494-4B1A-A755-8D651180B1ED}
O43 - CFD: 2012/04/06 14:18:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{7F37ABC4-4C4E-4A63-9921-48C229329A23}
O43 - CFD: 2012/04/26 21:43:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{7FBA838F-A9CA-48A6-8E07-4E6E04AE3E4B}
O43 - CFD: 2012/11/15 23:43:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{812889FC-DA1E-48D5-A93F-A25B6F4EBDD7}
O43 - CFD: 2012/03/27 22:54:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{81ECCC2D-22ED-416B-9CDA-32D40E7C2675}
O43 - CFD: 2012/06/03 13:05:21 - [0] D -- C:\Users\flo et flo\AppData\Local\{825AC5D1-F574-4553-B4D5-9659C2BCDD27}
O43 - CFD: 2013/01/12 02:50:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{82A79BB7-B93B-4971-B6A6-88F302B24A16}
O43 - CFD: 2012/04/25 21:06:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{8377D98F-9781-4CE3-B283-D2A6DF0F8BE2}
O43 - CFD: 2012/03/14 22:37:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{83CAF169-1BFF-4C1A-99F0-3801B9300675}
O43 - CFD: 2012/02/17 10:58:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{8441CB0E-FF2B-4348-BDC8-DFA22537AF7E}
O43 - CFD: 2012/09/20 18:18:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{85F41033-44B2-4EF7-A3C7-ED67854DFA9D}
O43 - CFD: 2012/06/21 21:02:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{8638E1A9-C47A-4CB9-913D-836D0F5522E6}
O43 - CFD: 2012/07/05 18:05:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{86AF4B51-4485-4EB3-8F3E-46F59AC7E29F}
O43 - CFD: 2012/06/25 13:39:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{87201878-5019-4746-B029-98E169CE3B6F}
O43 - CFD: 2012/02/16 23:51:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{87B61733-B600-4769-9100-C393F270FC34}
O43 - CFD: 2012/12/01 23:47:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{8860990C-FE0E-44D4-A0B5-0466846DAAA5}
O43 - CFD: 2012/10/04 13:52:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{88A79824-E757-47EB-AD05-16C5F2087E45}
O43 - CFD: 2012/02/09 22:25:04 - [0] D -- C:\Users\flo et flo\AppData\Local\{88B7F148-632C-4DEB-97FF-B3BF2A98D1B1}
O43 - CFD: 2012/03/01 22:06:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{88EA1B79-0D8B-465A-8C0B-74F6031B8431}
O43 - CFD: 2012/03/28 15:33:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{893F54AF-A3AE-4B2D-924B-24A6F6493F67}
O43 - CFD: 2012/04/30 11:36:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{89B9DBEE-67C3-4F79-8F0A-B58BAC3469A9}
O43 - CFD: 2012/02/02 13:44:47 - [0] D -- C:\Users\flo et flo\AppData\Local\{8B61616D-C88B-4A4B-8213-98916DEDDA05}
O43 - CFD: 2012/06/03 13:38:05 - [0] D -- C:\Users\flo et flo\AppData\Local\{8B9BF078-3355-4547-803B-A440C3FC89FF}
O43 - CFD: 2012/04/25 13:01:03 - [0] D -- C:\Users\flo et flo\AppData\Local\{8BB0EDA0-576B-422D-B765-BFEEDAB3819B}
O43 - CFD: 2012/02/25 13:33:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{8C5A99F7-4384-4063-ADD6-0B0F58A1B6AB}
O43 - CFD: 2012/03/17 16:50:01 - [0] D -- C:\Users\flo et flo\AppData\Local\{8CC7E7DF-3C97-499F-AA6D-C2C493143729}
O43 - CFD: 2012/05/28 13:48:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{8D5EE457-8F22-4299-A355-F95379360664}
O43 - CFD: 2012/04/06 14:23:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{8D7C5A2B-A1CA-4DC6-8076-4BAA1F92D7B2}
O43 - CFD: 2012/06/14 21:23:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{8D7FC150-290F-4B7D-8141-157ED998115F}
O43 - CFD: 2012/03/11 21:52:48 - [0] D -- C:\Users\flo et flo\AppData\Local\{8E7F89B1-F468-4903-A00F-59D49F4E78F4}
O43 - CFD: 2012/04/06 14:49:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{8F11CAEC-287D-4248-B144-4AF98B039556}
O43 - CFD: 2012/11/06 22:33:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{8F4E0FB2-A7EA-482F-851C-87703F9172BD}
O43 - CFD: 2012/04/19 17:27:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{8FAB6B75-BFA0-49FC-A9C8-2EDA51E71923}
O43 - CFD: 2012/06/06 21:16:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{9092FC91-A5A0-4C73-93CB-0473A36CCCE8}
O43 - CFD: 2012/12/07 20:51:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{917A06DC-340D-47A2-B7D0-520E46D16E91}
O43 - CFD: 2013/01/14 21:49:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{91C242BA-AD45-4D4E-B90A-18B110D3D84E}
O43 - CFD: 2012/02/25 13:33:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{9271F58E-D213-4E2D-9AA2-F8D61A908E9D}
O43 - CFD: 2012/06/24 22:49:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{932E09D3-53DF-4AC8-808B-29426F037E83}
O43 - CFD: 2012/02/26 23:50:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{93AB2177-0119-49C6-BAF9-FBB74D706D36}
O43 - CFD: 2012/09/19 16:26:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{96251F2A-2391-4674-BCE4-08DC1CD07139}
O43 - CFD: 2012/03/09 19:28:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{967E6F19-FED1-4E96-B1CE-2F9435A57129}
O43 - CFD: 2012/03/08 19:09:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{96BF05F2-23F9-4EFE-827C-19CC464A1B86}
O43 - CFD: 2012/02/29 20:42:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{96C5BC00-3F0E-4290-AF43-5A71F05FCA47}
O43 - CFD: 2012/10/20 20:53:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{9784E4BC-E008-47E2-A2E6-3431B9B6E170}
O43 - CFD: 2012/02/25 12:23:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{97D08D57-BEB7-418D-AE87-2BDED2360661}
O43 - CFD: 2012/05/28 13:48:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{980164CD-83F0-40FF-A471-9FD523B28BA0}
O43 - CFD: 2012/04/06 14:18:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{9844010C-E998-472F-8CD2-909B224EA52A}
O43 - CFD: 2012/03/15 22:44:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{98D621DE-200D-4DBC-8227-94706CEF6101}
O43 - CFD: 2012/03/16 13:41:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{98EE9D89-3234-4D56-94A8-D27401A17049}
O43 - CFD: 2015/02/04 17:42:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{992A5AB6-494D-4834-BBCA-B4B372224984}
O43 - CFD: 2012/05/19 11:50:14 - [0] D -- C:\Users\flo et flo\AppData\Local\{9A07294B-C010-4D68-90EA-FB72C184BB05}
O43 - CFD: 2012/09/23 03:00:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{9A8D2674-5F2A-49CD-A7A9-FFF5D1CCC2AC}
O43 - CFD: 2012/02/04 15:20:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{9AD0C494-88F1-4369-9ADE-2391FD1DF37F}
O43 - CFD: 2012/04/05 13:45:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{9B0529AE-BD45-4ECC-A98E-AED6F1F3BF17}
O43 - CFD: 2012/09/17 21:02:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{9C6923C3-0C30-42AD-84BF-B509E4C6B91B}
O43 - CFD: 2014/06/20 10:01:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{9D8E027C-B502-4592-AEEF-23905E892515}
O43 - CFD: 2012/03/19 17:02:40 - [0] D -- C:\Users\flo et flo\AppData\Local\{9DC85536-E33C-4739-ACEA-02948094D3F7}
O43 - CFD: 2012/02/20 20:41:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{9DEBF232-ABEB-4685-A688-6D9E24EB5592}
O43 - CFD: 2012/02/15 23:43:06 - [0] D -- C:\Users\flo et flo\AppData\Local\{A0A521F1-5F7F-45A5-A244-E67EDE68EA15}
O43 - CFD: 2013/01/09 22:48:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{A0B349C6-5751-41FC-9C05-89E322C768DF}
O43 - CFD: 2012/02/28 19:04:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{A0B9837C-63C2-48EF-9CB1-90117545519A}
O43 - CFD: 2012/04/30 12:30:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{A0F3B14F-C06A-4753-A2FF-D1C435EED4BF}
O43 - CFD: 2012/05/02 12:20:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{A2A8A277-4FCD-45DE-BE24-B5756870B4CB}
O43 - CFD: 2012/11/17 13:13:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{A3402720-E6BC-4D60-B973-3CA43272DACB}
O43 - CFD: 2012/03/28 15:34:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{A6A8C4D3-58E0-4996-B1B2-135E8672D1D7}
O43 - CFD: 2012/11/08 02:05:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{A6D07D72-D36E-46D9-AA66-664D9C5E6361}
O43 - CFD: 2012/07/05 18:58:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{A770AF7B-70F4-4F93-82C5-40ECA6CB938F}
O43 - CFD: 2012/10/01 08:08:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{A7A31120-BE87-41EA-82A1-5E2E10A10176}
O43 - CFD: 2012/05/13 19:10:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{A820C0E2-90AA-491C-BBED-986161A8B652}
O43 - CFD: 2012/06/09 12:30:54 - [0] D -- C:\Users\flo et flo\AppData\Local\{A885CB01-083F-4A01-98DD-8256DC76D2FA}
O43 - CFD: 2012/03/08 22:42:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{AAE32B9F-BF6D-4A56-812C-1510159D5448}
O43 - CFD: 2012/02/16 12:24:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{AB082539-84FA-4F65-836A-7E94E348489D}
O43 - CFD: 2012/11/08 19:48:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{ABF01C8D-6FAB-48A3-84A7-C0ACA660CBB0}
O43 - CFD: 2012/04/19 17:30:19 - [0] D -- C:\Users\flo et flo\AppData\Local\{ABF909F4-AC4F-4443-82BA-627129F44737}
O43 - CFD: 2012/11/29 19:38:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{AD1BA3DE-0972-4EB3-83FB-A6ED5DD266D6}
O43 - CFD: 2012/05/29 17:47:03 - [0] D -- C:\Users\flo et flo\AppData\Local\{AD4B7763-8E8E-4C1A-94E1-896089DC3419}
O43 - CFD: 2012/06/16 22:59:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{AEB1ADBB-03D6-458E-933D-D0886E9C7489}
O43 - CFD: 2012/03/29 19:09:52 - [0] D -- C:\Users\flo et flo\AppData\Local\{B02E50B8-9C0B-4473-8867-55F890A57B1A}
O43 - CFD: 2012/09/14 17:37:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{B1C4135E-8CBC-4AF3-8C53-7BFAF6173A19}
O43 - CFD: 2012/03/17 12:11:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{B3558C30-977E-48A3-A5AC-4492BB7B6A9D}
O43 - CFD: 2012/11/03 20:46:08 - [0] D -- C:\Users\flo et flo\AppData\Local\{B358CC85-741A-45BF-97C3-81BDB0947C2D}
O43 - CFD: 2013/01/07 23:43:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{B3A6E178-A9C8-4601-BFB2-E93EEEC10D89}
O43 - CFD: 2012/07/08 15:00:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{B3FA9E5F-D44A-4D60-BED0-4B2EBD07D0F7}
O43 - CFD: 2012/08/16 15:44:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{B4311801-93A3-49F6-86FA-D40AFC7AA966}
O43 - CFD: 2012/03/27 22:54:03 - [0] D -- C:\Users\flo et flo\AppData\Local\{B57AEF60-7AE9-411B-AFDB-B97C5B05B98E}
O43 - CFD: 2012/06/13 16:40:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{B581BD63-261A-49DD-B477-C9F9366D16BE}
O43 - CFD: 2012/10/07 00:38:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{B59C1244-65EE-49AE-8982-72357EDFABF9}
O43 - CFD: 2012/10/02 11:42:15 - [0] D -- C:\Users\flo et flo\AppData\Local\{B90065B5-2332-465D-AD9C-DCA9DA84FC49}
O43 - CFD: 2012/04/02 14:14:06 - [0] D -- C:\Users\flo et flo\AppData\Local\{B95D8B71-6CBB-42A2-99B3-E57087DD93D1}
O43 - CFD: 2012/06/25 17:27:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{BA68B7D7-1F31-4C88-84C3-A9E9FDD8CDB9}
O43 - CFD: 2012/04/21 16:04:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{BA9F5D0D-2893-49E6-8CB6-138A1BDAD530}
O43 - CFD: 2012/06/07 20:51:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{BB0CB101-553A-4C6F-80FB-D0B490A11C3C}
O43 - CFD: 2012/02/04 14:57:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{BC0D54FC-3D91-4CD8-ABD9-A7C723A216F3}
O43 - CFD: 2012/11/04 22:15:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{BC1D4C59-D468-482A-9572-F3F0BC2FD7F4}
O43 - CFD: 2012/05/05 15:23:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{BCD83A43-09E3-495B-AA5E-4B8CA7C4BC71}
O43 - CFD: 2012/06/13 22:58:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{BD6E82F3-239B-4E42-A84B-1BA73E48AE21}
O43 - CFD: 2012/04/24 12:50:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{BDF50F70-0588-4140-BA3E-D64E98735A8E}
O43 - CFD: 2012/02/16 23:51:50 - [0] D -- C:\Users\flo et flo\AppData\Local\{BF121F83-3217-481C-9DE5-C3E7619C0B4B}
O43 - CFD: 2012/08/22 01:26:47 - [0] D -- C:\Users\flo et flo\AppData\Local\{BF746A7A-B8A0-430A-85E8-16CCDF15059D}
O43 - CFD: 2012/02/15 20:04:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{BFCF28C9-3DCB-40AF-A75C-DD6D77EACF5D}
O43 - CFD: 2012/12/14 11:37:32 - [0] D -- C:\Users\flo et flo\AppData\Local\{C00259CE-7169-4D98-8E12-98F038214E4C}
O43 - CFD: 2012/10/18 12:23:35 - [0] D -- C:\Users\flo et flo\AppData\Local\{C0AF0AA8-17D6-4EA8-AEF3-0E4F3AFB5581}
O43 - CFD: 2012/05/29 21:10:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{C0BBD439-D75B-41C4-BB04-1245B7BB4867}
O43 - CFD: 2012/02/12 21:08:48 - [0] D -- C:\Users\flo et flo\AppData\Local\{C1BB01A0-9F23-4D0E-A50F-F11F838BEE24}
O43 - CFD: 2012/03/07 17:00:14 - [0] D -- C:\Users\flo et flo\AppData\Local\{C1EA4A97-58C5-4C62-B9A8-9CBE995F0D72}
O43 - CFD: 2012/04/27 18:22:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{C24C7A5B-32F3-4621-9694-28FAE2CBA5AF}
O43 - CFD: 2012/02/25 12:23:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{C543BF4A-11C7-4DFE-B15B-5DE19C75DC3C}
O43 - CFD: 2012/02/29 20:42:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{C63AE1E1-05DE-45F2-BBE4-7C8691F32D17}
O43 - CFD: 2012/07/17 22:49:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{C84A5C4C-9A40-4268-8BDD-4B01F2A8DF00}
O43 - CFD: 2012/10/15 09:27:50 - [0] D -- C:\Users\flo et flo\AppData\Local\{C84D89DA-C536-4105-AF3B-E3EB5C1C0B89}
O43 - CFD: 2012/02/19 16:47:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{C851E304-91F1-42A4-84BC-400DB3F9E39A}
O43 - CFD: 2012/04/28 16:23:33 - [0] D -- C:\Users\flo et flo\AppData\Local\{C8AA063F-C937-45D5-B126-A01D5F6E0C49}
O43 - CFD: 2013/01/25 15:34:49 - [0] D -- C:\Users\flo et flo\AppData\Local\{C977B73A-BD6C-4B16-A9C9-3A5A0DC6C899}
O43 - CFD: 2012/03/16 13:41:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{CAA824C7-2BB2-46BE-BF39-A17A8FB460CA}
O43 - CFD: 2012/06/13 22:58:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{CAC6342C-367C-4AC8-B932-2D8A622643EB}
O43 - CFD: 2012/04/16 16:44:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{CB1DC1FB-5F8E-4BAF-A6BB-16A01BA9B246}
O43 - CFD: 2012/04/23 18:43:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{CB2717D0-627A-4910-94B4-0AABCB8FF2EF}
O43 - CFD: 2012/02/20 17:33:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{CB6FD7BE-1643-4048-9BF4-63DBAC86AEEE}
O43 - CFD: 2012/02/05 17:49:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{CBDEF487-0559-4B60-9EE7-7928493E2BC2}
O43 - CFD: 2012/02/26 23:50:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{CC75D141-B80F-4A65-8B1B-1C5ACB4E717C}
O43 - CFD: 2012/06/27 19:57:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{CE9D5DA4-BC96-47AD-A532-495A10CDD895}
O43 - CFD: 2012/05/04 17:46:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{CF52EB4C-4E1B-45FB-8FE1-FF63EF897DCC}
O43 - CFD: 2013/09/05 16:08:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{CFDD2EC7-2A1C-4F9A-8A6A-2C387D9E4A17}
O43 - CFD: 2013/01/19 14:24:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{D0068DE0-5329-40A8-87F2-82573238E14C}
O43 - CFD: 2012/03/19 15:19:16 - [0] D -- C:\Users\flo et flo\AppData\Local\{D06C380F-35A8-4FC3-BCFB-B3DEDE4EC0B4}
O43 - CFD: 2012/12/04 12:27:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{D0F1BF8C-590E-41B9-BD23-12D882997C01}
O43 - CFD: 2012/02/04 14:57:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{D12AC7CD-4F8A-458E-8F9D-55F95B142D9F}
O43 - CFD: 2012/08/20 23:54:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{D1D64E8B-73EE-4BFE-A1F7-F3DA2936DA6F}
O43 - CFD: 2012/02/24 23:44:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{D38F885E-70D0-46FE-B145-AE944C383257}
O43 - CFD: 2012/12/20 10:28:45 - [0] D -- C:\Users\flo et flo\AppData\Local\{D4F3EE0A-1340-487B-AAD9-71FFF8AB3CB6}
O43 - CFD: 2012/03/15 22:44:47 - [0] D -- C:\Users\flo et flo\AppData\Local\{D4F45BDD-F3DA-4F1C-92C7-E0B6C594051A}
O43 - CFD: 2012/09/10 08:55:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{D5A4BB00-4D7F-42FF-A3E3-21201AA60AF3}
O43 - CFD: 2012/12/16 21:31:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{D5B5F4C5-DC76-4BD5-9ADA-05677BF2337C}
O43 - CFD: 2012/04/29 18:07:05 - [0] D -- C:\Users\flo et flo\AppData\Local\{D5DE4D1A-FDB3-4A1A-BD8B-48322BF8CA38}
O43 - CFD: 2012/03/17 12:12:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{D5F2C2C9-116F-4765-9268-1D0D2EFADD83}
O43 - CFD: 2012/03/03 14:13:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{D6599822-1EED-4BEF-9034-940216DC0E96}
O43 - CFD: 2012/12/29 23:53:44 - [0] D -- C:\Users\flo et flo\AppData\Local\{D66139D2-BCA7-4992-A826-7F34352E1E7E}
O43 - CFD: 2012/09/26 17:51:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{D6F27D79-320D-43AE-9908-D86BFD4BF01F}
O43 - CFD: 2012/03/15 16:23:47 - [0] D -- C:\Users\flo et flo\AppData\Local\{D718AF84-D34F-4403-919D-675228690CC2}
O43 - CFD: 2012/07/06 22:45:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{D81EA40F-89DF-4F0B-94CF-DB033EB5C360}
O43 - CFD: 2012/06/03 00:45:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{D8736E0B-CFE1-4F58-B73A-A856E397B5A9}
O43 - CFD: 2012/11/11 08:33:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{D8B80B23-463C-482E-9928-875F31D69A57}
O43 - CFD: 2012/03/31 11:35:35 - [0] D -- C:\Users\flo et flo\AppData\Local\{DB31E74E-46C3-4F4B-9721-BB94E2B4D740}
O43 - CFD: 2012/06/27 19:52:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{DBAF1697-D2E9-45F3-8C1C-BCF1F83875E5}
O43 - CFD: 2012/04/02 14:13:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{DCF4959C-37C2-40D0-A51F-F01BE281936A}
O43 - CFD: 2012/06/27 19:52:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{DD5440F1-FBFF-4017-8BC0-3DD0790BFE95}
O43 - CFD: 2012/03/21 15:51:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{DE33F52E-0470-42CF-B058-3B1F3B4490CD}
O43 - CFD: 2012/03/07 16:59:56 - [0] D -- C:\Users\flo et flo\AppData\Local\{DEEBB5D2-8A3E-4F6E-A130-7105D2153039}
O43 - CFD: 2012/03/10 00:33:22 - [0] D -- C:\Users\flo et flo\AppData\Local\{DF2A4253-D6B9-420E-89D2-DEA8C27E21D5}
O43 - CFD: 2012/04/06 14:00:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{DF73DA1F-4F27-4954-B36E-78A3E3CB83ED}
O43 - CFD: 2012/02/17 10:58:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{DFC68C38-DD66-4F5C-8FBB-CFE6987AA71D}
O43 - CFD: 2012/04/25 21:06:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{DFCA1B32-AA3C-479F-84F3-1E82003EFE17}
O43 - CFD: 2012/04/17 21:27:07 - [0] D -- C:\Users\flo et flo\AppData\Local\{E060CCF6-C3BF-4B51-A863-E30ED6E5715A}
O43 - CFD: 2012/04/19 17:30:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{E127F3C1-35FC-4F67-8C7B-B4EC2E24541C}
O43 - CFD: 2012/02/04 17:03:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{E1753949-BC1B-4884-BD71-8DBDA377F954}
O43 - CFD: 2012/11/20 01:13:57 - [0] D -- C:\Users\flo et flo\AppData\Local\{E1B8570B-198E-44BE-8D9A-AAAD02CF258E}
O43 - CFD: 2012/02/04 17:03:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{E1CFBC53-829F-447D-8AA6-53BF83D95249}
O43 - CFD: 2012/06/04 20:52:07 - [0] D -- C:\Users\flo et flo\AppData\Local\{E35FE723-985B-4FC5-B5C2-DD4FDC2E1192}
O43 - CFD: 2012/02/23 22:15:47 - [0] D -- C:\Users\flo et flo\AppData\Local\{E42471B8-BD96-4710-B625-9582E34AE358}
O43 - CFD: 2012/06/06 21:16:46 - [0] D -- C:\Users\flo et flo\AppData\Local\{E4A8D885-DBB1-4995-91F0-78972662C059}
O43 - CFD: 2012/05/08 19:25:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{E4FAF335-8A1F-4467-ADCC-FFDDA24D10FC}
O43 - CFD: 2012/11/25 01:21:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{E5A19610-0AAA-482B-8059-4A62C52D98A4}
O43 - CFD: 2012/06/25 17:27:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{E5B6859C-2EFB-42BB-95DC-C1E59C7A6C0B}
O43 - CFD: 2012/03/05 19:24:26 - [0] D -- C:\Users\flo et flo\AppData\Local\{E5B76177-CAC0-46EC-8650-1D5BE1F028EF}
O43 - CFD: 2012/03/13 13:53:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{E626F568-033A-4F0B-9E64-1485BF271C07}
O43 - CFD: 2012/10/28 15:01:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{E6401837-9873-4889-B676-E2EEC49FAED8}
O43 - CFD: 2012/10/21 22:44:28 - [0] D -- C:\Users\flo et flo\AppData\Local\{E66C6D72-0CEC-4ECE-B0E7-A0417FCDC77B}
O43 - CFD: 2012/02/29 19:39:38 - [0] D -- C:\Users\flo et flo\AppData\Local\{E6FDD4AE-8972-4619-8DB9-DD5D48FA0F66}
O43 - CFD: 2012/06/29 17:20:12 - [0] D -- C:\Users\flo et flo\AppData\Local\{E76F9E95-8511-4558-94FF-17BE784BB66F}
O43 - CFD: 2012/04/06 14:00:42 - [0] D -- C:\Users\flo et flo\AppData\Local\{E7F1A93E-00B0-4201-8A6F-8FCB2E21F04A}
O43 - CFD: 2012/02/14 18:19:30 - [0] D -- C:\Users\flo et flo\AppData\Local\{E836909B-7099-4F48-87CF-DAB9004E82A3}
O43 - CFD: 2013/01/19 01:45:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{E8CFC728-6519-4FEE-B91A-BA099B26E136}
O43 - CFD: 2012/06/07 20:51:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{E9F7A1F6-DA37-498E-B970-7077CA1FDBA9}
O43 - CFD: 2012/02/15 23:42:55 - [0] D -- C:\Users\flo et flo\AppData\Local\{EA159CBF-10F4-4F2D-A774-A3A187F92E30}
O43 - CFD: 2013/01/18 13:44:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{EB554080-A133-48C9-AC34-04101FC44880}
O43 - CFD: 2012/03/13 19:01:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{EB6D7F3A-1DC7-45AF-A1FA-F01D4A42D976}
O43 - CFD: 2012/02/15 00:00:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{ECEA1F00-C611-4A8B-8886-34FE22CCD981}
O43 - CFD: 2012/06/25 13:39:51 - [0] D -- C:\Users\flo et flo\AppData\Local\{ECFA6AE3-1201-4BE3-A7C0-058C54917981}
O43 - CFD: 2012/04/26 21:43:18 - [0] D -- C:\Users\flo et flo\AppData\Local\{ED2D71F4-0475-4061-B0D0-08580A49263F}
O43 - CFD: 2012/02/13 19:42:48 - [0] D -- C:\Users\flo et flo\AppData\Local\{EF403A1D-299D-48B7-95BF-4C99567A9DB4}
O43 - CFD: 2012/12/05 01:31:43 - [0] D -- C:\Users\flo et flo\AppData\Local\{F0874AB5-B3B9-4D16-B539-3C5FE7BFE5F1}
O43 - CFD: 2012/03/25 00:19:25 - [0] D -- C:\Users\flo et flo\AppData\Local\{F0A137AA-A04E-44B1-A40F-3A3D1AF0A943}
O43 - CFD: 2012/11/01 15:07:37 - [0] D -- C:\Users\flo et flo\AppData\Local\{F1B488D9-36D6-4593-B349-ECF566703716}
O43 - CFD: 2012/03/12 22:28:00 - [0] D -- C:\Users\flo et flo\AppData\Local\{F35A3161-95EB-4AAD-BC8F-E4CDA62106BE}
O43 - CFD: 2012/03/28 21:14:10 - [0] D -- C:\Users\flo et flo\AppData\Local\{F3967181-A1BF-4130-B782-CB563FF86793}
O43 - CFD: 2013/01/24 15:07:59 - [0] D -- C:\Users\flo et flo\AppData\Local\{F3C11F8D-B698-4A87-AA9A-004F17A7CE71}
O43 - CFD: 2012/11/21 03:11:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{F41871F0-0B79-4FFC-AFAC-77E84077D04C}
O43 - CFD: 2012/05/29 21:10:36 - [0] D -- C:\Users\flo et flo\AppData\Local\{F533AB41-054B-41F1-AC77-D7970AC5BFD7}
O43 - CFD: 2012/03/04 16:17:35 - [0] D -- C:\Users\flo et flo\AppData\Local\{F5C97266-D7F9-4FA3-B823-B690EB630B8C}
O43 - CFD: 2012/12/23 14:10:34 - [0] D -- C:\Users\flo et flo\AppData\Local\{F5E9C2E8-F906-4B5C-8535-6EE3DDDA77E9}
O43 - CFD: 2012/03/19 17:02:29 - [0] D -- C:\Users\flo et flo\AppData\Local\{F67A48F0-D3B4-40B4-8691-B9E8CA8E70DF}
O43 - CFD: 2012/03/19 15:16:31 - [0] D -- C:\Users\flo et flo\AppData\Local\{F7D94E29-0D82-424D-9B4E-7937653594EE}
O43 - CFD: 2012/02/27 22:32:41 - [0] D -- C:\Users\flo et flo\AppData\Local\{F8AFC704-317A-495C-9397-E2F95329EC57}
O43 - CFD: 2012/06/21 22:06:17 - [0] D -- C:\Users\flo et flo\AppData\Local\{F93B1A84-6B33-4143-97E0-46EAFFAD1298}
O43 - CFD: 2012/06/02 16:36:50 - [0] D -- C:\Users\flo et flo\AppData\Local\{F98947B2-57C4-4823-A4D2-2A0D4841A5B4}
O43 - CFD: 2012/02/26 13:47:01 - [0] D -- C:\Users\flo et flo\AppData\Local\{F9CEB409-DB93-41D1-A784-1862E6DE8F07}
O43 - CFD: 2012/04/17 12:16:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{F9F5418A-AAB9-40E2-8764-8E3DE72D53BE}
O43 - CFD: 2012/11/03 03:58:09 - [0] D -- C:\Users\flo et flo\AppData\Local\{FA4C1EB0-D04E-47B6-B5E0-524CDFEA4122}
O43 - CFD: 2012/09/16 15:48:13 - [0] D -- C:\Users\flo et flo\AppData\Local\{FA595BCF-F80D-465D-BA7F-99F9D26EB00C}
O43 - CFD: 2012/05/08 19:25:11 - [0] D -- C:\Users\flo et flo\AppData\Local\{FB1A3289-6E3B-46A6-8947-B11DCCBB2583}
O43 - CFD: 2012/08/16 15:44:27 - [0] D -- C:\Users\flo et flo\AppData\Local\{FBC1007A-1B6B-4444-89C2-B8E92B09EE6B}
O43 - CFD: 2012/02/04 12:31:58 - [0] D -- C:\Users\flo et flo\AppData\Local\{FC593D69-95C9-4272-AD99-2F3101B6B5C5}
O43 - CFD: 2012/06/03 13:02:53 - [0] D -- C:\Users\flo et flo\AppData\Local\{FD1A4156-0507-47EB-B2CA-BB2514A382C8}
O43 - CFD: 2013/01/17 23:20:23 - [0] D -- C:\Users\flo et flo\AppData\Local\{FEF149F1-A9C4-4745-BD03-AD1133B4A940}
O43 - CFD: 2012/10/30 12:37:20 - [0] D -- C:\Users\flo et flo\AppData\Local\{FF090FDB-4C2E-4909-A6C7-46940F4CF755}
O43 - CFD: 2012/10/12 16:38:02 - [0] D -- C:\Users\flo et flo\AppData\Local\{FF91549B-1662-45F2-A752-6716940247AD}
O43 - CFD: 2012/11/05 23:21:39 - [0] D -- C:\Users\flo et flo\AppData\Local\{FF953416-E5B6-4163-BB8A-FD5FC2C584A8}
O43 - CFD: 2013/06/27 20:30:35 - [] RD -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/08/29 22:12:38 - [] RD -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/06/27 20:30:35 - [] D -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
O43 - CFD: 2014/02/22 13:29:30 - [] D -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
O43 - CFD: 2013/06/27 20:30:35 - [] RD -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/10/16 08:45:39 - [] RD -- C:\Users\flo et flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Enumération des clés de registre StartupReg (SMSR) (O53) (2) - 2s
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe

---\\ Liste des pilotes du système (SDL) (O58) (83) - 199s
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976]
O58 - SDL:2009/07/14 03:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512]
O58 - SDL:2009/07/14 03:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400]
O58 - SDL:2010/02/18 09:18:22 A . (.Advanced Micro Devices - AMD IO Driver.) -- C:\Windows\System32\drivers\amdiox86.sys [37944]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256]
O58 - SDL:2009/07/14 03:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400]
O58 - SDL:2011/02/17 20:00:17 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amd_sata.sys [64128]
O58 - SDL:2011/02/17 20:00:18 A . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\drivers\amd_xata.sys [32384]
O58 - SDL:2010/05/21 14:50:40 A . (.Panda Security, S.L. - Panda Anti-Malware File System Minifilter.) -- C:\Windows\System32\drivers\amm8660.sys [54344]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608]
O58 - SDL:2009/05/26 14:32:02 A . (.ArcSoft, Inc. - .) -- C:\Windows\System32\drivers\ArcSoftKsUFilter.sys [17408]
O58 - SDL:2010/11/01 05:20:30 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athr.sys [1800704]
O58 - SDL:2011/07/01 06:10:32 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW73.sys [100880]
O58 - SDL:2011/07/01 06:10:19 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [7800832]
O58 - SDL:2011/07/01 06:10:19 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [245760]
O58 - SDL:2009/07/14 00:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248]
O58 - SDL:2009/07/14 02:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128]
O58 - SDL:2009/07/14 00:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904]
O58 - SDL:2010/11/01 04:56:18 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\Windows\System32\drivers\btwampfl.sys [297000]
O58 - SDL:2010/11/01 04:56:19 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\drivers\btwaudio.sys [88616]
O58 - SDL:2010/11/01 04:56:19 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\drivers\btwavdt.sys [111656]
O58 - SDL:2010/11/01 04:56:10 A . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\drivers\btwl2cap.sys [33320]
O58 - SDL:2010/11/01 04:56:19 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\drivers\btwrchid.sys [18728]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080]
O58 - SDL:2009/07/14 03:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952]
O58 - SDL:2009/07/14 03:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720]
O58 - SDL:2009/07/14 00:02:52 A . (.Intel Corporation - Intel(R) Gigabit Network Connection NDIS 6.) -- C:\Windows\System32\drivers\e1y6032.sys [214016]
O58 - SDL:2009/07/14 03:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160]
O58 - SDL:2009/07/14 00:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624]
O58 - SDL:2009/07/14 03:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152]
O58 - SDL:2011/03/11 07:38:51 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160]
O58 - SDL:2009/07/14 03:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040]
O58 - SDL:2010/11/01 05:17:29 A . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controll.) -- C:\Windows\System32\drivers\L1C62x86.sys [68208]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824]
O58 - SDL:2009/07/14 03:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584]
O58 - SDL:2009/07/14 03:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624]
O58 - SDL:2009/06/10 23:19:48 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [9853248]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744]
O58 - SDL:2010/06/22 19:13:00 A . (.Panda Security, S.L. - Panda Boot Driver.) -- C:\Windows\System32\drivers\pavboot.sys [26696]
O58 - SDL:2010/05/06 18:11:58 A . (.Panda Security, S.L. - Panda Protection driver.) -- C:\Windows\System32\drivers\PavProc.sys [163848]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064]
O58 - SDL:2010/11/01 04:49:57 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3154920]
O58 - SDL:2011/03/28 10:54:52 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [197224]
O58 - SDL:2009/07/13 22:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2010/04/26 22:20:29 A . (.Sony Corporation - Sony Firmware Extension Parser driver.) -- C:\Windows\System32\drivers\SFEP.sys [9344]
O58 - SDL:2011/02/21 15:38:32 A . (.Panda Security, S.L. - PandaShield driver.) -- C:\Windows\System32\drivers\ShlDrv51.sys [37448]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888]
O58 - SDL:2009/07/14 03:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072]
O58 - SDL:2010/11/01 05:04:08 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [1310000]
O58 - SDL:2012/12/13 13:50:38 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [45056]
O58 - SDL:2011/01/07 08:27:50 A . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\Windows\System32\drivers\usbfilter.sys [35968]
O58 - SDL:2009/07/14 03:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976]
O58 - SDL:2009/07/14 03:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904]
O58 - SDL:2009/07/13 23:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/07/13 23:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 23:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 23:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 23:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 23:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 23:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 23:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 23:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 23:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 23:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 23:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 23:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (1) - 239s
O61 - LFC: 2015/07/05 18:18:46 A . (..) -- C:\Users\flo et flo\AppData\Local\ATI\ACE\Manifest.Bin [27473]

---\\ Associations Shell Spawning (O67) (9) - 4s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- Bad: (C:\PROGRA~1\PANDAS~1\PANDAA~1\PAVSCRIP.EXE "%1" %*) Good: (WScript.exe "%1" %*) =>Broken.OpenCommand
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (SMI) (O68) (8) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\beamrise.exe =>Hijacker.Beamrise
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>Hijacker.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>Hijacker.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>Hijacker.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (4) - 6s
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.snapdo.com/ =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKCU] {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} - (webssearches) - http://istart.webssearches.com/ =>PUP.IsStart
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (delta-homes) - http://search.delta-homes.com/ =>Hijacker.Qvo6
O69 - SBI: SearchScopes [HKCU] {B65E8D80-CE05-4409-BF9B-71990D450143} - (Astromenda) - http://astromenda.com/ =>PUP.Astromenda

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 8s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1973728]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (4) - 12s
O87 - FAEL: "{706D9873-448B-4FA3-BB2D-256D61B05750}" [In-None-P6-TRUE] .(...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\31.0.1650.7639\services\windows-x86-skypekit.exe =>Hijacker.Beamrise
O87 - FAEL: "{7DDA1F32-B9C1-4D06-9D25-510B264C9E32}" [Out-None-P6-TRUE] .(...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\31.0.1650.7639\services\windows-x86-skypekit.exe =>Hijacker.Beamrise
O87 - FAEL: "{BBE76B94-B5EE-457E-B70A-AA46280F2536}" [In-None-P6-TRUE] .(...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\31.0.1650.7639\windows-x86-skypekit.exe =>Hijacker.Beamrise
O87 - FAEL: "{48E72D4E-EEDD-48D0-AA8B-C5725BF37C85}" [Out-None-P6-TRUE] .(...) -- C:\Users\flo et flo\AppData\Local\Beamrise\Application\31.0.1650.7639\windows-x86-skypekit.exe =>Hijacker.Beamrise

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (28) - 90s
SS - Demand [2010/03/18 11:19:26] [ 113152] ArcSoft Connect Daemon (ACDaemon) . (.ArcSoft Inc..) - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
SR - Auto [2013/12/18 11:42:32] [ 65432] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Demand [2015/02/06 21:11:07] [ 267440] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - Auto [2011/05/24 23:17:32] [ 294400] AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
SR - Auto [2013/09/07 09:13:38] [ 55624] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - Auto [2010/07/29 18:45:48] [ 656672] Bluetooth Service (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SS - Demand [2013/10/16 13:29:30] [ 235216] McAfee Security Scan Component Host Service for Sony (McComponentHostServiceSony) . (.McAfee, Inc..) - C:\Program Files\Sony\MSS\3.8.130\McCHSvc.exe
SR - Auto [2009/08/10 15:46:08] [ 173312] Panda Software Controller (Panda Software Controller) . (.Panda Security, S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrlS.exe
SR - Auto [2012/10/17 10:51:30] [ 202016] Panda Function Service (PAVFNSVR) . (.Panda Security, S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
SR - Auto [2008/02/04 18:26:48] [ 62768] Panda Process Protection Service (PavPrSrv) . (.Panda Security, S.L..) - C:\Program Files\Common Files\Panda Security\PavShld\PavPrSrv.exe
SR - Auto [2010/06/04 11:37:50] [ 314176] Panda On-Access Anti-Malware Service (PAVSRV) . (.Panda Security, S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
SR - Auto [2010/11/27 00:55:42] [ 398176] PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
SR - Auto [2008/06/19 13:59:50] [ 108288] Panda IManager Service (PSIMSVC) . (.Panda Security S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
SR - Auto [2010/08/16 15:54:46] [ 28992] Panda PSK service (PskSvcRetail) . (.Panda Security, S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\psksvc.exe
SS - Auto [2014/04/03 20:21:48] [ 315008] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - Demand [2011/02/21 12:55:08] [ 113824] VAIO Content Importer (SOHCImp) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHCImp.exe
SS - Demand [2011/02/21 12:55:08] [ 67232] VAIO Device Searcher (SOHDs) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDs.exe
SS - Demand [2011/01/20 12:27:18] [ 228056] VAIO Entertainment Common Service (SpfService) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe
SR - Auto [2012/11/16 13:52:51] [ 156960] Panda TPSrv (TPSrv) . (.Panda Security, S.L..) - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
SR - Auto [2011/02/23 14:05:04] [ 105024] CamMonitor (uCamMonitor) . (.ArcSoft, Inc..) - C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
SR - Auto [2011/03/05 16:42:36] [ 64704] VAIO Event Service (VAIO Event Service) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
SS - Demand [2011/01/20 12:16:26] [ 887000] VAIO Content Folder Watcher (VCFw) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
SS - Demand [2011/05/19 19:15:44] [ 549616] VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
SS - Demand [2011/02/18 22:02:08] [ 385336] VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
SS - Demand [2011/02/18 22:15:04] [ 83232] VAIO Content Metadata XML Interface (VcmXmlIfHelper) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
SR - Demand [2014/12/03 19:51:20] [ 61552] VCService (VCService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Care\VCService.exe
SR - Auto [2011/07/04 13:46:00] [ 866952] VSNService (VSNService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
SR - Demand [2014/02/28 17:05:10] [ 1228336] VUAgent (VUAgent) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Update\VUAgent.exe

---\\ Scan Additionnel (O88) (3) - 0s
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{188f01ee-ed73-44cf-a6d5-e3ec645d5e13} =>PUP.MediaViewer
HKCU\SOFTWARE\Smartbar =>Hijacker.SmartBar
HKLM\SOFTWARE\Clients\StartMenuInternet\Beamrise.CIUSUNFPLRFSRJLGCHDVBXHN7M\shell\Open\command [Bad: C:\Users\flo et flo\AppData\Local\Beamrise\Application\beamrise.exe ] =>Hijacker.Beamrise

---\\ Récapitulatif des détections trouvées sur votre station (6) - 0s
http://www.nicolascoolman.fr/blog =>PUP.MediaViewer
http://www.nicolascoolman.fr/hijacker-smartbar/ =>Hijacker.SmartBar
http://www.nicolascoolman.fr/hijacker-beamrise/ =>Hijacker.Beamrise
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.IsStart
http://www.nicolascoolman.fr/hijacker-qvo6/ =>Hijacker.Qvo6
http://www.nicolascoolman.fr/pup-astromenda/ =>PUP.Astromenda

~ End of the scan, 76141 items in 1058 seconds (1149)(0)()

Publicité


Signaler le contenu de ce document

Publicité