cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.14.89 Par Nicolas Coolman (2015/07/14)
~ Démarré par RAMATOU (Administrator) (2015/07/14 15:48:28)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\RAMATOU\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\RAMATOU\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v43.0.2357.134
MSIE: Internet Explorer v11.0.9600.17843

---\\ Informations sur les produits Windows (3) - 8s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Activation Technologies : OK

---\\ Logiciels d'optimisation (1) - 1s
CCleaner v4.11

---\\ Surveillance de Logiciels (2) - 1s
Adobe Flash Player 10 Plugin
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 2882872
~ System Restore: Activé (Enable)
~ System drive C: has 301 GB free of 464 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: RAMATOU-PC
~ User Name: RAMATOU
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 301 GB free of 464 GB (System)
~ Drive D: has 1 GB free of 12 GB

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808]
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024]
[MD5.417F80E4AFBA1AA9EBBD618F1C6D9165] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2426880]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808]

---\\ Processus lancés (31) - 3s
[MD5.41B97DCE2B2D113B831EB197F02A7398] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 307.8.) -- C:\Windows\system32\nvvsvc.exe [878368] [PID.748]
[MD5.687E217865BE9353CD8A5EEA53F0E80A] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431177056-11DE-BF02-452472AE3ED6\jnsu81B.tmp [541696] [PID.1488] =>PUP.Optional.CrossRider
[MD5.9C0FF1D605A676B24B092B833C003763] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\hnsqAC47.tmp [193024] [PID.1516] =>PUP.Optional.CrossRider
[MD5.5C038EF07F50647A47BFA920FFF21E4A] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434111664-11DE-BF02-452472AE3ED6\knszE01C.tmp [288256] [PID.1556] =>PUP.Optional.CrossRider
[MD5.244B15C6A15D9864872680F9BB121C42] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429614214-11DE-BF02-452472AE3ED6\jnsi491F.tmp [197632] [PID.1580] =>PUP.Optional.CrossRider
[MD5.93D4CD532F2D61425CD71F4DEB5FD924] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436108346-11DE-BF02-452472AE3ED6\knskE0A9.tmp [287744] [PID.1604] =>PUP.Optional.CrossRider
[MD5.610FB042ACDDD74BABF934BF229439A4] - (...) -- C:\Program Files (x86)\PenWes\DNSService.exe [1655808] [PID.1672]
[MD5.A1EA9213704CFCE7A273B05FA473AFC9] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430381770-11DE-BF02-452472AE3ED6\jnsjCA02.tmp [118272] [PID.1700] =>PUP.Optional.CrossRider
[MD5.F660D12105DB68684762BE0E8581026A] - (...) -- C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904] [PID.1732] =>PUP.Optional.Pirrit
[MD5.0EE1BCFE56EF6C416FF0021A199EC2AF] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\jnsh3A12.tmp [307200] [PID.1804] =>PUP.Optional.CrossRider
[MD5.74E28771B00AFA677DDD35A85558D7F0] - (.Reimage® - Reimage Real Time Protection.) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [7414256] [PID.1828] =>PUP.Optional.ReImageRepair
[MD5.94FC1548D3AA733DF0A7846F1D388CE3] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\hnss54D5.tmp [335360] [PID.1912] =>PUP.Optional.CrossRider
[MD5.6AE944A2A81774768F77541907CB5F85] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427387030-11DE-BF02-452472AE3ED6\jnss6681.tmp [201216] [PID.1936] =>PUP.Optional.CrossRider
[MD5.6D6150098E2F00315C5E1160437CE997] - (...) -- C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe [6759912] [PID.1960] =>PUP.Optional.ReImageRepair
[MD5.E5699E11BE1396126D1BABB627286F60] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433504191-11DE-BF02-452472AE3ED6\hnsw9389.tmp [390144] [PID.568] =>PUP.Optional.CrossRider
[MD5.5628367FD57DA2153FD0A6CEF3B6211D] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\jnsa50CD.tmp [245760] [PID.1644] =>PUP.Optional.CrossRider
[MD5.2B639342639296899D5488CFFC6914B7] - (...) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435851315-11DE-BF02-452472AE3ED6\jnsf9CBE.tmp [199168] [PID.2084] =>PUP.Optional.CrossRider
[MD5.EBDE31F7CCFCBC5E73F067AF033009BD] - (.BrowserV14.07 - BrowserV14.07 exe.) -- C:\Program Files (x86)\BrowserV14.07\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6.exe [1573456] [PID.3020] =>PUP.Optional.CrossRider
[MD5.60F348942A3D537DBF9FB5B59DDE23CC] - (...) -- C:\Program Files (x86)\PenWes\dnshelper.exe [982016] [PID.2328]
[MD5.BB46A799524BC90BABDC165CC2C5E9EB] - (.BrowserV14.07 - BrowserV14.07 exe.) -- C:\Program Files (x86)\BrowserV14.07\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6.exe [1548880] [PID.2324] =>PUP.Optional.CrossRider
[MD5.125ABDA8B2831F8C273066D873BFD1C6] - (.zik.mu - 3D bubbleSound.) -- C:\Program Files\BubbleSound\3D BubbleSound.exe [14115328] [PID.640] =>PUP.Optional.BubbleSound
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040] [PID.3140]
[MD5.BDEFC081D02C162DCB90738BE432D66B] - (.Easybits - Software update notification.) -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504] [PID.3156]
[MD5.30426544CDDC55B8B71DEB556722ECE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [210216] [PID.3304]
[MD5.A3A25E0509F67473B960DAF214828BE3] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [1259296] [PID.3664]
[MD5.38A692748566C6EC854504EA8CA75D12] - (.Copyright 2013 - .) -- C:\Users\RAMATOU\AppData\Local\Temp\nsb28F7.tmp [226592] [PID.2608]
[MD5.B2B87E43A315EA1EB91CE837B1F01546] - (...) -- C:\Users\RAMATOU\AppData\Local\Temp\nsb6104.tmp [123469] [PID.6072]
[MD5.7FC85A306E8D76722C4ECD2465895E4E] - (...) -- C:\Users\RAMATOU\AppData\Local\Temp\setup_ra.exe [241728] [PID.4680]
[MD5.A70596738974142F69562EDB3CE30666] - (...) -- C:\Users\RAMATOU\AppData\Local\Temp\nsh5B67.tmp [229114] [PID.5784]
[MD5.98D9DEF6D52585E14E2453E8AADF1A8A] - (...) -- C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\upgmsd_fr_005010030.exe [3297936] [PID.5668] =>PUP.Optional.CrossRider
[MD5.B696E361B14B65FCDFB11D083D594389] - (...) -- C:\Program Files (x86)\gmsd_fr_005010030\gmsd_fr_005010030.exe [3987600] [PID.2148] =>PUP.Optional.CrossRider

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (9) - 0s
G2 - GCE: Extension [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [gfkbfjcbkhnmiignagpkiijohkcdkffb] Yahoo!
G2 - GCE: Extension [User Data\Default] [idhkmcfanijhphphomamdkaejjadkhgn] BrowserV14.07 =>PUP.Optional.CrossRider
G2 - GCE: Extension [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Extension [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (15) - 1s
P2 - EXT: (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(T.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=10] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=4] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (22) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://safesearch.avira.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://safesearch.avira.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://safesearch.avira.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://safesearch.avira.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://safesearch.avira.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://safesearch.avira.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Orphean

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (4) - 0s
O2 - BHO: (no name) [64Bits] - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} (Orphean)
O2 - BHO: (no name) [64Bits] - {70C53538-9F82-42BC-A327-74F7A46E700C} (Orphean)
O2 - BHO: (no name) [64Bits] - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} (Orphean)
O2 - BHO: (no name) [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} (Orphean)

---\\ Internet Explorer Toolbars (O3) (3) - 0s
O3 - Toolbar: 0xEF44FA216D37534D9B0F8A89D3229068 - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} . (...) -- (.not file.)
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)
O3 - Toolbar: Babylon Toolbar - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} . (...) -- (.not file.) =>PUP.Optional.Babylon

---\\ Applications lancées au démarrage du sytème (O4) (25) - 1s
O4 - HKLM\..\Run: [SmartMenu] . (.Copyright (C) 2009 Hewlett-Packard Development Compan - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
O4 - HKLM\..\Run: [3D BubbleSound] . (.zik.mu - 3D bubbleSound.) -- C:\Program Files\BubbleSound\3D BubbleSound.exe =>PUP.Optional.BubbleSound
O4 - HKCU\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [NextLive] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\SysWOW64\rundll32.exe
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_D2F07C70344FF14B06018E7F172D2F5B] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_191_ActiveX.exe
O4 - HKLM\..\Wow6432Node\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- c:\Program Files (x86)\hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_005010030.exe] . (...) -- C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\upgmsd_fr_005010030.exe =>PUP.Optional.CrossRider
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [NextLive] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\SysWOW64\rundll32.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\Run: [GoogleChromeAutoLaunch_D2F07C70344FF14B06018E7F172D2F5B] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - HKUS\S-1-5-21-3341020686-2736890573-1118094982-1000\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_191_ActiveX.exe

---\\ Raccourcis Global Startup (O4G) (8) - 2s
O4 - GS\Quicklaunch [Administrateur]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - GS\Startup [Administrateur]: lollipop.lnk . (...) C:\Users\RAMATOU\AppData\Local\Lollipop\Lollipop.exe =>PUP.Optional.Lollipop
O4 - GS\Quicklaunch [Invité]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - GS\Startup [Invité]: lollipop.lnk . (...) C:\Users\RAMATOU\AppData\Local\Lollipop\Lollipop.exe =>PUP.Optional.Lollipop
O4 - GS\Quicklaunch [RAMATOU]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - GS\Startup [RAMATOU]: lollipop.lnk . (...) C:\Users\RAMATOU\AppData\Local\Lollipop\Lollipop.exe =>PUP.Optional.Lollipop
O4 - GS\Quicklaunch [UpdatusUser]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - GS\Startup [UpdatusUser]: lollipop.lnk . (...) C:\Users\RAMATOU\AppData\Local\Lollipop\Lollipop.exe =>PUP.Optional.Lollipop

---\\ Winsock hijacker (Layered Service Provider) (O10) (5) - 0s
O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (...) -- C:\Windows\System32\Cofvopjy.dll (Not File) (Hijacker.Winsock)
O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (...) -- C:\Windows\System32\Cofvopjy.dll (Not File) (Hijacker.Winsock)
O10 - WLSP:\Catalog_Entries\000000000003\Winsock LSP File . (...) -- C:\Windows\System32\Cofvopjy.dll (Not File) (Hijacker.Winsock)
O10 - WLSP:\Catalog_Entries\000000000004\Winsock LSP File . (...) -- C:\Windows\System32\Cofvopjy.dll (Not File) (Hijacker.Winsock)
O10 - WLSP:\Catalog_Entries\000000000015\Winsock LSP File . (...) -- C:\Windows\System32\Cofvopjy.dll (Not File) (Hijacker.Winsock)

---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Liste des services NT non Microsoft et non désactivés (O23) (25) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: History Eject (hehopove) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431177056-11DE-BF02-452472AE3ED6\jnsu81B.tmp =>PUP.Optional.CrossRider
O23 - Service: Mathematical Calculation Alt Key (hodufije) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\hnsqAC47.tmp =>PUP.Optional.CrossRider
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: Paragraph Colon (jinezicy) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434111664-11DE-BF02-452472AE3ED6\knszE01C.tmp =>PUP.Optional.CrossRider
O23 - Service: Back-up Copy Design (jokidogy) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429614214-11DE-BF02-452472AE3ED6\jnsi491F.tmp =>PUP.Optional.CrossRider
O23 - Service: External Double Spaced (kezulyby) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436108346-11DE-BF02-452472AE3ED6\knskE0A9.tmp =>PUP.Optional.CrossRider
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 307.8.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: DNS Service (PenWesController) . (...) - C:\Program Files (x86)\PenWes\DNSService.exe
O23 - Service: High-tech Web Page (pevihymi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430381770-11DE-BF02-452472AE3ED6\jnsjCA02.tmp =>PUP.Optional.CrossRider
O23 - Service: PirritDesktop (PirritDesktop) . (...) - C:\Users\RAMATOU\AppData\Local\PirritSuggestor\PirritService.exe (.not file.) =>PUP.Optional.Pirrit
O23 - Service: PirritUpdater (PirritUpdater) . (...) - C:\Program Files (x86)\Pirrit\AutoUpdater.exe =>PUP.Optional.Pirrit
O23 - Service: Hands-free Question Mark (pogifipi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\jnsh3A12.tmp =>PUP.Optional.CrossRider
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage® - Reimage Real Time Protection.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>PUP.Optional.ReImageRepair
O23 - Service: Personal Digital Assistant Magenta (rinizisu) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\hnss54D5.tmp =>PUP.Optional.CrossRider
O23 - Service: Internet Zip Code (rytydexo) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427387030-11DE-BF02-452472AE3ED6\jnss6681.tmp =>PUP.Optional.CrossRider
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Replace Spell Checker (timuneqi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433504191-11DE-BF02-452472AE3ED6\hnsw9389.tmp =>PUP.Optional.CrossRider
O23 - Service: Dial Licence (tuleniwe) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\jnsa50CD.tmp =>PUP.Optional.CrossRider
O23 - Service: Typewriter High Resolution (zejytose) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435851315-11DE-BF02-452472AE3ED6\jnsf9CBE.tmp =>PUP.Optional.CrossRider

---\\ Tâches planifiées en automatique (O39) (120) - 3s
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\1caeac84-c46c-4532-9fe2-3533486cbf76.job [1414]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-1.job [3098] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-11.job [5170] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-2.job [2096] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-4.job [4144] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5.job [2432] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5_user.job [2432] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-6.job [4144] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-7.job [3800] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-6.job [3134] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-7.job [3470] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-10_user.job [2116] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-3.job [4490] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-5.job [2442] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-5_user.job [2442] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-6.job [5514] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-7.job [5178] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\A18tRSDn7H5gpYykm6.job [1016]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\APSnotifierPP1.job [378] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\APSnotifierPP2.job [376] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\APSnotifierPP3.job [376] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6.job [3126] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-7.job [3462] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-3.job [4482] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5.job [2434] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5_user.job [2434] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6.job [5506] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-7.job [5506] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Crossbrowse.job [1060] =>PUP.Optional.CrossBrowse
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\fec3efde-451b-433b-805b-d4e7bfd155d6-5.job [1490] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [950] =>PUP.Optional.GlobalUpdate
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job [954] =>PUP.Optional.GlobalUpdate
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\iWebar-chromeinstaller.job [1872] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\iWebar-codedownloader.job [1172] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\iWebar-enabler.job [1072] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\iWebar-firefoxinstaller.job [1938] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\iWebar-updater.job [1270] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\MySearchDial.job [300] =>PUP.Optional.MySearchDial
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Periodic Synchronize Task.job [344]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Plus-HD-4.7-chromeinstaller.job [1910] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Plus-HD-4.7-codedownloader.job [1202] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Plus-HD-4.7-enabler.job [1102] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\Superclean.job [344]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\1caeac84-c46c-4532-9fe2-3533486cbf76 [4444]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-1 [6128] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-11 [8200] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-2 [5126] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-4 [7174] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5 [5462] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5_user [5466] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-6 [7172] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-7 [6830] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-6 [6162] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-7 [6500] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-10_user [5148] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-3 [7520] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-5 [5472] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-5_user [5476] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-6 [8542] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-7 [8208] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\A18tRSDn7H5gpYykm6 [4050]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3886]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Apple Diagnostics [3428]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\APSnotifierPP1 [2832] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\APSnotifierPP2 [2830] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\APSnotifierPP3 [2830] =>PUP.Optional.AnyProtect
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\avabvexvac [3486]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\BackgroundContainer Startup Task [3382] =>PUP.Optional.Babylon
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6 [6154] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-7 [6492] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-3 [7512] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5 [5464] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5_user [5468] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6 [8534] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-7 [8536] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2776]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CLMLSvc [3214]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CNTGjUdnPBun3js [3244]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3544]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Crossbrowse [4094] =>PUP.Optional.CrossBrowse
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\DVDAgent [3164]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\ExtendedServicePlan [3424]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\fec3efde-451b-433b-805b-d4e7bfd155d6-5 [4520] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [3698] =>PUP.Optional.GlobalUpdate
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA [3952] =>PUP.Optional.GlobalUpdate
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3814]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4066]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\ilb5AtYl8Ffj6cS [3242]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\iWebar-chromeinstaller [4902] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\iWebar-codedownloader [4202] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\iWebar-enabler [4102] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\iWebar-firefoxinstaller [4968] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\iWebar-updater [4300] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\LaunchPreSignup [3992]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\LaunchSignup [4022]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\MaxComputerCleaner_Start [3228] =>PUP.Optional.MaxComputerCleaner
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\MySearchDial [3248] =>PUP.Optional.MySearchDial
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\PenWes [2970]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Periodic Synchronize Task [3260]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Plus-HD-4.7-chromeinstaller [4940] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Plus-HD-4.7-codedownloader [4232] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Plus-HD-4.7-enabler [4132] =>PUP.Optional.CrossRider
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\RecoveryCDWin7 [3714]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\ReimageUpdater [4282] =>PUP.Optional.ReImageRepair
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\ServicePlan [3414]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task [4046] =>PUP.Optional.SmartWebSearch
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Super Optimizer Schedule [3260] =>PUP.Optional.SuperOptimizer
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Superclean [3260]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\TaskUserUpdate_wp [2906]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\UKsqLsRv7KUlv2s [3284]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC [3188]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\WIN-statsAdmin [3310]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\WIN-statsSystem [3240]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{537AAEA1-94B6-4314-86EC-A34B9F124AE3} [3106]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{6DE58008-38DB-47B9-AC5C-6D8DE5952F28} [3138]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{ACD29A47-E2E9-4C2C-9E78-4055CB2D109B} [3148]

---\\ Logiciels installés (O42) (52) - 8s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Reimage Protector - (.Reimage.) [HKLM][64Bits] -- Reimage Protector =>PUP.Optional.ReImageRepair
O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM][64Bits] -- {309768A4-A2BB-4930-A5A2-8169678C9B4C}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM][64Bits] -- {88E60521-1E4E-4785-B9F1-1798A4BD0C30}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}
O42 - Logiciel: NVIDIA Pilote graphique 307.83 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: Mises à jour NVIDIA 1.10.8 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}
O42 - Logiciel: Adobe Flash Player 17 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: BrowserV14.07 - (.BrowserV14.07.) [HKLM][64Bits] -- BrowserV14.07 =>PUP.Optional.CrossRider
O42 - Logiciel: GamesDesktop 001.005010030 - (.GAMESDESKTOP.) [HKLM][64Bits] -- gmsd_fr_005010030_is1 =>PUP.Optional.GamesDesktop
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: HP Remote Solution - (.Hewlett-Packard.) [HKLM][64Bits] -- HP Remote Solution
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}
O42 - Logiciel: Anti virus et publicités sur Internet [11355] - (...) [HKLM][64Bits] -- Penwes
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall =>.WildTangent
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {17B4760F-334B-475D-829F-1A3E94A6A4E6}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {3023EBDA-BF1B-4831-B347-E5018555F26E}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {78002155-F025-4070-85B3-7C0453561701}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: HP Product Detection - (.HP.) [HKLM][64Bits] -- {A436F67F-687E-4736-BD2B-537121A804CF}
O42 - Logiciel: globalupdate Helper - (.globalupdate Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824144531}
O42 - Logiciel: Adobe Reader XI (11.0.11) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: HP Remote Solution - (.Hewlett-Packard.) [HKLM][64Bits] -- {C611CF88-969D-43E6-A877-D6D6439DD081}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}

---\\ HKCU & HKLM Software Keys (173) - 8s
HKLM\SOFTWARE\Wow6432Node\43b48def-e762-4e78-b467-b86662640e44 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\5990fb37-a4d6-49d5-e507-8e9264c6a2f9 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\ALWIL Software
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\Avg
HKLM\SOFTWARE\Wow6432Node\awesomehpSoftware =>PUP.Optional.AwesomeHP
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Boost
HKLM\SOFTWARE\Wow6432Node\Boxore =>PUP.Optional.Boxore
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Cinema PlusV14.04
HKLM\SOFTWARE\Wow6432Node\Cinema PlusV14.04-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Cinema PlusV14.04-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Data Fellows
HKLM\SOFTWARE\Wow6432Node\dotNetInstaller
HKLM\SOFTWARE\Wow6432Node\EasyBits
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IGS
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\Wow6432Node\MimarSinan
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKLM\SOFTWARE\Wow6432Node\OldTimer Tools
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\P1-App =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\PENSEWEB
HKLM\SOFTWARE\Wow6432Node\Pirrit =>PUP.Optional.Pirrit
HKLM\SOFTWARE\Wow6432Node\Pirrit Solutions =>PUP.Optional.Pirrit
HKLM\SOFTWARE\Wow6432Node\Pricora 12.0 =>PUP.Optional.Pricora
HKLM\SOFTWARE\Wow6432Node\QuickRef_1.10.0.9 =>PUP.Optional.QuickRef
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RST
HKLM\SOFTWARE\Wow6432Node\searchult =>PUP.Optional
HKLM\SOFTWARE\Wow6432Node\SI-App =>PUP.Optional.WinRST
HKLM\SOFTWARE\Wow6432Node\SiteWhatsapp
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\TabNav =>PUP.Optional.Abengine
HKLM\SOFTWARE\Wow6432Node\Taronja
HKLM\SOFTWARE\Wow6432Node\troll
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\Upt
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Wilson WindowWare
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\winservice86 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\winservice86-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Winservices
HKLM\SOFTWARE\Wow6432Node\WinU
HKLM\SOFTWARE\Wow6432Node\WinUpd =>PUP.Optional.WinRST
HKLM\SOFTWARE\Wow6432Node\WordSurfer_1.10.0.19 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\A18tRSDn7H5gpYykm6
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\ALWIL Software
HKCU\SOFTWARE\AnyProtect =>PUP.Optional.AnyProtect
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\Appscion =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Avg
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\Boost
HKCU\SOFTWARE\Boxore =>PUP.Optional.Boxore
HKCU\SOFTWARE\BrowserV14.07 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\BrowserV14.07-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\BrowserV14.07-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\cacaoweb =>PUP.Optional.CacaoWeb
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Cinema PlusV14.04-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Cinema PlusV14.04-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\e55dc8fe538e448
HKCU\SOFTWARE\Ecommfactory
HKCU\SOFTWARE\freesofttoday =>PUP.Optional.Multiplug
HKCU\SOFTWARE\GameHouse
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\GOffers
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LogMeInRescueCallingCard
HKCU\SOFTWARE\lollipop =>PUP.Optional.Lollipop
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\MaxComputerCleanerLanguage =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\maxcomputerclenner =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\MGinstall
HKCU\SOFTWARE\MimarSinan
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OfferBox =>PUP.Optional.OfferBox
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PC-Doctor
HKCU\SOFTWARE\PerformerSoft LLC =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PowerPack
HKCU\SOFTWARE\RapidMediaConverterApp =>PUP.Optional.RapidMediaConverter
HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\reimagerepair =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\SimplyTech =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Yahoo
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\BlockAndSurf =>PUP.Optional.BlockAndSurf
HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\ConduitSearchScopes =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\iWebar =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Plus-HD-4.7 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\PriceGong =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\PriceGong2 =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\Savings Bull
HKCU\SOFTWARE\AppDataLow\Software\Smartbar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\AppDataLow\Software\winservice86 =>PUP.Optional.CrossRider

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (885) - 43s
O43 - CFD: 2015/04/14 19:51:54 - [0] D -- C:\Program Files (x86)\092286ba-0823-44c3-a540-fc0ca0f85d2c =>PUP.Optional.CrossRider
O43 - CFD: 2015/07/14 14:43:12 - [] D -- C:\Program Files (x86)\830217a9-69d3-4765-91c3-cc128faee89e =>PUP.Optional.CrossRider
O43 - CFD: 2010/04/02 17:43:53 - [] D -- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 2014/05/10 13:28:25 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2011/06/30 00:01:43 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2010/07/19 20:50:54 - [] D -- C:\Program Files (x86)\AVG
O43 - CFD: 2015/03/14 14:19:22 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2015/07/14 14:43:37 - [] D -- C:\Program Files (x86)\BrowserV14.07 =>PUP.Optional.CrossRider
O43 - CFD: 2015/04/23 18:47:12 - [] D -- C:\Program Files (x86)\Cinema PlusV14.04
O43 - CFD: 2015/04/14 19:51:26 - [0] D -- C:\Program Files (x86)\Cinema PlusV14.04-ntf
O43 - CFD: 2015/04/16 03:13:39 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2014/03/04 19:10:44 - [] D -- C:\Program Files (x86)\Conduit
O43 - CFD: 2015/07/14 14:41:32 - [] D -- C:\Program Files (x86)\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2014/03/17 20:21:46 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 2015/07/05 15:01:44 - [] D -- C:\Program Files (x86)\eDealPop =>PUP.Optional.eDeals
O43 - CFD: 2014/08/16 16:01:17 - [0] D -- C:\Program Files (x86)\eDealsPop
O43 - CFD: 2015/07/14 14:42:47 - [] D -- C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/07/14 15:31:21 - [] D -- C:\Program Files (x86)\gmsd_fr_005010030 =>PUP.Optional.CrossRider
O43 - CFD: 2015/07/14 15:30:35 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2013/07/15 23:10:57 - [] D -- C:\Program Files (x86)\GUM1EFC.tmp
O43 - CFD: 2014/03/07 19:03:01 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2015/07/04 23:13:57 - [] D -- C:\Program Files (x86)\HighlightSearches
O43 - CFD: 2009/12/08 05:42:08 - [] D -- C:\Program Files (x86)\hp
O43 - CFD: 2010/04/13 19:25:23 - [] D -- C:\Program Files (x86)\HP Games
O43 - CFD: 2014/06/15 15:03:58 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/06/10 19:02:48 - [] D -- C:\Program Files (x86)\Internet explorer
O43 - CFD: 2014/02/22 22:03:20 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2010/07/20 00:12:01 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2014/03/17 20:26:02 - [0] D -- C:\Program Files (x86)\MediaViewV1 =>PUP.Optional.MediaViewer
O43 - CFD: 2014/02/07 20:53:31 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/05/13 17:46:35 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2009/12/08 06:06:42 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2014/02/07 20:53:48 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 2014/02/07 20:51:03 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2012/10/10 21:42:38 - [] D -- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 2010/06/26 22:07:20 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2014/01/17 19:10:10 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2014/02/07 20:54:00 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2014/03/19 23:59:51 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2010/05/02 19:31:26 - [] RD -- C:\Program Files (x86)\Online Services
O43 - CFD: 2015/07/14 15:02:41 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2015/05/25 14:22:44 - [] D -- C:\Program Files (x86)\PenWes
O43 - CFD: 2014/02/25 20:06:14 - [] D -- C:\Program Files (x86)\Pirrit =>PUP.Optional.Pirrit
O43 - CFD: 2014/03/08 20:50:52 - [0] D -- C:\Program Files (x86)\predm =>PUP.Optional.Downware
O43 - CFD: 2015/07/04 23:12:32 - [0] D -- C:\Program Files (x86)\Pricora 12.0 =>PUP.Optional.Pricora
O43 - CFD: 2015/03/26 19:09:22 - [] D -- C:\Program Files (x86)\QuickRef_1.10.0.9 =>PUP.Optional.QuickRef
O43 - CFD: 2014/02/22 21:52:58 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2009/12/08 05:29:29 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/07/05 15:53:38 - [] D -- C:\Program Files (x86)\SearchProtect =>PUP.SearchProtect
O43 - CFD: 2014/02/25 16:42:39 - [] D -- C:\Program Files (x86)\SearchProtect3867108 =>PUP.SearchProtect
O43 - CFD: 2015/04/16 03:13:39 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/03/10 00:02:35 - [] D -- C:\Program Files (x86)\Software
O43 - CFD: 2009/12/08 05:29:41 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2012/02/13 13:23:47 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2013/07/12 13:44:05 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2013/12/17 18:51:44 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2012/02/06 13:14:47 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/06/10 19:03:05 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2012/02/06 13:14:47 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2012/02/06 13:14:47 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2012/02/06 13:14:47 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2014/02/25 20:06:40 - [] D -- C:\Program Files (x86)\WinRST =>PUP.Optional.WinRST
O43 - CFD: 2015/05/26 22:06:50 - [] D -- C:\Program Files (x86)\winservice86 =>PUP.Optional.CrossRider
O43 - CFD: 2014/11/07 17:50:20 - [] D -- C:\Program Files (x86)\WinServices =>Trojan.Inject.RRE
O43 - CFD: 2009/12/08 05:20:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/12/13 15:32:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector =>PUP.Optional.AdvancedSystemProtector
O43 - CFD: 2014/03/21 10:49:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2014/06/16 21:25:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/07/14 15:31:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop
O43 - CFD: 2015/07/14 15:30:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2012/02/03 12:21:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2014/03/07 19:11:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
O43 - CFD: 2015/03/14 14:21:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 2014/02/22 22:03:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2010/04/01 21:24:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Les manuels de l'utilisateur
O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/02/07 21:03:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/05/13 17:47:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2012/10/10 21:42:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
O43 - CFD: 2010/04/13 19:25:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My HP Games
O43 - CFD: 2010/05/02 19:31:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
O43 - CFD: 2014/03/17 20:18:53 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools
O43 - CFD: 2014/02/22 21:52:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2009/12/08 06:10:34 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
O43 - CFD: 2015/04/16 03:13:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2014/01/17 18:59:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2009/07/14 09:44:38 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2012/02/13 13:24:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2012/06/22 17:59:21 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2014/02/22 22:03:22 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2015/04/28 16:51:03 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2014/02/22 21:57:54 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2011/03/19 22:05:25 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/11/22 12:18:09 - [] D -- C:\ProgramData\atjs
O43 - CFD: 2014/01/17 12:51:05 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2010/04/01 21:24:09 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2013/12/02 21:31:37 - [] D -- C:\ProgramData\Conduit
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2014/02/25 16:23:55 - [] D -- C:\ProgramData\Easybits Magic Desktop for HP
O43 - CFD: 2010/04/12 20:31:02 - [] D -- C:\ProgramData\f-secure
O43 - CFD: 2010/04/01 21:24:09 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2010/04/12 20:59:24 - [] D -- C:\ProgramData\fssg
O43 - CFD: 2012/02/10 13:37:54 - [] D -- C:\ProgramData\Google
O43 - CFD: 2014/03/07 18:57:46 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2015/05/20 16:17:03 - [] D -- C:\ProgramData\MailUpdate =>PUP.Optional.MailUpdate
O43 - CFD: 2012/02/10 16:23:24 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2010/04/01 21:24:09 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2014/12/13 11:24:24 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/06/10 16:15:15 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2010/04/01 21:24:09 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2014/03/19 23:59:58 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2014/03/19 23:58:14 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2015/07/14 13:39:49 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2015/06/15 15:15:05 - [] D -- C:\ProgramData\Penwes
O43 - CFD: 2010/04/16 10:46:14 - [] D -- C:\ProgramData\Recovery
O43 - CFD: 2014/08/05 14:38:21 - [] D -- C:\ProgramData\Reimage Protector =>PUP.Optional.ReImageRepair
O43 - CFD: 2015/04/16 03:13:46 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2010/04/23 21:57:21 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2009/12/08 06:10:18 - [] D -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2010/05/23 12:21:47 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2014/03/17 19:28:28 - [0] D -- C:\ProgramData\WinZip
O43 - CFD: 2015/05/02 16:13:20 - [] D -- C:\ProgramData\{03a2cf8a-c8ec-c60c-03a2-2cf8ac8e3e2b}
O43 - CFD: 2015/05/01 16:19:59 - [] D -- C:\ProgramData\{09257c8c-6477-723c-0925-57c8c647f231}
O43 - CFD: 2015/05/09 17:08:28 - [] D -- C:\ProgramData\{0b2a68fa-2d0a-1028-0b2a-a68fa2d0a3e8}
O43 - CFD: 2015/06/30 23:04:18 - [] D -- C:\ProgramData\{0ff2e0b0-f987-4c24-0ff2-2e0b0f9882c3}
O43 - CFD: 2014/03/07 18:59:38 - [] D -- C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
O43 - CFD: 2015/04/23 18:46:53 - [] D -- C:\ProgramData\{1f609533-9f42-2664-1f60-095339f454ce}
O43 - CFD: 2015/04/16 11:53:35 - [] D -- C:\ProgramData\{2238a65f-670d-ce00-2238-8a65f670997d}
O43 - CFD: 2015/04/23 13:42:22 - [] D -- C:\ProgramData\{2cb134b1-ce16-43b7-2cb1-134b1ce1d2c7}
O43 - CFD: 2015/07/04 23:12:17 - [] D -- C:\ProgramData\{302620a5-507d-dd8f-3026-620a55078295}
O43 - CFD: 2015/04/23 17:07:18 - [] D -- C:\ProgramData\{3c50497d-3bfd-1165-3c50-0497d3bf25f4}
O43 - CFD: 2015/07/08 21:38:52 - [] D -- C:\ProgramData\{3f25d5f0-a803-e217-3f25-5d5f0a8057c2}
O43 - CFD: 2015/05/26 22:06:09 - [] D -- C:\ProgramData\{56a102ae-8bb9-705d-56a1-102ae8bb0aba}
O43 - CFD: 2015/07/04 17:06:26 - [] D -- C:\ProgramData\{591e4ae8-8f82-36ee-591e-e4ae88f82ba2}
O43 - CFD: 2015/05/04 21:41:41 - [] D -- C:\ProgramData\{5bdc2c5e-86ae-6f4f-5bdc-c2c5e86ab17a}
O43 - CFD: 2015/06/23 15:29:48 - [] D -- C:\ProgramData\{6c7d267f-6c49-bd5f-6c7d-d267f6c499fd}
O43 - CFD: 2015/07/04 23:12:17 - [] D -- C:\ProgramData\{6d940d34-9a73-e5b1-6d94-40d349a734d2}
O43 - CFD: 2015/07/04 23:12:17 - [] D -- C:\ProgramData\{75b31953-01a2-9bb4-75b3-3195301a654c}
O43 - CFD: 2015/04/10 16:40:33 - [] D -- C:\ProgramData\{83655fb5-bec8-013c-8365-55fb5bec7ed6}
O43 - CFD: 2015/07/04 23:12:03 - [] D -- C:\ProgramData\{8838255d-7c2a-e649-8838-8255d7c29575}
O43 - CFD: 2015/07/04 23:11:48 - [] D -- C:\ProgramData\{8b5ed993-3495-b7fa-8b5e-ed993349664c}
O43 - CFD: 2015/07/04 23:11:33 - [] D -- C:\ProgramData\{8f2bc676-440d-80f6-8f2b-bc67644019d9}
O43 - CFD: 2015/04/23 18:46:43 - [] D -- C:\ProgramData\{915832cc-b66a-ff11-9158-832ccb66cb32}
O43 - CFD: 2011/03/19 22:06:04 - [] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 2015/07/04 23:11:18 - [] D -- C:\ProgramData\{958c627a-7e25-5880-958c-c627a7e289e9}
O43 - CFD: 2015/07/04 23:11:18 - [] D -- C:\ProgramData\{990832f9-c72c-92e8-9908-832f9c72cbe7}
O43 - CFD: 2015/07/04 23:11:17 - [] D -- C:\ProgramData\{9b0a023e-c7f1-beb8-9b0a-a023ec7f08fb}
O43 - CFD: 2015/07/04 23:11:17 - [] D -- C:\ProgramData\{9bc92e1b-0a8b-0610-9bc9-92e1b0a8b86c}
O43 - CFD: 2015/07/11 15:45:49 - [] D -- C:\ProgramData\{a0538b21-8d47-fbd3-a053-38b218d42c86}
O43 - CFD: 2015/05/26 17:30:01 - [] D -- C:\ProgramData\{a656ce6f-6c72-b306-a656-6ce6f6c739bd}
O43 - CFD: 2015/06/25 20:35:00 - [] D -- C:\ProgramData\{b0c88b8d-8c6e-6a5a-b0c8-88b8d8c62e36}
O43 - CFD: 2010/04/02 17:43:54 - [] D -- C:\ProgramData\{B3C2C1CD-6B77-4A96-B670-F734AC2A1CBC}
O43 - CFD: 2015/04/23 18:46:35 - [] D -- C:\ProgramData\{b6ddf660-20e0-d694-b6dd-df66020ed980}
O43 - CFD: 2015/07/04 23:11:03 - [] D -- C:\ProgramData\{b754d23c-36d1-4035-b754-4d23c36d48f0}
O43 - CFD: 2015/07/04 23:10:49 - [] D -- C:\ProgramData\{c698e59c-01bd-5184-c698-8e59c01b9670}
O43 - CFD: 2015/05/16 12:50:47 - [] D -- C:\ProgramData\{c8d8201c-278b-9c49-c8d8-8201c2788070}
O43 - CFD: 2015/04/21 13:12:26 - [] D -- C:\ProgramData\{cb23ba5d-2d7c-7d31-cb23-3ba5d2d7e974}
O43 - CFD: 2015/05/03 16:16:35 - [] D -- C:\ProgramData\{cef8653a-3677-56b4-cef8-8653a36794e8}
O43 - CFD: 2015/04/16 11:53:47 - [] D -- C:\ProgramData\{d3ba6983-75c7-2eec-d3ba-a698375ca60d}
O43 - CFD: 2015/07/04 23:10:35 - [] D -- C:\ProgramData\{d40f9ef6-a811-cca2-d40f-f9ef6a817bda}
O43 - CFD: 2009/12/08 05:28:10 - [] HDC -- C:\ProgramData\{D441869F-BEC4-446D-9888-C5CA29F160F9}
O43 - CFD: 2015/05/03 20:47:03 - [] D -- C:\ProgramData\{d56c8e1a-ba33-96a7-d56c-c8e1aba3386a}
O43 - CFD: 2015/07/04 23:10:34 - [] D -- C:\ProgramData\{d6fc6762-b8e2-335f-d6fc-c6762b8e9d8a}
O43 - CFD: 2015/05/02 17:38:24 - [] D -- C:\ProgramData\{e3270141-137a-4834-e327-701411370504}
O43 - CFD: 2015/07/02 17:35:49 - [] D -- C:\ProgramData\{eb6b07f4-2168-0cb9-eb6b-b07f42161fd0}
O43 - CFD: 2015/07/09 16:43:32 - [] D -- C:\ProgramData\{ecb7caac-3324-3e18-ecb7-7caac3322ab0}
O43 - CFD: 2015/07/04 23:10:20 - [] D -- C:\ProgramData\{f3deba79-aec9-a9e8-f3de-eba79aece9e6}
O43 - CFD: 2015/07/04 23:10:20 - [] D -- C:\ProgramData\{f5a836f2-7124-eda1-f5a8-836f2712dbc9}
O43 - CFD: 2015/07/01 14:17:06 - [] D -- C:\ProgramData\{f8928361-6eac-2fb2-f892-283616ea0d85}
O43 - CFD: 2015/04/14 19:51:39 - [] D -- C:\ProgramData\{fd390163-1c1a-4eda-fd39-901631c1058c}
O43 - CFD: 2014/05/10 13:28:31 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2015/03/14 14:20:35 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2014/05/14 22:26:45 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2009/12/08 05:29:26 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2010/07/20 00:14:49 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2014/03/08 21:30:37 - [] AD -- C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 2009/12/08 05:40:15 - [] AD -- C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 2014/02/08 17:17:23 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/04/16 03:13:39 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2014/02/25 19:29:44 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2014/02/09 22:16:22 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2009/12/08 06:01:13 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2015/02/24 18:29:43 - [] D -- C:\Users\RAMATOU\AppData\Roaming\5so57Zp
O43 - CFD: 2014/03/08 20:55:14 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\Activeris =>PUP.Optional.Activeris
O43 - CFD: 2015/05/07 17:31:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Adobe
O43 - CFD: 2015/07/14 15:32:27 - [] SHD -- C:\Users\RAMATOU\AppData\Roaming\AnyProtectEx =>PUP.Optional.AnyProtect
O43 - CFD: 2015/03/14 18:12:58 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Apple Computer
O43 - CFD: 2014/03/17 20:14:44 - [] D -- C:\Users\RAMATOU\AppData\Roaming\awesomehp =>PUP.Optional.AwesomeHP
O43 - CFD: 2012/10/18 18:09:13 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/03/28 22:30:00 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427387030-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/03/27 16:14:25 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427465664-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/03/29 12:59:49 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427626788-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/03/29 15:06:08 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427634364-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/03/30 16:40:51 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427726450-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/30 11:54:20 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1428753696-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429024200-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/14 20:04:44 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429034683-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429176966-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429265511-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429614214-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/23 13:00:30 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429786829-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/24 16:42:51 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429886563-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/24 17:43:40 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429890197-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/25 12:55:18 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429959309-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/27 22:57:02 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430168220-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430381770-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/03 15:34:55 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430660094-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430839162-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/10 19:06:30 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431177056-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/10 15:33:17 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431264797-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/12 17:26:35 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431444395-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/19 18:17:40 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/20 16:03:58 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432130638-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/21 11:04:35 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432199073-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/21 11:48:18 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432201676-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/23 14:11:12 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432383071-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/25 14:14:46 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432556083-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432985666-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/01 18:51:03 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433177462-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433413904-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/09 22:03:55 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433504191-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 16:33:14 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433591481-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/09 20:36:04 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433874958-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/09 20:36:04 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433874959-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/10 16:44:24 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433947457-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/11 16:32:00 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434111664-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/20 01:11:18 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434473663-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/20 01:11:18 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434557104-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/11 16:26:25 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434721182-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/20 14:30:26 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434803417-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/21 17:15:33 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434899724-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/23 16:09:29 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435068560-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/25 14:24:12 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435234933-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/11 16:26:25 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435851315-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/05 14:58:20 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436101099-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/11 16:32:01 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436108346-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/09 14:39:21 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436445561-11DE-BF02-452472AE3ED6
O43 - CFD: 2013/05/26 23:14:06 - [] D -- C:\Users\RAMATOU\AppData\Roaming\cacaoweb =>PUP.Optional.CacaoWeb
O43 - CFD: 2010/04/01 21:42:57 - [] D -- C:\Users\RAMATOU\AppData\Roaming\CyberLink
O43 - CFD: 2015/03/14 13:03:38 - [] D -- C:\Users\RAMATOU\AppData\Roaming\gBU3kJ1
O43 - CFD: 2010/07/20 13:11:46 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Google
O43 - CFD: 2010/05/02 19:15:57 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Hewlett-Packard
O43 - CFD: 2014/02/28 16:19:59 - [] D -- C:\Users\RAMATOU\AppData\Roaming\HP Support Assistant
O43 - CFD: 2013/03/29 12:59:51 - [] D -- C:\Users\RAMATOU\AppData\Roaming\hpqLog
O43 - CFD: 2014/02/28 16:19:59 - [] D -- C:\Users\RAMATOU\AppData\Roaming\HpUpdate
O43 - CFD: 2014/11/22 12:18:09 - [] D -- C:\Users\RAMATOU\AppData\Roaming\hQi8cg3
O43 - CFD: 2010/04/01 21:28:01 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Identities
O43 - CFD: 2014/01/17 19:10:09 - [] D -- C:\Users\RAMATOU\AppData\Roaming\IminentToolbar =>PUP.Optional.IMBooster
O43 - CFD: 2010/04/09 18:11:37 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Macromedia
O43 - CFD: 2015/05/19 17:00:11 - [] D -- C:\Users\RAMATOU\AppData\Roaming\MailUpdate =>PUP.Optional.MailUpdate
O43 - CFD: 2012/02/10 16:23:28 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Malwarebytes
O43 - CFD: 2009/07/14 09:44:38 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/06/11 15:52:26 - [] SD -- C:\Users\RAMATOU\AppData\Roaming\Microsoft
O43 - CFD: 2014/03/08 15:19:52 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Mozilla
O43 - CFD: 2015/02/19 13:44:40 - [] D -- C:\Users\RAMATOU\AppData\Roaming\newnext.me =>PUP.Optional.NextLive
O43 - CFD: 2014/03/08 21:19:24 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
O43 - CFD: 2014/01/17 18:44:01 - [] D -- C:\Users\RAMATOU\AppData\Roaming\OfferBox =>PUP.Optional.OfferBox
O43 - CFD: 2015/07/14 15:02:20 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\Opera Software
O43 - CFD: 2014/03/08 21:22:47 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\PerformerSoft =>PUP.Optional.PerformerSoft
O43 - CFD: 2014/03/04 19:11:10 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Pirrit =>PUP.Optional.Pirrit
O43 - CFD: 2010/04/03 20:10:56 - [] D -- C:\Users\RAMATOU\AppData\Roaming\PlayFirst
O43 - CFD: 2015/07/11 16:37:27 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Skype
O43 - CFD: 2010/05/04 20:54:01 - [] D -- C:\Users\RAMATOU\AppData\Roaming\Template
O43 - CFD: 2015/02/24 18:29:44 - [] D -- C:\Users\RAMATOU\AppData\Roaming\UsCJgIG
O43 - CFD: 2014/03/17 19:26:21 - [] D -- C:\Users\RAMATOU\AppData\Roaming\uTorrent
O43 - CFD: 2014/03/04 19:10:48 - [] D -- C:\Users\RAMATOU\AppData\Roaming\ValueApps
O43 - CFD: 2012/02/13 14:58:38 - [] D -- C:\Users\RAMATOU\AppData\Roaming\vlc
O43 - CFD: 2015/03/14 13:04:25 - [] D -- C:\Users\RAMATOU\AppData\Roaming\vnNhNDl
O43 - CFD: 2010/04/03 20:10:35 - [] D -- C:\Users\RAMATOU\AppData\Roaming\WildTangent
O43 - CFD: 2010/04/23 17:57:57 - [] D -- C:\Users\RAMATOU\AppData\Roaming\WinBatch
O43 - CFD: 2010/05/18 22:42:43 - [0] D -- C:\Users\RAMATOU\AppData\Roaming\Windows Live Writer
O43 - CFD: 2010/07/19 20:42:28 - [] D -- C:\Users\RAMATOU\AppData\Roaming\WinRAR
O43 - CFD: 2014/10/07 14:16:27 - [] D -- C:\Users\RAMATOU\AppData\Roaming\winservices =>Trojan.Inject.RRE
O43 - CFD: 2015/07/09 15:42:30 - [] D -- C:\Users\RAMATOU\AppData\Roaming\wp_update =>PUP.Optional.WpManager
O43 - CFD: 2015/07/14 15:48:47 - [] D -- C:\Users\RAMATOU\AppData\Roaming\ZHP
O43 - CFD: 2015/05/10 16:48:47 - [] D -- C:\Users\RAMATOU\AppData\Local\Adobe
O43 - CFD: 2011/03/19 22:04:05 - [] D -- C:\Users\RAMATOU\AppData\Local\Apple
O43 - CFD: 2015/03/14 15:31:53 - [] D -- C:\Users\RAMATOU\AppData\Local\Apple Computer
O43 - CFD: 2015/03/14 15:44:26 - [] D -- C:\Users\RAMATOU\AppData\Local\Apple Inc
O43 - CFD: 2010/04/01 21:24:17 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\Application Data
O43 - CFD: 2012/10/19 16:21:08 - [] D -- C:\Users\RAMATOU\AppData\Local\Apps
O43 - CFD: 2015/06/06 15:43:14 - [] D -- C:\Users\RAMATOU\AppData\Local\avabvbxvh
O43 - CFD: 2015/07/03 12:56:04 - [] D -- C:\Users\RAMATOU\AppData\Local\avabvexvac
O43 - CFD: 2014/01/17 18:53:27 - [] D -- C:\Users\RAMATOU\AppData\Local\BeamriseUninstall =>PUP.Optional.Beamrise
O43 - CFD: 2015/03/14 18:12:58 - [] D -- C:\Users\RAMATOU\AppData\Local\C7AA1A53-0D8A-48EB-B3AA-22E0F19F4370.aplzod
O43 - CFD: 2015/04/16 11:54:01 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1427390882-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/23 18:46:28 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1428761116-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/04/30 09:58:39 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1429621647-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/09 14:10:47 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1430389255-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/19 15:54:41 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1431184479-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/05/28 12:48:40 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1432052431-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/05 13:24:57 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1432818330-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/06 12:59:25 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1433511582-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/07/04 23:09:51 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1434119061-11DE-BF02-452472AE3ED6
O43 - CFD: 2015/06/20 14:26:35 - [] D -- C:\Users\RAMATOU\AppData\Local\CA42BFAC-1434728571-11DE-BF02-452472AE3ED6
O43 - CFD: 2014/02/25 20:02:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\cache
O43 - CFD: 2014/07/26 13:05:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\CheckCode
O43 - CFD: 2014/03/08 20:51:56 - [] D -- C:\Users\RAMATOU\AppData\Local\Conduit
O43 - CFD: 2015/07/14 15:45:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\CrashDumps
O43 - CFD: 2015/05/18 19:50:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\CRE
O43 - CFD: 2015/07/14 14:41:47 - [] D -- C:\Users\RAMATOU\AppData\Local\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2010/04/01 21:36:43 - [] D -- C:\Users\RAMATOU\AppData\Local\CyberLink
O43 - CFD: 2012/10/19 16:21:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\Deployment
O43 - CFD: 2014/12/17 17:33:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\Diagnostics
O43 - CFD: 2015/07/05 17:01:28 - [] D -- C:\Users\RAMATOU\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/07/05 15:01:29 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/07/05 15:01:29 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\EmieSiteList
O43 - CFD: 2015/07/05 15:01:29 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\EmieUserList
O43 - CFD: 2015/03/29 17:02:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\genienext =>PUP.Optional.NextLive
O43 - CFD: 2014/05/29 16:51:07 - [] D -- C:\Users\RAMATOU\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/07/14 15:36:24 - [] D -- C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030 =>PUP.Optional.CrossRider
O43 - CFD: 2013/02/07 14:32:00 - [] D -- C:\Users\RAMATOU\AppData\Local\Google
O43 - CFD: 2015/06/11 15:07:42 - [] D -- C:\Users\RAMATOU\AppData\Local\GWX
O43 - CFD: 2015/02/27 13:45:32 - [] D -- C:\Users\RAMATOU\AppData\Local\Helper
O43 - CFD: 2015/02/27 13:45:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\HelperApp
O43 - CFD: 2010/05/11 11:47:42 - [] D -- C:\Users\RAMATOU\AppData\Local\Hewlett-Packard
O43 - CFD: 2010/04/01 21:24:17 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\Historique
O43 - CFD: 2014/02/25 19:37:44 - [] D -- C:\Users\RAMATOU\AppData\Local\Lollipop =>PUP.Optional.Lollipop
O43 - CFD: 2015/05/25 14:22:20 - [] D -- C:\Users\RAMATOU\AppData\Local\Max_Computer_Cleaner =>PUP.Optional.MaxComputerCleaner
O43 - CFD: 2015/07/14 14:56:16 - [] D -- C:\Users\RAMATOU\AppData\Local\Microsoft
O43 - CFD: 2014/09/20 19:21:07 - [] D -- C:\Users\RAMATOU\AppData\Local\Microsoft Games
O43 - CFD: 2010/04/02 17:40:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\Microsoft Help
O43 - CFD: 2014/03/08 21:13:47 - [] D -- C:\Users\RAMATOU\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 2013/12/02 21:30:10 - [] D -- C:\Users\RAMATOU\AppData\Local\Mozilla
O43 - CFD: 2014/03/08 21:11:45 - [] D -- C:\Users\RAMATOU\AppData\Local\NativeMessaging
O43 - CFD: 2015/07/14 15:02:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\Opera Software
O43 - CFD: 2010/04/01 21:36:41 - [] D -- C:\Users\RAMATOU\AppData\Local\PowerCinema
O43 - CFD: 2014/01/17 18:44:09 - [] D -- C:\Users\RAMATOU\AppData\Local\Programs
O43 - CFD: 2015/07/05 15:53:30 - [] D -- C:\Users\RAMATOU\AppData\Local\SearchProtect =>PUP.SearchProtect
O43 - CFD: 2010/04/02 17:43:34 - [] D -- C:\Users\RAMATOU\AppData\Local\Seven Zip
O43 - CFD: 2015/04/16 10:59:55 - [] D -- C:\Users\RAMATOU\AppData\Local\Skype
O43 - CFD: 2015/07/14 15:40:57 - [] D -- C:\Users\RAMATOU\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch
O43 - CFD: 2015/07/14 15:48:35 - [] D -- C:\Users\RAMATOU\AppData\Local\Temp
O43 - CFD: 2010/04/01 21:24:17 - [0] SHD -- C:\Users\RAMATOU\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/02/27 13:38:25 - [] D -- C:\Users\RAMATOU\AppData\Local\utilityhotstartx86
O43 - CFD: 2010/04/03 21:07:26 - [] D -- C:\Users\RAMATOU\AppData\Local\VirtualStore
O43 - CFD: 2015/03/14 14:13:02 - [] D -- C:\Users\RAMATOU\AppData\Local\Windows Live
O43 - CFD: 2010/05/18 22:42:45 - [] D -- C:\Users\RAMATOU\AppData\Local\Windows Live Writer
O43 - CFD: 2014/02/25 20:06:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\WinRST =>PUP.Optional.WinRST
O43 - CFD: 2012/07/13 16:04:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{015DF680-0121-4329-9A5A-7A07DB148FF2}
O43 - CFD: 2013/10/12 11:30:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0207693E-5A23-41DD-93F4-ADDF6EDB6A75}
O43 - CFD: 2013/01/31 13:38:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{027190C2-1EC8-4733-BC59-D9B9CFD9DAD5}
O43 - CFD: 2013/05/15 23:52:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{028F58BB-EC14-467D-BAF4-DA4E490AAB5F}
O43 - CFD: 2012/07/26 16:01:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{02ECC68B-FD65-48B8-8EA4-5054E7AE2A21}
O43 - CFD: 2013/11/11 17:35:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{03456251-A68C-4CE6-9F20-2A46DC6532A3}
O43 - CFD: 2013/07/14 11:19:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0354595F-F2AA-4AFB-B10E-9A4B60F2A4C3}
O43 - CFD: 2012/09/22 19:14:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{036FC951-B9F5-4B97-B294-B47FBD03DFCC}
O43 - CFD: 2012/10/06 11:38:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{04567C6A-96FB-4498-8506-EBF518F4BE2C}
O43 - CFD: 2013/02/09 11:29:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{05051826-F308-4C6B-BBBD-9E8F9F0C72A3}
O43 - CFD: 2013/10/29 15:19:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0551AFF9-695A-4C99-A18F-B2597E79160C}
O43 - CFD: 2012/10/05 23:38:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{056D4274-DAAE-4B82-ACA4-E2D3ACF59EB0}
O43 - CFD: 2012/12/18 19:07:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{062E06BE-000F-4B11-B488-958FD405EFCA}
O43 - CFD: 2013/03/29 12:45:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0669B60F-C19D-489C-A29D-B363F3A26ABE}
O43 - CFD: 2013/07/23 20:35:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{085F322A-6F9E-4903-A965-40996116C65A}
O43 - CFD: 2012/08/29 11:18:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{096AC2E1-0554-49A7-A594-6FFDF7342C05}
O43 - CFD: 2013/10/29 15:48:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0A28FBE9-C060-41ED-8B55-B906CC0CEAA7}
O43 - CFD: 2013/02/14 18:36:58 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0A3463C2-FE5D-43F6-BC87-D255614C77EB}
O43 - CFD: 2012/10/29 15:57:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0AEF19C0-9602-4C7F-B220-1A5359B2A897}
O43 - CFD: 2013/10/15 10:10:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0BA7015F-19AA-4E3A-8C92-8263761319FD}
O43 - CFD: 2012/12/22 19:56:19 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0C3B685A-B682-4307-9C08-02C42BF4FF60}
O43 - CFD: 2013/05/28 00:22:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0DD3E551-D0E2-4CEF-AAA8-4CCF54905F2D}
O43 - CFD: 2013/06/22 12:36:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0E9621A3-10AC-4E3A-BBB3-03F7F16A4299}
O43 - CFD: 2013/01/02 16:01:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0ECA580A-4308-4CF4-90B6-01DE90FFEA3F}
O43 - CFD: 2012/11/15 13:30:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0ECB57AE-D619-45B1-A5DC-FFE234DFBCC4}
O43 - CFD: 2013/01/14 16:59:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0F7E00D8-5715-4DAD-8ED8-23FCCE7445EF}
O43 - CFD: 2013/04/29 18:57:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{0F834BB7-3BD7-4636-93D4-D6D704D64F94}
O43 - CFD: 2012/08/07 13:40:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1009522E-125F-4A16-A28B-7D10599F7B05}
O43 - CFD: 2012/10/04 12:26:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{10DC624D-893B-4C59-BEA5-775BAB22B24D}
O43 - CFD: 2012/07/31 18:31:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{11697F5A-C5DF-460F-84DF-B6EDF5851DAC}
O43 - CFD: 2012/07/24 20:00:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{117782A1-D5BF-4B71-9AF7-EAF22FB1D1E7}
O43 - CFD: 2013/09/20 21:43:42 - [0] D -- C:\Users\RAMATOU\AppData\Local\{118208AB-FA64-4BD9-B7F4-76607A21FB1C}
O43 - CFD: 2012/06/29 17:38:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{11A9E7C4-79A2-438B-A2C2-F97BDEB76960}
O43 - CFD: 2013/03/22 13:49:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1240C0E0-EEE0-4943-A108-382CFCEF6C2C}
O43 - CFD: 2013/03/12 18:39:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{12A63758-B6CA-450A-8673-08E77248F26A}
O43 - CFD: 2012/11/04 16:46:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{12CABC76-1DB6-45B7-84E8-65FF7A30A235}
O43 - CFD: 2013/11/16 14:52:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{147C3CBC-4AC7-4C93-BFD7-1079123B4F7C}
O43 - CFD: 2013/09/19 18:49:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1565B03C-5E2C-4829-9091-D0AA97FAD860}
O43 - CFD: 2013/04/01 15:12:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{159FE710-2BAE-426A-90A8-611BD99A53B7}
O43 - CFD: 2012/07/21 15:53:16 - [0] D -- C:\Users\RAMATOU\AppData\Local\{15B40102-22CE-4B88-89AE-7C308E478D33}
O43 - CFD: 2012/11/08 15:07:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{160ED77A-D444-4657-83C3-DF6C8D344C01}
O43 - CFD: 2013/10/20 17:11:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1658F093-076A-4F24-8673-E779BDFDE3BE}
O43 - CFD: 2012/12/06 12:57:19 - [0] D -- C:\Users\RAMATOU\AppData\Local\{16DAA305-0544-41EA-8A37-4EA5D85A2895}
O43 - CFD: 2013/02/06 18:42:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{173131B0-37F1-4A3E-8125-0EDC00DC35E6}
O43 - CFD: 2013/10/26 11:57:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{17362DC7-A424-4F61-AC32-B22BFCB428DA}
O43 - CFD: 2012/07/14 16:59:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{175488D5-929A-4999-92C7-2FF1073F4028}
O43 - CFD: 2013/12/11 19:44:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1773C905-1B54-466A-8F94-77C322D1A579}
O43 - CFD: 2013/07/20 16:07:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{17CD16CA-90D3-4CBE-BFE0-A72DA7E0E81F}
O43 - CFD: 2012/08/24 14:25:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{193A95A4-FF17-4860-8DA2-2C0D740F7D69}
O43 - CFD: 2013/07/07 11:42:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{196EC915-D6D4-4314-B783-96E6DCAFE18A}
O43 - CFD: 2012/07/02 17:54:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{19D9F923-C1C0-4074-9064-78DFE1F39613}
O43 - CFD: 2013/09/26 20:15:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1A2F3753-0091-4C07-922D-58FCACF2EDB4}
O43 - CFD: 2013/07/10 13:28:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1B5752E4-9D51-425A-BEA7-4C5A50A730EE}
O43 - CFD: 2013/08/14 05:46:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1B7C4E93-7FDC-466D-94A2-A08D5168B11F}
O43 - CFD: 2013/02/13 17:17:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1CB4A607-25B6-4A11-809D-4214AA68E8E3}
O43 - CFD: 2013/06/19 17:11:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1CBAF4BD-6BBC-4F1B-ABA5-25BFE94B55A7}
O43 - CFD: 2013/10/30 17:31:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1CD50B86-93DB-4AFF-80FF-1593894AAB6D}
O43 - CFD: 2013/03/02 12:54:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1D4BE541-8F74-4A5C-9391-E42E58185269}
O43 - CFD: 2012/10/08 15:10:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1DC6EB55-33D0-4355-840F-263EF4F5C59B}
O43 - CFD: 2013/07/24 16:19:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1E657328-D1DA-404E-9C4C-72E173271BF6}
O43 - CFD: 2012/07/17 20:05:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1E8516F4-EEC0-454E-BB67-0D6228ABC3B9}
O43 - CFD: 2013/08/05 18:46:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1E9AD7C8-9773-4C05-BF1F-3103391B0933}
O43 - CFD: 2013/03/20 19:42:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1EA9B4CF-35FE-4E57-8EC8-0349E48C6959}
O43 - CFD: 2013/04/15 20:15:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1EEA00B7-0E2D-4E97-914C-0871F610D1F7}
O43 - CFD: 2013/06/28 13:07:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{1F1E49CB-5C87-468E-9ACB-6031861CA4A7}
O43 - CFD: 2012/12/02 14:45:23 - [0] D -- C:\Users\RAMATOU\AppData\Local\{203773D3-A360-4E65-B8EF-D33A03E8736F}
O43 - CFD: 2012/08/25 15:06:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{210A3C98-06DA-4A99-A796-FE90978E67A0}
O43 - CFD: 2013/01/03 14:06:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{21821978-A47A-4A0F-80FD-BAFAB36215D8}
O43 - CFD: 2012/08/28 14:54:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{236118D1-1646-4696-8BEB-0380E4B29871}
O43 - CFD: 2013/07/21 15:16:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{23840B60-35AF-415A-8568-898781836999}
O43 - CFD: 2012/09/18 17:02:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{243E46CD-575E-4657-B971-95356D4B0F33}
O43 - CFD: 2012/10/14 16:05:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{25C8CBBC-F810-4098-83F3-E154773F7C9D}
O43 - CFD: 2012/08/08 13:27:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{27AB4C27-4622-4584-9498-3782EE823C16}
O43 - CFD: 2013/05/25 20:32:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{27AE24A8-7BE0-431E-A329-32E9B3D35164}
O43 - CFD: 2012/10/27 14:32:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{285A22C4-0610-4A44-877F-260E0C59CB7A}
O43 - CFD: 2012/08/21 14:14:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{29E8F44B-A60A-4C80-9321-4D705886C0B5}
O43 - CFD: 2013/01/20 15:54:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{29EC006A-92B7-4F61-ACE0-DD164A5138BB}
O43 - CFD: 2013/07/13 16:07:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{29F7EFE4-E2DF-4686-9F72-A362F2363E25}
O43 - CFD: 2012/07/01 15:02:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2A4098F0-1EDA-41DC-B5BB-6AEB88FF309A}
O43 - CFD: 2012/12/01 16:12:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2AB46CF3-7575-426E-84A3-BEE217A9945E}
O43 - CFD: 2013/06/21 12:15:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2BAA28AD-CF03-424A-81D7-0C99504CC55D}
O43 - CFD: 2012/08/23 12:32:10 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2BD0DFF1-95B9-4C5E-9DEE-33FADACCBB56}
O43 - CFD: 2012/08/01 13:27:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2CDA0DD0-10DF-4408-97BE-D0C5AC9A9964}
O43 - CFD: 2012/11/05 15:44:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2E4399CC-244E-498B-8DF5-56ACA1B335D1}
O43 - CFD: 2013/10/14 22:09:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2E88A1C7-6A25-4B11-A06D-24ACC8908425}
O43 - CFD: 2013/12/05 21:28:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2E914D43-3A55-413E-ABE2-9FC0A39DDE3A}
O43 - CFD: 2013/09/17 14:53:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2F071272-3666-49FB-85CC-79BF64DE55C4}
O43 - CFD: 2012/08/17 15:33:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2F24C6B2-49FF-4E3B-B801-25D0AA028CC5}
O43 - CFD: 2013/08/17 18:28:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2F5D8A9A-BD5D-4B10-9672-C79D10EDCAB3}
O43 - CFD: 2013/02/17 17:53:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{2F5F6AB2-F9B1-4D16-BE24-BE463B0FDB9F}
O43 - CFD: 2012/11/13 15:39:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3098845B-1E80-4DFA-B814-526967B5FDCF}
O43 - CFD: 2013/06/02 13:28:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{30BF080F-606B-446C-A7DE-DD1EFD01D8EA}
O43 - CFD: 2013/06/20 14:34:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{30C26EAE-BC91-45D9-8C7C-5508DAD37DFA}
O43 - CFD: 2012/11/06 16:16:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{30E69B29-C202-4AD6-A3EF-7FFDC652950F}
O43 - CFD: 2013/06/24 15:55:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{31070D06-41DC-4EEE-9008-FB4C185F9618}
O43 - CFD: 2012/10/18 13:56:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{31B560DD-50AF-433C-96DC-4B9AECAD816B}
O43 - CFD: 2013/12/15 17:43:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{31B63C7D-884B-43FF-8551-3B2F48A320D3}
O43 - CFD: 2013/11/09 16:17:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{31B6583C-D88B-491E-B98F-0C7A4F75AFAF}
O43 - CFD: 2013/11/19 21:31:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{31F0D556-F004-41D3-ABE2-9B9D25F14CB6}
O43 - CFD: 2012/11/01 13:13:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{32D2D184-0A3C-46AC-82C4-789884537959}
O43 - CFD: 2012/07/24 19:59:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3343338B-01A7-4754-ADC2-C1A50ECE2785}
O43 - CFD: 2013/01/09 12:34:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{33E0B9A6-6D5E-487F-B667-929557E072BB}
O43 - CFD: 2012/07/23 17:08:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{343F5BB3-D99B-4213-89FA-ECB62C82DAA3}
O43 - CFD: 2012/08/12 14:10:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{344B06ED-B69F-4F01-96CF-06C5E9B93842}
O43 - CFD: 2013/02/03 16:42:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{347A8241-5905-4626-88F9-0FF300730099}
O43 - CFD: 2012/11/22 12:29:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3495FA23-E917-4EA2-BA50-5DC06A3D4279}
O43 - CFD: 2013/02/08 12:45:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3622A878-BC46-414F-81FF-EABDF17EC6C3}
O43 - CFD: 2013/02/27 18:53:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{363158CB-A207-4FCB-B941-0D928E9E255E}
O43 - CFD: 2013/03/06 18:24:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3658EA4A-0DDB-406E-BDA6-4196F37C8560}
O43 - CFD: 2012/06/28 11:02:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{36AC65FE-EDD2-4D94-9AF3-0B14B25BE550}
O43 - CFD: 2013/04/30 13:57:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{370D559B-EC16-47C7-B1A1-958866969641}
O43 - CFD: 2012/12/29 16:56:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{37401FEE-B3A1-4704-B2B5-D5FE0DF76340}
O43 - CFD: 2012/07/22 15:18:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{37BD8CBA-96A3-47D7-A7B0-2FAB560300F4}
O43 - CFD: 2012/06/25 17:05:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{382FFBEB-2B7E-40B1-96C4-6207F6BE107A}
O43 - CFD: 2013/06/30 15:03:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{38CDC36E-963E-4BA5-87BA-5865D5A9B9B5}
O43 - CFD: 2013/02/10 17:54:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{391D2F29-D233-4215-9FA5-35258B046FB1}
O43 - CFD: 2013/03/18 19:40:23 - [0] D -- C:\Users\RAMATOU\AppData\Local\{39F1DC8A-54D3-4518-8E56-3E6443EBA367}
O43 - CFD: 2012/09/17 14:34:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3A0998A2-E3ED-4797-9B16-8A408B82650E}
O43 - CFD: 2013/08/21 20:11:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3A2A4114-5BAD-4F56-970D-ED5E1625B7D8}
O43 - CFD: 2012/06/24 14:25:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3AB498AC-C8F4-4933-887C-8202306D3AFE}
O43 - CFD: 2012/07/01 15:02:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3AC9C123-DB45-43C3-AFB7-9D886740C480}
O43 - CFD: 2013/05/21 22:12:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3B09A7DE-0861-4CCB-95BA-3FDFF3EE6AFA}
O43 - CFD: 2013/01/06 18:14:34 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3B5680D5-B897-4840-9A37-9BEEB913F866}
O43 - CFD: 2013/04/02 18:30:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3BB37187-DA2E-4D39-AE64-3AEEE14E17CB}
O43 - CFD: 2012/11/07 13:30:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3BF521A7-C5EA-4D8A-8CC2-69AE6BC49F97}
O43 - CFD: 2012/07/12 14:12:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3C45CF48-50A6-4584-B9AB-2C66D2FF76BF}
O43 - CFD: 2012/11/09 19:55:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3C9B78A0-CB28-4D5C-A495-082AEE5967C5}
O43 - CFD: 2013/08/11 20:28:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3CE931A5-F3CB-4BA9-ABFE-D48707B80A37}
O43 - CFD: 2012/06/29 17:38:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3DECD8DE-AD83-4F50-9ABD-54C4ECF6DFEA}
O43 - CFD: 2013/04/28 12:43:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3E8249F8-2C85-41CA-B15A-9F70A8D0B103}
O43 - CFD: 2013/05/26 13:44:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3EC4EDFC-FFC5-40B8-A79D-3296FD8A115B}
O43 - CFD: 2012/07/20 14:27:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3F0ADC30-A2B3-40BD-9604-FBA2AF680899}
O43 - CFD: 2013/01/21 15:21:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3FC5D8BF-D49F-4B00-8D0C-DDAC7194746A}
O43 - CFD: 2013/07/12 13:45:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{3FE250F1-0523-4FFF-8731-2790933A705E}
O43 - CFD: 2012/10/20 16:02:23 - [0] D -- C:\Users\RAMATOU\AppData\Local\{40BA3C49-83F0-49FF-AD98-DBF2D7341D77}
O43 - CFD: 2012/08/04 13:39:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{40CA895E-405C-4128-98D8-73A029B7C58B}
O43 - CFD: 2013/02/22 12:57:46 - [0] D -- C:\Users\RAMATOU\AppData\Local\{40CF7378-3F6F-47EE-97C7-512EB02BFBC0}
O43 - CFD: 2012/12/10 14:06:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{413CB902-485D-4F30-A650-34857BAB7ED4}
O43 - CFD: 2013/08/31 16:29:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4156928B-EE02-4417-97F1-F280E07A350F}
O43 - CFD: 2013/11/12 20:59:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{41B5DEBC-C843-484F-8438-74BFBC550A88}
O43 - CFD: 2012/11/10 15:43:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{420BD1D7-7EC5-4622-BB53-457437EF6D92}
O43 - CFD: 2013/01/22 20:29:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{43417056-41C3-4A93-BA89-A5851DF8FF81}
O43 - CFD: 2012/08/03 14:24:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4472CA79-A173-436E-97BE-6349E23F175E}
O43 - CFD: 2012/08/05 14:01:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{447EE3A3-5DDB-47B7-8D40-6F0BD7E8859A}
O43 - CFD: 2012/10/11 09:56:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{46F4D8FA-499C-4100-9279-3807B121CEC1}
O43 - CFD: 2013/01/17 11:42:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{46F94CA2-E86E-4D68-996D-BF094D85CF3C}
O43 - CFD: 2012/08/06 14:47:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{474C8896-6DA7-4F6E-97E7-27849E28D8F5}
O43 - CFD: 2012/11/30 19:28:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{47505D88-2F42-4EB2-8F0C-4C5033993C06}
O43 - CFD: 2012/06/25 17:05:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{47CF6489-8824-41A5-BAC7-1E8B7044BF22}
O43 - CFD: 2013/07/15 16:10:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{48F1939D-3919-4643-B450-0C5D5B87B31B}
O43 - CFD: 2012/09/05 12:36:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{48F8EB34-990F-494A-9722-7B8E05A55D60}
O43 - CFD: 2013/02/16 12:55:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{49736AF7-A6F8-4D16-9556-B583DB218725}
O43 - CFD: 2013/11/17 18:54:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{49EAE2DE-CEA8-424A-B262-C80C29BB9565}
O43 - CFD: 2012/11/27 15:55:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4A05EA42-9556-41A5-9920-8F23AF5A6D76}
O43 - CFD: 2013/02/21 15:57:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4C0C3CB6-6A1F-4118-8CF5-6E6F5FC51377}
O43 - CFD: 2013/04/09 17:43:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4CAD78D0-668C-4942-8E4D-76044BA142D8}
O43 - CFD: 2013/09/11 14:10:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4CD5491A-27A7-4913-A26F-D3CF03ED155D}
O43 - CFD: 2012/07/19 11:40:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4D46E6C4-F4A1-457D-BB39-FA92931F9762}
O43 - CFD: 2013/06/06 17:06:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4D629AE3-4FA2-4B06-9979-5957826685CE}
O43 - CFD: 2013/07/29 16:59:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4D6B5A9C-3774-489A-862C-BE6E23A028F2}
O43 - CFD: 2013/11/18 21:20:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4E4BE8B9-F314-4A7A-BB29-C79EF7443871}
O43 - CFD: 2013/04/21 15:36:58 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4E5671EC-EFA3-4818-9837-0DD2A9E3628A}
O43 - CFD: 2012/07/10 15:29:42 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4E86671E-948A-4868-9C15-3D581D0EF382}
O43 - CFD: 2012/12/27 20:42:39 - [0] D -- C:\Users\RAMATOU\AppData\Local\{4F9270CD-9CDB-49AD-AE3B-24547835CD89}
O43 - CFD: 2012/10/01 21:38:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{51399D02-6F64-46C5-97CE-62A6F0B07495}
O43 - CFD: 2013/08/02 18:24:19 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5145C4E2-22AD-4914-A352-447F2FD0828E}
O43 - CFD: 2013/07/31 19:10:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{51B7E669-F52C-48A4-8402-3DEAB2741C7A}
O43 - CFD: 2013/10/25 14:02:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{51CDFB72-4DC4-4FBF-8247-3D3D7701B935}
O43 - CFD: 2013/08/30 15:08:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{526B4A8B-4927-4C4D-A17F-87B0608C2218}
O43 - CFD: 2013/03/08 17:16:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{53BC7B91-205A-4C24-9FED-85991B1D5D4E}
O43 - CFD: 2012/07/08 15:32:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5592BAE6-85B4-4CFE-ABA6-0356D20383C6}
O43 - CFD: 2013/11/29 13:02:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{55B31767-2F11-4774-B857-6915FC52E62D}
O43 - CFD: 2013/05/31 22:00:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{56870252-3085-4FE3-BCE1-6D72562B342D}
O43 - CFD: 2013/09/08 16:10:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{58062607-6C95-40AE-BBD2-D4D8E53D8A0F}
O43 - CFD: 2013/03/10 18:31:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{58119373-4EC9-4D89-BC0F-3365AA661A3B}
O43 - CFD: 2013/07/17 16:51:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{593CB49E-8B47-4E12-A387-40258BA49410}
O43 - CFD: 2013/01/18 17:44:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{59CE265C-1773-424B-B128-3328C1DE4224}
O43 - CFD: 2013/07/02 18:09:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5AB472ED-DF5B-4816-A30E-1650B0570B9F}
O43 - CFD: 2012/11/17 16:15:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5ABD5A18-DCE1-4967-BDAF-8B112C87C496}
O43 - CFD: 2013/05/01 16:37:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5B06F65B-D279-410E-AAE0-301CAFBBA6DA}
O43 - CFD: 2013/01/26 17:01:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5CC79BDC-DC71-4BD3-B217-F43F593202BF}
O43 - CFD: 2012/06/27 10:27:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5D6EEE80-4FA1-41A5-917D-0B54535AD072}
O43 - CFD: 2012/10/19 15:33:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5E07599A-2756-4F2A-AF29-325BD0950FC7}
O43 - CFD: 2012/11/03 16:20:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5E2A2B71-777E-4EE9-8D5B-024972208D60}
O43 - CFD: 2013/06/07 15:03:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{5E7EE0AB-D4EB-4F06-8313-6B2627949572}
O43 - CFD: 2012/11/20 17:03:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{600F4B20-B51E-40D0-976C-9273DB905DB7}
O43 - CFD: 2013/04/08 14:36:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{60A2FC3D-2A53-45F7-8169-AA9FB75E3FAE}
O43 - CFD: 2013/01/01 14:58:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{60FD6063-0A2A-4480-8E81-2F4F0562DCF1}
O43 - CFD: 2013/10/05 14:05:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{615C5824-C2E4-4EC1-9804-231854ADEC49}
O43 - CFD: 2013/09/01 20:53:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{61D0F20B-9B65-4108-8936-E8BF87331F14}
O43 - CFD: 2013/09/24 14:49:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{62147C6C-6DBE-4C46-83FD-78868732AD34}
O43 - CFD: 2013/09/29 12:25:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{622AEBAE-F6B9-4C32-81B8-16CAC740476C}
O43 - CFD: 2012/08/16 13:12:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{631AC584-BC07-4717-96A5-1D447AA1849B}
O43 - CFD: 2013/09/28 12:11:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{633C0652-1DD9-4705-9E31-82575E709A63}
O43 - CFD: 2013/03/13 18:00:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{640E6F17-EDBB-4929-BB71-94CCB557F34C}
O43 - CFD: 2013/01/13 18:11:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6489B785-21C4-4694-802B-3F125115780A}
O43 - CFD: 2013/10/27 18:49:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{64BB3502-42FB-4B13-92CD-5B592766001F}
O43 - CFD: 2013/05/18 13:03:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{65356BCA-414F-4B87-ACB3-AFC6CB9304C7}
O43 - CFD: 2013/01/19 17:12:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{65CEC81B-B1EE-47CD-A0FF-2C78D92E059F}
O43 - CFD: 2012/10/06 23:39:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{66190928-9A8B-4821-9CAE-9DFD9470FC06}
O43 - CFD: 2013/09/30 18:21:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{663D6642-0F17-434E-8DF1-77FCD1F7AFCB}
O43 - CFD: 2012/08/11 13:51:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{66546BF4-47BD-4437-BA1C-ED62F54C41BB}
O43 - CFD: 2012/07/07 19:12:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6824F6A3-176D-446A-8360-2E5FB5326EE0}
O43 - CFD: 2013/08/10 14:44:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{683DDB00-E924-42C0-A715-A65A6420D37F}
O43 - CFD: 2013/10/31 20:40:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6846FB6E-70C4-4AEB-9D94-A0AC0F86AA15}
O43 - CFD: 2012/10/13 15:01:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{68FD60A4-DE69-46E6-9FA6-1F6493354A4D}
O43 - CFD: 2012/08/09 13:08:34 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6A4E622E-B517-45A2-A8A1-8F18232894F9}
O43 - CFD: 2012/11/26 10:13:46 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6A6A7564-A90E-43A6-8E9C-04ACB287BF02}
O43 - CFD: 2013/05/30 15:12:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6A9EB565-5EBB-4606-9846-F7F25A831B19}
O43 - CFD: 2012/07/15 15:04:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6B618C87-01E5-493C-9884-C89C5D3119E7}
O43 - CFD: 2013/08/23 19:50:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6BBA1739-68EA-4271-B9C1-0C9DF502FCC3}
O43 - CFD: 2012/10/09 15:44:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6C37CFD5-D130-4D34-B55E-3AC5AC1525AC}
O43 - CFD: 2013/02/04 14:08:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6C864536-4850-480D-9DC5-A57EC9F0A725}
O43 - CFD: 2012/06/24 14:25:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6CA09018-3E0E-43A4-87BA-1C1C11842091}
O43 - CFD: 2013/02/12 18:52:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6CB6E1A9-9F1B-466C-977D-DA4BFD56A27D}
O43 - CFD: 2012/06/01 16:44:35 - [] SHD -- C:\Users\RAMATOU\AppData\Local\{6d7b01b4-cc68-7cca-c66d-066efe9aa242}
O43 - CFD: 2012/11/29 09:31:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6E916B74-4E06-44BB-9470-58DEB47AA909}
O43 - CFD: 2013/05/24 14:15:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6EA6DD61-DD72-46B1-A764-407BD7800702}
O43 - CFD: 2013/02/28 20:32:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{6FE7731A-8212-44C8-982D-83DE407E0934}
O43 - CFD: 2013/04/14 13:52:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{703AB9D8-5F69-4949-9A3E-2063C1CCC2BE}
O43 - CFD: 2012/09/02 15:45:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{70EA289C-ED49-4B72-858B-7E33C6CA9B9F}
O43 - CFD: 2013/01/10 12:26:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{70FA1E3E-A776-412D-9DD6-50396E368ED8}
O43 - CFD: 2012/11/11 17:34:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{71B025D6-9CFC-4C1D-A2E9-F05F21C8078C}
O43 - CFD: 2013/06/01 12:03:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{71C3580A-E8EB-4247-85A2-2ABAD698724C}
O43 - CFD: 2013/01/05 16:54:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7263FBE8-DE2C-49E0-B901-7E63D97DA21B}
O43 - CFD: 2013/02/11 15:40:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{72C109E1-74AA-4157-885E-04CEF225D8B2}
O43 - CFD: 2012/10/21 14:57:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7426AC64-E063-4958-989B-7BEE9EB3AA3A}
O43 - CFD: 2012/07/13 16:05:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7485E7BA-FA53-4049-BF55-9B932ED0D25A}
O43 - CFD: 2012/08/16 13:12:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{75D1C774-22A4-4B8E-AB1A-BD6B90DAF641}
O43 - CFD: 2012/09/21 14:36:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{768141E4-2053-4EB3-A3DD-FD4B23483B73}
O43 - CFD: 2013/02/02 16:47:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{77490BEC-AC02-4A15-8DF5-74EE81C5C269}
O43 - CFD: 2013/07/04 17:31:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{77BF66D1-E287-4A31-A33E-C1594C568265}
O43 - CFD: 2012/10/15 15:20:19 - [0] D -- C:\Users\RAMATOU\AppData\Local\{77E296B4-8196-4493-A4E3-656B22A8372D}
O43 - CFD: 2012/08/02 10:18:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{781DB085-90D5-4182-AF5E-491AF0B2B0BE}
O43 - CFD: 2013/09/18 16:53:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7826058B-7A4E-49B6-BACE-1C6DB19C7103}
O43 - CFD: 2013/07/28 14:30:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A0D34E5-D9C9-42B4-A75F-49193A22F874}
O43 - CFD: 2013/10/18 10:09:58 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A2BC476-BECE-4ADA-BF9A-D03598762D3C}
O43 - CFD: 2013/02/24 17:38:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A4A566D-AF44-40D0-AFE0-8175A00B88C9}
O43 - CFD: 2012/06/30 17:29:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A628B3D-CC6A-48EC-B6C0-2B58E5AC8FD9}
O43 - CFD: 2013/02/20 17:11:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A6D0FAB-9A2B-441D-8FBE-7A53AF765E9D}
O43 - CFD: 2012/08/14 14:37:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7A9F7CDF-7DD8-4DDA-BDC3-273ABB4B7820}
O43 - CFD: 2012/08/27 20:38:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7C23EB70-7A2E-4E22-B8F5-1FFA82026632}
O43 - CFD: 2013/05/16 16:02:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7C2F5466-52ED-4474-AD40-760FB27B9B0E}
O43 - CFD: 2012/06/22 23:34:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7CB597CD-018B-4BEB-B920-BE10E26005A6}
O43 - CFD: 2013/03/30 12:41:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7D1FC185-D86E-455B-A07D-8D9E18070D0F}
O43 - CFD: 2013/08/26 21:02:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7E02B90E-56E1-4667-873A-A6625FD87DB6}
O43 - CFD: 2012/09/11 17:07:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7E3DA916-35EA-4E90-AFD6-5E714E03C270}
O43 - CFD: 2012/12/15 15:52:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7E926347-32D0-421F-A08E-4E1667A4DFAA}
O43 - CFD: 2012/07/15 15:04:16 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7EB17967-0D28-4C09-87D4-02F387D8589C}
O43 - CFD: 2012/12/23 12:45:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7ED35DC8-13C2-494C-9994-EF122F15FC62}
O43 - CFD: 2013/11/20 19:01:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7EE50EF9-5CF7-4C1A-A9CF-6224C8A7706D}
O43 - CFD: 2012/08/15 13:59:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7F67F7C4-3488-43F1-9EBA-BAD33E5AFA15}
O43 - CFD: 2013/09/14 14:32:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{7F7BFB75-E4ED-48A5-817D-653BF9D00D4C}
O43 - CFD: 2013/03/25 18:24:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{806715FF-8DE0-4D15-B6C4-1C8956F33C07}
O43 - CFD: 2012/10/17 12:45:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{80C9856D-759F-45D8-B05B-F0BD0DFBC663}
O43 - CFD: 2012/07/28 14:50:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{81415FDC-B747-489C-8BEB-F9B274931C8A}
O43 - CFD: 2012/07/11 11:31:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{816A740C-96AD-4A9E-BF59-765D3151C8CD}
O43 - CFD: 2012/11/02 16:23:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{827035B4-A657-40DB-9C66-384FC25D7403}
O43 - CFD: 2012/09/07 00:38:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{83065C7A-7B84-4433-AB43-28A85BF423AA}
O43 - CFD: 2013/08/14 22:49:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{83F2755A-5D4C-45EF-ADF4-90170FAEC5A8}
O43 - CFD: 2012/07/11 11:30:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{83FBF705-7695-4E22-B137-D111DA815DD8}
O43 - CFD: 2013/09/02 20:44:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{845B49E8-2C29-4D53-A519-F9CFE05373AD}
O43 - CFD: 2013/04/07 14:52:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{84FA98BD-EE92-4250-B5A1-619C8548E9AD}
O43 - CFD: 2012/10/07 11:39:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8547AB00-D29A-4A19-8263-7A27406C9103}
O43 - CFD: 2012/07/19 11:39:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{856BE906-337B-4A40-82A6-1D10593A5D75}
O43 - CFD: 2012/12/30 17:50:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8593F164-01B7-4473-B673-8A5C0A212DC7}
O43 - CFD: 2013/10/13 14:06:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{860A69AD-49FB-4C2C-9B4A-992AE89C8BEB}
O43 - CFD: 2013/02/05 19:35:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{860D81D0-DACD-429A-B735-582C35BA08FC}
O43 - CFD: 2012/07/28 14:50:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{86B8B83D-ED63-4D6A-B86C-67424B697F24}
O43 - CFD: 2013/06/11 15:02:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{86CA13A3-B09D-41EC-B266-A95E902760FE}
O43 - CFD: 2013/07/01 20:54:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8749381C-89B4-4A26-855F-08ACB57BA1A8}
O43 - CFD: 2012/09/23 22:36:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{87DC3F6D-61E5-4640-8724-5DCC995A13ED}
O43 - CFD: 2013/03/09 14:17:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{887AFF18-F049-4BF8-A70B-5D07F72D5AE8}
O43 - CFD: 2012/08/30 10:54:10 - [0] D -- C:\Users\RAMATOU\AppData\Local\{89274C2C-FEFF-4551-B861-781E9B3F39E0}
O43 - CFD: 2013/07/27 21:17:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8A004BE5-CB0D-42C3-989F-7103F6A73FFA}
O43 - CFD: 2013/08/25 17:47:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8A472DF1-4CCB-48A0-91D8-4952F0235EAA}
O43 - CFD: 2013/03/03 17:01:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8B717C0B-43D7-4822-9E69-5C92D7670D63}
O43 - CFD: 2013/09/27 21:21:39 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8BC36DA1-4DF0-438B-A3B8-68F9A11D75F8}
O43 - CFD: 2013/02/01 15:49:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8C2D317D-57C3-42D6-B373-0A4854546880}
O43 - CFD: 2013/09/21 13:38:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8CA29990-2F37-4E82-8AA0-6BC39AC987A9}
O43 - CFD: 2012/11/14 11:02:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8CAAC6E5-75D0-4288-8C6F-82F5D0AE34A0}
O43 - CFD: 2012/09/01 13:12:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8CAC5F6B-6D33-47BA-9C34-23023E16454A}
O43 - CFD: 2012/11/24 16:48:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8CC28609-618F-4192-A454-A9735BB57B4E}
O43 - CFD: 2013/10/28 14:59:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8CD32057-E838-4A42-832D-B42C4B736FE8}
O43 - CFD: 2012/12/05 13:37:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8D0B6228-F2ED-4E17-B8C3-974C50DB0851}
O43 - CFD: 2013/10/01 16:18:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8D15F9EA-72CD-45C1-A737-560F824A002F}
O43 - CFD: 2013/12/14 19:01:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8DA00CCD-B31D-47AA-8BD0-B7C46C39DBB2}
O43 - CFD: 2013/08/12 15:07:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8E3E6838-5EAE-4D39-9347-9D656DA30126}
O43 - CFD: 2012/08/07 13:39:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8E5E271A-38CB-4E06-8AC9-09BF896B66A7}
O43 - CFD: 2013/03/04 21:41:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8E9DF881-ED0A-49E1-B03B-AAE9C91F2B97}
O43 - CFD: 2012/07/09 18:15:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8F5B798B-F102-46FE-A8E6-193E26F02635}
O43 - CFD: 2012/10/30 15:36:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8F67E2FE-E4B1-4E0F-87CB-D92C14D0401E}
O43 - CFD: 2013/07/25 21:23:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8F7AA84F-9D26-4673-BD53-459C74CA8E9D}
O43 - CFD: 2012/07/05 10:45:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{8F909AC2-92F9-4316-BB46-8D375B69FD1C}
O43 - CFD: 2013/11/08 18:04:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9012D8B7-94EB-441C-B8BD-4C2565AA7D3E}
O43 - CFD: 2012/08/08 13:28:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9060C8AC-C912-401B-85FE-B7600B8B7251}
O43 - CFD: 2013/01/25 16:28:58 - [0] D -- C:\Users\RAMATOU\AppData\Local\{90D139FD-54BD-48CA-8491-3B3926F583BB}
O43 - CFD: 2013/10/23 16:32:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{91B19B79-E3E0-41F7-BB7B-05C5404626BD}
O43 - CFD: 2013/01/16 13:11:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{91C8F93E-8C85-4788-A927-8AA8F82091E9}
O43 - CFD: 2013/10/08 13:59:23 - [0] D -- C:\Users\RAMATOU\AppData\Local\{922B79A1-FE7C-47D9-80E8-D0B26DCDD0CD}
O43 - CFD: 2012/07/18 12:16:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{931BCAD5-09B9-4E01-9A10-8BFCC574ED6F}
O43 - CFD: 2012/07/04 14:12:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{93CFE012-488D-44CF-AE7A-3631D960CF80}
O43 - CFD: 2012/10/22 14:57:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{94104F25-E2D2-4DBF-9C0D-59409B3905E4}
O43 - CFD: 2013/11/14 12:52:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{94854614-B2A3-4352-8AA0-746C102A8112}
O43 - CFD: 2012/11/12 16:32:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{95572016-25AA-4264-9B24-4C7B07ED36E7}
O43 - CFD: 2012/06/22 23:34:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9570A699-B617-42AE-BD44-552A6684C230}
O43 - CFD: 2013/07/06 16:11:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{95C59863-5938-4FA6-9B87-73EB913F2A09}
O43 - CFD: 2012/07/22 15:17:34 - [0] D -- C:\Users\RAMATOU\AppData\Local\{96056B97-6064-49B9-9313-8B37C3405BA0}
O43 - CFD: 2012/11/21 11:24:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{96DFADA9-01A1-405B-B45A-9C7057D19CB8}
O43 - CFD: 2012/09/20 11:32:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{96EF1783-094F-47CC-B1E9-4BC486A08664}
O43 - CFD: 2012/09/14 14:15:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9756A31D-A248-4680-833B-7312A23CB43F}
O43 - CFD: 2013/03/16 14:19:39 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9765C4A7-D4A0-4F00-BE3C-B8B76FCF389A}
O43 - CFD: 2012/07/03 14:18:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9923BAF6-27D5-47C7-8F18-EADABE3DA988}
O43 - CFD: 2013/11/25 16:22:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{99AA9722-58FD-444E-B7F9-CC652DC73E88}
O43 - CFD: 2013/04/16 15:59:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{99B3CD46-7DCB-4191-AD19-A14045FB8080}
O43 - CFD: 2013/10/16 15:28:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9A62D03D-0638-48BE-BE5C-C50B5B052A39}
O43 - CFD: 2013/02/25 16:11:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9AEABB80-02F9-4E22-A011-B805E13B77D0}
O43 - CFD: 2012/08/11 13:52:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9AFAD331-3403-402D-ADC5-40F8D4A188F9}
O43 - CFD: 2012/09/15 11:29:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9B097AC5-D315-4EC2-A2EC-2F94A065251F}
O43 - CFD: 2013/12/17 15:15:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9BF560FC-7C0F-49AD-904D-73D26D4CDACA}
O43 - CFD: 2012/10/10 13:35:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9C580A42-820C-4054-865C-21F0D0A660C6}
O43 - CFD: 2012/07/30 14:39:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9C605040-3F95-4BD3-A112-3C34D5CB6334}
O43 - CFD: 2013/10/09 14:26:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9C9E1391-17C3-4DE8-88EF-1E10457D9BD9}
O43 - CFD: 2012/07/27 15:14:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9CB97E38-AA4D-4314-99E4-ECDBED62E7B8}
O43 - CFD: 2013/08/24 12:02:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9CDA01C5-B02C-4CB0-B98A-9CBEBFD0BE92}
O43 - CFD: 2013/05/14 12:44:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9D9AB08E-542C-40E4-B579-14F8A3DC7C70}
O43 - CFD: 2013/01/07 16:49:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9E012825-01ED-4F4A-A728-23BB9257D45C}
O43 - CFD: 2013/01/04 16:27:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9E20F62B-5125-4066-8A30-098873A2224E}
O43 - CFD: 2013/06/14 23:14:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9ECA9507-5AD3-4F71-B819-24C75574C50D}
O43 - CFD: 2013/10/21 16:18:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9F4F94A1-1DE3-4B85-9EA4-06E1F6AE740B}
O43 - CFD: 2012/08/22 11:34:23 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9FA1460B-1A06-4BB5-B3AE-78CFB5284BFE}
O43 - CFD: 2013/09/06 17:58:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{9FF1E6FE-69EF-47A1-9121-B1DD74C4147D}
O43 - CFD: 2013/12/16 20:18:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A10A95EF-5FA7-446D-BBCB-60EB6595514D}
O43 - CFD: 2013/05/22 14:00:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A1626B65-1835-495D-A161-E7AA68E1FB48}
O43 - CFD: 2013/10/19 13:51:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A2F3C661-5B94-4EF0-A158-40225923814A}
O43 - CFD: 2013/06/10 15:10:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A31C7C1C-2719-4710-9426-D7533C08922A}
O43 - CFD: 2012/12/20 19:59:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A449FBAE-6CAD-43ED-B76B-A2418C8FE251}
O43 - CFD: 2013/01/12 16:24:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A484F2ED-1D70-405B-9522-4230DE288051}
O43 - CFD: 2013/04/12 11:55:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A4E7D28D-6CEB-472A-B91E-06DCA0BB44D2}
O43 - CFD: 2013/06/08 10:11:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A5423840-7751-43B0-A8A7-E6B06928D896}
O43 - CFD: 2012/07/29 15:27:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A638A992-980A-46A3-8DC0-E42FFB80A289}
O43 - CFD: 2012/08/05 14:01:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A64549CC-20CA-4137-9187-80988EBB743F}
O43 - CFD: 2013/12/02 21:22:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A69108A3-8897-4E33-91D4-A411D7E7626E}
O43 - CFD: 2013/09/13 22:28:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A78EDF63-4B50-491F-9AB0-799DAB59A054}
O43 - CFD: 2012/08/12 14:09:58 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A7C874F1-0B7A-41C0-AA39-10F7E28156D1}
O43 - CFD: 2013/04/17 20:58:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A888CC47-958D-4CD8-B75D-D44359FDF90A}
O43 - CFD: 2013/10/10 10:46:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A8976480-4E86-43D4-A3A8-7215E1F0AC30}
O43 - CFD: 2013/06/26 21:58:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{A9D663E9-C9E3-4C3C-A45B-54E5D6047423}
O43 - CFD: 2013/04/24 15:42:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AA0D8A8F-E3AE-4575-BC5B-54597F7D7980}
O43 - CFD: 2013/05/25 08:06:32 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AA7FFCDB-9193-48C5-816C-3158FC72B7CB}
O43 - CFD: 2013/09/07 14:22:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ABA12034-55A1-4F08-9F6A-54571A0DAE5E}
O43 - CFD: 2012/10/05 10:30:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ABB48DE7-950C-4559-9D05-B2B684086DFD}
O43 - CFD: 2013/09/15 17:02:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AC4A3AB5-84B9-4A6A-9D16-45A8D0C4BAF1}
O43 - CFD: 2013/04/26 20:57:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AC9A4E54-8730-46AA-977D-81BC47D5DD84}
O43 - CFD: 2013/05/23 11:08:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ACA40B7D-102C-4D7E-BD3F-3BB6ED4F9B32}
O43 - CFD: 2012/12/26 20:29:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AD5A55BA-BFDC-478C-B0EE-50A7828A072E}
O43 - CFD: 2013/11/22 12:53:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AE16B824-9A47-479A-94C9-140D01DCFC4D}
O43 - CFD: 2012/08/31 16:17:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AE84B1B8-44A3-4AF0-9338-706946B3754E}
O43 - CFD: 2012/06/23 17:13:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{AFACF556-9ED7-4149-85EC-EC54A1FF7318}
O43 - CFD: 2013/01/24 13:32:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B019EE42-2759-4AA8-9F63-883ECE1ACFC7}
O43 - CFD: 2013/08/06 18:04:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B062753E-F5C3-4B57-B25F-6DA55B9191FF}
O43 - CFD: 2012/06/26 14:03:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B075EECA-1BC8-44C9-8683-2BA63C31B8DE}
O43 - CFD: 2012/11/16 18:47:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B0B56CB0-E1F0-4730-B964-7AC1192937A2}
O43 - CFD: 2012/08/30 23:43:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B0FAF305-E60B-4483-8F48-0EC370894482}
O43 - CFD: 2012/07/12 14:12:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B1421C4F-2362-4929-8841-B6108DAFBB6D}
O43 - CFD: 2012/08/10 14:18:42 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B2B0933B-A50C-479A-93B5-2EFF5303942D}
O43 - CFD: 2013/01/23 13:43:15 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B2F29284-564F-4F28-A549-623D8C2084D7}
O43 - CFD: 2013/08/04 16:30:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B3060DFD-93F3-4757-B7BC-863EA85666AD}
O43 - CFD: 2012/12/31 16:31:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B33135A7-07C2-47CE-8234-B84D5C439AB0}
O43 - CFD: 2013/04/13 13:49:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B361230A-7F38-42ED-85B3-8A51BD1364D2}
O43 - CFD: 2013/04/05 15:30:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B403BA61-0BE7-49EC-8025-4C35C0C43669}
O43 - CFD: 2013/08/03 12:26:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B515ACA9-DDDD-4046-9F36-4E7295D7EAA8}
O43 - CFD: 2013/12/16 15:19:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B596A72F-1214-4499-A4FC-20BBB92AC01A}
O43 - CFD: 2013/05/28 15:09:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B6E8963B-9260-4600-B531-77A76AE1E453}
O43 - CFD: 2012/10/16 20:52:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B6EE7B78-0DA7-4D04-9D8F-073471F69274}
O43 - CFD: 2013/01/15 15:32:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B752540B-C044-4559-92CF-EF76FFA678B7}
O43 - CFD: 2013/03/05 19:59:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B7D85FF5-876D-42CD-A351-5D6D60569378}
O43 - CFD: 2013/01/11 17:22:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B80DCE07-98C4-4ED0-AF3A-8E98370EAD2E}
O43 - CFD: 2012/08/14 14:37:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B8113BE6-7D5A-4E15-A26E-99ED3E19F5B5}
O43 - CFD: 2012/07/07 19:11:45 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B86DC562-6137-4A08-8CDC-2A1726EA7B03}
O43 - CFD: 2013/10/11 11:49:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B8A6E673-1625-4BCD-8574-A26DC58E2647}
O43 - CFD: 2013/08/16 16:31:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B8FE6135-457B-403E-BCE2-3301E66C3EA9}
O43 - CFD: 2012/07/14 16:58:38 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B955E189-A755-42D6-8816-941BFD4378A6}
O43 - CFD: 2012/07/04 14:11:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B966D68B-8607-435B-9426-48BA13B9C948}
O43 - CFD: 2012/07/21 15:52:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{B96CEA39-EBB6-4B91-9685-A1470CD406C9}
O43 - CFD: 2012/08/18 13:50:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BA35530B-4CD7-4A2A-A1CF-A42FEBA18CF7}
O43 - CFD: 2013/04/06 13:29:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BA36E2FE-5A62-43F5-A234-3B67860ABAA6}
O43 - CFD: 2013/10/03 06:45:10 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BAAE76AD-4E53-4E0C-93D3-813D7DF8BC41}
O43 - CFD: 2013/04/04 15:38:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BBAAF82B-F28E-472D-8D86-70C0179347AD}
O43 - CFD: 2012/07/05 10:46:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BC8563D4-66C4-4268-9EAB-964743937C47}
O43 - CFD: 2013/08/07 17:21:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BCE909DF-3846-4B81-8220-E37CADE45DF3}
O43 - CFD: 2012/09/12 13:14:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BD18F44D-BD1D-4DFB-B9BC-0ED9E187D950}
O43 - CFD: 2013/11/23 14:43:11 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BD27021E-8751-4B13-AE2F-D04AE11A9D37}
O43 - CFD: 2013/12/08 15:21:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BD9AB664-14BB-4C3D-8D83-843AA7D41726}
O43 - CFD: 2012/07/29 15:28:10 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BE89B984-15ED-49F7-91B5-7B85588C1AFA}
O43 - CFD: 2013/08/27 17:32:42 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BE97C1A0-D0D4-49E9-9C02-D5216FA8A77A}
O43 - CFD: 2012/07/09 18:15:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BEA91AB5-3660-4FD9-872C-E1D80DD2CA2D}
O43 - CFD: 2012/12/17 18:14:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BEF1F9EF-8963-4FEF-9454-6A5C0758FBC5}
O43 - CFD: 2012/12/21 11:08:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{BF13A081-D669-4E69-9338-82627D31BDC5}
O43 - CFD: 2013/08/29 17:34:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C011E7DA-30E2-48CD-92CB-686D826DB969}
O43 - CFD: 2013/11/27 19:03:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C0ADB087-1683-416B-90CF-255250C36C1B}
O43 - CFD: 2013/01/30 13:00:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C130B35C-7723-42CD-B33A-8D861C60648B}
O43 - CFD: 2012/11/23 13:25:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C13BB9DD-16A1-4D88-8187-538BC99C04FD}
O43 - CFD: 2013/08/08 17:57:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C2C0F4AD-1449-4DC4-8A97-23D1DD168F08}
O43 - CFD: 2012/06/28 11:02:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C2DDE98A-5081-44A5-BE70-56B097FE16AD}
O43 - CFD: 2015/03/14 14:13:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C2FF4171-5B07-495E-8D37-A99ECAE06329}
O43 - CFD: 2012/08/03 14:23:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C3FE227D-6635-488B-A05D-99F453EC4994}
O43 - CFD: 2013/12/07 16:13:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C449F6B4-7CE8-4D37-B261-D3157F4D2B35}
O43 - CFD: 2012/08/15 13:59:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C49B8843-8EF9-40CE-8E71-93C5046A7CA1}
O43 - CFD: 2013/02/23 15:22:05 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C4F85D5E-E74D-4BDA-85EC-A7FCF90ACC28}
O43 - CFD: 2012/06/27 10:27:19 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C51B0EBF-7E06-474C-B70E-D0EDC68A467C}
O43 - CFD: 2013/02/18 16:29:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C5585414-DC64-46D3-A3AC-034734B430F2}
O43 - CFD: 2012/08/17 15:32:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C565B77A-C04D-446A-A480-D87A53FD64F6}
O43 - CFD: 2013/03/31 12:47:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C5D78112-18CA-4046-8451-51FCA0B08E6E}
O43 - CFD: 2013/03/11 16:54:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C6F253FC-F2CE-4DD1-9498-030A15793D52}
O43 - CFD: 2013/04/10 16:20:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C7AF4FE7-A921-430C-8A10-0F03E3D56EEF}
O43 - CFD: 2012/10/26 16:28:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C904841E-E554-48EE-99D9-0401C884AA1E}
O43 - CFD: 2013/04/27 12:25:48 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C98E70BD-6B8F-4D83-83DD-ED6FCF9A014C}
O43 - CFD: 2012/09/13 22:34:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{C9CDA5BC-5A3A-4CBE-A373-02B96860B9A3}
O43 - CFD: 2013/12/06 14:05:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CA417E08-C6AE-4790-8638-E3CFAEAD093E}
O43 - CFD: 2012/12/19 18:20:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CA7A5298-EEE5-4813-82BD-0764F26BA91B}
O43 - CFD: 2012/09/10 13:05:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CAE4E2CD-8695-4DAC-936C-B4D474AB5733}
O43 - CFD: 2013/04/23 20:38:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CB7942D5-AB43-4373-A282-6FCD5B6F6F35}
O43 - CFD: 2012/09/19 23:31:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CBC197FA-92BB-4D1E-8A2D-C84B0C2E8BBE}
O43 - CFD: 2013/11/13 15:28:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CBC86270-6FD4-43FD-BB1B-03436D08BDA3}
O43 - CFD: 2012/10/31 15:08:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CC4E350E-6F2A-4C85-B052-FAEAD6E59FBC}
O43 - CFD: 2012/08/04 13:39:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CCE50BB5-A5E6-4FBF-9163-ED2ABDFF19C6}
O43 - CFD: 2012/08/26 15:42:27 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CE45C496-F4C8-48D6-854A-DA1E7D98D205}
O43 - CFD: 2012/07/06 18:11:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CEA3F6B1-D5FA-4112-9CB9-DE0221FB63B6}
O43 - CFD: 2012/11/18 17:37:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CEF0B104-78F5-4AB9-B6CD-14D5A2588DA9}
O43 - CFD: 2012/07/03 14:18:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CEF18F74-FE95-4885-9C77-9CA6D6C7F59A}
O43 - CFD: 2013/03/15 13:07:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{CF9CD360-C971-4558-974F-EA4FF1291EA9}
O43 - CFD: 2013/07/03 18:00:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D055C792-9B0F-43B1-A9C6-DB4E621B6BAE}
O43 - CFD: 2012/08/06 14:48:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D1764917-E2E4-4CDD-A9E8-2224BF63F97C}
O43 - CFD: 2012/08/02 10:17:42 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D1A3978F-C5DF-4F18-A6A7-FC2924CE508C}
O43 - CFD: 2012/12/25 12:57:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D203ECC6-71A0-46E1-92E6-9E66E83A17A1}
O43 - CFD: 2012/08/18 13:50:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D240A5D1-A630-4D09-9D85-EBD0FDD28575}
O43 - CFD: 2012/08/13 15:13:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D279B106-2CEE-4B96-9D74-D724F310B772}
O43 - CFD: 2013/06/18 19:16:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D2FA1998-1CBE-4B1B-867B-3AE2CE73949E}
O43 - CFD: 2013/06/04 18:02:00 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D34A1BE5-9CF9-41BB-9BCC-DC7895CDF35E}
O43 - CFD: 2012/07/27 15:15:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D55CF258-21CA-4FD4-A3BA-75C2E47C9849}
O43 - CFD: 2013/06/13 17:02:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D5A09751-A916-4172-A660-F8DEB33F5B46}
O43 - CFD: 2013/06/23 19:30:04 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D60C0D78-CCFC-4E03-9742-EBEE6142F927}
O43 - CFD: 2013/08/20 20:10:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D62FA86E-F860-4578-9A49-03D469FB206B}
O43 - CFD: 2012/12/08 16:27:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D650B512-5B0B-48B3-A8D7-C2C9BB74538B}
O43 - CFD: 2012/12/24 13:57:40 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D6E28A76-3E66-41DE-BD7C-514D60011383}
O43 - CFD: 2013/03/01 13:00:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D7E4523A-3D0D-49B2-9659-81B2D7017C75}
O43 - CFD: 2013/10/22 15:30:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D824FB28-4734-464C-8DA6-A07D23FE02A5}
O43 - CFD: 2013/04/15 07:15:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D82DCFFC-DBF0-4521-8AC4-17F1500E7FAB}
O43 - CFD: 2013/06/12 17:30:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D874B2E2-E321-4428-BF4F-4B04E9645EBC}
O43 - CFD: 2012/08/20 16:20:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D8B9A9D1-E8A4-4C25-A45E-3109172AD741}
O43 - CFD: 2013/11/24 17:54:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D8D63712-7B5B-4E19-866D-43AB54AFBE06}
O43 - CFD: 2013/06/03 18:42:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D9862501-1DBA-4560-ACC5-910BC70C0DAC}
O43 - CFD: 2013/10/24 17:42:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{D9FBABE4-A825-4130-8FF8-D86C5A4A171B}
O43 - CFD: 2013/08/01 15:08:46 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DA1365A8-A6F1-449F-AC64-F80696FD20AA}
O43 - CFD: 2012/10/03 12:03:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DAB36DF1-F4AC-4B11-A1EC-E56258BB021E}
O43 - CFD: 2012/09/16 17:36:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DADE5AF3-83F5-4056-9A12-C3B7870DB6E5}
O43 - CFD: 2012/07/31 18:32:01 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DAE17EE3-0787-49BC-BBEE-B6ED04FDD940}
O43 - CFD: 2012/06/26 14:02:28 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DB47DA06-2138-49EC-8F7F-63D9C93B7803}
O43 - CFD: 2012/06/30 17:29:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DB61F545-714A-42AE-9F4D-1986877EC330}
O43 - CFD: 2012/08/10 14:19:08 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DBEF2261-61D9-4054-BED2-9D3E286FDEA5}
O43 - CFD: 2012/07/17 20:04:46 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DC255F56-C342-4BEC-9905-9C505E699EE1}
O43 - CFD: 2013/09/16 16:21:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DC4A2000-E706-4B3B-8364-7D8AF74ADD31}
O43 - CFD: 2013/03/24 17:45:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DC67EE28-2E35-4F67-B418-37054E434D9D}
O43 - CFD: 2013/02/15 12:57:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DCA2D503-8ED2-49E0-AE40-399A81437002}
O43 - CFD: 2013/07/11 14:54:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DDD8A110-F93F-4133-93ED-A23882F9F629}
O43 - CFD: 2012/07/18 12:17:22 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DE9DC55F-49CB-4C52-B63A-8C9DD52E930F}
O43 - CFD: 2012/08/09 13:08:02 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DEEFF69E-AD5E-4327-AAB3-101736C30898}
O43 - CFD: 2012/12/16 14:43:53 - [0] D -- C:\Users\RAMATOU\AppData\Local\{DF363421-D241-4756-B1FA-EAF729BF4C87}
O43 - CFD: 2013/12/01 15:22:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E028A0F5-0B0F-4B11-ACE6-BC0FD7AAD686}
O43 - CFD: 2013/05/29 15:54:57 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E0F35766-C739-456F-8BF8-C27C8928780B}
O43 - CFD: 2013/06/15 11:14:49 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E0FFA02A-988E-49DA-B91A-AFBDCB900880}
O43 - CFD: 2013/10/04 12:33:44 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E10977E4-7DF6-4A20-950E-B0CD4D4BE787}
O43 - CFD: 2013/11/30 12:38:21 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E1B24FD1-96D7-424A-A2DE-2159F0DD3F36}
O43 - CFD: 2012/10/12 19:13:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E214FFC7-480F-4F94-9E35-2186EEE0144B}
O43 - CFD: 2012/07/08 15:31:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E347DDF3-2403-4F0E-AF2F-CB932412D6E5}
O43 - CFD: 2013/09/04 16:35:03 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E5206FF1-67F7-4415-A49D-D966676B8C66}
O43 - CFD: 2013/12/16 18:32:10 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E5E3B184-0C4A-4D12-8141-28197E9C5FAB}
O43 - CFD: 2012/11/19 16:32:06 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E5FCB89B-C081-4E38-A71A-8AC7AF6F630B}
O43 - CFD: 2013/05/17 13:46:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E60B88E5-E2F3-4A84-8762-F7B5DCEE6E21}
O43 - CFD: 2013/03/26 18:32:20 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E70096B9-492B-4EBF-A758-A7E03759B72E}
O43 - CFD: 2012/09/03 20:12:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E710F543-2C26-4265-BB28-6D125C9FDA83}
O43 - CFD: 2013/04/18 09:20:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E748F215-174B-4629-9D38-9A3DB8D1FB8C}
O43 - CFD: 2013/10/17 14:53:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E755A860-A23C-41D5-A9CB-9BCBD9C2644D}
O43 - CFD: 2012/08/01 13:27:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E7D23C10-9AC2-4256-BEF6-2DA37C559AA6}
O43 - CFD: 2013/07/05 17:39:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E7EF0CAE-6C20-4648-9F7B-4BF3FAF95A00}
O43 - CFD: 2013/02/19 18:51:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E879650A-5A7A-4871-9E27-0AFC9B5140ED}
O43 - CFD: 2013/03/14 16:31:18 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E8C7ADED-7D93-449A-B8C3-3DA94E8B6B24}
O43 - CFD: 2012/07/30 14:38:37 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E9E5125C-3461-46F8-BF06-01D7295066B0}
O43 - CFD: 2013/07/09 15:12:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{E9F7B3C4-DC67-43C5-9786-843496DC7EB3}
O43 - CFD: 2013/03/21 18:00:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EA1381EC-9CD4-45CE-B909-0F08E9405B17}
O43 - CFD: 2012/11/25 17:13:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EA34BFFF-825F-44E4-A259-E747BA4886CB}
O43 - CFD: 2013/12/16 18:14:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EB0FCBF5-8809-4E7A-9D57-4EB58AD2B082}
O43 - CFD: 2013/06/16 13:25:26 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EC41BF7D-2D01-4B1D-A16C-636BE11FE765}
O43 - CFD: 2012/07/20 14:28:17 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EC8C5410-F1C5-4920-BE82-27D71E39DE96}
O43 - CFD: 2013/06/27 16:37:59 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ED27E318-E774-4CAA-86EE-E27CBF528415}
O43 - CFD: 2013/06/25 18:10:56 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ED62A491-B3C8-4884-8635-4E68B5EBECB3}
O43 - CFD: 2013/04/25 16:55:43 - [0] D -- C:\Users\RAMATOU\AppData\Local\{ED98D7C0-1351-4A5C-A273-00FA1DF0E2D8}
O43 - CFD: 2013/05/23 23:08:34 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EDB98950-1E0F-4601-873B-7214439B0677}
O43 - CFD: 2013/07/08 16:45:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EDE69AF5-9FD2-457D-BC9D-E84C36F7EC4B}
O43 - CFD: 2013/01/28 15:46:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EE02E046-7FDA-4EA4-9DFC-96386892BDC4}
O43 - CFD: 2013/05/19 13:11:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EE4D788B-F4CF-4308-96D4-1DA9D78E223F}
O43 - CFD: 2013/10/07 18:47:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EE8D9DE5-14C9-4215-A72B-D6F6E8D575EE}
O43 - CFD: 2013/01/27 17:33:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EF07593D-2A20-4886-86F0-9BB76F7612C1}
O43 - CFD: 2013/12/03 19:31:36 - [0] D -- C:\Users\RAMATOU\AppData\Local\{EF3BF616-F8B1-4ADB-A5C8-1135E4AF96E2}
O43 - CFD: 2012/07/10 15:29:29 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F1257140-C418-4B19-9362-6766244285FE}
O43 - CFD: 2013/11/02 17:57:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F22DF259-7F4F-4B77-94E4-9005ACF75BC5}
O43 - CFD: 2012/07/02 17:54:52 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F2E4EBBF-2566-4E50-AE4E-894E5A9DC3F3}
O43 - CFD: 2012/07/06 18:12:12 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F48EC5F3-0B85-454E-975A-DA987CAD558D}
O43 - CFD: 2013/08/18 16:07:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F49756CF-B331-4780-BE96-C69C47323F20}
O43 - CFD: 2012/10/23 15:25:30 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F4BA6788-D8FB-4CB3-B3D8-75B6A154DC82}
O43 - CFD: 2012/08/13 15:13:35 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F4C22F00-8F77-4DB5-B010-00E200B9380C}
O43 - CFD: 2013/11/03 19:14:51 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F4DDBA08-236D-4D45-AE85-7585F5E77F6B}
O43 - CFD: 2013/06/29 13:27:25 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F536D514-9D53-4AD5-AB6D-AB882D5C074F}
O43 - CFD: 2013/05/20 13:34:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F694A4B0-46B5-4886-B4E7-950F4F14D958}
O43 - CFD: 2012/10/25 13:36:33 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F7A19E08-38FA-4EE6-8774-D76439FC1723}
O43 - CFD: 2013/03/23 15:53:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F87834CA-3044-4AE9-871A-27BD42EC89C0}
O43 - CFD: 2012/07/23 17:08:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F9667C90-27D3-4929-9693-5790BBCFBCEF}
O43 - CFD: 2013/11/01 13:16:07 - [0] D -- C:\Users\RAMATOU\AppData\Local\{F9FE1034-B978-4A5C-AFF4-3D4A784AD884}
O43 - CFD: 2012/10/28 15:14:14 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FA36A005-A579-4F20-A2BE-EC1C25BDDE0C}
O43 - CFD: 2013/01/08 18:03:55 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FA44C06F-2029-40E1-9D95-FD4BC95E8D84}
O43 - CFD: 2012/06/23 17:14:09 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FA95BB5A-84C2-434F-B69F-99BDEF8BA04C}
O43 - CFD: 2012/10/02 12:04:50 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FB8FCD19-B831-446F-902A-EA1F222546A7}
O43 - CFD: 2013/04/20 15:42:47 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FCBC4DAB-25AB-4C8B-8352-24FBD0491BFC}
O43 - CFD: 2012/12/28 13:16:24 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FCE7472B-A8CB-4AE7-94A5-B231A7D9EC42}
O43 - CFD: 2012/11/28 17:11:54 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FD1D79D6-9F80-4DEF-BB92-E29158F49A72}
O43 - CFD: 2012/07/26 16:00:41 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FD6B4A03-BF56-426C-ABA1-69F93C45A00C}
O43 - CFD: 2012/08/19 13:47:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FDF812A1-7FA2-4D21-97BD-26BC1BF612E5}
O43 - CFD: 2013/02/07 14:31:31 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FDFFA634-9744-4884-8194-70FDB43DA05A}
O43 - CFD: 2012/10/24 12:07:13 - [0] D -- C:\Users\RAMATOU\AppData\Local\{FFF4FB53-E8C4-4723-8488-A853507AFB7C}
O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\RAMATOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/08 16:35:02 - [] RD -- C:\Users\RAMATOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\RAMATOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/14 15:40:57 - [] RD -- C:\Users\RAMATOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Liste des pilotes du système (SDL) (O58) (51) - 6s
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864]
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440]
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904]
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128]
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856]
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848]
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432]
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704]
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720]
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480]
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488]
O58 - SDL:2012/05/29 15:53:30 A . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\System32\drivers\cpqdfw.sys [27456]
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496]
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016]
O58 - SDL:2012/08/21 14:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240]
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232]
O58 - SDL:2010/11/20 15:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720]
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496]
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736]
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264]
O58 - SDL:2013/02/19 23:32:18 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [13531936]
O58 - SDL:2009/06/10 22:35:35 A . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\drivers\nvm62x64.sys [408960]
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352]
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272]
O58 - SDL:2009/08/04 19:45:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor64.sys [241696]
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816]
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592]
O58 - SDL:2015/02/06 21:58:34 A . (.Quick Ref - Quick Ref Driver x64.) -- C:\Windows\System32\drivers\qrnfd_1_10_0_9.sys [58224] =>PUP.Optional.QuickRef
O58 - SDL:2007/05/14 16:06:18 A . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\drivers\RimUsb_AMD64.sys [27520]
O58 - SDL:2009/09/15 21:08:00 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2004128]
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040]
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584]
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464]
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656]
O58 - SDL:2013/03/18 17:51:08 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784]
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488]
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872]
O58 - SDL:2014/01/17 19:08:27 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\zrlzbvco.sys [422216]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (5) - 38s
O61 - LFC: 2015/07/09 14:39:21 A . (..) -- C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436445561-11DE-BF02-452472AE3ED6\Uninstall.exe [64441]
O61 - LFC: 2015/07/14 15:29:22 A . (.SoftBrain Technologies Ltd..) -- C:\Users\RAMATOU\AppData\Local\SmartWeb\__u.exe [172673] =>PUP.Optional.SmartWebSearch
O61 - LFC: 2015/07/14 15:45:50 A . (..) -- C:\Users\RAMATOU\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 2015/07/13 11:31:09 A . (..) -- C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\upgmsd_fr_005010030.exe [3297936] =>PUP.Optional.CrossRider
O61 - LFC: 2015/07/14 15:34:32 A . (..) -- C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\Download\myoffergroup_fr.exe [4082584] =>PUP.Optional.CrossRider

---\\ Associations Shell Spawning (O67) (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (SMI) (O68) (15) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\RAMATOU\AppData\Local\Beamrise\Application\beamrise.exe =>PUP.Optional.Beamrise
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\RAMATOU\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>PUP.Optional.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\RAMATOU\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>PUP.Optional.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\RAMATOU\AppData\Local\Beamrise\Application\beamrise.exe (.not file.) =>PUP.Optional.Beamrise
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (8) - 0s
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (My Online Search) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (e) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search The Web) - http://www.mystart.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} - (Search) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {B893D53E-F8F8-49E7-8413-5CD2E5468150} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {D71BB6E9-8EA8-4A4A-8C40-7B5C5D129C18} - (uTorrentBar_FR Customized Web Search) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2553856]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (13) - 1s
O87 - FAEL: "{547CE7F2-8FE4-41A4-BE71-0511C21D065F}" [In-None-P6-TRUE] .(.CyberLink Corp. - HP DVDSmart Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
O87 - FAEL: "{B9EB885E-B62B-4410-842C-9899DE5C979D}" [In-None-P6-TRUE] .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe
O87 - FAEL: "{738BDEA5-D2F1-4A9D-91AA-52ADD3551CC8}" [In-None-P6-TRUE] .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe
O87 - FAEL: "{D8893D2F-B1C1-4D2E-A03D-1C8A6184C512}" [In-None-P6-TRUE] .(.CyberLink Corp. - HP MediaSmart Video Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe
O87 - FAEL: "{5E35E3DB-271D-490F-8E80-50E86FED4A64}" [In-None-P6-TRUE] .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
O87 - FAEL: "{2C7281C1-A661-4496-AF0C-A87FFC4FE379}" [In-None-P6-TRUE] .(.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
O87 - FAEL: "{52DD0384-EF5A-45B1-ACA5-6A0647A7C85A}" [In-None-P6-FALSE] .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{70CB6EFD-E4F7-4CE9-828A-DD498C54BDBF}" [In-None-P17-FALSE] .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{15D1F660-6051-42D1-B8C0-D5F87D04BBC2}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86)\PenWes\dnshelper.exe
O87 - FAEL: "{5B5C64A8-E4C1-4C3A-9529-2339F3ED8F3C}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\PenWes\dnshelper.exe
O87 - FAEL: "{7FAC11F7-9245-4913-A04F-673E0A088B40}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86)\PenWes\dnsservice.exe
O87 - FAEL: "{22CC0EF6-31A3-49C1-8078-9F7598EDD7DA}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\PenWes\dnsservice.exe
O87 - FAEL: "{202B6E2D-EA45-49DB-9359-2A0286DEA409}" [In-None-P17-TRUE] .(.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse

---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) (1) - 4s
[MD5.] [WIS][2015/07/14 14:42:46] (.globalupdate - Windows Installer XML Toolset (3.9.1208.0).) -- C:\Windows\Installer\409f8f.msi [32768] =>PUP.Optional.GlobalUpdate

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (30) - 17s
SR - Auto [2015/06/12 09:25:00] [ 82112] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Demand [2015/07/11 13:54:12] [ 268464] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - Auto [2014/01/07 03:32:26] [ 43336] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - Auto [2011/08/31 00:05:32] [ 462184] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - Demand [2010/04/17 01:09:06] [ 246520] GameConsoleService (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
SS - Auto [2015/07/14 14:42:46] [ 68608] globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
SS - Demand [2015/07/14 14:42:46] [ 68608] globalUpdate Update Service (globalUpdatem) (globalUpdatem) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
SS - Auto [2015/07/14 15:29:04] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - Demand [2015/07/14 15:29:04] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - Auto [2015/05/09 15:11:39] [ 541696] History Eject (hehopove) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431177056-11DE-BF02-452472AE3ED6\jnsu81B.tmp
SR - Auto [2015/05/19 16:17:53] [ 193024] Mathematical Calculation Alt Key (hodufije) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\hnsqAC47.tmp
SR - Auto [2015/05/19 17:22:06] [ 99128] HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
SS - Demand [2013/05/13 21:09:20] [ 1129760] HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
SR - Demand [2014/02/06 09:27:02] [ 641352] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - Auto [2015/07/11 15:41:30] [ 288256] Paragraph Colon (jinezicy) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434111664-11DE-BF02-452472AE3ED6\knszE01C.tmp
SR - Auto [2015/04/21 13:04:18] [ 197632] Back-up Copy Design (jokidogy) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429614214-11DE-BF02-452472AE3ED6\jnsi491F.tmp
SR - Auto [2015/07/11 16:11:24] [ 287744] External Double Spaced (kezulyby) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436108346-11DE-BF02-452472AE3ED6\knskE0A9.tmp
SR - Auto [// ::] [ 878368] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - Auto [2013/02/19 23:32:20] [ 1259296] NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - Auto [2014/09/17 00:51:04] [ 1655808] DNS Service (PenWesController) . (...) - C:\Program Files (x86)\PenWes\DNSService.exe
SR - Auto [2015/04/30 10:17:08] [ 118272] High-tech Web Page (pevihymi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430381770-11DE-BF02-452472AE3ED6\jnsjCA02.tmp
SR - Auto [2014/02/20 15:13:08] [ 59904] PirritUpdater (PirritUpdater) . (...) - C:\Program Files (x86)\Pirrit\AutoUpdater.exe
SR - Auto [2015/05/28 13:02:37] [ 307200] Hands-free Question Mark (pogifipi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\jnsh3A12.tmp
SR - Auto [2015/05/19 12:47:52] [ 7414256] Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage®.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
SR - Auto [2015/05/28 13:02:44] [ 335360] Personal Digital Assistant Magenta (rinizisu) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\hnss54D5.tmp
SR - Auto [2015/03/26 18:24:31] [ 201216] Internet Zip Code (rytydexo) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427387030-11DE-BF02-452472AE3ED6\jnss6681.tmp
SS - Auto [2014/12/11 10:30:48] [ 315496] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - Auto [2015/06/05 13:37:12] [ 390144] Replace Spell Checker (timuneqi) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433504191-11DE-BF02-452472AE3ED6\hnsw9389.tmp
SR - Auto [2015/05/19 16:17:46] [ 245760] Dial Licence (tuleniwe) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\jnsa50CD.tmp
SR - Auto [2015/07/02 17:35:45] [ 199168] Typewriter High Resolution (zejytose) . (...) - C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435851315-11DE-BF02-452472AE3ED6\jnsf9CBE.tmp

---\\ Recherche de clés de registre Tracing (O100) (2) - 0s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASAPI32 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASMANCS =>PUP.Optional.WordSurfer

---\\ Scan Additionnel (O88) (254) - 0s
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1431177056-11DE-BF02-452472AE3ED6\jnsu81B.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\hnsqAC47.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1434111664-11DE-BF02-452472AE3ED6\knszE01C.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1429614214-11DE-BF02-452472AE3ED6\jnsi491F.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1436108346-11DE-BF02-452472AE3ED6\knskE0A9.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1430381770-11DE-BF02-452472AE3ED6\jnsjCA02.tmp =>PUP.Optional.CrossRider
C:\Program Files (x86)\Pirrit\AutoUpdater.exe =>PUP.Optional.Pirrit
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\jnsh3A12.tmp =>PUP.Optional.CrossRider
C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>PUP.Optional.ReImageRepair
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432810903-11DE-BF02-452472AE3ED6\hnss54D5.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1427387030-11DE-BF02-452472AE3ED6\jnss6681.tmp =>PUP.Optional.CrossRider
C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe =>PUP.Optional.ReImageRepair
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1433504191-11DE-BF02-452472AE3ED6\hnsw9389.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1432045001-11DE-BF02-452472AE3ED6\jnsa50CD.tmp =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Roaming\CA42BFAC-1435851315-11DE-BF02-452472AE3ED6\jnsf9CBE.tmp =>PUP.Optional.CrossRider
C:\Program Files (x86)\BrowserV14.07\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\BrowserV14.07\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6.exe =>PUP.Optional.CrossRider
C:\Program Files\BubbleSound\3D BubbleSound.exe =>PUP.Optional.BubbleSound
C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\upgmsd_fr_005010030.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\gmsd_fr_005010030\gmsd_fr_005010030.exe =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhkmcfanijhphphomamdkaejjadkhgn
C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\hehopove =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\hodufije =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\jinezicy =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\jokidogy =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\kezulyby =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\pevihymi =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\PirritDesktop =>PUP.Optional.Pirrit
HKLM\SYSTEM\CurrentControlSet\Services\PirritUpdater =>PUP.Optional.Pirrit
HKLM\SYSTEM\CurrentControlSet\Services\pogifipi =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector =>PUP.Optional.ReImageRepair
HKLM\SYSTEM\CurrentControlSet\Services\rinizisu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\rytydexo =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\timuneqi =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\tuleniwe =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\zejytose =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-1.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-11.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-2.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-4.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-10_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-3.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-5.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-5_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\678a7185-5455-440b-b575-a67817b3d169-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\APSnotifierPP1.job =>PUP.Optional.AnyProtect
C:\Windows\Tasks\APSnotifierPP2.job =>PUP.Optional.AnyProtect
C:\Windows\Tasks\APSnotifierPP3.job =>PUP.Optional.AnyProtect
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-3.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Crossbrowse.job =>PUP.Optional.CrossBrowse
C:\Windows\Tasks\fec3efde-451b-433b-805b-d4e7bfd155d6-5.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job =>PUP.Optional.GlobalUpdate
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job =>PUP.Optional.GlobalUpdate
C:\Windows\Tasks\iWebar-chromeinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\iWebar-codedownloader.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\iWebar-enabler.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\iWebar-firefoxinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\iWebar-updater.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MySearchDial.job =>PUP.Optional.MySearchDial
C:\Windows\Tasks\Plus-HD-4.7-chromeinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Plus-HD-4.7-codedownloader.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Plus-HD-4.7-enabler.job =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-1 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-11 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-2 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-4 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-5_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\52b294ea-65b2-4cda-9add-b77b482957ca-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-1-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-10_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-3 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-5 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-5_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\678a7185-5455-440b-b575-a67817b3d169-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\APSnotifierPP1 =>PUP.Optional.AnyProtect
C:\Windows\System32\Tasks\APSnotifierPP2 =>PUP.Optional.AnyProtect
C:\Windows\System32\Tasks\APSnotifierPP3 =>PUP.Optional.AnyProtect
C:\Windows\System32\Tasks\BackgroundContainer Startup Task =>PUP.Optional.Babylon
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-1-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-3 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-5_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\bbfbdf44-4c11-424e-bf89-c8daeda3b483-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Windows\System32\Tasks\fec3efde-451b-433b-805b-d4e7bfd155d6-5 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore =>PUP.Optional.GlobalUpdate
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA =>PUP.Optional.GlobalUpdate
C:\Windows\System32\Tasks\iWebar-chromeinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\iWebar-codedownloader =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\iWebar-enabler =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\iWebar-firefoxinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\iWebar-updater =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MaxComputerCleaner_Start =>PUP.Optional.MaxComputerCleaner
C:\Windows\System32\Tasks\MySearchDial =>PUP.Optional.MySearchDial
C:\Windows\System32\Tasks\Plus-HD-4.7-chromeinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Plus-HD-4.7-codedownloader =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Plus-HD-4.7-enabler =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\ReimageUpdater =>PUP.Optional.ReImageRepair
C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task =>PUP.Optional.SmartWebSearch
C:\Windows\System32\Tasks\Super Optimizer Schedule =>PUP.Optional.SuperOptimizer
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Protector =>PUP.Optional.ReImageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BrowserV14.07 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010030_is1 =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\awesomehpSoftware =>PUP.Optional.AwesomeHP
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Boxore =>PUP.Optional.Boxore
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\BrowserV14.07-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Cinema PlusV14.04-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Cinema PlusV14.04-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKLM\SOFTWARE\Wow6432Node\P1-App =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Pirrit =>PUP.Optional.Pirrit
HKLM\SOFTWARE\Wow6432Node\Pirrit Solutions =>PUP.Optional.Pirrit
HKLM\SOFTWARE\Wow6432Node\Pricora 12.0 =>PUP.Optional.Pricora
HKLM\SOFTWARE\Wow6432Node\QuickRef_1.10.0.9 =>PUP.Optional.QuickRef
HKLM\SOFTWARE\Wow6432Node\searchult =>PUP.Optional
HKLM\SOFTWARE\Wow6432Node\SI-App =>PUP.Optional.WinRST
HKLM\SOFTWARE\Wow6432Node\TabNav =>PUP.Optional.Abengine
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\winservice86 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\winservice86-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\WinUpd =>PUP.Optional.WinRST
HKLM\SOFTWARE\Wow6432Node\WordSurfer_1.10.0.19 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AnyProtect =>PUP.Optional.AnyProtect
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\Appscion =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Boxore =>PUP.Optional.Boxore
HKCU\SOFTWARE\BrowserV14.07 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\BrowserV14.07-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\BrowserV14.07-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\cacaoweb =>PUP.Optional.CacaoWeb
HKCU\SOFTWARE\Cinema PlusV14.04-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Cinema PlusV14.04-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\freesofttoday =>PUP.Optional.Multiplug
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\lollipop =>PUP.Optional.Lollipop
HKCU\SOFTWARE\MaxComputerCleanerLanguage =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\maxcomputerclenner =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\OfferBox =>PUP.Optional.OfferBox
HKCU\SOFTWARE\PerformerSoft LLC =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\RapidMediaConverterApp =>PUP.Optional.RapidMediaConverter
HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\reimagerepair =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\SimplyTech =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\BlockAndSurf =>PUP.Optional.BlockAndSurf =>PUP.Optional.BlockAndSurf
HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\ConduitSearchScopes =>PUP.Optional.Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\iWebar =>PUP.Optional.CrossRider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Plus-HD-4.7 =>PUP.Optional.CrossRider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\PriceGong =>PUP.Optional.PriceGong =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\PriceGong2 =>PUP.Optional.PriceGong =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\Smartbar =>PUP.Optional.SmartBar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\AppDataLow\Software\winservice86 =>PUP.Optional.CrossRider =>PUP.Optional.CrossRider
C:\Program Files (x86)\092286ba-0823-44c3-a540-fc0ca0f85d2c =>PUP.Optional.CrossRider
C:\Program Files (x86)\830217a9-69d3-4765-91c3-cc128faee89e =>PUP.Optional.CrossRider
C:\Program Files (x86)\BrowserV14.07 =>PUP.Optional.CrossRider
C:\Program Files (x86)\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Program Files (x86)\eDealPop =>PUP.Optional.eDeals
C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\gmsd_fr_005010030 =>PUP.Optional.CrossRider
C:\Program Files (x86)\MediaViewV1 =>PUP.Optional.MediaViewer
C:\Program Files (x86)\Pirrit =>PUP.Optional.Pirrit
C:\Program Files (x86)\predm =>PUP.Optional.Downware
C:\Program Files (x86)\Pricora 12.0 =>PUP.Optional.Pricora
C:\Program Files (x86)\QuickRef_1.10.0.9 =>PUP.Optional.QuickRef
C:\Program Files (x86)\SearchProtect =>PUP.SearchProtect
C:\Program Files (x86)\SearchProtect3867108 =>PUP.SearchProtect
C:\Program Files (x86)\WinRST =>PUP.Optional.WinRST
C:\Program Files (x86)\winservice86 =>PUP.Optional.CrossRider
C:\Program Files (x86)\WinServices =>Trojan.Inject.RRE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector =>PUP.Optional.AdvancedSystemProtector
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop
C:\ProgramData\MailUpdate =>PUP.Optional.MailUpdate
C:\ProgramData\Reimage Protector =>PUP.Optional.ReImageRepair
C:\Users\RAMATOU\AppData\Roaming\Activeris =>PUP.Optional.Activeris
C:\Users\RAMATOU\AppData\Roaming\AnyProtectEx =>PUP.Optional.AnyProtect
C:\Users\RAMATOU\AppData\Roaming\awesomehp =>PUP.Optional.AwesomeHP
C:\Users\RAMATOU\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\RAMATOU\AppData\Roaming\cacaoweb =>PUP.Optional.CacaoWeb
C:\Users\RAMATOU\AppData\Roaming\IminentToolbar =>PUP.Optional.IMBooster
C:\Users\RAMATOU\AppData\Roaming\MailUpdate =>PUP.Optional.MailUpdate
C:\Users\RAMATOU\AppData\Roaming\newnext.me =>PUP.Optional.NextLive
C:\Users\RAMATOU\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
C:\Users\RAMATOU\AppData\Roaming\OfferBox =>PUP.Optional.OfferBox
C:\Users\RAMATOU\AppData\Roaming\PerformerSoft =>PUP.Optional.PerformerSoft
C:\Users\RAMATOU\AppData\Roaming\Pirrit =>PUP.Optional.Pirrit
C:\Users\RAMATOU\AppData\Roaming\winservices =>Trojan.Inject.RRE
C:\Users\RAMATOU\AppData\Roaming\wp_update =>PUP.Optional.WpManager
C:\Users\RAMATOU\AppData\Local\BeamriseUninstall =>PUP.Optional.Beamrise
C:\Users\RAMATOU\AppData\Local\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Users\RAMATOU\AppData\Local\genienext =>PUP.Optional.NextLive
C:\Users\RAMATOU\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030 =>PUP.Optional.CrossRider
C:\Users\RAMATOU\AppData\Local\Lollipop =>PUP.Optional.Lollipop
C:\Users\RAMATOU\AppData\Local\Max_Computer_Cleaner =>PUP.Optional.MaxComputerCleaner
C:\Users\RAMATOU\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
C:\Users\RAMATOU\AppData\Local\SearchProtect =>PUP.SearchProtect
C:\Users\RAMATOU\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch
C:\Users\RAMATOU\AppData\Local\WinRST =>PUP.Optional.WinRST
C:\Windows\System32\drivers\qrnfd_1_10_0_9.sys =>PUP.Optional.QuickRef
C:\Users\RAMATOU\AppData\Local\SmartWeb\__u.exe =>PUP.Optional.SmartWebSearch
C:\Users\RAMATOU\AppData\Local\gmsd_fr_005010030\Download\myoffergroup_fr.exe =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Clients\StartMenuInternet\Beamrise.GDBWIVHUHBMPM4DIYUXIAIOMGA\shell\Open\command [Bad: C:\Users\RAMATOU\AppData\Local\Beamrise\Application\beamrise.exe ] =>PUP.Optional.Beamrise
HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse\shell\Open\command [Bad: C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe ] =>PUP.Optional.CrossBrowse
C:\Windows\Installer\409f8f.msi =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdatem =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASAPI32 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASMANCS =>PUP.Optional.WordSurfer

---\\ Récapitulatif des éléments trouvées sur votre station (54) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-pirritsuggestor/ =>PUP.Optional.Pirrit
http://www.nicolascoolman.fr/rogue-reimagerepair/ =>PUP.Optional.ReImageRepair
http://www.nicolascoolman.fr/blog =>PUP.Optional.BubbleSound
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/adware-lollipop/ =>PUP.Optional.Lollipop
http://www.nicolascoolman.fr/pup-anyprotect/ =>PUP.Optional.AnyProtect
http://www.nicolascoolman.fr/blog =>PUP.Optional.MySearchDial
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/pup-smartwebsearch/ =>PUP.Optional.SmartWebSearch
http://www.nicolascoolman.fr/blog =>PUP.Optional.SuperOptimizer
http://www.nicolascoolman.fr/blog =>PUP.Optional.GamesDesktop
http://www.nicolascoolman.fr/pup-awesomehp/ =>PUP.Optional.AwesomeHP
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>PUP.Optional.BrowserExtensions
http://www.nicolascoolman.fr/blog =>Toolbar.Mamverifier
http://www.nicolascoolman.fr/pup-offerbox/ =>PUP.Optional.OfferBox
http://www.nicolascoolman.fr/adware-pricora/ =>PUP.Optional.Pricora
http://www.nicolascoolman.fr/blog =>PUP.Optional.QuickRef
http://www.nicolascoolman.fr/blog =>PUP.Optional
http://www.nicolascoolman.fr/blog =>PUP.Optional.WinRST
http://www.nicolascoolman.fr/blog =>PUP.Optional.Abengine
http://www.nicolascoolman.fr/spyware-agenceexclusive/ =>PUP.Optional.AgenceExclusive
http://www.nicolascoolman.fr/blog =>PUP.Optional.WordSurfer
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/blog =>PUP.Optional.LiveSoftAction
http://www.nicolascoolman.fr/pup-cacaoweb/ =>PUP.Optional.CacaoWeb
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowser
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/adware-spointer/ =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/blog =>PUP.Optional.PerformerSoft
http://www.nicolascoolman.fr/blog =>PUP.Optional.RapidMediaConverter
http://www.nicolascoolman.fr/blog =>PUP.Optional.SimplyTech
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/pup-blockandsurf/ =>PUP.Optional.BlockAndSurf
http://www.nicolascoolman.fr/adware-pricegong/ =>PUP.Optional.PriceGong
http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/blog =>PUP.Optional.eDeals
http://www.nicolascoolman.fr/blog =>PUP.Optional.MediaViewer
http://www.nicolascoolman.fr/adware-downware/ =>PUP.Optional.Downware
http://www.nicolascoolman.fr/blog =>PUP.SearchProtect
http://www.nicolascoolman.fr/blog =>Trojan.Inject.RRE
http://www.nicolascoolman.fr/pup-advancedsystemprotector/ =>PUP.Optional.AdvancedSystemProtector
http://www.nicolascoolman.fr/blog =>PUP.Optional.MailUpdate
http://www.nicolascoolman.fr/pup-activeris/ =>PUP.Optional.Activeris
http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/pup-nextlive/ =>PUP.Optional.NextLive
http://www.nicolascoolman.fr/pup-bubbledock/ =>PUP.Optional.BubbleDock
http://www.nicolascoolman.fr/pup-wpmanager/ =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/hijacker-beamrise/ =>PUP.Optional.Beamrise
http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/pup-startsearch/ =>PUP.Optional.StartSearch

~ End of the scan, 55427 items in 142 seconds (1944)(0)()

Publicité


Signaler le contenu de ce document

Publicité