cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.20.20 Par Nicolas Coolman (2015/07/20)
~ Démarré par mustapha (Administrator) (2015/07/21 15:28:07)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version KO
~ Mode: Scanner
~ Rapport: C:\Users\mustapha\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\mustapha\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v43.0.2357.124
MSIE: Internet Explorer v11.0.9600.17914

---\\ Informations sur les produits Windows (4) - 21s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Logiciels de protection (1) - 0s
Avira Antivirus v15.0.11.579

---\\ Logiciels d'optimisation (1) - 0s
CCleaner v3.05

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2042.48 MB (14% free)
~ System Restore: Activé (Enable)
~ System drive C: has 288 GB free of 463 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MUSTAPHA-PC
~ User Name: mustapha
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 288 GB free of 463 GB (System)

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 2s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808]
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024]
[MD5.E066FDC3A2074D926903B8C31EF3B347] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2427392]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224]
[MD5.1877EB1495CFBDAB27D6A32F6DDF3818] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [159232]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808]

---\\ Processus lancés (15) - 2s
[MD5.9CF46FDF163E06B83D03FF929EF2296C] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [321104] [PID.1696]
[MD5.5839A8027D6D324A7CD494051A96628C] - (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568] [PID.1820]
[MD5.9A308FCDCCA98A15B6F62D36A272160E] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744] [PID.1864]
[MD5.831883B107684301F48ACE752C963984] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [66872] [PID.1900]
[MD5.E24106A5EAECDDFF00B25497049DD65F] - (...) -- C:\Windows\SysWOW64\PnkBstrB.exe [107832] [PID.1924]
[MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.2216]
[MD5.75102FC486595CF486DFD7239BE30DD5] - (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe [206208] [PID.912]
[MD5.1A493ED42BA0FA488518A79C3A96B46A] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088] [PID.3444]
[MD5.8CB8E0C93C5459B45BE1FA628FB0D761] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552] [PID.1100]
[MD5.013D640EE2BA28429AE422BF20A247D3] - (.W3i, LLC - InstallIQ Updater.) -- C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe [1179648] [PID.3152] =>PUP.Optional.Agent
[MD5.775F47E28C96739D0B81DF8A46116EFB] - (...) -- C:\Users\mustapha\AppData\Roaming\cacaoweb\cacaoweb.exe [532784] [PID.3600] =>PUP.Optional.CacaoWeb
[MD5.BE9320CEB453839E3C85615937C1D4F5] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [121128] [PID.3296]
[MD5.7058789A404F46A351D6229954CA3E19] - (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936] [PID.4132]
[MD5.20D3383F1B2516BFB54A072A2FC1A82D] - (.Suyin - Video Web Camera.) -- C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe [1545568] [PID.4280]
[MD5.18C15258F1F013FA341B2C56E3805D5B] - (.Dritek System Inc. - MMDx64Fx Application.) -- C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe [73808] [PID.4624]

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (6) - 1s
G2 - GCE: Preference [User Data\Default] [bcjagnifjocnddgeknajocbkkhlgibem] Surf Canyon
G2 - GCE: Preference [User Data\Default] [bfhknheblmoggjkhalcbhpcfibbhdhie] brasil
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__
G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (12) - 1s
P2 - EXT FILE: (...) -- C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\searchplugins\buenosearch.xml =>PUP.Optional.BuenoSearch
P2 - EXT: (.Freeven - Freeven pro 1.2.) -- C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com
P2 - EXT: (.Freeven - MediaPlayerplus.) -- C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com
P2 - EXT: (.http://www.cacaoweb.org/ - cacaoweb.) -- C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\extensions\cacaoweb@cacaoweb.org =>PUP.Optional.CacaoWeb
P2 - EXT: (.savesense.com - SaveSense.) -- C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23}
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited.) -- C:\Users\mustapha\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@tools.dpliveupdate.com/DealPlyLive Update;version=3] - (.DealPly Technologies Ltd.) -- C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll =>PUP.Optional.Dealply
P2 - FPN: [HKLM] [@tools.dpliveupdate.com/DealPlyLive Update;version=9] - (.DealPly Technologies Ltd.) -- C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll =>PUP.Optional.Dealply
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\7\NP_wtapp.dll
P2 - FPN: [HKLM] [@www.dlmanager.net/omaha/tools//Software Update;version=8] - (.Software.) -- C:\Program Files (x86)\Software\Update\1.2.201.0\npSoftwareOneClick8.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (24) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.com/ =>PUP.Optional.Astromenda
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/ =>PUP.Optional.MySearchDial
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/ =>PUP.Optional.MySearchDial
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/ =>PUP.Optional.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/ =>PUP.Optional.Qone8
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/ =>PUP.Optional.SmartBar
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/ =>PUP.Optional.Qone8
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/ =>PUP.Optional.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/ =>PUP.Optional.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://feed.snapdo.com/ =>PUP.Optional.SmartBar
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/ =>PUP.Optional.Qone8
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/ =>PUP.Optional.Babylon
R3 - URLSearchHook: (no name) - {8567a644-e36c-470c-86cf-9c5b4f37db81} Orphean
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (R5) (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (1) - 0s
O2 - BHO: (no name) [64Bits] - {71e129ff-6c2a-4984-818c-7e2c998b8d99} (Orphean)

---\\ Internet Explorer Toolbars (O3) (3) - 0s
O3 - Toolbar: 0x44A667856CE30C4786CF9C5B4F37DB81 - [HKCU]{8567A644-E36C-470C-86CF-9C5B4F37DB81} . (...) -- (.not file.)
O3 - Toolbar: 0x1AB9EE05F7AE8A4F978FFB83E7B03F8E - [HKCU]{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} . (...) -- (.not file.)
O3 - Toolbar: Smartbar - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (...) -- (.not file.) =>PUP.Optional.QuickShare

---\\ Applications lancées au démarrage du sytème (O4) (31) - 1s
O4 - HKLM\..\Run: [PLFSetI] . (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [InstallIQUpdater] . (.W3i, LLC - InstallIQ Updater.) -- C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe =>PUP.Optional.Agent
O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBVE.EXE
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\mustapha\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\mustapha\AppData\Roaming\cacaoweb\cacaoweb.exe =>PUP.Optional.CacaoWeb
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
O4 - HKLM\..\Wow6432Node\Run: [Norton Online Backup] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Wow6432Node\Run: [VideoWebCamera] . (.Suyin - Video Web Camera.) -- C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-2457860560-1913916082-3103561120-1000\..\Run: [InstallIQUpdater] . (.W3i, LLC - InstallIQ Updater.) -- C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe =>PUP.Optional.Agent
O4 - HKUS\S-1-5-21-2457860560-1913916082-3103561120-1000\..\Run: [EPSON Stylus DX5000 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBVE.EXE
O4 - HKUS\S-1-5-21-2457860560-1913916082-3103561120-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\mustapha\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-2457860560-1913916082-3103561120-1000\..\Run: [cacaoweb] . (...) -- C:\Users\mustapha\AppData\Roaming\cacaoweb\cacaoweb.exe =>PUP.Optional.CacaoWeb
O4 - HKUS\S-1-5-21-2457860560-1913916082-3103561120-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe

---\\ Modification Domaine/Adresses DNS (O17) (9) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

---\\ Liste des services NT non Microsoft et non désactivés (O23) (23) - 1s
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.ServiceHost.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Norton Online Backup (NOBU) . (.Symantec Corporation - Norton Online Backup Service.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe (.not file.)
O23 - Service: PnkBstrB (PnkBstrB) . (...) - C:\Windows\System32\PnkBstrB.exe (.not file.)
O23 - Service: SaveSenseLive Service (savesenselive) (savesenselive) . (...) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe (.not file.) =>PUP.Optional.SaveSense
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service (Updater Service) . (.Acer Group - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

---\\ Enumère les données de BootExecute (BEX) (O34) (1) - 0s
O34 - HKLM BootExecute: (sdnclean64.exe) - File not found

---\\ Tâches planifiées en automatique (O39) (50) - 3s
O39 - APT: - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: - (...) -- C:\Windows\Tasks\APSnotifierPP1.job [380] =>PUP.Optional.AnyProtect
O39 - APT: - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000Core.job [918]
O39 - APT: - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000UA.job [940]
O39 - APT: - (...) -- C:\Windows\Tasks\Final Media Player Update Checker.job [416] =>PUP.Optional.InstallCore
O39 - APT: - (...) -- C:\Windows\Tasks\Freeven pro 1.2-chromeinstaller.job [3114] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\Freeven pro 1.2-codedownloader.job [1538] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\Freeven pro 1.2-enabler.job [1436] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\Freeven pro 1.2-firefoxinstaller.job [2366] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\Freeven pro 1.2-updater.job [1592] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\GlaryInitialize.job [330]
O39 - APT: - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1068]
O39 - APT: - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1072]
O39 - APT: - (...) -- C:\Windows\Tasks\MediaPlayerplus-chromeinstaller.job [3450] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\MediaPlayerplus-codedownloader.job [1586] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\MediaPlayerplus-enabler.job [1484] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\MediaPlayerplus-firefoxinstaller.job [2422] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\MediaPlayerplus-updater.job [1640] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\Tasks\WSE_Astromenda.job [304] =>PUP.Optional.Astromenda
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\AdobeFlashPlayerUpdate [3442]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\AdobeFlashPlayerUpdate 2 [3182]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\APSnotifierPP1 [2836] =>PUP.Optional.AnyProtect
O39 - APT: - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000Core [3554]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000UA [3922]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Final Media Player Update Checker [3118] =>PUP.Optional.InstallCore
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Freeven pro 1.2-chromeinstaller [6144] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Freeven pro 1.2-codedownloader [4568] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Freeven pro 1.2-enabler [4466] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Freeven pro 1.2-firefoxinstaller [5396] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Freeven pro 1.2-updater [4622] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\GlaryInitialize [2614]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3816]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4068]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000Core [3670]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2457860560-1913916082-3103561120-1000UA [4066]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\MediaPlayerplus-chromeinstaller [6480] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\MediaPlayerplus-codedownloader [4616] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\MediaPlayerplus-enabler [4514] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\MediaPlayerplus-firefoxinstaller [5452] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\MediaPlayerplus-updater [4670] =>PUP.Optional.CrossRider
O39 - APT: - (...) -- C:\Windows\System32\Tasks\RunAsStdUser Task [3280]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\WSE_Astromenda [3252] =>PUP.Optional.Astromenda
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{1D7DFECC-94C2-482E-A04B-605FF200CDDE} [3112]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{3D47E455-299E-4992-8634-21C40CDF672D} [3288]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{5AD74513-CFF8-4453-AB74-BE9A667FDAA1} [3114]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{7F9FF667-6A0F-43D4-8419-AFA937B51809} [3112]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{D3F70606-BAF5-476A-894F-F6E1C24041F7} [3188]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{DBFE5981-13C5-4EA9-8302-AF74C75CB132} [3148]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\{E3375974-BA03-4E49-B84D-C3E04BC3369F} [3112]

---\\ Logiciels installés (O42) (29) - 9s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: EPSON Logiciel imprimante - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON Printer and Utilities
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Revo Uninstaller Pro 3.1.2 - (.VS Revo Group, Ltd..) [HKLM][64Bits] -- {67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {77DE5105-D05E-448C-96CB-7FA381903753}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Broadcom Gigabit NetLink Controller - (.Broadcom Corporation.) [HKLM][64Bits] -- {A84DB02B-9C2B-4272-9D2D-A80E00A56513}
O42 - Logiciel: Avira Antivirus v15.0.11.579 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM][64Bits] -- Revo Uninstaller
O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent
O42 - Logiciel: Claws & Feathers - (.WildTangent.) [HKLM][64Bits] -- WTA-0df8a36b-d0b0-4f47-929a-bfc270567133 =>.WildTangent
O42 - Logiciel: Fishdom 3: Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-1db177ad-6e5e-4a72-a47f-d577fb797904 =>.WildTangent
O42 - Logiciel: Floria - (.WildTangent.) [HKLM][64Bits] -- WTA-69a5b3dc-2696-4a63-a3d4-9783b1c13acd =>.WildTangent
O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-c405ed88-50f3-4555-95ba-9128c012c1d7 =>.WildTangent
O42 - Logiciel: Crazy Belts - (.WildTangent.) [HKLM][64Bits] -- WTA-d35ecab0-3089-4037-9344-aa83491efd34 =>.WildTangent
O42 - Logiciel: Garfield Kart - (.WildTangent.) [HKLM][64Bits] -- WTA-e065d3e2-6496-4080-9f25-8c919560b97a =>.WildTangent
O42 - Logiciel: Little Girl: Tess Plays At Being A Princess - (.WildTangent.) [HKLM][64Bits] -- WTA-e1528193-ebb9-4619-8546-98e5a23bc7a7 =>.WildTangent
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7}
O42 - Logiciel: Skype™ 7.4 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell =>.WildTangent
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {78002155-F025-4070-85B3-7C0453561701}
O42 - Logiciel: Avira v1.1.40.29239 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {8467e01f-0496-42ce-b247-88ef205b4880}
O42 - Logiciel: Avira v1.1.40.29239 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {A4D3E7B8-410D-443A-B6AB-F32CDD4BD28C}
O42 - Logiciel: RewardsArcadeSuite - (.215 Apps.) [HKCU][64Bits] -- RewardsArcadeSuite =>PUP.Optional.RewardsArcade

---\\ HKCU & HKLM Software Keys (169) - 9s
HKLM\SOFTWARE\Wow6432Node\1-abc
HKLM\SOFTWARE\Wow6432Node\855dadbbc6ebf10
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdobeFlashPlayerUpdate
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\anset
HKLM\SOFTWARE\Wow6432Node\AnvilStudio
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Avira
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\BitTorrent Acceleration Patch
HKLM\SOFTWARE\Wow6432Node\BrowserMngr =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Bunndle
HKLM\SOFTWARE\Wow6432Node\Computer Updater
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\DealPly =>PUP.Optional.Dealply
HKLM\SOFTWARE\Wow6432Node\DealPlyLive =>PUP.Optional.Dealply
HKLM\SOFTWARE\Wow6432Node\Debug
HKLM\SOFTWARE\Wow6432Node\Dritek
HKLM\SOFTWARE\Wow6432Node\EPSON
HKLM\SOFTWARE\Wow6432Node\Freeven pro 1.2 =>PUP.Optional.Freeven
HKLM\SOFTWARE\Wow6432Node\Freeze.com =>PUP.Optional.Freeze
HKLM\SOFTWARE\Wow6432Node\FREEzeFrog =>PUP.Optional.FreezeFrog
HKLM\SOFTWARE\Wow6432Node\free_soft_to_day =>PUP.Optional.FreeSoftToday
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\iMeshMediabarTb =>PUP.Optional.iMesh
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\InterVideo
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision
HKLM\SOFTWARE\Wow6432Node\Magix
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\MediaPlayerplus =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Mircrosoft
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\NewTech Infosystems
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OEM
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKLM\SOFTWARE\Wow6432Node\qone8Software
HKLM\SOFTWARE\Wow6432Node\QuestScan =>PUP.Optional.QuestScan
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKLM\SOFTWARE\Wow6432Node\SaveSenseLive =>PUP.Optional.SaveSense
HKLM\SOFTWARE\Wow6432Node\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Smart Panel
HKLM\SOFTWARE\Wow6432Node\SoftShape
HKLM\SOFTWARE\Wow6432Node\Software
HKLM\SOFTWARE\Wow6432Node\Sonic
HKLM\SOFTWARE\Wow6432Node\SP Global =>PUP.Optional.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\SProtector =>PUP.Optional.MocaFlix
HKLM\SOFTWARE\Wow6432Node\Systweak =>PUP.Optional.Systweak
HKLM\SOFTWARE\Wow6432Node\Taronja
HKLM\SOFTWARE\Wow6432Node\TeamViewer
HKLM\SOFTWARE\Wow6432Node\Techcity
HKLM\SOFTWARE\Wow6432Node\Ubisoft
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\VirtualDJ
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\W3i
HKLM\SOFTWARE\Wow6432Node\webtogo
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\X-AVCSD
HKLM\SOFTWARE\Wow6432Node\Even Balance
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\1ClickDownload =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\855dadbbc6ebf10
HKCU\SOFTWARE\Acer
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Anuman Interactive
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ASProtect
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\Bitberry
HKCU\SOFTWARE\Bitdefender
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\BitTorrent Acceleration Patch
HKCU\SOFTWARE\Boxore =>PUP.Optional.Boxore
HKCU\SOFTWARE\BrowserMngr =>PUP.Optional.Babylon
HKCU\SOFTWARE\cacaoweb =>PUP.Optional.CacaoWeb
HKCU\SOFTWARE\ChicaLogic, Inc.
HKCU\SOFTWARE\Cr_Installer =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DealPly =>PUP.Optional.Dealply
HKCU\SOFTWARE\DealPlyLive =>PUP.Optional.Dealply
HKCU\SOFTWARE\DownloadMR
HKCU\SOFTWARE\Dritek
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\FLV Blaster
HKCU\SOFTWARE\freesofttoday =>PUP.Optional.Multiplug
HKCU\SOFTWARE\freezefrogsa =>PUP.Optional.FreezeFrog
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GlarySoft
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HipSoft
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\lucky leap =>LuckyLeap
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MAGIX
HKCU\SOFTWARE\MainConcept (Adobe2)
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\mhk2
HKCU\SOFTWARE\Micro Application
HKCU\SOFTWARE\MiniLyrics
HKCU\SOFTWARE\Mirage
HKCU\SOFTWARE\MK2
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Norton
HKCU\SOFTWARE\OEM
HKCU\SOFTWARE\OfferBox =>PUP.Optional.OfferBox
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PopCap
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Safer Networking Limited
HKCU\SOFTWARE\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\Sonix
HKCU\SOFTWARE\Suyin
HKCU\SOFTWARE\Symantec
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VirtualDJ
HKCU\SOFTWARE\VLC
HKCU\SOFTWARE\VS Revo Group
HKCU\SOFTWARE\VSRevoGroup
HKCU\SOFTWARE\W3i
HKCU\SOFTWARE\WhoIsLive
HKCU\SOFTWARE\WildTangent
HKCU\SOFTWARE\WillowMusicStudio
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\SProtector =>PUP.Optional.MocaFlix
HKCU\SOFTWARE\AppDataLow\Toolbar
HKCU\SOFTWARE\AppDataLow\Software\Freeven pro 1.2 =>PUP.Optional.Freeven
HKCU\SOFTWARE\AppDataLow\Software\mediabarim
HKCU\SOFTWARE\AppDataLow\Software\MediaPlayerplus =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\PriceGong =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\RewardsArcadeSuite =>PUP.Optional.RewardsArcade
HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKCU\SOFTWARE\AppDataLow\Software\temp

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (695) - 44s
O43 - CFD: 2012/01/10 15:41:17 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2011/04/23 13:51:49 - [] D -- C:\Program Files (x86)\Anvil Studio 2011
O43 - CFD: 2012/07/12 08:20:27 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2011/09/05 16:59:18 - [0] D -- C:\Program Files (x86)\Atari
O43 - CFD: 2015/07/08 19:53:08 - [] D -- C:\Program Files (x86)\Avira
O43 - CFD: 2014/08/10 20:02:00 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2011/09/23 13:03:23 - [] D -- C:\Program Files (x86)\Chrome
O43 - CFD: 2015/04/17 06:22:18 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2010/09/13 10:07:45 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 2014/01/30 18:30:18 - [0] D -- C:\Program Files (x86)\DIgiCoupon =>PUP.Optional.DiGiCoupon
O43 - CFD: 2013/09/17 12:22:51 - [0] D -- C:\Program Files (x86)\EASEUS Deleted File Recovery 3.0.1
O43 - CFD: 2012/07/04 19:58:09 - [] D -- C:\Program Files (x86)\epson
O43 - CFD: 2012/03/23 14:06:04 - [] D -- C:\Program Files (x86)\File Type Assistant =>PUP.Optional.InstallCore
O43 - CFD: 2011/04/04 22:01:06 - [] D -- C:\Program Files (x86)\FinalMediaPlayer
O43 - CFD: 2011/09/23 13:15:45 - [] D -- C:\Program Files (x86)\fliptoast
O43 - CFD: 2011/08/16 20:09:46 - [] D -- C:\Program Files (x86)\FLV Blaster
O43 - CFD: 2014/11/11 22:16:56 - [] D -- C:\Program Files (x86)\Freeven pro 1.2 =>PUP.Optional.Freeven
O43 - CFD: 2014/12/27 19:08:04 - [] D -- C:\Program Files (x86)\Glary Utilities
O43 - CFD: 2014/02/23 10:47:08 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/06/21 21:23:08 - [0] D -- C:\Program Files (x86)\GUM11A7.tmp
O43 - CFD: 2015/06/21 21:37:31 - [0] D -- C:\Program Files (x86)\GUM3B0C.tmp
O43 - CFD: 2011/04/12 10:56:24 - [] D -- C:\Program Files (x86)\Hard Drive Powerwash
O43 - CFD: 2012/07/04 16:35:22 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2010/11/04 00:29:26 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/07/16 16:16:16 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2014/08/23 19:39:34 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2010/11/04 00:41:00 - [] D -- C:\Program Files (x86)\Launch Manager
O43 - CFD: 2013/11/22 21:43:41 - [] D -- C:\Program Files (x86)\MAGIX
O43 - CFD: 2014/11/11 22:16:46 - [] D -- C:\Program Files (x86)\MediaPlayerplus =>PUP.Optional.CrossRider
O43 - CFD: 2011/08/24 17:36:19 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2015/05/18 03:32:27 - [] D -- C:\Program Files (x86)\Microsoft Application Virtualization Client
O43 - CFD: 2011/04/27 17:31:37 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/05/18 01:24:30 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2010/11/04 00:52:31 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/04/03 10:27:50 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2012/11/15 17:36:44 - [] D -- C:\Program Files (x86)\Minilyrics
O43 - CFD: 2013/06/06 13:00:58 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2011/04/03 15:41:42 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2010/09/13 10:16:16 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2010/09/13 10:08:24 - [] D -- C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 2011/03/31 18:05:15 - [] D -- C:\Program Files (x86)\OEM
O43 - CFD: 2010/11/04 00:30:04 - [] D -- C:\Program Files (x86)\Packard Bell
O43 - CFD: 2013/04/17 17:46:01 - [] D -- C:\Program Files (x86)\Packard Bell Games
O43 - CFD: 2013/12/28 01:52:35 - [0] D -- C:\Program Files (x86)\PSupport
O43 - CFD: 2010/11/04 00:43:18 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/04/19 19:15:22 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2012/06/02 06:24:16 - [] D -- C:\Program Files (x86)\Smart Panel
O43 - CFD: 2010/09/13 10:07:45 - [] D -- C:\Program Files (x86)\Social Networks
O43 - CFD: 2010/09/13 10:18:01 - [] D -- C:\Program Files (x86)\Symantec
O43 - CFD: 2010/11/04 00:43:38 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2011/07/30 17:02:34 - [] D -- C:\Program Files (x86)\Ubisoft
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2011/04/04 22:06:07 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2010/11/04 00:40:36 - [] D -- C:\Program Files (x86)\VideoWebCamera
O43 - CFD: 2011/11/17 13:00:56 - [] D -- C:\Program Files (x86)\VirtualDJ
O43 - CFD: 2011/04/21 17:39:06 - [] D -- C:\Program Files (x86)\VS Revo Group
O43 - CFD: 2011/10/13 00:14:46 - [] D -- C:\Program Files (x86)\W3i =>PUP.Optional.Agent
O43 - CFD: 2014/07/14 17:22:45 - [] D -- C:\Program Files (x86)\WildGames
O43 - CFD: 2015/06/20 21:13:07 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 2013/07/10 21:55:10 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2013/01/25 18:34:22 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2011/06/04 20:25:08 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/06/11 03:49:39 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2011/06/04 20:25:08 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2011/06/04 20:25:08 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011/06/04 20:25:08 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2011/11/09 00:17:28 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2014/12/27 19:08:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/09/14 17:43:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
O43 - CFD: 2011/09/05 16:59:29 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
O43 - CFD: 2015/07/08 19:53:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
O43 - CFD: 2011/04/01 09:07:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2011/08/19 20:00:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJ Mix Lite
O43 - CFD: 2012/06/02 06:28:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2012/06/02 06:27:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON PhotoQuicker
O43 - CFD: 2012/06/02 06:24:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan to Web
O43 - CFD: 2012/06/02 06:24:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Smart Panel
O43 - CFD: 2011/04/04 22:01:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalMediaPlayer
O43 - CFD: 2011/08/16 20:09:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Blaster
O43 - CFD: 2014/03/26 18:55:54 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_to_day =>PUP.Optional.FreeSoftToday
O43 - CFD: 2014/10/26 14:08:47 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2011/04/12 10:52:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
O43 - CFD: 2014/02/23 10:47:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2011/11/21 15:37:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
O43 - CFD: 2011/11/08 00:06:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Groove eJay
O43 - CFD: 2011/10/13 00:14:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstallIQ Updater
O43 - CFD: 2010/11/04 00:29:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 2014/08/23 19:39:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2013/11/22 21:43:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2011/11/08 19:01:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Micro Application
O43 - CFD: 2011/04/28 20:24:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français)
O43 - CFD: 2015/05/15 08:33:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2010/09/13 10:17:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2011/07/30 16:36:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
O43 - CFD: 2011/03/31 18:05:38 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
O43 - CFD: 2015/05/24 20:23:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
O43 - CFD: 2015/04/17 06:22:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2010/09/13 10:07:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Social Networks
O43 - CFD: 2014/03/26 06:17:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2009/07/14 09:44:38 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2010/11/04 00:40:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Web Camera
O43 - CFD: 2011/04/04 22:06:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2012/06/22 12:27:48 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2011/11/08 22:23:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2011/08/19 20:15:46 - [] D -- C:\ProgramData\2E181
O43 - CFD: 2014/08/23 19:39:36 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2014/02/28 00:32:21 - [] D -- C:\ProgramData\9516aa3f1bde9ef5
O43 - CFD: 2010/09/13 10:07:05 - [] D -- C:\ProgramData\Acer
O43 - CFD: 2012/06/02 22:36:25 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2014/03/22 01:29:22 - [] D -- C:\ProgramData\AdRemooverUTube
O43 - CFD: 2013/08/03 18:49:59 - [] D -- C:\ProgramData\APN
O43 - CFD: 2014/08/23 19:31:14 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2012/07/12 08:21:57 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2011/09/05 16:47:27 - [0] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2015/06/05 21:42:03 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2014/03/26 01:35:51 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2010/09/13 10:08:43 - [] D -- C:\ProgramData\BackupManager
O43 - CFD: 2014/01/25 16:02:38 - [] D -- C:\ProgramData\BlueStacks
O43 - CFD: 2011/03/31 18:04:38 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2011/09/23 13:03:14 - [] D -- C:\ProgramData\Computer Updater
O43 - CFD: 2011/07/18 18:22:51 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/12/30 22:40:34 - [] D -- C:\ProgramData\efnkclpkmfcgailbfehafomfmenngpaj
O43 - CFD: 2012/04/05 18:05:49 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2014/03/12 05:50:48 - [] D -- C:\ProgramData\FastSys
O43 - CFD: 2011/03/31 18:04:38 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2011/04/12 10:59:28 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2013/08/01 18:07:13 - [] D -- C:\ProgramData\FloodLightGames
O43 - CFD: 2015/03/11 06:44:54 - [] D -- C:\ProgramData\Fun2SavE =>PUP.Optional.Multiplug
O43 - CFD: 2013/07/31 16:08:52 - [] D -- C:\ProgramData\HipSoft
O43 - CFD: 2014/12/27 18:33:44 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2011/08/18 20:57:44 - [] D -- C:\ProgramData\MAGIX
O43 - CFD: 2012/06/02 21:57:41 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2011/03/31 18:04:38 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2014/12/09 21:43:25 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2011/03/31 18:04:38 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2013/01/14 17:03:41 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2010/09/13 10:15:35 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2014/01/31 05:57:52 - [] D -- C:\ProgramData\niofljcfdlbkaddcckeaimickimmgbdk
O43 - CFD: 2011/04/01 08:48:12 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2010/09/13 10:19:33 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2011/03/31 18:06:08 - [] D -- C:\ProgramData\oem
O43 - CFD: 2015/07/08 19:53:27 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2010/09/13 10:12:32 - [] D -- C:\ProgramData\Packard Bell
O43 - CFD: 2011/11/08 19:19:02 - [] D -- C:\ProgramData\Pianosoft
O43 - CFD: 2013/07/29 11:55:25 - [] D -- C:\ProgramData\PlayFirst
O43 - CFD: 2014/08/07 17:53:35 - [] D -- C:\ProgramData\Playrix Entertainment
O43 - CFD: 2015/05/18 01:44:12 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2014/02/16 11:50:43 - [0] D -- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2010/09/13 10:18:01 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2014/01/29 16:06:56 - [] D -- C:\ProgramData\Systweak =>PUP.Optional.Systweak
O43 - CFD: 2010/09/13 10:07:12 - [] D -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2011/07/30 19:00:40 - [] D -- C:\ProgramData\Ubisoft
O43 - CFD: 2012/06/02 06:25:36 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2011/04/28 19:49:21 - [] D -- C:\ProgramData\VirtualizedApplications
O43 - CFD: 2015/05/24 20:23:01 - [] D -- C:\ProgramData\VS Revo Group
O43 - CFD: 2011/04/04 22:00:21 - [] D -- C:\ProgramData\W3i =>PUP.Optional.Agent
O43 - CFD: 2014/02/14 19:45:02 - [] D -- C:\ProgramData\whoislive
O43 - CFD: 2013/04/19 12:54:40 - [] D -- C:\ProgramData\Wild Tangent
O43 - CFD: 2014/07/14 17:22:44 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2012/07/12 08:22:32 - [] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 2012/01/10 15:41:25 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2013/10/27 12:59:11 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2014/08/23 19:38:06 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2014/05/16 03:10:43 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2012/06/02 06:20:29 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2010/11/04 00:29:24 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2010/11/04 00:50:11 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 2011/09/05 16:52:13 - [] D -- C:\Program Files (x86)\Common Files\MAGIX Services
O43 - CFD: 2013/05/16 14:04:49 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2010/09/13 10:17:27 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2010/09/13 10:01:50 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2010/11/04 00:49:14 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/04/17 06:22:18 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2010/11/04 00:49:14 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2011/09/18 16:57:39 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 2011/11/09 18:40:44 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2010/11/04 00:50:35 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2014/02/14 18:07:20 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 2012/08/01 02:39:10 - [] D -- C:\Users\mustapha\AppData\Roaming\Adobe
O43 - CFD: 2011/04/23 13:51:07 - [] D -- C:\Users\mustapha\AppData\Roaming\Anvil Studio
O43 - CFD: 2012/07/23 21:04:35 - [] D -- C:\Users\mustapha\AppData\Roaming\Apple Computer
O43 - CFD: 2015/04/07 17:01:23 - [] D -- C:\Users\mustapha\AppData\Roaming\Avira
O43 - CFD: 2013/10/27 12:59:32 - [] D -- C:\Users\mustapha\AppData\Roaming\bayardKids
O43 - CFD: 2013/10/27 13:17:26 - [0] D -- C:\Users\mustapha\AppData\Roaming\bayardKids.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1
O43 - CFD: 2011/12/23 16:04:26 - [] D -- C:\Users\mustapha\AppData\Roaming\BitTorrent
O43 - CFD: 2011/11/09 17:20:09 - [] D -- C:\Users\mustapha\AppData\Roaming\BitZipper
O43 - CFD: 2015/07/21 15:22:54 - [] D -- C:\Users\mustapha\AppData\Roaming\cacaoweb =>PUP.Optional.CacaoWeb
O43 - CFD: 2014/09/20 19:56:13 - [] D -- C:\Users\mustapha\AppData\Roaming\com.anuman.LittleGirl-Tessplaysatbeingaprincess
O43 - CFD: 2013/02/13 14:35:50 - [] D -- C:\Users\mustapha\AppData\Roaming\com.tribalnova.bayardkids.application.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1
O43 - CFD: 2011/09/23 13:05:09 - [] D -- C:\Users\mustapha\AppData\Roaming\com.w3i.FlipToast =>PUP.Optional.Agent
O43 - CFD: 2012/07/04 16:35:03 - [] D -- C:\Users\mustapha\AppData\Roaming\CVitae
O43 - CFD: 2012/08/19 01:10:54 - [] D -- C:\Users\mustapha\AppData\Roaming\dvdcss
O43 - CFD: 2014/12/27 19:08:05 - [] D -- C:\Users\mustapha\AppData\Roaming\FinalMediaPlayer
O43 - CFD: 2013/08/01 18:07:13 - [] D -- C:\Users\mustapha\AppData\Roaming\FloodLightGames
O43 - CFD: 2014/09/20 20:04:59 - [] D -- C:\Users\mustapha\AppData\Roaming\Floria
O43 - CFD: 2013/02/20 13:32:07 - [] D -- C:\Users\mustapha\AppData\Roaming\FLV Blaster
O43 - CFD: 2014/03/26 19:09:51 - [] D -- C:\Users\mustapha\AppData\Roaming\GlarySoft
O43 - CFD: 2011/09/17 20:46:22 - [] D -- C:\Users\mustapha\AppData\Roaming\HTML Executable
O43 - CFD: 2011/03/31 18:05:54 - [] D -- C:\Users\mustapha\AppData\Roaming\Identities
O43 - CFD: 2011/03/31 18:06:25 - [] D -- C:\Users\mustapha\AppData\Roaming\Intel Corporation
O43 - CFD: 2011/11/08 19:01:58 - [] D -- C:\Users\mustapha\AppData\Roaming\invibes
O43 - CFD: 2011/03/31 18:06:09 - [] D -- C:\Users\mustapha\AppData\Roaming\Macromedia
O43 - CFD: 2011/08/18 20:58:51 - [] D -- C:\Users\mustapha\AppData\Roaming\MAGIX
O43 - CFD: 2009/07/14 09:44:38 - [0] D -- C:\Users\mustapha\AppData\Roaming\Media Center Programs
O43 - CFD: 2014/06/29 15:10:12 - [] SD -- C:\Users\mustapha\AppData\Roaming\Microsoft
O43 - CFD: 2013/01/14 17:04:20 - [] D -- C:\Users\mustapha\AppData\Roaming\Mozilla
O43 - CFD: 2011/08/26 15:18:32 - [0] D -- C:\Users\mustapha\AppData\Roaming\MusicNet
O43 - CFD: 2012/06/07 14:04:52 - [] D -- C:\Users\mustapha\AppData\Roaming\Nero
O43 - CFD: 2013/07/29 11:55:25 - [] D -- C:\Users\mustapha\AppData\Roaming\PlayFirst
O43 - CFD: 2014/09/06 16:59:32 - [] D -- C:\Users\mustapha\AppData\Roaming\QuickScan
O43 - CFD: 2011/09/23 13:10:04 - [] D -- C:\Users\mustapha\AppData\Roaming\RegistryKeys
O43 - CFD: 2015/07/20 19:39:44 - [] D -- C:\Users\mustapha\AppData\Roaming\Skype
O43 - CFD: 2011/07/18 18:22:45 - [] D -- C:\Users\mustapha\AppData\Roaming\SNS
O43 - CFD: 2015/05/11 22:57:57 - [] D -- C:\Users\mustapha\AppData\Roaming\SoftGrid Client
O43 - CFD: 2014/01/30 18:24:01 - [] D -- C:\Users\mustapha\AppData\Roaming\systweak =>PUP.Optional.Systweak
O43 - CFD: 2011/04/27 17:32:41 - [0] D -- C:\Users\mustapha\AppData\Roaming\TP
O43 - CFD: 2015/06/05 21:38:24 - [] D -- C:\Users\mustapha\AppData\Roaming\uTorrent
O43 - CFD: 2014/08/16 20:15:59 - [] D -- C:\Users\mustapha\AppData\Roaming\vlc
O43 - CFD: 2013/04/17 17:46:22 - [] D -- C:\Users\mustapha\AppData\Roaming\WildTangent
O43 - CFD: 2011/04/20 20:02:32 - [0] D -- C:\Users\mustapha\AppData\Roaming\Windows Live Writer
O43 - CFD: 2011/08/18 20:20:02 - [] D -- C:\Users\mustapha\AppData\Roaming\WinRAR
O43 - CFD: 2015/07/21 15:28:44 - [] D -- C:\Users\mustapha\AppData\Roaming\ZHP
O43 - CFD: 2011/09/17 20:55:51 - [] D -- C:\Users\mustapha\AppData\Local\Adobe
O43 - CFD: 2012/07/12 08:20:31 - [] D -- C:\Users\mustapha\AppData\Local\Apple
O43 - CFD: 2012/07/12 08:23:11 - [] D -- C:\Users\mustapha\AppData\Local\Apple Computer
O43 - CFD: 2011/03/31 18:04:42 - [0] SHD -- C:\Users\mustapha\AppData\Local\Application Data
O43 - CFD: 2011/07/09 15:48:04 - [] D -- C:\Users\mustapha\AppData\Local\Ares
O43 - CFD: 2014/09/28 00:11:07 - [] D -- C:\Users\mustapha\AppData\Local\Astromenda =>PUP.Optional.Astromenda
O43 - CFD: 2013/09/14 09:13:42 - [] D -- C:\Users\mustapha\AppData\Local\avgchrome
O43 - CFD: 2015/07/16 21:03:53 - [] D -- C:\Users\mustapha\AppData\Local\CrashDumps
O43 - CFD: 2015/06/17 14:28:16 - [] D -- C:\Users\mustapha\AppData\Local\Diagnostics
O43 - CFD: 2015/06/20 11:59:34 - [] D -- C:\Users\mustapha\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2014/06/12 01:20:23 - [] SHD -- C:\Users\mustapha\AppData\Local\EmieSiteList
O43 - CFD: 2014/06/12 01:20:23 - [] SHD -- C:\Users\mustapha\AppData\Local\EmieUserList
O43 - CFD: 2013/02/28 01:33:01 - [] D -- C:\Users\mustapha\AppData\Local\Facebook
O43 - CFD: 2012/03/23 14:17:06 - [] D -- C:\Users\mustapha\AppData\Local\FileTypeAssistant =>PUP.Optional.InstallCore
O43 - CFD: 2014/04/15 20:51:59 - [] D -- C:\Users\mustapha\AppData\Local\fst_fr_134 =>PUP.Optional.FreeSoftToday
O43 - CFD: 2015/06/21 18:49:32 - [] D -- C:\Users\mustapha\AppData\Local\Google
O43 - CFD: 2015/06/05 21:43:28 - [] D -- C:\Users\mustapha\AppData\Local\GWX
O43 - CFD: 2011/03/31 18:04:42 - [0] SHD -- C:\Users\mustapha\AppData\Local\Historique
O43 - CFD: 2013/01/15 16:24:32 - [] D -- C:\Users\mustapha\AppData\Local\Macromedia
O43 - CFD: 2013/11/26 17:27:25 - [] D -- C:\Users\mustapha\AppData\Local\Microsoft
O43 - CFD: 2011/11/02 20:03:11 - [] D -- C:\Users\mustapha\AppData\Local\Microsoft Games
O43 - CFD: 2013/01/14 17:04:05 - [] D -- C:\Users\mustapha\AppData\Local\Mozilla
O43 - CFD: 2014/01/31 05:58:03 - [] D -- C:\Users\mustapha\AppData\Local\Packages
O43 - CFD: 2014/01/29 16:05:59 - [] D -- C:\Users\mustapha\AppData\Local\Programs
O43 - CFD: 2014/01/29 16:06:17 - [] D -- C:\Users\mustapha\AppData\Local\SaveSenseLive =>PUP.Optional.SaveSense
O43 - CFD: 2014/02/28 06:18:35 - [] D -- C:\Users\mustapha\AppData\Local\Skype
O43 - CFD: 2011/04/27 17:32:27 - [] D -- C:\Users\mustapha\AppData\Local\SoftGrid Client
O43 - CFD: 2015/07/21 15:28:09 - [] D -- C:\Users\mustapha\AppData\Local\Temp
O43 - CFD: 2011/03/31 18:04:42 - [0] SHD -- C:\Users\mustapha\AppData\Local\Temporary Internet Files
O43 - CFD: 2011/08/02 14:34:11 - [] D -- C:\Users\mustapha\AppData\Local\THQ
O43 - CFD: 2012/08/15 23:30:15 - [] D -- C:\Users\mustapha\AppData\Local\VirtualStore
O43 - CFD: 2015/05/24 20:23:21 - [] D -- C:\Users\mustapha\AppData\Local\VS Revo Group
O43 - CFD: 2014/12/26 21:34:21 - [] D -- C:\Users\mustapha\AppData\Local\Windows Live
O43 - CFD: 2011/04/20 20:02:44 - [] D -- C:\Users\mustapha\AppData\Local\Windows Live Writer
O43 - CFD: 2011/11/23 18:23:00 - [0] D -- C:\Users\mustapha\AppData\Local\{00FF8A1C-6B0C-4648-B1D0-E4C56CA81F0D}
O43 - CFD: 2011/05/13 00:34:43 - [0] D -- C:\Users\mustapha\AppData\Local\{02354E50-B3C3-4C59-9E69-618FF5CBAFA6}
O43 - CFD: 2012/05/09 20:06:53 - [0] D -- C:\Users\mustapha\AppData\Local\{034607EC-F213-46B1-BB28-AE9C97E7EADF}
O43 - CFD: 2011/04/26 01:14:50 - [0] D -- C:\Users\mustapha\AppData\Local\{03726966-6BAE-4546-B3FE-3B2087415CF1}
O43 - CFD: 2011/08/21 04:17:18 - [0] D -- C:\Users\mustapha\AppData\Local\{03FD0C14-E472-478D-BDC6-17B07C3A4910}
O43 - CFD: 2011/06/11 21:54:30 - [0] D -- C:\Users\mustapha\AppData\Local\{04D7351C-25C4-4E3A-AD2C-013C44A63388}
O43 - CFD: 2012/03/15 20:56:48 - [0] D -- C:\Users\mustapha\AppData\Local\{05403851-F7C6-4B61-82F9-538F739C45E4}
O43 - CFD: 2012/07/19 13:36:42 - [0] D -- C:\Users\mustapha\AppData\Local\{06359CF1-02F7-41A4-B84E-3D6D17A7F3D7}
O43 - CFD: 2011/07/06 20:53:52 - [0] D -- C:\Users\mustapha\AppData\Local\{063B9441-691C-49A2-9BC1-530BAD7E373A}
O43 - CFD: 2012/04/16 17:08:10 - [0] D -- C:\Users\mustapha\AppData\Local\{066A3237-554B-46FF-BD6A-D231E0F1A1C5}
O43 - CFD: 2011/09/10 15:39:47 - [0] D -- C:\Users\mustapha\AppData\Local\{0807F797-68FE-4D82-88DD-A7B18736127F}
O43 - CFD: 2012/07/11 19:02:05 - [0] D -- C:\Users\mustapha\AppData\Local\{08662E95-8CC8-4A1F-9F8C-961007751128}
O43 - CFD: 2011/08/12 17:49:40 - [0] D -- C:\Users\mustapha\AppData\Local\{08DB9D8B-65D4-4740-9770-8CE7E391C452}
O43 - CFD: 2012/05/19 21:29:41 - [0] D -- C:\Users\mustapha\AppData\Local\{08DF2DD5-73FF-4ED3-9CE7-CEB64CE60D39}
O43 - CFD: 2012/03/04 22:15:42 - [0] D -- C:\Users\mustapha\AppData\Local\{0A9365A8-EDB4-478A-9E61-9D3F7CA6956B}
O43 - CFD: 2012/07/20 09:50:49 - [0] D -- C:\Users\mustapha\AppData\Local\{0A9D2C1B-CC8B-4B7B-BDAF-7F9A9BF92855}
O43 - CFD: 2011/07/08 19:59:45 - [0] D -- C:\Users\mustapha\AppData\Local\{0B45D332-B76E-4041-8006-8FDD13A3B356}
O43 - CFD: 2012/08/02 18:29:30 - [0] D -- C:\Users\mustapha\AppData\Local\{0C1AB9B8-FAEF-4D2B-8876-FEB6048D145F}
O43 - CFD: 2011/10/27 01:39:19 - [0] D -- C:\Users\mustapha\AppData\Local\{0C6721B4-92A8-49D5-B344-F23273B3D799}
O43 - CFD: 2011/09/27 15:32:09 - [0] D -- C:\Users\mustapha\AppData\Local\{0CC6AEBD-7648-458E-983D-63BE7603BEF3}
O43 - CFD: 2011/10/19 23:44:21 - [0] D -- C:\Users\mustapha\AppData\Local\{0D1E02C3-7A5D-46A1-900D-5129AD25CE12}
O43 - CFD: 2012/03/02 21:23:44 - [0] D -- C:\Users\mustapha\AppData\Local\{0E2E1113-6124-4571-9624-9157F52F36FE}
O43 - CFD: 2012/02/29 23:29:34 - [0] D -- C:\Users\mustapha\AppData\Local\{0E3AD6C5-3266-488D-BD21-62848A387911}
O43 - CFD: 2011/11/17 15:25:20 - [0] D -- C:\Users\mustapha\AppData\Local\{0ED552A5-987B-4E64-B0C7-59F329F73A69}
O43 - CFD: 2012/01/16 19:39:11 - [0] D -- C:\Users\mustapha\AppData\Local\{0FA5DA07-66B6-4843-B8FD-AC49FC37A4A0}
O43 - CFD: 2011/06/08 19:40:32 - [0] D -- C:\Users\mustapha\AppData\Local\{0FB83E98-ADDE-414E-B26D-293AB0474C7D}
O43 - CFD: 2012/01/28 23:40:05 - [0] D -- C:\Users\mustapha\AppData\Local\{103397E3-D0BE-430A-8F47-F7587767275B}
O43 - CFD: 2011/06/03 00:26:03 - [0] D -- C:\Users\mustapha\AppData\Local\{1064E736-0B72-40D1-9491-24C7E5242686}
O43 - CFD: 2012/03/22 14:41:40 - [0] D -- C:\Users\mustapha\AppData\Local\{1101C704-86FB-4AC0-8D29-CF91BAC35CA1}
O43 - CFD: 2011/10/27 01:39:08 - [0] D -- C:\Users\mustapha\AppData\Local\{11499A20-96C5-4E74-9332-F3147A31E2D9}
O43 - CFD: 2012/08/04 23:25:07 - [0] D -- C:\Users\mustapha\AppData\Local\{116CA240-F3AA-4BC3-A0A1-2B278BEA01F5}
O43 - CFD: 2012/08/04 23:25:18 - [0] D -- C:\Users\mustapha\AppData\Local\{11A7E075-751B-4CA6-8808-04962906ED9F}
O43 - CFD: 2012/10/23 16:23:34 - [0] D -- C:\Users\mustapha\AppData\Local\{11F798D7-1F46-4AE4-9C4F-9BF5AC9674EC}
O43 - CFD: 2011/04/29 15:13:37 - [0] D -- C:\Users\mustapha\AppData\Local\{124304B7-C556-4560-ADDB-7B854E24E205}
O43 - CFD: 2011/09/13 13:22:17 - [0] D -- C:\Users\mustapha\AppData\Local\{1294BBB3-3DB6-465C-B120-35ADC5010F25}
O43 - CFD: 2011/10/01 21:48:08 - [0] D -- C:\Users\mustapha\AppData\Local\{14D7B742-35E0-47FA-83F8-3951C307AEEB}
O43 - CFD: 2012/02/26 22:17:42 - [0] D -- C:\Users\mustapha\AppData\Local\{1528C455-488A-4493-B74E-4F36CBBC5774}
O43 - CFD: 2011/10/24 23:53:06 - [0] D -- C:\Users\mustapha\AppData\Local\{15954993-EE0E-4471-B3F8-DCA80117AC02}
O43 - CFD: 2011/05/24 17:52:33 - [0] D -- C:\Users\mustapha\AppData\Local\{15D1FEC0-9515-4B5F-81DC-CE091763FAB9}
O43 - CFD: 2011/09/23 12:07:37 - [0] D -- C:\Users\mustapha\AppData\Local\{161702AF-6CC3-4D8B-B091-F4F3D8F4174A}
O43 - CFD: 2012/11/18 18:45:36 - [0] D -- C:\Users\mustapha\AppData\Local\{162F9EF5-3BEF-4130-A185-37415A7CC4DE}
O43 - CFD: 2011/10/29 11:28:37 - [0] D -- C:\Users\mustapha\AppData\Local\{177F9F82-584F-4C17-9271-010B6E55EDCC}
O43 - CFD: 2012/06/22 12:21:34 - [0] D -- C:\Users\mustapha\AppData\Local\{1898121A-E49F-4768-98DD-59A43171B906}
O43 - CFD: 2011/08/30 21:05:18 - [0] D -- C:\Users\mustapha\AppData\Local\{18B122C0-028E-40B1-802C-500838181150}
O43 - CFD: 2011/12/28 14:45:45 - [0] D -- C:\Users\mustapha\AppData\Local\{18CC4269-A3D2-4C26-87FA-66E56ED6E657}
O43 - CFD: 2012/07/11 02:10:49 - [0] D -- C:\Users\mustapha\AppData\Local\{18D67B2D-B507-44AF-8C1C-5B391F58791A}
O43 - CFD: 2012/03/07 18:46:59 - [0] D -- C:\Users\mustapha\AppData\Local\{19179164-7F1F-4C5E-9928-A0AB6752B632}
O43 - CFD: 2011/06/07 20:29:21 - [0] D -- C:\Users\mustapha\AppData\Local\{1979FEEC-64AC-40DB-84E9-9440EECAE93D}
O43 - CFD: 2011/05/07 18:48:49 - [0] D -- C:\Users\mustapha\AppData\Local\{1982FC5C-468E-4590-B2D1-E18FDE8FFA85}
O43 - CFD: 2011/07/07 17:51:37 - [0] D -- C:\Users\mustapha\AppData\Local\{19B3EFF8-8666-45AD-9293-1748553368BB}
O43 - CFD: 2011/08/23 23:02:11 - [0] D -- C:\Users\mustapha\AppData\Local\{19DAB6F3-A91A-49A2-9D86-245F4C9E1580}
O43 - CFD: 2012/08/03 13:13:06 - [0] D -- C:\Users\mustapha\AppData\Local\{1A105248-3612-461E-8B8E-110DDEF8BAD9}
O43 - CFD: 2011/08/29 01:15:23 - [0] D -- C:\Users\mustapha\AppData\Local\{1BC2C285-6B3F-436C-A37B-69CA333E5FEA}
O43 - CFD: 2012/07/28 04:31:34 - [0] D -- C:\Users\mustapha\AppData\Local\{1D0BCEA1-DDC2-466F-B448-7B324BE64682}
O43 - CFD: 2012/03/19 22:37:54 - [0] D -- C:\Users\mustapha\AppData\Local\{1D6AE7E0-B05E-4E42-A65A-157AF20F7D0D}
O43 - CFD: 2011/08/07 16:07:59 - [0] D -- C:\Users\mustapha\AppData\Local\{1DF40C89-2EFE-4E9C-B7E5-87DDDFA8A115}
O43 - CFD: 2012/03/18 20:56:41 - [0] D -- C:\Users\mustapha\AppData\Local\{1F485403-087D-4F4D-B8B6-EBBB85D6ECC2}
O43 - CFD: 2011/07/25 16:45:34 - [0] D -- C:\Users\mustapha\AppData\Local\{1F624243-FDF5-4D10-897E-8B2B27F8B0FF}
O43 - CFD: 2011/12/25 21:22:46 - [0] D -- C:\Users\mustapha\AppData\Local\{1F8B9709-365A-405C-AE78-737B626347A2}
O43 - CFD: 2011/09/24 13:20:43 - [0] D -- C:\Users\mustapha\AppData\Local\{206E40C4-4401-4076-8483-21FC29062715}
O43 - CFD: 2012/01/16 19:39:00 - [0] D -- C:\Users\mustapha\AppData\Local\{2181A601-CA40-4EB1-AB4A-DF53EDD72FC3}
O43 - CFD: 2012/11/04 19:45:30 - [0] D -- C:\Users\mustapha\AppData\Local\{218911B1-9A9F-476A-A79E-0EACEA029231}
O43 - CFD: 2011/12/22 04:20:57 - [0] D -- C:\Users\mustapha\AppData\Local\{22718FD4-EF8A-4DB1-A03D-56CDA0873C5B}
O43 - CFD: 2011/08/22 14:59:41 - [0] D -- C:\Users\mustapha\AppData\Local\{230D0274-AF3E-4A72-A8FB-1FC404BFE796}
O43 - CFD: 2012/03/18 00:03:25 - [0] D -- C:\Users\mustapha\AppData\Local\{2369AAF9-BA60-4A47-82FE-4513B6F32346}
O43 - CFD: 2011/08/25 06:55:45 - [0] D -- C:\Users\mustapha\AppData\Local\{24751E6F-7605-4A72-97AF-AC561B531A26}
O43 - CFD: 2011/12/16 00:18:52 - [0] D -- C:\Users\mustapha\AppData\Local\{24D4DBD9-DFAA-4613-8193-DD40E758DEE5}
O43 - CFD: 2011/10/19 23:44:32 - [0] D -- C:\Users\mustapha\AppData\Local\{250F2071-F205-48AA-9E23-AC681DF387FD}
O43 - CFD: 2012/08/06 22:12:46 - [0] D -- C:\Users\mustapha\AppData\Local\{25312BF4-8680-4139-ADB9-1E3A40B85ACF}
O43 - CFD: 2011/05/01 17:46:01 - [0] D -- C:\Users\mustapha\AppData\Local\{25A9987A-FEF9-46E5-A66B-35DEF45463C9}
O43 - CFD: 2012/03/18 20:56:29 - [0] D -- C:\Users\mustapha\AppData\Local\{25C1FEB6-27C2-41DA-A6F0-7B18E82F9B48}
O43 - CFD: 2012/07/16 23:07:01 - [0] D -- C:\Users\mustapha\AppData\Local\{289ECFAD-E48E-49DA-8B9E-7A45D734E243}
O43 - CFD: 2011/11/19 18:06:24 - [0] D -- C:\Users\mustapha\AppData\Local\{2950457C-5CE7-4DAA-B1CD-B05AF29DB2B5}
O43 - CFD: 2012/06/15 22:31:46 - [0] D -- C:\Users\mustapha\AppData\Local\{29D66D1E-12BD-432F-AB69-609F6052FD27}
O43 - CFD: 2011/09/03 20:57:00 - [0] D -- C:\Users\mustapha\AppData\Local\{2A208EEE-3EE0-4DD6-978C-145F5AF79087}
O43 - CFD: 2011/09/01 01:28:08 - [0] D -- C:\Users\mustapha\AppData\Local\{2AEDC434-BD22-4AA7-8FF8-5052FA505F54}
O43 - CFD: 2011/09/18 13:23:16 - [0] D -- C:\Users\mustapha\AppData\Local\{2AF04F3E-348F-4D15-9F37-430C8BEA00F3}
O43 - CFD: 2012/03/02 21:23:33 - [0] D -- C:\Users\mustapha\AppData\Local\{2AF46B45-B595-4666-A160-6137F3915716}
O43 - CFD: 2011/10/09 01:23:35 - [0] D -- C:\Users\mustapha\AppData\Local\{2D0964CE-1FCA-455A-913B-541CA038F16B}
O43 - CFD: 2012/01/21 17:07:40 - [0] D -- C:\Users\mustapha\AppData\Local\{2E2C89A2-D705-4F5A-A394-F2610717E795}
O43 - CFD: 2011/09/21 20:02:18 - [0] D -- C:\Users\mustapha\AppData\Local\{2EA962B8-CAFD-46B6-9BD9-4FD09967863F}
O43 - CFD: 2011/04/28 10:26:58 - [0] D -- C:\Users\mustapha\AppData\Local\{2F348980-890C-493C-8F64-0699CB50149E}
O43 - CFD: 2011/06/01 16:55:49 - [0] D -- C:\Users\mustapha\AppData\Local\{2F405FD0-FD5F-45EB-9D21-194A69823D1B}
O43 - CFD: 2012/07/19 13:36:30 - [0] D -- C:\Users\mustapha\AppData\Local\{2F69C77F-2F83-415E-9732-57723A941CD2}
O43 - CFD: 2012/07/11 02:11:02 - [0] D -- C:\Users\mustapha\AppData\Local\{300545C8-7D6D-48E9-8C0E-877DA1557869}
O43 - CFD: 2012/01/09 19:55:31 - [0] D -- C:\Users\mustapha\AppData\Local\{30358658-CB7F-4768-AD52-A0F026D5CA99}
O43 - CFD: 2011/05/29 21:32:30 - [0] D -- C:\Users\mustapha\AppData\Local\{310DBC51-0C02-4DD3-AA20-E7525E6E8A35}
O43 - CFD: 2011/12/22 18:19:00 - [0] D -- C:\Users\mustapha\AppData\Local\{31B54EE4-B3C2-4C06-95E2-40E6FF0FEC6C}
O43 - CFD: 2011/08/30 21:04:43 - [0] D -- C:\Users\mustapha\AppData\Local\{32750060-AD0C-4088-B5AD-403335ADEA72}
O43 - CFD: 2011/09/04 18:43:35 - [0] D -- C:\Users\mustapha\AppData\Local\{32BD9D55-79B1-4A1E-8DAC-088657182B4F}
O43 - CFD: 2012/10/04 13:56:24 - [0] D -- C:\Users\mustapha\AppData\Local\{32DD44ED-31C8-4756-84BE-6CBD2567AB5F}
O43 - CFD: 2011/11/11 12:41:48 - [0] D -- C:\Users\mustapha\AppData\Local\{344936C3-9333-4176-BBB4-58068B02D754}
O43 - CFD: 2011/09/16 13:19:39 - [0] D -- C:\Users\mustapha\AppData\Local\{34A00419-B972-4EC3-BA41-4BFED0B09030}
O43 - CFD: 2011/12/29 22:59:56 - [0] D -- C:\Users\mustapha\AppData\Local\{36608737-B2F8-4287-9B61-EC33EC380349}
O43 - CFD: 2011/10/04 22:17:35 - [0] D -- C:\Users\mustapha\AppData\Local\{36BC35C3-2993-416D-8D96-6D8F58782E97}
O43 - CFD: 2011/12/16 00:19:03 - [0] D -- C:\Users\mustapha\AppData\Local\{3736C6A5-CBDC-4D26-86DB-E7449B4558AF}
O43 - CFD: 2011/10/09 17:00:58 - [0] D -- C:\Users\mustapha\AppData\Local\{38963489-06AF-423B-961F-8E33908C6E95}
O43 - CFD: 2012/08/02 18:29:42 - [0] D -- C:\Users\mustapha\AppData\Local\{38D9FC81-C740-41EC-AAF6-1D85A5F5111B}
O43 - CFD: 2011/05/27 14:50:14 - [0] D -- C:\Users\mustapha\AppData\Local\{394DF7A1-589A-4201-9E45-69DE3A5C6629}
O43 - CFD: 2011/06/18 20:54:19 - [0] D -- C:\Users\mustapha\AppData\Local\{3991B1CA-8529-4523-ADC4-54F162F964D4}
O43 - CFD: 2011/04/26 20:28:57 - [0] D -- C:\Users\mustapha\AppData\Local\{39B44C5D-5949-49E3-9C47-16BF9BE77E62}
O43 - CFD: 2011/08/04 15:43:56 - [0] D -- C:\Users\mustapha\AppData\Local\{3A073EDD-D08E-451B-B97F-E855B2E7D04B}
O43 - CFD: 2011/05/05 20:36:18 - [0] D -- C:\Users\mustapha\AppData\Local\{3C22FBB3-E7CC-4C86-9893-DF517FC47734}
O43 - CFD: 2012/01/30 18:51:38 - [0] D -- C:\Users\mustapha\AppData\Local\{3D93A34A-6833-4FA9-AB44-87AFBD39425B}
O43 - CFD: 2011/11/03 14:28:31 - [0] D -- C:\Users\mustapha\AppData\Local\{3E531D63-03C2-46D2-BB7B-8B1B8EA9CEA3}
O43 - CFD: 2011/09/20 20:28:49 - [0] D -- C:\Users\mustapha\AppData\Local\{3ECF2FAA-95CF-48A2-A796-1EDE30BCF9A0}
O43 - CFD: 2011/08/31 13:26:57 - [0] D -- C:\Users\mustapha\AppData\Local\{3FF6E45B-331D-4EC8-9AED-4581C8C01CBD}
O43 - CFD: 2012/08/05 23:06:23 - [0] D -- C:\Users\mustapha\AppData\Local\{4013292E-A1D6-41F4-B359-BC8F31A37F08}
O43 - CFD: 2011/09/19 12:16:21 - [0] D -- C:\Users\mustapha\AppData\Local\{417448DA-1CBB-4B62-9D25-4ED606CDB258}
O43 - CFD: 2011/12/27 14:30:43 - [0] D -- C:\Users\mustapha\AppData\Local\{41AC7C35-24B3-47CD-954B-17EEBBED0391}
O43 - CFD: 2011/05/30 11:32:13 - [0] D -- C:\Users\mustapha\AppData\Local\{4233E7D0-601C-48D0-AC21-73E7DF448863}
O43 - CFD: 2011/09/12 13:42:16 - [0] D -- C:\Users\mustapha\AppData\Local\{42B88459-0DC6-4C3E-B22F-0B0E3B770C0B}
O43 - CFD: 2011/08/23 23:01:38 - [0] D -- C:\Users\mustapha\AppData\Local\{42D1F9FC-706D-4014-B67A-15BE393B3C4F}
O43 - CFD: 2011/10/01 21:48:19 - [0] D -- C:\Users\mustapha\AppData\Local\{42E5A2EB-150D-4219-BC78-62E6E9309074}
O43 - CFD: 2012/01/30 18:51:51 - [0] D -- C:\Users\mustapha\AppData\Local\{431EE230-53EE-44A7-98CB-A793D0D39C05}
O43 - CFD: 2011/11/19 18:06:35 - [0] D -- C:\Users\mustapha\AppData\Local\{4400BB33-268F-42DA-A2AB-6437FEA450D7}
O43 - CFD: 2011/09/09 13:23:43 - [0] D -- C:\Users\mustapha\AppData\Local\{45FEE6C1-EC17-4A50-AB38-00DFFD8EF63C}
O43 - CFD: 2011/09/03 20:57:31 - [0] D -- C:\Users\mustapha\AppData\Local\{46A7C201-64AE-4918-8186-DD409270CF25}
O43 - CFD: 2011/08/24 16:54:15 - [0] D -- C:\Users\mustapha\AppData\Local\{480DB2CA-9EAD-4549-95CA-881623C7B927}
O43 - CFD: 2012/06/22 12:21:45 - [0] D -- C:\Users\mustapha\AppData\Local\{48241BD4-0733-411E-84EE-24D4A1548F91}
O43 - CFD: 2012/07/12 08:33:38 - [0] D -- C:\Users\mustapha\AppData\Local\{484BA7C8-5F9E-4AEE-8D52-374C1312C449}
O43 - CFD: 2011/08/15 14:01:27 - [0] D -- C:\Users\mustapha\AppData\Local\{485ABF7F-9B8B-45DE-808C-9F856CEE6367}
O43 - CFD: 2012/10/17 18:46:57 - [0] D -- C:\Users\mustapha\AppData\Local\{48A93034-35A6-4F96-9A22-D29BC19E48A2}
O43 - CFD: 2011/10/07 17:39:45 - [0] D -- C:\Users\mustapha\AppData\Local\{492AA534-5C21-4CF1-806D-EEA64009F8C5}
O43 - CFD: 2012/08/01 14:21:30 - [0] D -- C:\Users\mustapha\AppData\Local\{49B0FB8D-891B-4850-9372-7E5B0C6ECE03}
O43 - CFD: 2011/11/15 13:56:42 - [0] D -- C:\Users\mustapha\AppData\Local\{49BEC7F4-772F-4824-B6E3-41999006D7D2}
O43 - CFD: 2011/04/26 20:28:47 - [0] D -- C:\Users\mustapha\AppData\Local\{49D39501-2107-4AF1-9EBA-4E3D5063B3DF}
O43 - CFD: 2011/10/24 23:52:54 - [0] D -- C:\Users\mustapha\AppData\Local\{4B4EC7E8-A82D-44C1-BB4B-66A9844268B6}
O43 - CFD: 2011/08/10 00:59:19 - [0] D -- C:\Users\mustapha\AppData\Local\{4C0B925E-138F-4423-B8DF-9CF189582797}
O43 - CFD: 2012/09/26 16:31:14 - [0] D -- C:\Users\mustapha\AppData\Local\{4CEF1EB2-4D55-45CF-BFBB-F187219A7140}
O43 - CFD: 2011/12/26 23:07:12 - [0] D -- C:\Users\mustapha\AppData\Local\{4E5F295B-3888-4FCC-AA0B-76893CCCC7CB}
O43 - CFD: 2011/08/10 00:59:30 - [0] D -- C:\Users\mustapha\AppData\Local\{4F778C7E-9903-4A0C-9019-FB849571E6CE}
O43 - CFD: 2012/02/29 11:29:07 - [0] D -- C:\Users\mustapha\AppData\Local\{4FD051D0-F428-421B-883C-78E8DF504E3E}
O43 - CFD: 2011/08/22 14:59:55 - [0] D -- C:\Users\mustapha\AppData\Local\{505CA6FA-4F30-4A24-86FC-EBE2FD407F29}
O43 - CFD: 2012/03/16 19:27:43 - [0] D -- C:\Users\mustapha\AppData\Local\{50BE3243-EB5F-47AE-940B-2FB37385DD3D}
O43 - CFD: 2011/07/26 17:09:24 - [0] D -- C:\Users\mustapha\AppData\Local\{51A0A04C-7DE4-4C67-A158-9A04F131EAC4}
O43 - CFD: 2011/08/27 03:46:22 - [0] D -- C:\Users\mustapha\AppData\Local\{51EF749E-3DC4-4116-BD1A-D396EC14A81D}
O43 - CFD: 2011/09/11 19:02:47 - [0] D -- C:\Users\mustapha\AppData\Local\{5282684A-23A5-48C9-B7BC-6418E6ABCA60}
O43 - CFD: 2012/01/09 19:55:19 - [0] D -- C:\Users\mustapha\AppData\Local\{529D6451-BF76-4726-8EC9-32FC8F89D1B9}
O43 - CFD: 2011/08/01 13:25:19 - [0] D -- C:\Users\mustapha\AppData\Local\{52D57A27-C11A-4469-A3F2-982B39AC7AFB}
O43 - CFD: 2012/02/29 11:28:55 - [0] D -- C:\Users\mustapha\AppData\Local\{53DEC02F-829B-41EB-8953-F7F395E5C93A}
O43 - CFD: 2011/11/15 13:56:30 - [0] D -- C:\Users\mustapha\AppData\Local\{53E8A317-D010-44F9-AE2B-BADC107C52DC}
O43 - CFD: 2011/08/11 21:51:50 - [0] D -- C:\Users\mustapha\AppData\Local\{53FB998A-70C2-45CC-BA42-ECD1627AAB41}
O43 - CFD: 2011/07/15 12:03:01 - [0] D -- C:\Users\mustapha\AppData\Local\{5423EEBD-A9CF-4AD9-B8E7-40E3FC318CBF}
O43 - CFD: 2011/09/22 14:35:18 - [0] D -- C:\Users\mustapha\AppData\Local\{5449394A-8561-4637-B6C5-DB26D2CFCAE4}
O43 - CFD: 2012/01/05 00:33:50 - [0] D -- C:\Users\mustapha\AppData\Local\{54E3A70D-56C5-4636-BEFB-82A16924BF2A}
O43 - CFD: 2011/09/14 19:35:12 - [0] D -- C:\Users\mustapha\AppData\Local\{54EBDBCB-0B64-45C7-9F07-C4EC8EFB7B00}
O43 - CFD: 2011/09/01 17:16:25 - [0] D -- C:\Users\mustapha\AppData\Local\{557473C2-7EE7-493A-93D9-D32776D57AD7}
O43 - CFD: 2011/11/03 14:28:20 - [0] D -- C:\Users\mustapha\AppData\Local\{558B0085-9377-4B2F-9A96-4D5B5880D655}
O43 - CFD: 2012/01/21 17:07:51 - [0] D -- C:\Users\mustapha\AppData\Local\{562F0456-A12E-4480-A74D-F4B02214AC26}
O43 - CFD: 2011/10/12 20:13:07 - [0] D -- C:\Users\mustapha\AppData\Local\{56D6E575-E4DB-4871-BAB6-C3784EACD6A2}
O43 - CFD: 2012/01/05 00:33:38 - [0] D -- C:\Users\mustapha\AppData\Local\{56FFBC6A-C06B-40B3-BA78-2A06E7DBB9A6}
O43 - CFD: 2011/06/25 17:56:55 - [0] D -- C:\Users\mustapha\AppData\Local\{5735A77A-5BE8-4117-8E9E-EC58B83EBF02}
O43 - CFD: 2011/04/21 11:54:01 - [0] D -- C:\Users\mustapha\AppData\Local\{583241CF-D36D-48AC-9000-7E6ADF7B940D}
O43 - CFD: 2011/11/23 18:23:11 - [0] D -- C:\Users\mustapha\AppData\Local\{5902436C-AF61-4A15-8158-F4CA3C66797A}
O43 - CFD: 2011/08/05 21:15:53 - [0] D -- C:\Users\mustapha\AppData\Local\{590743AC-8810-4AF2-B208-F298AE3EB8F3}
O43 - CFD: 2012/02/20 22:10:40 - [0] D -- C:\Users\mustapha\AppData\Local\{599EC3CD-9349-4340-8D3F-B9221F84F0BE}
O43 - CFD: 2011/08/05 03:44:43 - [0] D -- C:\Users\mustapha\AppData\Local\{59BFF8E3-1F09-4B4C-A789-9B01213E8022}
O43 - CFD: 2011/08/25 06:55:34 - [0] D -- C:\Users\mustapha\AppData\Local\{5A8C51ED-73A4-40AA-879C-68131068D81C}
O43 - CFD: 2011/12/22 18:19:12 - [0] D -- C:\Users\mustapha\AppData\Local\{5AD76903-B4B4-4642-A78C-2D6F5BD0A7CE}
O43 - CFD: 2012/07/06 04:21:24 - [0] D -- C:\Users\mustapha\AppData\Local\{5B42A27B-5448-4FAC-8898-0BBC07EF3BDB}
O43 - CFD: 2012/07/12 08:33:50 - [0] D -- C:\Users\mustapha\AppData\Local\{5C8DABF3-21FC-48A7-A25F-89211BF21C6A}
O43 - CFD: 2012/07/18 23:27:45 - [0] D -- C:\Users\mustapha\AppData\Local\{5CDA808D-CBE6-4A6E-985F-AC5C5D7450B6}
O43 - CFD: 2011/11/29 18:33:08 - [0] D -- C:\Users\mustapha\AppData\Local\{5CE494FA-0518-4A2D-B454-EA2AEB08109B}
O43 - CFD: 2011/09/19 12:16:10 - [0] D -- C:\Users\mustapha\AppData\Local\{5E8C6B9E-F4F3-402E-9C40-36B482A7AB0A}
O43 - CFD: 2013/03/01 14:57:41 - [0] D -- C:\Users\mustapha\AppData\Local\{5F11A170-1782-4F7C-AF0E-C67366EB25C0}
O43 - CFD: 2011/08/12 17:49:29 - [0] D -- C:\Users\mustapha\AppData\Local\{6042DF14-DF6B-4177-A4AF-A4E8B64450C9}
O43 - CFD: 2011/10/03 13:28:40 - [0] D -- C:\Users\mustapha\AppData\Local\{60AD7E66-E1E0-4428-A3D2-BEF0FBABEC64}
O43 - CFD: 2011/08/17 09:48:44 - [0] D -- C:\Users\mustapha\AppData\Local\{61D795EE-0AE1-4708-9398-0BA6DB2F5EC7}
O43 - CFD: 2011/08/16 18:18:44 - [0] D -- C:\Users\mustapha\AppData\Local\{61D99910-9D30-4906-948E-77A1C6C352C9}
O43 - CFD: 2012/05/20 17:26:03 - [0] D -- C:\Users\mustapha\AppData\Local\{62EC41EA-3C15-4BBB-B87D-9EA30330F602}
O43 - CFD: 2011/08/05 15:02:25 - [0] D -- C:\Users\mustapha\AppData\Local\{62F914F3-1C83-4377-B297-36DCDEB646CB}
O43 - CFD: 2012/07/16 23:07:12 - [0] D -- C:\Users\mustapha\AppData\Local\{6414934D-8749-4550-8510-63CA32ED3F0E}
O43 - CFD: 2011/04/22 10:32:58 - [0] D -- C:\Users\mustapha\AppData\Local\{64D72ED0-5E3A-4EEC-B110-B8920A22BB46}
O43 - CFD: 2011/08/10 18:19:51 - [0] D -- C:\Users\mustapha\AppData\Local\{651E269D-9505-486C-890E-B3D3DA47C2B1}
O43 - CFD: 2011/08/25 18:56:15 - [0] D -- C:\Users\mustapha\AppData\Local\{65373C10-ECC3-4D72-80E3-C8AA0AF1BC00}
O43 - CFD: 2011/10/05 22:05:20 - [0] D -- C:\Users\mustapha\AppData\Local\{663009B3-ADEC-4787-A763-7F1999F91EBC}
O43 - CFD: 2011/04/27 11:43:08 - [0] D -- C:\Users\mustapha\AppData\Local\{6690F194-129E-4D2A-8005-0C0A5F225F3C}
O43 - CFD: 2011/10/17 17:59:07 - [0] D -- C:\Users\mustapha\AppData\Local\{669BD4D7-5490-47BB-980B-D62BB73E8F83}
O43 - CFD: 2012/07/06 04:21:35 - [0] D -- C:\Users\mustapha\AppData\Local\{66A5C644-AD61-46C3-A023-F68D484229F6}
O43 - CFD: 2012/06/20 11:51:05 - [0] D -- C:\Users\mustapha\AppData\Local\{66B34D57-4865-4B36-B545-DF4AE8EB59C5}
O43 - CFD: 2011/10/09 17:01:11 - [0] D -- C:\Users\mustapha\AppData\Local\{673DA37C-F5E0-455F-8BC2-C5A6245A5FA0}
O43 - CFD: 2012/01/17 10:30:35 - [0] D -- C:\Users\mustapha\AppData\Local\{67402F26-4A53-46D9-9F19-44037508AB77}
O43 - CFD: 2011/10/29 11:28:49 - [0] D -- C:\Users\mustapha\AppData\Local\{67DE2BF5-B64F-4757-A3CC-F233D3D11ECD}
O43 - CFD: 2011/09/08 16:05:09 - [0] D -- C:\Users\mustapha\AppData\Local\{681F365A-3801-421D-897A-C2609264FED4}
O43 - CFD: 2011/10/16 17:05:17 - [0] D -- C:\Users\mustapha\AppData\Local\{68213C28-C980-4269-82FC-046247BFDAC6}
O43 - CFD: 2011/09/09 13:23:32 - [0] D -- C:\Users\mustapha\AppData\Local\{69B686E9-361A-4291-8B0B-9EDB1AF9FBD0}
O43 - CFD: 2012/08/03 13:12:55 - [0] D -- C:\Users\mustapha\AppData\Local\{69D53E3D-32E0-429C-9459-4DEC180D3F61}
O43 - CFD: 2012/10/29 19:55:15 - [0] D -- C:\Users\mustapha\AppData\Local\{6A3BAB49-D02F-4D8B-A725-1E3D1D470471}
O43 - CFD: 2011/08/27 03:46:11 - [0] D -- C:\Users\mustapha\AppData\Local\{6BE936DC-E5CB-4B50-9434-2C0EB97DBC94}
O43 - CFD: 2011/12/26 23:07:24 - [0] D -- C:\Users\mustapha\AppData\Local\{6D134656-8525-417D-AF30-E202098180A9}
O43 - CFD: 2012/04/30 22:50:30 - [0] D -- C:\Users\mustapha\AppData\Local\{6D79AA82-3610-4262-9A98-AEA1D9CD361C}
O43 - CFD: 2011/05/22 12:23:23 - [0] D -- C:\Users\mustapha\AppData\Local\{6DAA76EB-60B1-4E87-A154-B637E0C76598}
O43 - CFD: 2012/10/03 17:01:19 - [0] D -- C:\Users\mustapha\AppData\Local\{6E246092-1947-4032-BA97-9C825D330C7A}
O43 - CFD: 2011/09/17 17:06:21 - [0] D -- C:\Users\mustapha\AppData\Local\{6E39015E-36DF-43BD-8553-59124506A913}
O43 - CFD: 2012/03/07 18:47:10 - [0] D -- C:\Users\mustapha\AppData\Local\{6EE022F7-F11D-41D3-B7B6-7B777FDB7C4B}
O43 - CFD: 2012/08/01 14:21:41 - [0] D -- C:\Users\mustapha\AppData\Local\{6F506BB4-AB3C-4A75-A8F2-26A602006BE1}
O43 - CFD: 2011/05/06 18:28:04 - [0] D -- C:\Users\mustapha\AppData\Local\{6FFEBF39-74B3-4953-9EB4-BA523C657B74}
O43 - CFD: 2011/09/05 16:21:20 - [0] D -- C:\Users\mustapha\AppData\Local\{709DDB34-373D-4935-BA27-9CC3FEABA316}
O43 - CFD: 2011/07/09 14:32:55 - [0] D -- C:\Users\mustapha\AppData\Local\{70FFDD95-B497-447F-AF8D-F045EBED4AC4}
O43 - CFD: 2011/09/22 14:35:07 - [0] D -- C:\Users\mustapha\AppData\Local\{711EB0CA-6395-419D-AB63-2E2EB4C16F36}
O43 - CFD: 2011/05/15 16:24:43 - [0] D -- C:\Users\mustapha\AppData\Local\{717E1185-7A73-49A8-916A-9EFB8B034CEA}
O43 - CFD: 2012/07/24 10:07:20 - [0] D -- C:\Users\mustapha\AppData\Local\{718F01B6-CA70-4480-B2D7-30F81B41A68D}
O43 - CFD: 2011/06/02 11:21:51 - [0] D -- C:\Users\mustapha\AppData\Local\{720C6CEE-7367-43EC-A759-1059A6F7A607}
O43 - CFD: 2012/06/23 02:53:56 - [0] D -- C:\Users\mustapha\AppData\Local\{7251CEA9-7E43-4BCB-A859-7335A669A53B}
O43 - CFD: 2011/12/08 01:08:53 - [0] D -- C:\Users\mustapha\AppData\Local\{72A978A7-12C8-4421-AFD3-9FA1F23049E8}
O43 - CFD: 2012/02/15 20:12:34 - [0] D -- C:\Users\mustapha\AppData\Local\{73691417-CE7F-473F-B305-3750DDF60979}
O43 - CFD: 2011/08/03 14:03:31 - [0] D -- C:\Users\mustapha\AppData\Local\{74738ECE-64A0-4858-9C4D-42406F568DE2}
O43 - CFD: 2011/05/23 13:44:09 - [0] D -- C:\Users\mustapha\AppData\Local\{75482753-1B23-453D-A110-EC62B40528FD}
O43 - CFD: 2011/11/06 00:41:19 - [0] D -- C:\Users\mustapha\AppData\Local\{75A7CC88-0CCD-4AD0-99CF-40BF44B63612}
O43 - CFD: 2011/09/28 22:09:49 - [0] D -- C:\Users\mustapha\AppData\Local\{7601770D-B6E1-40E9-911B-A13A02BF426F}
O43 - CFD: 2012/02/29 23:29:45 - [0] D -- C:\Users\mustapha\AppData\Local\{7667EB6B-7F8C-4D27-B799-8DDE6E94669F}
O43 - CFD: 2011/08/31 13:26:05 - [0] D -- C:\Users\mustapha\AppData\Local\{77968926-FB5E-440F-A122-48C55FAC8A3E}
O43 - CFD: 2011/12/08 23:22:28 - [0] D -- C:\Users\mustapha\AppData\Local\{783D3FF0-914E-4DD4-8A70-F456AEA09687}
O43 - CFD: 2012/06/20 11:50:47 - [0] D -- C:\Users\mustapha\AppData\Local\{786C97C8-A292-4006-8879-E206C62A2276}
O43 - CFD: 2011/07/17 11:10:52 - [0] D -- C:\Users\mustapha\AppData\Local\{78815B03-20DF-4B1D-88C2-3E9989D604AE}
O43 - CFD: 2012/07/18 23:27:34 - [0] D -- C:\Users\mustapha\AppData\Local\{7ADDE7E9-335D-4503-9FAF-F6BB59B498F8}
O43 - CFD: 2011/10/04 22:17:24 - [0] D -- C:\Users\mustapha\AppData\Local\{7B9DBE53-441A-4CDB-91E0-C5F37EE8B361}
O43 - CFD: 2012/01/29 15:24:30 - [0] D -- C:\Users\mustapha\AppData\Local\{7BB805D1-E901-4771-BB95-72A472C5B59C}
O43 - CFD: 2011/05/04 13:41:58 - [0] D -- C:\Users\mustapha\AppData\Local\{7C6595D7-67E9-4885-B491-91C36D59B9A8}
O43 - CFD: 2012/02/26 22:17:53 - [0] D -- C:\Users\mustapha\AppData\Local\{7CED8882-D715-46E0-B99F-3A005ADAF9D9}
O43 - CFD: 2012/03/15 20:56:59 - [0] D -- C:\Users\mustapha\AppData\Local\{7D929FC4-2292-4C41-B027-1885F9E0ECE6}
O43 - CFD: 2011/07/16 18:47:30 - [0] D -- C:\Users\mustapha\AppData\Local\{7DAAA2D3-C976-41F0-849F-B65FA589BE16}
O43 - CFD: 2012/07/24 10:07:30 - [0] D -- C:\Users\mustapha\AppData\Local\{7DB74041-918E-43E9-AE54-F9660B8652EE}
O43 - CFD: 2011/10/12 20:12:55 - [0] D -- C:\Users\mustapha\AppData\Local\{7DCC17AB-2ADA-4BEA-AC9D-803FC8CFDDE3}
O43 - CFD: 2011/05/21 20:11:25 - [0] D -- C:\Users\mustapha\AppData\Local\{7E152FE6-CD71-465C-8249-5BA062FFCDF0}
O43 - CFD: 2011/09/15 12:37:55 - [0] D -- C:\Users\mustapha\AppData\Local\{7F4A6AF9-EAFD-4749-9D4A-D5305EAE797A}
O43 - CFD: 2012/03/19 22:37:42 - [0] D -- C:\Users\mustapha\AppData\Local\{801D1376-C881-4F8E-B160-6CDBBD5197DB}
O43 - CFD: 2011/07/29 10:41:15 - [0] D -- C:\Users\mustapha\AppData\Local\{8045393C-8B43-4249-8D94-77BB14C08388}
O43 - CFD: 2011/12/21 12:28:18 - [0] D -- C:\Users\mustapha\AppData\Local\{81DA4503-6F11-4C96-ABA5-AC048FBE127E}
O43 - CFD: 2011/04/30 17:22:02 - [0] D -- C:\Users\mustapha\AppData\Local\{81F8E010-FB3D-4AF7-8C41-F1FF0545BF16}
O43 - CFD: 2011/09/06 14:19:26 - [0] D -- C:\Users\mustapha\AppData\Local\{8249EA3E-FF48-44E1-A877-AD7ABE7F7512}
O43 - CFD: 2013/01/24 17:14:41 - [0] D -- C:\Users\mustapha\AppData\Local\{82D469ED-B942-42E5-9A9C-4F1C79A1BC01}
O43 - CFD: 2011/10/17 17:59:18 - [0] D -- C:\Users\mustapha\AppData\Local\{82F91C9D-71CE-4B33-9A6F-75830C1C2A55}
O43 - CFD: 2013/01/07 21:34:16 - [0] D -- C:\Users\mustapha\AppData\Local\{83548BBE-6C6E-4D14-9554-A67C71F6911E}
O43 - CFD: 2011/09/11 19:03:01 - [0] D -- C:\Users\mustapha\AppData\Local\{838B102E-EE03-4DB2-8104-90F175532EAD}
O43 - CFD: 2012/03/18 00:03:37 - [0] D -- C:\Users\mustapha\AppData\Local\{84201D69-487E-4930-9A58-2B78018A0AC7}
O43 - CFD: 2011/12/24 17:20:31 - [0] D -- C:\Users\mustapha\AppData\Local\{8551A003-7EC0-429C-A6E6-543E0E8C5EB1}
O43 - CFD: 2012/07/21 10:31:07 - [0] D -- C:\Users\mustapha\AppData\Local\{85BA526E-BB2E-4393-9E3C-849930EF22A2}
O43 - CFD: 2012/04/02 20:58:53 - [0] D -- C:\Users\mustapha\AppData\Local\{868307AB-FF0D-4B7D-B174-3ADD66E529B5}
O43 - CFD: 2011/08/11 21:52:27 - [0] D -- C:\Users\mustapha\AppData\Local\{86859C8E-7B79-4E4A-AE71-E82FC86821C7}
O43 - CFD: 2011/08/15 14:01:15 - [0] D -- C:\Users\mustapha\AppData\Local\{86B6E6F8-C8A8-45CF-9579-3AF0B63D0E29}
O43 - CFD: 2011/12/23 15:32:59 - [0] D -- C:\Users\mustapha\AppData\Local\{874B0E33-BAB1-422A-B3DD-A398A80007BB}
O43 - CFD: 2012/04/04 21:20:44 - [0] D -- C:\Users\mustapha\AppData\Local\{87D11901-C8D7-41B0-A11D-BA4F41553008}
O43 - CFD: 2012/08/09 00:22:33 - [0] D -- C:\Users\mustapha\AppData\Local\{8875FC0C-342E-490E-B3C9-0471560B7E80}
O43 - CFD: 2011/11/20 16:07:09 - [0] D -- C:\Users\mustapha\AppData\Local\{88E60F0B-DBFB-454B-B9E3-860ECC3D8F75}
O43 - CFD: 2011/11/20 16:07:22 - [0] D -- C:\Users\mustapha\AppData\Local\{88E66E15-0191-4E6D-BF50-B806B62F0C0D}
O43 - CFD: 2012/02/25 19:25:14 - [0] D -- C:\Users\mustapha\AppData\Local\{88EF504C-79B0-41A1-8239-43D5F562E804}
O43 - CFD: 2011/08/16 18:18:58 - [0] D -- C:\Users\mustapha\AppData\Local\{892B199E-85DC-418F-B987-2A299043D626}
O43 - CFD: 2012/07/18 01:26:41 - [0] D -- C:\Users\mustapha\AppData\Local\{89475388-34E5-473E-9BAB-16D7535DA9BB}
O43 - CFD: 2011/08/18 16:53:50 - [0] D -- C:\Users\mustapha\AppData\Local\{8A6BB6C8-A764-4DDA-92A5-8027C2AADCA2}
O43 - CFD: 2011/05/19 13:25:47 - [0] D -- C:\Users\mustapha\AppData\Local\{8B8CA4D6-442A-4286-AA52-4573E22E25A0}
O43 - CFD: 2012/07/10 12:49:34 - [0] D -- C:\Users\mustapha\AppData\Local\{8C1F8107-1E24-43E3-BD07-6551F2E7CA81}
O43 - CFD: 2011/10/09 01:23:24 - [0] D -- C:\Users\mustapha\AppData\Local\{8C617C5E-38D6-4737-9439-8576194A4DD4}
O43 - CFD: 2011/09/01 01:27:56 - [0] D -- C:\Users\mustapha\AppData\Local\{8CC09C31-8C73-490B-B868-393DC4CA2DBA}
O43 - CFD: 2012/01/05 18:42:13 - [0] D -- C:\Users\mustapha\AppData\Local\{8CEF89B0-732C-48F9-9756-336C8FFE69E0}
O43 - CFD: 2011/10/02 20:18:58 - [0] D -- C:\Users\mustapha\AppData\Local\{8D42E1AA-CCDE-4D7B-95CB-4A659C0458A4}
O43 - CFD: 2011/08/10 18:20:02 - [0] D -- C:\Users\mustapha\AppData\Local\{8D4DB4CE-85B3-41B0-9E97-05CFDCAD82EA}
O43 - CFD: 2012/01/17 10:30:24 - [0] D -- C:\Users\mustapha\AppData\Local\{8EB0CF33-693C-4838-BE1A-4797EF391F3C}
O43 - CFD: 2011/05/12 12:33:58 - [0] D -- C:\Users\mustapha\AppData\Local\{8FEB7C00-5099-4FB7-9D96-5A77CA535E26}
O43 - CFD: 2011/06/06 12:50:03 - [0] D -- C:\Users\mustapha\AppData\Local\{908BD9F5-B4C3-4775-BA0A-145288097597}
O43 - CFD: 2011/12/29 22:59:45 - [0] D -- C:\Users\mustapha\AppData\Local\{90986C65-3035-42AC-A82F-F6399FDCCCA6}
O43 - CFD: 2011/09/13 13:22:36 - [0] D -- C:\Users\mustapha\AppData\Local\{90B9FBCE-15FA-46F7-8559-AF64A77DDFC2}
O43 - CFD: 2012/02/07 13:42:49 - [0] D -- C:\Users\mustapha\AppData\Local\{917D9C78-3DE9-4DD1-9C9A-1AE7999762BC}
O43 - CFD: 2011/09/12 13:42:28 - [0] D -- C:\Users\mustapha\AppData\Local\{91CD4C24-1A9E-451D-AC42-1CCDDFF1A5CC}
O43 - CFD: 2015/05/26 22:49:20 - [0] D -- C:\Users\mustapha\AppData\Local\{9220F8C5-ADD2-46A5-9797-4EB2576E76F4}
O43 - CFD: 2011/07/04 23:43:36 - [0] D -- C:\Users\mustapha\AppData\Local\{92AEA21F-5A26-447D-ADA5-6DC5E4262513}
O43 - CFD: 2012/10/10 22:24:24 - [0] D -- C:\Users\mustapha\AppData\Local\{93B8E161-5EEC-487F-903C-A7C2BA7C05A0}
O43 - CFD: 2011/05/17 17:00:30 - [0] D -- C:\Users\mustapha\AppData\Local\{944B7622-CB51-4613-8D22-03677F8DC72C}
O43 - CFD: 2012/07/10 12:49:45 - [0] D -- C:\Users\mustapha\AppData\Local\{95E66860-480B-47A3-9207-EF4C69A7609C}
O43 - CFD: 2011/08/17 09:48:33 - [0] D -- C:\Users\mustapha\AppData\Local\{95E8BC00-79F8-4F43-9A5F-714C8E4D1C71}
O43 - CFD: 2011/09/21 20:02:05 - [0] D -- C:\Users\mustapha\AppData\Local\{95F4266C-E1D5-433E-9F1C-2B71F89B9CE2}
O43 - CFD: 2011/09/15 12:38:07 - [0] D -- C:\Users\mustapha\AppData\Local\{95F758B3-BC2E-4D46-9F9C-3DD7949D0503}
O43 - CFD: 2012/03/04 22:15:54 - [0] D -- C:\Users\mustapha\AppData\Local\{9612835B-B897-451F-BCD4-7AA6E140B401}
O43 - CFD: 2011/12/22 04:20:46 - [0] D -- C:\Users\mustapha\AppData\Local\{962F514D-6A3A-449C-B3C7-E1B552C3E880}
O43 - CFD: 2011/04/29 01:22:35 - [0] D -- C:\Users\mustapha\AppData\Local\{96AE6FEB-255A-44C4-9AAD-BBF84315D4E4}
O43 - CFD: 2011/11/11 12:42:00 - [0] D -- C:\Users\mustapha\AppData\Local\{96CD51A7-29B6-44B2-AE5B-606AAB681363}
O43 - CFD: 2011/09/16 13:19:52 - [0] D -- C:\Users\mustapha\AppData\Local\{97B3F004-52DF-4EFF-9507-1BF652EBC775}
O43 - CFD: 2011/09/02 12:05:48 - [0] D -- C:\Users\mustapha\AppData\Local\{97F039EC-53D9-414A-BCD9-23859DE588F1}
O43 - CFD: 2011/10/16 17:05:06 - [0] D -- C:\Users\mustapha\AppData\Local\{9853F1EA-7626-4FFA-8F8D-344B3A5D3AFA}
O43 - CFD: 2014/08/04 19:41:57 - [0] D -- C:\Users\mustapha\AppData\Local\{9A448072-8BDE-438C-99D4-0EC43EE9CF36}
O43 - CFD: 2012/01/26 19:13:00 - [0] D -- C:\Users\mustapha\AppData\Local\{9C355C86-761D-4479-A64A-E5C621F127DA}
O43 - CFD: 2011/09/17 17:06:32 - [0] D -- C:\Users\mustapha\AppData\Local\{9C799914-F142-4F6A-B6D0-68A8C87BDB27}
O43 - CFD: 2011/09/28 22:10:01 - [0] D -- C:\Users\mustapha\AppData\Local\{9CE8062A-AD90-441D-B1FC-0801C7B9B8A7}
O43 - CFD: 2012/07/28 04:31:23 - [0] D -- C:\Users\mustapha\AppData\Local\{9EBB9632-DBDC-4F08-A971-31B86D45146D}
O43 - CFD: 2011/05/11 12:52:51 - [0] D -- C:\Users\mustapha\AppData\Local\{9F4318CE-76BB-4861-9C70-F765708924D1}
O43 - CFD: 2011/06/03 21:12:21 - [0] D -- C:\Users\mustapha\AppData\Local\{A093C330-DA8A-4C2B-96D8-47277C4A1138}
O43 - CFD: 2011/08/06 18:59:33 - [0] D -- C:\Users\mustapha\AppData\Local\{A0FECB10-5F77-46B3-94B4-6C73C5954A2C}
O43 - CFD: 2012/03/01 20:01:00 - [0] D -- C:\Users\mustapha\AppData\Local\{A168E2C8-5E98-42C7-8C93-AC02A6EDD952}
O43 - CFD: 2012/07/18 01:26:30 - [0] D -- C:\Users\mustapha\AppData\Local\{A1904C98-2C8D-4553-84E7-AF40EBDAB0A1}
O43 - CFD: 2011/10/02 20:18:46 - [0] D -- C:\Users\mustapha\AppData\Local\{A19BE895-2628-4EE4-8EF7-B71724B2BFEE}
O43 - CFD: 2012/01/02 00:57:36 - [0] D -- C:\Users\mustapha\AppData\Local\{A208858E-9CFC-4AE3-B5F3-E1B416AC6EE7}
O43 - CFD: 2012/03/22 14:41:28 - [0] D -- C:\Users\mustapha\AppData\Local\{A21761B7-5A82-4022-98D0-54169A0529FF}
O43 - CFD: 2012/08/06 22:12:34 - [0] D -- C:\Users\mustapha\AppData\Local\{A23D5E83-2A8F-4F0C-89BA-CA38D4A91443}
O43 - CFD: 2011/08/26 13:55:23 - [0] D -- C:\Users\mustapha\AppData\Local\{A2673F12-E52E-47A4-9971-1E2DF6A12E0A}
O43 - CFD: 2011/07/18 19:54:53 - [0] D -- C:\Users\mustapha\AppData\Local\{A3CC4E4E-0B7F-4FB0-9B63-94F65A058072}
O43 - CFD: 2011/09/08 16:05:20 - [0] D -- C:\Users\mustapha\AppData\Local\{A4680410-EBE0-448F-8898-F0FF4C643B79}
O43 - CFD: 2011/09/14 19:35:25 - [0] D -- C:\Users\mustapha\AppData\Local\{A46FE105-2E29-4AC7-89CB-F3A18A410C1E}
O43 - CFD: 2012/10/02 23:59:39 - [0] D -- C:\Users\mustapha\AppData\Local\{A47DA3B6-4C12-4145-A2A2-D057D1CC9AFC}
O43 - CFD: 2012/07/11 19:01:54 - [0] D -- C:\Users\mustapha\AppData\Local\{A4987D92-79BF-4694-804A-D4A36841F851}
O43 - CFD: 2012/03/29 11:25:59 - [0] D -- C:\Users\mustapha\AppData\Local\{A7034E78-1629-42BD-80DB-CFA1651EEBAF}
O43 - CFD: 2012/10/05 22:59:12 - [0] D -- C:\Users\mustapha\AppData\Local\{A7ACF2BB-BD51-415A-9879-AD76639E7791}
O43 - CFD: 2011/06/24 20:39:17 - [0] D -- C:\Users\mustapha\AppData\Local\{A7FF8E6F-DB13-4268-B0E1-6975F7F6D907}
O43 - CFD: 2011/09/04 18:43:48 - [0] D -- C:\Users\mustapha\AppData\Local\{A81DA2CA-FA1D-4B21-977A-19254AFD580F}
O43 - CFD: 2011/05/16 17:39:35 - [0] D -- C:\Users\mustapha\AppData\Local\{A881E864-41A9-4099-B3DD-E2CAFC9D4B98}
O43 - CFD: 2011/12/23 15:32:47 - [0] D -- C:\Users\mustapha\AppData\Local\{A8B4F906-BECF-4987-B972-364F9844D9BE}
O43 - CFD: 2011/05/03 18:35:07 - [0] D -- C:\Users\mustapha\AppData\Local\{A9943BC7-1203-4DFF-BD59-9F863E2970DD}
O43 - CFD: 2012/06/23 02:53:45 - [0] D -- C:\Users\mustapha\AppData\Local\{A9CDF49E-A680-4CE5-B82A-CACAF67C8B78}
O43 - CFD: 2011/05/20 12:45:21 - [0] D -- C:\Users\mustapha\AppData\Local\{AA6B4ADA-9A05-478D-A19D-E5CD22C06440}
O43 - CFD: 2011/08/28 00:21:06 - [0] D -- C:\Users\mustapha\AppData\Local\{AAB6CBCF-09D6-4001-95F8-2FFC24E11B76}
O43 - CFD: 2011/08/18 16:53:14 - [0] D -- C:\Users\mustapha\AppData\Local\{AD680679-FD9F-4AFA-9CA8-6E768BEE678E}
O43 - CFD: 2011/09/18 13:23:28 - [0] D -- C:\Users\mustapha\AppData\Local\{AFA8D95D-3FFC-41D5-9BFF-F0B5883B2342}
O43 - CFD: 2011/09/27 15:31:57 - [0] D -- C:\Users\mustapha\AppData\Local\{AFEC521F-A793-4052-AC14-25CD35AC160C}
O43 - CFD: 2012/03/23 21:54:21 - [0] D -- C:\Users\mustapha\AppData\Local\{B1A77F2D-32C8-4DA4-A17A-F4037C801508}
O43 - CFD: 2012/05/09 20:07:04 - [0] D -- C:\Users\mustapha\AppData\Local\{B1DBF5A7-D4BD-4346-99E1-0BFDADEE55D1}
O43 - CFD: 2012/04/12 21:36:44 - [0] D -- C:\Users\mustapha\AppData\Local\{B1F628DC-B1F0-4B6F-84D2-DD4166E7B0D7}
O43 - CFD: 2011/07/27 16:43:59 - [0] D -- C:\Users\mustapha\AppData\Local\{B3AB40A8-FCB3-4572-92A5-F17AAD837EE4}
O43 - CFD: 2011/08/06 18:59:45 - [0] D -- C:\Users\mustapha\AppData\Local\{B4A21626-177F-4141-8899-6C64C97D453C}
O43 - CFD: 2011/05/10 14:12:36 - [0] D -- C:\Users\mustapha\AppData\Local\{B5538FB5-0D7A-41E5-A600-4906C7F57299}
O43 - CFD: 2011/07/31 21:22:55 - [0] D -- C:\Users\mustapha\AppData\Local\{B5810B36-CDA1-451A-8377-1B87B59F0717}
O43 - CFD: 2015/04/06 22:25:17 - [0] D -- C:\Users\mustapha\AppData\Local\{B65B0DCC-4C1A-4E69-AA3C-FFE03DC199DE}
O43 - CFD: 2011/05/14 12:49:59 - [0] D -- C:\Users\mustapha\AppData\Local\{B6831514-0A1F-4C96-ABA4-A905BCBAF55B}
O43 - CFD: 2011/09/30 19:21:59 - [0] D -- C:\Users\mustapha\AppData\Local\{B98E8DB7-5C3C-42A5-B5EC-E7723370CC55}
O43 - CFD: 2012/03/23 21:54:10 - [0] D -- C:\Users\mustapha\AppData\Local\{B9B86470-B0C8-45A6-A0A1-78668C765CFF}
O43 - CFD: 2011/08/29 01:14:31 - [0] D -- C:\Users\mustapha\AppData\Local\{BACC7754-02A2-402D-80F8-64E447100BED}
O43 - CFD: 2011/08/07 16:08:09 - [0] D -- C:\Users\mustapha\AppData\Local\{BB2BDB4A-F0FB-4EAF-8008-FE16E2F9A375}
O43 - CFD: 2011/04/24 13:45:10 - [0] D -- C:\Users\mustapha\AppData\Local\{BC258912-90EB-49E4-9DDA-14F0C83B6257}
O43 - CFD: 2012/03/01 20:00:49 - [0] D -- C:\Users\mustapha\AppData\Local\{BE0FA009-49F9-441E-8010-D0DFE699863D}
O43 - CFD: 2012/01/28 23:39:54 - [0] D -- C:\Users\mustapha\AppData\Local\{BE4612E5-63DB-44C7-AFDF-4A72CD92E791}
O43 - CFD: 2015/04/13 13:32:25 - [0] D -- C:\Users\mustapha\AppData\Local\{BF436C70-EB5B-46DF-A715-CE81AF957E94}
O43 - CFD: 2012/03/03 12:22:42 - [0] D -- C:\Users\mustapha\AppData\Local\{C11A6C7E-68B5-4E47-9E60-3AF819880BB2}
O43 - CFD: 2011/05/29 20:39:43 - [0] D -- C:\Users\mustapha\AppData\Local\{C19AB27F-11EA-462A-844E-E81B281B3C87}
O43 - CFD: 2011/11/29 14:02:19 - [0] D -- C:\Users\mustapha\AppData\Local\{C2585CC6-8342-4BBE-848D-2B6E4DC2B78E}
O43 - CFD: 2011/08/24 16:53:43 - [0] D -- C:\Users\mustapha\AppData\Local\{C2D31325-F2AE-4F89-AC67-70E3FD6EEE91}
O43 - CFD: 2011/08/02 13:48:43 - [0] D -- C:\Users\mustapha\AppData\Local\{C349EFEB-8BCB-488C-AF61-2C321E8FA3A0}
O43 - CFD: 2012/10/01 16:57:18 - [0] D -- C:\Users\mustapha\AppData\Local\{C38B1086-1E6A-4B2A-92EC-30EDB0345FBE}
O43 - CFD: 2012/10/13 19:55:17 - [0] D -- C:\Users\mustapha\AppData\Local\{C403F7E2-7D13-452F-8712-B0C039B3717A}
O43 - CFD: 2012/01/26 19:13:12 - [0] D -- C:\Users\mustapha\AppData\Local\{C54A3BA2-24F2-406A-8F56-4B36015565F6}
O43 - CFD: 2012/02/25 19:25:03 - [0] D -- C:\Users\mustapha\AppData\Local\{C5739190-8188-4853-B315-28310F41A25F}
O43 - CFD: 2011/08/21 19:59:31 - [0] D -- C:\Users\mustapha\AppData\Local\{C5CFD949-A371-46AC-8AA9-4ECD7E3E8A8C}
O43 - CFD: 2011/09/07 15:32:49 - [0] D -- C:\Users\mustapha\AppData\Local\{C5F3D402-C492-4E9C-AD94-CA04398ECC32}
O43 - CFD: 2011/07/10 12:15:16 - [0] D -- C:\Users\mustapha\AppData\Local\{C655380D-35A3-4AAF-A21D-6039076AB74B}
O43 - CFD: 2012/10/28 12:28:08 - [0] D -- C:\Users\mustapha\AppData\Local\{C7EF7DCA-5161-458C-AA34-2FE6C8B21796}
O43 - CFD: 2012/08/05 23:06:12 - [0] D -- C:\Users\mustapha\AppData\Local\{CA71A872-B6C8-4ED7-B3E4-A281975BDEF6}
O43 - CFD: 2011/10/03 13:28:29 - [0] D -- C:\Users\mustapha\AppData\Local\{CA9B62DD-A138-45E6-912B-50D12FF3BA6A}
O43 - CFD: 2012/12/05 18:31:41 - [0] D -- C:\Users\mustapha\AppData\Local\{CB0896A7-6FDC-4344-86B5-E73032DE709D}
O43 - CFD: 2013/03/18 19:32:05 - [0] D -- C:\Users\mustapha\AppData\Local\{CBC14944-3316-4E0A-8E5E-6B7FCF54D11D}
O43 - CFD: 2012/07/30 11:07:21 - [0] D -- C:\Users\mustapha\AppData\Local\{CC3668F3-F537-4F3C-9693-F856A5B10145}
O43 - CFD: 2011/11/29 18:32:55 - [0] D -- C:\Users\mustapha\AppData\Local\{CD9583DA-1267-4F29-A7F5-F5B23AA13D13}
O43 - CFD: 2012/12/02 18:51:34 - [0] D -- C:\Users\mustapha\AppData\Local\{CE041B1F-2AAB-433F-8B0A-98A94BF59CC5}
O43 - CFD: 2013/01/25 18:18:11 - [0] D -- C:\Users\mustapha\AppData\Local\{CE1ED8D4-2DC2-431F-8A09-05F2DB1091F2}
O43 - CFD: 2011/11/06 00:41:31 - [0] D -- C:\Users\mustapha\AppData\Local\{CE66A3D7-F776-4F9E-BEEE-2AC8213302DA}
O43 - CFD: 2011/12/27 14:30:56 - [0] D -- C:\Users\mustapha\AppData\Local\{CECCF082-4203-4EA9-B666-735ECCAFB3D1}
O43 - CFD: 2011/08/25 18:56:58 - [0] D -- C:\Users\mustapha\AppData\Local\{CEDB235A-38DF-4705-BCFA-EE0EA2355FDF}
O43 - CFD: 2011/08/21 04:17:07 - [0] D -- C:\Users\mustapha\AppData\Local\{CFFB0F6B-9D40-429D-A43B-E3250A708590}
O43 - CFD: 2012/01/29 15:24:42 - [0] D -- C:\Users\mustapha\AppData\Local\{D0376042-0D79-4B6F-B0E4-572301965D52}
O43 - CFD: 2011/05/18 20:16:57 - [0] D -- C:\Users\mustapha\AppData\Local\{D10502B7-79D4-498B-89EE-99093E63354A}
O43 - CFD: 2012/11/11 23:31:30 - [0] D -- C:\Users\mustapha\AppData\Local\{D24EFAF7-4B8A-4099-A16A-5847824EF3C3}
O43 - CFD: 2011/09/01 17:16:55 - [0] D -- C:\Users\mustapha\AppData\Local\{D2539FA5-0F9D-402D-B611-497B97D5544D}
O43 - CFD: 2011/12/25 21:22:30 - [0] D -- C:\Users\mustapha\AppData\Local\{D320E591-63E2-4316-9B67-37FA70BCDE80}
O43 - CFD: 2011/05/26 19:54:51 - [0] D -- C:\Users\mustapha\AppData\Local\{D324ACBA-E5B8-4F96-BAD3-35D7B979048F}
O43 - CFD: 2011/09/20 20:28:36 - [0] D -- C:\Users\mustapha\AppData\Local\{D56683D5-A4DC-4A16-A5BC-0959C4A1119F}
O43 - CFD: 2012/12/31 14:35:19 - [0] D -- C:\Users\mustapha\AppData\Local\{D5C358D0-AD17-4716-A4EC-159151135ECA}
O43 - CFD: 2012/07/30 11:07:10 - [0] D -- C:\Users\mustapha\AppData\Local\{D61B1B34-4C1C-42FC-A842-824637B3288D}
O43 - CFD: 2011/07/21 19:11:30 - [0] D -- C:\Users\mustapha\AppData\Local\{D6E11A13-0F4D-4A45-833D-A29ADA372064}
O43 - CFD: 2012/10/21 19:35:27 - [0] D -- C:\Users\mustapha\AppData\Local\{D7671D84-5FF9-43F8-8FBB-434187A76114}
O43 - CFD: 2011/06/04 19:58:01 - [0] D -- C:\Users\mustapha\AppData\Local\{D81F234A-331F-46EC-9DAA-67A102178F06}
O43 - CFD: 2011/09/24 13:20:31 - [0] D -- C:\Users\mustapha\AppData\Local\{D8404C66-21FE-4277-835B-7D6C9E16626C}
O43 - CFD: 2012/08/09 00:22:22 - [0] D -- C:\Users\mustapha\AppData\Local\{D8546B12-C7E9-43EB-8E88-007124705D46}
O43 - CFD: 2011/08/28 00:21:20 - [0] D -- C:\Users\mustapha\AppData\Local\{D99209FF-49BC-46D3-A2C5-6118695AD9BC}
O43 - CFD: 2012/02/20 22:10:52 - [0] D -- C:\Users\mustapha\AppData\Local\{DADAAC6F-0557-47B4-B74F-2B55F215F593}
O43 - CFD: 2011/09/06 14:19:15 - [0] D -- C:\Users\mustapha\AppData\Local\{DADB855D-2A11-442B-80ED-F8D7B6FC4DB0}
O43 - CFD: 2011/08/05 21:16:04 - [0] D -- C:\Users\mustapha\AppData\Local\{DB0B306B-9C4B-4371-8271-650BFB45DA6C}
O43 - CFD: 2011/09/26 20:49:09 - [0] D -- C:\Users\mustapha\AppData\Local\{DBAA71E0-7CB3-42A8-9E08-F0E5F4DC33D2}
O43 - CFD: 2011/04/24 00:19:38 - [0] D -- C:\Users\mustapha\AppData\Local\{DC06F429-DE87-4896-A75F-3E659CF46FA8}
O43 - CFD: 2012/01/02 00:57:24 - [0] D -- C:\Users\mustapha\AppData\Local\{DD0D610F-2078-4DAE-9E41-59E38CAF7BBD}
O43 - CFD: 2011/08/29 21:17:30 - [0] D -- C:\Users\mustapha\AppData\Local\{DD971726-1394-4486-82BC-FF127DE7E907}
O43 - CFD: 2011/12/24 17:20:42 - [0] D -- C:\Users\mustapha\AppData\Local\{DD9837DD-4816-4223-BEDF-EE3941A604A0}
O43 - CFD: 2011/06/09 15:52:37 - [0] D -- C:\Users\mustapha\AppData\Local\{DEBFAB38-7C5E-4672-8BC9-323FA0AC577E}
O43 - CFD: 2012/03/12 13:58:08 - [0] D -- C:\Users\mustapha\AppData\Local\{DF55CCD6-F91F-4A1B-9FC3-83FCDE20ADDB}
O43 - CFD: 2011/08/26 13:56:04 - [0] D -- C:\Users\mustapha\AppData\Local\{DFE9F6D0-8BCA-43F5-BE9A-244277C0603F}
O43 - CFD: 2011/08/21 20:00:00 - [0] D -- C:\Users\mustapha\AppData\Local\{E0E0862C-A8EF-4B40-A4C5-DDD396F79945}
O43 - CFD: 2011/09/23 12:07:49 - [0] D -- C:\Users\mustapha\AppData\Local\{E153D2F2-D2E2-4A51-9B43-10DA99E3F97C}
O43 - CFD: 2014/09/25 21:36:57 - [0] D -- C:\Users\mustapha\AppData\Local\{E1D5D9D7-4B3B-4080-9E8B-4AFD8FC4B9A7}
O43 - CFD: 2011/09/30 19:22:11 - [0] D -- C:\Users\mustapha\AppData\Local\{E3A595E3-8B76-4E71-84A9-A9F4050602A1}
O43 - CFD: 2012/05/19 21:29:52 - [0] D -- C:\Users\mustapha\AppData\Local\{E3A729BF-3D5E-4E33-B3FE-65EDE2B66884}
O43 - CFD: 2011/08/29 21:16:57 - [0] D -- C:\Users\mustapha\AppData\Local\{E3BDA829-314C-4561-9CBC-2074DCFC9EC6}
O43 - CFD: 2011/07/30 19:18:24 - [0] D -- C:\Users\mustapha\AppData\Local\{E5820288-F5D1-49E7-94F2-BC769F34BA0A}
O43 - CFD: 2011/12/28 14:45:58 - [0] D -- C:\Users\mustapha\AppData\Local\{E5D931EF-0006-46FB-9B13-80765370C803}
O43 - CFD: 2011/09/05 16:21:07 - [0] D -- C:\Users\mustapha\AppData\Local\{E5EF483D-268F-4F57-8EC7-39C6EA6367FB}
O43 - CFD: 2011/09/07 15:32:37 - [0] D -- C:\Users\mustapha\AppData\Local\{E7448EE4-0837-479C-9A3B-996157CE76EA}
O43 - CFD: 2011/09/26 20:48:57 - [0] D -- C:\Users\mustapha\AppData\Local\{E74DA4AE-6A91-47BF-9947-EC96F4B1BF39}
O43 - CFD: 2012/02/07 13:42:37 - [0] D -- C:\Users\mustapha\AppData\Local\{E779D77C-C5CE-422C-BD96-768D75E3E417}
O43 - CFD: 2012/07/13 08:49:20 - [0] D -- C:\Users\mustapha\AppData\Local\{E9893601-761A-4013-915E-712DE2FFDFAC}
O43 - CFD: 2012/10/14 18:06:02 - [0] D -- C:\Users\mustapha\AppData\Local\{EA2FE58B-33F0-4A34-AD4D-392F45E3D679}
O43 - CFD: 2011/12/08 23:22:17 - [0] D -- C:\Users\mustapha\AppData\Local\{EBEB286F-ADAA-4A80-AEFD-E86BBD4FF987}
O43 - CFD: 2011/11/17 15:25:08 - [0] D -- C:\Users\mustapha\AppData\Local\{EC535AFB-1511-419E-81D0-D1745E4C30E3}
O43 - CFD: 2012/03/03 12:22:31 - [0] D -- C:\Users\mustapha\AppData\Local\{EC62D368-9C59-43BC-A68D-88AA95CC66D8}
O43 - CFD: 2011/12/08 01:09:04 - [0] D -- C:\Users\mustapha\AppData\Local\{EC855E77-34CF-402D-BF2A-6B74F913775F}
O43 - CFD: 2012/07/20 09:50:37 - [0] D -- C:\Users\mustapha\AppData\Local\{ED3FD158-2CDB-4027-96E2-E97B0B1524C8}
O43 - CFD: 2012/02/15 20:12:22 - [0] D -- C:\Users\mustapha\AppData\Local\{EDE6A706-F761-4A06-99E1-A66CB7AAAA98}
O43 - CFD: 2011/10/05 22:05:09 - [0] D -- C:\Users\mustapha\AppData\Local\{EEB5E7C8-9DF7-44B8-83DA-F4E162488002}
O43 - CFD: 2012/05/20 17:25:52 - [0] D -- C:\Users\mustapha\AppData\Local\{EF163170-40EF-4E86-B8DF-72AC12AE38CF}
O43 - CFD: 2011/09/10 15:39:59 - [0] D -- C:\Users\mustapha\AppData\Local\{F0A07053-55A2-4B91-8997-19A3071B239A}
O43 - CFD: 2012/03/12 13:57:57 - [0] D -- C:\Users\mustapha\AppData\Local\{F1A68F0D-4D09-40F1-8BCA-CC8C37384A75}
O43 - CFD: 2012/07/21 10:31:18 - [0] D -- C:\Users\mustapha\AppData\Local\{F26FD91C-76CF-4847-949E-100C9C5DFDD4}
O43 - CFD: 2012/11/01 20:08:24 - [0] D -- C:\Users\mustapha\AppData\Local\{F46D3FB4-8F8D-4202-8D54-CF6C5B83FBA6}
O43 - CFD: 2011/05/13 12:40:05 - [0] D -- C:\Users\mustapha\AppData\Local\{F51B0479-3D41-44BE-8BAB-A3B6977D0198}
O43 - CFD: 2012/01/05 18:42:26 - [0] D -- C:\Users\mustapha\AppData\Local\{F7CC5F94-C70B-408D-8144-6BD4776B91EF}
O43 - CFD: 2012/11/25 19:31:48 - [0] D -- C:\Users\mustapha\AppData\Local\{F81BAD8B-8DF5-4838-9EFD-BB332439B757}
O43 - CFD: 2011/07/11 13:32:59 - [0] D -- C:\Users\mustapha\AppData\Local\{F86BFDFD-5A7F-4174-A694-762A78D3CF5E}
O43 - CFD: 2011/09/02 12:05:10 - [0] D -- C:\Users\mustapha\AppData\Local\{F9108880-5E7E-4555-9406-0E20414F0937}
O43 - CFD: 2011/09/24 13:20:54 - [0] D -- C:\Users\mustapha\AppData\Local\{F9E6EA22-EFA6-4DA2-A723-AB152729FFA2}
O43 - CFD: 2011/04/23 12:18:51 - [0] D -- C:\Users\mustapha\AppData\Local\{FA3D8EDD-6ABB-4C1C-A3B8-3E9AC7B1EB1F}
O43 - CFD: 2011/10/07 17:39:56 - [0] D -- C:\Users\mustapha\AppData\Local\{FADC61BA-BDFF-4BD0-863A-B30FE77963BA}
O43 - CFD: 2011/05/02 15:51:42 - [0] D -- C:\Users\mustapha\AppData\Local\{FB073EEB-36FE-4B73-9991-AE31085DDBB4}
O43 - CFD: 2011/07/28 12:11:25 - [0] D -- C:\Users\mustapha\AppData\Local\{FC4381E7-FABE-4A0A-9794-FDA285A2F3EA}
O43 - CFD: 2012/04/03 21:07:54 - [0] D -- C:\Users\mustapha\AppData\Local\{FC58ACA1-730E-4330-A9BD-44F945DB2779}
O43 - CFD: 2011/04/25 11:48:24 - [0] D -- C:\Users\mustapha\AppData\Local\{FD0EABCA-55C8-43D3-925F-6F987A6C9CBE}
O43 - CFD: 2012/07/13 08:49:09 - [0] D -- C:\Users\mustapha\AppData\Local\{FDA245A6-540B-4253-9DBF-5DC511293DF0}
O43 - CFD: 2012/04/01 23:39:42 - [0] D -- C:\Users\mustapha\AppData\Local\{FEE63BA7-A915-413B-AEF4-1A38547D89B2}
O43 - CFD: 2011/12/21 12:28:29 - [0] D -- C:\Users\mustapha\AppData\Local\{FF9C22E0-61CC-43F4-8442-BAD7033451C3}
O43 - CFD: 2012/10/07 13:19:16 - [0] D -- C:\Users\mustapha\AppData\Local\{FFF0E188-4AC5-4ECF-8C26-345A2973366C}
O43 - CFD: 2015/03/13 18:51:55 - [] RD -- C:\Users\mustapha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/05/03 19:48:29 - [] D -- C:\Users\mustapha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 2015/03/13 18:51:55 - [] RD -- C:\Users\mustapha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Liste des pilotes du système (SDL) (O58) (75) - 10s
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864]
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440]
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904]
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128]
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632]
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856]
O58 - SDL:2010/05/11 12:11:38 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [2229608]
O58 - SDL:2011/07/30 16:17:34 A . (...) -- C:\Windows\System32\drivers\atksgt.sys [88480]
O58 - SDL:2015/06/18 14:14:06 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\drivers\avgntflt.sys [153256]
O58 - SDL:2015/06/18 14:14:06 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [132656]
O58 - SDL:2013/11/27 11:48:45 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\drivers\avkmgr.sys [28600]
O58 - SDL:2015/03/10 16:36:58 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\drivers\avnetflt.sys [44088]
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848]
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432]
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704]
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976]
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720]
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480]
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488]
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496]
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016]
O58 - SDL:2012/08/21 13:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240]
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232]
O58 - SDL:2009/09/17 07:54:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344]
O58 - SDL:2010/11/20 15:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720]
O58 - SDL:2010/04/13 18:44:22 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [540696]
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496]
O58 - SDL:2010/08/25 19:36:04 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [10611552]
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112]
O58 - SDL:2010/02/27 01:32:14 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [158976]
O58 - SDL:2010/06/21 11:45:56 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [287232]
O58 - SDL:2010/05/15 14:48:28 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\Windows\System32\drivers\k57nd60a.sys [384040]
O58 - SDL:2011/07/30 16:17:34 A . (...) -- C:\Windows\System32\drivers\lirsgt.sys [46400]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392]
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736]
O58 - SDL:2014/06/10 21:50:18 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl64.sys [23040]
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264]
O58 - SDL:2009/05/06 01:46:08 A . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [18432]
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352]
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272]
O58 - SDL:2008/06/16 04:00:00 N . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\System32\drivers\PxHlpa64.sys [55024]
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816]
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592]
O58 - SDL:2009/12/30 10:21:26 A . (.VS Revo Group - Revo Uninstaller Minifilter.) -- C:\Windows\System32\drivers\revoflt.sys [31800]
O58 - SDL:2010/06/22 12:03:10 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2399848]
O58 - SDL:2010/06/17 11:18:28 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [246376]
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040]
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584]
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464]
O58 - SDL:2011/05/13 03:21:02 A . (.Google Inc - ADB Interface.) -- C:\Windows\System32\drivers\ssadadb.sys [36328]
O58 - SDL:2011/05/13 03:21:02 A . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\System32\drivers\ssadbus.sys [157672]
O58 - SDL:2011/05/13 03:21:02 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcm.sys [13288]
O58 - SDL:2011/05/13 03:21:02 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcmnt.sys [13288]
O58 - SDL:2011/05/13 03:21:02 A . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\System32\drivers\ssadmdfl.sys [16872]
O58 - SDL:2011/05/13 03:21:04 A . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\System32\drivers\ssadmdm.sys [177640]
O58 - SDL:2011/05/13 03:21:04 A . (.MCCI Corporation - SAMSUNG Android USB Diagnostic Serial Port.) -- C:\Windows\System32\drivers\ssadserd.sys [146920]
O58 - SDL:2011/05/13 03:21:04 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwh.sys [13800]
O58 - SDL:2011/05/13 03:21:04 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwhnt.sys [13800]
O58 - SDL:2014/01/22 09:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [108800]
O58 - SDL:2014/01/22 09:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [206080]
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656]
O58 - SDL:2009/12/10 13:25:10 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [301104]
O58 - SDL:2009/05/06 01:46:08 A . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [16896]
O58 - SDL:2014/06/10 21:50:24 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784]
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488]
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (1) - 31s
O61 - LFC: 2015/07/21 15:22:29 A . (..) -- C:\Users\mustapha\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]

---\\ Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe

---\\ Menu de démarrage Internet (SMI) (O68) (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (11) - 4s
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"crossriderapp1950@crossrider.com\":{\"descrip[...] =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.dealply.partner", "cnet"); =>PUP.Optional.Dealply
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.dealply.channel", "cnetorganic"); =>PUP.Optional.Dealply
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.dealply.installId", "v24872298849287531181092013090707414722"); =>PUP.Optional.Dealply
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.dealply.installIdSource", "inst"); =>PUP.Optional.Dealply
O69 - SBI: prefs.js [mustapha - d1y3zz03.default] user_pref("extensions.dealply.sampleGroup", "2"); =>PUP.Optional.Dealply
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} [DefaultScope] - (Astromenda) - http://astromenda.com/ =>PUP.Optional.Astromenda
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web) - http://www.enhanced-search.com/
O69 - SBI: SearchScopes [HKCU] {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} - (Web Search) - http://feed.snapdo.com/ =>PUP.Optional.SmartBar
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com/ =>PUP.Optional.QuestScan
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com/ =>PUP.Optional.QuestScan

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2603008]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (18) - 3s
O87 - FAEL: "{6A1760B9-458C-4802-AB92-F27B4AA2F853}" [In-None-P6-TRUE] .(.Bitberry Software - Bitberry Software Update Checker.) -- C:\Program Files (x86)\FinalMediaPlayer\FMPCheckForUpdates.exe
O87 - FAEL: "{5F055714-DCBC-4291-9C4D-944376125CB4}" [In-None-P6-TRUE] .(.Bitberry Software - Bitberry Software Update Checker.) -- C:\Program Files (x86)\FinalMediaPlayer\FMPCheckForUpdates.exe
O87 - FAEL: "{B5217F9A-2EA9-4C6B-9688-ABD3AB51A286}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{2F68BA28-10DE-4C5F-971B-2624412CD0B5}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{B5ABD707-E925-4450-BCF5-A3B326D406ED}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{93A42BDA-6D89-483E-B8B1-05364139DBD5}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{95E74933-DB56-4C30-A113-AF396AEC3E1B}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas 2\Binaries\R6Vegas2_Game.exe
O87 - FAEL: "{E921CC02-0D53-486D-84F8-3A7E1A314EDD}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas 2\Binaries\R6Vegas2_Game.exe
O87 - FAEL: "{6712DE29-4A52-4320-BB64-2ADE69D10ABD}" [In-None-P6-TRUE] .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas 2\Binaries\R6Vegas2_Launcher.exe
O87 - FAEL: "{E9A33F92-3A1B-4B51-99A3-9679E4770691}" [In-None-P17-TRUE] .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas 2\Binaries\R6Vegas2_Launcher.exe
O87 - FAEL: "{B5AA2AD2-EB0D-4CEA-A138-A63E02607F12}" [In-None-P17-TRUE] .(.Trusted Software ApS - Find software to open your files.) -- C:\Program Files (x86)\File Type Assistant\TSAssist.exe =>PUP.Optional.InstallCore
O87 - FAEL: "TCP Query User{F25A353A-938E-4358-AAA0-6A50CA548F7E}C:\users\mustapha\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\mustapha\appdata\roaming\cacaoweb\cacaoweb.exe =>PUP.Optional.CacaoWeb
O87 - FAEL: "UDP Query User{853FCB51-5787-45A1-9E60-85C7B7A7C26B}C:\users\mustapha\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\mustapha\appdata\roaming\cacaoweb\cacaoweb.exe =>PUP.Optional.CacaoWeb
O87 - FAEL: "TCP Query User{DB9BFC14-E069-4C28-9C8D-047D464F36C6}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe" [In-None-P6-TRUE] .(.Skype Limited - Facebook Video Calling.) -- C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
O87 - FAEL: "UDP Query User{FAC64498-86CC-447C-8086-BFE63690C07E}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe" [In-None-P17-TRUE] .(.Skype Limited - Facebook Video Calling.) -- C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
O87 - FAEL: "{6C1F0F2A-91AB-415B-AA2B-AAA8E6670732}" [In-None-P6-TRUE] .(.Skype Limited - Facebook Video Calling.) -- C:\Users\mustapha\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "TCP Query User{36521C4B-A383-4337-9F2A-23AE59E7A2DD}C:\users\mustapha\downloads\utorrent.exe" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\mustapha\downloads\utorrent.exe
O87 - FAEL: "UDP Query User{8E776962-4050-46A6-BC03-4794D0CF699A}C:\users\mustapha\downloads\utorrent.exe" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\mustapha\downloads\utorrent.exe

---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) (2) - 9s
[MD5.] [WIS][2014/02/09 13:42:18] (.LPT - Windows Installer XML (3.5.2519.0).) -- C:\Windows\Installer\1c5462.msi [1712128] =>PUP.Optional.Linkury
[MD5.] [WIS][2012/09/19 23:14:13] (.Boxore OU. - Windows Installer XML (3.5.2519.0).) -- C:\Windows\Installer\2533c76.msi [45056] =>PUP.Optional.Boxore

---\\ Scan Additionnel (O88) (92) - 0s
C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe =>PUP.Optional.Agent
C:\Users\mustapha\AppData\Roaming\cacaoweb\cacaoweb.exe =>PUP.Optional.CacaoWeb
C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\searchplugins\buenosearch.xml =>PUP.Optional.BuenoSearch
C:\Users\mustapha\AppData\Roaming\Mozilla\Firefox\Profiles\d1y3zz03.default\extensions\cacaoweb@cacaoweb.org =>PUP.Optional.CacaoWeb
HKLM\SYSTEM\CurrentControlSet\Services\savesenselive =>PUP.Optional.SaveSense
C:\Windows\Tasks\APSnotifierPP1.job =>PUP.Optional.AnyProtect
C:\Windows\Tasks\Final Media Player Update Checker.job =>PUP.Optional.InstallCore
C:\Windows\Tasks\Freeven pro 1.2-chromeinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Freeven pro 1.2-codedownloader.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Freeven pro 1.2-enabler.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Freeven pro 1.2-firefoxinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\Freeven pro 1.2-updater.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MediaPlayerplus-chromeinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MediaPlayerplus-codedownloader.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MediaPlayerplus-enabler.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MediaPlayerplus-firefoxinstaller.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\MediaPlayerplus-updater.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\WSE_Astromenda.job =>PUP.Optional.Astromenda
C:\Windows\System32\Tasks\APSnotifierPP1 =>PUP.Optional.AnyProtect
C:\Windows\System32\Tasks\Final Media Player Update Checker =>PUP.Optional.InstallCore
C:\Windows\System32\Tasks\Freeven pro 1.2-chromeinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Freeven pro 1.2-codedownloader =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Freeven pro 1.2-enabler =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Freeven pro 1.2-firefoxinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\Freeven pro 1.2-updater =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MediaPlayerplus-chromeinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MediaPlayerplus-codedownloader =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MediaPlayerplus-enabler =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MediaPlayerplus-firefoxinstaller =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\MediaPlayerplus-updater =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\WSE_Astromenda =>PUP.Optional.Astromenda
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RewardsArcadeSuite =>PUP.Optional.RewardsArcade
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\BrowserMngr =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\DealPly =>PUP.Optional.Dealply
HKLM\SOFTWARE\Wow6432Node\DealPlyLive =>PUP.Optional.Dealply
HKLM\SOFTWARE\Wow6432Node\Freeven pro 1.2 =>PUP.Optional.Freeven
HKLM\SOFTWARE\Wow6432Node\Freeze.com =>PUP.Optional.Freeze
HKLM\SOFTWARE\Wow6432Node\FREEzeFrog =>PUP.Optional.FreezeFrog
HKLM\SOFTWARE\Wow6432Node\free_soft_to_day =>PUP.Optional.FreeSoftToday
HKLM\SOFTWARE\Wow6432Node\iMeshMediabarTb =>PUP.Optional.iMesh
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\MediaPlayerplus =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKLM\SOFTWARE\Wow6432Node\QuestScan =>PUP.Optional.QuestScan
HKLM\SOFTWARE\Wow6432Node\SaveSenseLive =>PUP.Optional.SaveSense
HKLM\SOFTWARE\Wow6432Node\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKLM\SOFTWARE\Wow6432Node\SP Global =>PUP.Optional.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\SProtector =>PUP.Optional.MocaFlix
HKLM\SOFTWARE\Wow6432Node\Systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\1ClickDownload =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\Boxore =>PUP.Optional.Boxore
HKCU\SOFTWARE\BrowserMngr =>PUP.Optional.Babylon
HKCU\SOFTWARE\Cr_Installer =>PUP.Optional.CrossRider
HKCU\SOFTWARE\DealPly =>PUP.Optional.Dealply
HKCU\SOFTWARE\DealPlyLive =>PUP.Optional.Dealply
HKCU\SOFTWARE\freesofttoday =>PUP.Optional.Multiplug
HKCU\SOFTWARE\freezefrogsa =>PUP.Optional.FreezeFrog
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\lucky leap =>LuckyLeap
HKCU\SOFTWARE\OfferBox =>PUP.Optional.OfferBox
HKCU\SOFTWARE\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\AppDataLow\SProtector =>PUP.Optional.MocaFlix =>PUP.Optional.MocaFlix
HKCU\SOFTWARE\AppDataLow\Software\Freeven pro 1.2 =>PUP.Optional.Freeven =>PUP.Optional.Freeven
HKCU\SOFTWARE\AppDataLow\Software\MediaPlayerplus =>PUP.Optional.CrossRider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\PriceGong =>PUP.Optional.PriceGong =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\RewardsArcadeSuite =>PUP.Optional.RewardsArcade =>PUP.Optional.RewardsArcade
HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport =>PUP.Optional.ShoppingReport
C:\Program Files (x86)\DIgiCoupon =>PUP.Optional.DiGiCoupon
C:\Program Files (x86)\File Type Assistant =>PUP.Optional.InstallCore
C:\Program Files (x86)\Freeven pro 1.2 =>PUP.Optional.Freeven
C:\Program Files (x86)\MediaPlayerplus =>PUP.Optional.CrossRider
C:\Program Files (x86)\W3i =>PUP.Optional.Agent
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_to_day =>PUP.Optional.FreeSoftToday
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\Fun2SavE =>PUP.Optional.Multiplug
C:\ProgramData\Systweak =>PUP.Optional.Systweak
C:\ProgramData\W3i =>PUP.Optional.Agent
C:\Users\mustapha\AppData\Roaming\cacaoweb =>PUP.Optional.CacaoWeb
C:\Users\mustapha\AppData\Roaming\com.w3i.FlipToast =>PUP.Optional.Agent
C:\Users\mustapha\AppData\Roaming\systweak =>PUP.Optional.Systweak
C:\Users\mustapha\AppData\Local\Astromenda =>PUP.Optional.Astromenda
C:\Users\mustapha\AppData\Local\FileTypeAssistant =>PUP.Optional.InstallCore
C:\Users\mustapha\AppData\Local\fst_fr_134 =>PUP.Optional.FreeSoftToday
C:\Users\mustapha\AppData\Local\SaveSenseLive =>PUP.Optional.SaveSense
C:\Program Files (x86)\File Type Assistant\TSAssist.exe =>PUP.Optional.InstallCore
C:\Windows\Installer\1c5462.msi =>PUP.Optional.Linkury
C:\Windows\Installer\2533c76.msi =>PUP.Optional.Boxore

---\\ Récapitulatif des éléments trouvées sur votre station (36) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.Agent
http://www.nicolascoolman.fr/pup-cacaoweb/ =>PUP.Optional.CacaoWeb
http://www.nicolascoolman.fr/pup-buenosearch/ =>PUP.Optional.BuenoSearch
http://www.nicolascoolman.fr/pup-dealply/ =>PUP.Optional.Dealply
http://www.nicolascoolman.fr/pup-astromenda/ =>PUP.Optional.Astromenda
http://www.nicolascoolman.fr/blog =>PUP.Optional.MySearchDial
http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/hijacker-qone8 / =>PUP.Optional.Qone8
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/pup-quickshare/ =>PUP.Optional.QuickShare
http://www.nicolascoolman.fr/pup-savesense/ =>PUP.Optional.SaveSense
http://www.nicolascoolman.fr/pup-anyprotect/ =>PUP.Optional.AnyProtect
http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-rewardsarcade/ =>PUP.Optional.RewardsArcade
http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/blog =>PUP.Optional.Freeven
http://www.nicolascoolman.fr/adware-freeze/ =>PUP.Optional.Freeze
http://www.nicolascoolman.fr/adware-freezefrog/ =>PUP.Optional.FreezeFrog
http://www.nicolascoolman.fr/adware-freesofttoday/ =>PUP.Optional.FreeSoftToday
http://www.nicolascoolman.fr/pup-imesh/ =>PUP.Optional.iMesh
http://www.nicolascoolman.fr/blog =>PUP.Optional.BrowserExtensions
http://www.nicolascoolman.fr/pup-offerbox/ =>PUP.Optional.OfferBox
http://www.nicolascoolman.fr/adware-questscan/ =>PUP.Optional.QuestScan
http://www.nicolascoolman.fr/adware-shoppingreport/ =>PUP.Optional.ShoppingReport
http://www.nicolascoolman.fr/pup-advancedsystemprotector/ =>PUP.Optional.AdvancedSystemProtector
http://www.nicolascoolman.fr/pup-mocaflix/ =>PUP.Optional.MocaFlix
http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak
http://www.nicolascoolman.fr/pup-1clickdownloader/ =>PUP.Optional.1ClickDownloader
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/blog =>LuckyLeap
http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/adware-pricegong/ =>PUP.Optional.PriceGong
http://www.nicolascoolman.fr/blog =>PUP.Optional.DiGiCoupon
http://www.nicolascoolman.fr/blog =>PUP.Optional.Linkury

~ End of the scan, 10874 items in 175 seconds (1442)(0)()

Publicité


Signaler le contenu de ce document

Publicité