cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.9.22.144 Par Nicolas Coolman (2015/09/22)
~ Démarré par 3415058 (Administrator) (2015/09/26 17:05:55)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Pas de fichier réseau
~ Mode: Scanner
~ Rapport: C:\Users\3415058\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\3415058\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (3) - 1s
GCIE: Google Chrome v45.0.2454.101
MFIE: Mozilla Firefox 31.0 (x86 fr) v31.0
MSIE: Internet Explorer v11.0.9600.17633

---\\ Informations sur les produits Windows (10) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 2
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (3) - 43s
avast! Free Antivirus v8.0.1489.0
Malwarebytes Anti-Malware version 2.1.8.1057
Windows Defender W7 (Activate)

---\\ Logiciels d'optimisation (1) - 52s
CCleaner v3.09

---\\ Surveillance de Logiciels (2) - 53s
Adobe Flash Player 11 Plugin
Adobe Reader 9.5.2 MUI

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3987.312 MB (31% free)
~ System Restore: Activé (Enable)
~ System drive C: has 763 GB free of 922 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: 3415058-HP
~ User Name: 3415058
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 763 GB free of 922 GB (System)
~ Drive D: has 4 GB free of 30 GB

---\\ Etat du Centre de Sécurité Windows (12) - 1s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 6s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808] ©
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] ©
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] ©
[MD5.9DFE41A69DF70AAB75CB5BA8C1109EA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2358272] ©
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168] ©
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448] ©
[MD5.492D07D79E7024CA310867B526D9636D] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [357888] ©
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\Syswow64\dnsapi.dll [270336] ©
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152] ©
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] ©
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] ©
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] ©
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] ©
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] ©
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] ©
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] ©
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [158208] ©
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632] ©
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928] ©
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] ©
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] ©
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] ©
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296] ©
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808] ©

---\\ Processus lancés (32) - 17s
[MD5.48619A29F9C9C3CFEB66718DD03D8057] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [203264] [PID.992] ©
[MD5.A90CA3B8D159269A317BFF556CB995F7] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [462336] [PID.1152] ©
[MD5.778CE2C015DEC896C5C9323342BD71D4] - (.Hewlett-Packard Company - HpService.) -- C:\Windows\system32\Hpservice.exe [30520] [PID.1176] ©
[MD5.EAC9D9868D37C8785D12475A9BB65A11] - (.DigitalPersona, Inc. - DigitalPersona Local Host.) -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe [440144] [PID.1584] ©
[MD5.14C9463A3E78A4F84306FE0945E0A94F] - (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe [739664] [PID.1680] ©
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.1352] ©
[MD5.47451864076E2DDBA90DB96700B8A290] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [415256] [PID.1412] ©
[MD5.1D5BADF51C73219837A82B739C95C2CC] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe [487424] [PID.1384] ©
[MD5.33CF63222BADF68F15AAF6C1687360B2] - (.Copyright (C) 2009 Hewlett-Packard Development Compan - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896] [PID.1940] ©
[MD5.BF3916929D063F245CE13B5157CC4832] - (.DigitalPersona, Inc. - DigitalPersona 64-bit Helper Process.) -- C:\Program Files\DigitalPersona\Bin\DpAgent.exe [386416] [PID.1072] ©
[MD5.96F7A5C43E6D57C299CB0CFC521CAC29] - (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2185032] [PID.356] ©
[MD5.2BBD2AB07D779278114BA6A694972F1A] - (.Motorola, Inc. - Bluetooth Device Manager.) -- C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [4181256] [PID.2072]
[MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.2184] ©
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe [136488] [PID.2352] ©
[MD5.3DC11A802353401332D49C3CBFBBE5FC] - (.Hewlett-Packard Company - HP Client Services.) -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [291896] [PID.2444] ©
[MD5.F323230C391771611BBE9363B88C3E3E] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [92216] [PID.2564] ©
[MD5.854197D1270D20193FE2D4B14784AADE] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [26680] [PID.2648] ©
[MD5.0301E49C2746A990C94B6DD71FBEF656] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760] [PID.2656] ©
[MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2696] ©
[MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.2752] ©
[MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880] [PID.2984] ©
[MD5.F036CFB275D0C55F4E45FBBF5F98B3C8] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [193824] [PID.1068] ©
[MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6554424] [PID.2948] ©
[MD5.2BACD71123F42CEA603F4E205E1AE337] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096] [PID.3064] ©
[MD5.9AF4B2CF2F98CF6157CDFD917AE5785B] - (.Motorola, Inc. - Bluetooth OBEX Service.) -- C:\Program Files\Motorola\Bluetooth\obexsrv.exe [677128] [PID.3108]
[MD5.2A46FFE841EC43001D5A293A54DB34DE] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223104] [PID.3368] ©
[MD5.52C0312AB35EB7187015FB6A99136BB5] - (.Macrovision Europe Ltd. - Activation Licensing Service.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1028096] [PID.3664] ©
[MD5.5311386F0EC157D155BB07A1D420FB4D] - (.Hewlett-Packard Company - hpqwmiex Module.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [735288] [PID.3572] ©
[MD5.87D6A02028E47CA696C4294C658E3EE6] - (.Motorola, Inc. - Bluetooth Media Service.) -- C:\Program Files\Motorola\Bluetooth\audiosrv.exe [1096968] [PID.4404]
[MD5.6D515466AB8BFE61184092B635AE6EB4] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.4784] ©
[MD5.0FADD949576A164B4E51E716F46B6C33] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2533400] [PID.148] ©
[MD5.3274AC8202980DD1B63F3062B7A5D37A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\3415058\AppData\Roaming\ZHP\ZHPDiag3.exe [1936896] [PID.4212] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (7) - 4s
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pbjikboenpfhbbejgkoklgkhjpfogcam] Amazon 1Button App for Chrome
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (11) - 22s
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
P2 - EXT FILE: (...) -- C:\Users\3415058\AppData\Roaming\Mozilla\Firefox\Profiles\j9vjtkb1.default-1439994382817\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (15) - 5s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 1s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 1s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (3) - 1s
O2 - BHO: avast! WebRep [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} (Orphean)
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} (Orphean)

---\\ Internet Explorer, Barre d'outil (1) - 1s
O3 - Toolbar: 0xE3EFEB7F196B494398D2FFB09D4B49CA0124060000 - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du système (22) - 8s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe ©
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe ©
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe ©
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe ©
O4 - HKLM\..\Run: [BTMTrayAgent] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKLM\..\Run: [SmartMenu] . (.Copyright (C) 2009 Hewlett-Packard Development Compan - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ©
O4 - HKLM\..\Run: [HPWirelessAssistant] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE ©
O4 - HKLM\..\Run: [CanonSolutionMenu] . (.CANON INC. - CNSLMAIN.) -- C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.EXE ©
O4 - HKCU\..\Run: [ZumoDrive] . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ©
O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.Easybits - Power off recovery for Magic Desktop.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe ©
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe ©
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe ©
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (.not file.)
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (.not file.)
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-21-1279248796-2314971259-3785274468-1000\..\Run: [ZumoDrive] . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk

---\\ Modification Domaine/Adresses DNS (6) - 1s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

---\\ Protocole additionnel (21) - 3s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - c:\progra~3\bitguard\271769~1.27\{16cdf~1\loader.dll (.not file.) =>PUP.Optional.BitGuard

---\\ Liste des services NT non Microsoft et non désactivés (17) - 13s
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe ©
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
O23 - Service: Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Motorola, Inc. - Bluetooth OBEX Service.) - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) . (.DigitalPersona, Inc. - DigitalPersona Local Host.) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe ©
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard Company - HP Support Assistant.) - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe ©
O23 - Service: HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe ©
O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe ©
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe ©
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\system32\Hpservice.exe ©
O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe ©
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe ©
O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©

---\\ Logiciels installés (96) - 184s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner ©
O42 - Logiciel: Ralink Motorola BC4 Bluetooth 3.0+HS Adapter - (.Motorola, Inc..) [HKLM][64Bits] -- Ralink Motorola BC4 Bluetooth 3.0+HS Adapter_is1
O42 - Logiciel: HP MediaSmart Movies and TV - (.Hewlett-Packard.) [HKLM][64Bits] -- {09BDCC02-80F2-4EFB-8F1B-A807D2C38E31} ©
O42 - Logiciel: Canon MP250 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series
O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} ©
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {48EE0E00-86DE-47A5-8D00-B5D72A70BCCD} ©
O42 - Logiciel: HP SimplePass Identity Protection - (.DigitalPersona, Inc..) [HKLM][64Bits] -- {5BF97E02-2F6A-412A-BB4D-B6E2DC65FCA7} ©
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM][64Bits] -- {BE6725F2-6D15-477C-86C6-4522B8569D62} ©
O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} ©
O42 - Logiciel: Share64 - (.Corel Corporation.) [HKLM][64Bits] -- {F6246243-CF06-4E40-8A37-C3B537695C36} ©
O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {FAB3AAFE-62C8-4DF3-ACD2-8E1A5C1B9725} ©
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin ©
O42 - Logiciel: avast! Free Antivirus v8.0.1489.0 - (.AVAST Software.) [HKLM][64Bits] -- avast ©
O42 - Logiciel: Canon Utilities My Printer - (...) [HKLM][64Bits] -- CanonMyPrinter
O42 - Logiciel: Canon Utilities Solution Menu - (...) [HKLM][64Bits] -- CanonSolutionMenu
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (...) [HKLM][64Bits] -- Easy-PhotoPrint EX
O42 - Logiciel: Canon Easy-WebPrint EX - (...) [HKLM][64Bits] -- Easy-WebPrint EX
O42 - Logiciel: Magic Desktop - (.Easybits.) [HKLM][64Bits] -- EasyBits Magic Desktop ©
O42 - Logiciel: Enregistrement utilisateur de Canon MP250 series - (...) [HKLM][64Bits] -- Enregistrement utilisateur de Canon MP250 series
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E} ©
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} ©
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095} ©
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} ©
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Mozilla Firefox 31.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 31.0 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: Canon MP Navigator EX 3.0 - (...) [HKLM][64Bits] -- MP Navigator EX 3.0
O42 - Logiciel: PrivaZer - (.Goversoft LLC.) [HKLM][64Bits] -- PrivaZer ©
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player ©
O42 - Logiciel: HP CloudDrive - (.Zecter Inc..) [HKLM][64Bits] -- ZumoDrive
O42 - Logiciel: Corel PaintShop Photo Pro X3 - (.Corel Corporation.) [HKLM][64Bits] -- _{D1AEB5DB-04FA-489D-94EF-8600898B93EE} ©
O42 - Logiciel: Corel VideoStudio Pro X3 - (.Corel Corporation.) [HKLM][64Bits] -- _{F072CA07-A781-45E4-9975-C033A73019CF} ©
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {045C16AD-B2E5-43D0-BB51-2F1987D91038} ©
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} ©
O42 - Logiciel: Windows Media Center Add-in for Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EDBEB2B-7C8D-42E6-8312-0F84394A3223} ©
O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {1B9DB1DF-3530-442B-AE07-1F5D08B6BA71} ©
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {1E6E990A-728D-4700-9B0A-2CA541C93A12} ©
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {254C37AA-6B72-4300-84F6-98A82419187E} ©
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {3023EBDA-BF1B-4831-B347-E5018555F26E} ©
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} ©
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} ©
O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {53469506-A37E-4314-A9D9-38724EC23A75} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {63EC2120-1742-4625-AA47-C6A8AEC9C64C} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} ©
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} ©
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM][64Bits] -- {6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: Ralink RT3090 802.11b/g/n WiFi Adapter - (.Ralink.) [HKLM][64Bits] -- {8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0} ©
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM][64Bits] -- {91A34181-9FAD-43AB-A35F-E7A8945B7E1C} ©
O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} ©
O42 - Logiciel: Adobe Reader 9.5.2 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001} ©
O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} ©
O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AF306BD8-F9D1-4627-89B9-246E59074A05} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {D12E3E7F-1B13-4933-A915-16C7DD37A095} ©
O42 - Logiciel: Setup - (.Corel Corporation.) [HKLM][64Bits] -- {D1612A3D-0DCC-4055-BB6A-0036F31158A0} ©
O42 - Logiciel: ICA - (.Corel Corporation.) [HKLM][64Bits] -- {D1AEB5DB-04FA-489D-94EF-8600898B93EE} ©
O42 - Logiciel: ISCOM - (.Corel Corporation.) [HKLM][64Bits] -- {D1F80EFD-A032-4E8E-A367-70C44AD4DCE0} ©
O42 - Logiciel: Intel(R) Turbo Boost Technology Driver - (.Intel Corporation.) [HKLM][64Bits] -- {D6C630BF-8DBB-4042-8562-DC9A52CB6E7E} ©
O42 - Logiciel: Corel PaintShop Photo Pro X3 - (.Corel Corporation.) [HKLM][64Bits] -- {DA4BF4BE-3CDC-43B5-BBDA-DDDA73103111} ©
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: IPM_PSP_Pro - (.Corel Corporation.) [HKLM][64Bits] -- {DCD941B6-F2E7-4FAF-B102-F7D4DE5FF99A} ©
O42 - Logiciel: PSPPRO_DCRAW - (.Corel Corporation.) [HKLM][64Bits] -- {DCF1928A-FC01-48E7-A7E6-4651D42EF6A1} ©
O42 - Logiciel: PSPPContent - (.Corel Corporation.) [HKLM][64Bits] -- {DF8B9311-ADE7-4EDE-B121-326CAA3D225D} ©
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} ©
O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EF682D1C-591D-48B5-9803-628DA622C281} ©
O42 - Logiciel: Setup - (.Corel Corporation.) [HKLM][64Bits] -- {F069C491-69E6-4D9B-9A0C-B7894A1FA97C} ©
O42 - Logiciel: ICA - (.Corel Corporation.) [HKLM][64Bits] -- {F072CA07-A781-45E4-9975-C033A73019CF} ©
O42 - Logiciel: VSPro - (.Corel Corporation.) [HKLM][64Bits] -- {F206FEC3-F5DD-43FD-A8CF-9C46B8A6A92C} ©
O42 - Logiciel: DeviceIO - (.Corel Corporation.) [HKLM][64Bits] -- {F4E9851F-765E-40B7-9859-237C2724E62C} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} ©
O42 - Logiciel: Contents - (.Corel Corporation.) [HKLM][64Bits] -- {F6A76E9C-C299-4CFA-AD2A-57FE9DD68B70} ©
O42 - Logiciel: PureHD - (.Corel Corporation.) [HKLM][64Bits] -- {F8423392-2296-4748-9B66-344432459632} ©
O42 - Logiciel: Share - (.Corel Corporation.) [HKLM][64Bits] -- {F909BD3C-8684-4ACF-B7C3-33F4F9F901B7} ©
O42 - Logiciel: VIO - (.Corel Corporation.) [HKLM][64Bits] -- {F95C8C1F-25BB-44EC-A7E6-5C17ABC6BC71} ©
O42 - Logiciel: VSClassic - (.Corel Corporation.) [HKLM][64Bits] -- {FB0B6DDD-DF3E-4CD6-927C-724AB854E322} ©
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} ©
O42 - Logiciel: IPM_VS_Pro - (.Corel Corporation.) [HKLM][64Bits] -- {FD67D9F3-FED6-4A2E-9D6C-8C8C44DEF8FF} ©
O42 - Logiciel: ISCOM - (.Corel Corporation.) [HKLM][64Bits] -- {FE661711-E392-4B3F-A4A7-02C747C09134} ©

---\\ HKCU & HKLM Software Keys (99) - 184s
HKLM\SOFTWARE\Wow6432Node\582dcdeb43ded48 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdobeFlashPlayerUpdate
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Canon
HKLM\SOFTWARE\Wow6432Node\Caphyon
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\Corel
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Darty
HKLM\SOFTWARE\Wow6432Node\Data fellows
HKLM\SOFTWARE\Wow6432Node\DigitalPersona
HKLM\SOFTWARE\Wow6432Node\EasyBits
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HP
HKLM\SOFTWARE\Wow6432Node\IDT
HKLM\SOFTWARE\Wow6432Node\Insyde
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\InterVideo
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\MimarSinan
HKLM\SOFTWARE\Wow6432Node\Motorola
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Product_Upgrade
HKLM\SOFTWARE\Wow6432Node\Ralink
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Stardock
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\Systweak =>PUP.Optional.Systweak
HKLM\SOFTWARE\Wow6432Node\Ulead Systems
HKLM\SOFTWARE\Wow6432Node\Validity
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Win32 Services
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\Zecter
HKLM\SOFTWARE\Wow6432Node\ZumoDrive
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\582dcdeb43ded48 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Alexa Internet =>PUP.Optional.VidSaver
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Avast Software
HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\Corel
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\darty_serenite
HKCU\SOFTWARE\DigitalPersona
HKCU\SOFTWARE\Distromatic
HKCU\SOFTWARE\EasyBits
HKCU\SOFTWARE\F-Secure
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\IDT
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LightScribe
HKCU\SOFTWARE\LogMeInRescueCallingCard
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Motorola
HKCU\SOFTWARE\mozilla
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Northcode Inc
HKCU\SOFTWARE\PerformerSoft LLC =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PrivaZer
HKCU\SOFTWARE\Stardock
HKCU\SOFTWARE\Systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\Yahoo
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Google
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Canon
HKCU\SOFTWARE\AppDataLow\Software\SmartBar =>PUP.Optional.SmartBar

---\\ Contenu des dossiers Programmes (839) - 1059s
O43 - CFD: 2010/10/17 02:29:06 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2013/10/04 16:48:44 - [] D -- C:\Program Files (x86)\Amazon
O43 - CFD: 2012/11/04 19:12:41 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2012/06/21 05:49:28 - [] D -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 2011/08/03 18:36:52 - [] D -- C:\Program Files (x86)\Canon
O43 - CFD: 2015/09/15 18:48:38 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2010/10/17 02:34:18 - [] D -- C:\Program Files (x86)\Corel
O43 - CFD: 2012/11/25 13:02:36 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 2014/11/15 07:11:30 - [] D -- C:\Program Files (x86)\devolo
O43 - CFD: 2011/02/08 02:17:08 - [] D -- C:\Program Files (x86)\DigitalPersona
O43 - CFD: 2015/02/22 17:43:58 - [] D -- C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 2014/06/15 13:59:29 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2012/11/25 12:35:41 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2010/10/17 02:44:07 - [] D -- C:\Program Files (x86)\HP Documentation
O43 - CFD: 2015/02/21 19:46:23 - [] D -- C:\Program Files (x86)\HP Games
O43 - CFD: 2013/02/24 15:32:55 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2011/02/08 01:51:15 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/08/19 16:05:31 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/09/24 17:47:07 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2015/09/25 05:00:22 - [] D -- C:\Program Files (x86)\Microsoft Application Virtualization Client
O43 - CFD: 2015/02/22 14:11:42 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/09/25 07:26:38 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2010/10/17 02:27:43 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/05/19 09:26:04 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/09/15 20:33:26 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/09/24 21:40:34 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2011/05/13 11:43:12 - [] RD -- C:\Program Files (x86)\Online Services
O43 - CFD: 2012/11/25 13:03:27 - [] D -- C:\Program Files (x86)\Pack Sérénité
O43 - CFD: 2015/09/24 21:12:42 - [] D -- C:\Program Files (x86)\PrivaZer
O43 - CFD: 2013/02/24 15:32:55 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2011/07/30 22:57:49 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2013/07/16 21:29:44 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2015/02/22 13:54:21 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2011/08/03 17:08:02 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2010/10/17 02:34:32 - [] D -- C:\Program Files (x86)\Windows Media Components
O43 - CFD: 2013/12/15 19:40:43 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2011/08/03 17:07:59 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2011/08/03 17:08:00 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011/06/01 21:23:17 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2011/06/01 21:23:17 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/11/15 07:11:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
O43 - CFD: 2011/02/08 01:50:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth
O43 - CFD: 2012/04/08 19:02:34 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP250 series
O43 - CFD: 2011/08/03 18:33:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP250 series Manual
O43 - CFD: 2011/08/03 18:35:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
O43 - CFD: 2012/06/21 05:49:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2012/12/25 23:15:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2010/10/17 02:33:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel PaintShop Photo Pro X3
O43 - CFD: 2010/10/17 02:35:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel VideoStudio Pro X3
O43 - CFD: 2012/11/25 13:02:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 2014/11/12 14:25:51 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
O43 - CFD: 2011/08/03 18:37:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement utilisateur de Canon MP250 series
O43 - CFD: 2015/02/21 19:34:49 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/06/05 18:42:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2011/06/01 21:23:17 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2015/09/25 17:08:13 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiveSupport =>PUP.Optional.LiveSupport
O43 - CFD: 2011/06/01 21:23:17 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/01/07 18:24:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français)
O43 - CFD: 2015/09/25 04:57:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2011/05/13 11:43:12 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
O43 - CFD: 2010/10/17 02:25:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
O43 - CFD: 2011/02/08 02:05:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
O43 - CFD: 2012/11/25 13:03:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2011/07/30 22:58:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2012/11/04 20:17:53 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2014/11/15 07:01:30 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2012/11/04 19:12:30 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2012/11/04 19:13:42 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2012/08/24 11:16:39 - [] D -- C:\ProgramData\Ask
O43 - CFD: 2012/06/20 19:54:59 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2014/11/15 07:01:30 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2012/10/09 23:05:59 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2014/03/24 17:39:32 - [] D -- C:\ProgramData\bihoelhnkcomihkpfhfdjhehkdnngbjc
O43 - CFD: 2012/06/11 14:11:02 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2011/05/13 11:40:52 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2011/08/03 18:33:15 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 2010/10/17 02:35:46 - [] D -- C:\ProgramData\Corel
O43 - CFD: 2014/03/24 17:32:44 - [] D -- C:\ProgramData\coupoonupeak =>PUP.Optional.Multiplug
O43 - CFD: 2012/11/25 12:47:37 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2011/06/01 21:18:59 - [] D -- C:\ProgramData\Darty
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2011/02/08 02:16:58 - [] D -- C:\ProgramData\Downloaded Installations
O43 - CFD: 2015/02/22 17:43:37 - [] D -- C:\ProgramData\Easybits
O43 - CFD: 2012/11/25 13:05:17 - [] D -- C:\ProgramData\f-secure
O43 - CFD: 2011/05/13 11:40:52 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2015/09/24 21:48:35 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2011/06/01 21:23:44 - [] D -- C:\ProgramData\fssg
O43 - CFD: 2011/02/08 02:26:20 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2010/10/17 02:36:04 - [] D -- C:\ProgramData\InterVideo
O43 - CFD: 2011/02/08 02:17:05 - [] D -- C:\ProgramData\Macrovision
O43 - CFD: 2015/09/24 17:45:15 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2011/05/13 11:40:52 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/02/22 14:11:44 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2012/03/09 22:16:03 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2011/05/13 11:40:52 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2013/02/18 21:38:02 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2011/06/01 21:27:02 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2011/02/08 02:09:54 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2014/03/24 17:41:02 - [] D -- C:\ProgramData\PPsdRunener
O43 - CFD: 2015/09/24 21:11:46 - [] D -- C:\ProgramData\privazer
O43 - CFD: 2011/02/08 01:49:36 - [] D -- C:\ProgramData\Ralink Driver
O43 - CFD: 2015/03/01 03:20:17 - [] D -- C:\ProgramData\Recovery
O43 - CFD: 2015/02/22 14:28:33 - [0] D -- C:\ProgramData\RoyailCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2010/10/17 02:45:12 - [] D -- C:\ProgramData\Stardock
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2010/10/17 02:47:19 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/09/26 09:26:09 - [0] D -- C:\ProgramData\Systweak =>PUP.Optional.Systweak
O43 - CFD: 2015/02/22 13:54:41 - [] D -- C:\ProgramData\Tarma Installer =>PUP.Optional.Tarma
O43 - CFD: 2015/02/21 19:53:21 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/02/21 19:30:58 - [0] D -- C:\ProgramData\TxtMAker =>PUP.Optional.Multiplug
O43 - CFD: 2010/10/17 02:35:20 - [] D -- C:\ProgramData\Ulead Systems
O43 - CFD: 2012/01/07 18:23:10 - [] D -- C:\ProgramData\VirtualizedApplications
O43 - CFD: 2015/02/21 19:34:50 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2011/02/08 02:05:23 - [] HDC -- C:\ProgramData\{05971B75-B620-4D64-9985-7971BEF763A2}
O43 - CFD: 2010/10/17 02:48:29 - [] D -- C:\ProgramData\{D13C0989-F3EC-4F44-A33D-B3F83DF90FAF}
O43 - CFD: 2010/10/17 02:29:54 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/11/12 14:25:39 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2012/11/04 19:13:42 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2015/09/15 18:48:38 - [] D -- C:\Program Files (x86)\Common Files\AV
O43 - CFD: 2010/10/17 02:34:50 - [] D -- C:\Program Files (x86)\Common Files\Corel
O43 - CFD: 2015/02/21 19:28:29 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2010/10/17 02:46:04 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2011/02/08 01:49:50 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 2014/11/15 07:11:30 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2011/02/08 01:46:08 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2010/10/17 02:33:09 - [] D -- C:\Program Files (x86)\Common Files\Protexis
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2011/06/01 21:13:10 - [0] D -- C:\Program Files (x86)\Common Files\SWF Studio
O43 - CFD: 2011/11/12 19:59:44 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2010/10/17 02:34:27 - [] D -- C:\Program Files (x86)\Common Files\Ulead Systems
O43 - CFD: 2010/10/17 02:25:39 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2011/06/01 21:13:10 - [] SHD -- C:\Users\3415058\AppData\Roaming\.#
O43 - CFD: 2014/11/15 07:02:23 - [] D -- C:\Users\3415058\AppData\Roaming\Adobe
O43 - CFD: 2012/11/04 19:19:29 - [] D -- C:\Users\3415058\AppData\Roaming\Apple Computer
O43 - CFD: 2015/02/19 18:28:34 - [] D -- C:\Users\3415058\AppData\Roaming\ASP
O43 - CFD: 2011/05/13 12:04:02 - [] D -- C:\Users\3415058\AppData\Roaming\ATI
O43 - CFD: 2012/10/09 23:05:55 - [] D -- C:\Users\3415058\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/09/25 22:05:13 - [] D -- C:\Users\3415058\AppData\Roaming\BitTorrent
O43 - CFD: 2011/08/02 11:26:34 - [] D -- C:\Users\3415058\AppData\Roaming\Corel
O43 - CFD: 2011/05/31 10:31:31 - [] D -- C:\Users\3415058\AppData\Roaming\CyberLink
O43 - CFD: 2011/06/01 21:18:59 - [] D -- C:\Users\3415058\AppData\Roaming\Darty
O43 - CFD: 2011/05/13 11:41:49 - [] D -- C:\Users\3415058\AppData\Roaming\DigitalPersona
O43 - CFD: 2012/10/22 11:35:46 - [] D -- C:\Users\3415058\AppData\Roaming\Google
O43 - CFD: 2011/05/13 11:43:18 - [] D -- C:\Users\3415058\AppData\Roaming\Hewlett-Packard
O43 - CFD: 2011/05/13 12:02:29 - [] D -- C:\Users\3415058\AppData\Roaming\hpqlog
O43 - CFD: 2011/05/13 12:02:42 - [] D -- C:\Users\3415058\AppData\Roaming\Identities
O43 - CFD: 2011/05/23 15:23:01 - [] D -- C:\Users\3415058\AppData\Roaming\Macromedia
O43 - CFD: 2011/02/08 11:28:19 - [0] D -- C:\Users\3415058\AppData\Roaming\Media Center Programs
O43 - CFD: 2012/06/23 10:07:06 - [] SD -- C:\Users\3415058\AppData\Roaming\Microsoft
O43 - CFD: 2011/06/01 22:20:29 - [] D -- C:\Users\3415058\AppData\Roaming\Mozilla
O43 - CFD: 2015/02/22 17:46:05 - [] D -- C:\Users\3415058\AppData\Roaming\SoftGrid Client
O43 - CFD: 2011/05/13 12:03:02 - [] D -- C:\Users\3415058\AppData\Roaming\Stardock
O43 - CFD: 2015/02/21 19:27:32 - [0] D -- C:\Users\3415058\AppData\Roaming\Systweak =>PUP.Optional.Systweak
O43 - CFD: 2012/01/07 12:54:44 - [0] D -- C:\Users\3415058\AppData\Roaming\TP
O43 - CFD: 2012/01/06 15:54:16 - [] D -- C:\Users\3415058\AppData\Roaming\vlc
O43 - CFD: 2011/09/17 20:52:37 - [] D -- C:\Users\3415058\AppData\Roaming\Windows Live Writer
O43 - CFD: 2015/09/26 17:07:48 - [] D -- C:\Users\3415058\AppData\Roaming\ZHP
O43 - CFD: 2014/06/15 14:09:03 - [] D -- C:\Users\3415058\AppData\Roaming\ZumoDrive
O43 - CFD: 2011/08/02 10:48:55 - [] D -- C:\Users\3415058\AppData\Roaming\_MDLogs
O43 - CFD: 2014/11/12 14:25:11 - [] D -- C:\Users\3415058\AppData\Local\Adobe
O43 - CFD: 2012/11/04 19:12:43 - [] D -- C:\Users\3415058\AppData\Local\Apple
O43 - CFD: 2012/11/04 19:26:35 - [] D -- C:\Users\3415058\AppData\Local\Apple Computer
O43 - CFD: 2011/05/13 11:41:16 - [0] SHD -- C:\Users\3415058\AppData\Local\Application Data
O43 - CFD: 2011/05/13 12:04:02 - [] D -- C:\Users\3415058\AppData\Local\ATI
O43 - CFD: 2013/09/29 12:06:17 - [] D -- C:\Users\3415058\AppData\Local\avgchrome
O43 - CFD: 2015/02/21 19:31:54 - [0] D -- C:\Users\3415058\AppData\Local\Conduit
O43 - CFD: 2015/09/26 13:38:01 - [] D -- C:\Users\3415058\AppData\Local\CrashDumps
O43 - CFD: 2011/05/31 10:31:20 - [] D -- C:\Users\3415058\AppData\Local\CyberLink
O43 - CFD: 2014/10/05 12:14:13 - [0] D -- C:\Users\3415058\AppData\Local\Diagnostics
O43 - CFD: 2011/05/13 11:41:49 - [] D -- C:\Users\3415058\AppData\Local\DigitalPersona
O43 - CFD: 2015/08/19 16:12:37 - [] SHD -- C:\Users\3415058\AppData\Local\EmieBrowserModeList
O43 - CFD: 2014/10/05 10:17:37 - [] SHD -- C:\Users\3415058\AppData\Local\EmieSiteList
O43 - CFD: 2014/10/05 10:17:37 - [] SHD -- C:\Users\3415058\AppData\Local\EmieUserList
O43 - CFD: 2014/06/15 13:59:29 - [] D -- C:\Users\3415058\AppData\Local\Google
O43 - CFD: 2011/05/31 10:33:54 - [] D -- C:\Users\3415058\AppData\Local\Hewlett-Packard
O43 - CFD: 2011/05/13 12:02:58 - [] D -- C:\Users\3415058\AppData\Local\Hewlett-Packard_Company
O43 - CFD: 2011/05/13 11:41:16 - [0] SHD -- C:\Users\3415058\AppData\Local\Historique
O43 - CFD: 2011/05/31 12:17:03 - [0] D -- C:\Users\3415058\AppData\Local\HP MediaSmart Video
O43 - CFD: 2012/06/10 12:46:49 - [] D -- C:\Users\3415058\AppData\Local\Ilivid Player =>PUP.Optional.Bandoo
O43 - CFD: 2012/06/23 10:07:06 - [] D -- C:\Users\3415058\AppData\Local\Macromedia
O43 - CFD: 2013/12/29 18:09:47 - [] D -- C:\Users\3415058\AppData\Local\Microsoft
O43 - CFD: 2012/01/06 23:14:50 - [] D -- C:\Users\3415058\AppData\Local\Microsoft Games
O43 - CFD: 2012/03/09 22:16:02 - [0] D -- C:\Users\3415058\AppData\Local\Microsoft Help
O43 - CFD: 2011/06/03 21:04:30 - [] DC -- C:\Users\3415058\AppData\Local\MigWiz
O43 - CFD: 2013/10/04 16:34:37 - [] D -- C:\Users\3415058\AppData\Local\Mozilla
O43 - CFD: 2012/01/28 15:43:11 - [0] D -- C:\Users\3415058\AppData\Local\PackageAware =>PUP.Optional.BearShare
O43 - CFD: 2014/03/24 17:32:08 - [] D -- C:\Users\3415058\AppData\Local\Packages
O43 - CFD: 2011/05/31 10:31:19 - [] D -- C:\Users\3415058\AppData\Local\PowerCinema
O43 - CFD: 2015/09/25 22:20:15 - [] D -- C:\Users\3415058\AppData\Local\PrivaZer
O43 - CFD: 2013/10/04 16:45:48 - [] D -- C:\Users\3415058\AppData\Local\Programs
O43 - CFD: 2011/05/13 12:02:21 - [] D -- C:\Users\3415058\AppData\Local\RemEngine
O43 - CFD: 2012/01/07 12:54:37 - [] D -- C:\Users\3415058\AppData\Local\SoftGrid Client
O43 - CFD: 2015/09/26 17:03:33 - [] D -- C:\Users\3415058\AppData\Local\Temp
O43 - CFD: 2011/05/13 11:41:16 - [0] SHD -- C:\Users\3415058\AppData\Local\Temporary Internet Files
O43 - CFD: 2011/05/13 11:50:18 - [0] D -- C:\Users\3415058\AppData\Local\VirtualStore
O43 - CFD: 2014/03/24 17:32:08 - [] D -- C:\Users\3415058\AppData\Local\Windows Live
O43 - CFD: 2012/03/16 12:23:41 - [] D -- C:\Users\3415058\AppData\Local\Windows Live Writer
O43 - CFD: 2013/03/24 20:14:33 - [0] D -- C:\Users\3415058\AppData\Local\{0089AC3D-A621-4511-8E0D-DB4E62573615}
O43 - CFD: 2012/04/20 21:44:07 - [0] D -- C:\Users\3415058\AppData\Local\{00B44E13-2566-4275-A6B7-A33270E00375}
O43 - CFD: 2013/03/15 19:41:37 - [0] D -- C:\Users\3415058\AppData\Local\{00DE6EB2-F60F-4D5C-8DE2-16F44F565D11}
O43 - CFD: 2013/02/21 22:43:55 - [0] D -- C:\Users\3415058\AppData\Local\{01A2CE66-E65C-43E9-A771-FF3B519D4056}
O43 - CFD: 2013/03/06 08:06:18 - [0] D -- C:\Users\3415058\AppData\Local\{01A95F59-10A8-448A-B178-F55CA7CF87CD}
O43 - CFD: 2011/09/20 14:21:50 - [0] D -- C:\Users\3415058\AppData\Local\{02E6650A-C3C5-4010-AC41-EA3609B50974}
O43 - CFD: 2013/01/04 19:09:17 - [0] D -- C:\Users\3415058\AppData\Local\{02ECD0D9-5DB9-424F-9F1C-40C498B40806}
O43 - CFD: 2011/12/02 21:53:34 - [0] D -- C:\Users\3415058\AppData\Local\{0347FAD7-5557-4CCA-8523-39CAFC68B2EC}
O43 - CFD: 2012/04/24 15:30:05 - [0] D -- C:\Users\3415058\AppData\Local\{0365044A-5A9D-449F-8B21-DF1937D8F8B5}
O43 - CFD: 2012/06/24 16:40:32 - [0] D -- C:\Users\3415058\AppData\Local\{03A3C46F-FDC1-4182-9414-895317730AA5}
O43 - CFD: 2013/01/05 20:31:46 - [0] D -- C:\Users\3415058\AppData\Local\{03B51941-D43F-4C5A-BDE1-0F0404C69622}
O43 - CFD: 2011/08/22 18:06:31 - [0] D -- C:\Users\3415058\AppData\Local\{03E7B8E1-6DC0-46B6-B143-DC027CF8CC55}
O43 - CFD: 2011/10/27 16:58:31 - [0] D -- C:\Users\3415058\AppData\Local\{04C183C8-F989-46F0-B69F-22B6496A2A62}
O43 - CFD: 2012/01/08 11:40:44 - [0] D -- C:\Users\3415058\AppData\Local\{050F30B2-C15F-40C4-9BDF-90F13D8776CE}
O43 - CFD: 2012/02/05 11:14:15 - [0] D -- C:\Users\3415058\AppData\Local\{051794B7-D867-4D1B-BD66-7CEAE573F579}
O43 - CFD: 2012/05/08 13:05:35 - [0] D -- C:\Users\3415058\AppData\Local\{06004CB2-6D71-4D9F-A00E-C89A6EFBEFEC}
O43 - CFD: 2012/07/13 10:51:22 - [0] D -- C:\Users\3415058\AppData\Local\{06363103-6D49-4451-A029-EADB88B93BBD}
O43 - CFD: 2014/01/11 20:10:08 - [0] D -- C:\Users\3415058\AppData\Local\{0702A6E3-558C-41AB-B950-ECDBB5987A32}
O43 - CFD: 2012/02/05 11:14:24 - [0] D -- C:\Users\3415058\AppData\Local\{073B4E1C-0381-4024-B8D6-D6441E929F3F}
O43 - CFD: 2013/04/13 18:49:21 - [0] D -- C:\Users\3415058\AppData\Local\{07937873-8F0F-45D2-9EA9-90252C661A29}
O43 - CFD: 2014/10/05 10:07:38 - [0] D -- C:\Users\3415058\AppData\Local\{084146EF-DCB0-49BF-9E9B-0B5D34989885}
O43 - CFD: 2012/07/18 17:04:08 - [0] D -- C:\Users\3415058\AppData\Local\{086F9F9E-4EF2-44BB-BDCB-7A23E923C075}
O43 - CFD: 2012/04/16 08:32:18 - [0] D -- C:\Users\3415058\AppData\Local\{090BADBF-24B6-4C2D-B133-B5FDE6130CAE}
O43 - CFD: 2012/07/04 16:35:52 - [0] D -- C:\Users\3415058\AppData\Local\{099758F7-233A-4CDA-A099-F3058A5BFFB8}
O43 - CFD: 2011/12/28 16:43:46 - [0] D -- C:\Users\3415058\AppData\Local\{09A5CB3A-ABAA-4999-B1A5-32BA1CFEC1C7}
O43 - CFD: 2012/01/28 12:37:58 - [0] D -- C:\Users\3415058\AppData\Local\{09C36B03-46DC-4527-A3AB-180548B32571}
O43 - CFD: 2014/03/24 17:32:06 - [0] D -- C:\Users\3415058\AppData\Local\{09C734BD-6DC5-4A25-AA5D-DC5FF35EB84A}
O43 - CFD: 2012/02/27 21:06:55 - [0] D -- C:\Users\3415058\AppData\Local\{0ACCBE4A-1C26-4835-89AB-398E9F65E4E4}
O43 - CFD: 2011/12/18 21:43:16 - [0] D -- C:\Users\3415058\AppData\Local\{0AEDCDB2-33D5-4B30-AFD8-6E186C6963FA}
O43 - CFD: 2012/05/18 12:51:56 - [0] D -- C:\Users\3415058\AppData\Local\{0B6A3DE7-F7EB-47D4-BF22-008972A859E5}
O43 - CFD: 2011/12/04 09:58:24 - [0] D -- C:\Users\3415058\AppData\Local\{0C554101-8F4F-4BB7-BBC5-EA17455F6815}
O43 - CFD: 2011/08/22 16:19:16 - [0] D -- C:\Users\3415058\AppData\Local\{0C8F9B01-B2BD-4A83-9803-7D0CA967D229}
O43 - CFD: 2012/01/06 20:26:28 - [0] D -- C:\Users\3415058\AppData\Local\{0D034351-E8B8-4F44-9FA8-154F231E3341}
O43 - CFD: 2012/01/24 19:01:25 - [0] D -- C:\Users\3415058\AppData\Local\{0D2164B7-D5F1-47ED-98A7-5C09B40673D8}
O43 - CFD: 2012/06/16 16:17:08 - [0] D -- C:\Users\3415058\AppData\Local\{0D76DF40-F69A-4B9E-BB09-F05D6BCE3891}
O43 - CFD: 2012/05/04 18:07:00 - [0] D -- C:\Users\3415058\AppData\Local\{0D7B7425-1F9F-4991-B668-F83CD6AE9DD9}
O43 - CFD: 2012/07/25 11:34:58 - [0] D -- C:\Users\3415058\AppData\Local\{0D8C1AD8-849C-4624-9A0F-9DC95C284B1B}
O43 - CFD: 2012/06/05 19:35:58 - [0] D -- C:\Users\3415058\AppData\Local\{0F4E09FE-DA63-4FB0-BBA5-A145056406A0}
O43 - CFD: 2012/01/03 20:41:29 - [0] D -- C:\Users\3415058\AppData\Local\{0F57D5E8-47FB-4BBB-96F1-1D0E2A3F44A3}
O43 - CFD: 2012/04/27 16:51:31 - [0] D -- C:\Users\3415058\AppData\Local\{104B81DB-7625-47E4-98EA-8AE5B40F81FF}
O43 - CFD: 2012/09/21 20:39:36 - [0] D -- C:\Users\3415058\AppData\Local\{109E1F67-368E-4AD0-817E-7B49245458DA}
O43 - CFD: 2012/02/13 12:05:58 - [0] D -- C:\Users\3415058\AppData\Local\{119652D3-B653-4BCC-9C27-73911A450DFE}
O43 - CFD: 2012/07/16 16:09:57 - [0] D -- C:\Users\3415058\AppData\Local\{119C3865-BF5C-4237-BE6D-8E505BB83959}
O43 - CFD: 2012/10/01 21:39:29 - [0] D -- C:\Users\3415058\AppData\Local\{11B0856A-E252-433F-A3AF-4483B0DE4161}
O43 - CFD: 2011/11/20 21:30:18 - [0] D -- C:\Users\3415058\AppData\Local\{12103C36-6EFD-4846-904A-9B3EE1224F84}
O43 - CFD: 2013/04/28 20:08:41 - [0] D -- C:\Users\3415058\AppData\Local\{12FBD7F8-729E-4482-A819-3E0AF7EB4889}
O43 - CFD: 2012/01/31 21:40:15 - [0] D -- C:\Users\3415058\AppData\Local\{130A24C6-79D9-43F7-A009-BAC4E3B3DF7A}
O43 - CFD: 2012/06/03 12:23:01 - [0] D -- C:\Users\3415058\AppData\Local\{1355E76B-AF95-4700-BD70-4D52D71AE6CB}
O43 - CFD: 2012/08/01 20:16:53 - [0] D -- C:\Users\3415058\AppData\Local\{136E277B-8D27-46FC-8799-3A0A75ADA97A}
O43 - CFD: 2012/06/03 12:22:49 - [0] D -- C:\Users\3415058\AppData\Local\{13832B78-F2D6-4CCF-A1B5-C9596B96B795}
O43 - CFD: 2012/02/07 12:44:34 - [0] D -- C:\Users\3415058\AppData\Local\{138466F6-0515-4FC8-9212-AD32E57E83D7}
O43 - CFD: 2012/02/01 17:06:50 - [0] D -- C:\Users\3415058\AppData\Local\{13D94D80-40F8-4C2F-BAED-A6A750BBEC84}
O43 - CFD: 2012/01/30 18:43:43 - [0] D -- C:\Users\3415058\AppData\Local\{143C83BF-0760-400C-9A1C-958B2235E01C}
O43 - CFD: 2012/08/06 15:15:06 - [0] D -- C:\Users\3415058\AppData\Local\{1451EA75-FE2B-4283-92A3-EDEE120C468E}
O43 - CFD: 2011/10/16 16:07:31 - [0] D -- C:\Users\3415058\AppData\Local\{1493B833-19AB-40F9-831B-DE2B7BCD5133}
O43 - CFD: 2012/08/11 23:45:48 - [0] D -- C:\Users\3415058\AppData\Local\{14EDBAFE-08C8-4B46-8A3F-2C75B437B0A8}
O43 - CFD: 2013/08/04 09:39:49 - [0] D -- C:\Users\3415058\AppData\Local\{15DF9201-44F6-46CE-8EEA-B5302BF6FFA2}
O43 - CFD: 2011/08/17 16:40:49 - [0] D -- C:\Users\3415058\AppData\Local\{16334F61-29A4-4BCE-A609-85170B74991C}
O43 - CFD: 2011/10/02 16:02:34 - [0] D -- C:\Users\3415058\AppData\Local\{169B148D-7557-4BE9-8A2C-C00D71A0791C}
O43 - CFD: 2013/01/27 20:45:17 - [0] D -- C:\Users\3415058\AppData\Local\{1705689B-BCEC-4BEC-A745-40749E7FB6CD}
O43 - CFD: 2011/09/09 16:22:50 - [0] D -- C:\Users\3415058\AppData\Local\{1779AFA0-29C1-4FD2-9FEE-3E2F121A32CD}
O43 - CFD: 2012/05/11 16:38:18 - [0] D -- C:\Users\3415058\AppData\Local\{1873E00C-368A-42BA-923C-CB62223259A0}
O43 - CFD: 2012/03/17 12:32:24 - [0] D -- C:\Users\3415058\AppData\Local\{1ABE3C55-2C2D-4060-8AB5-BCA06CFA685A}
O43 - CFD: 2011/11/13 12:10:15 - [0] D -- C:\Users\3415058\AppData\Local\{1AD5E105-51F7-4244-82ED-55C754A6F381}
O43 - CFD: 2011/09/07 13:42:12 - [0] D -- C:\Users\3415058\AppData\Local\{1ADB489A-8BB3-4160-A86E-DF1C38DE8BCB}
O43 - CFD: 2012/07/31 10:46:11 - [0] D -- C:\Users\3415058\AppData\Local\{1B478047-3ADC-429A-82FA-22583EE4FD66}
O43 - CFD: 2012/02/20 14:48:28 - [0] D -- C:\Users\3415058\AppData\Local\{1B575AF2-8010-4DDF-83E3-3B0047ED7434}
O43 - CFD: 2012/10/21 19:25:58 - [0] D -- C:\Users\3415058\AppData\Local\{1BEC140D-2DC3-48CD-BCFD-02D8E9B9E362}
O43 - CFD: 2012/07/05 17:50:21 - [0] D -- C:\Users\3415058\AppData\Local\{1CE1937B-1DB3-4E8A-8E42-D844FF640DCF}
O43 - CFD: 2011/11/06 14:48:50 - [0] D -- C:\Users\3415058\AppData\Local\{1D3EDB48-58B2-4E04-A80E-4AC0E971CA37}
O43 - CFD: 2011/11/03 13:26:18 - [0] D -- C:\Users\3415058\AppData\Local\{1DB3E88C-31C7-405B-9C93-98DDD60698E2}
O43 - CFD: 2011/11/04 12:29:19 - [0] D -- C:\Users\3415058\AppData\Local\{1DB503AA-B770-4C21-8FE1-E2427FDBEA1F}
O43 - CFD: 2013/02/25 16:34:38 - [0] D -- C:\Users\3415058\AppData\Local\{1DF4A61A-4BBD-49BA-8B07-045784E369CE}
O43 - CFD: 2012/08/13 22:50:56 - [0] D -- C:\Users\3415058\AppData\Local\{1E6348C7-AD50-4FB7-910A-97882468D10C}
O43 - CFD: 2012/12/16 19:28:36 - [0] D -- C:\Users\3415058\AppData\Local\{1E78321F-A0C8-4529-BD69-E172AE989D40}
O43 - CFD: 2012/05/05 16:08:53 - [0] D -- C:\Users\3415058\AppData\Local\{1F154797-817F-4CA8-8F96-37BB3D34A893}
O43 - CFD: 2013/03/04 15:13:01 - [0] D -- C:\Users\3415058\AppData\Local\{1FA5EBAE-F178-43EC-B130-31347A0491E6}
O43 - CFD: 2013/02/24 12:53:55 - [0] D -- C:\Users\3415058\AppData\Local\{20489F41-31E2-4A9B-87C1-FF3DAE8EB5F6}
O43 - CFD: 2012/01/15 21:00:01 - [0] D -- C:\Users\3415058\AppData\Local\{20DFE809-ED57-403A-B997-8765B3812975}
O43 - CFD: 2013/04/04 09:27:20 - [0] D -- C:\Users\3415058\AppData\Local\{219B53D6-CEFE-4817-9A60-9C96CC1CA338}
O43 - CFD: 2012/02/08 21:48:18 - [0] D -- C:\Users\3415058\AppData\Local\{222A5307-AF2F-42CE-8D9E-F16B6E6CF353}
O43 - CFD: 2014/01/13 11:17:31 - [0] D -- C:\Users\3415058\AppData\Local\{2297C737-8333-4C67-899B-5D01D5E1C929}
O43 - CFD: 2012/06/21 09:27:35 - [0] D -- C:\Users\3415058\AppData\Local\{22D2DF6B-5335-48A8-96AA-023E60D59177}
O43 - CFD: 2011/11/02 21:11:04 - [0] D -- C:\Users\3415058\AppData\Local\{22E11094-7E5E-4FE3-A1D9-39D39B196FC4}
O43 - CFD: 2012/01/28 12:38:21 - [0] D -- C:\Users\3415058\AppData\Local\{22FAB484-8A06-4546-95D4-E24CEB3DB84A}
O43 - CFD: 2011/08/29 17:02:14 - [0] D -- C:\Users\3415058\AppData\Local\{236A9FDB-A8C2-45BA-B86A-B35F870B26DF}
O43 - CFD: 2012/05/03 17:47:46 - [0] D -- C:\Users\3415058\AppData\Local\{23B14708-8FD9-4A80-B330-64C0DBD2BF22}
O43 - CFD: 2011/09/12 14:16:18 - [0] D -- C:\Users\3415058\AppData\Local\{23F95964-FA79-4626-B0D7-C85AFDF29B7C}
O43 - CFD: 2012/08/09 20:45:28 - [0] D -- C:\Users\3415058\AppData\Local\{24A6CEC5-604C-4FF8-992C-719AB750BFCD}
O43 - CFD: 2012/11/15 21:42:52 - [0] D -- C:\Users\3415058\AppData\Local\{24C37960-C729-4D8C-84DB-488B170BFD06}
O43 - CFD: 2011/08/30 20:47:29 - [0] D -- C:\Users\3415058\AppData\Local\{26FAFFC2-8142-45D0-ACD6-48979DD1050B}
O43 - CFD: 2012/07/17 11:33:20 - [0] D -- C:\Users\3415058\AppData\Local\{276A9E3F-6340-47C0-BD5A-E1B3CF6938F2}
O43 - CFD: 2012/07/15 10:22:50 - [0] D -- C:\Users\3415058\AppData\Local\{27BCC385-92E9-420F-8ABE-5ED33B50C668}
O43 - CFD: 2012/04/26 15:26:52 - [0] D -- C:\Users\3415058\AppData\Local\{2834A2A5-AF29-438C-81B2-A2D96F22BB4A}
O43 - CFD: 2013/01/10 19:10:00 - [0] D -- C:\Users\3415058\AppData\Local\{2841E2F6-67FD-4157-BDCD-1CC9567AADAD}
O43 - CFD: 2011/09/16 14:34:17 - [0] D -- C:\Users\3415058\AppData\Local\{2894E5D8-C476-40BB-9C35-FF40182F5B31}
O43 - CFD: 2013/02/04 14:32:30 - [0] D -- C:\Users\3415058\AppData\Local\{28A4ED5F-250C-4CC5-8F9D-779519306D79}
O43 - CFD: 2012/06/22 10:24:40 - [0] D -- C:\Users\3415058\AppData\Local\{28BF84C9-E2A3-4D5A-9EB4-92E5043EB2EB}
O43 - CFD: 2013/08/30 11:33:28 - [0] D -- C:\Users\3415058\AppData\Local\{2A4D1D21-3B4D-46B2-9039-972BF051030E}
O43 - CFD: 2012/06/20 20:48:52 - [0] D -- C:\Users\3415058\AppData\Local\{2A5E1480-F1C4-4B57-8F02-6C9BFDF0D1A1}
O43 - CFD: 2012/04/15 18:54:28 - [0] D -- C:\Users\3415058\AppData\Local\{2A6DD14A-D1A2-4800-B208-71CD46C19961}
O43 - CFD: 2012/08/05 17:40:19 - [0] D -- C:\Users\3415058\AppData\Local\{2AEE9202-D5B9-4644-B5B6-CF9B6A591A6B}
O43 - CFD: 2012/02/05 11:13:56 - [0] D -- C:\Users\3415058\AppData\Local\{2BBFD72B-22FF-40AD-BB76-D5AF6F5B8786}
O43 - CFD: 2015/02/21 19:22:10 - [0] D -- C:\Users\3415058\AppData\Local\{2C71A78F-8E42-4A33-8738-E584710B836B}
O43 - CFD: 2012/01/25 18:39:33 - [0] D -- C:\Users\3415058\AppData\Local\{2CFD9093-5BEB-4B19-ACFC-50156819B67E}
O43 - CFD: 2012/04/15 18:54:10 - [0] D -- C:\Users\3415058\AppData\Local\{2D1FE642-66A6-497A-86B0-598EBB191B4A}
O43 - CFD: 2013/09/29 11:59:33 - [0] D -- C:\Users\3415058\AppData\Local\{2D56B6B2-6A7A-4E1F-9FE3-D2BCCC85DB7A}
O43 - CFD: 2012/04/20 11:08:09 - [0] D -- C:\Users\3415058\AppData\Local\{2DA01EB7-00C9-4A7A-BB94-9610335576CC}
O43 - CFD: 2013/12/11 10:35:32 - [0] D -- C:\Users\3415058\AppData\Local\{2DC5136A-D75E-43B5-B087-F006B6D03F29}
O43 - CFD: 2011/09/11 14:15:10 - [0] D -- C:\Users\3415058\AppData\Local\{2E02493A-F5DC-44D6-800C-2C9FF7F60458}
O43 - CFD: 2012/06/01 22:48:08 - [0] D -- C:\Users\3415058\AppData\Local\{2E1CF8FB-FF0D-476F-B914-A0704581C0B2}
O43 - CFD: 2012/04/20 11:10:08 - [0] D -- C:\Users\3415058\AppData\Local\{2EAD1B12-03AE-488B-B9D0-280183052D48}
O43 - CFD: 2011/09/17 15:15:03 - [0] D -- C:\Users\3415058\AppData\Local\{2EC730B0-D876-48AF-88C3-179C012CCC55}
O43 - CFD: 2012/06/22 22:25:08 - [0] D -- C:\Users\3415058\AppData\Local\{317B85C5-51C2-41B2-94E5-8583C6F14B45}
O43 - CFD: 2012/06/11 14:12:35 - [0] D -- C:\Users\3415058\AppData\Local\{31DFF53C-2709-4EA5-8751-754C1DEAAF93}
O43 - CFD: 2011/10/14 14:55:20 - [0] D -- C:\Users\3415058\AppData\Local\{3250263D-F370-4B77-B64D-EB4CEA35DCE3}
O43 - CFD: 2011/09/13 11:50:21 - [0] D -- C:\Users\3415058\AppData\Local\{329273F4-0F80-4E2D-A31D-6F44D2CADFBD}
O43 - CFD: 2015/02/21 20:18:50 - [0] D -- C:\Users\3415058\AppData\Local\{33D0012A-3C0A-42D5-9992-C3FE72C4BE48}
O43 - CFD: 2014/03/28 17:47:16 - [0] D -- C:\Users\3415058\AppData\Local\{3484F49B-E4F3-4988-B465-44766FC2D4A7}
O43 - CFD: 2011/08/25 11:17:57 - [0] D -- C:\Users\3415058\AppData\Local\{34BF86AF-E624-4773-A55A-52EE982A123B}
O43 - CFD: 2012/05/07 16:03:54 - [0] D -- C:\Users\3415058\AppData\Local\{35552FCF-2AED-48C1-98C0-45D9EB46D88E}
O43 - CFD: 2012/07/29 09:47:27 - [0] D -- C:\Users\3415058\AppData\Local\{3619D030-A2E4-44C6-BE83-3898A8CDD373}
O43 - CFD: 2015/02/20 19:22:07 - [0] D -- C:\Users\3415058\AppData\Local\{3658AA9D-24BD-495E-910E-24DEC1527086}
O43 - CFD: 2013/08/19 15:09:54 - [0] D -- C:\Users\3415058\AppData\Local\{365D8EC4-6020-4D9E-A1B9-6761D59EBE1C}
O43 - CFD: 2012/10/07 12:27:24 - [0] D -- C:\Users\3415058\AppData\Local\{36963E96-3F00-4532-8FDE-0A8751F0D00A}
O43 - CFD: 2012/10/22 11:33:35 - [0] D -- C:\Users\3415058\AppData\Local\{37B37D7C-0213-4941-BA46-70F37B405A99}
O43 - CFD: 2012/04/23 17:37:58 - [0] D -- C:\Users\3415058\AppData\Local\{37B46737-7694-43A6-A688-70735FD3028C}
O43 - CFD: 2013/03/21 14:13:05 - [0] D -- C:\Users\3415058\AppData\Local\{38B4376D-BE0A-435A-957F-C56C5DA202F3}
O43 - CFD: 2012/08/05 17:40:29 - [0] D -- C:\Users\3415058\AppData\Local\{396B1CEA-9DC0-47DA-932B-05E414583918}
O43 - CFD: 2011/12/25 20:13:04 - [0] D -- C:\Users\3415058\AppData\Local\{39A64FA1-755D-41E6-B2E8-0B3C9E093D7D}
O43 - CFD: 2013/02/12 21:55:08 - [0] D -- C:\Users\3415058\AppData\Local\{39E4D2B7-D1BB-483D-9FB2-AF7A8E90627E}
O43 - CFD: 2012/08/07 11:13:12 - [0] D -- C:\Users\3415058\AppData\Local\{39EE5930-4BAA-4B84-B739-2473C72A6EFF}
O43 - CFD: 2012/04/04 16:13:06 - [0] D -- C:\Users\3415058\AppData\Local\{3A509DA6-57D0-4B20-8B58-1F27455F1F88}
O43 - CFD: 2012/06/21 22:13:38 - [0] D -- C:\Users\3415058\AppData\Local\{3A6872F9-0FCD-436D-98E1-92F2F71896C4}
O43 - CFD: 2012/01/22 13:03:26 - [0] D -- C:\Users\3415058\AppData\Local\{3B276EDD-4F05-4246-9E44-731842DEC223}
O43 - CFD: 2012/02/08 21:48:28 - [0] D -- C:\Users\3415058\AppData\Local\{3B2CBA12-FB0D-412F-A268-F7041A2F81AE}
O43 - CFD: 2011/11/27 21:02:28 - [0] D -- C:\Users\3415058\AppData\Local\{3B64B025-C098-4D6D-B9DD-8D75851DDB69}
O43 - CFD: 2012/02/09 21:50:18 - [0] D -- C:\Users\3415058\AppData\Local\{3B64CC5E-71FF-462D-845F-BD528D5F2F38}
O43 - CFD: 2012/06/27 14:19:15 - [0] D -- C:\Users\3415058\AppData\Local\{3B8E8D6A-3A58-4B55-BD99-856517B05A57}
O43 - CFD: 2012/07/07 16:00:41 - [0] D -- C:\Users\3415058\AppData\Local\{3BBF1E77-78C3-4519-9562-CCF5B82A0BED}
O43 - CFD: 2012/03/17 12:32:35 - [0] D -- C:\Users\3415058\AppData\Local\{3C46FC38-83A1-432E-92BF-4AB6E232E013}
O43 - CFD: 2011/09/10 11:40:33 - [0] D -- C:\Users\3415058\AppData\Local\{3C540FC5-5884-42AD-8C39-ED0F5DE773E3}
O43 - CFD: 2012/09/23 19:27:30 - [0] D -- C:\Users\3415058\AppData\Local\{3DE19070-BFEA-46CA-B10A-D32A1658039C}
O43 - CFD: 2011/10/02 16:02:24 - [0] D -- C:\Users\3415058\AppData\Local\{3DE576BD-E448-4A7B-B297-91B1C5E6EFB8}
O43 - CFD: 2013/09/15 12:30:12 - [0] D -- C:\Users\3415058\AppData\Local\{3EFEBFBB-B896-4ABE-A51D-0B1D9ACA1239}
O43 - CFD: 2012/06/28 09:00:02 - [0] D -- C:\Users\3415058\AppData\Local\{3F24F9A4-B782-4D7A-AD7D-1AEA4BB2B50F}
O43 - CFD: 2011/12/25 20:13:35 - [0] D -- C:\Users\3415058\AppData\Local\{3F266CA0-0642-4C17-BC3E-B72B1482BC04}
O43 - CFD: 2011/10/30 11:46:53 - [0] D -- C:\Users\3415058\AppData\Local\{3F2D2D14-9D8A-46B3-B693-3701B805BCF4}
O43 - CFD: 2011/10/14 14:54:59 - [0] D -- C:\Users\3415058\AppData\Local\{400F9026-1A4A-482B-9547-B6C3DFC01679}
O43 - CFD: 2013/09/08 18:55:04 - [0] D -- C:\Users\3415058\AppData\Local\{41CFDF85-B255-4934-B4BB-F1007B8CC0F4}
O43 - CFD: 2014/09/29 14:25:59 - [0] D -- C:\Users\3415058\AppData\Local\{41F3CC85-D7CF-46E6-B582-0B2029A95FE0}
O43 - CFD: 2011/10/30 23:48:15 - [0] D -- C:\Users\3415058\AppData\Local\{4235F6FE-E431-47B0-AEFB-A410AEDBD944}
O43 - CFD: 2012/10/03 20:43:59 - [0] D -- C:\Users\3415058\AppData\Local\{424C38E2-3ABA-4A02-99E4-F51FD3C5C97E}
O43 - CFD: 2012/05/15 19:08:26 - [0] D -- C:\Users\3415058\AppData\Local\{4267599C-B2CF-43F6-9FC8-E0F7857EF0E7}
O43 - CFD: 2013/01/15 03:12:33 - [0] D -- C:\Users\3415058\AppData\Local\{427D421E-A2E8-4A58-995A-BED401EE48C1}
O43 - CFD: 2012/02/16 16:10:04 - [0] D -- C:\Users\3415058\AppData\Local\{429394C1-5AE2-4F69-B36E-833EC97F42A8}
O43 - CFD: 2013/09/03 11:16:20 - [0] D -- C:\Users\3415058\AppData\Local\{42BC62FB-2FFE-4BAD-B5D5-5AA71F95324A}
O43 - CFD: 2012/09/12 20:48:06 - [0] D -- C:\Users\3415058\AppData\Local\{4339F328-66E6-4AD8-AEB5-E27C0C3C10D8}
O43 - CFD: 2011/11/01 14:26:34 - [0] D -- C:\Users\3415058\AppData\Local\{4393B723-EC0A-40CD-A67F-D2D36E18D7DA}
O43 - CFD: 2013/01/20 20:27:26 - [0] D -- C:\Users\3415058\AppData\Local\{43A1F1FF-E3BB-42FC-AA1C-34D2C523E3B2}
O43 - CFD: 2012/05/03 17:47:36 - [0] D -- C:\Users\3415058\AppData\Local\{43FCE600-6C4D-4916-9D4E-4A32AC47C909}
O43 - CFD: 2011/11/29 20:54:24 - [0] D -- C:\Users\3415058\AppData\Local\{446FD85E-A5CE-402A-B224-642457E68D9C}
O43 - CFD: 2011/10/27 16:58:05 - [0] D -- C:\Users\3415058\AppData\Local\{447C53AC-14BB-4BFA-9072-5AE98999F51B}
O43 - CFD: 2012/08/08 23:13:49 - [0] D -- C:\Users\3415058\AppData\Local\{4510EFF6-A760-491D-92B9-AFF007924390}
O43 - CFD: 2012/12/22 16:51:46 - [0] D -- C:\Users\3415058\AppData\Local\{452F6DA4-0A93-4654-AE95-6B3671108D37}
O43 - CFD: 2012/04/16 08:32:31 - [0] D -- C:\Users\3415058\AppData\Local\{454BA51B-71E8-4CBE-B4E1-1147DD59F71E}
O43 - CFD: 2011/09/22 16:24:34 - [0] D -- C:\Users\3415058\AppData\Local\{45A4EFD2-4614-46EC-BA72-A7998390DDED}
O43 - CFD: 2012/06/28 23:02:16 - [0] D -- C:\Users\3415058\AppData\Local\{460889D6-D568-4C32-8FD2-EA135F017CE0}
O43 - CFD: 2012/02/01 17:06:31 - [0] D -- C:\Users\3415058\AppData\Local\{46FF1921-1D99-4444-ACDE-C2A2DA70DB9C}
O43 - CFD: 2012/01/06 15:24:37 - [0] D -- C:\Users\3415058\AppData\Local\{47597AA8-A465-465D-8B8B-46F40A0930E9}
O43 - CFD: 2011/11/13 12:10:28 - [0] D -- C:\Users\3415058\AppData\Local\{47FCC259-DF50-4765-8F55-8A9F8FAF3A3F}
O43 - CFD: 2012/12/09 14:06:24 - [0] D -- C:\Users\3415058\AppData\Local\{4803DC14-4D66-4C00-806F-44BDAC981B22}
O43 - CFD: 2012/06/25 09:01:42 - [0] D -- C:\Users\3415058\AppData\Local\{4897228A-B91D-487B-9714-59C1A299E094}
O43 - CFD: 2012/03/18 12:52:16 - [0] D -- C:\Users\3415058\AppData\Local\{4911445E-1906-44B8-9034-51E44CBF7635}
O43 - CFD: 2012/07/20 11:31:59 - [0] D -- C:\Users\3415058\AppData\Local\{495110B6-599F-4D33-9062-4D7C80E15F33}
O43 - CFD: 2012/04/19 14:50:11 - [0] D -- C:\Users\3415058\AppData\Local\{4979E3AC-CEF5-4A50-98EC-3ED6067F04A4}
O43 - CFD: 2011/09/16 14:33:54 - [0] D -- C:\Users\3415058\AppData\Local\{4998AAF3-F3CB-4600-8776-AB017C60EDE7}
O43 - CFD: 2015/02/20 19:09:47 - [0] D -- C:\Users\3415058\AppData\Local\{4A66F44E-CC37-456E-95CB-D16885775CB4}
O43 - CFD: 2012/06/26 21:04:37 - [0] D -- C:\Users\3415058\AppData\Local\{4AD900CE-7137-458D-B4A7-D0477321F4A4}
O43 - CFD: 2012/06/19 20:12:42 - [0] D -- C:\Users\3415058\AppData\Local\{4AE73FE3-0258-4A4A-AB90-A45AC9FB2DFD}
O43 - CFD: 2013/08/20 20:27:55 - [0] D -- C:\Users\3415058\AppData\Local\{4B6BA833-9FDE-4F32-AFDA-70169EECA3E2}
O43 - CFD: 2012/10/14 12:19:56 - [0] D -- C:\Users\3415058\AppData\Local\{4B78A2A7-9DB9-41EF-B31F-E4AC5751E24C}
O43 - CFD: 2014/01/06 12:01:10 - [0] D -- C:\Users\3415058\AppData\Local\{4BCCCB64-3AF9-40AD-BA75-DF0297896AEE}
O43 - CFD: 2012/07/21 10:08:31 - [0] D -- C:\Users\3415058\AppData\Local\{4C212450-1B2C-4519-A612-30CF9D8C4BEC}
O43 - CFD: 2012/06/24 01:52:54 - [0] D -- C:\Users\3415058\AppData\Local\{4D09673B-3155-4E39-B8AB-178B303733F7}
O43 - CFD: 2012/05/17 19:27:53 - [0] D -- C:\Users\3415058\AppData\Local\{4D6DF1F3-B942-4629-A429-42B5657549C3}
O43 - CFD: 2011/10/09 11:49:13 - [0] D -- C:\Users\3415058\AppData\Local\{4DC19DDF-9866-49E3-A5C7-49A3A04F1CF0}
O43 - CFD: 2011/12/31 20:14:38 - [0] D -- C:\Users\3415058\AppData\Local\{4DC1D622-0A50-400D-8232-9123688B11D3}
O43 - CFD: 2013/08/07 14:04:44 - [0] D -- C:\Users\3415058\AppData\Local\{4E66D659-8FFC-4C4C-9961-8BD3D20F4841}
O43 - CFD: 2011/09/25 10:54:02 - [0] D -- C:\Users\3415058\AppData\Local\{4E8F6239-3E04-4D54-8279-B305C137345D}
O43 - CFD: 2012/02/20 14:48:38 - [0] D -- C:\Users\3415058\AppData\Local\{4F2DC372-724E-4B50-AD25-D366BF78859F}
O43 - CFD: 2012/11/26 13:25:11 - [0] D -- C:\Users\3415058\AppData\Local\{4FE2B92A-727A-4CEA-87CC-98DC3C0F694A}
O43 - CFD: 2011/09/21 13:50:25 - [0] D -- C:\Users\3415058\AppData\Local\{503B3052-8B5A-40BE-846E-27A64BD73509}
O43 - CFD: 2012/02/18 20:07:25 - [0] D -- C:\Users\3415058\AppData\Local\{510717CE-2BD8-4048-B441-16C7D49D8617}
O43 - CFD: 2011/08/09 10:14:01 - [0] D -- C:\Users\3415058\AppData\Local\{5165C8EE-D557-41FD-A621-AA05F893EDF9}
O43 - CFD: 2012/01/06 15:24:36 - [0] D -- C:\Users\3415058\AppData\Local\{521A61E2-F8A8-49AD-BCCD-A2B008FFD0E3}
O43 - CFD: 2014/04/15 14:42:42 - [0] D -- C:\Users\3415058\AppData\Local\{530913C9-6E66-4335-B526-8D6BEB210E81}
O43 - CFD: 2013/03/11 12:27:44 - [0] D -- C:\Users\3415058\AppData\Local\{53C4AFF6-E007-4069-B6C2-BFC0751E3D53}
O43 - CFD: 2012/04/13 21:08:47 - [0] D -- C:\Users\3415058\AppData\Local\{53DD34FF-220B-4F90-823A-21535EBD8F39}
O43 - CFD: 2012/08/20 14:34:05 - [0] D -- C:\Users\3415058\AppData\Local\{5476200B-302C-42D4-BF23-F53B7A6B39D1}
O43 - CFD: 2012/07/10 15:37:37 - [0] D -- C:\Users\3415058\AppData\Local\{54A448C3-2709-4A43-B50F-3824E5EAB9B9}
O43 - CFD: 2012/04/25 15:58:47 - [0] D -- C:\Users\3415058\AppData\Local\{54ABE879-249B-4AC7-B256-3975E360E6DB}
O43 - CFD: 2012/04/06 21:16:47 - [0] D -- C:\Users\3415058\AppData\Local\{54E071D5-C294-40FD-80F7-E2DA030606A9}
O43 - CFD: 2012/02/13 12:05:48 - [0] D -- C:\Users\3415058\AppData\Local\{553A0E8F-71A5-4D08-9F52-8748DC6A7230}
O43 - CFD: 2012/05/02 11:02:21 - [0] D -- C:\Users\3415058\AppData\Local\{5569525B-1A87-4459-8E08-3C21E97C1E82}
O43 - CFD: 2012/01/03 20:41:46 - [0] D -- C:\Users\3415058\AppData\Local\{562799F2-6924-4AA7-B4F8-0D9A36A18F83}
O43 - CFD: 2012/06/20 20:48:42 - [0] D -- C:\Users\3415058\AppData\Local\{564F9F5C-CBEA-405D-B702-9E045CD9C520}
O43 - CFD: 2011/09/15 11:33:18 - [0] D -- C:\Users\3415058\AppData\Local\{56674702-B3E1-4BB2-8280-8AFD718B0EC3}
O43 - CFD: 2011/08/25 11:18:35 - [0] D -- C:\Users\3415058\AppData\Local\{5674FDE1-1A7F-4FD4-A644-A95B84AF755F}
O43 - CFD: 2011/09/23 16:01:41 - [0] D -- C:\Users\3415058\AppData\Local\{57A3CD67-6EA6-4713-A32A-AE0A606DF9FA}
O43 - CFD: 2011/10/31 11:49:03 - [0] D -- C:\Users\3415058\AppData\Local\{57AD6EA4-E20B-4D50-9DE5-3E2182346527}
O43 - CFD: 2011/10/31 11:48:53 - [0] D -- C:\Users\3415058\AppData\Local\{581DFC6F-546B-4C1F-9C7B-68110B7B740B}
O43 - CFD: 2012/02/17 12:53:57 - [0] D -- C:\Users\3415058\AppData\Local\{59126E05-D0EF-40EE-BECC-16E382879A83}
O43 - CFD: 2012/04/28 15:10:41 - [0] D -- C:\Users\3415058\AppData\Local\{5916C317-DC83-4C6B-B0B0-DE1FF173B3AF}
O43 - CFD: 2012/11/30 17:35:58 - [0] D -- C:\Users\3415058\AppData\Local\{594D4915-4ED1-4742-A2CE-AD5A477C5CA0}
O43 - CFD: 2012/06/22 22:24:55 - [0] D -- C:\Users\3415058\AppData\Local\{595C5A60-3047-49B3-8B76-5A2F2BB1E0F0}
O43 - CFD: 2012/04/19 17:08:14 - [0] D -- C:\Users\3415058\AppData\Local\{59944FCD-612D-4EB4-BA29-29074638DBA2}
O43 - CFD: 2013/05/30 20:35:19 - [0] D -- C:\Users\3415058\AppData\Local\{59D3726B-2EB0-42D0-881D-DAAB5BA3160F}
O43 - CFD: 2012/06/21 22:13:49 - [0] D -- C:\Users\3415058\AppData\Local\{5A763B5B-098D-4BBA-8400-0A22A25A04E7}
O43 - CFD: 2012/09/27 20:42:05 - [0] D -- C:\Users\3415058\AppData\Local\{5A7F689F-6EC6-4E2E-9313-4244496C575C}
O43 - CFD: 2012/07/11 12:07:44 - [0] D -- C:\Users\3415058\AppData\Local\{5AC5FF44-DED1-46E7-BD2F-C502EDB06706}
O43 - CFD: 2012/02/02 15:00:44 - [0] D -- C:\Users\3415058\AppData\Local\{5C7A76C4-743D-4DF7-A86A-EEF3245B1174}
O43 - CFD: 2013/01/21 16:39:50 - [0] D -- C:\Users\3415058\AppData\Local\{5CC46B33-5F4E-4397-8406-C280C062176C}
O43 - CFD: 2011/10/31 23:49:52 - [0] D -- C:\Users\3415058\AppData\Local\{5D00A972-9BC4-4DCE-A52E-109D089A2D37}
O43 - CFD: 2012/04/22 08:54:03 - [0] D -- C:\Users\3415058\AppData\Local\{5D6C0923-44B5-4C61-9237-B005AB93EF8E}
O43 - CFD: 2012/07/02 19:34:44 - [0] D -- C:\Users\3415058\AppData\Local\{5E01C121-76BD-4795-BABF-C8A1D1174DF6}
O43 - CFD: 2012/06/25 09:01:32 - [0] D -- C:\Users\3415058\AppData\Local\{5E3403D4-A046-4202-94C5-6428830A2E7E}
O43 - CFD: 2011/10/17 13:31:40 - [0] D -- C:\Users\3415058\AppData\Local\{5E49BAFE-5FF9-40A3-99B4-0EA116CAC547}
O43 - CFD: 2012/04/30 11:51:23 - [0] D -- C:\Users\3415058\AppData\Local\{5F29B53E-F985-4E16-90BA-88E97ECA98D3}
O43 - CFD: 2012/07/18 17:04:23 - [0] D -- C:\Users\3415058\AppData\Local\{5FAD80A9-7FC5-4123-B249-5151219C732C}
O43 - CFD: 2012/04/14 19:54:28 - [0] D -- C:\Users\3415058\AppData\Local\{60406831-A94C-4017-8312-E1CBC2AC7901}
O43 - CFD: 2012/01/01 11:34:06 - [0] D -- C:\Users\3415058\AppData\Local\{605B3F14-F215-469E-80CD-7FDD5832F9DD}
O43 - CFD: 2012/10/13 16:28:45 - [0] D -- C:\Users\3415058\AppData\Local\{616E192D-F16B-4485-B4DD-2E8387A0AE53}
O43 - CFD: 2012/08/01 20:17:03 - [0] D -- C:\Users\3415058\AppData\Local\{61DE9BEE-E923-4A99-AD7A-EB7E20FC6E5D}
O43 - CFD: 2012/02/19 14:24:58 - [0] D -- C:\Users\3415058\AppData\Local\{628F20D9-D0AE-468E-ABC9-95D753F2B5B7}
O43 - CFD: 2015/09/17 12:14:17 - [0] D -- C:\Users\3415058\AppData\Local\{62B6CEE6-BE1B-44BB-ACB7-9E7C2C2C3ABE}
O43 - CFD: 2012/10/02 20:57:00 - [0] D -- C:\Users\3415058\AppData\Local\{62C17420-816C-42F1-84B8-B17FCEB0173E}
O43 - CFD: 2011/08/23 19:11:43 - [0] D -- C:\Users\3415058\AppData\Local\{63071AF0-7244-4459-840B-6F7A67F0E69B}
O43 - CFD: 2012/06/09 12:34:42 - [0] D -- C:\Users\3415058\AppData\Local\{6385CE22-AE5C-4AD5-954E-B25AD0995B02}
O43 - CFD: 2012/08/07 11:13:23 - [0] D -- C:\Users\3415058\AppData\Local\{6387B3E2-9844-40B9-A978-F56D31040EFF}
O43 - CFD: 2015/02/19 18:13:33 - [0] D -- C:\Users\3415058\AppData\Local\{63EF5691-9DA4-4BBD-A2C0-D7359CCE7FFC}
O43 - CFD: 2012/11/29 12:32:39 - [0] D -- C:\Users\3415058\AppData\Local\{64650289-1A1F-4850-83F0-C6435F74D7E1}
O43 - CFD: 2012/08/06 15:14:56 - [0] D -- C:\Users\3415058\AppData\Local\{64B11245-F447-48F0-A4C0-D624C572EE78}
O43 - CFD: 2012/09/17 20:52:05 - [0] D -- C:\Users\3415058\AppData\Local\{64B61E3A-F55B-4125-AE9D-1AAF6B1E4011}
O43 - CFD: 2011/08/16 20:39:38 - [0] D -- C:\Users\3415058\AppData\Local\{654CE073-9CCF-4A5A-906D-A34E3D7C462B}
O43 - CFD: 2012/11/10 17:05:09 - [0] D -- C:\Users\3415058\AppData\Local\{65F0E66B-B6B4-475C-A5B3-B47E3E6E573A}
O43 - CFD: 2011/11/28 18:12:26 - [0] D -- C:\Users\3415058\AppData\Local\{6641400E-8564-48EA-9ACC-951A8C2A7971}
O43 - CFD: 2012/06/27 14:19:05 - [0] D -- C:\Users\3415058\AppData\Local\{6676F5ED-266A-4BF9-893D-34B69D887487}
O43 - CFD: 2012/09/01 15:36:25 - [0] D -- C:\Users\3415058\AppData\Local\{6694DD66-30BB-4794-9E99-156084EF38C3}
O43 - CFD: 2011/12/13 21:44:43 - [0] D -- C:\Users\3415058\AppData\Local\{66F9012E-EE26-4038-AFC4-69F60F93AD71}
O43 - CFD: 2012/06/01 22:48:27 - [0] D -- C:\Users\3415058\AppData\Local\{67BD4CCF-119F-4DE8-902B-406EF9882B8D}
O43 - CFD: 2013/08/28 17:16:29 - [0] D -- C:\Users\3415058\AppData\Local\{68EC737B-698C-46E4-B9BD-648C2F135F05}
O43 - CFD: 2011/10/17 13:31:50 - [0] D -- C:\Users\3415058\AppData\Local\{68F2F1F8-CF7C-44AF-899E-37E404709B8B}
O43 - CFD: 2011/10/22 11:29:37 - [0] D -- C:\Users\3415058\AppData\Local\{693960A6-5936-4756-B344-B0C9C950D6E5}
O43 - CFD: 2012/04/29 10:00:22 - [0] D -- C:\Users\3415058\AppData\Local\{69BAD986-4E42-446F-9018-AE17A0A9E2D6}
O43 - CFD: 2011/12/18 21:47:46 - [0] D -- C:\Users\3415058\AppData\Local\{6A344B73-B0AE-4A8F-976B-7FC6DF73B3BD}
O43 - CFD: 2012/01/22 13:03:41 - [0] D -- C:\Users\3415058\AppData\Local\{6AC1529E-5D16-4717-8580-7B1ADFBF4395}
O43 - CFD: 2011/10/29 16:09:52 - [0] D -- C:\Users\3415058\AppData\Local\{6D520F27-69F3-4170-8AEA-0D1347FB314E}
O43 - CFD: 2012/07/22 10:48:46 - [0] D -- C:\Users\3415058\AppData\Local\{6F893B21-4BA6-44DF-B2A7-883360F5882F}
O43 - CFD: 2011/09/21 13:50:35 - [0] D -- C:\Users\3415058\AppData\Local\{719240F0-849D-4E87-8575-B4907239C9FC}
O43 - CFD: 2014/01/16 09:43:21 - [0] D -- C:\Users\3415058\AppData\Local\{71A4BBE4-0589-4ACF-849E-80032A6D634E}
O43 - CFD: 2012/05/12 22:22:25 - [0] D -- C:\Users\3415058\AppData\Local\{71B1666B-7DD9-4130-8E9F-E1B2F91D08C4}
O43 - CFD: 2012/06/12 15:08:57 - [0] D -- C:\Users\3415058\AppData\Local\{7253C7C7-DB02-4A57-AD8D-EE23580E9854}
O43 - CFD: 2012/02/14 22:02:15 - [0] D -- C:\Users\3415058\AppData\Local\{72E027C5-D5BB-445F-9360-D4CE64D1900F}
O43 - CFD: 2012/12/06 18:12:26 - [0] D -- C:\Users\3415058\AppData\Local\{7365617B-2AB5-4FC8-A2E8-AC8C33A0920D}
O43 - CFD: 2011/09/25 10:53:53 - [0] D -- C:\Users\3415058\AppData\Local\{738300B8-A8C7-4FED-9F7F-BC871F38E179}
O43 - CFD: 2012/03/15 13:17:11 - [0] D -- C:\Users\3415058\AppData\Local\{7396B16C-F5CC-4415-9E46-5184948B7A36}
O43 - CFD: 2011/11/08 17:23:35 - [0] D -- C:\Users\3415058\AppData\Local\{74816B4C-AA1E-47DA-BB1B-BA19EE8907BC}
O43 - CFD: 2013/12/29 16:53:27 - [0] D -- C:\Users\3415058\AppData\Local\{74992143-1FEA-49CB-82CB-8E4A44024F5F}
O43 - CFD: 2011/12/02 21:53:24 - [0] D -- C:\Users\3415058\AppData\Local\{7543EE6C-4B86-4B3A-A6B6-EEB244A21239}
O43 - CFD: 2012/07/24 11:09:41 - [0] D -- C:\Users\3415058\AppData\Local\{75AFB4AB-D02D-43B9-BE57-70D40F32D1F6}
O43 - CFD: 2013/01/07 21:32:27 - [0] D -- C:\Users\3415058\AppData\Local\{76526DEA-07F6-4DB4-97CC-E6DA097CECC2}
O43 - CFD: 2012/03/18 12:52:36 - [0] D -- C:\Users\3415058\AppData\Local\{775411E4-53CB-4CB5-AF34-21E0B37A1D13}
O43 - CFD: 2012/10/29 13:50:35 - [0] D -- C:\Users\3415058\AppData\Local\{776404EC-ADBC-4F43-88DA-D70AA3E945EC}
O43 - CFD: 2012/12/10 14:14:13 - [0] D -- C:\Users\3415058\AppData\Local\{7784BA5C-6DEE-424D-BECE-EE620DDFFF3D}
O43 - CFD: 2012/06/06 13:14:15 - [0] D -- C:\Users\3415058\AppData\Local\{77D902D0-695A-417A-AA12-085B60BB583D}
O43 - CFD: 2014/07/04 22:05:01 - [0] D -- C:\Users\3415058\AppData\Local\{7813ECCC-F678-4BAC-AFE4-41615752685E}
O43 - CFD: 2012/07/04 16:35:41 - [0] D -- C:\Users\3415058\AppData\Local\{78A9C1B0-9889-44AD-943D-2547BC848C82}
O43 - CFD: 2011/12/11 20:31:23 - [0] D -- C:\Users\3415058\AppData\Local\{78E72456-F0AF-4E0F-AFB1-E8887424690D}
O43 - CFD: 2014/06/15 12:58:44 - [0] D -- C:\Users\3415058\AppData\Local\{79DAA5B1-A79C-4F7B-9609-7CDF99381BAA}
O43 - CFD: 2012/05/12 22:22:12 - [0] D -- C:\Users\3415058\AppData\Local\{7A476ADB-155F-4AB8-ABA0-F45D8A778A36}
O43 - CFD: 2011/09/23 16:01:51 - [0] D -- C:\Users\3415058\AppData\Local\{7A684167-1D5E-4171-805F-331D4254F72D}
O43 - CFD: 2012/05/13 19:49:48 - [0] D -- C:\Users\3415058\AppData\Local\{7A738293-D1D1-456E-86AC-9D79CA8DCD3D}
O43 - CFD: 2012/09/12 15:55:15 - [0] D -- C:\Users\3415058\AppData\Local\{7A7A0452-C99E-44E1-A4F7-C1CC2357D8EE}
O43 - CFD: 2012/03/19 18:22:15 - [0] D -- C:\Users\3415058\AppData\Local\{7B25417F-5442-42E8-BE0F-2CB30CF61D9A}
O43 - CFD: 2011/09/24 22:30:03 - [0] D -- C:\Users\3415058\AppData\Local\{7B2D4015-0E2D-4C4D-A901-AEAD6D682019}
O43 - CFD: 2012/07/03 17:25:15 - [0] D -- C:\Users\3415058\AppData\Local\{7C517881-8F71-491B-9A0C-9498DE4A8427}
O43 - CFD: 2012/02/11 16:39:44 - [0] D -- C:\Users\3415058\AppData\Local\{7CB951D9-FF5B-4D4C-977D-D47C64B99F5C}
O43 - CFD: 2013/06/05 18:39:24 - [0] D -- C:\Users\3415058\AppData\Local\{7D4F93F9-F0FB-4A9F-B441-FA73798E696D}
O43 - CFD: 2012/04/16 16:37:44 - [0] D -- C:\Users\3415058\AppData\Local\{7DC7B369-5823-4EC8-BD1A-918BD1F16C80}
O43 - CFD: 2011/10/29 16:09:41 - [0] D -- C:\Users\3415058\AppData\Local\{7DCE0067-7F31-419E-9A21-ED87652EE348}
O43 - CFD: 2013/11/10 11:16:52 - [0] D -- C:\Users\3415058\AppData\Local\{7EB0A5E4-E671-49FB-A968-948CD88ABC55}
O43 - CFD: 2011/12/27 19:23:50 - [0] D -- C:\Users\3415058\AppData\Local\{7EEFA36D-E458-4CCE-8F98-8FDB8EAF27D0}
O43 - CFD: 2012/05/01 19:51:26 - [0] D -- C:\Users\3415058\AppData\Local\{7F3D9DD7-BCE7-466C-B7AF-6ED8A0D822B4}
O43 - CFD: 2011/10/14 14:54:49 - [0] D -- C:\Users\3415058\AppData\Local\{7F45236A-1A3F-478B-A202-FD29F32DD3F8}
O43 - CFD: 2012/06/28 23:02:05 - [0] D -- C:\Users\3415058\AppData\Local\{7F89FEF5-C5F4-4A61-8DB6-816F40754C18}
O43 - CFD: 2014/01/07 18:16:14 - [0] D -- C:\Users\3415058\AppData\Local\{811D904B-BB1F-4492-AD6D-D11EDC286BAC}
O43 - CFD: 2012/06/25 21:02:22 - [0] D -- C:\Users\3415058\AppData\Local\{815F5B7B-6F7D-4856-878F-B884FE293D20}
O43 - CFD: 2012/08/13 22:51:06 - [0] D -- C:\Users\3415058\AppData\Local\{824CD211-E44D-4C7E-B382-021E34EE8AD9}
O43 - CFD: 2012/04/21 12:18:37 - [0] D -- C:\Users\3415058\AppData\Local\{82696DF7-44E4-4220-B38D-58D321B8168D}
O43 - CFD: 2013/02/10 18:14:54 - [0] D -- C:\Users\3415058\AppData\Local\{83456C47-5D17-496B-9089-50C0A755C870}
O43 - CFD: 2011/11/27 21:02:16 - [0] D -- C:\Users\3415058\AppData\Local\{83BE3589-D2CF-4AE7-9445-466DB7FF1B1B}
O43 - CFD: 2012/07/12 11:22:39 - [0] D -- C:\Users\3415058\AppData\Local\{8451CC74-6225-40FE-84B0-7D9D3E5EAE0E}
O43 - CFD: 2012/01/01 11:34:16 - [0] D -- C:\Users\3415058\AppData\Local\{845BC613-47D3-490F-9205-FEF597688F36}
O43 - CFD: 2013/04/02 11:24:43 - [0] D -- C:\Users\3415058\AppData\Local\{84E3E463-3A95-41F7-A995-A72D872D4F0D}
O43 - CFD: 2011/12/31 20:19:30 - [0] D -- C:\Users\3415058\AppData\Local\{85C0AD8F-DAB6-4C35-AA7B-FCB57D3C3A7C}
O43 - CFD: 2011/09/19 13:26:08 - [0] D -- C:\Users\3415058\AppData\Local\{8604CFD5-6C39-47DE-AC8C-B071A1FA3D4E}
O43 - CFD: 2013/02/03 20:25:24 - [0] D -- C:\Users\3415058\AppData\Local\{8637A897-01CE-4533-A783-8BF6CD5B800B}
O43 - CFD: 2011/08/23 19:11:54 - [0] D -- C:\Users\3415058\AppData\Local\{8642B2C3-F095-46D9-9A56-85B2CAD9A64A}
O43 - CFD: 2011/12/18 21:47:36 - [0] D -- C:\Users\3415058\AppData\Local\{8667C05B-8CC4-4E3E-9EF6-DF4AB2DB8766}
O43 - CFD: 2012/07/11 12:07:56 - [0] D -- C:\Users\3415058\AppData\Local\{86E1F5FA-8871-44CC-BA0C-D549A09FC7DA}
O43 - CFD: 2013/03/31 15:54:18 - [0] D -- C:\Users\3415058\AppData\Local\{871703B9-ABC2-4B7A-B971-91DDAE166D9A}
O43 - CFD: 2011/11/11 19:53:28 - [0] D -- C:\Users\3415058\AppData\Local\{87B697B6-B801-4651-8091-D0114C817110}
O43 - CFD: 2013/10/24 12:01:14 - [0] D -- C:\Users\3415058\AppData\Local\{87FDF817-84D1-4773-986E-6FE12C6C3F96}
O43 - CFD: 2012/12/23 13:32:12 - [0] D -- C:\Users\3415058\AppData\Local\{88903727-0EDE-4805-BAB6-DF3722D0763F}
O43 - CFD: 2012/04/15 18:52:32 - [0] D -- C:\Users\3415058\AppData\Local\{88B0DD31-FC9D-4E2B-95D8-B0061220035B}
O43 - CFD: 2013/02/09 22:03:25 - [0] D -- C:\Users\3415058\AppData\Local\{88B10E41-BC79-430F-B03E-0ADE705E7B7D}
O43 - CFD: 2012/08/20 14:30:28 - [0] D -- C:\Users\3415058\AppData\Local\{88B3FFDB-9A97-481B-8736-3FF8114C3ACC}
O43 - CFD: 2012/05/19 18:19:29 - [0] D -- C:\Users\3415058\AppData\Local\{88B86176-5111-49B2-91B8-59CD53610715}
O43 - CFD: 2012/06/23 10:48:30 - [0] D -- C:\Users\3415058\AppData\Local\{8981E120-841C-4578-85CB-FDAD5C560709}
O43 - CFD: 2012/07/31 10:46:22 - [0] D -- C:\Users\3415058\AppData\Local\{89A26483-4F63-48E1-9084-1B4D7EC33E5F}
O43 - CFD: 2012/03/16 11:58:50 - [0] D -- C:\Users\3415058\AppData\Local\{8A8EDA05-A83F-4B0C-9D5F-5AAC4856478D}
O43 - CFD: 2012/12/28 12:17:28 - [0] D -- C:\Users\3415058\AppData\Local\{8AC1C21A-293A-4C09-9E7C-116E37A2954A}
O43 - CFD: 2013/08/27 16:52:40 - [0] D -- C:\Users\3415058\AppData\Local\{8BA24E92-D08F-486B-8A76-DC72D454DC6B}
O43 - CFD: 2011/10/11 11:27:09 - [0] D -- C:\Users\3415058\AppData\Local\{8C516694-8926-4CE8-8D0C-FB0F9708FA91}
O43 - CFD: 2012/05/18 12:51:45 - [0] D -- C:\Users\3415058\AppData\Local\{8C73C66C-2CB8-420E-9073-A59AB37A3154}
O43 - CFD: 2012/06/20 08:47:57 - [0] D -- C:\Users\3415058\AppData\Local\{8CA52A92-1252-4C32-BEF8-D7A384F9EF2F}
O43 - CFD: 2012/05/05 16:08:43 - [0] D -- C:\Users\3415058\AppData\Local\{8CCB9F40-3490-4EDD-ABDC-9BC475063C4F}
O43 - CFD: 2012/05/09 11:17:07 - [0] D -- C:\Users\3415058\AppData\Local\{8CFA1B19-2C48-4167-9C3E-701C66BEC637}
O43 - CFD: 2011/09/19 13:26:31 - [0] D -- C:\Users\3415058\AppData\Local\{8D3869FF-5991-4DF4-8C51-FFAC9D71B7F5}
O43 - CFD: 2012/02/05 11:14:05 - [0] D -- C:\Users\3415058\AppData\Local\{8E0966C1-E5CF-4CC6-8815-BCB0D2B509A2}
O43 - CFD: 2011/09/11 14:15:20 - [0] D -- C:\Users\3415058\AppData\Local\{8EDA78A8-5D97-4353-BD89-536EFEC6B772}
O43 - CFD: 2011/09/10 11:40:44 - [0] D -- C:\Users\3415058\AppData\Local\{8F3912A9-04CA-45F6-9278-C522FDF483E8}
O43 - CFD: 2011/09/12 14:16:28 - [0] D -- C:\Users\3415058\AppData\Local\{8F4B7051-1F2A-4CAE-A336-57867A8A36D2}
O43 - CFD: 2012/04/19 14:55:35 - [0] D -- C:\Users\3415058\AppData\Local\{8F4D3DF7-9D1E-4310-92A5-1B11002E4AF1}
O43 - CFD: 2013/08/18 13:13:57 - [0] D -- C:\Users\3415058\AppData\Local\{8F7A1DA6-0440-4BCD-B2E5-7A3387C8F730}
O43 - CFD: 2013/05/07 12:42:40 - [0] D -- C:\Users\3415058\AppData\Local\{8FB5366E-4A3A-48CA-8E4A-1C638F5FD482}
O43 - CFD: 2015/09/17 12:15:06 - [0] D -- C:\Users\3415058\AppData\Local\{9053C7D6-0B61-435F-ABB0-23B6195584DC}
O43 - CFD: 2013/06/26 04:09:03 - [0] D -- C:\Users\3415058\AppData\Local\{90609B23-4978-4793-B414-045607920F4F}
O43 - CFD: 2014/02/09 21:48:59 - [0] D -- C:\Users\3415058\AppData\Local\{9092A2B2-832D-4910-9A77-5A986506A880}
O43 - CFD: 2011/08/30 20:47:39 - [0] D -- C:\Users\3415058\AppData\Local\{9097FB1E-7449-4B3B-A89F-36F73D072F85}
O43 - CFD: 2011/12/28 16:43:24 - [0] D -- C:\Users\3415058\AppData\Local\{9113CF52-AC73-4432-894D-2690FEE18179}
O43 - CFD: 2012/10/30 20:42:53 - [0] D -- C:\Users\3415058\AppData\Local\{911DF203-6C7D-4A2D-8171-626995E8E10E}
O43 - CFD: 2012/06/11 14:12:24 - [0] D -- C:\Users\3415058\AppData\Local\{9146027D-3D3F-4A1A-A56E-53A9ACD1904E}
O43 - CFD: 2012/03/31 21:16:54 - [0] D -- C:\Users\3415058\AppData\Local\{91619CDB-1F74-4E69-A3E7-B9B300FB98A6}
O43 - CFD: 2012/06/23 10:48:40 - [0] D -- C:\Users\3415058\AppData\Local\{91ACFDDD-D188-4ED7-AC1B-49C06E7B901A}
O43 - CFD: 2012/05/04 18:07:11 - [0] D -- C:\Users\3415058\AppData\Local\{91C0CD4D-F3AB-4611-B128-71A1B3CB5A0D}
O43 - CFD: 2012/03/20 12:37:32 - [0] D -- C:\Users\3415058\AppData\Local\{9227C67A-0C69-401E-8C94-ABCFC91EC6AA}
O43 - CFD: 2011/08/29 17:02:29 - [0] D -- C:\Users\3415058\AppData\Local\{9273F95C-58C9-46B1-B814-4D9B08DD16F4}
O43 - CFD: 2012/02/26 18:35:43 - [0] D -- C:\Users\3415058\AppData\Local\{92E90374-8FD7-4CF3-82DE-CB1067F31E08}
O43 - CFD: 2012/11/04 13:49:48 - [0] D -- C:\Users\3415058\AppData\Local\{93B84E12-CD7D-4098-BB96-E89B8EA8B608}
O43 - CFD: 2012/06/09 12:34:53 - [0] D -- C:\Users\3415058\AppData\Local\{93EFD627-5F8B-4798-8279-BA8FE4C7C29C}
O43 - CFD: 2012/05/02 11:02:10 - [0] D -- C:\Users\3415058\AppData\Local\{940750DA-4C04-4C15-A18A-5AA7AE3C6150}
O43 - CFD: 2012/07/24 11:10:04 - [0] D -- C:\Users\3415058\AppData\Local\{9408C537-8779-4801-B6E0-76ED86D6A0CD}
O43 - CFD: 2012/07/20 11:32:10 - [0] D -- C:\Users\3415058\AppData\Local\{9470E070-9DA1-4E7F-B279-9B12F9F976DF}
O43 - CFD: 2012/04/01 10:34:17 - [0] D -- C:\Users\3415058\AppData\Local\{951924C0-3A82-4FB4-8AF1-1830A846408D}
O43 - CFD: 2011/12/12 15:02:33 - [0] D -- C:\Users\3415058\AppData\Local\{95AB2643-A3C1-4304-AC6B-DA53315E0F5E}
O43 - CFD: 2012/04/14 19:54:43 - [0] D -- C:\Users\3415058\AppData\Local\{96A449A0-9DD8-4ED2-9521-6A27F5D686DD}
O43 - CFD: 2012/04/24 15:29:54 - [0] D -- C:\Users\3415058\AppData\Local\{96FDF19D-B131-486C-B48E-5D4DB7E2D8D0}
O43 - CFD: 2013/04/14 18:08:34 - [0] D -- C:\Users\3415058\AppData\Local\{979BB775-7665-432C-B57E-2F03EAAA0EF7}
O43 - CFD: 2011/12/04 09:58:13 - [0] D -- C:\Users\3415058\AppData\Local\{97AE9C86-2699-42B5-80A0-50504CD6B04C}
O43 - CFD: 2011/09/24 22:29:53 - [0] D -- C:\Users\3415058\AppData\Local\{97EC1FD7-70B7-4BB7-A04B-B2138F60C099}
O43 - CFD: 2012/10/23 15:03:54 - [0] D -- C:\Users\3415058\AppData\Local\{97F24B60-3A1F-404E-9B60-0384D18D13A4}
O43 - CFD: 2012/09/05 17:56:09 - [0] D -- C:\Users\3415058\AppData\Local\{987B14F8-B01D-4FDB-800C-8EF5FD0FDD7D}
O43 - CFD: 2013/02/18 12:03:33 - [0] D -- C:\Users\3415058\AppData\Local\{98BCED28-A527-4653-A24B-BAC9BED47825}
O43 - CFD: 2012/09/03 13:58:13 - [0] D -- C:\Users\3415058\AppData\Local\{991C9797-8192-42C6-B433-38DFB8C07B90}
O43 - CFD: 2011/11/08 17:23:45 - [0] D -- C:\Users\3415058\AppData\Local\{9967A619-CA90-4641-81FB-84E3D3076AA4}
O43 - CFD: 2011/10/09 11:49:03 - [0] D -- C:\Users\3415058\AppData\Local\{9969B780-5613-4CFC-B5AB-55BBBFE81087}
O43 - CFD: 2012/04/20 11:10:08 - [0] D -- C:\Users\3415058\AppData\Local\{998D0AEC-DF7D-46AA-A70D-64734DFB1F56}
O43 - CFD: 2012/06/07 17:36:33 - [0] D -- C:\Users\3415058\AppData\Local\{998FC54D-7D9A-4CD7-A1CB-544F3C4DD14F}
O43 - CFD: 2012/04/30 11:51:34 - [0] D -- C:\Users\3415058\AppData\Local\{99D4F00B-9DE9-40EE-8B77-E64B78828D6F}
O43 - CFD: 2011/12/11 20:31:13 - [0] D -- C:\Users\3415058\AppData\Local\{9A29BF85-B218-4B28-85FF-4B7E636D364A}
O43 - CFD: 2012/01/29 12:21:48 - [0] D -- C:\Users\3415058\AppData\Local\{9A2D86AD-98A2-4E86-8CE7-9284E67CB1F5}
O43 - CFD: 2012/03/19 18:22:05 - [0] D -- C:\Users\3415058\AppData\Local\{9A43DEF5-34CE-432E-8AA5-1B32DF53F6FA}
O43 - CFD: 2011/11/03 13:26:31 - [0] D -- C:\Users\3415058\AppData\Local\{9A8A6392-7A3F-478A-88BD-E09BB6CB0AF4}
O43 - CFD: 2013/08/29 15:26:26 - [0] D -- C:\Users\3415058\AppData\Local\{9AABA3DA-4C30-4E42-A6DF-6F7DCA072FF2}
O43 - CFD: 2011/11/06 15:05:50 - [0] D -- C:\Users\3415058\AppData\Local\{9AB43EBD-1623-4126-8A74-4200AD789BB0}
O43 - CFD: 2013/06/25 13:54:30 - [0] D -- C:\Users\3415058\AppData\Local\{9B962A20-C44D-498A-9EDF-AC6737BDA54E}
O43 - CFD: 2012/01/06 15:12:06 - [0] D -- C:\Users\3415058\AppData\Local\{9BAAE81D-6604-4FB8-ABC3-0FB51A302621}
O43 - CFD: 2011/10/20 20:45:49 - [0] D -- C:\Users\3415058\AppData\Local\{9C652F91-7F98-4CB1-A3DA-D98D08D0B0E2}
O43 - CFD: 2011/10/30 11:47:04 - [0] D -- C:\Users\3415058\AppData\Local\{9D98A62B-05F8-42CC-91F7-AFBD5FD1CA76}
O43 - CFD: 2011/12/03 21:57:42 - [0] D -- C:\Users\3415058\AppData\Local\{9DCAACAC-67C9-4126-8EAD-429B4C5E1F28}
O43 - CFD: 2012/07/19 10:05:18 - [0] D -- C:\Users\3415058\AppData\Local\{9E2F3D5D-9550-498F-A2C4-5F9E03895F08}
O43 - CFD: 2012/08/26 12:38:56 - [0] D -- C:\Users\3415058\AppData\Local\{9F07F68B-432C-4277-A463-E4668C08E311}
O43 - CFD: 2012/10/26 19:14:03 - [0] D -- C:\Users\3415058\AppData\Local\{9F73E21E-2761-404D-B56A-478C6EF83655}
O43 - CFD: 2011/11/12 19:15:08 - [0] D -- C:\Users\3415058\AppData\Local\{9FCF48B7-99FA-4712-A4F5-86552C27B876}
O43 - CFD: 2012/06/06 13:14:26 - [0] D -- C:\Users\3415058\AppData\Local\{A07F1605-6F96-498B-ABDD-AD73C327A81D}
O43 - CFD: 2012/08/11 23:45:37 - [0] D -- C:\Users\3415058\AppData\Local\{A0EEF9A2-3DED-4739-B122-70EB62A81B76}
O43 - CFD: 2012/07/05 17:50:31 - [0] D -- C:\Users\3415058\AppData\Local\{A11BDFBB-FB6D-45D1-9C3A-528A73D1D88F}
O43 - CFD: 2012/01/27 16:21:09 - [0] D -- C:\Users\3415058\AppData\Local\{A1229A22-4EDE-44DF-8D4D-85BD4F151D0B}
O43 - CFD: 2012/12/08 22:18:24 - [0] D -- C:\Users\3415058\AppData\Local\{A13E64D0-5E9C-41A3-82DC-C5BE91638A97}
O43 - CFD: 2011/11/06 15:05:40 - [0] D -- C:\Users\3415058\AppData\Local\{A149F182-F15E-460A-AECB-D7FC12CA3BF8}
O43 - CFD: 2013/09/01 20:08:10 - [0] D -- C:\Users\3415058\AppData\Local\{A1B0BB36-E813-42BC-8300-A6F933368052}
O43 - CFD: 2012/11/19 11:28:03 - [0] D -- C:\Users\3415058\AppData\Local\{A1B9B823-4BA3-46A4-A634-2E613D962D36}
O43 - CFD: 2011/11/01 14:26:45 - [0] D -- C:\Users\3415058\AppData\Local\{A1FB0D87-A182-46B4-B4A5-E3FB8FCE3694}
O43 - CFD: 2012/03/23 20:25:42 - [0] D -- C:\Users\3415058\AppData\Local\{A280FCA5-C5E7-41AC-9823-40AFCCCA96E5}
O43 - CFD: 2013/09/10 15:56:37 - [0] D -- C:\Users\3415058\AppData\Local\{A2A0C372-A5DE-45A2-9B4F-0BB41C140181}
O43 - CFD: 2013/02/16 11:17:36 - [0] D -- C:\Users\3415058\AppData\Local\{A33B7B23-EE5C-4D98-BE26-AABE30E30854}
O43 - CFD: 2012/01/25 18:39:45 - [0] D -- C:\Users\3415058\AppData\Local\{A34936D8-805E-46D0-B797-8114AC1478C4}
O43 - CFD: 2012/04/26 15:27:02 - [0] D -- C:\Users\3415058\AppData\Local\{A3A56EB0-2141-44A2-B4B4-6C199544B7E3}
O43 - CFD: 2013/02/19 18:30:36 - [0] D -- C:\Users\3415058\AppData\Local\{A3EDDAC0-7EA1-4E66-B20C-739E2485FA89}
O43 - CFD: 2011/09/20 14:21:40 - [0] D -- C:\Users\3415058\AppData\Local\{A3FC325D-E9FC-43DB-AE78-BA7FBD1A2E1B}
O43 - CFD: 2012/02/14 22:02:05 - [0] D -- C:\Users\3415058\AppData\Local\{A4169544-F59D-4815-AACD-B7359BD55120}
O43 - CFD: 2012/04/20 11:08:21 - [0] D -- C:\Users\3415058\AppData\Local\{A4E0B523-234E-430B-9364-D64BEE718055}
O43 - CFD: 2012/04/15 18:52:41 - [0] D -- C:\Users\3415058\AppData\Local\{A50C7795-36B1-4C81-9264-ADF2F79ECD6F}
O43 - CFD: 2012/11/14 16:51:26 - [0] D -- C:\Users\3415058\AppData\Local\{A525BF6C-72F9-40FD-8437-D9717D67B9BF}
O43 - CFD: 2011/09/18 19:40:57 - [0] D -- C:\Users\3415058\AppData\Local\{A530997C-7B8C-4881-9E7B-ECF700019485}
O43 - CFD: 2012/01/27 16:20:35 - [0] D -- C:\Users\3415058\AppData\Local\{A547D36F-0D12-4CDA-9D4A-BD6EF0C735AD}
O43 - CFD: 2013/08/02 12:56:44 - [0] D -- C:\Users\3415058\AppData\Local\{A5DC5935-01BB-4507-AB2D-92AF2C23DB16}
O43 - CFD: 2012/04/25 15:58:58 - [0] D -- C:\Users\3415058\AppData\Local\{A5F73282-31CC-444B-8FFB-7CE314457629}
O43 - CFD: 2012/02/07 12:44:46 - [0] D -- C:\Users\3415058\AppData\Local\{A670F6EF-B172-4266-9C25-183F4F457B1F}
O43 - CFD: 2013/07/03 20:00:54 - [0] D -- C:\Users\3415058\AppData\Local\{A697B3C7-DC44-4B0E-9B05-F134D8129043}
O43 - CFD: 2013/01/13 11:13:26 - [0] D -- C:\Users\3415058\AppData\Local\{A6BC1EB6-845E-4046-ADD7-97AAABEF8CC0}
O43 - CFD: 2011/10/30 23:48:05 - [0] D -- C:\Users\3415058\AppData\Local\{A6DB0054-49BA-453D-B518-FEA23A84E21C}
O43 - CFD: 2012/06/22 10:24:31 - [0] D -- C:\Users\3415058\AppData\Local\{A6DBC2DA-6B0A-4272-BE22-9F5C9CECD88F}
O43 - CFD: 2011/12/03 21:57:32 - [0] D -- C:\Users\3415058\AppData\Local\{A9231A9D-8722-4770-A5F5-BB525FDEA536}
O43 - CFD: 2013/01/22 21:32:56 - [0] D -- C:\Users\3415058\AppData\Local\{A9668FB3-3A6C-4A8D-9682-B51B228ED732}
O43 - CFD: 2013/03/05 20:05:54 - [0] D -- C:\Users\3415058\AppData\Local\{A97CE66F-DF6A-4B95-820B-13FE1A3B8DA4}
O43 - CFD: 2012/07/13 10:51:09 - [0] D -- C:\Users\3415058\AppData\Local\{A982ED70-5073-4F1E-AABD-801F21061CCF}
O43 - CFD: 2012/12/25 13:16:39 - [0] D -- C:\Users\3415058\AppData\Local\{A9CCBBFE-E1F6-4989-A372-E0325A7F09A7}
O43 - CFD: 2012/12/27 16:23:59 - [0] D -- C:\Users\3415058\AppData\Local\{A9F57C31-4303-48F8-BBDD-713758458DD1}
O43 - CFD: 2011/11/04 12:29:08 - [0] D -- C:\Users\3415058\AppData\Local\{AA35FB43-DFB5-4CF6-8433-C793BF6BBCFA}
O43 - CFD: 2012/10/18 18:55:58 - [0] D -- C:\Users\3415058\AppData\Local\{AB3E7B3F-E358-4223-BB91-B0CD5A437575}
O43 - CFD: 2011/08/18 11:40:44 - [0] D -- C:\Users\3415058\AppData\Local\{AB4D375B-74D1-4823-A84A-80BEB526B8BB}
O43 - CFD: 2012/02/15 17:32:22 - [0] D -- C:\Users\3415058\AppData\Local\{AB668EEE-2F5D-4AFB-B6B5-FB639E606125}
O43 - CFD: 2013/01/14 13:04:26 - [0] D -- C:\Users\3415058\AppData\Local\{ABC1B43E-D91F-4458-A5BE-16999C8A8954}
O43 - CFD: 2012/02/02 15:00:34 - [0] D -- C:\Users\3415058\AppData\Local\{AC543D07-526E-4677-A503-1B2AD37D296B}
O43 - CFD: 2012/02/27 21:07:06 - [0] D -- C:\Users\3415058\AppData\Local\{ACC5C7CA-E3F2-4C81-93EA-DA977F44752D}
O43 - CFD: 2012/11/01 13:43:00 - [0] D -- C:\Users\3415058\AppData\Local\{ACCA2022-1299-44E6-A50A-746BA77A414A}
O43 - CFD: 2013/03/25 12:09:42 - [0] D -- C:\Users\3415058\AppData\Local\{AD6C5611-0019-421E-BA22-CE697CAB9C90}
O43 - CFD: 2012/04/19 14:55:48 - [0] D -- C:\Users\3415058\AppData\Local\{AE29389D-5DF3-4763-A697-EA1A38173DCD}
O43 - CFD: 2011/12/27 19:23:40 - [0] D -- C:\Users\3415058\AppData\Local\{AE2B4E98-56E8-471E-8F1B-B0AAB3AE5CF7}
O43 - CFD: 2012/04/20 11:11:00 - [0] D -- C:\Users\3415058\AppData\Local\{AE3DC4DD-959A-4992-A4FE-1C35A5F57023}
O43 - CFD: 2012/04/21 12:13:48 - [0] D -- C:\Users\3415058\AppData\Local\{AE57E468-144C-43FD-9B06-A6E62721826F}
O43 - CFD: 2013/07/17 18:40:50 - [0] D -- C:\Users\3415058\AppData\Local\{AE6E2EF7-5A43-4838-A244-A91DA6D843C5}
O43 - CFD: 2013/08/31 19:12:35 - [0] D -- C:\Users\3415058\AppData\Local\{AE844347-5A1D-47AB-A4DF-1872A4B7D7C4}
O43 - CFD: 2012/06/21 09:27:47 - [0] D -- C:\Users\3415058\AppData\Local\{AEB5A865-E0B3-4B58-8E56-A86CBCE33E6D}
O43 - CFD: 2011/09/04 12:13:03 - [0] D -- C:\Users\3415058\AppData\Local\{AEF91844-2D40-4B1E-B4F0-A909C0CCF70B}
O43 - CFD: 2012/11/17 17:36:40 - [0] D -- C:\Users\3415058\AppData\Local\{AF80DFFE-F370-42A4-9C96-8F8202921540}
O43 - CFD: 2012/08/08 23:13:37 - [0] D -- C:\Users\3415058\AppData\Local\{B006BA9D-0EC8-454F-A233-87097A7B1171}
O43 - CFD: 2012/12/04 21:17:04 - [0] D -- C:\Users\3415058\AppData\Local\{B0BDE5FF-DD69-4F69-8DB8-FC4FA83CFFAB}
O43 - CFD: 2012/06/26 09:03:59 - [0] D -- C:\Users\3415058\AppData\Local\{B0C8C463-3D3A-4125-9A69-B4122A117491}
O43 - CFD: 2013/02/01 17:51:21 - [0] D -- C:\Users\3415058\AppData\Local\{B0E97E53-A945-47A0-A3A2-D6F878BD8DF2}
O43 - CFD: 2014/01/17 17:58:59 - [0] D -- C:\Users\3415058\AppData\Local\{B1A714EF-F4C5-439D-AE10-73767F06ED69}
O43 - CFD: 2013/04/24 20:49:34 - [0] D -- C:\Users\3415058\AppData\Local\{B231D767-9BD5-4902-B9D4-EAA1FBAD2346}
O43 - CFD: 2012/05/17 19:28:04 - [0] D -- C:\Users\3415058\AppData\Local\{B23C1797-B5A1-49B4-BA32-BE5335485F42}
O43 - CFD: 2012/04/12 21:46:02 - [0] D -- C:\Users\3415058\AppData\Local\{B2BD31D0-818A-475C-A0CE-BA330ACCD703}
O43 - CFD: 2012/10/12 11:49:50 - [0] D -- C:\Users\3415058\AppData\Local\{B2FEB6B7-C625-4C0E-8EB1-5FC4E713D9CF}
O43 - CFD: 2011/09/22 16:24:46 - [0] D -- C:\Users\3415058\AppData\Local\{B38B0FB9-90BD-45E0-8515-B95A4067EB3E}
O43 - CFD: 2012/11/25 12:26:20 - [0] D -- C:\Users\3415058\AppData\Local\{B39F3627-9933-47FC-AE00-4E7E7D28F13C}
O43 - CFD: 2012/09/08 11:35:53 - [0] D -- C:\Users\3415058\AppData\Local\{B3B1C202-6B39-4452-9C7A-DE9A199CE235}
O43 - CFD: 2013/03/07 17:41:41 - [0] D -- C:\Users\3415058\AppData\Local\{B42AAA23-4ADE-45DD-B9A2-39AD3FE2EEAE}
O43 - CFD: 2012/01/06 15:26:40 - [0] D -- C:\Users\3415058\AppData\Local\{B4CE8E29-0E82-42AC-8C5C-F4DA66B0893A}
O43 - CFD: 2012/07/21 10:08:43 - [0] D -- C:\Users\3415058\AppData\Local\{B5108B49-BF37-438E-AAB2-A715A84D316D}
O43 - CFD: 2012/02/06 14:51:45 - [0] D -- C:\Users\3415058\AppData\Local\{B5FB90CC-6C1D-420B-861C-5BAFEA6EA699}
O43 - CFD: 2011/09/14 14:48:59 - [0] D -- C:\Users\3415058\AppData\Local\{B77AC194-ACF6-4BAB-99A0-E910549F96F2}
O43 - CFD: 2012/04/19 17:08:25 - [0] D -- C:\Users\3415058\AppData\Local\{B80E48DF-5222-4552-B1A3-433D5480A9BA}
O43 - CFD: 2011/11/20 21:30:07 - [0] D -- C:\Users\3415058\AppData\Local\{B838C058-BF96-4C0D-B42A-3637EF651C69}
O43 - CFD: 2012/12/24 20:26:03 - [0] D -- C:\Users\3415058\AppData\Local\{B886A272-38BD-4CF2-A874-951D37F057FD}
O43 - CFD: 2012/06/26 09:04:09 - [0] D -- C:\Users\3415058\AppData\Local\{B8ABC6E2-6284-481B-84F8-1B1D205C7A58}
O43 - CFD: 2011/12/31 20:19:45 - [0] D -- C:\Users\3415058\AppData\Local\{B8C99050-1E2C-4EB6-BE11-30568C6AC4AF}
O43 - CFD: 2011/09/15 11:33:28 - [0] D -- C:\Users\3415058\AppData\Local\{BA3298F8-3B2C-48FA-B5D7-744F9AE5C726}
O43 - CFD: 2013/02/13 21:42:22 - [0] D -- C:\Users\3415058\AppData\Local\{BA48C28E-BF31-45BE-8A92-F7396569F63C}
O43 - CFD: 2011/11/01 13:05:54 - [0] D -- C:\Users\3415058\AppData\Local\{BA682DAA-EA96-400D-A844-C4CB3E91FFC8}
O43 - CFD: 2012/06/26 23:22:08 - [0] D -- C:\Users\3415058\AppData\Local\{BA74856D-E43B-4374-97FA-33C8A5847201}
O43 - CFD: 2011/11/11 19:53:39 - [0] D -- C:\Users\3415058\AppData\Local\{BB1596D9-F0BC-417A-A093-AB89AE949F98}
O43 - CFD: 2012/06/10 11:44:18 - [0] D -- C:\Users\3415058\AppData\Local\{BC7E3155-9850-4B30-BF07-23C308C50E7A}
O43 - CFD: 2012/11/13 20:37:32 - [0] D -- C:\Users\3415058\AppData\Local\{BCA68D14-5D22-4D28-87E9-225B1064118A}
O43 - CFD: 2013/12/15 19:48:32 - [0] D -- C:\Users\3415058\AppData\Local\{BD1441B7-D2AB-4D1C-A19D-CD7A9CA46C6D}
O43 - CFD: 2012/02/12 10:49:10 - [0] D -- C:\Users\3415058\AppData\Local\{BD44B3A5-A9CD-44E7-9518-7D3FDA68555F}
O43 - CFD: 2011/08/22 17:43:51 - [0] D -- C:\Users\3415058\AppData\Local\{BD5B0644-6C52-4CAE-B692-7572FA48B073}
O43 - CFD: 2012/11/18 18:13:47 - [0] D -- C:\Users\3415058\AppData\Local\{BD9DC4B7-845C-47AC-ABDF-77AFA042E591}
O43 - CFD: 2011/10/22 11:29:46 - [0] D -- C:\Users\3415058\AppData\Local\{BE1C24D6-E180-476C-A6AF-EBDFC2A4F4B6}
O43 - CFD: 2011/10/12 16:28:31 - [0] D -- C:\Users\3415058\AppData\Local\{BEAA09F4-3201-4F3F-8B6C-2A625103DAAA}
O43 - CFD: 2012/05/11 16:38:07 - [0] D -- C:\Users\3415058\AppData\Local\{BF0E1433-600F-4C99-9D1F-6FC71C698B3A}
O43 - CFD: 2011/11/06 14:22:17 - [0] D -- C:\Users\3415058\AppData\Local\{BF4EDF41-015C-430A-B652-961C0F5134B5}
O43 - CFD: 2012/02/19 14:25:09 - [0] D -- C:\Users\3415058\AppData\Local\{BF6A2DC2-4DC6-4C95-948D-FB0B55D28C7A}
O43 - CFD: 2012/01/29 12:21:35 - [0] D -- C:\Users\3415058\AppData\Local\{C0B20221-3827-42EB-8C9C-7689B33EFD94}
O43 - CFD: 2012/01/24 19:01:36 - [0] D -- C:\Users\3415058\AppData\Local\{C2848E4C-032B-4369-911D-AFF2A2B37EAD}
O43 - CFD: 2012/01/07 11:19:09 - [0] D -- C:\Users\3415058\AppData\Local\{C3AD648B-F898-4244-B895-86EEA96EE850}
O43 - CFD: 2012/03/16 11:58:19 - [0] D -- C:\Users\3415058\AppData\Local\{C402DE63-88FE-4222-82EE-AB423D795024}
O43 - CFD: 2011/08/17 17:16:27 - [0] D -- C:\Users\3415058\AppData\Local\{C4A7968B-7B11-41AE-BC8A-1E1D5AEFDCF4}
O43 - CFD: 2012/04/20 21:43:56 - [0] D -- C:\Users\3415058\AppData\Local\{C4BB1743-E0D8-488F-98FE-3C50772641B4}
O43 - CFD: 2011/12/25 20:13:15 - [0] D -- C:\Users\3415058\AppData\Local\{C4E79A99-3B0C-4634-85AB-3569A48F2A00}
O43 - CFD: 2012/06/28 08:59:51 - [0] D -- C:\Users\3415058\AppData\Local\{C57102C5-EB4F-45E3-97C1-C5DCD6A891F9}
O43 - CFD: 2012/01/06 20:26:41 - [0] D -- C:\Users\3415058\AppData\Local\{C5888D5A-36B8-428B-9AC9-13ED1A16DA86}
O43 - CFD: 2013/02/20 15:52:27 - [0] D -- C:\Users\3415058\AppData\Local\{C5E836E5-D6B8-429C-82A2-F12ABE2D589E}
O43 - CFD: 2013/11/17 18:34:41 - [0] D -- C:\Users\3415058\AppData\Local\{C6CB940F-EC08-497E-9451-5141F9130DF0}
O43 - CFD: 2013/07/17 18:14:19 - [0] D -- C:\Users\3415058\AppData\Local\{C826321B-4FBA-46B8-B280-824C2983BB34}
O43 - CFD: 2012/04/22 08:54:13 - [0] D -- C:\Users\3415058\AppData\Local\{C836F748-4903-4C87-ADF7-032581188ABD}
O43 - CFD: 2011/08/22 18:06:41 - [0] D -- C:\Users\3415058\AppData\Local\{C8D800B2-A6D5-41AE-887F-6F6372C76319}
O43 - CFD: 2012/04/20 11:11:09 - [0] D -- C:\Users\3415058\AppData\Local\{CA36BD1A-B9AE-486F-887D-FE9ACDC68D67}
O43 - CFD: 2011/09/17 15:14:53 - [0] D -- C:\Users\3415058\AppData\Local\{CA770999-28C6-4BFD-B205-FB80C922D40A}
O43 - CFD: 2012/01/08 11:40:33 - [0] D -- C:\Users\3415058\AppData\Local\{CA8C6417-4FD2-46E5-8EBA-36261BDE98FE}
O43 - CFD: 2012/02/18 20:07:36 - [0] D -- C:\Users\3415058\AppData\Local\{CA8DAFC3-E635-47B2-AB6B-08085B1CCC87}
O43 - CFD: 2012/04/02 08:21:19 - [0] D -- C:\Users\3415058\AppData\Local\{CAB4C6AE-B8D8-4410-9C90-002BE739D259}
O43 - CFD: 2011/11/02 21:10:53 - [0] D -- C:\Users\3415058\AppData\Local\{CBEE439A-E9EC-4FF7-9F0D-48A9D94976A6}
O43 - CFD: 2012/06/19 20:13:00 - [0] D -- C:\Users\3415058\AppData\Local\{CC63DE9C-5148-4E01-A058-BF3FD02FF278}
O43 - CFD: 2012/03/23 20:25:59 - [0] D -- C:\Users\3415058\AppData\Local\{CCB07384-E1FD-40E2-9F04-5BC9F2608B15}
O43 - CFD: 2013/02/27 15:24:09 - [0] D -- C:\Users\3415058\AppData\Local\{CD256785-5CCA-467C-8976-A89E88C76074}
O43 - CFD: 2012/03/16 11:58:30 - [0] D -- C:\Users\3415058\AppData\Local\{CD2CDED3-45AA-456F-9E02-3B0BB188CA32}
O43 - CFD: 2012/03/16 11:58:40 - [0] D -- C:\Users\3415058\AppData\Local\{CD5FC4C7-DCDE-4015-9917-0BDF5F364BF4}
O43 - CFD: 2013/03/29 19:29:26 - [0] D -- C:\Users\3415058\AppData\Local\{CDD6E590-6693-4F8E-BE03-06775A36BC6F}
O43 - CFD: 2013/09/28 08:49:54 - [0] D -- C:\Users\3415058\AppData\Local\{CDE02E10-4A18-4FB1-A511-A7AF62504BA3}
O43 - CFD: 2013/02/17 22:15:36 - [0] D -- C:\Users\3415058\AppData\Local\{CDF40D5B-3849-4FEC-A01B-C7ED1990970D}
O43 - CFD: 2012/02/03 11:32:38 - [0] D -- C:\Users\3415058\AppData\Local\{CE729E0E-06E0-4317-A7AD-F2376708417F}
O43 - CFD: 2012/06/26 21:04:38 - [0] D -- C:\Users\3415058\AppData\Local\{CEB567AD-EF7B-4C28-8982-04B270AD2D87}
O43 - CFD: 2011/12/12 15:02:46 - [0] D -- C:\Users\3415058\AppData\Local\{CEF0CC6D-1225-49D5-B6DF-C067CD48C247}
O43 - CFD: 2012/11/21 18:14:25 - [0] D -- C:\Users\3415058\AppData\Local\{CF869F4E-963D-4B18-864F-168D9E7E77C1}
O43 - CFD: 2011/09/18 19:41:07 - [0] D -- C:\Users\3415058\AppData\Local\{CF94F1A5-9CA8-49C1-AF49-49C70A974759}
O43 - CFD: 2012/07/01 12:25:03 - [0] D -- C:\Users\3415058\AppData\Local\{D1097FD6-6FD1-4A6F-A5DD-1A1C48A15162}
O43 - CFD: 2013/01/01 21:03:25 - [0] D -- C:\Users\3415058\AppData\Local\{D17CCA3C-8BED-4BC3-96C5-555E6D8BDFB2}
O43 - CFD: 2012/05/19 18:19:42 - [0] D -- C:\Users\3415058\AppData\Local\{D17E6882-242B-4544-9147-B743C9AA2DCC}
O43 - CFD: 2013/04/03 11:36:46 - [0] D -- C:\Users\3415058\AppData\Local\{D227E312-9F54-48DA-A9DB-267E0FA23B6D}
O43 - CFD: 2011/09/07 13:41:39 - [0] D -- C:\Users\3415058\AppData\Local\{D2964C79-2312-4E0D-882C-5B9DB3241F28}
O43 - CFD: 2012/07/23 03:11:31 - [0] D -- C:\Users\3415058\AppData\Local\{D29B8B30-5496-46EB-A611-3B41B1742789}
O43 - CFD: 2012/07/16 16:09:46 - [0] D -- C:\Users\3415058\AppData\Local\{D2DAA203-F067-44DA-B8DE-E287BEAE931A}
O43 - CFD: 2012/04/08 11:30:53 - [0] D -- C:\Users\3415058\AppData\Local\{D2EB83EA-40D1-4194-A58D-B01EB0786B34}
O43 - CFD: 2013/09/14 17:14:56 - [0] D -- C:\Users\3415058\AppData\Local\{D3BDF8C4-7FC0-4677-9399-BAB8984434EA}
O43 - CFD: 2012/02/06 14:51:59 - [0] D -- C:\Users\3415058\AppData\Local\{D3CDB9A2-C158-4582-9233-58169930994D}
O43 - CFD: 2011/10/23 09:53:05 - [0] D -- C:\Users\3415058\AppData\Local\{D45D170F-2D90-445B-89FD-E075C0F3A350}
O43 - CFD: 2011/08/27 12:59:46 - [0] D -- C:\Users\3415058\AppData\Local\{D4F164C9-1D9F-41CC-87C1-D99921A16775}
O43 - CFD: 2011/11/06 14:45:24 - [0] D -- C:\Users\3415058\AppData\Local\{D5440ADC-F705-4CCD-B62B-8C6D474AA3F1}
O43 - CFD: 2012/06/20 08:48:08 - [0] D -- C:\Users\3415058\AppData\Local\{D619AE11-42E2-46FE-BD4B-0ACCB1BEDDA2}
O43 - CFD: 2012/10/16 11:36:31 - [0] D -- C:\Users\3415058\AppData\Local\{D64A6677-A0C8-48E5-8017-7AF8AEEC7F78}
O43 - CFD: 2011/10/31 23:49:42 - [0] D -- C:\Users\3415058\AppData\Local\{D6932483-0427-4F85-A7F4-42BB09BB795E}
O43 - CFD: 2013/06/30 18:17:59 - [0] D -- C:\Users\3415058\AppData\Local\{D6CF0D31-4251-4CE7-9907-55048825F017}
O43 - CFD: 2013/01/06 14:22:18 - [0] D -- C:\Users\3415058\AppData\Local\{D6F1DEFF-B605-47FB-B737-AF39C7EDF9CC}
O43 - CFD: 2012/07/26 11:13:56 - [0] D -- C:\Users\3415058\AppData\Local\{D78AF932-FE0A-4E96-9825-3A37FF6345FB}
O43 - CFD: 2012/07/17 11:33:31 - [0] D -- C:\Users\3415058\AppData\Local\{D7E2D7EA-CACC-42C0-A3D3-D454EA97C730}
O43 - CFD: 2013/12/11 10:35:21 - [0] D -- C:\Users\3415058\AppData\Local\{DA3A90DF-5A2D-4087-BB65-EBE0EC88C156}
O43 - CFD: 2011/09/06 11:00:03 - [0] D -- C:\Users\3415058\AppData\Local\{DA52C591-0A66-4971-A103-F486761DA148}
O43 - CFD: 2014/01/23 13:57:33 - [0] D -- C:\Users\3415058\AppData\Local\{DB4B9890-FA8F-4639-B092-925189836647}
O43 - CFD: 2012/10/08 13:38:28 - [0] D -- C:\Users\3415058\AppData\Local\{DB58473A-5E57-4100-8207-3280DEED209F}
O43 - CFD: 2012/04/19 14:50:21 - [0] D -- C:\Users\3415058\AppData\Local\{DB990BD0-B700-4FF6-B157-65A361EA306A}
O43 - CFD: 2012/04/21 12:13:36 - [0] D -- C:\Users\3415058\AppData\Local\{DD175B3A-21C7-487C-A712-0EA819837C0A}
O43 - CFD: 2012/07/12 11:22:28 - [0] D -- C:\Users\3415058\AppData\Local\{DD52559E-E161-41F0-B2CE-324884FA519F}
O43 - CFD: 2011/10/15 16:35:35 - [0] D -- C:\Users\3415058\AppData\Local\{DDB16B99-60DC-47EF-83FD-3B7175CE4804}
O43 - CFD: 2011/11/25 19:18:32 - [0] D -- C:\Users\3415058\AppData\Local\{DE433B44-629A-4075-8B4D-6FC1CABCDF8E}
O43 - CFD: 2013/03/13 14:39:38 - [0] D -- C:\Users\3415058\AppData\Local\{DE571B77-214A-4984-8DCA-798ED073613D}
O43 - CFD: 2012/03/28 21:08:26 - [0] D -- C:\Users\3415058\AppData\Local\{DEFB4BDE-CD24-4D94-AC1B-F98F4DB6BA5D}
O43 - CFD: 2014/01/14 14:43:50 - [0] D -- C:\Users\3415058\AppData\Local\{DF1F57F6-35CE-4B09-8498-3CB98AD74535}
O43 - CFD: 2012/07/14 16:12:12 - [0] D -- C:\Users\3415058\AppData\Local\{DF6BBE1F-4904-4AA2-A8D2-BF785BE6A079}
O43 - CFD: 2012/07/14 16:12:00 - [0] D -- C:\Users\3415058\AppData\Local\{DF85EBD0-31AD-45C7-A1C5-BE12773ED535}
O43 - CFD: 2012/09/04 17:47:07 - [0] D -- C:\Users\3415058\AppData\Local\{DFE04A95-C790-4E56-B2C8-810C2ADEDF28}
O43 - CFD: 2012/06/25 21:02:12 - [0] D -- C:\Users\3415058\AppData\Local\{DFE5B592-8DC3-4CD2-9031-4F91731CBCB0}
O43 - CFD: 2012/06/12 15:08:56 - [0] D -- C:\Users\3415058\AppData\Local\{E00E91EF-F5AB-43D4-B891-747FFEF879A1}
O43 - CFD: 2012/05/15 19:08:37 - [0] D -- C:\Users\3415058\AppData\Local\{E0168D63-0484-489F-9B1A-C11EF1E59C26}
O43 - CFD: 2012/02/11 16:39:55 - [0] D -- C:\Users\3415058\AppData\Local\{E08013DF-39FD-4499-B90E-9BF1CBB23ABF}
O43 - CFD: 2012/02/04 18:47:55 - [0] D -- C:\Users\3415058\AppData\Local\{E0C217E2-200C-450D-85CE-7B99168B7CC1}
O43 - CFD: 2012/06/10 11:44:07 - [0] D -- C:\Users\3415058\AppData\Local\{E1A98404-DCD8-455E-A598-0EF613EB39D8}
O43 - CFD: 2011/08/10 16:37:34 - [0] D -- C:\Users\3415058\AppData\Local\{E1E6D8DB-BCE1-4839-B5E2-D4F106E0F766}
O43 - CFD: 2011/09/06 10:59:52 - [0] D -- C:\Users\3415058\AppData\Local\{E1F0C5D2-2EF0-430A-B692-F980A54EBDD1}
O43 - CFD: 2013/01/02 10:27:45 - [0] D -- C:\Users\3415058\AppData\Local\{E3D416D9-9CE4-42BF-95D2-927BC43BEADD}
O43 - CFD: 2012/09/16 20:48:46 - [0] D -- C:\Users\3415058\AppData\Local\{E3D47AC4-DC3D-4701-BF93-D5C0A1A4F9A8}
O43 - CFD: 2012/09/28 20:50:46 - [0] D -- C:\Users\3415058\AppData\Local\{E473649E-3C01-4405-A32C-28B66CD48B21}
O43 - CFD: 2012/05/08 13:05:24 - [0] D -- C:\Users\3415058\AppData\Local\{E479C71E-86C1-4594-B77D-A33053E12F77}
O43 - CFD: 2011/10/21 12:01:04 - [0] D -- C:\Users\3415058\AppData\Local\{E4E5AF2A-4D01-480E-9912-23F64AAB1A7C}
O43 - CFD: 2012/05/01 19:51:36 - [0] D -- C:\Users\3415058\AppData\Local\{E4E69AE8-6687-4E4E-B85F-12BCB7DB3852}
O43 - CFD: 2012/02/03 11:33:04 - [0] D -- C:\Users\3415058\AppData\Local\{E5467389-AB35-4B0F-9CA3-9E43661470B9}
O43 - CFD: 2013/02/07 16:34:31 - [0] D -- C:\Users\3415058\AppData\Local\{E59CCA4F-D7D8-4BE8-884E-C34A42D7846A}
O43 - CFD: 2011/08/15 15:49:03 - [0] D -- C:\Users\3415058\AppData\Local\{E5D732C8-EB19-418C-8E7D-EE8399CC6F3B}
O43 - CFD: 2012/06/30 11:20:45 - [0] D -- C:\Users\3415058\AppData\Local\{E69159A9-871E-4683-B633-1A1D226F3BD3}
O43 - CFD: 2012/02/12 10:49:00 - [0] D -- C:\Users\3415058\AppData\Local\{E775DF12-D639-4570-BCF4-6DAFB4C28A5F}
O43 - CFD: 2012/04/07 21:24:51 - [0] D -- C:\Users\3415058\AppData\Local\{E8966CE9-B1E6-4602-B719-C8F8D7FF5F7E}
O43 - CFD: 2013/02/14 18:53:20 - [0] D -- C:\Users\3415058\AppData\Local\{E933C01F-3EFB-4EC8-B0BD-3050BDAF618A}
O43 - CFD: 2012/07/01 12:25:13 - [0] D -- C:\Users\3415058\AppData\Local\{EAA84CAF-9173-4485-BDF5-D5963A028909}
O43 - CFD: 2012/05/28 20:00:13 - [0] D -- C:\Users\3415058\AppData\Local\{EADB512D-BAA4-4B51-A0E4-5E9E9AEE27A3}
O43 - CFD: 2012/01/15 20:59:48 - [0] D -- C:\Users\3415058\AppData\Local\{EB2517A5-A4AA-40FB-B2C8-BA5A44CEF4AF}
O43 - CFD: 2012/05/28 20:00:24 - [0] D -- C:\Users\3415058\AppData\Local\{EB2953C3-484D-419E-914A-7EB23B860076}
O43 - CFD: 2012/02/16 16:10:14 - [0] D -- C:\Users\3415058\AppData\Local\{EB99E2EF-8E7B-4423-B798-61A057DCAFD8}
O43 - CFD: 2012/02/09 21:50:07 - [0] D -- C:\Users\3415058\AppData\Local\{EBF229CB-8887-47DC-88B5-281C0ACF13EF}
O43 - CFD: 2012/07/22 10:48:31 - [0] D -- C:\Users\3415058\AppData\Local\{EBF88AF5-DBA6-4B13-99D4-A42828B550FE}
O43 - CFD: 2011/08/27 12:59:36 - [0] D -- C:\Users\3415058\AppData\Local\{EC3B2DDE-01DA-4A57-BAA0-6E739AAFEE81}
O43 - CFD: 2012/04/09 12:44:23 - [0] D -- C:\Users\3415058\AppData\Local\{EC5A83D7-8C14-4BE9-8DE2-74CC5718D4FE}
O43 - CFD: 2013/04/01 15:53:35 - [0] D -- C:\Users\3415058\AppData\Local\{EC894A76-4F97-4857-900E-2C2184D7E2B4}
O43 - CFD: 2011/10/23 09:52:50 - [0] D -- C:\Users\3415058\AppData\Local\{ED4DD4E8-A522-42F1-99D7-8E65236DDDAA}
O43 - CFD: 2013/03/16 21:52:00 - [0] D -- C:\Users\3415058\AppData\Local\{ED736689-C2AC-44EB-BEAC-B83573137723}
O43 - CFD: 2012/07/16 14:32:43 - [0] D -- C:\Users\3415058\AppData\Local\{EE3D9750-11CF-44FB-B8E6-E8A25554FE73}
O43 - CFD: 2014/01/08 11:15:59 - [0] D -- C:\Users\3415058\AppData\Local\{EFDBC060-74F5-4EFD-8DBF-3C768586951F}
O43 - CFD: 2013/09/11 14:33:26 - [0] D -- C:\Users\3415058\AppData\Local\{F04EB25B-FFA0-4865-9EA6-0B6E3DF1C892}
O43 - CFD: 2012/01/31 21:40:04 - [0] D -- C:\Users\3415058\AppData\Local\{F07921F7-4BBC-42E0-AF20-46ED17BA8F47}
O43 - CFD: 2011/11/07 15:44:01 - [0] D -- C:\Users\3415058\AppData\Local\{F0ECFCE8-6DCE-4540-86E3-073CB0C8C743}
O43 - CFD: 2012/05/13 19:49:35 - [0] D -- C:\Users\3415058\AppData\Local\{F0F3AC34-04F9-4AC4-BFFF-37D4BC1B1C9C}
O43 - CFD: 2012/07/29 09:47:16 - [0] D -- C:\Users\3415058\AppData\Local\{F101C3AE-F9CF-49D7-84ED-81C0E23568A9}
O43 - CFD: 2012/05/01 18:21:50 - [0] D -- C:\Users\3415058\AppData\Local\{F1D84E0F-F421-41ED-99CF-5C7E54937D4F}
O43 - CFD: 2012/01/07 11:18:57 - [0] D -- C:\Users\3415058\AppData\Local\{F1DE484A-4724-4032-B006-57DC1A460D7B}
O43 - CFD: 2013/09/02 13:39:29 - [0] D -- C:\Users\3415058\AppData\Local\{F2C59CE6-7F75-4A12-A034-D7E9B3D02611}
O43 - CFD: 2011/12/25 20:13:25 - [0] D -- C:\Users\3415058\AppData\Local\{F2E239BA-80F4-44B7-AD72-C615176B91AB}
O43 - CFD: 2013/03/17 12:48:40 - [0] D -- C:\Users\3415058\AppData\Local\{F32FF3A9-9204-4381-8CD3-53C1E6E1AB00}
O43 - CFD: 2011/12/13 21:44:33 - [0] D -- C:\Users\3415058\AppData\Local\{F3F5E54B-A06F-4412-A5EF-A063A50AAC36}
O43 - CFD: 2015/02/22 13:47:58 - [0] D -- C:\Users\3415058\AppData\Local\{F448E71C-3D62-480D-B1D1-71E9BAC692EA}
O43 - CFD: 2012/07/06 19:20:17 - [0] D -- C:\Users\3415058\AppData\Local\{F4508215-33E3-4AE4-B772-7CDA656219F2}
O43 - CFD: 2012/03/20 12:37:48 - [0] D -- C:\Users\3415058\AppData\Local\{F4731A54-4599-42F1-9191-63BC87F09ACE}
O43 - CFD: 2011/10/14 14:55:09 - [0] D -- C:\Users\3415058\AppData\Local\{F4DFEBC1-D9B5-4C2F-8A38-42D8491BC6BC}
O43 - CFD: 2013/01/18 21:59:33 - [0] D -- C:\Users\3415058\AppData\Local\{F5003FDE-5F57-4510-964B-365C21EF7430}
O43 - CFD: 2011/11/12 19:15:18 - [0] D -- C:\Users\3415058\AppData\Local\{F557CFF0-845E-4291-8BDA-E86CE98C819E}
O43 - CFD: 2012/05/14 11:38:41 - [0] D -- C:\Users\3415058\AppData\Local\{F5A9B681-057B-47BD-B53B-3C210A4C4C6B}
O43 - CFD: 2012/03/28 21:08:46 - [0] D -- C:\Users\3415058\AppData\Local\{F5CCF453-0D93-453C-B841-2E13BA3CD59F}
O43 - CFD: 2013/09/04 12:29:25 - [0] D -- C:\Users\3415058\AppData\Local\{F5E52A79-4623-46E3-B560-6A301150EBDB}
O43 - CFD: 2011/11/25 19:18:17 - [0] D -- C:\Users\3415058\AppData\Local\{F63C8FAD-100E-43CD-86AA-462B221175AB}
O43 - CFD: 2012/06/07 17:36:16 - [0] D -- C:\Users\3415058\AppData\Local\{F65B4746-C1AC-42CB-8B37-0CCCB66FE2AC}
O43 - CFD: 2012/11/11 17:53:48 - [0] D -- C:\Users\3415058\AppData\Local\{F69F77E5-11A8-4C96-A850-CC5ABEEE7674}
O43 - CFD: 2012/12/05 16:50:21 - [0] D -- C:\Users\3415058\AppData\Local\{F6B46535-9B69-45C5-AAB1-522B5191CE04}
O43 - CFD: 2011/09/08 11:14:31 - [0] D -- C:\Users\3415058\AppData\Local\{F6BBC410-F684-4572-9166-8F369507B5E9}
O43 - CFD: 2012/02/08 05:53:31 - [0] D -- C:\Users\3415058\AppData\Local\{F754B670-CBCF-4C86-BB0E-01C120F59114}
O43 - CFD: 2013/03/05 07:58:27 - [0] D -- C:\Users\3415058\AppData\Local\{F763FFE7-B4E9-4DED-AD49-551D1A482DF7}
O43 - CFD: 2012/03/24 12:19:54 - [0] D -- C:\Users\3415058\AppData\Local\{F789D949-FB00-4C5C-835C-11A3088946EC}
O43 - CFD: 2015/03/01 20:02:40 - [0] D -- C:\Users\3415058\AppData\Local\{F89B2872-6784-42A8-8E17-A1397E275C6F}
O43 - CFD: 2012/10/28 13:38:11 - [0] D -- C:\Users\3415058\AppData\Local\{F8CBC65F-2CD3-49EE-896C-C4CC55AEC676}
O43 - CFD: 2012/04/21 12:18:25 - [0] D -- C:\Users\3415058\AppData\Local\{F8FADFFF-86CB-4371-8711-3D44B0A57351}
O43 - CFD: 2012/12/24 20:29:08 - [0] D -- C:\Users\3415058\AppData\Local\{F982C793-649F-411A-8519-CB9D3803F4CB}
O43 - CFD: 2012/04/16 16:37:53 - [0] D -- C:\Users\3415058\AppData\Local\{F982FCDC-2ADA-4EC0-BBA0-2F93B9BB4CC1}
O43 - CFD: 2012/07/26 11:14:06 - [0] D -- C:\Users\3415058\AppData\Local\{FA0DE9E9-7D90-4684-ACA4-ECCFFC3F6806}
O43 - CFD: 2012/07/07 16:00:30 - [0] D -- C:\Users\3415058\AppData\Local\{FA11B165-82CB-4AD3-AE0E-7F5619F6A6BB}
O43 - CFD: 2014/02/09 21:49:11 - [0] D -- C:\Users\3415058\AppData\Local\{FADC5612-D0F6-4700-B3D8-EB37F222F99B}
O43 - CFD: 2013/02/04 13:24:12 - [0] D -- C:\Users\3415058\AppData\Local\{FB10605A-5A5A-401A-9B19-F3054F2B4DA6}
O43 - CFD: 2011/08/10 21:47:52 - [0] D -- C:\Users\3415058\AppData\Local\{FBF20B2E-1B15-48C7-8CDB-41D85F7A3A8A}
O43 - CFD: 2012/07/25 11:35:11 - [0] D -- C:\Users\3415058\AppData\Local\{FC274E84-BF08-4EAE-8AF9-C479778F5EE9}
O43 - CFD: 2013/08/17 17:27:42 - [0] D -- C:\Users\3415058\AppData\Local\{FC2D3797-D75D-4E71-A3E6-F424E059C3DC}
O43 - CFD: 2011/09/13 11:50:11 - [0] D -- C:\Users\3415058\AppData\Local\{FD1395AC-EAD6-4828-AAF3-23B2A224058A}
O43 - CFD: 2012/05/10 15:05:30 - [0] D -- C:\Users\3415058\AppData\Local\{FDBE0B1E-FA12-4B2D-BDE3-CE1E922DE007}
O43 - CFD: 2014/10/05 10:14:51 - [0] D -- C:\Users\3415058\AppData\Local\{FE131BDE-219A-4389-9842-E7E979A566DF}
O43 - CFD: 2011/10/15 16:35:45 - [0] D -- C:\Users\3415058\AppData\Local\{FE1B3FD2-63CD-496B-BF92-8DDABBAF07F2}
O43 - CFD: 2012/09/24 21:44:23 - [0] D -- C:\Users\3415058\AppData\Local\{FE6A1987-7EEF-400E-9B9B-C1237DB0D896}
O43 - CFD: 2011/09/03 18:57:47 - [0] D -- C:\Users\3415058\AppData\Local\{FE96F03D-401B-4D4F-A3A3-D56C2F795BF8}
O43 - CFD: 2012/06/24 16:40:22 - [0] D -- C:\Users\3415058\AppData\Local\{FF2B03B1-0B24-4DD1-8E73-B6DFFF4271AA}
O43 - CFD: 2012/10/06 20:35:06 - [0] D -- C:\Users\3415058\AppData\Local\{FF44C035-B9E2-41D3-9C49-2B4A6B257848}
O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/02/27 20:50:46 - [] RD -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/09/25 17:08:13 - [0] D -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard =>PUP.Optional.BitGuard
O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/09/24 21:12:06 - [] D -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivaZer
O43 - CFD: 2015/02/27 20:50:46 - [] RD -- C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ ShellIconOverlayIdentifiers (SOI) (3) - 1s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll ©
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll ©

---\\ Liste des pilotes du système (77) - 67s
O58 - SDL:2010/06/15 12:53:42 A . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\drivers\Accelerometer.sys [41272] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] ©
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] ©
O58 - SDL:2013/05/09 10:59:06 A . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\drivers\aswFsBlk.sys [33400] ©
O58 - SDL:2013/05/09 10:59:06 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [22600] ©
O58 - SDL:2013/05/09 10:59:06 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [80816] ©
O58 - SDL:2013/05/09 10:59:07 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [72016] ©
O58 - SDL:2013/05/09 10:59:07 A . (...) -- C:\Windows\System32\drivers\aswRvrt.sys [65336]
O58 - SDL:2013/06/29 12:41:50 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1030952] ©
O58 - SDL:2013/06/29 12:41:50 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [378944] ©
O58 - SDL:2013/05/09 10:59:07 A . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [64288] ©
O58 - SDL:2013/06/29 12:41:50 A . (...) -- C:\Windows\System32\drivers\aswVmm.sys [189936]
O58 - SDL:2010/05/06 15:21:46 A . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtiHdmi.sys [125456] ©
O58 - SDL:2010/09/10 00:45:34 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [7767552] ©
O58 - SDL:2010/09/09 23:52:50 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [279040] ©
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2010/04/09 17:53:04 A . (.Motorola, Inc. - Bluetooth Serial Port Driver.) -- C:\Windows\System32\drivers\btmcom.sys [52736]
O58 - SDL:2010/07/08 16:45:22 A . (.Motorola, Inc. - Bluetooth Radio Driver.) -- C:\Windows\System32\drivers\btmusb.sys [3232768]
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2010/09/03 18:13:32 A . (.CyberLink Corporation - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\drivers\clwvd.sys [31088] ©
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] ©
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] ©
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2012/08/21 14:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] ©
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2010/05/01 19:21:00 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] ©
O58 - SDL:2010/06/15 12:53:58 A . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\drivers\hpdskflt.sys [30008] ©
O58 - SDL:2010/11/20 15:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] ©
O58 - SDL:2010/04/13 10:44:22 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [540696] ©
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] ©
O58 - SDL:2010/07/29 00:10:42 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [10610400] ©
O58 - SDL:2010/07/29 00:10:42 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdpmd64.sys [10610400] ©
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] ©
O58 - SDL:2009/10/27 14:39:44 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [151936] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] ©
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] ©
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272] ©
O58 - SDL:2015/09/26 13:33:55 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] ©
O58 - SDL:2015/06/18 08:41:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [63704] ©
O58 - SDL:2010/06/29 10:01:38 A . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28x.sys [931168] ©
O58 - SDL:2009/06/10 22:35:28 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\netw5v64.sys [5434368] ©
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] ©
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] ©
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] ©
O58 - SDL:2010/06/24 19:10:56 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [344680] ©
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] ©
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] ©
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] ©
O58 - SDL:2010/07/23 04:19:24 A . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\drivers\stwrt64.sys [515584] ©
O58 - SDL:2012/07/09 14:42:54 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [52736] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ©
O58 - SDL:2009/06/10 23:01:11 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\drivers\VSTAZL6.SYS [292864] ©
O58 - SDL:2009/06/10 23:01:11 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\drivers\VSTCNXT6.SYS [740864] ©
O58 - SDL:2009/06/10 23:01:11 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\drivers\VSTDPV6.SYS [1485312] ©
O58 - SDL:2009/06/10 22:35:33 A . (.Marvell - Miniport Driver for Marvell Yukon Ethernet.) -- C:\Windows\System32\drivers\yk62x64.sys [389120] ©

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 75s
O61 - LFC: 2015/09/26 13:33:40 A . (..) -- C:\Users\3415058\AppData\Local\ATI\ACE\Manifest.Bin [32089]

---\\ Associations Shell Spawning (11) - 3s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©

---\\ Menu de démarrage Internet (12) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (5) - 95s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {1B3910D6-033F-4353-BB9B-809F8913DCB9} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {93987297-374C-4079-B0A7-EC9580717D73} - (Ask Search) - http://websearch.ask.com/ =>Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] {b7fca997-d0fb-4fe0-8afd-255e89cf9671} - (Yahoo) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://fr.wikipedia.org/

---\\ Enumère les services démarrés par Svchost (32) - 4s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2477536] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ©

---\\ Liste des exceptions du parefeu Windows (8) - 25s
O87 - FAEL: "{37661E01-A643-4016-9021-F6F5A181410B}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE (.not file.)
O87 - FAEL: "{BDA4E1E4-ADFE-4833-9C55-92914E60C559}" [In-None-P6-TRUE] .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\zumodrive.exe
O87 - FAEL: "{810378A6-16B4-4F44-8D7A-227A11217793}" [Out-None-P6-TRUE] .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\zumodrive.exe
O87 - FAEL: "{DBA1F93C-D4C5-4047-A02B-50A7AB965379}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)
O87 - FAEL: "{622FE800-C644-4DF9-BBB5-3503F3668994}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)
O87 - FAEL: "{50EB72B8-C43A-4251-9BE7-9653DEDFA65D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)
O87 - FAEL: "{AB2F0A21-037D-4F7E-BF7D-AB9B2EEC6A48}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)
O87 - FAEL: "{8D746612-769F-4A9A-AD6C-35D82BC7ABFC}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (25) - 379s

SR - Auto [2010/09/10 00:26:44] [ 203264] (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe ©
SR - Auto [2012/08/11 17:43:06] [ 55184] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
SS - Auto [2013/05/09 10:58:30] [ 46808] avast! Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
SR - Demand [2010/06/29 12:52:12] [ 4181256] Bluetooth Device Manager (Bluetooth Device Manager) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
SR - Demand [2010/05/20 14:28:12] [ 1096968] Bluetooth Media Service (Bluetooth Media Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
SR - Auto [2010/05/20 14:28:14] [ 677128] Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
SR - Auto [2010/09/15 12:30:34] [ 440144] @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe ©
SS - Demand [2011/02/08 01:49:50] [ 647680] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe ©
SR - Demand [2011/02/08 01:49:51] [ 1028096] FLEXnet Licensing Service 64 (FLEXnet Licensing Service 64) . (.Macrovision Europe Ltd..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe ©
SS - Auto [2015/09/26 16:22:31] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/09/26 16:22:31] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Auto [2010/09/17 16:19:32] [ 126008] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe ©
SS - Auto [2010/07/21 14:33:00] [ 103992] HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe ©
SR - Auto [2010/08/05 19:51:08] [ 291896] HP Client Services (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe ©
SR - Auto [2010/09/17 16:45:46] [ 92216] HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe ©
SR - Demand [2010/09/17 16:40:50] [ 735288] HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe ©
SR - Auto [2010/06/15 12:53:52] [ 30520] HP Service (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\system32\Hpservice.exe ©
SR - Auto [2010/09/28 18:08:58] [ 26680] HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe ©
SR - Auto [2010/05/01 19:21:14] [ 325656] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
SR - Auto [2015/06/18 08:39:46] [ 1871160] (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe ©
SR - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
SS - Demand [2015/09/15 20:32:29] [ 119408] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Auto [2010/03/11 14:06:06] [ 193824] Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe ©
SR - Auto [2010/05/01 19:21:14] [ 2533400] Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©

---\\ Recherche de clés de registre Tracing (18) - 95s
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASAPI32 =>PUP.Optional.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASMANCS =>PUP.Optional.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASAPI32 =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASMANCS =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32 =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS =>PUP.Optional.Datamngr

---\\ Scan Additionnel (42) - 1s
HKLM\SOFTWARE\Wow6432Node\582dcdeb43ded48 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\Systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\582dcdeb43ded48 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\Alexa Internet =>PUP.Optional.VidSaver
HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\PerformerSoft LLC =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\Systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\AppDataLow\Software\SmartBar =>PUP.Optional.SmartBar
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiveSupport =>PUP.Optional.LiveSupport
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\coupoonupeak =>PUP.Optional.Multiplug
C:\ProgramData\RoyailCoupon =>PUP.Optional.Multiplug
C:\ProgramData\Systweak =>PUP.Optional.Systweak
C:\ProgramData\Tarma Installer =>PUP.Optional.Tarma
C:\ProgramData\TxtMAker =>PUP.Optional.Multiplug
C:\Users\3415058\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\3415058\AppData\Roaming\Systweak =>PUP.Optional.Systweak
C:\Users\3415058\AppData\Local\Ilivid Player =>PUP.Optional.Bandoo
C:\Users\3415058\AppData\Local\PackageAware =>PUP.Optional.BearShare
C:\Users\3415058\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard =>PUP.Optional.BitGuard
HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup
HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASAPI32 =>PUP.Optional.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASMANCS =>PUP.Optional.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASAPI32 =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASMANCS =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32 =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS =>PUP.Optional.Datamngr

---\\ Récapitulatif des éléments trouvées sur votre station (19) - 0s
http://www.nicolascoolman.fr/pup-bitguard/ =>PUP.Optional.BitGuard
http://www.nicolascoolman.fr/blog =>PUP.Optional.Heuristic
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak
http://www.nicolascoolman.fr/adware-vidsaver/ =>PUP.Optional.VidSaver
http://www.nicolascoolman.fr/hijacker-babsolution/ =>PUP.Optional.BabSolution
http://www.nicolascoolman.fr/blog =>PUP.Optional.PerformerSoft
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/blog =>PUP.Optional.LiveSupport
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/pup-tarma/ =>PUP.Optional.Tarma
http://www.nicolascoolman.fr/adware-bandoo/ =>PUP.Optional.Bandoo
http://www.nicolascoolman.fr/pup-bearshare/ =>PUP.Optional.BearShare
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster

~ End of the scan, 27203 items in 2412 seconds (1537)(0)()

Publicité


Signaler le contenu de ce document

Publicité