cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.9.7.137 Par Nicolas Coolman (2015/09/7)
~ Démarré par alex (Administrator) (2015/09/09 15:18:19)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\alex\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\alex\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 10240)

---\\ Navigateurs Internet (2) - 1s
GCIE: Google Chrome v45.0.2454.85
MSIE: Internet Explorer v11.0.10240.16431

---\\ Informations sur les produits Windows (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (3) - 3s
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Trusteer Sécurité des points d'accès v3.5.1507.65
Windows Defender W10 (Activate)

---\\ Logiciels de protection et autres (Superflus) (2) - 3s
Ad-Aware Antivirus v11.8.586.8535
Ad-Aware Web Companion v1.1.922.1860

---\\ Surveillance de Logiciels (1) - 3s
Adobe Acrobat Reader DC - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4193.524 MB (16% free)
~ System Restore: Activé (Enable)
~ System drive C: has 819 GB free of 939 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ALEX-HP
~ User Name: alex
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 819 GB free of 939 GB (System)
~ Drive D: has 1 GB free of 14 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 1s

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v45.0.2454.85
MSIE: Internet Explorer v11.0.10240.16431

---\\ Informations sur les produits Windows (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (3) - 5s
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Trusteer Sécurité des points d'accès v3.5.1507.65
Windows Defender W10 (Activate)

---\\ Logiciels de protection et autres (Superflus) (2) - 5s
Ad-Aware Antivirus v11.8.586.8535
Ad-Aware Web Companion v1.1.922.1860

---\\ Surveillance de Logiciels (1) - 6s
Adobe Acrobat Reader DC - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4193.524 MB (16% free)
~ System Restore: Activé (Enable)
~ System drive C: has 819 GB free of 939 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ALEX-HP
~ User Name: alex
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 819 GB free of 939 GB (System)
~ Drive D: has 1 GB free of 14 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 1s
[MD5.F1CBCB7FA6F3B309639AA2D4EF74469C] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [4532304] ©
[MD5.5DED2A3F11AE916C8F2724947E736261] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [59392] ©
[MD5.7718A2A9B2BFB2C8E2BAEB03310CA3FD] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\WINDOWS\System32\Wininit.exe [290312] ©
[MD5.FE32B8423711B4B4378C0BA3C3560ED4] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\WINDOWS\System32\wininet.dll [2741760] ©
[MD5.84B1FE2E4615A89293F1FD4DE52EE26E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [578560] ©
[MD5.ECB1943967424DFB96E03F6A098434EF] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\WINDOWS\System32\sppcomapi.dll [430592] ©
[MD5.C287D0E32771E3222A444DC527A29477] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\WINDOWS\System32\dnsapi.dll [680256] ©
[MD5.BB5BBD0E4D04047585E4ED0F07AA51E7] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\WINDOWS\Syswow64\dnsapi.dll [534064] ©
[MD5.8C795953726C7D2DE72CE4748208C5ED] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.6C12C7E01A4F64E0AA9C88AF66955CC9] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [577888] ©
[MD5.8921DF6060DB5C7700AA48CB12E9EA08] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [28512] ©
[MD5.F2829DC6D292DCAC5029893BB2E9FEE3] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] ©
[MD5.CA160E02F35A61C6F5C681FB4669C519] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [174080] ©
[MD5.25435407D97419627F4B10653433BF2B] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [138240] ©
[MD5.C277A49F8A8295840DEBC9240B75A282] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [80896] ©
[MD5.D4CDEE4A62BDFFF6E8558A9552148EA7] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] ©
[MD5.5D3744E6FDEC1A6FB3FA9B1DD4AF0694] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] ©
[MD5.1DF2C5FD2710A13B07E663A12F0E0EEA] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [415232] ©
[MD5.F0D791348AD254360CC3C3E501CCB745] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [273408] ©
[MD5.466EC5659C02ED53DBD47DC1BC2B8086] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2116448] ©
[MD5.38F1AE32339731F6E5A7281AE8042545] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [96768] ©
[MD5.CA60F6C03611AF1710BC903ED9F566FB] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] ©
[MD5.A32AED8C644734B283A7C9D08D76064D] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [176128] ©
[MD5.28E1E63A1AC65E17B3194238FA2CF3BF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [116576] ©
[MD5.823A237D871CD652C6BFD47BECB6810A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [378720] ©

---\\ Processus lancés (40) - 14s
[MD5.8EE5AA5E63D70E3A073A98E3E6CEFE5B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 341.8.) -- C:\WINDOWS\system32\nvvsvc.exe [933168] [PID.892] ©
[MD5.51C790B123E687033621CEDE56C74803] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [409776] [PID.1000] ©
[MD5.25D41107A93F237755BD9D59954FC292] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1200304] [PID.1208] ©
[MD5.5F309AC157D5C702DD8B85B28B7E4347] - (.IBM Corp. - RapportMgmtService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2255128] [PID.1220]
[MD5.8EE5AA5E63D70E3A073A98E3E6CEFE5B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 341.8.) -- C:\WINDOWS\system32\nvvsvc.exe [933168] [PID.1236] ©
[MD5.347E3CE270009E4C71B26E71ACF98106] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360] [PID.1768] ©
[MD5.31821EC63BDEDE18E64C11F7248B32AB] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624] [PID.1960] ©
[MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2264] ©
[MD5.21931B9C5FDE6087F47F710AC1BE16E9] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192] [PID.2336] ©
[MD5.3DC11A802353401332D49C3CBFBBE5FC] - (.Hewlett-Packard Company - HP Client Services.) -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [291896] [PID.2380] ©
[MD5.BCC4A8B2E2E902F52E7F2E7D8E125765] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [94264] [PID.2456] ©
[MD5.AEE3AF3C697BCC2C10FE01464FE71CDD] - (...) -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.8.586.8535\AdAwareService.exe [712432] [PID.2656]
[MD5.FA4A45C179AB0E0F1A31B9751D4B18D7] - (.Hewlett-Packard Company - LightScribe Service.) -- c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.2776] ©
[MD5.3E60770485DC96E1E6442745EDB10381] - (.Lavasoft Limited - .) -- C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.3.0\LavasoftTcpService.exe [836984] [PID.2796] ©
[MD5.A35679E56E78091E1042A2D7ADBF2958] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe [191000] [PID.2820] ©
[MD5.E14F52B60581EE71849CD45186892046] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568] [PID.2876] ©
[MD5.72DD6225BA6055472522195F96473639] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504] [PID.2972] ©
[MD5.12B7C7668E6441529E087D1D0E1E032A] - (.PDF Complete Inc - Dispatcher.) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768] [PID.3000] ©
[MD5.E1095A89EB4BFCA2AB2F4E1F2BA56612] - (.Logitech Inc. - Logitech LVPrS64H Module..) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe [125464] [PID.3096] ©
[MD5.F5607BA615A64C61E866B5D671E3AAEB] - (.NVIDIA Corporation - NVIDIA Network Stream Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [7548024] [PID.4048] ©
[MD5.4ADFD5C3B2371B4FEB1381E63BF71638] - (.NVIDIA Corporation - NVIDIA Streamer User Agent.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe [21934200] [PID.4524] ©
[MD5.397086C5E5B49608666859AA1F498CA8] - (.IBM Corp. - RapportService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3021080] [PID.5208]
[MD5.3ED2B00729E2D4F974C1418F1B2CDF60] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler.exe [245064] [PID.2432] ©
[MD5.042ED5CED9032D093CACF785BFA39D65] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler64.exe [305992] [PID.3480] ©
[MD5.93B671A2C4043DBB827EA325BE96A2E4] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2446000] [PID.6932] ©
[MD5.463C40BFC0FB8FF59049E2CA78695A40] - (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872] [PID.6632] ©
[MD5.65E8545F1297CD83534C354A7BED1848] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696] [PID.6472] ©
[MD5.B56AD90DBE07BA1E8DDADAEE1607F118] - (...) -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.8.586.8535\AdAwareTray.exe [9558752] [PID.5264]
[MD5.25DBA626713A8C42659023EA365E8229] - (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1303872] [PID.6584] ©
[MD5.F7370C7F6B4F7AFF4D036C719038B382] - (...) -- C:\Users\alex\Winamax\Winamax Poker\Winamax Poker.exe [142336] [PID.8692]
[MD5.5F1C865D9B355B147F64BCA60FBDEC1B] - (.Playtech - Playtech Client Engine Application.) -- C:\Poker\EverestPoker.fr\casino.exe [2816144] [PID.2684]
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.9392] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.10140] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.7980] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.8780] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.1668] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.3048] ©
[MD5.16E1EA189D721E60D17D1BC8E0392702] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.10412] ©
[MD5.277789334263C78BD58231766AD7C015] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\alex\Downloads\ZHPDiag3.exe [1923072] [PID.11232] ©
[MD5.277789334263C78BD58231766AD7C015] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\alex\Downloads\ZHPDiag3.exe [1923072] [PID.7116] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (12) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.fr/
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gfkbfjcbkhnmiignagpkiijohkcdkffb] Yahoo!
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (13) - 2s
M0 - MFSP: prefs.js [alex - 6rs6v1f8.default] https://www.google.fr/
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin License.rtf
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin RelNotes.txt
P2 - EXT FILE: (...) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\searchplugins\google.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (.CinemaProV09.11 - CinemaProGoV09.11.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\172cfb0d00604ca2807d96193776c@90fc73dda8c44c58a81f097d.com
P2 - EXT: (.HD-Quality-v3 - HD-Quality-v3.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\caseyvelez@aol.com
P2 - EXT: (.Plus HD - Plus-HD-l3.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\joyeray@gmail.com
P2 - EXT: (.tab - TheFreeHD-Sport TV V10.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\PLEWM61628944@WIIQRX30104349.com
P2 - EXT: (. - xmldeveloperritedu.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\xmldeveloper@rit.edu
P2 - EXT: (. - AA052FD6366A4771A5910D8DC551585D.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\{AA052FD6-366A-4771-A591-0D8DC551585D}
P2 - EXT: (. - c4080853c6994120b8e0618bff8a4474.) -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\6rs6v1f8.default\extensions\{c4080853-c699-4120-b8e0-618bff8a4474}
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited.) -- C:\Users\alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (21) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer,Proxy Management (5) - 1s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (15518)

---\\ Browser Helper Object de navigateur (BHO) (3) - 0s
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL ©
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll ©
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL ©

---\\ Applications lancées au démarrage du système (11) - 0s
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ©
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe ©
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKCU\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe ©
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE ©
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\alex\AppData\Local\Microsoft\OneDrive\OneDrive.exe ©
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe ©
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe ©
O4 - HKUS\S-1-5-21-3412305893-1811848984-1158127082-1001\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe ©
O4 - HKUS\S-1-5-21-3412305893-1811848984-1158127082-1001\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE ©
O4 - HKUS\S-1-5-21-3412305893-1811848984-1158127082-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\alex\AppData\Local\Microsoft\OneDrive\OneDrive.exe ©

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 178.33.41.181,46.4.70.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 178.33.41.181,46.4.70.20
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241

---\\ Protocole additionnel (24) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: skypec2c [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll ©
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL ©

---\\ Liste des services NT non Microsoft et non désactivés (21) - 3s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe ©
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: HP Auto (HPAuto) . (.Hewlett-Packard - HP Usage Improvement Tracking.) - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe ©
O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe ©
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe ©
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.8.586.8535\AdAwareService.exe
O23 - Service: LavasoftTcpService (LavasoftTcpService) . (.Lavasoft Limited - .) - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.3.0\LavasoftTcpService.exe ©
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe ©
O23 - Service: Process Monitor (LVPrcS64) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe ©
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe ©
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe ©
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 341.8.) - C:\WINDOWS\system32\nvvsvc.exe ©
O23 - Service: PDF Document Manager (pdfcDispatcher) . (.PDF Complete Inc - Dispatcher.) - C:\Program Files (x86)\PDF Complete\pdfsvc.exe ©
O23 - Service: Rapport Management Service (RapportMgmtService) . (.IBM Corp. - RapportMgmtService.) - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ©
O23 - Service: IE Search Set (SearchProtectionService) . (.Copyright © 2014 - SPWindowsService.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ©
O23 - Service: WIN-srvGA (WIN-srvGA) . (...) - C:\Windows\SysWOW64\srvany.exe
O23 - Service: @C:\Program Files (x86)\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (.not file.)

---\\ Tâches planifiées en automatique (96) - 11s
[MD5.00000000000000000000000000000000] [APT] [29672d50-4e4a-4825-b121-e34ecad7b2da-10_user] (...) -- C:\Program Files (x86)\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-10.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [29672d50-4e4a-4825-b121-e34ecad7b2da-5_user] (...) -- C:\Program Files (x86)\winservice86\29672d50-4e4a-4825-b121-e34ecad7b2da-5.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [54330fd5-e242-4570-86ca-129f27d963e3-1-7] (...) -- C:\Program Files (x86)\winservice86\54330fd5-e242-4570-86ca-129f27d963e3-1-7.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [54330fd5-e242-4570-86ca-129f27d963e3-10_user] (...) -- C:\Program Files (x86)\winservice86\54330fd5-e242-4570-86ca-129f27d963e3-10.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [54330fd5-e242-4570-86ca-129f27d963e3-5] (...) -- C:\Program Files (x86)\winservice86\54330fd5-e242-4570-86ca-129f27d963e3-5.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [54330fd5-e242-4570-86ca-129f27d963e3-5_user] (...) -- C:\Program Files (x86)\winservice86\54330fd5-e242-4570-86ca-129f27d963e3-5.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [54330fd5-e242-4570-86ca-129f27d963e3-7] (...) -- C:\Program Files (x86)\winservice86\54330fd5-e242-4570-86ca-129f27d963e3-7.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] ©
[MD5.9B3355B29942AF67F014EA90CE1EA960] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268976] ©
[MD5.00000000000000000000000000000000] [APT] [c11972de-6e25-4edb-9282-88917b9117ef-5_user] (...) -- C:\Program Files (x86)\winservice86\c11972de-6e25-4edb-9282-88917b9117ef-5.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [CreateChoiceProcessTask] (...) -- C:\Windows\System32\browserchoice.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001Core] (...) -- C:\Users\alex\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001UA] (...) -- C:\Users\alex\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [globalUpdateUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (.not file.) [0] =>PUP.Optional.GlobalUpdate
[MD5.00000000000000000000000000000000] [APT] [globalUpdateUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (.not file.) [0] =>PUP.Optional.GlobalUpdate
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore1d06401d5c6f44b] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA1d06401d841baca] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForalex] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [91704] ©
[MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForALEX-HP$] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [91704] ©
[MD5.00000000000000000000000000000000] [APT] [pLnInjR7g54kj6f] (...) -- C:\Users\alex\AppData\Roaming\XrJbt2c\PDxkHWb.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RdJsL76Omb14ZBT] (...) -- C:\Users\alex\AppData\Roaming\MCQsfne\2HkglUY.exe (.not file.) [0]
[MD5.6C794171FC5C0EA47C7A277014ECA9F7] [APT] [RMCreator] (.CyberLink.) -- C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [517416] ©
[MD5.B0663B58C1F90379798D284B2F75633B] [APT] [ServicePlan] (.Copyright © 2006.) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [38456]
[MD5.00000000000000000000000000000000] [APT] [WIN-fdfEfEfAfC] (...) -- C:\Users\alex\AppData\Roaming\~cktpbxr.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-GGfIfEGCfEGbGffIfCfEGC] (...) -- C:\Users\alex\AppData\Roaming\~sthmwmo.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-statsAdmin] (...) -- C:\Users\alex\AppData\Local\Microsoft\WinU\~mqreacz.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-statsSystem] (...) -- C:\Users\alex\AppData\Local\Microsoft\WinU\~qnkngzg.exe (.not file.) [0]
[MD5.16E1EA189D721E60D17D1BC8E0392702] [APT] [{05FD28F2-5E53-4845-B96D-1F7011B8678C}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] ©
[MD5.00000000000000000000000000000000] [APT] [{09946B1A-FCCE-4F05-9935-A1B4574829F9}] (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe (.not file.) [0]
[MD5.5F1C865D9B355B147F64BCA60FBDEC1B] [APT] [{19FE40DC-1D6D-4114-B754-F97F92498643}] (.Playtech.) -- C:\Poker\EverestPoker.fr\casino.exe [2816144]
[MD5.16E1EA189D721E60D17D1BC8E0392702] [APT] [{1E34566B-50E7-4367-81BB-83487E4882D4}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] ©
[MD5.B5ABB203443F9DC024727AF09BF7AF5C] [APT] [{230ADC87-0207-4181-B098-FF08DCBCC313}] (.Copyright (C) 2005.) -- C:\Programs\PartyFrance\PartyFrance.exe [2420224]
[MD5.A30DA2E0E2B7408CBF4428C330577B6D] [APT] [{2DF399FB-9B16-4F8F-A87E-86C44D3A9F1D}] (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\84a079da33f48800.exe [2781864]
[MD5.00000000000000000000000000000000] [APT] [{35F6FBB9-1976-414C-ABB4-1F89DC71DCFD}] (...) -- C:\Program Files (x86)\Football manager 2014\fm.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3C38477F-4DAE-48D7-9891-FCFFD5D936C8}] (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{442A3941-64BB-41A0-B4C8-3296BFEADA81}] (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe (.not file.) [0]
[MD5.16E1EA189D721E60D17D1BC8E0392702] [APT] [{4BBC6F98-6DDA-42DE-92F8-7ABEF78AB6D8}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] ©
[MD5.00000000000000000000000000000000] [APT] [{55056795-8017-4991-BEA7-50152E9BF4D1}] (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5770DE60-EFB0-4ED4-AE38-AAEEFABDD77B}] (...) -- C:\Users\alex\Desktop\fm.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6A51898C-6F60-478B-B519-D264DDD3D221}] (...) -- C:\Users\alex\Downloads\Football manager 2014 Patch 14.2.0.58050 NOSTEAM\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7F342CCF-3F41-40CE-8F34-28F3A82C1A70}] (...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{85F3EBA9-363E-4320-9B88-645B0B679E0F}] (...) -- C:\Users\alex\Downloads\Football manager 2014 Patch 14.2.0.58050 NOSTEAM\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C3FDDCA0-AD41-445B-953B-0F3F149C6799}] (...) -- C:\Program Files (x86)\VaeVictis\Victory\Victory.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C64AA12F-C63F-4484-B740-8CE500359C69}] (...) -- C:\Program Files (x86)\Football manager 2014\fm.exe (.not file.) [0]
[MD5.16E1EA189D721E60D17D1BC8E0392702] [APT] [{D54E5E23-3C13-463C-ADBE-1797E51D3D01}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] ©
[MD5.D6720CBF68B284256FB167E56CC33EDB] [APT] [{DD9234B1-B810-448C-8015-D3ADC392DBE8}] (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\c2d638e78bc8fdab.exe [2782376]
[MD5.B5ABB203443F9DC024727AF09BF7AF5C] [APT] [{E0D7FD53-D443-4E19-823A-47652DCE3E1C}] (.Copyright (C) 2005.) -- C:\Programs\PartyFrance\PartyFrance.exe [2420224]
[MD5.A1E173C041282CC734AE04B6E14923B6] [APT] [{F612292D-E538-49F9-913E-32156B80A465}] (.Playtech.) -- C:\Poker\BetclicPoker.fr\casino.exe [2975888]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] ©
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-1-7 - (...) -- C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-1-7.job [3454] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-10_user - (...) -- C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-10_user.job [2092] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-5 - (...) -- C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5.job [2426] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-5_user - (...) -- C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5_user.job [2426] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-7 - (...) -- C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-7.job [5162] =>PUP.Optional.CrossRider
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001Core - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001Core.job [902]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001UA - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001UA.job [924]
O39 - APT: globalUpdateUpdateTaskMachineCore - (...) -- C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job [944] =>PUP.Optional.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (...) -- C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job [948] =>PUP.Optional.GlobalUpdate
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1060] ©
O39 - APT: GoogleUpdateTaskMachineCore1d06401d5c6f44b - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d06401d5c6f44b.job [1088] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1064] ©
O39 - APT: GoogleUpdateTaskMachineUA1d06401d841baca - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d06401d841baca.job [1092] ©
O39 - APT: HPCeeScheduleForALEX-HP$ - (.Hewlett-Packard.) -- C:\WINDOWS\Tasks\HPCeeScheduleForALEX-HP$.job [342] ©
O39 - APT: HPCeeScheduleForalex - (.Hewlett-Packard.) -- C:\WINDOWS\Tasks\HPCeeScheduleForalex.job [328] ©
O39 - APT: 29672d50-4e4a-4825-b121-e34ecad7b2da-10_user - (...) -- C:\WINDOWS\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user [4230] =>PUP.Optional.CrossRider
O39 - APT: 29672d50-4e4a-4825-b121-e34ecad7b2da-5_user - (...) -- C:\WINDOWS\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user [4564] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-1-7 - (...) -- C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-1-7 [6594] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-10_user - (...) -- C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-10_user [5222] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-5 - (...) -- C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5 [5566] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-5_user - (...) -- C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5_user [5558] =>PUP.Optional.CrossRider
O39 - APT: 54330fd5-e242-4570-86ca-129f27d963e3-7 - (...) -- C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-7 [8302] =>PUP.Optional.CrossRider
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task [3996] ©
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [4050] ©
O39 - APT: c11972de-6e25-4edb-9282-88917b9117ef-5_user - (...) -- C:\WINDOWS\System32\Tasks\c11972de-6e25-4edb-9282-88917b9117ef-5_user [4564] =>PUP.Optional.CrossRider
O39 - APT: CreateChoiceProcessTask - (...) -- C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask [3642]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001Core - (...) -- C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001Core [3640]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001UA - (...) -- C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3412305893-1811848984-1158127082-1001UA [4008]
O39 - APT: globalUpdateUpdateTaskMachineCore - (...) -- C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore [3802] =>PUP.Optional.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (...) -- C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA [4056] =>PUP.Optional.GlobalUpdate
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3918] ©
O39 - APT: GoogleUpdateTaskMachineCore1d06401d5c6f44b - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d06401d5c6f44b [3948] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4170] ©
O39 - APT: GoogleUpdateTaskMachineUA1d06401d841baca - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d06401d841baca [4180] ©
O39 - APT: HPCeeScheduleForalex - (.Hewlett-Packard.) -- C:\WINDOWS\System32\Tasks\HPCeeScheduleForalex [3216] ©
O39 - APT: HPCeeScheduleForALEX-HP$ - (.Hewlett-Packard.) -- C:\WINDOWS\System32\Tasks\HPCeeScheduleForALEX-HP$ [3244] ©
O39 - APT: pLnInjR7g54kj6f - (...) -- C:\WINDOWS\System32\Tasks\pLnInjR7g54kj6f [3390]
O39 - APT: RdJsL76Omb14ZBT - (...) -- C:\WINDOWS\System32\Tasks\RdJsL76Omb14ZBT [3388]
O39 - APT: RMCreator - (.CyberLink.) -- C:\WINDOWS\System32\Tasks\RMCreator [3400] ©
O39 - APT: ServicePlan - (.Copyright © 2006.) -- C:\WINDOWS\System32\Tasks\ServicePlan [3502]
O39 - APT: WIN-fdfEfEfAfC - (...) -- C:\WINDOWS\System32\Tasks\WIN-fdfEfEfAfC [3334]
O39 - APT: WIN-GGfIfEGCfEGbGffIfCfEGC - (...) -- C:\WINDOWS\System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC [3334]
O39 - APT: WIN-statsAdmin - (...) -- C:\WINDOWS\System32\Tasks\WIN-statsAdmin [3456]
O39 - APT: WIN-statsSystem - (...) -- C:\WINDOWS\System32\Tasks\WIN-statsSystem [3386]

---\\ Logiciels installés (98) - 13s
O42 - Logiciel: NVIDIA Display Control Panel - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIA Display Control Panel ©
O42 - Logiciel: WinRAR 4.11 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver ©
O42 - Logiciel: AdAwareUpdater - (.Lavasoft.) [HKLM][64Bits] -- {18A24EC3-2BA0-4438-AA5C-A3CF81194D22} ©
O42 - Logiciel: Ad-Aware Antivirus - (.Lavasoft.) [HKLM][64Bits] -- {18A24EC3-2BA0-4438-AA5C-A3CF81194D22}_AdAwareUpdater ©
O42 - Logiciel: 7-Zip 9.20 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0920-000001000000} ©
O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} ©
O42 - Logiciel: AntimalwareEngine - (.Lavasoft.) [HKLM][64Bits] -- {6E5FAEC8-C3C1-44E8-B8DE-CE3F9568BF85} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.11761. - (.Microsoft Corporation.) [HKLM][64Bits] -- {986E003C-E56D-5A47-110E-D3C81F0E8535} ©
O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM][64Bits] -- {987FE247-4E69-4A2E-A961-D14F901FDBF6} ©
O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM][64Bits] -- {A40F60B1-F1E1-452E-96A5-FF97F9A2D102} ©
O42 - Logiciel: NVIDIA Pilote 3D Vision 341.81 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision ©
O42 - Logiciel: NVIDIA Pilote graphique 341.81 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver ©
O42 - Logiciel: NVIDIA GeForce Experience 2.5.14.5 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience ©
O42 - Logiciel: NVIDIA Pilote du contrôleur 3D Vision 340.50 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB ©
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.13.1220 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX ©
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.30.1 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver ©
O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} ©
O42 - Logiciel: AdAwareInstaller - (.Lavasoft.) [HKLM][64Bits] -- {C239D953-F683-4124-BD02-1ED1F353244D} ©
O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} ©
O42 - Logiciel: HP Vision Hardware Diagnostics - (.Hewlett-Packard.) [HKLM][64Bits] -- {D79A02E9-6713-4335-9668-AAC7474C0C0E} ©
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6} ©
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E} ©
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} ©
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} ©
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095} ©
O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE} ©
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} ©
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906 ©
O42 - Logiciel: MusicStation - (.Hewlett-Packard.) [HKLM][64Bits] -- MusicStationNetstaller ©
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo ©
O42 - Logiciel: PartyPoker.fr - (.PartyFrance.) [HKLM][64Bits] -- PartyPokerFr
O42 - Logiciel: PDF Complete Special Edition - (.PDF Complete, Inc.) [HKLM][64Bits] -- PDF Complete ©
O42 - Logiciel: PKR - (.PKR Ltd.) [HKLM][64Bits] -- PKR ©
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr ©
O42 - Logiciel: Trusteer Sécurité des points d'accès - (.Trusteer.) [HKLM][64Bits] -- Rapport_msi ©
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} ©
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} ©
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM][64Bits] -- {1DD81E7D-0D28-4CEB-87B2-C041A4FCB215} ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} ©
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} ©
O42 - Logiciel: PictureMover - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {264FE20A-757B-492a-B0C3-4009E2997D8A} ©
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3} ©
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {3023EBDA-BF1B-4831-B347-E5018555F26E} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {31B9D218-FED2-4C6C-B19F-7294FFC130B0} ©
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} ©
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E} ©
O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM][64Bits] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB} ©
O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {53469506-A37E-4314-A9D9-38724EC23A75} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ©
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ©
O42 - Logiciel: Skype™ 7.8 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} ©
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} ©
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM][64Bits] -- {6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} ©
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {80407BA7-7763-4395-AB98-5233F1B34E65} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: HP Product Detection - (.HP.) [HKLM][64Bits] -- {879F7C80-BCA3-4A11-BDB1-658252ECD7E0} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: Ad-Aware Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {902C3D36-9254-437D-98AC-913B78E60864} ©
O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {902C3D36-9254-437D-98AC-913B78E60864}_WebCompanion ©
O42 - Logiciel: LavasoftTcpService - (.Lavasoft.) [HKLM][64Bits] -- {90CF05DE-735F-42AB-A52A-F447FDFBE207} ©
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM][64Bits] -- {91A34181-9FAD-43AB-A35F-E7A8945B7E1C} ©
O42 - Logiciel: HP Product Detection - (.HP.) [HKLM][64Bits] -- {A436F67F-687E-4736-BD2B-537121A804CF} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} ©
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} ©
O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} ©
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} ©
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {D12E3E7F-1B13-4933-A915-16C7DD37A095} ©
O42 - Logiciel: PhotoNow! - (.CyberLink HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Lavasoft
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\LightScribe
HKLM\SOFTWARE\Wow6432Node\LogiShrd
HKLM\SOFTWARE\Wow6432Node\Logitech
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\Wow6432Node\MediaCoder
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NewspaperDirect
HKLM\SOFTWARE\Wow6432Node\Notepad
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\PDFComplete
HKLM\SOFTWARE\Wow6432Node\PKR
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SmartPurpleConf
HKLM\SOFTWARE\Wow6432Node\Software
HKLM\SOFTWARE\Wow6432Node\SpeedBit
HKLM\SOFTWARE\Wow6432Node\Sports Interactive
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\TENCENT =>PUP.Optional.TencentAddressBar
HKLM\SOFTWARE\Wow6432Node\troll
HKLM\SOFTWARE\Wow6432Node\Trusteer
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Win32 Services
HKLM\SOFTWARE\Wow6432Node\Winamax
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\winservice86-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\WinU
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\49084InstEnd
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AlterGeo
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\AvreliyGames
HKCU\SOFTWARE\AVS4YOU
HKCU\SOFTWARE\Badoo
HKCU\SOFTWARE\BetclicPoker.fr
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\EasyBits
HKCU\SOFTWARE\EverestPoker.fr
HKCU\SOFTWARE\Full Tilt Poker
HKCU\SOFTWARE\Full Tilt Poker.fr
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HD_Quality_FR =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HookNetwork
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IGA
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Kromtech
HKCU\SOFTWARE\Leadertech
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch
HKCU\SOFTWARE\LogiShrd
HKCU\SOFTWARE\Logitech
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Magnet
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nice-Games
HKCU\SOFTWARE\Norton
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PartyFrance =>Casino.OnlineGames
HKCU\SOFTWARE\PASG
HKCU\SOFTWARE\PDFComplete
HKCU\SOFTWARE\PressReader
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Safer Networking Limited
HKCU\SOFTWARE\SCS Software
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\SOFT32
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Trusteer
HKCU\SOFTWARE\VaeVictis
HKCU\SOFTWARE\ValuSoft
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WildTangent
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\winservice86-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\WinServices
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\Zyrax Software
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-1
HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Amazon
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (839) - 42s
O43 - CFD: 2015/04/24 14:21:59 - [] D -- C:\Program Files (x86)\974be818-95d1-421a-bcd1-71f58442e441 =>PUP.Optional.CrossRider
O43 - CFD: 2015/07/14 08:42:26 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/05/10 19:03:28 - [] D -- C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 2012/05/19 21:48:06 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2014/05/18 16:44:54 - [0] D -- C:\Program Files (x86)\AVS4YOU
O43 - CFD: 2015/05/10 19:03:28 - [0] D -- C:\Program Files (x86)\c0194550-641c-4a9c-a0c6-bffd5741a694 =>PUP.Optional.CrossRider
O43 - CFD: 2015/04/24 14:24:05 - [] D -- C:\Program Files (x86)\c3d16b12-4ffc-4027-9a16-32c2578fb6ad =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/19 23:05:40 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2011/04/06 12:42:29 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 2015/05/09 17:50:48 - [] D -- C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 2014/12/13 16:17:48 - [] D -- C:\Program Files (x86)\Football Manager 2015
O43 - CFD: 2015/09/09 14:30:26 - [] D -- C:\Program Files (x86)\Full Tilt Poker
O43 - CFD: 2015/06/07 00:24:18 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/04/24 14:24:12 - [0] D -- C:\Program Files (x86)\HD-Quality-v3
O43 - CFD: 2013/04/16 16:52:59 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2012/01/05 20:06:12 - [] D -- C:\Program Files (x86)\Hp
O43 - CFD: 2015/01/06 20:33:46 - [] D -- C:\Program Files (x86)\HP Games
O43 - CFD: 2015/04/19 12:14:17 - [0] D -- C:\Program Files (x86)\IncrementInstance
O43 - CFD: 2015/04/15 15:50:26 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/08/07 17:19:50 - [] D -- C:\Program Files (x86)\Internet HKCU\SOFTWO43 - CFD: 2015/03/21 18:HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\winservice86-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\WinServices
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\Zyrax Software
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-1
HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Amazon
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (839) - 40s
O43 - CFD: 2015/04/24 14:21:59 - [] D -- C:\Program Files (x86)\974be818-95d1-421a-bcd1-71f58442e441 =>PUP.Optional.CrossRider
O43 - CFD: 2015/07/14 08:42:26 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/05/10 19:03:28 - [] D -- C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 2012/05/19 21:48:06 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2014/05/18 16:44:54 - [0] D -- C:\Program Files (x86)\AVS4YOU
O43 - CFD: 2015/05/10 19:03:28 - [0] D -- C:\Program Files (x86)\c0194550-641c-4a9c-a0c6-bffd5741a694 =>PUP.Optional.CrossRider
O43 - CFD: 2015/04/24 14:24:05 - [] D -- C:\Program Files (x86)\c3d16b12-4ffc-4027-9a16-32c2578fb6ad =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/19 23:05:40 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2011/04/06 12:42:29 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 2015/05/09 17:50:48 - [] D -- C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 2014/12/13 16:17:48 - [] D -- C:\Program Files (x86)\Football Manager 2015
O43 - CFD: 2015/09/09 14:30:26 - [] D -- C:\Program Files (x86)\Full Tilt Poker
O43 - CFD: 2015/06/07 00:24:18 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/04/24 14:24:12 - [0] D -- C:\Program Files (x86)\HD-Quality-v3
O43 - CFD: 2013/04/16 16:52:59 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2012/01/05 20:06:12 - [] D -- C:\Program Files (x86)\Hp
O43 - CFD: 2015/01/06 20:33:46 - [] D -- C:\Program Files (x86)\HP Games
O43 - CFD: 2015/04/19 12:14:17 - [0] D -- C:\Program Files (x86)\IncrementInstance
O43 - CFD: 2015/04/15 15:50:26 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/08/07 17:19:50 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/03/21 18:39:44 - [] D -- C:\Program Files (x86)\Lavasoft
O43 - CFD: 2014/01/22 21:13:19 - [] D -- C:\Program Files (x86)\LibreOffice 4
O43 - CFD: 2014/05/16 22:30:26 - [] D -- C:\Program Files (x86)\Logitech
O43 - CFD: 2013/05/03 23:03:33 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2014/01/22 15:05:29 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2015/08/27 00:16:17 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET
O43 - CFD: 2014/05/16 23:06:34 - [] D -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 2014/01/22 15:04:54 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/08/14 23:38:05 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2011/04/06 12:58:32 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2014/01/22 15:06:28 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2015/08/04 20:30:59 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/01/13 02:06:46 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/08/04 20:39:40 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2011/10/16 03:18:47 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2015/08/25 21:32:34 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2011/10/15 13:27:01 - [] RD -- C:\Program Files (x86)\Online Services
O43 - CFD: 2014/11/09 19:32:43 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2011/04/06 12:48:40 - [] D -- C:\Program Files (x86)\PDF Complete
O43 - CFD: 2011/04/06 12:49:12 - [] D -- C:\Program Files (x86)\PictureMover
O43 - CFD: 2015/07/14 08:48:58 - [] D -- C:\Program Files (x86)\PKR
O43 - CFD: 2015/07/25 10:13:23 - [] D -- C:\Program Files (x86)\PokerStars.FR
O43 - CFD: 2012/04/06 11:59:43 - [] D -- C:\Program Files (x86)\PostgreSQL
O43 - CFD: 2012/04/06 12:47:00 - [0] D -- C:\Program Files (x86)\PSQLINSTALL
O43 - CFD: 2011/04/06 12:34:39 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2015/08/04 20:49:32 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/08/19 23:05:41 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/11/09 21:26:07 - [] D -- C:\Program Files (x86)\Software =>PUP.Optional.Boxore
O43 - CFD: 2015/08/20 18:41:50 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 2014/12/11 19:59:10 - [] D -- C:\Program Files (x86)\Steam
O43 - CFD: 2011/04/06 12:34:51 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2015/03/14 14:43:24 - [] D -- C:\Program Files (x86)\Trusteer
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2013/12/08 19:57:53 - [0] D -- C:\Program Files (x86)\VaeVictis
O43 - CFD: 2015/03/25 18:13:04 - [0] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2015/01/06 20:30:45 - [0] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 2015/07/10 18:23:55 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2013/12/11 22:13:25 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2015/08/04 20:31:01 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/07/10 18:23:55 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2015/07/10 13:04:26 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2015/07/10 13:04:22 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2015/07/10 18:23:55 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2015/07/10 13:04:26 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2015/08/04 20:31:01 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2015/07/10 13:04:22 - [] SD -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/08/04 20:39:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/04 20:39:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
O43 - CFD: 2015/08/04 20:39:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2015/08/28 22:46:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
O43 - CFD: 2015/08/04 20:31:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
O43 - CFD: 2015/07/10 13:04:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Manuel de l’utilisateur
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/08/13 18:30:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2015/08/25 21:32:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2015/08/04 20:39:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
O43 - CFD: 2015/08/04 20:39:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PartyPoker.fr
O43 - CFD: 2015/08/04 20:39:44 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools
O43 - CFD: 2015/08/04 20:39:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Complete
O43 - CFD: 2015/08/04 20:39:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
O43 - CFD: 2015/08/04 20:39:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2015/08/19 23:05:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/07/10 18:28:36 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/09/02 00:14:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Sécurité des points d'accès
O43 - CFD: 2015/08/04 20:39:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2015/03/25 17:03:11 - [] D -- C:\ProgramData\05aaabf9150243ab97605a4c8a7b05cd
O43 - CFD: 2015/03/25 17:22:26 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2012/05/19 21:48:05 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2015/07/10 14:21:38 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/11/23 11:10:41 - [] D -- C:\ProgramData\atjs
O43 - CFD: 2015/04/16 18:44:45 - [] D -- C:\ProgramData\Avanquest Software
O43 - CFD: 2014/05/18 15:56:51 - [] D -- C:\ProgramData\AVS4YOU
O43 - CFD: 2014/03/01 15:47:39 - [] D -- C:\ProgramData\BlueStacks
O43 - CFD: 2015/08/04 21:03:49 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/04/19 11:10:18 - [0] D -- C:\ProgramData\c2c244dc00001c30
O43 - CFD: 2012/06/02 11:00:04 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2015/07/10 13:04:22 - [0] D -- C:\ProgramData\Comms
O43 - CFD: 2013/10/01 10:33:44 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2013/10/01 10:49:22 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2015/07/10 14:21:38 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2015/07/10 14:21:38 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/04/15 15:51:01 - [] D -- C:\ProgramData\DriverGenius =>Superfluous.DriverGenius
O43 - CFD: 2015/04/19 11:30:33 - [] D -- C:\ProgramData\earnsale
O43 - CFD: 2013/12/11 21:04:01 - [] D -- C:\ProgramData\Easybits
O43 - CFD: 2015/08/04 21:03:49 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2013/04/05 21:21:27 - [] D -- C:\ProgramData\Flood Light Games
O43 - CFD: 2014/12/10 20:06:52 - [] D -- C:\ProgramData\Google
O43 - CFD: 2013/04/16 16:52:59 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2015/03/20 22:04:21 - [] D -- C:\ProgramData\InstallMate =>PUP.Optional.Tarma
O43 - CFD: 2015/03/21 18:37:44 - [] D -- C:\ProgramData\Lavasoft
O43 - CFD: 2014/05/18 14:44:29 - [] D -- C:\ProgramData\LogiShrd
O43 - CFD: 2014/01/22 12:24:31 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/08/04 21:03:49 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/08/15 17:09:48 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/09/09 11:27:07 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/08/04 21:10:35 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 2015/08/04 21:03:49 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/08/28 16:25:09 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2012/01/03 18:13:57 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2011/04/06 12:59:43 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2015/09/09 11:48:36 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2015/08/27 19:08:17 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2015/03/25 17:48:55 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/09/03 19:36:04 - [] D -- C:\ProgramData\PDFC
O43 - CFD: 2011/04/06 12:49:12 - [] D -- C:\ProgramData\PictureMover
O43 - CFD: 2013/04/06 10:54:54 - [] D -- C:\ProgramData\PlayFirst
O43 - CFD: 2011/04/06 12:35:35 - [] D -- C:\ProgramData\Ralink Driver
O43 - CFD: 2013/04/16 16:15:15 - [] D -- C:\ProgramData\Recovery
O43 - CFD: 2015/07/10 18:28:36 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/04/06 15:28:41 - [] D -- C:\ProgramData\Sandlot Games
O43 - CFD: 2015/08/19 23:05:51 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2015/08/15 20:16:27 - [0] D -- C:\ProgramData\SmartPurple
O43 - CFD: 2014/08/08 14:20:05 - [] D -- C:\ProgramData\Software =>PUP.Optional.Boxore
O43 - CFD: 2015/07/10 13:04:22 - [0] D -- C:\ProgramData\SoftwareDistribution
O43 - CFD: 2015/08/20 18:40:34 - [] D -- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 2015/07/10 14:21:38 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2011/10/18 19:52:22 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2014/01/22 21:16:51 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2015/07/10 14:21:38 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/03/14 14:39:53 - [] D -- C:\ProgramData\Trusteer
O43 - CFD: 2015/07/10 14:22:45 - [] D -- C:\ProgramData\USOPrivate
O43 - CFD: 2015/07/10 14:22:45 - [] D -- C:\ProgramData\USOShared
O43 - CFD: 2011/10/26 14:37:09 - [] D -- C:\ProgramData\VirtualizedApplications
O43 - CFD: 2013/04/13 15:37:13 - [] D -- C:\ProgramData\Wild Tangent
O43 - CFD: 2015/01/06 20:30:47 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2012/04/06 12:47:16 - [] D -- C:\ProgramData\XHEO INC
O43 - CFD: 2015/06/05 16:49:06 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2015/07/14 08:42:25 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2012/05/19 21:48:15 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2014/05/18 16:44:54 - [] D -- C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 2011/04/06 12:29:45 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2011/04/06 12:50:15 - [] AD -- C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 2014/05/16 22:26:13 - [] D -- C:\Program Files (x86)\Common Files\LogiShrd
O43 - CFD: 2011/04/06 12:49:18 - [] AD -- C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 2015/08/04 20:30:58 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2015/07/10 13:04:26 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/08/19 23:05:41 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2015/08/04 20:30:58 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2012/01/03 17:01:25 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2015/07/10 18:23:55 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2011/04/06 12:57:02 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2015/06/05 16:52:37 - [] D -- C:\Users\alex\AppData\Roaming\Adobe
O43 - CFD: 2015/03/23 03:57:32 - [] D -- C:\Users\alex\AppData\Roaming\apgPfCP
O43 - CFD: 2012/05/20 12:08:39 - [] D -- C:\Users\alex\AppData\Roaming\Apple Computer
O43 - CFD: 2015/07/14 13:06:35 - [] D -- C:\Users\alex\AppData\Roaming\AutoTransfer
O43 - CFD: 2014/05/18 15:56:47 - [] D -- C:\Users\alex\AppData\Roaming\AVS4YOU
O43 - CFD: 2015/04/24 14:44:29 - [] D -- C:\Users\alex\AppData\Roaming\B10D2A80-1424568789-1016-B018-A23496749C03
O43 - CFD: 2015/03/21 13:40:46 - [] D -- C:\Users\alex\AppData\Roaming\B10D2A80-1426873293-1016-B018-A23496749C03
O43 - CFD: 2015/04/24 14:45:00 - [] D -- C:\Users\alex\AppData\Roaming\B10D2A80-1426976503-1016-B018-A23496749C03
O43 - CFD: 2015/04/24 14:45:31 - [] D -- C:\Users\alex\AppData\Roaming\B10D2A80-1427121078-1016-B018-A23496749C03
O43 - CFD: 2015/03/15 03:00:29 - [] D -- C:\Users\alex\AppData\Roaming\BitTorrent
O43 - CFD: 2013/07/21 18:03:42 - [0] D -- C:\Users\alex\AppData\Roaming\Broad Intelligence
O43 - CFD: 2013/02/16 22:30:03 - [] D -- C:\Users\alex\AppData\Roaming\cef-cache
O43 - CFD: 2015/02/05 20:20:50 - [] D -- C:\Users\alex\AppData\Roaming\com.winamax.chat
O43 - CFD: 2014/09/15 23:10:35 - [] D -- C:\Users\alex\AppData\Roaming\com.zoosk.Desktop
O43 - CFD: 2014/09/15 23:10:38 - [] D -- C:\Users\alex\AppData\Roaming\com.zoosk.Desktop.096E6A67431258A508A2446A847B240591D2C99B.1
O43 - CFD: 2013/01/07 18:52:47 - [] D -- C:\Users\alex\AppData\Roaming\CyberLink
O43 - CFD: 2014/01/22 18:53:12 - [] D -- C:\Users\alex\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2013/04/05 21:21:27 - [] D -- C:\Users\alex\AppData\Roaming\Flood Light Games
O43 - CFD: 2012/04/16 14:09:38 - [] D -- C:\Users\alex\AppData\Roaming\GetRightToGo
O43 - CFD: 2012/03/28 12:09:47 - [] D -- C:\Users\alex\AppData\Roaming\Hewlett-Packard
O43 - CFD: 2012/04/06 12:49:29 - [] D -- C:\Users\alex\AppData\Roaming\HoldemManager
O43 - CFD: 2013/04/16 16:15:17 - [] D -- C:\Users\alex\AppData\Roaming\HP Support Assistant
O43 - CFD: 2012/11/19 17:44:22 - [] D -- C:\Users\alex\AppData\Roaming\hpqLog
O43 - CFD: 2015/08/04 21:18:40 - [] D -- C:\Users\alex\AppData\Roaming\HpUpdate
O43 - CFD: 2011/10/15 13:31:53 - [] D -- C:\Users\alex\AppData\Roaming\Identities
O43 - CFD: 2015/03/21 18:37:44 - [] D -- C:\Users\alex\AppData\Roaming\Lavasoft
O43 - CFD: 2015/03/20 20:04:18 - [] D -- C:\Users\alex\AppData\Roaming\LavasoftStatistics
O43 - CFD: 2014/05/16 22:30:11 - [] D -- C:\Users\alex\AppData\Roaming\Leadertech
O43 - CFD: 2014/10/24 19:29:23 - [0] D -- C:\Users\alex\AppData\Roaming\Learnpulse
O43 - CFD: 2014/01/22 12:55:29 - [] D -- C:\Users\alex\AppData\Roaming\LibreOffice
O43 - CFD: 2011/10/15 13:42:01 - [] D -- C:\Users\alex\AppData\Roaming\Macromedia
O43 - CFD: 2015/04/24 14:46:01 - [] D -- C:\Users\alex\AppData\Roaming\MCQsfne
O43 - CFD: 2009/07/14 09:44:38 - [0] D -- C:\Users\alex\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/08/04 21:15:08 - [] SD -- C:\Users\alex\AppData\Roaming\Microsoft
O43 - CFD: 2015/01/01 03:58:23 - [] D -- C:\Users\alex\AppData\Roaming\Mozilla
O43 - CFD: 2011/10/26 14:40:45 - [] D -- C:\Users\alex\AppData\Roaming\Mozilla-Cache
O43 - CFD: 2015/08/22 17:26:59 - [] D -- C:\Users\alex\AppData\Roaming\nationzoom =>PUP.Optional.NationZoom
O43 - CFD: 2013/07/10 18:02:56 - [] D -- C:\Users\alex\AppData\Roaming\NewspaperDirect
O43 - CFD: 2013/07/29 12:46:10 - [] D -- C:\Users\alex\AppData\Roaming\NVIDIA
O43 - CFD: 2015/04/24 14:52:46 - [] D -- C:\Users\alex\AppData\Roaming\O8Fe1qH
O43 - CFD: 2014/11/09 19:32:32 - [0] D -- C:\Users\alex\AppData\Roaming\Opera Software
O43 - CFD: 2014/10/26 20:11:26 - [] D -- C:\Users\alex\AppData\Roaming\Oracle
O43 - CFD: 2012/09/07 01:28:32 - [] D -- C:\Users\alex\AppData\Roaming\PartyFrance
O43 - CFD: 2011/10/15 13:33:10 - [] D -- C:\Users\alex\AppData\Roaming\PictureMover
O43 - CFD: 2013/05/11 22:08:51 - [] D -- C:\Users\alex\AppData\Roaming\player
O43 - CFD: 2013/04/06 10:54:54 - [] D -- C:\Users\alex\AppData\Roaming\PlayFirst
O43 - CFD: 2015/09/08 22:28:03 - [] D -- C:\Users\alex\AppData\Roaming\Skype
O43 - CFD: 2014/01/22 14:47:51 - [] D -- C:\Users\alex\AppData\Roaming\SoftGrid Client
O43 - CFD: 2013/10/01 21:04:59 - [] D -- C:\Users\alex\AppData\Roaming\Sports Interactive
O43 - CFD: 2011/10/25 13:05:48 - [0] D -- C:\Users\alex\AppData\Roaming\TP
O43 - CFD: 2012/01/03 16:22:51 - [] D -- C:\Users\alex\AppData\Roaming\updatetool
O43 - CFD: 2013/11/05 23:06:11 - [] D -- C:\Users\alex\AppData\Roaming\wam
O43 - CFD: 2015/02/05 20:19:39 - [] D -- C:\Users\alex\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 2015/01/06 20:24:15 - [] D -- C:\Users\alex\AppData\Roaming\WildTangent
O43 - CFD: 2011/10/17 00:55:05 - [] D -- C:\Users\alex\AppData\Roaming\WinBatch
O43 - CFD: 2012/01/03 00:27:54 - [0] D -- C:\Users\alex\AppData\Roaming\Windows Live Writer
O43 - CFD: 2012/06/02 11:02:49 - [] D -- C:\Users\alex\AppData\Roaming\WinRAR
O43 - CFD: 2015/04/24 14:53:18 - [] D -- C:\Users\alex\AppData\Roaming\XrJbt2c
O43 - CFD: 2015/03/24 23:43:16 - [] D -- C:\Users\alex\AppData\Roaming\XT1CaMm
O43 - CFD: 2013/07/28 13:32:34 - [] D -- C:\Users\alex\AppData\Roaming\YoudaGames
O43 - CFD: 2015/09/09 15:18:44 - [] D -- C:\Users\alex\AppData\Roaming\ZHP
O43 - CFD: 2015/05/09 17:49:42 - [] D -- C:\Users\alex\AppData\Roaming\_MDLogs
O43 - CFD: 2015/06/05 16:52:07 - [] D -- C:\Users\alex\AppData\Local\Adobe
O43 - CFD: 2012/05/19 21:48:08 - [] D -- C:\Users\alex\AppData\Local\Apple
O43 - CFD: 2012/07/09 01:09:21 - [] D -- C:\Users\alex\AppData\Local\Apple Computer
O43 - CFD: 2015/08/04 20:16:46 - [0] SHD -- C:\Users\alex\AppData\Local\Application Data
O43 - CFD: 2013/05/03 23:07:23 - [] D -- C:\Users\alex\AppData\Local\Apps
O43 - CFD: 2012/02/08 14:46:06 - [] D -- C:\Users\alex\AppData\Local\Ares
O43 - CFD: 2013/10/15 01:47:52 - [] D -- C:\Users\alex\AppData\Local\avgchrome
O43 - CFD: 2015/04/24 14:36:13 - [] D -- C:\Users\alex\AppData\Local\B10D2A80-1424568939-1016-B018-A23496749C03
O43 - CFD: 2015/04/24 14:37:00 - [] D -- C:\Users\alex\AppData\Local\B10D2A80-1426885504-1016-B018-A23496749C03
O43 - CFD: 2015/04/24 14:37:48 - [] D -- C:\Users\alex\AppData\Local\B10D2A80-1427134545-1016-B018-A23496749C03
O43 - CFD: 2014/07/11 20:41:07 - [] D -- C:\Users\alex\AppData\Local\cache
O43 - CFD: 2015/07/16 21:42:31 - [] D -- C:\Users\alex\AppData\Local\CEF
O43 - CFD: 2013/07/29 13:23:45 - [] D -- C:\Users\alex\AppData\Local\Chat Republic Games
O43 - CFD: 2013/10/01 11:35:39 - [] D -- C:\Users\alex\AppData\Local\Chromium
O43 - CFD: 2014/08/07 18:13:18 - [] D -- C:\Users\alex\AppData\Local\com =>PUP.Optional.Generic
O43 - CFD: 2015/08/15 08:43:24 - [] D -- C:\Users\alex\AppData\Local\Comms
O43 - CFD: 2015/07/31 21:07:30 - [] D -- C:\Users\alex\AppData\Local\CrashDumps
O43 - CFD: 2013/07/31 15:41:53 - [] D -- C:\Users\alex\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 2012/04/04 13:08:16 - [] D -- C:\Users\alex\AppData\Local\CyberLink
O43 - CFD: 2015/09/02 19:35:13 - [] D -- C:\Users\alex\AppData\Local\Diagnostics
O43 - CFD: 2015/09/02 19:35:15 - [] D -- C:\Users\alex\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/10 22:27:17 - [0] SHD -- C:\Users\alex\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/10 22:27:17 - [0] SHD -- C:\Users\alex\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/10 22:27:17 - [0] SHD -- C:\Users\alex\AppData\Local\EmieUserList
O43 - CFD: 2015/09/09 14:30:26 - [] D -- C:\Users\alex\AppData\Local\FullTiltPoker
O43 - CFD: 2012/03/05 16:10:31 - [] D -- C:\Users\alex\AppData\Local\FullTiltPoker.fr
O43 - CFD: 2015/06/07 00:24:42 - [] D -- C:\Users\alex\AppData\Local\Google
O43 - CFD: 2015/06/01 22:30:50 - [] D -- C:\Users\alex\AppData\Local\GWX
O43 - CFD: 2014/12/17 16:05:57 - [] D -- C:\Users\alex\AppData\Local\Hewlett-Packard
O43 - CFD: 2011/10/15 13:32:09 - [] D -- C:\Users\alex\AppData\Local\Hewlett-Packard_Company
O43 - CFD: 2015/08/04 20:16:46 - [0] SHD -- C:\Users\alex\AppData\Local\Historique
O43 - CFD: 2012/04/06 12:47:16 - [] D -- C:\Users\alex\AppData\Local\IsolatedStorage
O43 - CFD: 2015/03/21 18:42:19 - [] D -- C:\Users\alex\AppData\Local\Lavasoft
O43 - CFD: 2014/10/24 19:29:25 - [0] D -- C:\Users\alex\AppData\Local\Learnpulse
O43 - CFD: 2014/05/16 22:38:31 - [] D -- C:\Users\alex\AppData\Local\LogiShrd
O43 - CFD: 2012/08/04 00:48:50 - [] D -- C:\Users\alex\AppData\Local\Macromedia
O43 - CFD: 2015/08/30 16:56:40 - [] D -- C:\Users\alex\AppData\Local\Microsoft
O43 - CFD: 2015/04/24 21:26:21 - [] D -- C:\Users\alex\AppData\Local\Microsoft Games
O43 - CFD: 2012/06/22 14:46:52 - [0] D -- C:\Users\alex\AppData\Local\Microsoft Help
O43 - CFD: 2015/08/05 20:42:55 - [] D -- C:\Users\alex\AppData\Local\MicrosoftEdge
O43 - CFD: 2012/11/11 19:41:29 - [] D -- C:\Users\alex\AppData\Local\MicrosoftStore
O43 - CFD: 2014/05/14 19:11:13 - [] D -- C:\Users\alex\AppData\Local\Mozilla
O43 - CFD: 2015/08/05 19:38:29 - [0] D -- C:\Users\alex\AppData\Local\NetworkTiles
O43 - CFD: 2015/08/26 23:05:07 - [] D -- C:\Users\alex\AppData\Local\NVIDIA
O43 - CFD: 2015/08/26 23:33:33 - [] D -- C:\Users\alex\AppData\Local\NVIDIA Corporation
O43 - CFD: 2014/11/09 19:32:32 - [0] D -- C:\Users\alex\AppData\Local\Opera Software
O43 - CFD: 2015/08/30 16:47:46 - [] D -- C:\Users\alex\AppData\Local\Packages
O43 - CFD: 2011/10/15 13:32:08 - [0] D -- C:\Users\alex\AppData\Local\PDFC
O43 - CFD: 2012/04/11 23:19:57 - [] D -- C:\Users\alex\AppData\Local\PokerEdge
O43 - CFD: 2015/09/09 14:40:22 - [] D -- C:\Users\alex\AppData\Local\PokerStars.FR
O43 - CFD: 2012/04/04 13:08:15 - [] D -- C:\Users\alex\AppData\Local\PowerCinema
O43 - CFD: 2013/06/21 15:48:12 - [] D -- C:\Users\alex\AppData\Local\Programs
O43 - CFD: 2015/08/04 21:09:08 - [] D -- C:\Users\alex\AppData\Local\Publishers
O43 - CFD: 2011/10/15 13:31:25 - [] D -- C:\Users\alex\AppData\Local\RemEngine
O43 - CFD: 2014/05/28 22:09:46 - [] D -- C:\Users\alex\AppData\Local\Skype
O43 - CFD: 2011/10/25 13:05:39 - [] D -- C:\Users\alex\AppData\Local\SoftGrid Client
O43 - CFD: 2014/11/09 19:19:18 - [] D -- C:\Users\alex\AppData\Local\Software =>PUP.Optional.Boxore
O43 - CFD: 2014/12/11 18:49:58 - [] D -- C:\Users\alex\AppData\Local\Sports Interactive
O43 - CFD: 2015/09/09 15:19:35 - [] D -- C:\Users\alex\AppData\Local\Temp
O43 - CFD: 2015/03/23 03:57:29 - [0] D -- C:\Users\alex\AppData\Local\Temp21850
O43 - CFD: 2015/08/04 20:16:46 - [0] SHD -- C:\Users\alex\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/08/04 21:06:06 - [] D -- C:\Users\alex\AppData\Local\TileDataLayer
O43 - CFD: 2015/03/14 14:44:00 - [] D -- C:\Users\alex\AppData\Local\Trusteer
O43 - CFD: 2013/04/07 00:03:21 - [] D -- C:\Users\alex\AppData\Local\VirtualStore
O43 - CFD: 2015/06/13 14:46:06 - [] D -- C:\Users\alex\AppData\Local\Windows Live
O43 - CFD: 2012/01/03 00:27:55 - [] D -- C:\Users\alex\AppData\Local\Windows Live Writer
O43 - CFD: 2012/08/26 12:50:18 - [0] D -- C:\Users\alex\AppData\Local\{00C96347-6EAF-4CFE-9961-366C9558B5A6}
O43 - CFD: 2012/08/11 02:08:45 - [0] D -- C:\Users\alex\AppData\Local\{00CF6190-EA9F-413C-92BA-3517834E32F4}
O43 - CFD: 2012/12/15 12:15:04 - [0] D -- C:\Users\alex\AppData\Local\{00F99CD0-4FF9-4C5D-AFBB-859ABC051A50}
O43 - CFD: 2012/07/03 22:54:45 - [0] D -- C:\Users\alex\AppData\Local\{023B07B2-D0B9-4EEE-98BE-CD890C4E4098}
O43 - CFD: 2013/01/06 17:09:59 - [0] D -- C:\Users\alex\AppData\Local\{026E3357-666C-4234-8F56-B407A092197F}
O43 - CFD: 2012/07/29 11:12:23 - [0] D -- C:\Users\alex\AppData\Local\{0275898B-EA65-4C60-A392-F02B859441D2}
O43 - CFD: 2012/01/10 11:47:07 - [0] D -- C:\Users\alex\AppData\Local\{041C255F-3D13-4DFF-961D-9768BDCB16EC}
O43 - CFD: 2012/09/30 10:15:15 - [0] D -- C:\Users\alex\AppData\Local\{044E60CD-BE74-4A9E-8B22-FA1F1C75498C}
O43 - CFD: 2012/01/08 13:29:23 - [0] D -- C:\Users\alex\AppData\Local\{04A0F0A2-5B08-46C0-986D-F6E94D4AE43B}
O43 - CFD: 2012/01/07 19:13:58 - [0] D -- C:\Users\alex\AppData\Local\{04F71213-382E-4BE2-95C4-62234663CB97}
O43 - CFD: 2012/06/26 23:05:30 - [0] D -- C:\Users\alex\AppData\Local\{05335D57-758D-4942-91FB-AEDA16A27C23}
O43 - CFD: 2012/07/07 23:28:05 - [0] D -- C:\Users\alex\AppData\Local\{055972E0-E9C5-448C-B403-316DFA723A2B}
O43 - CFD: 2012/06/20 15:58:47 - [0] D -- C:\Users\alex\AppData\Local\{05DF7F13-6D5F-4F8E-BA8A-2D8D83F1BE25}
O43 - CFD: 2012/09/03 22:57:51 - [0] D -- C:\Users\alex\AppData\Local\{061503A0-1CE8-4AE7-96BA-2682047DC3BB}
O43 - CFD: 2012/11/06 23:18:14 - [0] D -- C:\Users\alex\AppData\Local\{06F9227B-54F2-49F0-BCD7-8F9CD67019D9}
O43 - CFD: 2011/11/11 20:23:05 - [0] D -- C:\Users\alex\AppData\Local\{082A9F3A-884D-48BC-8A5F-522E11C94330}
O43 - CFD: 2012/08/05 11:48:05 - [0] D -- C:\Users\alex\AppData\Local\{08D37D02-A612-4C3E-A8A3-580B90D0A7E6}
O43 - CFD: 2013/01/06 05:09:33 - [0] D -- C:\Users\alex\AppData\Local\{0969CDA1-D4F3-46FF-959F-D62044BD53FA}
O43 - CFD: 2012/08/01 11:16:08 - [0] D -- C:\Users\alex\AppData\Local\{0BEA689C-69A8-4299-A406-28BF70A060B2}
O43 - CFD: 2011/10/26 14:19:46 - [0] D -- C:\Users\alex\AppData\Local\{0D0B6635-CE5A-4D1B-B851-F2B991CDE4A3}
O43 - CFD: 2011/11/07 22:57:02 - [0] D -- C:\Users\alex\AppData\Local\{0D9DFCBA-3181-4235-95FE-0DC5CD805369}
O43 - CFD: 2012/01/03 14:32:43 - [0] D -- C:\Users\alex\AppData\Local\{0DBA6A07-A7D6-43A0-B74C-23B68FC46808}
O43 - CFD: 2012/08/11 15:23:21 - [0] D -- C:\Users\alex\AppData\Local\{0E3BBEFF-B101-4A96-92EF-8B11BB86CB60}
O43 - CFD: 2012/10/02 21:53:12 - [0] D -- C:\Users\alex\AppData\Local\{0EC1135B-9ADE-4224-9ED9-53545FE53E42}
O43 - CFD: 2012/07/29 23:13:15 - [0] D -- C:\Users\alex\AppData\Local\{0FE95CC2-1A53-402B-872B-81247D7434BA}
O43 - CFD: 2013/01/12 04:02:29 - [0] D -- C:\Users\alex\AppData\Local\{1058E488-B0DE-45BF-A9E1-6D519BD6A114}
O43 - CFD: 2012/07/24 23:04:46 - [0] D -- C:\Users\alex\AppData\Local\{109E3E93-738F-48DB-912B-85D415735098}
O43 - CFD: 2012/10/22 14:12:12 - [0] D -- C:\Users\alex\AppData\Local\{10D10EB7-B899-45BA-A751-8E45EBDC4300}
O43 - CFD: 2012/01/11 15:53:54 - [0] D -- C:\Users\alex\AppData\Local\{1152EB93-333D-403A-A66B-5C5271C1FF42}
O43 - CFD: 2012/06/09 00:01:32 - [0] D -- C:\Users\alex\AppData\Local\{1156244E-F145-4ADD-8349-3087CE1AE5D8}
O43 - CFD: 2012/08/27 11:09:19 - [0] D -- C:\Users\alex\AppData\Local\{11B2E3A2-A41F-4B11-8FAF-28416C092634}
O43 - CFD: 2012/10/03 22:21:06 - [0] D -- C:\Users\alex\AppData\Local\{11FE372B-E3EB-4BCC-9C07-B5CDD13A2A82}
O43 - CFD: 2012/05/30 13:59:02 - [0] D -- C:\Users\alex\AppData\Local\{123E8A41-660D-494A-8468-6C0C78122EB6}
O43 - CFD: 2012/06/30 01:55:05 - [0] D -- C:\Users\alex\AppData\Local\{12CE2C25-C512-4783-89CA-B5A043B45433}
O43 - CFD: 2012/01/03 14:32:32 - [0] D -- C:\Users\alex\AppData\Local\{1304A7C5-A548-4D78-9CB6-3D2817DEE1A9}
O43 - CFD: 2012/07/07 23:28:17 - [0] D -- C:\Users\alex\AppData\Local\{13610B53-50E6-4B66-8302-10243DD7A50B}
O43 - CFD: 2012/06/17 13:59:32 - [0] D -- C:\Users\alex\AppData\Local\{13BF5AA3-760F-4819-8F16-68F172123910}
O43 - CFD: 2013/01/18 01:47:10 - [0] D -- C:\Users\alex\AppData\Local\{13F8B164-FE44-4F37-B752-49CE5967869D}
O43 - CFD: 2012/07/17 12:45:06 - [0] D -- C:\Users\alex\AppData\Local\{1479DC93-7F33-40A7-8FE5-D734575656C8}
O43 - CFD: 2012/06/03 14:13:03 - [0] D -- C:\Users\alex\AppData\Local\{14C71C2D-5AE2-4AB0-8A9A-CFE9CE4BBC8E}
O43 - CFD: 2012/01/20 14:10:53 - [0] D -- C:\Users\alex\AppData\Local\{1672ECE0-3BEC-4A79-B9D6-6AF0833AA056}
O43 - CFD: 2012/01/12 18:04:36 - [0] D -- C:\Users\alex\AppData\Local\{172506EF-48BC-495B-BAD7-8633B79A293D}
O43 - CFD: 2012/07/17 00:44:27 - [0] D -- C:\Users\alex\AppData\Local\{177D01D3-1CD1-4BCF-BBFB-4E64F60CC868}
O43 - CFD: 2012/01/09 15:50:23 - [0] D -- C:\Users\alex\AppData\Local\{179B1219-009C-40C9-A7A6-2658943E1E6F}
O43 - CFD: 2012/11/14 15:33:33 - [0] D -- C:\Users\alex\AppData\Local\{19C1A634-EF66-45A4-ACC0-EEF14E7ECF88}
O43 - CFD: 2012/01/10 11:06:18 - [0] D -- C:\Users\alex\AppData\Local\{19D47C72-B35E-4807-99D3-51D35BC7CBAC}
O43 - CFD: 2012/05/28 10:20:07 - [0] D -- C:\Users\alex\AppData\Local\{19EABDCD-AE48-4539-821D-176F793B4497}
O43 - CFD: 2012/01/02 21:36:40 - [0] D -- C:\Users\alex\AppData\Local\{19F8979F-5442-46A1-A0E8-CFABBBFFB3B1}
O43 - CFD: 2012/07/11 11:32:41 - [0] D -- C:\Users\alex\AppData\Local\{1A3CE4B7-2122-4FA9-8703-8B6A392D1A08}
O43 - CFD: 2012/07/06 23:27:00 - [0] D -- C:\Users\alex\AppData\Local\{1AA1DF89-DF90-44EF-A477-82830298239B}
O43 - CFD: 2012/12/30 01:47:56 - [0] D -- C:\Users\alex\AppData\Local\{1AE400F0-883B-4E16-8574-A644AC8C31A4}
O43 - CFD: 2011/12/25 21:51:01 - [0] D -- C:\Users\alex\AppData\Local\{1B0D1720-21EB-4B23-9D7E-B53769CB3075}
O43 - CFD: 2011/10/25 12:59:07 - [0] D -- C:\Users\alex\AppData\Local\{1BD393A2-B11A-483F-B26C-F7B8C7B257AC}
O43 - CFD: 2011/12/29 14:56:39 - [0] D -- C:\Users\alex\AppData\Local\{1BE34508-4DDA-4730-BA81-CF5E0809AC07}
O43 - CFD: 2012/08/06 13:49:40 - [0] D -- C:\Users\alex\AppData\Local\{1C894CDF-EF51-4D30-AF0B-3C580209066C}
O43 - CFD: 2012/07/16 12:43:47 - [0] D -- C:\Users\alex\AppData\Local\{1CCF4700-BF7A-4FA7-AAD8-115F704D6D62}
O43 - CFD: 2012/09/01 15:05:16 - [0] D -- C:\Users\alex\AppData\Local\{1D6299A1-CF90-4AD7-B887-0A48A12CE017}
O43 - CFD: 2012/09/14 16:44:37 - [0] D -- C:\Users\alex\AppData\Local\{1D68ADEB-CC14-46F8-BD15-D42CA09BE97F}
O43 - CFD: 2012/06/27 11:21:23 - [0] D -- C:\Users\alex\AppData\Local\{1EF061AE-392B-4302-AD49-20595C2714D0}
O43 - CFD: 2011/10/19 18:38:23 - [0] D -- C:\Users\alex\AppData\Local\{1F6B89CC-6524-4C49-A10E-3E05A9031479}
O43 - CFD: 2012/07/14 00:40:39 - [0] D -- C:\Users\alex\AppData\Local\{1FCE03F3-A00C-49DA-9601-D42F21BED883}
O43 - CFD: 2012/05/29 11:17:20 - [0] D -- C:\Users\alex\AppData\Local\{202473D6-C940-49C0-90A2-C59892E99EF0}
O43 - CFD: 2013/01/10 13:12:23 - [0] D -- C:\Users\alex\AppData\Local\{20643AB3-295F-405E-BF87-30CF5657F4C2}
O43 - CFD: 2011/11/09 13:52:16 - [0] D -- C:\Users\alex\AppData\Local\{20B13F9A-F74E-453D-AF8F-5312463D14BA}
O43 - CFD: 2014/06/27 23:31:58 - [0] D -- C:\Users\alex\AppData\Local\{20E2AE5F-B59A-441C-B6FE-CC7CEDF10A37}
O43 - CFD: 2012/07/14 12:41:18 - [0] D -- C:\Users\alex\AppData\Local\{2115E744-1BFD-420B-BA47-A277E5773187}
O43 - CFD: 2011/11/12 17:30:22 - [0] D -- C:\Users\alex\AppData\Local\{21864E01-A8A9-462A-9F68-A6BC028F1D72}
O43 - CFD: 2012/06/21 11:08:13 - [0] D -- C:\Users\alex\AppData\Local\{21A01FEB-93E9-4180-9962-0083B99608B1}
O43 - CFD: 2012/08/10 14:07:53 - [0] D -- C:\Users\alex\AppData\Local\{21ADBD51-F0B1-492A-97E8-5A1E0E610AC9}
O43 - CFD: 2012/08/08 12:22:10 - [0] D -- C:\Users\alex\AppData\Local\{22AA6C43-9C97-4EE1-9A9C-B6E2E1FAF6DB}
O43 - CFD: 2012/07/08 11:28:58 - [0] D -- C:\Users\alex\AppData\Local\{236F11A8-6957-44C6-B302-87998D16D583}
O43 - CFD: 2012/07/12 23:34:17 - [0] D -- C:\Users\alex\AppData\Local\{2376D188-4990-4302-AB8B-443E847E4416}
O43 - CFD: 2012/07/16 12:43:59 - [0] D -- C:\Users\alex\AppData\Local\{23B94090-089C-4084-9C5D-0F3288752E15}
O43 - CFD: 2012/07/07 11:27:38 - [0] D -- C:\Users\alex\AppData\Local\{247DA2FC-5C5C-41EA-9515-3F22574A4343}
O43 - CFD: 2012/10/28 14:59:34 - [0] D -- C:\Users\alex\AppData\Local\{2519C54B-F304-493C-816B-64072ED9CC45}
O43 - CFD: 2012/12/07 00:42:54 - [0] D -- C:\Users\alex\AppData\Local\{25242BC0-0EC1-4872-B7ED-159591A74367}
O43 - CFD: 2011/10/31 14:45:28 - [0] D -- C:\Users\alex\AppData\Local\{253C8EC3-FDD8-4E9E-BD66-AD4F3329CC03}
O43 - CFD: 2011/11/04 19:40:16 - [0] D -- C:\Users\alex\AppData\Local\{254737AD-6391-421A-AFA6-F29AF91FC847}
O43 - CFD: 2012/07/22 10:32:48 - [0] D -- C:\Users\alex\AppData\Local\{2584EB2D-E2D7-49F8-935F-70DD0DC7C472}
O43 - CFD: 2012/06/24 14:09:31 - [0] D -- C:\Users\alex\AppData\Local\{25C395FC-5695-44A1-829E-46DE97B2BC13}
O43 - CFD: 2011/11/06 14:57:32 - [0] D -- C:\Users\alex\AppData\Local\{269B5C33-2868-4B41-A10B-04BFA56D879D}
O43 - CFD: 2011/10/27 19:00:49 - [0] D -- C:\Users\alex\AppData\Local\{27BB8D7C-9BA0-4B10-B045-AF4EDDC83E09}
O43 - CFD: 2012/10/12 11:08:01 - [0] D -- C:\Users\alex\AppData\Local\{27D55DAA-C0DF-46E9-9DD8-F9527D07A0BE}
O43 - CFD: 2012/06/25 16:02:35 - [0] D -- C:\Users\alex\AppData\Local\{27FCA43C-C2C6-40C9-8B48-C2A30DDE7A3B}
O43 - CFD: 2012/09/05 12:53:57 - [0] D -- C:\Users\alex\AppData\Local\{28463DE6-6CE6-4E90-A420-36B62DBDAE73}
O43 - CFD: 2012/06/23 11:55:24 - [0] D -- C:\Users\alex\AppData\Local\{286D43A6-BCDB-415D-B151-C5DF7F4D749E}
O43 - CFD: 2012/07/10 23:31:50 - [0] D -- C:\Users\alex\AppData\Local\{2878AB88-EA74-4E75-ABA2-9F5EC5FEA83A}
O43 - CFD: 2012/07/23 10:40:20 - [0] D -- C:\Users\alex\AppData\Local\{28DF1897-1852-4688-A6AF-B452482DE855}
O43 - CFD: 2011/11/05 14:56:53 - [0] D -- C:\Users\alex\AppData\Local\{29180D02-6480-4F68-8D91-70251B548695}
O43 - CFD: 2012/10/31 23:40:58 - [0] D -- C:\Users\alex\AppData\Local\{29A16978-1921-46D3-9300-9214AE8EE0DC}
O43 - CFD: 2012/07/15 00:41:58 - [0] D -- C:\Users\alex\AppData\Local\{2A43F061-355C-4377-9553-F5704F413031}
O43 - CFD: 2012/06/28 13:53:07 - [0] D -- C:\Users\alex\AppData\Local\{2AD00F21-CBE2-4C7D-9224-59959A561DA2}
O43 - CFD: 2011/10/30 15:53:12 - [0] D -- C:\Users\alex\AppData\Local\{2AD62166-9FC0-46EC-82B3-F0FBDE519AC5}
O43 - CFD: 2012/06/26 23:05:18 - [0] D -- C:\Users\alex\AppData\Local\{2B00BB54-0104-4EBF-9DD2-E421E251F925}
O43 - CFD: 2012/07/18 09:45:10 - [0] D -- C:\Users\alex\AppData\Local\{2DA2A096-CA3E-4F4D-B899-9141C62925CE}
O43 - CFD: 2012/11/13 11:17:28 - [0] D -- C:\Users\alex\AppData\Local\{2DB3C827-D084-4F61-B33F-F0C45E00DA43}
O43 - CFD: 2012/08/29 11:11:00 - [0] D -- C:\Users\alex\AppData\Local\{2E09CCF1-FE5F-4B71-95F2-6A8C53823DEB}
O43 - CFD: 2012/06/29 13:54:25 - [0] D -- C:\Users\alex\AppData\Local\{2E758CC1-F9A6-4373-B260-2FBF07847550}
O43 - CFD: 2012/08/04 23:47:32 - [0] D -- C:\Users\alex\AppData\Local\{2EED16D8-7B70-446F-95EB-1C45AFC62B41}
O43 - CFD: 2012/08/01 11:15:57 - [0] D -- C:\Users\alex\AppData\Local\{2F053661-747C-494C-B4C0-A14C48C8E1AA}
O43 - CFD: 2012/07/22 10:32:59 - [0] D -- C:\Users\alex\AppData\Local\{2F5ACB45-966A-4EF9-9140-24FA36F898D4}
O43 - CFD: 2012/11/07 11:03:35 - [0] D -- C:\Users\alex\AppData\Local\{2FAE58FA-13A5-4C2E-860F-7418F0FDE727}
O43 - CFD: 2012/07/11 23:33:09 - [0] D -- C:\Users\alex\AppData\Local\{30424FC3-BD66-4FA9-8D13-DA7346A574EE}
O43 - CFD: 2012/07/02 01:57:28 - [0] D -- C:\Users\alex\AppData\Local\{30B51A2F-75A0-4BED-AC1D-B54055037806}
O43 - CFD: 2012/06/23 23:55:40 - [0] D -- C:\Users\alex\AppData\Local\{310F17CE-9992-48B9-9433-4821888621F0}
O43 - CFD: 2012/01/05 17:33:36 - [0] D -- C:\Users\alex\AppData\Local\{314DA96E-E404-4A2B-853B-C8E46AE1ECAF}
O43 - CFD: 2012/09/19 16:12:54 - [0] D -- C:\Users\alex\AppData\Local\{318DB35E-788B-4DF8-B66C-70D63C2A6CA3}
O43 - CFD: 2012/11/20 00:09:20 - [0] D -- C:\Users\alex\AppData\Local\{32333987-BAFE-40E3-B962-3F7A4D608EC3}
O43 - CFD: 2012/07/16 00:43:19 - [0] D -- C:\Users\alex\AppData\Local\{323374F0-FFEB-4DD9-B628-D0E6E2CECCD9}
O43 - CFD: 2012/11/23 11:29:59 - [0] D -- C:\Users\alex\AppData\Local\{325C995D-24B3-45A2-88DA-D506C79BD960}
O43 - CFD: 2012/07/27 11:10:03 - [0] D -- C:\Users\alex\AppData\Local\{32B98E35-ADC0-4BA6-9159-DE40A53373DD}
O43 - CFD: 2012/11/21 11:03:17 - [0] D -- C:\Users\alex\AppData\Local\{32C9B1EE-3874-462A-BE28-AD7EE32763C1}
O43 - CFD: 2012/09/13 16:48:21 - [0] D -- C:\Users\alex\AppData\Local\{333A6CF7-160C-418D-A5CB-2AA4CC6B0CBA}
O43 - CFD: 2011/10/29 16:54:55 - [0] D -- C:\Users\alex\AppData\Local\{33DED095-45D9-41B9-B162-13D8F571A96D}
O43 - CFD: 2012/09/21 16:11:32 - [0] D -- C:\Users\alex\AppData\Local\{34515D88-A411-4A18-812B-A3B6D93B079D}
O43 - CFD: 2012/09/06 23:15:39 - [0] D -- C:\Users\alex\AppData\Local\{36FC0C68-C080-4FE5-8768-48803315B984}
O43 - CFD: 2012/07/05 11:25:12 - [0] D -- C:\Users\alex\AppData\Local\{386CBFEA-0015-4456-8A2A-5E8AECE3DDCB}
O43 - CFD: 2012/10/19 19:31:14 - [0] D -- C:\Users\alex\AppData\Local\{39D6F9CE-DA16-4E9B-993F-DDDE24BA107A}
O43 - CFD: 2012/08/31 22:53:51 - [0] D -- C:\Users\alex\AppData\Local\{39F6D663-32A3-4D33-AACE-0CC048F070E8}
O43 - CFD: 2012/07/26 23:07:26 - [0] D -- C:\Users\alex\AppData\Local\{3A1E2ED7-F459-4C02-859B-7ED8F98FFC78}
O43 - CFD: 2012/05/27 19:30:45 - [0] D -- C:\Users\alex\AppData\Local\{3A7E75F3-4C1F-41A3-8FD0-C1342A89CC99}
O43 - CFD: 2012/08/05 23:48:49 - [0] D -- C:\Users\alex\AppData\Local\{3B056A33-04CE-483F-906C-74EF2721FBC4}
O43 - CFD: 2012/09/25 16:52:46 - [0] D -- C:\Users\alex\AppData\Local\{3B1E9F89-C694-4CB3-B3C3-3FAFC09DB90C}
O43 - CFD: 2012/11/05 15:47:48 - [0] D -- C:\Users\alex\AppData\Local\{3B470993-095D-4B1A-A5BF-E314A7696A6D}
O43 - CFD: 2012/12/28 09:46:45 - [0] D -- C:\Users\alex\AppData\Local\{3B5B9FB1-7E4C-45B4-9523-5C754D6F945D}
O43 - CFD: 2012/08/28 11:10:08 - [0] D -- C:\Users\alex\AppData\Local\{3CC38F31-9BE1-40CA-A991-9ACC55532A7A}
O43 - CFD: 2012/10/06 10:13:15 - [0] D -- C:\Users\alex\AppData\Local\{3D4F737D-DB20-4436-A6EA-85A131952365}
O43 - CFD: 2012/08/07 22:10:16 - [0] D -- C:\Users\alex\AppData\Local\{3E2A95CC-0198-4678-913E-6340979FB045}
O43 - CFD: 2012/06/27 11:21:34 - [0] D -- C:\Users\alex\AppData\Local\{3F146332-FEFC-4738-8B58-0EC627337384}
O43 - CFD: 2012/11/11 15:29:43 - [0] D -- C:\Users\alex\AppData\Local\{3F4C37B1-5A99-46FD-A93C-197642A90B2B}
O43 - CFD: 2012/07/29 11:12:35 - [0] D -- C:\Users\alex\AppData\Local\{3F9108EC-FDBF-4E7B-906D-0351692C4952}
O43 - CFD: 2012/06/29 01:53:46 - [0] D -- C:\Users\alex\AppData\Local\{3FA3BD8D-F735-4E15-829D-7C5F7559DF10}
O43 - CFD: 2012/08/06 13:49:29 - [0] D -- C:\Users\alex\AppData\Local\{4179FEC2-8883-40D2-95F9-80162A286BD6}
O43 - CFD: 2012/07/31 23:15:30 - [0] D -- C:\Users\alex\AppData\Local\{417FB8C8-C248-417E-B6A5-732710026ADA}
O43 - CFD: 2013/01/09 16:11:43 - [0] D -- C:\Users\alex\AppData\Local\{42138079-F5C5-4B5F-B10F-EFF323B021DC}
O43 - CFD: 2013/01/21 17:41:02 - [0] D -- C:\Users\alex\AppData\Local\{422B533D-EEB7-4C13-A5FD-D587D28A39B2}
O43 - CFD: 2012/07/01 13:56:47 - [0] D -- C:\Users\alex\AppData\Local\{424734A0-F53B-4B9E-AE8F-DD7EF16F2A4D}
O43 - CFD: 2012/06/23 23:55:51 - [0] D -- C:\Users\alex\AppData\Local\{42EFE225-9372-4845-863B-33B677210C5C}
O43 - CFD: 2012/01/02 00:28:22 - [0] D -- C:\Users\alex\AppData\Local\{430B5C8C-63C5-4F7F-B985-E402BC71872F}
O43 - CFD: 2012/05/29 11:17:19 - [0] D -- C:\Users\alex\AppData\Local\{43B38C2C-9A0B-41A8-941C-3AC3C50C3D44}
O43 - CFD: 2012/06/06 15:05:16 - [0] D -- C:\Users\alex\AppData\Local\{442D4D1B-EA51-4214-AF07-7143A493A95F}
O43 - CFD: 2012/06/13 15:35:12 - [0] D -- C:\Users\alex\AppData\Local\{44C1C9A2-6567-4666-BD97-25209E26B088}
O43 - CFD: 2012/07/24 23:04:57 - [0] D -- C:\Users\alex\AppData\Local\{4598B769-3745-4472-8D0D-51E3EB9E65A3}
O43 - CFD: 2013/01/16 01:45:35 - [0] D -- C:\Users\alex\AppData\Local\{45F26C06-C1A3-4ABB-A908-DBD57591F622}
O43 - CFD: 2012/10/01 08:13:08 - [0] D -- C:\Users\alex\AppData\Local\{47398619-B8C2-4821-B07F-9A8FDC9162C9}
O43 - CFD: 2012/06/04 21:30:56 - [0] D -- C:\Users\alex\AppData\Local\{473CF67F-CA69-40B4-B10D-A4CDA31BC9EB}
O43 - CFD: 2012/10/24 13:15:34 - [0] D -- C:\Users\alex\AppData\Local\{47F333D2-0FBE-4781-878E-86D0D1AEB7A1}
O43 - CFD: 2012/07/23 10:40:31 - [0] D -- C:\Users\alex\AppData\Local\{485B26F2-6FDC-485E-91F5-E30C56665646}
O43 - CFD: 2012/06/03 14:12:51 - [0] D -- C:\Users\alex\AppData\Local\{4889DC7A-FE0F-4E95-92DE-B4FE6278E9F1}
O43 - CFD: 2012/09/12 10:37:02 - [0] D -- C:\Users\alex\AppData\Local\{49B8F578-430D-4778-A14D-928C7FF5B505}
O43 - CFD: 2012/07/29 23:13:03 - [0] D -- C:\Users\alex\AppData\Local\{49DB6ED3-F7E4-4A61-8998-99AABFF8A89F}
O43 - CFD: 2012/01/19 20:09:48 - [0] D -- C:\Users\alex\AppData\Local\{4A55F950-5316-4D4C-B820-F0DC94B64815}
O43 - CFD: 2012/08/03 23:19:25 - [0] D -- C:\Users\alex\AppData\Local\{4B4A1F53-9084-4FF9-A8BD-DC63EB50808B}
O43 - CFD: 2012/01/02 21:36:53 - [0] D -- C:\Users\alex\AppData\Local\{4BBAA9E9-600E-4DA3-A8F0-E3C26AE22280}
O43 - CFD: 2012/11/04 15:39:11 - [0] D -- C:\Users\alex\AppData\Local\{4BE90B8A-5AF6-4E12-8D99-D8F0E8959DEA}
O43 - CFD: 2012/07/31 11:14:51 - [0] D -- C:\Users\alex\AppData\Local\{4CAC16D1-3087-4CE1-8EA9-93562972CE61}
O43 - CFD: 2011/11/13 20:03:57 - [0] D -- C:\Users\alex\AppData\Local\{4CB0573B-17FA-49DA-8031-DD76045E7C20}
O43 - CFD: 2012/08/10 14:08:05 - [0] D -- C:\Users\alex\AppData\Local\{4CC64943-ECAC-4E7D-BC2A-F971FAD3A9F5}
O43 - CFD: 2012/12/04 11:42:18 - [0] D -- C:\Users\alex\AppData\Local\{4CD1C582-5A11-470F-9BC0-E9A3AA954AA2}
O43 - CFD: 2012/12/22 17:18:49 - [0] D -- C:\Users\alex\AppData\Local\{4E1667BF-B42F-4377-BD9C-E2569CA557B0}
O43 - CFD: 2012/10/23 12:35:30 - [0] D -- C:\Users\alex\AppData\Local\{4E2D35E2-63DB-41DC-8844-A818B8295711}
O43 - CFD: 2012/06/08 11:10:46 - [0] D -- C:\Users\alex\AppData\Local\{4E40FC23-1520-4F82-BD6C-F5D25CB0F36F}
O43 - CFD: 2012/09/07 17:11:15 - [0] D -- C:\Users\alex\AppData\Local\{4E8A0D6C-0479-4EA0-B76B-65897694616B}
O43 - CFD: 2012/07/08 23:29:23 - [0] D -- C:\Users\alex\AppData\Local\{4FB08F23-3180-4956-865B-0FB0A40CFA77}
O43 - CFD: 2012/07/14 12:41:07 - [0] D -- C:\Users\alex\AppData\Local\{50B21078-E315-4E54-BF25-239B52B1A8A2}
O43 - CFD: 2011/11/11 22:52:06 - [0] D -- C:\Users\alex\AppData\Local\{50CB43BE-AE47-418D-888E-92CF3275B465}
O43 - CFD: 2012/11/11 22:10:20 - [0] D -- C:\Users\alex\AppData\Local\{514A50C4-AF19-4450-A84F-FFFBD235FF53}
O43 - CFD: 2011/12/26 20:34:03 - [0] D -- C:\Users\alex\AppData\Local\{519BFD17-73FD-4337-B0E1-82CD070568A8}
O43 - CFD: 2012/06/20 01:37:33 - [0] D -- C:\Users\alex\AppData\Local\{51AD8682-DC14-412B-8486-B039CADBFD26}
O43 - CFD: 2012/08/09 14:06:34 - [0] D -- C:\Users\alex\AppData\Local\{521EDDF0-E2ED-4A0F-B2A1-EB0CBDBC9F80}
O43 - CFD: 2012/11/28 12:10:17 - [0] D -- C:\Users\alex\AppData\Local\{52568F88-5FA9-4FB9-BB36-569A70806D6B}
O43 - CFD: 2012/07/21 10:07:00 - [0] D -- C:\Users\alex\AppData\Local\{5344CECE-EFD0-495D-ADD3-F7F1514BBA5D}
O43 - CFD: 2012/07/26 11:06:58 - [0] D -- C:\Users\alex\AppData\Local\{5431BB8F-DA2D-4CB7-B6FF-5322FFAD9830}
O43 - CFD: 2012/07/03 10:54:28 - [0] D -- C:\Users\alex\AppData\Local\{549F871B-FEF7-4BD8-ACDD-0F17326AF206}
O43 - CFD: 2012/07/19 22:04:52 - [0] D -- C:\Users\alex\AppData\Local\{5596F9F4-405D-4B08-B0B5-6C0FFDC1E73F}
O43 - CFD: 2012/06/07 16:01:00 - [0] D -- C:\Users\alex\AppData\Local\{55D2972B-A964-4EC2-BDA8-2510CB79CE24}
O43 - CFD: 2012/12/27 14:15:32 - [0] D -- C:\Users\alex\AppData\Local\{56836C64-93E7-4311-839D-79E1D6863205}
O43 - CFD: 2012/06/30 13:55:43 - [0] D -- C:\Users\alex\AppData\Local\{57DA78FC-3CCC-4822-AF72-2415DC7ADD15}
O43 - CFD: 2011/11/08 20:09:54 - [0] D -- C:\Users\alex\AppData\Local\{58739AF1-2D0B-44DD-BD35-7F828B0A68E0}
O43 - CFD: 2012/07/19 10:04:02 - [0] D -- C:\Users\alex\AppData\Local\{5968EA3D-41B6-4A93-B227-D380C7673AB2}
O43 - CFD: 2012/11/18 00:34:11 - [0] D -- C:\Users\alex\AppData\Local\{599E52E6-2FF5-4F4A-A7D2-5E56FF1A8E20}
O43 - CFD: 2012/08/07 22:10:05 - [0] D -- C:\Users\alex\AppData\Local\{5A04F44B-E22D-4F89-9E83-2055C651208F}
O43 - CFD: 2012/08/09 02:05:54 - [0] D -- C:\Users\alex\AppData\Local\{5A4491F6-129F-4F40-8E9C-458B0490A741}
O43 - CFD: 2012/12/27 02:01:16 - [0] D -- C:\Users\alex\AppData\Local\{5B6F22C3-5295-4203-B9E5-4236C77C507F}
O43 - CFD: 2012/07/08 23:29:12 - [0] D -- C:\Users\alex\AppData\Local\{5BDD3580-E043-40F7-B4B7-C5F8B551AEC3}
O43 - CFD: 2012/07/03 10:54:16 - [0] D -- C:\Users\alex\AppData\Local\{5BE88600-807B-490B-8DFD-B03256BCE304}
O43 - CFD: 2012/07/21 22:07:40 - [0] D -- C:\Users\alex\AppData\Local\{5BE8F630-8071-4ECA-ADAD-624902273897}
O43 - CFD: 2012/08/01 23:16:36 - [0] D -- C:\Users\alex\AppData\Local\{5C2271AD-61FD-495C-B62D-D12B2CA4C403}
O43 - CFD: 2012/07/06 11:26:31 - [0] D -- C:\Users\alex\AppData\Local\{5C4EA1AC-C22C-4174-8952-EA999FD789D4}
O43 - CFD: 2012/06/21 11:08:26 - [0] D -- C:\Users\alex\AppData\Local\{5C9E1FD2-FA7A-4F53-9E6B-A421C4A2AD9F}
O43 - CFD: 2012/06/30 01:54:53 - [0] D -- C:\Users\alex\AppData\Local\{5CAFD1FE-AB06-4166-B9AE-8E44D12F62BF}
O43 - CFD: 2012/12/12 00:29:52 - [0] D -- C:\Users\alex\AppData\Local\{5CF805DB-0288-47E5-AABA-677F5507F8D2}
O43 - CFD: 2012/07/16 00:43:08 - [0] D -- C:\Users\alex\AppData\Local\{5DC0BBEC-17C4-42ED-8A2A-834B4B381EBE}
O43 - CFD: 2011/10/21 14:17:41 - [0] D -- C:\Users\alex\AppData\Local\{5E4CD884-F322-4C09-8E28-A992DC4F604C}
O43 - CFD: 2012/07/31 11:15:03 - [0] D -- C:\Users\alex\AppData\Local\{5EF4EA75-2EF9-4125-9FF6-4A2135611ED8}
O43 - CFD: 2012/08/03 11:18:36 - [0] D -- C:\Users\alex\AppData\Local\{5F96495D-C3D8-4413-B5E5-866B0DB2143B}
O43 - CFD: 2012/07/17 12:45:17 - [0] D -- C:\Users\alex\AppData\Local\{5FCA4DC4-8C35-478F-99F9-6FB3A54CA9AE}
O43 - CFD: 2012/06/03 00:00:07 - [0] D -- C:\Users\alex\AppData\Local\{5FD840C8-3962-4393-BE48-B59D975B7115}
O43 - CFD: 2013/01/08 16:42:29 - [0] D -- C:\Users\alex\AppData\Local\{5FF82506-CEE2-437E-8213-1E731843B74C}
O43 - CFD: 2012/01/11 17:42:04 - [0] D -- C:\Users\alex\AppData\Local\{602ED27E-7747-49C3-B62A-EB7AC7F8EA59}
O43 - CFD: 2011/12/25 21:34:07 - [0] D -- C:\Users\alex\AppData\Local\{6049015C-0F89-4F67-A5A6-7B346E08F817}
O43 - CFD: 2012/05/27 19:10:40 - [0] D -- C:\Users\alex\AppData\Local\{607C957E-418F-474D-A2E6-F395FF3E563F}
O43 - CFD: 2012/12/11 11:42:13 - [0] D -- C:\Users\alex\AppData\Local\{607D59B7-F655-43D7-89EF-5A084DC02F60}
O43 - CFD: 2013/01/07 13:17:34 - [0] D -- C:\Users\alex\AppData\Local\{60C86179-1A89-4366-8F2A-C70DB91750D0}
O43 - CFD: 2012/06/14 22:45:36 - [0] D -- C:\Users\alex\AppData\Local\{60FE5B5B-6E9F-44B2-A470-073F91F1BF20}
O43 - CFD: 2012/07/04 22:56:05 - [0] D -- C:\Users\alex\AppData\Local\{61F996AA-7078-4CAF-A987-8D81AAE43573}
O43 - CFD: 2012/12/01 12:17:57 - [0] D -- C:\Users\alex\AppData\Local\{622B040D-5283-4834-9CE3-559DB0D6F204}
O43 - CFD: 2012/07/01 01:56:09 - [0] D -- C:\Users\alex\AppData\Local\{62899F05-6D7C-44E4-B9A0-5BEA91BDC870}
O43 - CFD: 2013/01/11 13:13:01 - [0] D -- C:\Users\alex\AppData\Local\{634224E8-39C6-4A67-9D77-57B23AB44C94}
O43 - CFD: 2013/01/19 03:28:50 - [0] D -- C:\Users\alex\AppData\Local\{63A7024E-E43F-4D4D-8EE2-BD597285F008}
O43 - CFD: 2011/10/30 14:56:22 - [0] D -- C:\Users\alex\AppData\Local\{63AA15DF-E1D7-4EF2-AB04-D718DE85B321}
O43 - CFD: 2012/12/06 14:03:24 - [0] D -- C:\Users\alex\AppData\Local\{646CE659-3625-4863-84C9-6611417067F2}
O43 - CFD: 2012/11/10 11:59:04 - [0] D -- C:\Users\alex\AppData\Local\{64BF6B3D-0E5F-499D-B11B-DD18892E44AD}
O43 - CFD: 2011/11/09 13:52:05 - [0] D -- C:\Users\alex\AppData\Local\{64C3F103-5A4F-42DC-A475-41037CCE2B2B}
O43 - CFD: 2011/11/11 14:34:03 - [0] D -- C:\Users\alex\AppData\Local\{65046BC3-6BAE-4FB7-8580-728FE81E9473}
O43 - CFD: 2012/07/05 11:25:24 - [0] D -- C:\Users\alex\AppData\Local\{65B292AB-8284-42ED-94E5-491CE1813FA0}
O43 - CFD: 2012/12/13 23:21:17 - [0] D -- C:\Users\alex\AppData\Local\{65B51D86-50C5-4D4A-843F-C8FB8737D5E2}
O43 - CFD: 2012/09/28 21:53:12 - [0] D -- C:\Users\alex\AppData\Local\{677035D4-58CB-4D63-88AD-26017A0C3710}
O43 - CFD: 2012/06/12 17:52:27 - [0] D -- C:\Users\alex\AppData\Local\{688AFB7B-1D23-482D-83CC-EDA67CBA610B}
O43 - CFD: 2011/11/05 18:19:03 - [0] D -- C:\Users\alex\AppData\Local\{68A4A891-28FD-488E-B81A-5A28AFC34697}
O43 - CFD: 2012/10/14 13:43:32 - [0] D -- C:\Users\alex\AppData\Local\{6B0D5A7F-8F47-4462-8542-CB3C3690000C}
O43 - CFD: 2012/06/01 13:40:15 - [0] D -- C:\Users\alex\AppData\Local\{6B777409-A62C-40BC-9D8C-70DFD039ECC6}
O43 - CFD: 2012/09/22 21:04:00 - [0] D -- C:\Users\alex\AppData\Local\{6BBE767C-33EB-456B-AD5E-593417B8A16A}
O43 - CFD: 2012/06/19 13:36:23 - [0] D -- C:\Users\alex\AppData\Local\{6BCA105D-AE18-4BE7-9CF7-223C7B1876A2}
O43 - CFD: 2012/09/15 10:25:33 - [0] D -- C:\Users\alex\AppData\Local\{6BE7AD53-C4B3-4097-A2DE-08E0767FCC79}
O43 - CFD: 2012/01/14 10:52:04 - [0] D -- C:\Users\alex\AppData\Local\{6C393197-1069-4469-B4D4-37F1C7D28374}
O43 - CFD: 2012/07/27 23:10:22 - [0] D -- C:\Users\alex\AppData\Local\{6C7B57F0-B261-40D9-8FDF-736D50B09B79}
O43 - CFD: 2012/01/19 12:04:11 - [0] D -- C:\Users\alex\AppData\Local\{6CDD8AD5-738A-4383-9F66-E1C3B8DD6FDC}
O43 - CFD: 2012/12/08 13:44:14 - [0] D -- C:\Users\alex\AppData\Local\{6D1499EF-276C-495A-A2EC-294BAD90510B}
O43 - CFD: 2012/08/30 11:24:14 - [0] D -- C:\Users\alex\AppData\Local\{6D84F288-A720-4702-8C87-7EB34CCE1D25}
O43 - CFD: 2012/12/25 17:57:53 - [0] D -- C:\Users\alex\AppData\Local\{6D9A0FE5-481C-41C4-AA48-4BE47474BD58}
O43 - CFD: 2012/08/03 23:19:13 - [0] D -- C:\Users\alex\AppData\Local\{6E1251F4-D5C3-4082-A7FA-696482976BF0}
O43 - CFD: 2012/11/27 10:07:46 - [0] D -- C:\Users\alex\AppData\Local\{6E457E10-3385-4BC2-BF2B-977CC50A9869}
O43 - CFD: 2012/08/12 03:23:59 - [0] D -- C:\Users\alex\AppData\Local\{6F24C11C-E807-40C3-94B5-B5606B294DAA}
O43 - CFD: 2015/06/13 14:46:05 - [0] D -- C:\Users\alex\AppData\Local\{6F36A738-9F08-4A26-9BCC-9F071824EEA1}
O43 - CFD: 2011/11/02 18:50:02 - [0] D -- C:\Users\alex\AppData\Local\{6F722E79-068B-4EC5-8D87-BBA5564E2B1E}
O43 - CFD: 2012/07/03 22:54:56 - [0] D -- C:\Users\alex\AppData\Local\{6FC5684B-AA96-4999-A571-9B7D456714E9}
O43 - CFD: 2012/11/09 12:29:21 - [0] D -- C:\Users\alex\AppData\Local\{707C26AE-7817-450E-8CE0-1D86DCD8C4D7}
O43 - CFD: 2012/12/14 15:01:17 - [0] D -- C:\Users\alex\AppData\Local\{70D8B06C-CDA2-4357-BA37-71D13073894A}
O43 - CFD: 2012/07/25 23:06:06 - [0] D -- C:\Users\alex\AppData\Local\{711EC0F1-1B16-4B8B-9767-E40DCE2E54CD}
O43 - CFD: 2012/01/02 00:28:11 - [0] D -- C:\Users\alex\AppData\Local\{71521879-740B-4492-8973-48EBF147CA04}
O43 - CFD: 2012/09/10 23:20:43 - [0] D -- C:\Users\alex\AppData\Local\{723A598F-5255-4B70-8D9D-D4C624D62368}
O43 - CFD: 2011/11/13 17:54:39 - [0] D -- C:\Users\alex\AppData\Local\{72C467AA-A221-4686-994D-EA18ED121E62}
O43 - CFD: 2012/07/06 23:27:12 - [0] D -- C:\Users\alex\AppData\Local\{72D6B498-80FA-48CC-84C5-19B28A60D246}
O43 - CFD: 2012/07/30 23:14:22 - [0] D -- C:\Users\alex\AppData\Local\{734C7989-FCA9-47E6-A4A1-4C00A46A2790}
O43 - CFD: 2011/11/11 13:52:53 - [0] D -- C:\Users\alex\AppData\Local\{738578B4-6C9B-49B6-954D-B88FDE5DC170}
O43 - CFD: 2012/08/10 02:07:25 - [0] D -- C:\Users\alex\AppData\Local\{73DEB6F4-B832-4070-B441-B101B3910CD5}
O43 - CFD: 2012/01/04 11:55:22 - [0] D -- C:\Users\alex\AppData\Local\{74387AE6-0622-46E0-B34D-D8377A0E5252}
O43 - CFD: 2012/12/07 11:20:52 - [0] D -- C:\Users\alex\AppData\Local\{7533D80F-45FA-44B1-BE81-9E0FB88F2A64}
O43 - CFD: 2012/12/10 11:29:17 - [0] D -- C:\Users\alex\AppData\Local\{757445BC-8691-4022-8A8B-9A6A02F04159}
O43 - CFD: 2012/11/26 11:01:39 - [0] D -- C:\Users\alex\AppData\Local\{75ABF26E-82E1-4758-BE9F-C5AF8CE5C566}
O43 - CFD: 2013/01/08 04:42:02 - [0] D -- C:\Users\alex\AppData\Local\{75B536CA-8839-4625-96AE-213966AFDE15}
O43 - CFD: 2012/07/26 23:07:42 - [0] D -- C:\Users\alex\AppData\Local\{75EB34CA-6BB0-40C4-8246-5308D6B19969}
O43 - CFD: 2012/07/04 22:56:17 - [0] D -- C:\Users\alex\AppData\Local\{7635405D-E084-4857-9A5D-28F0C2FD69F5}
O43 - CFD: 2011/10/25 12:59:19 - [0] D -- C:\Users\alex\AppData\Local\{76708DCA-0A57-44B0-A08C-C144FFCAF6E6}
O43 - CFD: 2012/01/15 14:40:59 - [0] D -- C:\Users\alex\AppData\Local\{76902848-1DA7-460C-AE0E-D157E8C61E3F}
O43 - CFD: 2014/07/17 17:12:44 - [0] D -- C:\Users\alex\AppData\Local\{7750AE65-30F7-40E3-9E6F-E150EB387B52}
O43 - CFD: 2012/07/07 11:27:50 - [0] D -- C:\Users\alex\AppData\Local\{777AE3B8-322F-44D9-B05B-FF84BE3A24E7}
O43 - CFD: 2012/07/19 22:04:41 - [0] D -- C:\Users\alex\AppData\Local\{778E1247-24C3-4043-AEAB-C8BEF31C3F4D}
O43 - CFD: 2012/10/13 10:55:20 - [0] D -- C:\Users\alex\AppData\Local\{77BCD7D2-6CE6-4BF8-B67B-8AD6B308DA26}
O43 - CFD: 2012/01/04 11:55:33 - [0] D -- C:\Users\alex\AppData\Local\{781938EB-FCA3-44CA-9964-46DC4F8A5E99}
O43 - CFD: 2012/07/05 23:26:03 - [0] D -- C:\Users\alex\AppData\Local\{787626D3-6B59-4B61-B8B9-3592B610338A}
O43 - CFD: 2012/08/02 23:17:56 - [0] D -- C:\Users\alex\AppData\Local\{7877F78C-45F8-4DD7-B852-ADB22B46DA3D}
O43 - CFD: 2012/09/06 22:36:04 - [0] D -- C:\Users\alex\AppData\Local\{78993C84-7D46-4A93-AF2C-96B6A38E3BC6}
O43 - CFD: 2012/07/11 23:32:57 - [0] D -- C:\Users\alex\AppData\Local\{78C85EFD-2DA1-4F6B-87A6-26F5DFC91F0B}
O43 - CFD: 2012/07/27 11:09:52 - [0] D -- C:\Users\alex\AppData\Local\{78D248E0-E008-4D23-8E1E-59FCA1F222BC}
O43 - CFD: 2011/10/24 10:24:22 - [0] D -- C:\Users\alex\AppData\Local\{78FE8473-9C16-4723-AAA2-A0E3EE2E8AC4}
O43 - CFD: 2012/09/04 12:53:19 - [0] D -- C:\Users\alex\AppData\Local\{79560963-FFEB-4B8C-B182-44978A2BF53C}
O43 - CFD: 2012/06/12 17:52:40 - [0] D -- C:\Users\alex\AppData\Local\{7AAEA493-89F2-4F3F-A741-09D8C15F97D1}
O43 - CFD: 2012/10/04 22:22:06 - [0] D -- C:\Users\alex\AppData\Local\{7C886024-ADFB-4313-81F9-16A56E3AEC50}
O43 - CFD: 2012/01/12 18:04:47 - [0] D -- C:\Users\alex\AppData\Local\{7D020098-A9B7-498D-B02C-F361F82C3021}
O43 - CFD: 2012/07/22 22:33:39 - [0] D -- C:\Users\alex\AppData\Local\{7D154031-AEE0-409A-89E7-0F5122698CEB}
O43 - CFD: 2011/10/30 14:09:50 - [0] D -- C:\Users\alex\AppData\Local\{7D5B7BA7-BBA8-4878-A997-5606E5ACD1CC}
O43 - CFD: 2012/06/20 15:58:33 - [0] D -- C:\Users\alex\AppData\Local\{7E1BA11C-555F-444D-89B9-17D2315D2648}
O43 - CFD: 2012/05/29 11:55:14 - [0] D -- C:\Users\alex\AppData\Local\{7F02C71C-863D-45C1-94F4-B6CAA99DF1FC}
O43 - CFD: 2012/07/18 21:45:37 - [0] D -- C:\Users\alex\AppData\Local\{7F4EDF97-AF0A-4F08-ACF8-7FB32FAB7486}
O43 - CFD: 2012/07/28 23:11:56 - [0] D -- C:\Users\alex\AppData\Local\{7FA2DCC3-9658-4363-AA1E-8578CB69378E}
O43 - CFD: 2012/11/24 11:51:20 - [0] D -- C:\Users\alex\AppData\Local\{7FEF1198-317A-44A1-8CEC-781319D267CB}
O43 - CFD: 2012/11/22 11:21:32 - [0] D -- C:\Users\alex\AppData\Local\{8087E50E-3958-44A6-B5D8-C9243678CEDB}
O43 - CFD: 2012/07/10 11:31:10 - [0] D -- C:\Users\alex\AppData\Local\{80AFF660-FF8B-4691-83B0-A664198E8D4F}
O43 - CFD: 2011/10/26 13:21:00 - [0] D -- C:\Users\alex\AppData\Local\{80DE29B5-5D67-4ACC-8443-96BC7E516F34}
O43 - CFD: 2012/07/19 10:04:13 - [0] D -- C:\Users\alex\AppData\Local\{812976F1-FA92-448C-B612-D41058C29DB5}
O43 - CFD: 2012/08/26 00:07:29 - [0] D -- C:\Users\alex\AppData\Local\{81A785C1-84D8-4F5E-B0FF-A2F0A5CE8300}
O43 - CFD: 2013/01/01 19:48:06 - [0] D -- C:\Users\alex\AppData\Local\{82302947-C88A-47EA-9093-5404A7BDEA9D}
O43 - CFD: 2012/07/18 21:45:48 - [0] D -- C:\Users\alex\AppData\Local\{82E5EC80-8590-4AB5-91E4-FBB025257F83}
O43 - CFD: 2012/07/10 23:32:02 - [0] D -- C:\Users\alex\AppData\Local\{8371877E-0B53-48DB-BD94-FCAA94B6B761}
O43 - CFD: 2012/07/05 23:25:52 - [0] D -- C:\Users\alex\AppData\Local\{8391F356-81B5-4854-82C8-12D4A595F40B}
O43 - CFD: 2012/01/01 13:31:50 - [0] D -- C:\Users\alex\AppData\Local\{83B4C513-BBC4-44CF-97A8-D9EBF3D20229}
O43 - CFD: 2012/09/06 11:36:53 - [0] D -- C:\Users\alex\AppData\Local\{83D0466C-430B-495F-8BAF-C86241B95014}
O43 - CFD: 2011/11/12 17:34:13 - [0] D -- C:\Users\alex\AppData\Local\{840CD443-053A-41A6-845D-F90D2C79FEC9}
O43 - CFD: 2012/07/12 23:34:29 - [0] D -- C:\Users\alex\AppData\Local\{8442E317-6CA9-470C-98FF-13A29305EC88}
O43 - CFD: 2012/06/28 13:52:56 - [0] D -- C:\Users\alex\AppData\Local\{84646D59-E01E-4FD0-BB04-62F2D047BB59}
O43 - CFD: 2012/06/07 16:01:19 - [0] D -- C:\Users\alex\AppData\Local\{84782C7D-1167-4D8B-8676-DA2FD539709F}
O43 - CFD: 2012/09/29 09:53:38 - [0] D -- C:\Users\alex\AppData\Local\{84EDBE62-20F1-48C7-9530-2279CDA4311B}
O43 - CFD: 2012/12/24 16:52:29 - [0] D -- C:\Users\alex\AppData\Local\{8500EFA0-4EF4-4E68-8404-4254FBE82600}
O43 - CFD: 2012/05/27 19:30:56 - [0] D -- C:\Users\alex\AppData\Local\{850D154B-9BA3-4261-B1ED-B121829B1D70}
O43 - CFD: 2013/01/17 13:46:53 - [0] D -- C:\Users\alex\AppData\Local\{8580BA9E-27DC-4D50-BE67-02463A352718}
O43 - CFD: 2013/01/22 17:55:56 - [0] D -- C:\Users\alex\AppData\Local\{860CD37E-2002-4B72-9CA5-F87AD5240ADD}
O43 - CFD: 2012/08/05 23:49:01 - [0] D -- C:\Users\alex\AppData\Local\{86281FF6-DEBA-4605-8878-DC677266BC77}
O43 - CFD: 2012/09/09 11:41:45 - [0] D -- C:\Users\alex\AppData\Local\{8658141D-C302-4FE9-9F7C-E2A02C95E135}
O43 - CFD: 2012/01/05 22:23:24 - [0] D -- C:\Users\alex\AppData\Local\{869C442E-8E63-4534-BB79-E001EC78F606}
O43 - CFD: 2012/10/10 10:37:34 - [0] D -- C:\Users\alex\AppData\Local\{877CB097-EAA7-4E99-AD4C-99E7D375BB34}
O43 - CFD: 2012/06/10 14:02:39 - [0] D -- C:\Users\alex\AppData\Local\{88038A02-BC9A-4F73-87B5-3FF8C441AEF4}
O43 - CFD: 2012/12/05 11:52:34 - [0] D -- C:\Users\alex\AppData\Local\{88045DF4-FAD1-4FFC-A734-B6C4A04FBCCB}
O43 - CFD: 2012/07/21 10:06:49 - [0] D -- C:\Users\alex\AppData\Local\{885ADF11-4043-4FE1-BE5B-6DF6A00409E0}
O43 - CFD: 2012/08/11 02:08:34 - [0] D -- C:\Users\alex\AppData\Local\{88879583-8043-4544-B2BC-3D03D182D043}
O43 - CFD: 2012/08/02 11:17:27 - [0] D -- C:\Users\alex\AppData\Local\{88B9C99B-F18A-44DA-BD9A-36973CEA9ECE}
O43 - CFD: 2012/11/12 11:10:24 - [0] D -- C:\Users\alex\AppData\Local\{89013441-2CBC-4116-9699-F94F420E954D}
O43 - CFD: 2011/12/29 18:19:40 - [0] D -- C:\Users\alex\AppData\Local\{892E6235-712E-468A-B7CF-C214CA4A0ED7}
O43 - CFD: 2012/01/20 12:00:00 - [0] D -- C:\Users\alex\AppData\Local\{896892CE-E809-4D94-8908-A09BEFC0C059}
O43 - CFD: 2012/06/09 14:08:37 - [0] D -- C:\Users\alex\AppData\Local\{8A04430F-9D6C-41C0-B030-CFC1B0DA537C}
O43 - CFD: 2012/07/13 11:35:08 - [0] D -- C:\Users\alex\AppData\Local\{8A8D6046-E2ED-4D4E-98CC-20C25BFDBD59}
O43 - CFD: 2012/07/15 12:42:29 - [0] D -- C:\Users\alex\AppData\Local\{8AC30D57-009C-4911-BCB8-0B2E626E13A3}
O43 - CFD: 2012/07/01 13:56:36 - [0] D -- C:\Users\alex\AppData\Local\{8AD01999-956E-4D64-BB97-34C614482CBF}
O43 - CFD: 2012/07/22 22:33:28 - [0] D -- C:\Users\alex\AppData\Local\{8AF7F392-BF29-45CB-8DC1-A1310F6340C2}
O43 - CFD: 2012/07/20 10:05:43 - [0] D -- C:\Users\alex\AppData\Local\{8B0E6FDF-4C3D-41AC-90F4-403BD86830AF}
O43 - CFD: 2011/11/08 22:59:23 - [0] D -- C:\Users\alex\AppData\Local\{8B44CD15-AF4A-4A03-87D2-4BDBBD516B2B}
O43 - CFD: 2012/12/21 18:34:07 - [0] D -- C:\Users\alex\AppData\Local\{8DA86BE8-EC19-406C-BADC-1E9D4C817BBC}
O43 - CFD: 2012/07/25 11:05:37 - [0] D -- C:\Users\alex\AppData\Local\{8E4D86CD-7A35-44B5-B259-A92D655D6551}
O43 - CFD: 2012/07/23 23:03:17 - [0] D -- C:\Users\alex\AppData\Local\{8E988772-15E3-4F0D-A26C-4EE0A407A635}
O43 - CFD: 2012/05/31 14:07:55 - [0] D -- C:\Users\alex\AppData\Local\{8EAFE869-B93D-4FC7-A8C7-B4ACB9DB524E}
O43 - CFD: 2012/06/09 00:01:46 - [0] D -- C:\Users\alex\AppData\Local\{8F59A310-9E47-4864-BCAE-F0B702EE0FCE}
O43 - CFD: 2012/06/29 01:53:35 - [0] D -- C:\Users\alex\AppData\Local\{900BEFBE-7E2E-4CB5-BC5B-6E78B0C5653C}
O43 - CFD: 2012/12/13 00:31:57 - [0] D -- C:\Users\alex\AppData\Local\{90430CA1-B2BB-4F06-A3AE-D126741E54B9}
O43 - CFD: 2012/10/30 15:08:25 - [0] D -- C:\Users\alex\AppData\Local\{905E983B-4841-41D9-B97E-EAA676953777}
O43 - CFD: 2012/12/09 15:00:09 - [0] D -- C:\Users\alex\AppData\Local\{907235A5-A631-4257-8FA9-D267658F2A39}
O43 - CFD: 2012/11/15 14:19:18 - [0] D -- C:\Users\alex\AppData\Local\{91070551-E25A-4CAF-8641-1CF7E5A54B25}
O43 - CFD: 2012/12/16 14:45:33 - [0] D -- C:\Users\alex\AppData\Local\{9189C4F4-F011-428E-A73E-5339B84093D2}
O43 - CFD: 2012/01/13 11:00:00 - [0] D -- C:\Users\alex\AppData\Local\{91A2E8CB-4416-4D72-AA2B-9C15E85794BB}
O43 - CFD: 2012/11/08 10:43:34 - [0] D -- C:\Users\alex\AppData\Local\{91CAD292-959D-4F7B-AB9E-13F466C7DF9A}
O43 - CFD: 2012/07/20 22:06:10 - [0] D -- C:\Users\alex\AppData\Local\{91D473AD-96DD-4B5F-BF8B-F3266DFAA310}
O43 - CFD: 2012/10/18 14:03:03 - [0] D -- C:\Users\alex\AppData\Local\{92C86940-2EB3-40F9-AB73-369E15620E54}
O43 - CFD: 2012/09/20 15:58:37 - [0] D -- C:\Users\alex\AppData\Local\{92E0CC7C-DD58-4F86-9424-8F072BCC3A19}
O43 - CFD: 2012/06/15 22:11:59 - [0] D -- C:\Users\alex\AppData\Local\{9371D558-85EE-4924-883B-60720A7248E7}
O43 - CFD: 2012/10/29 18:17:40 - [0] D -- C:\Users\alex\AppData\Local\{93AF3281-A47C-4830-B1D1-D92FCBCEC9C9}
O43 - CFD: 2012/12/24 14:11:23 - [0] D -- C:\Users\alex\AppData\Local\{94001FD5-DB61-4B07-9822-E1CF9E6840EC}
O43 - CFD: 2012/05/29 11:55:03 - [0] D -- C:\Users\alex\AppData\Local\{94B42A31-3A89-4380-9A91-ACD25AAF903B}
O43 - CFD: 2012/08/11 15:23:10 - [0] D -- C:\Users\alex\AppData\Local\{9577542E-253B-41A6-8270-321C4A08A337}
O43 - CFD: 2013/01/01 20:12:41 - [0] D -- C:\Users\alex\AppData\Local\{978ED2E7-E7BD-4BAD-86DD-1E8087E4364C}
O43 - CFD: 2012/09/06 21:46:28 - [0] D -- C:\Users\alex\AppData\Local\{97A8C829-898B-4ED8-B38D-07D1C994E8C9}
O43 - CFD: 2012/07/14 00:40:27 - [0] D -- C:\Users\alex\AppData\Local\{97EAC42B-372F-4C4C-AA97-196E8CFC55C6}
O43 - CFD: 2012/06/13 15:35:28 - [0] D -- C:\Users\alex\AppData\Local\{9879C81C-2E2B-494F-B57D-9AE872AECB94}
O43 - CFD: 2012/10/25 14:14:35 - [0] D -- C:\Users\alex\AppData\Local\{989EFD64-FFD8-40A1-9307-FA7F568E1E11}
O43 - CFD: 2011/10/26 14:20:05 - [0] D -- C:\Users\alex\AppData\Local\{993247AA-C53B-4E03-9256-262EC5581096}
O43 - CFD: 2012/05/28 10:20:18 - [0] D -- C:\Users\alex\AppData\Local\{997D3CB3-9C26-4D19-8E19-2A49852E88ED}
O43 - CFD: 2013/01/20 14:14:18 - [0] D -- C:\Users\alex\AppData\Local\{99B8D0AE-116D-4E22-B6C2-A1C48925105B}
O43 - CFD: 2012/01/12 11:43:39 - [0] D -- C:\Users\alex\AppData\Local\{99F16B83-0D80-4E07-BD4F-636D2F9B1F88}
O43 - CFD: 2012/07/02 13:58:01 - [0] D -- C:\Users\alex\AppData\Local\{9A7D3776-4F80-4331-AA68-9A0E0D892DCE}
O43 - CFD: 2012/07/02 13:58:12 - [0] D -- C:\Users\alex\AppData\Local\{9C4528BB-0D75-4958-BD01-8921ADB1C923}
O43 - CFD: 2012/06/18 18:02:21 - [0] D -- C:\Users\alex\AppData\Local\{9CC6BE9C-2F80-4960-A495-3E043884C7C2}
O43 - CFD: 2012/06/05 13:43:57 - [0] D -- C:\Users\alex\AppData\Local\{9CE4340A-9BC2-4149-B033-27C2D7B2D0D1}
O43 - CFD: 2011/10/24 10:24:33 - [0] D -- C:\Users\alex\AppData\Local\{9DACE72F-2DE5-4005-A427-783B77C88C67}
O43 - CFD: 2012/09/22 07:56:48 - [0] D -- C:\Users\alex\AppData\Local\{9E12D33F-6AF2-49CE-B12C-AFA9467B3274}
O43 - CFD: 2011/12/31 21:37:33 - [0] D -- C:\Users\alex\AppData\Local\{9F1E7EED-F55C-4E23-B57D-A6FDE6889146}
O43 - CFD: 2012/08/25 12:07:02 - [0] D -- C:\Users\alex\AppData\Local\{9FAC1601-3CE0-47C7-853E-665268AFB0EC}
O43 - CFD: 2012/10/07 11:28:59 - [0] D -- C:\Users\alex\AppData\Local\{9FE64924-0716-4037-89AF-5E77AFBC9931}
O43 - CFD: 2012/06/25 16:02:46 - [0] D -- C:\Users\alex\AppData\Local\{A1051503-26BE-43B9-8721-E0E4EC9FBB28}
O43 - CFD: 2013/01/12 16:02:54 - [0] D -- C:\Users\alex\AppData\Local\{A1F672CC-27AD-4C9D-9749-738F87379302}
O43 - CFD: 2012/08/09 14:06:46 - [0] D -- C:\Users\alex\AppData\Local\{A379FC22-5364-4CF3-9A98-683523B52CC0}
O43 - CFD: 2012/11/04 12:25:35 - [0] D -- C:\Users\alex\AppData\Local\{A4420D17-3543-43A0-98EC-555FE739C380}
O43 - CFD: 2012/07/12 11:33:48 - [0] D -- C:\Users\alex\AppData\Local\{A5349951-9BDB-4B31-BFB7-97CB6B6F5612}
O43 - CFD: 2012/06/30 13:55:32 - [0] D -- C:\Users\alex\AppData\Local\{A54ED29A-3215-4B10-A39B-7E458E19138F}
O43 - CFD: 2015/09/01 23:11:26 - [0] D -- C:\Users\alex\AppData\Local\{A586CE24-109A-4798-9746-72EF7A43909A}
O43 - CFD: 2012/10/06 22:13:40 - [0] D -- C:\Users\alex\AppData\Local\{A5D79DDB-39DD-470C-85E8-6B05EF4A6C09}
O43 - CFD: 2012/06/24 14:09:48 - [0] D -- C:\Users\alex\AppData\Local\{A60F0896-0BC7-4DF3-8912-EE1C79FE32DC}
O43 - CFD: 2011/10/23 19:25:00 - [0] D -- C:\Users\alex\AppData\Local\{A62308D7-D94D-4DBE-B1B4-62169E0234EE}
O43 - CFD: 2012/10/05 19:50:08 - [0] D -- C:\Users\alex\AppData\Local\{A64748DE-F5B0-40FD-B38C-137D6346EC9B}
O43 - CFD: 2013/01/19 16:07:32 - [0] D -- C:\Users\alex\AppData\Local\{A6CBEF92-5E20-474B-AB96-94E7C6882C05}
O43 - CFD: 2012/10/09 10:16:12 - [0] D -- C:\Users\alex\AppData\Local\{A6DE376D-C78C-4FCA-9F89-6FA5673EE255}
O43 - CFD: 2012/11/19 11:50:03 - [0] D -- C:\Users\alex\AppData\Local\{A88894CD-0572-4734-8BB3-F5C3900CFCCC}
O43 - CFD: 2012/09/16 10:29:06 - [0] D -- C:\Users\alex\AppData\Local\{A8BA14F1-4B17-44BD-8F97-7D7074D10EB2}
O43 - CFD: 2012/07/30 23:14:11 - [0] D -- C:\Users\alex\AppData\Local\{A95BC782-9B67-437B-851D-842DE6A8BF24}
O43 - CFD: 2012/06/26 10:59:06 - [0] D -- C:\Users\alex\AppData\Local\{A9719AEE-3998-4FE3-94D4-B87123239F10}
O43 - CFD: 2013/01/17 01:46:26 - [0] D -- C:\Users\alex\AppData\Local\{A9875DE0-7E75-4756-9A7D-BB638A20FF1C}
O43 - CFD: 2012/06/10 14:02:51 - [0] D -- C:\Users\alex\AppData\Local\{A9891A36-1B59-497C-B2CB-ADE8D9DD176B}
O43 - CFD: 2011/12/31 21:37:22 - [0] D -- C:\Users\alex\AppData\Local\{AA242053-B7C3-4F51-B54B-6E001C036084}
O43 - CFD: 2012/06/27 23:35:04 - [0] D -- C:\Users\alex\AppData\Local\{ABD0DC8C-DD54-4F7C-A88B-0847F69A43FC}
O43 - CFD: 2013/01/01 06:14:09 - [0] D -- C:\Users\alex\AppData\Local\{AC2BEDB9-C8E4-4AB3-92A7-7D19C03F3A10}
O43 - CFD: 2012/07/09 11:29:50 - [0] D -- C:\Users\alex\AppData\Local\{AC69129D-CFD1-49F7-98C6-A990E803CD3E}
O43 - CFD: 2012/06/05 13:43:45 - [0] D -- C:\Users\alex\AppData\Local\{AC7522A4-6B86-49E3-A5DC-1CD2E27F7E26}
O43 - CFD: 2011/10/28 13:59:10 - [0] D -- C:\Users\alex\AppData\Local\{AE29560E-CC43-4CD5-A49F-3C475AE21754}
O43 - CFD: 2012/06/29 13:54:14 - [0] D -- C:\Users\alex\AppData\Local\{AEBC04A3-82A7-4E6A-A094-12917D204879}
O43 - CFD: 2012/01/19 18:41:38 - [0] D -- C:\Users\alex\AppData\Local\{AFC9511A-6DF6-41F2-89C4-3448408900C6}
O43 - CFD: 2012/11/03 18:36:11 - [0] D -- C:\Users\alex\AppData\Local\{AFDB663B-B757-4307-AA37-9A11485E944D}
O43 - CFD: 2013/01/18 13:47:35 - [0] D -- C:\Users\alex\AppData\Local\{B0A6336D-650A-474E-A53A-FB1631648388}
O43 - CFD: 2012/08/04 11:46:42 - [0] D -- C:\Users\alex\AppData\Local\{B16C41E1-E878-4FEB-A787-CEA6D249AEBB}
O43 - CFD: 2012/07/15 12:42:40 - [0] D -- C:\Users\alex\AppData\Local\{B1F54BC7-2F9C-4F47-9C69-86929B0E80F5}
O43 - CFD: 2012/06/06 15:05:28 - [0] D -- C:\Users\alex\AppData\Local\{B2499B2F-EDD3-4DA1-AA4E-7051934A2B39}
O43 - CFD: 2012/11/18 12:34:45 - [0] D -- C:\Users\alex\AppData\Local\{B26D3F89-BBFD-4FF4-B025-BF78FA9F74C5}
O43 - CFD: 2011/10/20 13:02:12 - [0] D -- C:\Users\alex\AppData\Local\{B2DB481C-8BD2-4E08-8DBA-03D7E3E69E0E}
O43 - CFD: 2011/11/05 18:20:43 - [0] D -- C:\Users\alex\AppData\Local\{B30E989C-20DB-42E2-A812-C7CF65E98C10}
O43 - CFD: 2012/07/23 23:03:29 - [0] D -- C:\Users\alex\AppData\Local\{B32AACC3-5470-4F93-AC62-CF61309EA1BE}
O43 - CFD: 2012/07/26 11:06:46 - [0] D -- C:\Users\alex\AppData\Local\{B4EB3BF2-EEAD-4EF0-BDC5-18D595DF242B}
O43 - CFD: 2012/09/29 21:53:50 - [0] D -- C:\Users\alex\AppData\Local\{B5817F3A-1938-4AB6-8DEE-D20BFF40E231}
O43 - CFD: 2012/08/29 23:11:16 - [0] D -- C:\Users\alex\AppData\Local\{B5828797-5026-494D-AF97-43BF430D550E}
O43 - CFD: 2012/01/19 21:15:40 - [0] D -- C:\Users\alex\AppData\Local\{B5C99B35-C7E8-4182-B5FB-AF284C3B4368}
O43 - CFD: 2012/06/19 13:36:44 - [0] D -- C:\Users\alex\AppData\Local\{B69BCCA5-8C60-4AFF-8657-9EEB67BEC843}
O43 - CFD: 2012/10/15 13:40:14 - [0] D -- C:\Users\alex\AppData\Local\{B7D43EBF-6EEB-487A-8353-374568FA10BE}
O43 - CFD: 2012/10/04 10:21:42 - [0] D -- C:\Users\alex\AppData\Local\{B7FA419B-FBE0-4EE9-888B-EFD25049501C}
O43 - CFD: 2012/06/02 23:59:56 - [0] D -- C:\Users\alex\AppData\Local\{B8473B4B-03DE-4D62-B496-800C526C7CFF}
O43 - CFD: 2013/01/14 11:02:30 - [0] D -- C:\Users\alex\AppData\Local\{B98834B7-1CD1-4825-9C1D-CFED7857445E}
O43 - CFD: 2012/09/12 22:37:25 - [0] D -- C:\Users\alex\AppData\Local\{B99FF530-477D-496D-8E11-717ABD4D9EB7}
O43 - CFD: 2012/07/31 23:15:19 - [0] D -- C:\Users\alex\AppData\Local\{B9C5C743-BAFC-4CA3-B96C-937AF0655421}
O43 - CFD: 2012/01/18 15:15:36 - [0] D -- C:\Users\alex\AppData\Local\{B9F0177F-6C37-4374-8075-8D5EA99ED718}
O43 - CFD: 2012/07/25 23:06:18 - [0] D -- C:\Users\alex\AppData\Local\{BA7643AE-401D-42E6-9457-779213910AF7}
O43 - CFD: 2012/10/21 15:10:49 - [0] D -- C:\Users\alex\AppData\Local\{BAF81042-5E30-4274-962E-0B8F11E65D02}
O43 - CFD: 2012/06/09 14:08:26 - [0] D -- C:\Users\alex\AppData\Local\{BC035E88-24AE-45DB-92EC-1AAFFD6B921B}
O43 - CFD: 2012/07/11 11:32:30 - [0] D -- C:\Users\alex\AppData\Local\{BD1FE78C-6356-4EB1-B31A-1724382672EF}
O43 - CFD: 2012/05/31 14:07:43 - [0] D -- C:\Users\alex\AppData\Local\{BD8AC3E0-FCB4-466D-A8C3-AC41FDA20FA8}
O43 - CFD: 2013/01/04 14:01:43 - [0] D -- C:\Users\alex\AppData\Local\{BDD99757-06FF-4877-BD7D-8C2F0FB67ABF}
O43 - CFD: 2012/06/26 10:59:18 - [0] D -- C:\Users\alex\AppData\Local\{BE04181C-2190-4189-9626-0FC45D46C24F}
O43 - CFD: 2013/01/16 13:46:00 - [0] D -- C:\Users\alex\AppData\Local\{BE5E19EF-6F4F-49FB-BAC2-E58F2B42B1EB}
O43 - CFD: 2012/12/30 21:49:50 - [0] D -- C:\Users\alex\AppData\Local\{BF74DE61-3662-4EC2-93B5-6B94BB241CC6}
O43 - CFD: 2011/12/31 17:33:39 - [0] D -- C:\Users\alex\AppData\Local\{BF93B549-8FA0-452D-8C90-4E9008C56CFB}
O43 - CFD: 2012/08/02 11:17:16 - [0] D -- C:\Users\alex\AppData\Local\{C002A1CB-1E0C-4006-AF64-7D44C2B21ED4}
O43 - CFD: 2012/06/11 19:58:21 - [0] D -- C:\Users\alex\AppData\Local\{C04455FB-9444-41DD-8343-DA101C81E9DF}
O43 - CFD: 2012/06/22 22:52:42 - [0] D -- C:\Users\alex\AppData\Local\{C0C29A75-658D-47A7-BBE3-7954D1240E0B}
O43 - CFD: 2012/10/26 14:12:21 - [0] D -- C:\Users\alex\AppData\Local\{C1A361C2-3EC2-4F9F-B581-4D75A51E35AF}
O43 - CFD: 2012/07/30 11:13:55 - [0] D -- C:\Users\alex\AppData\Local\{C27636B0-7CD8-4627-AAFB-8391FDF67842}
O43 - CFD: 2012/09/23 09:20:48 - [0] D -- C:\Users\alex\AppData\Local\{C2773AD1-B7C1-4573-B433-84321BD1C1C3}
O43 - CFD: 2012/07/04 10:55:26 - [0] D -- C:\Users\alex\AppData\Local\{C2EE161D-C439-4EA5-A31A-8C3B8774A2EA}
O43 - CFD: 2012/07/09 23:30:30 - [0] D -- C:\Users\alex\AppData\Local\{C3272642-DF35-4617-8639-0648BC26B7CD}
O43 - CFD: 2012/06/14 22:45:34 - [0] D -- C:\Users\alex\AppData\Local\{C39F21B1-8A8C-40CB-B3E4-D8E2B0EB0936}
O43 - CFD: 2011/10/30 14:35:39 - [0] D -- C:\Users\alex\AppData\Local\{C3D66D96-339C-46E6-97A5-814B75FE688B}
O43 - CFD: 2012/07/04 10:55:37 - [0] D -- C:\Users\alex\AppData\Local\{C3DA0917-2615-4752-9E35-5934CC9DFD0B}
O43 - CFD: 2013/01/23 18:09:08 - [0] D -- C:\Users\alex\AppData\Local\{C410DC4F-A0CF-49FA-A7EC-E619F1E4909A}
O43 - CFD: 2012/01/17 23:08:24 - [0] D -- C:\Users\alex\AppData\Local\{C4575B53-C0F3-4C36-8A44-ED8E30D2B16A}
O43 - CFD: 2012/09/18 16:06:03 - [0] D -- C:\Users\alex\AppData\Local\{C4594582-B902-4B5D-8B10-70C98D97DF55}
O43 - CFD: 2012/09/02 14:16:51 - [0] D -- C:\Users\alex\AppData\Local\{C4A6FF82-C35E-4B79-A72B-48A8EDE4C6AC}
O43 - CFD: 2012/01/17 13:04:44 - [0] D -- C:\Users\alex\AppData\Local\{C52201A9-0BF3-431C-B8E3-3A258E55F8D5}
O43 - CFD: 2012/08/08 12:22:23 - [0] D -- C:\Users\alex\AppData\Local\{C55EC080-A467-4231-8E33-C13C3F888EF0}
O43 - CFD: 2013/01/11 01:12:36 - [0] D -- C:\Users\alex\AppData\Local\{C5AA7FDD-687D-46D0-8449-6527409E2F7D}
O43 - CFD: 2012/07/09 23:30:42 - [0] D -- C:\Users\alex\AppData\Local\{C5FBDF32-E86C-49DA-A80D-93853A347F9D}
O43 - CFD: 2012/10/17 13:11:10 - [0] D -- C:\Users\alex\AppData\Local\{C60CB3B3-A756-480D-9F65-8AE03C29B672}
O43 - CFD: 2012/06/17 00:33:07 - [0] D -- C:\Users\alex\AppData\Local\{C6131D0C-A0C9-4DF0-A8BF-A1D556F574D3}
O43 - CFD: 2012/06/11 19:58:08 - [0] D -- C:\Users\alex\AppData\Local\{C63BAC28-05A1-4F7D-BA9E-A1DE6772E241}
O43 - CFD: 2012/01/18 16:38:41 - [0] D -- C:\Users\alex\AppData\Local\{C77D978F-3444-4E71-837B-E60F7754C0BB}
O43 - CFD: 2012/10/16 10:19:55 - [0] D -- C:\Users\alex\AppData\Local\{C77F7082-5D3D-4B13-95C6-1C4B3FCC3FCC}
O43 - CFD: 2013/01/04 20:17:12 - [0] D -- C:\Users\alex\AppData\Local\{C780025E-5A3F-4166-9285-E37D5C82ED5D}
O43 - CFD: 2012/06/01 13:40:03 - [0] D -- C:\Users\alex\AppData\Local\{C818CBEF-BEDF-437C-9185-A3F03340EE19}
O43 - CFD: 2012/06/08 11:10:57 - [0] D -- C:\Users\alex\AppData\Local\{CA38788E-9F97-4133-BAC8-8A02620AA6C4}
O43 - CFD: 2012/08/01 23:16:48 - [0] D -- C:\Users\alex\AppData\Local\{CA8920AA-2AC7-4016-B67C-246A1A4A6E0E}
O43 - CFD: 2012/07/28 11:11:16 - [0] D -- C:\Users\alex\AppData\Local\{CAE879CE-7308-4B5E-A420-AA03171C21C8}
O43 - CFD: 2012/12/16 00:15:28 - [0] D -- C:\Users\alex\AppData\Local\{CAF2D9F6-CFED-4153-9E50-A17052123DF2}
O43 - CFD: 2012/07/24 11:04:19 - [0] D -- C:\Users\alex\AppData\Local\{CB7231F2-692A-4E28-9C91-A288DF46F3F2}
O43 - CFD: 2012/07/09 11:30:02 - [0] D -- C:\Users\alex\AppData\Local\{CBAAB9D9-7DF4-4382-9621-45F441F09626}
O43 - CFD: 2012/01/07 20:16:50 - [0] D -- C:\Users\alex\AppData\Local\{CF396BEA-1980-4409-813E-439583EF3ED6}
O43 - CFD: 2012/07/18 09:45:21 - [0] D -- C:\Users\alex\AppData\Local\{CFA5D178-C1EF-4CA6-866E-B31E8DB2C767}
O43 - CFD: 2012/06/16 11:15:23 - [0] D -- C:\Users\alex\AppData\Local\{D047879F-82C3-4459-A61B-EE315908058B}
O43 - CFD: 2012/07/21 22:07:29 - [0] D -- C:\Users\alex\AppData\Local\{D0B2BF8A-D83C-4157-9D8B-9F41CB5732C3}
O43 - CFD: 2012/07/25 11:05:26 - [0] D -- C:\Users\alex\AppData\Local\{D179A184-8538-4713-81E9-091B806B6230}
O43 - CFD: 2012/11/03 00:43:47 - [0] D -- C:\Users\alex\AppData\Local\{D17DB23B-CC27-4411-909D-A976169FF650}
O43 - CFD: 2012/01/19 19:24:15 - [0] D -- C:\Users\alex\AppData\Local\{D2694CFA-3799-4F81-ACF5-A889F8E2FD84}
O43 - CFD: 2012/08/30 23:24:39 - [0] D -- C:\Users\alex\AppData\Local\{D3801F40-655F-4EB5-982F-0BC5AF1E66D9}
O43 - CFD: 2012/07/08 11:28:47 - [0] D -- C:\Users\alex\AppData\Local\{D40562E0-D20A-4078-85A3-907AB20C1BCE}
O43 - CFD: 2012/12/23 13:52:23 - [0] D -- C:\Users\alex\AppData\Local\{D461C703-6645-4A82-A96C-42D7C55E9737}
O43 - CFD: 2012/12/02 12:37:19 - [0] D -- C:\Users\alex\AppData\Local\{D46B4600-57DA-4862-B7EF-AC9BE777687B}
O43 - CFD: 2011/11/08 18:44:39 - [0] D -- C:\Users\alex\AppData\Local\{D4D72FEC-8035-4934-9364-4B4652430054}
O43 - CFD: 2013/01/03 13:47:08 - [0] D -- C:\Users\alex\AppData\Local\{D568552F-57B8-43A0-B075-0C9445B4C005}
O43 - CFD: 2012/10/20 11:50:05 - [0] D -- C:\Users\alex\AppData\Local\{D5F3C6D2-02A9-455E-924F-6EA9553A6CFC}
O43 - CFD: 2012/06/02 10:06:23 - [0] D -- C:\Users\alex\AppData\Local\{D5F74C07-1CBC-4FA4-8198-04C7E863E7C8}
O43 - CFD: 2012/07/01 01:55:57 - [0] D -- C:\Users\alex\AppData\Local\{D699EF02-B665-496A-9E41-9887B767C8EE}
O43 - CFD: 2011/11/01 14:41:52 - [0] D -- C:\Users\alex\AppData\Local\{D6B42BB4-149B-4874-B101-797B62B4015F}
O43 - CFD: 2012/01/07 17:58:53 - [0] D -- C:\Users\alex\AppData\Local\{D6F6A141-4EC2-4572-AB46-A2B94CA20374}
O43 - CFD: 2012/11/01 12:38:18 - [0] D -- C:\Users\alex\AppData\Local\{D7BB55A7-932D-4BB4-A938-50CD222B9467}
O43 - CFD: 2013/01/05 14:49:51 - [0] D -- C:\Users\alex\AppData\Local\{D7BD001C-4ADB-439E-B6E8-8EFCEDA980B6}
O43 - CFD: 2012/11/16 10:37:35 - [0] D -- C:\Users\alex\AppData\Local\{D835BCF7-51F4-4543-9F93-C2AE90CCDF89}
O43 - CFD: 2012/07/15 00:41:46 - [0] D -- C:\Users\alex\AppData\Local\{D860C186-B110-4950-8A48-02D95950876F}
O43 - CFD: 2012/10/11 00:02:04 - [0] D -- C:\Users\alex\AppData\Local\{D8966FF8-7918-4376-81F7-2B11DE6E7BE1}
O43 - CFD: 2012/11/30 11:26:44 - [0] D -- C:\Users\alex\AppData\Local\{D94D92E9-8DBD-44BD-AD51-F4C2DEA92049}
O43 - CFD: 2012/12/29 09:45:48 - [0] D -- C:\Users\alex\AppData\Local\{D9B01D3F-AAE1-4DA7-815C-559EE3C5EF55}
O43 - CFD: 2012/09/24 16:34:27 - [0] D -- C:\Users\alex\AppData\Local\{DA3EDEBA-B0C1-4B64-BAB1-FA145E991D6E}
O43 - CFD: 2012/07/13 11:34:57 - [0] D -- C:\Users\alex\AppData\Local\{DB155D42-FD16-4B5B-8FD9-4455173F34A9}
O43 - CFD: 2012/06/04 21:30:45 - [0] D -- C:\Users\alex\AppData\Local\{DBF0FD3C-2FF6-42CB-95E9-6C99C093B268}
O43 - CFD: 2012/01/06 01:01:21 - [0] D -- C:\Users\alex\AppData\Local\{DC6FA084-BFE6-4785-8F77-460A294F446E}
O43 - CFD: 2012/07/28 23:11:44 - [0] D -- C:\Users\alex\AppData\Local\{DCCAA2D8-73B0-44C3-A2C7-361BD47AD051}
O43 - CFD: 2012/10/31 10:41:22 - [0] D -- C:\Users\alex\AppData\Local\{DD09AFC2-E604-4533-8652-BE38FE872ACB}
O43 - CFD: 2012/07/20 22:06:22 - [0] D -- C:\Users\alex\AppData\Local\{DDBE4E1B-D7C8-4B5D-B6BA-05E24A89887A}
O43 - CFD: 2012/11/29 11:25:13 - [0] D -- C:\Users\alex\AppData\Local\{DE628890-04F2-4881-9A2C-AC42E3430281}
O43 - CFD: 2012/07/02 01:57:16 - [0] D -- C:\Users\alex\AppData\Local\{DEBE2962-B654-461D-A009-8B06CB67E9B4}
O43 - CFD: 2012/07/17 00:44:38 - [0] D -- C:\Users\alex\AppData\Local\{DEDB0351-374E-41CD-9459-98B009F07B6F}
O43 - CFD: 2012/11/25 11:36:02 - [0] D -- C:\Users\alex\AppData\Local\{DF3A00E9-A7FD-4DB2-923B-85609796C783}
O43 - CFD: 2011/11/03 14:56:32 - [0] D -- C:\Users\alex\AppData\Local\{DFCA59F1-0362-4E45-A0B7-EDD26D9F8F8A}
O43 - CFD: 2012/01/06 01:01:32 - [0] D -- C:\Users\alex\AppData\Local\{E0BAC77B-B9B6-428C-BB61-674016189927}
O43 - CFD: 2012/08/05 11:48:18 - [0] D -- C:\Users\alex\AppData\Local\{E1441396-8F17-4324-A50F-48CDD8901234}
O43 - CFD: 2012/08/04 11:46:54 - [0] D -- C:\Users\alex\AppData\Local\{E22DE512-F135-44C4-86C5-10E7309F6D69}
O43 - CFD: 2012/01/10 11:46:46 - [0] D -- C:\Users\alex\AppData\Local\{E297221A-1770-4261-9231-1381212DE493}
O43 - CFD: 2012/11/17 11:04:12 - [0] D -- C:\Users\alex\AppData\Local\{E3DA8A70-98FA-44C5-8493-11B234761D58}
O43 - CFD: 2012/09/08 09:48:03 - [0] D -- C:\Users\alex\AppData\Local\{E3EA6E58-624B-4238-AD25-71A280C45A4E}
O43 - CFD: 2012/09/05 00:53:43 - [0] D -- C:\Users\alex\AppData\Local\{E57A6903-E7A6-426C-87A3-211288D60B7A}
O43 - CFD: 2011/12/29 00:44:12 - [0] D -- C:\Users\alex\AppData\Local\{E60E00F6-3AC6-44A9-ACBD-7D7D413B7D8F}
O43 - CFD: 2012/08/04 23:47:20 - [0] D -- C:\Users\alex\AppData\Local\{E647F67B-6834-47FA-8C97-0E782D3AD62B}
O43 - CFD: 2012/11/02 00:48:21 - [0] D -- C:\Users\alex\AppData\Local\{E6906E51-6882-4F56-A185-75DA8A7CFCCA}
O43 - CFD: 2012/07/24 11:04:07 - [0] D -- C:\Users\alex\AppData\Local\{E69CB433-EE30-4A5F-9718-6A3FA9272714}
O43 - CFD: 2012/08/09 02:06:05 - [0] D -- C:\Users\alex\AppData\Local\{E69EFE3E-6805-4513-9301-F0A43080C5F6}
O43 - CFD: 2012/05/30 13:59:13 - [0] D -- C:\Users\alex\AppData\Local\{E7C92497-E542-4C36-A034-A969525A1DA7}
O43 - CFD: 2011/10/30 14:09:50 - [0] D -- C:\Users\alex\AppData\Local\{E7E833E6-8B02-436A-BBA6-001B95AA2783}
O43 - CFD: 2012/11/13 23:32:52 - [0] D -- C:\Users\alex\AppData\Local\{E91831BD-1A00-4944-8503-E6396755BDC5}
O43 - CFD: 2012/07/30 11:13:43 - [0] D -- C:\Users\alex\AppData\Local\{E983F30C-02C2-49B0-9C84-9C10318DD181}
O43 - CFD: 2011/11/13 20:38:50 - [0] D -- C:\Users\alex\AppData\Local\{E99C461A-217E-46D3-A72D-7164EB35BF73}
O43 - CFD: 2012/06/22 22:52:29 - [0] D -- C:\Users\alex\AppData\Local\{EAD34909-FDCF-44D8-A7E0-1298AF5A750D}
O43 - CFD: 2012/08/02 23:18:07 - [0] D -- C:\Users\alex\AppData\Local\{EB51B862-0969-4384-B6E7-FCE779F2D7C0}
O43 - CFD: 2012/08/27 23:09:43 - [0] D -- C:\Users\alex\AppData\Local\{EB5918FD-E48B-4E8B-ABE1-906C6337731E}
O43 - CFD: 2012/07/10 11:31:21 - [0] D -- C:\Users\alex\AppData\Local\{EB6EF49B-F528-4484-8429-427FE4304BC1}
O43 - CFD: 2013/01/02 13:00:01 - [0] D -- C:\Users\alex\AppData\Local\{EB7F4340-5D66-421A-9B22-7A1EBA7A3940}
O43 - CFD: 2012/07/06 11:26:42 - [0] D -- C:\Users\alex\AppData\Local\{EBF3D7FE-9764-4AFF-9D6B-4CA2B27D2342}
O43 - CFD: 2012/09/17 16:08:26 - [0] D -- C:\Users\alex\AppData\Local\{ED342B4D-B438-43A3-AD7E-1E8A744BC461}
O43 - CFD: 2012/09/05 17:16:55 - [0] D -- C:\Users\alex\AppData\Local\{EF5DF981-BAF1-4684-9956-73B58D37DCA3}
O43 - CFD: 2013/01/13 14:55:21 - [0] D -- C:\Users\alex\AppData\Local\{EF930BD4-F9A8-4A07-B1A9-239348BA0ECF}
O43 - CFD: 2012/06/20 01:37:21 - [0] D -- C:\Users\alex\AppData\Local\{EFFBABF1-814F-4F01-9CF0-F56E8CB199A9}
O43 - CFD: 2012/10/27 13:56:52 - [0] D -- C:\Users\alex\AppData\Local\{F0C9E8B8-3C87-4273-88CF-CBBC3FBCC724}
O43 - CFD: 2012/08/12 03:23:48 - [0] D -- C:\Users\alex\AppData\Local\{F17895A3-F8E5-4A08-9163-183C92FC89B5}
O43 - CFD: 2012/12/12 12:31:32 - [0] D -- C:\Users\alex\AppData\Local\{F183C008-A236-4881-BB57-22F91FC00C86}
O43 - CFD: 2012/01/11 17:42:19 - [0] D -- C:\Users\alex\AppData\Local\{F20B8658-A605-4C18-91A3-62DEDA45E2B5}
O43 - CFD: 2012/07/12 11:33:37 - [0] D -- C:\Users\alex\AppData\Local\{F24A98D1-4FE0-468A-9770-8AD72BB8F395}
O43 - CFD: 2012/06/27 23:34:51 - [0] D -- C:\Users\alex\AppData\Local\{F300EF14-CD8D-4876-93FA-E5F38463D0A2}
O43 - CFD: 2011/11/08 12:31:53 - [0] D -- C:\Users\alex\AppData\Local\{F328E98E-74E0-4833-8738-15638CD05ED6}
O43 - CFD: 2012/12/26 13:32:13 - [0] D -- C:\Users\alex\AppData\Local\{F53DDEAE-06DC-4F52-926F-EFF2058DF9C1}
O43 - CFD: 2012/07/20 10:05:20 - [0] D -- C:\Users\alex\AppData\Local\{F5477D4B-6AA3-47F0-8120-789E64E3FC87}
O43 - CFD: 2012/07/27 23:10:33 - [0] D -- C:\Users\alex\AppData\Local\{F56A254B-6CCE-45AC-B873-61736D55F813}
O43 - CFD: 2012/08/28 23:10:33 - [0] D -- C:\Users\alex\AppData\Local\{F6D43DCC-5B6E-4578-9EC3-F9C02D60564F}
O43 - CFD: 2012/08/10 02:07:14 - [0] D -- C:\Users\alex\AppData\Local\{F6F2BFB1-03B6-459D-8425-B1690E2D4261}
O43 - CFD: 2012/10/11 12:02:29 - [0] D -- C:\Users\alex\AppData\Local\{F71DB95E-7EEF-4AE8-ADC8-5916CC415B7D}
O43 - CFD: 2011/12/26 20:08:45 - [0] D -- C:\Users\alex\AppData\Local\{F7DEEBE4-0F38-417A-BE01-951172B2E370}
O43 - CFD: 2012/10/08 13:52:30 - [0] D -- C:\Users\alex\AppData\Local\{F861C093-1CFB-483C-BBB9-C2EADB5390FD}
O43 - CFD: 2011/12/26 17:28:25 - [0] D -- C:\Users\alex\AppData\Local\{F8948281-8087-40B9-A9D1-AA7DFB96637C}
O43 - CFD: 2014/01/22 21:06:39 - [0] D -- C:\Users\alex\AppData\Local\{F993FEDE-517B-4DB3-9978-FE3B58A574CA}
O43 - CFD: 2012/12/31 12:36:34 - [0] D -- C:\Users\alex\AppData\Local\{F9A0084E-48FB-4BC7-BE19-947F2E8554CD}
O43 - CFD: 2012/07/28 11:11:04 - [0] D -- C:\Users\alex\AppData\Local\{FB0438C5-067D-42CA-AF9C-F9586898609E}
O43 - CFD: 2012/01/16 14:49:36 - [0] D -- C:\Users\alex\AppData\Local\{FC7F5F86-362F-4DBC-93A4-AB0DFC440D6D}
O43 - CFD: 2011/12/30 17:38:56 - [0] D -- C:\Users\alex\AppData\Local\{FCC8332D-F381-4455-AEE8-AFAC0554F9DD}
O43 - CFD: 2012/08/03 11:18:47 - [0] D -- C:\Users\alex\AppData\Local\{FCCC94B9-F229-4B5E-9C6E-75F7096FFAE5}
O43 - CFD: 2011/11/13 20:05:22 - [0] D -- C:\Users\alex\AppData\Local\{FD4669FE-6234-48D2-AF7E-298AF80524DC}
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/08/04 21:06:07 - [] RD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/28 17:02:33 - [] RD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/10 13:04:26 - [] D -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/28 17:02:33 - [] RD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/08/04 20:39:38 - [] D -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Superstar Racing
O43 - CFD: 2015/07/10 13:04:26 - [] RD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/08/16 01:22:39 - [] D -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamax
O43 - CFD: 2015/07/10 13:04:45 - [] RSD -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

---\\ Enumération des clés StartupReg (15) - 1s
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe ©
O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe ©
O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe ©
O53 - SMSR:HKLM\...\startupreg\BingDesktop [Key] . (...) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Easybits Recovery [Key] . (.EasyBits Software AS - Power off recovery for Magic Desktop.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe ©
O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe ©
O53 - SMSR:HKLM\...\startupreg\hpsysdrv [Key] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe ©
O53 - SMSR:HKLM\...\startupreg\LogitechQuickCamRibbon [Key] . (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
O53 - SMSR:HKLM\...\startupreg\Microsoft Default Manager [Key] . (...) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\mobilegeni daemon [Key] . (...) -- C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Optional.Mobogenie
O53 - SMSR:HKLM\...\startupreg\MSC [Key] . (...) -- c:\Program Files\Microsoft Security Client\msseces.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\PDF Complete [Key] . (.PDF Complete Inc - Sentry for PDF.) -- C:\Program Files (x86)\PDF Complete\pdfsty.exe ©
O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (...) -- C:\Program Files (x86)\QuickTime\QTTask.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SmartMenu [Key] . (.Copyright (C) 2009 Hewlett-Packard Development Compan - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ©
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (...) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (.not file.)

---\\ Liste des pilotes du système (48) - 2s
O58 - SDL:2015/07/10 12:59:38 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] ©
O58 - SDL:2015/07/10 12:59:38 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] ©
O58 - SDL:2015/07/10 12:59:38 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] ©
O58 - SDL:2015/07/10 12:59:38 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624] ©
O58 - SDL:2009/08/13 09:38:24 A . (.CSR, plc - Bluetooth Remote Control Driver.) -- C:\WINDOWS\System32\drivers\BthAvrcp.sys [29184] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] ©
O58 - SDL:2012/05/29 15:53:30 A . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\WINDOWS\System32\drivers\cpqdfw.sys [27456] ©
O58 - SDL:2010/03/02 00:59:50 A . (...) -- C:\WINDOWS\System32\drivers\cqcpu.sys [24376]
O58 - SDL:2015/07/10 12:59:38 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] ©
O58 - SDL:2015/07/10 12:59:36 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] ©
O58 - SDL:2015/07/10 12:59:36 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [122608] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] ©
O58 - SDL:2015/07/10 12:59:38 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108896] ©
O58 - SDL:2015/07/10 12:59:38 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] ©
O58 - SDL:2015/07/10 12:59:38 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] ©
O58 - SDL:2015/07/10 12:59:38 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] ©
O58 - SDL:2009/10/07 01:45:50 A . (...) -- C:\WINDOWS\System32\drivers\LVPr2M64.sys [30232]
O58 - SDL:2015/07/10 12:59:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] ©
O58 - SDL:2015/07/10 12:59:39 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] ©
O58 - SDL:2015/06/12 04:59:24 A . (.MediaTek Inc. - MediaTek 802.11 Wireless Adapter Driver.) -- C:\WINDOWS\System32\drivers\netr28x.sys [2554528]
O58 - SDL:2013/11/28 13:38:20 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\System32\drivers\nvhda64v.sys [197408] ©
O58 - SDL:2015/08/18 10:48:55 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys [12896432] ©
O58 - SDL:2015/07/10 12:59:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] ©
O58 - SDL:2015/07/10 12:59:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] ©
O58 - SDL:2015/08/11 06:52:30 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\WINDOWS\System32\drivers\nvvad64v.sys [50472] ©
O58 - SDL:2015/07/10 12:59:39 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] ©
O58 - SDL:2015/08/12 13:04:36 A . (.IBM Corp. - RapportHades64.) -- C:\WINDOWS\System32\drivers\RapportHades64.sys [139896]
O58 - SDL:2015/08/12 13:04:36 A . (.IBM Corp. - RapportKE.) -- C:\WINDOWS\System32\drivers\RapportKE64.sys [394584]
O58 - SDL:2015/07/10 12:59:39 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [587264] ©
O58 - SDL:2015/06/24 22:57:00 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4504320] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] ©
O58 - SDL:2015/07/10 12:59:48 A . (...) -- C:\WINDOWS\System32\drivers\Udecx.sys [44032]
O58 - SDL:2015/07/10 12:59:39 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] ©
O58 - SDL:2015/07/10 12:59:39 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] ©
O58 - SDL:2015/07/10 12:59:39 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] ©

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (32) - 70s
O61 - LFC: 2015/09/03 15:30:05 A . (..) -- C:\Users\alex\Winamax\Winamax Poker\Winamax Poker.exe [142336]
O61 - LFC: 2015/09/03 13:44:02 A . (..) -- C:\Users\alex\Winamax\Winamax Poker\Adobe AIR\Versions\1.0\Resources\AdobeCP.dll [0]
O61 - LFC: 2015/09/03 13:44:03 A . (..) -- C:\Users\alex\Winamax\Winamax Poker\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe [59392]
O61 - LFC: 2015/09/03 13:44:04 A . (..) -- C:\Users\alex\Winamax\Winamax Poker\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll [16852128]
O61 - LFC: 2015/09/03 13:44:04 A . (.Copyright © 1998-2012 various authors.) -- C:\Users\alex\Winamax\Winamax Poker\Adobe AIR\Versions\1.0\Resources\WebKit.dll [4885152]
O61 - LFC: 2015/09/03 15:30:16 A . (..) -- C:\Users\alex\Winamax\WinaChat\WinaChat.exe [142336]
O61 - LFC: 2015/09/03 13:44:02 A . (..) -- C:\Users\alex\Winamax\WinaChat\Adobe AIR\Versions\1.0\Resources\AdobeCP.dll [0]
O61 - LFC: 2015/09/03 13:44:03 A . (..) -- C:\Users\alex\Winamax\WinaChat\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe [59392]
O61 - LFC: 2015/09/03 13:44:04 A . (..) -- C:\Users\alex\Winamax\WinaChat\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll [16852128]
O61 - LFC: 2015/09/03 13:44:04 A . (.Copyright © 1998-2012 various authors.) -- C:\Users\alex\Winamax\WinaChat\Adobe AIR\Versions\1.0\Resources\WebKit.dll [4885152]
O61 - LFC: 2015/09/09 14:46:15 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_d76b8b83ee7f6d85_0_0.bin [16384]
O61 - LFC: 2015/09/01 23:36:17 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_6439a828c07c91e1_0_0.bin [16384]
O61 - LFC: 2015/09/05 21:46:57 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_a662c5af5aee58c2_2_1.bin [1048576]
O61 - LFC: 2015/09/09 11:43:28 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192]
O61 - LFC: 2015/09/09 13:12:46 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_f42361f59f7e84ae_0_0.bin [16384]
O61 - LFC: 2015/09/09 14:02:38 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_635773898214459762.bin [112117]
O61 - LFC: 2015/09/08 21:51:09 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_abdb79e79164a64e_0_0.bin [16384]
O61 - LFC: 2015/09/08 21:58:59 A . (..) -- C:\Users\alex\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Temp\NVIDIA Corporation\NV_Cache\52fb2f4815a91ce6db078c0fe4315a94_fce8394c8fd8a807_abdb79e79164a64e_1_1.bin [1048576]
O61 - LFC: 2015/09/09 15:04:58 A . (..) -- C:\Users\alex\AppData\Local\Packages\king.com.CandyCrushSaga_kgqvnymyfvs32\LocalCache\Cache\ServiceLayer\service_module_messages.bin [1490]
O61 - LFC: 2015/09/08 10:00:08 A . (..) -- C:\Users\alex\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin [5226107]
O61 - LFC: 2015/09/08 19:33:29 A . (..) -- C:\Users\alex\AppData\Local\NVIDIA\NvBackend\Packages\00007dbb\DAO.19940805.exe [6241568]
O61 - LFC: 2015/09/08 19:33:26 A . (..) -- C:\Users\alex\AppData\Local\NVIDIA\NvBackend\Packages\00007db6\CoProc update.19940080.exe [523712]
O61 - LFC: 2015/09/08 21:51:33 A . (..) -- C:\Users\alex\AppData\Local\Microsoft\Internet Explorer\UrlBlock\urlblock_635773295250745472.bin [108545]
O61 - LFC: 2015/09/09 12:41:27 A . (..) -- C:\Users\alex\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]
O61 - LFC: 2015/09/03 19:24:41 A . (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\9564efb39c6cadd5.exe [2756776]
O61 - LFC: 2015/09/03 19:24:40 A . (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\ChatRepublicPlayer.exe [2756776]
O61 - LFC: 2015/09/03 19:24:44 A . (..) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\DFBridge.dll [81888]
O61 - LFC: 2015/09/03 19:24:44 A . (.DoubleFusion.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\DFEngine.dll [889824]
O61 - LFC: 2015/09/03 19:24:41 A . (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\updater\9564efb39c6cadd5.exe [2756776]
O61 - LFC: 2015/09/03 19:24:40 A . (.Chat Republic Games OY.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\updater\ChatRepublicPlayer.exe [2756776]
O61 - LFC: 2015/09/03 19:24:44 A . (..) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\updater\DFBridge.dll [81888]
O61 - LFC: 2015/09/03 19:24:44 A . (.DoubleFusion.) -- C:\Users\alex\AppData\Local\Chat Republic Games\Superstar Racing\updater\DFEngine.dll [889824]

---\\ Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (44) - 36s
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.SecretSauce.is", "fmxqtfr"); =>PUP.Optional.SecretSauce
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.SecretSauce.ug", "45329BFF-CC92-47DE-806A-84433541498F"); =>PUP.Optional.SecretSauce
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.monetization_plugin_bundledU[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.monetization_plugin_bundledW[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.monetization_plugin_notBundl[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.monetization_plugin_regBundl[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.name", "CinemaP-1.1c"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a2e5f942f4d3c41b2a5cd82a16abe5ffb1cc60b40222e43dea4dc6a6b10e51377com58173.58173.name", "Pricora 12.0"); =>PUP.Optional.Pricora
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.monetization_plugin_bundledUrls.exp[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.monetization_plugin_bundledWithHash[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.monetization_plugin_notBundledArr_.[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.monetization_plugin_regBundledWithS[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.name", "Cinema-Plus-1.8c"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_bundledWithHash.value", "null"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri F[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_regBundledWithSoftware.expiration"[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.aPLEWM61628944WIIQRX30104349com63319.63319.name", "TheFreeHD-Sports TV 1.1"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_bundledWithHash.value", "null"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.name", "Cinema-Plus-1.2c"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.acaseyvelezaolcom61788.61788.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledWithHash.value", "null"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.name", "winservice86"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.enabledAddons", "faststartff%40gmail.com:4.3.0,caseyvelez%40aol.com:0.95.35,taylorralston%40hotmail.com:0.95[...] =>PUP.Optional.FastStart
O69 - SBI: prefs.js [alex - 6rs6v1f8.default] user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"faststartff@gmail.com\":{\"descriptor\":\"C:\[...] =>PUP.Optional.FastStart
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {85A60A59-D3D8-468F-B598-FB4393789EF4} - (Google) - http://www.google.fr/

---\\ Enumère les services démarrés par Svchost (41) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [283136] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1335296] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [954368] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [954880] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31232] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [93696] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [106496] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [1008640] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [226304] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [133120] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [324608] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [371200] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [95744] ©
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [2093056] ©
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [196096] ©
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [167424] ©
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [187392] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [106496] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [679936] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [497152] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [72192] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [452608] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [311808] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [2235904] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1168896] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [593920] ©
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [63488] ©
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1149440] ©
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1019392] ©
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [343040] ©
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [717312] ©
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [27136] ©
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [267776] ©
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [918016] ©
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [996352] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [359936] ©
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [237568] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [58368] ©

---\\ Liste des exceptions du parefeu Windows (44) - 9s
O87 - FAEL: "{0350131D-485F-4298-8ECB-ECD1BBD5AB6D}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{55F5B212-6A87-49B5-973F-6625D72DEEB6}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{C530B9A6-F0A1-43B3-80E7-A56F48EACDE1}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{0164B197-12E2-4CD5-9BC0-D9E0A2BD338D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{E1B31220-9D1D-4CC6-ACA7-9B72042FB5EB}" [In-None-P6-TRUE] .(...) -- C:\Users\alex\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (.not file.)
O87 - FAEL: "UDP Query User{8ABF458F-093D-4B31-8E5C-4FA8677F9762}C:\users\alex\appdata\roaming\allmyapps\allmyapps.exe" [In-None-P17-TRUE] .(...) -- C:\users\alex\appdata\roaming\allmyapps\allmyapps.exe (.not file.)
O87 - FAEL: "TCP Query User{32F328B1-4969-4545-AB13-1C53EAAC2BAA}C:\users\alex\appdata\roaming\allmyapps\allmyapps.exe" [In-None-P6-TRUE] .(...) -- C:\users\alex\appdata\roaming\allmyapps\allmyapps.exe (.not file.)
O87 - FAEL: "{5E082448-3837-4D57-A23E-CFB7F3DD1D75}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{3310727E-5CB3-4417-B922-B4CE8B2D37BD}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{A0A349FE-D60B-48B2-9083-F6F0E0C94710}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico
O87 - FAEL: "{EA97869C-CD34-427C-9F57-FF41CC913251}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico
O87 - FAEL: "{917BC497-5F5B-49B8-9FED-7DA35D594A5A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{29F195D9-7E2C-442C-B230-F8C160F2B7CC}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{39650961-5610-4794-AE71-E510EA0C1A7C}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico
O87 - FAEL: "{B37B1A44-A45F-4CC1-BF31-60AEE5518BA6}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico
O87 - FAEL: "{0C12AEF5-1879-4269-AF64-44AFB42D373A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{CC21393F-5FAA-452E-8048-D85A44FF55DE}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "UDP Query User{579E0C47-3CCF-4A92-B36E-3334A13CAC31}C:\program files (x86)\libreoffice 4\program\soffice.bin" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\libreoffice 4\program\soffice.bin (.not file.)
O87 - FAEL: "TCP Query User{C7FBC6D0-B03B-41E1-81E7-320922F6AE4B}C:\program files (x86)\libreoffice 4\program\soffice.bin" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\libreoffice 4\program\soffice.bin (.not file.)
O87 - FAEL: "UDP Query User{2BE400C8-AFB4-4C41-BDCC-E93850836149}C:\program files (x86)\bitmania\bitmania.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\bitmania\bitmania.exe (.not file.) =>PUP.Optional.WebAdSystem
O87 - FAEL: "TCP Query User{1E0B1868-BCAF-40C3-90AB-6855E601E40A}C:\program files (x86)\bitmania\bitmania.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\bitmania\bitmania.exe (.not file.) =>PUP.Optional.WebAdSystem
O87 - FAEL: "{2834D6D0-C480-4B49-A0BA-B37AE157F969}" [In-None-P17-TRUE] .(.BitTorrent Inc. - BitTorrent.) -- C:\Users\alex\AppData\Roaming\BitTorrent\BitTorrent.exe
O87 - FAEL: "{E3A4C273-C69F-428B-A126-F4BA4A11217A}" [In-None-P6-TRUE] .(.BitTorrent Inc. - BitTorrent.) -- C:\Users\alex\AppData\Roaming\BitTorrent\BitTorrent.exe
O87 - FAEL: "{D81E554D-BFBA-44F3-8819-E861B425CF72}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\VaeVictis\Victory\Victory.exe (.not file.)
O87 - FAEL: "{D87FFEAC-5950-4F73-851B-4EF99BA9602F}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (.not file.)
O87 - FAEL: "{D6BE415F-A60D-44C6-BFD2-EE7326F61E07}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (.not file.)
O87 - FAEL: "UDP Query User{AED3517B-06E8-41F2-A21B-106373137C3C}C:\users\alex\appdata\local\google\chrome\application\chrome.exe" [In-None-P17-TRUE] .(...) -- C:\users\alex\appdata\local\google\chrome\application\chrome.exe (.not file.)
O87 - FAEL: "TCP Query User{61AE48B2-77B3-4D2D-A166-E4E7F798773A}C:\users\alex\appdata\local\google\chrome\application\chrome.exe" [In-None-P6-TRUE] .(...) -- C:\users\alex\appdata\local\google\chrome\application\chrome.exe (.not file.)
O87 - FAEL: "UDP Query User{02FBF520-08E0-4130-8A60-9211005D263D}C:\program files (x86)\ares\ares.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\ares\ares.exe (.not file.)
O87 - FAEL: "TCP Query User{9BE9B972-C419-499F-8923-11FB9DBE8864}C:\program files (x86)\ares\ares.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\ares\ares.exe (.not file.)
O87 - FAEL: "UDP Query User{B1B9E9DC-D9A6-4162-9D0A-9FD8B16B67B4}C:\program files (x86)\utorrent\utorrent.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\utorrent\utorrent.exe (.not file.)
O87 - FAEL: "TCP Query User{D3393644-B770-4D19-A5D9-4352DDC2FB22}C:\program files (x86)\utorrent\utorrent.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\utorrent\utorrent.exe (.not file.)
O87 - FAEL: "UDP Query User{6325B89D-9D88-411E-B458-B4FD73810861}C:\glassfish3\jdk7\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\glassfish3\jdk7\bin\java.exe (.not file.)
O87 - FAEL: "TCP Query User{8284AD41-AE04-41D3-B32E-919736CCD9CD}C:\glassfish3\jdk7\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\glassfish3\jdk7\bin\java.exe (.not file.)
O87 - FAEL: "UDP Query User{2969705D-92FD-40E8-9167-7790A16260C4}C:\program files (x86)\java\jre6\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "TCP Query User{C5F08C32-0F29-440E-8FA7-2E26C0F81EEA}C:\program files (x86)\java\jre6\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{CD319625-5746-4DC5-BA5A-5A0CB9109AA8}C:\program files (x86)\limewire\limewire.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\limewire\limewire.exe (.not file.)
O87 - FAEL: "TCP Query User{0A54AED5-71E1-47F0-BC76-E995A218EEF6}C:\program files (x86)\limewire\limewire.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\limewire\limewire.exe (.not file.)
O87 - FAEL: "{0D2421DA-DE9C-4C40-9884-7815AD43607E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
O87 - FAEL: "{79A0C5E7-7C5A-4ED8-84AE-F3F40EA19A52}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)
O87 - FAEL: "{16C1EAAB-FB79-4835-ABB0-C216548BA9F3}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)
O87 - FAEL: "{032C1C17-FC17-4A65-BA48-58CD978A4E8F}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)
O87 - FAEL: "{3801EC1A-0CF9-4E22-929E-54E7E17656B4}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)
O87 - FAEL: "{F2A778F9-7B1C-4BEC-ADAB-116C9ADCC559}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (23) - 147s

SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SS - Demand [2015/07/14 22:44:29] [ 268976] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2015/08/27 02:37:41] [ 1155192] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe ©
SS - Auto [2015/08/29 08:14:20] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/08/29 08:14:20] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Auto [2010/08/06 04:47:48] [ 681528] HP Auto (HPAuto) . (.Hewlett-Packard.) - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe ©
SR - Auto [2010/08/06 04:51:08] [ 291896] HP Client Services (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe ©
SR - Auto [2011/03/28 17:07:50] [ 94264] HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe ©
SR - Auto [2015/08/27 15:54:54] [ 712432] Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.8.586.8535\AdAwareService.exe
SR - Auto [2015/03/12 12:59:00] [ 836984] LavasoftTcpService (LavasoftTcpService) . (.Lavasoft Limited.) - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.3.0\LavasoftTcpService.exe ©
SR - Auto [2010/11/22 23:27:00] [ 73728] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe ©
SR - Auto [2009/10/07 01:47:10] [ 191000] Process Monitor (LVPrcS64) . (.Logitech Inc..) - C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe ©
SR - Auto [2015/08/27 02:37:41] [ 1872504] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe ©
SR - Auto [2015/08/27 02:37:39] [ 5544568] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe ©
SR - Auto [2015/08/18 02:07:22] [ 933168] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe ©
SR - Auto [2010/09/28 17:09:28] [ 1119768] PDF Document Manager (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files (x86)\PDF Complete\pdfsvc.exe ©
SR - Auto [2015/08/12 13:04:22] [ 2255128] Rapport Management Service (RapportMgmtService) . (.IBM Corp..) - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
SR - Auto [2015/06/24 22:57:00] [ 303360] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ©
SS - Auto [2015/03/12 12:57:38] [ 17768] IE Search Set (SearchProtectionService) . (.Copyright © 2014.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
SS - Auto [2015/07/09 13:14:04] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SR - Auto [2015/08/17 23:43:04] [ 409776] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ©
SS - Auto [2003/04/18 18:06:26] [ 8192] WIN-srvGA (WIN-srvGA) . (...) - C:\Windows\SysWOW64\srvany.exe

---\\ Scan Additionnel (39) - 0s
C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-1-7.job =>PUP.Optional.CrossRider
C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-10_user.job =>PUP.Optional.CrossRider
C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5.job =>PUP.Optional.CrossRider
C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5_user.job =>PUP.Optional.CrossRider
C:\WINDOWS\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-7.job =>PUP.Optional.CrossRider
C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job =>PUP.Optional.GlobalUpdate
C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job =>PUP.Optional.GlobalUpdate
C:\WINDOWS\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-10_user =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\29672d50-4e4a-4825-b121-e34ecad7b2da-5_user =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-1-7 =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-10_user =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5 =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-5_user =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\54330fd5-e242-4570-86ca-129f27d963e3-7 =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\c11972de-6e25-4edb-9282-88917b9117ef-5_user =>PUP.Optional.CrossRider
C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore =>PUP.Optional.GlobalUpdate
C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\28ee0f75-b8f8-a6ab-1fbd-c067786a2257 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\Wow6432Node\TENCENT =>PUP.Optional.TencentAddressBar
HKLM\SOFTWARE\Wow6432Node\winservice86-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\HD_Quality_FR =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch
HKCU\SOFTWARE\PartyFrance =>Casino.OnlineGames
HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\winservice86-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner
C:\Program Files (x86)\974be818-95d1-421a-bcd1-71f58442e441 =>PUP.Op
~ End of the scan, 50711 items in 1137 seconds (1755)(0)()-a0c6-bffd5741a694 =>PUP.Optional.CrossRider
C:\Program Files (x86)\c3d16b12-4ffc-4027-9a16-32c2578fb6ad =>PUP.Optional.CrossRider
C:\Program Files (x86)\Software =>PUP.Optional.Boxore
C:\ProgramData\DriverGenius =>Superfluous.DriverGenius
C:\ProgramData\InstallMate =>PUP.Optional.Tarma
C:\ProgramData\Software =>PUP.Optional.Boxore
C:\Users\alex\AppData\Roaming\nationzoom =>PUP.Optional.NationZoom
C:\Users\alex\AppData\Local\com =>PUP.Optional.Generic
C:\Users\alex\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\alex\AppData\Local\Software =>PUP.Optional.Boxore
C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico

---\\ Récapitulatif des éléments trouvées sur votre station (22) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/blog =>Toolbar.Mamverifier
http://www.nicolascoolman.fr/adware-tencentaddressbar/ =>PUP.Optional.TencentAddressBar
http://www.nicolascoolman.fr/pup-linkeysearch/ =>PUP.Optional.LinkeySearch
http://www.nicolascoolman.fr/blog =>Casino.OnlineGames
http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>Superfluous.DriverGenius
http://www.nicolascoolman.fr/pup-tarma/ =>PUP.Optional.Tarma
http://www.nicolascoolman.fr/hijacker-nationzoom/ =>PUP.Optional.NationZoom
http://www.nicolascoolman.fr/blog =>PUP.Optional.Generic
http://www.nicolascoolman.fr/blog =>.Superfluous.CrashReports
http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/adware-secretsauce / =>PUP.Optional.SecretSauce
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/adware-pricora/ =>PUP.Optional.Pricora
http://www.nicolascoolman.fr/blog =>PUP.Optional.FastStart
http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/pup-kmspico/ =>HackTool.KMSpico
http://www.nicolascoolman.fr/adware-webadsystem/ =>PUP.Optional.WebAdSystem

~ End of the scan, 50760 items in 1122 seconds (1755)(0)()

Publicité


Signaler le contenu de ce document

Publicité