cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.9.17.142 Par Nicolas Coolman (2015/09/17)
~ Démarré par ROY (Administrator) (2015/09/18 16:11:06)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\ROY\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\ROY\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v45.0.2454.93
MSIE: Internet Explorer v11.0.9600.18015

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (2) - 2s
Avast Free Antivirus v10.3.2223
Windows Defender W7 (Activate)

---\\ Surveillance de Logiciels (1) - 3s
Adobe Flash Player 18 ActiveX

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4104.172 MB (60% free)
~ System Restore: Activé (Enable)
~ System drive C: has 280 GB free of 357 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ROY-TOSH
~ User Name: ROY
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 280 GB free of 357 GB (System)
~ Drive D: has 342 GB free of 357 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 1s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808] ©
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] ©
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] ©
[MD5.A55305B1CACD38EAC176CC532B2053AC] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2427392] ©
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168] ©
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448] ©
[MD5.492D07D79E7024CA310867B526D9636D] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [357888] ©
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\Syswow64\dnsapi.dll [270336] ©
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152] ©
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] ©
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] ©
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] ©
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] ©
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] ©
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] ©
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] ©
[MD5.43E1F4B0EFDC244D2A83995CCD7846F7] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [159232] ©
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632] ©
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928] ©
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] ©
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] ©
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] ©
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296] ©
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808] ©

---\\ Processus lancés (26) - 1s
[MD5.A97E144E84A665B22AE6E6A93E4DD465] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1280] ©
[MD5.FA07EC01952729DDDDC5BF4BAE06B09E] - (.All rights reserved - GFNEXSrv.) -- C:\Windows\System32\GFNEXSrv.exe [162824] [PID.1452]
[MD5.11A52CF7B265631DEEB24C6149309EFF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [64952] [PID.1832] ©
[MD5.0CD543920DAF581457FF0A9BE37014E3] - (...) -- C:\ProgramData\06154ba7-7ceb-4959-a6bd-bf38bdec8cc6\maintainer.exe [128232] [PID.1816]
[MD5.8E2C799D3476EAC32C3BA0DF7CE6AF19] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\Windows\system32\TODDSrv.exe [138656] [PID.2140] ©
[MD5.CDC97FA5C42B07FB0D4600E17C32F582] - (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [489384] [PID.2252] ©
[MD5.82E49D57DEA9A1229143EA625DC0D998] - (...) -- C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe [456936] [PID.2780]
[MD5.2F8EC16574849DA5C09B9298FE7F2ADB] - (.Conduit - .) -- C:\Users\ROY\AppData\Local\ValueApps\ValueApps.exe [2149152] [PID.2836]
[MD5.2BACD71123F42CEA603F4E205E1AE337] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096] [PID.2928] ©
[MD5.2A46FFE841EC43001D5A293A54DB34DE] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223104] [PID.2272] ©
[MD5.CCC3FE1DDCCF99633539B3D7681EF7D7] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768] [PID.4644] ©
[MD5.799450710D1B09FAF0D220B4DA3BF431] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776] [PID.4776] ©
[MD5.97A1AFD42B8016D132C7BF38C955C6E1] - (.TOSHIBA CORPORATION - ConfigFree Task Tray Menu.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [304560] [PID.4892] ©
[MD5.8A07221789D46B2EA7DFCA2BC807572A] - (.TOSHIBA CORPORATION - ConfigFree Switch Manager Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe [62848] [PID.4040] ©
[MD5.4A79CEAFEA3E3E9FC7D0D10A9C33116E] - (...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.PurBrowse64.exe [353512] [PID.6440]
[MD5.A3A1AF40B019FAE7118CB7CB8DEA02DC] - (...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BrowserAdapter64.exe [126184] [PID.6496]
[MD5.0BE093F420284594881B3F8202E2ABCF] - (...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BrowserAdapter.exe [108264] [PID.6552]
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.6776] ©
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944] [PID.6900] ©
[MD5.41E7C4FA6491747402CFCA77CC1C7AAB] - (.TOSHIBA CORPORATION - ConfigFree Service Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [249200] [PID.6368] ©
[MD5.CAB0EEAF5295FC96DDD3E19DCE27E131] - (.TOSHIBA CORPORATION - ConfigFree Service Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [46448] [PID.4908] ©
[MD5.7F32D4C47A50E7223491E8FB9359907D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.5468] ©
[MD5.13AA2130F2A104DD775EAD0F0EE5417B] - (.Nero AG - NeroUpdate.) -- c:\Program Files (x86)\Nero\Update\NASvc.exe [598312] [PID.5364] ©
[MD5.2C16648A12999AE69A9EBF41974B0BA2] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656280] [PID.3668] ©
[MD5.82E49D57DEA9A1229143EA625DC0D998] - (...) -- C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe [456936] [PID.10468]
[MD5.F34EB03BC5D8193927A74CD1550E81F4] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\ROY\ZHPDiag3.exe [1932800] [PID.3544] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (15) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com/
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://start.mysearchdial.com/ =>PUP.Optional.MySearchDial
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://rts.dsrlte.com?affID=na =>PUP.Optional.PaybyAds
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://fr.yahoo.com?fr=hp-avast&type=avastbcl
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://rts.dsrlte.com?affID=pr_4f3f93e5-3e0f-4bde-ac4b-6bd7ddf06038 =>PUP.Optional.PaybyAds
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://fr.search.yahoo.com/
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://rts.dsrlte.com/ =>PUP.Optional.PaybyAds
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://q.search-simple.com/ =>PUP.Optional.SearchSimple
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security
G2 - GCE: Preference [User Data\Default] [kgkmmefaeflbkbbamehfkghmmlgnpojl] Mega Browse =>PUP.Optional.MegaBrowse
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 0s
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll ©
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\8\NP_wtapp.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (20) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/ =>PUP.Optional.MySearchDial
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/ =>PUP.Optional.MySearchDial
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (6) - 1s
O2 - BHO: Microsoft Lync add-on BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll ©
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ©
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll ©
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL ©
O2 - BHO: Microsoft SPFS Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL ©

---\\ Applications lancées au démarrage du système (11) - 0s
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil64_18_0_0_209_ActiveX.exe ©
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe ©
O4 - HKUS\.DEFAULT\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe ©
O4 - HKUS\S-1-5-18\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe ©
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-21-1608922269-3415610041-4062696934-1000\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil64_18_0_0_209_ActiveX.exe ©

---\\ Winsock hijacker (Layered Service Provider) (10) - 0s
O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (...) -- C:\Windows\System32\ValueApps.dll (Not File) =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (...) -- C:\Windows\System32\ValueApps.dll (Not File) =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000003\Winsock LSP File . (...) -- C:\Windows\System32\ValueApps.dll (Not File) =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000004\Winsock LSP File . (...) -- C:\Windows\System32\ValueApps.dll (Not File) =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000015\Winsock LSP File . (...) -- C:\Windows\System32\ValueApps.dll (Not File) =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000001\Winsock LSP File . (.Conduit.) -- C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000002\Winsock LSP File . (.Conduit.) -- C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000003\Winsock LSP File . (.Conduit.) -- C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000004\Winsock LSP File . (.Conduit.) -- C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000015\Winsock LSP File . (.Conduit.) -- C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock

---\\ Modification Domaine/Adresses DNS (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241

---\\ Protocole additionnel (20) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©

---\\ Liste des services NT non Microsoft et non désactivés (15) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe ©
O23 - Service: ConfigFree Service (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe ©
O23 - Service: GFNEX Service (GFNEXSrv) . (.All rights reserved - GFNEXSrv.) - C:\Windows\System32\GFNEXSrv.exe
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
O23 - Service: MaintainerSvc3.22.1827446 (MaintainerSvc3.22.1827446) . (...) - C:\ProgramData\06154ba7-7ceb-4959-a6bd-bf38bdec8cc6\maintainer.exe =>PUP.Optional.MaintainerSvc
O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG - NeroUpdate.) - c:\Program Files (x86)\Nero\Update\NASvc.exe ©
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe ©
O23 - Service: TOSHIBA Power Saver (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe ©
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©
O23 - Service: Update Mega Browse (Update Mega Browse) . (...) - C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe =>PUP.Optional.MegaBrowse
O23 - Service: Util Mega Browse (Util Mega Browse) . (...) - C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe =>PUP.Optional.MegaBrowse
O23 - Service: ValueApps (ValueApps) . (.Conduit - .) - C:\Users\ROY\AppData\Local\ValueApps\ValueApps.exe

---\\ Tâches planifiées en automatique (19) - 3s
[MD5.9B3355B29942AF67F014EA90CE1EA960] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268976] ©
[MD5.B3B87E58466CE9B6662819820010106C] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1373872] ©
[MD5.97A1AFD42B8016D132C7BF38C955C6E1] [APT] [ConfigFree Startup Programs] (.TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [304560] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.9B950888F0AA9536A577AEDEB45AF263] [APT] [MySearchDial] (...) -- C:\Users\ROY\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [97280] =>PUP.Optional.MySearchDial
[MD5.1B9801C9B5D152A195F03B5075797A7B] [APT] [UpdateTask] (...) -- C:\Users\ROY\AppData\Local\{C476F22A-E0DE-9E92-8D46-BB7AA92E47E2}\uninstall.exe [592384]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070] ©
O39 - APT: MySearchDial - (...) -- C:\Windows\Tasks\MySearchDial.job [284] =>PUP.Optional.MySearchDial
O39 - APT: UpdateTask - (...) -- C:\Windows\Tasks\UpdateTask.job [262]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] ©
O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] ©
O39 - APT: ConfigFree Startup Programs - (.TOSHIBA CORPORATION.) -- C:\Windows\System32\Tasks\ConfigFree Startup Programs [3492] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3814] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4066] ©
O39 - APT: MySearchDial - (...) -- C:\Windows\System32\Tasks\MySearchDial [3220] =>PUP.Optional.MySearchDial
O39 - APT: UpdateTask - (...) -- C:\Windows\System32\Tasks\UpdateTask [3198]

---\\ Logiciels installés (16) - 3s
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: Mon Univers Photomoinscher 5.1 - (.CEWE Stiftung u Co. KGaA.) [HKLM][64Bits] -- Mon Univers Photomoinscher 5.1 ©
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} ©
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C303EE0-A595-3543-A71A-931C7AC40EDE} ©
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App © =>.WildTangent
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: TOSHIBA Resolution+ Plug-in for Windows Media Player - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94} ©
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-00AF-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} ©
O42 - Logiciel: Chromium - (.Chromium.) [HKCU][64Bits] -- Chromium ©
O42 - Logiciel: Microsoft Word Packages - (...) [HKCU][64Bits] -- Microsoft Word Packages
O42 - Logiciel: Mysearchdial - (.Mysearchdial.) [HKCU][64Bits] -- mysearchdial =>PUP.Optional.MySearchDial
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe ©

---\\ HKCU & HKLM Software Keys (79) - 4s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\DivXNetworks
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HPS
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallCore =>Adware.InstallCore
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Mega Browse =>PUP.Optional.MegaBrowse
HKLM\SOFTWARE\Wow6432Node\Mon Univers Photomoinscher 4.6
HKLM\SOFTWARE\Wow6432Node\Mon Univers Photomoinscher 5.1
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice.org
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RtWLan
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\TEUA
HKLM\SOFTWARE\Wow6432Node\TOSHIBA
HKLM\SOFTWARE\Wow6432Node\TOSHIBA CORPORATION
HKLM\SOFTWARE\Wow6432Node\ValueApps
HKLM\SOFTWARE\Wow6432Node\Wajam =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\Yahoo
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\CDIP
HKCU\SOFTWARE\CeWe Color
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IM
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mega Browse =>PUP.Optional.MegaBrowse
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\mysearchdial =>PUP.Optional.MySearchDial
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice.org
HKCU\SOFTWARE\Paint.NET
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\TOSHIBA
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Vittalia =>PUP.Optional.Vittalia
HKCU\SOFTWARE\Wajam =>PUP.Optional.Wajam
HKCU\SOFTWARE\wincy
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\Yahoo
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\FDA
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Yahoo

---\\ Contenu des dossiers Programmes (980) - 52s
O43 - CFD: 2011/08/22 16:39:55 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2014/09/27 15:30:21 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2011/12/20 09:06:55 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2012/01/09 20:24:31 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2012/11/13 18:51:00 - [] D -- C:\Program Files (x86)\Install-studio-scrap-v4
O43 - CFD: 2011/10/20 04:38:01 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2011/10/20 04:12:05 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/09/10 03:49:39 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2011/12/29 13:48:21 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2015/09/18 15:59:56 - [] D -- C:\Program Files (x86)\Mega Browse =>PUP.Optional.MegaBrowse
O43 - CFD: 2014/03/07 17:12:58 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/08/12 18:07:03 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2014/03/07 17:42:37 - [] D -- C:\Program Files (x86)\Microsoft SkyDrive
O43 - CFD: 2011/08/22 16:35:50 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2012/01/02 22:01:12 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 2011/12/17 13:51:36 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2014/03/07 17:08:56 - [] D -- C:\Program Files (x86)\Mysearchdial =>PUP.Optional.MySearchDial
O43 - CFD: 2011/08/22 16:47:50 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2011/12/29 13:49:22 - [] D -- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 2011/12/20 18:53:32 - [] D -- C:\Program Files (x86)\photomoinscher 4.6
O43 - CFD: 2011/10/20 04:28:07 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2011/10/20 04:23:31 - [] D -- C:\Program Files (x86)\Realtek WLAN Driver
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2014/01/13 15:58:43 - [] D -- C:\Program Files (x86)\SearchProtect =>PUP.Optional.SearchProtect
O43 - CFD: 2014/09/27 15:30:21 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2012/11/13 18:53:07 - [] D -- C:\Program Files (x86)\Studio-Scrap
O43 - CFD: 2012/11/13 18:43:45 - [] D -- C:\Program Files (x86)\StudioScrap4-Decouverte
O43 - CFD: 2014/01/13 15:58:04 - [] D -- C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.Optional.SweetIM
O43 - CFD: 2011/10/20 04:21:19 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2011/10/20 04:38:11 - [] D -- C:\Program Files (x86)\TOSHIBA
O43 - CFD: 2011/10/20 04:36:08 - [] D -- C:\Program Files (x86)\TOSHIBA Corporation
O43 - CFD: 2011/08/22 17:10:15 - [] D -- C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 2011/08/22 17:05:27 - [] D -- C:\Program Files (x86)\Toshiba TEMPRO
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2015/05/29 17:31:53 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 2013/07/30 03:31:50 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2012/06/19 18:43:33 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2012/03/24 00:42:30 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/06/11 03:27:11 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2012/03/24 00:42:28 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2010/11/21 05:31:38 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2012/03/24 00:42:30 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2012/01/09 20:25:05 - [] D -- C:\Program Files (x86)\Yahoo!
O43 - CFD: 2012/03/26 18:52:12 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2011/12/15 16:06:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
O43 - CFD: 2011/12/15 16:06:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay
O43 - CFD: 2014/05/31 12:22:14 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2014/07/28 22:55:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2012/01/09 20:24:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/03/07 17:29:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2015/08/12 18:08:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2013/05/30 13:29:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mon Univers Photomoinscher 4.6
O43 - CFD: 2014/12/16 19:17:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mon Univers Photomoinscher 5.1
O43 - CFD: 2011/08/22 16:45:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2011/12/29 13:50:18 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
O43 - CFD: 2011/12/20 09:07:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
O43 - CFD: 2014/09/27 15:30:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/09/18 15:56:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2012/11/13 18:41:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio-Scrap
O43 - CFD: 2010/11/21 09:16:41 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2011/12/15 16:06:59 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 2015/09/18 10:22:00 - [] D -- C:\ProgramData\06154ba7-7ceb-4959-a6bd-bf38bdec8cc6
O43 - CFD: 2012/02/17 11:08:01 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/09/12 18:22:24 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2014/11/18 19:28:47 - [] D -- C:\ProgramData\BlueStacks
O43 - CFD: 2009/07/14 07:08:56 - [0] SD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2011/12/15 16:06:57 - [] D -- C:\ProgramData\Google
O43 - CFD: 2013/03/11 16:32:46 - [] D -- C:\ProgramData\HP
O43 - CFD: 2012/01/09 20:23:51 - [] D -- C:\ProgramData\HP Product Assistant
O43 - CFD: 2015/08/29 18:19:52 - [] D -- C:\ProgramData\hps
O43 - CFD: 2012/01/02 21:14:41 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/09/18 13:13:36 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2014/03/08 16:20:05 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 2014/03/07 17:42:22 - [] D -- C:\ProgramData\Microsoft SkyDrive
O43 - CFD: 2011/08/22 16:47:53 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2012/01/09 21:12:16 - [] D -- C:\ProgramData\Partner =>Toolbar.YahooPartner
O43 - CFD: 2014/09/27 15:30:14 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2012/11/13 18:48:10 - [] D -- C:\ProgramData\Studio-Scrap4
O43 - CFD: 2011/08/22 16:27:21 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/08/29 18:19:52 - [] D -- C:\ProgramData\tmp
O43 - CFD: 2011/12/15 16:06:59 - [] D -- C:\ProgramData\TOSHIBA
O43 - CFD: 2011/12/15 15:55:57 - [] D -- C:\ProgramData\ToshibaEurope
O43 - CFD: 2012/02/17 15:38:49 - [] D -- C:\ProgramData\WEBREG
O43 - CFD: 2013/09/19 20:15:41 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2012/01/09 20:25:04 - [] D -- C:\ProgramData\Yahoo! Companion
O43 - CFD: 2011/08/22 16:40:07 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/03/07 17:30:59 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2012/01/09 20:22:35 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard
O43 - CFD: 2012/01/09 20:22:37 - [] D -- C:\Program Files (x86)\Common Files\HP
O43 - CFD: 2011/10/20 04:37:02 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2011/10/20 04:09:31 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2011/12/29 13:48:46 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2012/01/02 21:14:41 - [] D -- C:\Program Files (x86)\Common Files\mcafee
O43 - CFD: 2014/03/07 17:31:01 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2011/08/22 16:46:17 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2011/10/20 04:08:36 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/09/27 15:30:21 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2012/03/24 00:42:26 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2011/10/20 04:35:44 - [] D -- C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 2011/08/22 16:53:36 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2011/08/22 17:05:22 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 2014/03/07 17:08:39 - [] D -- C:\Users\ROY\AppData\Roaming\0V1L2Z2Z1T1I1L1T =>Adware.InstallCore
O43 - CFD: 2011/12/17 13:28:30 - [] D -- C:\Users\ROY\AppData\Roaming\Adobe
O43 - CFD: 2014/09/12 18:34:43 - [] D -- C:\Users\ROY\AppData\Roaming\AVAST Software
O43 - CFD: 2011/12/17 13:28:17 - [] D -- C:\Users\ROY\AppData\Roaming\Google
O43 - CFD: 2013/03/01 13:43:58 - [] D -- C:\Users\ROY\AppData\Roaming\HP
O43 - CFD: 2014/12/16 19:11:14 - [] D -- C:\Users\ROY\AppData\Roaming\hps-install
O43 - CFD: 2011/12/15 16:06:13 - [] D -- C:\Users\ROY\AppData\Roaming\Identities
O43 - CFD: 2011/12/17 13:06:02 - [] D -- C:\Users\ROY\AppData\Roaming\Macromedia
O43 - CFD: 2010/11/21 09:16:41 - [0] D -- C:\Users\ROY\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/09/18 16:05:03 - [] SD -- C:\Users\ROY\AppData\Roaming\Microsoft
O43 - CFD: 2014/03/07 17:08:56 - [] D -- C:\Users\ROY\AppData\Roaming\mysearchdial =>PUP.Optional.MySearchDial
O43 - CFD: 2011/12/20 09:04:01 - [] D -- C:\Users\ROY\AppData\Roaming\Nero
O43 - CFD: 2011/12/30 14:58:29 - [] D -- C:\Users\ROY\AppData\Roaming\OpenOffice.org
O43 - CFD: 2015/09/18 15:55:05 - [] D -- C:\Users\ROY\AppData\Roaming\Skype
O43 - CFD: 2013/10/28 15:37:58 - [] D -- C:\Users\ROY\AppData\Roaming\Studio-Scrap4
O43 - CFD: 2012/05/14 09:02:42 - [] D -- C:\Users\ROY\AppData\Roaming\Toshiba
O43 - CFD: 2011/12/20 10:52:27 - [] D -- C:\Users\ROY\AppData\Roaming\TOSHIBA Online Product Information
O43 - CFD: 2013/04/19 19:41:33 - [] D -- C:\Users\ROY\AppData\Roaming\WildTangent
O43 - CFD: 2012/01/10 10:07:25 - [] D -- C:\Users\ROY\AppData\Roaming\Windows Live Writer
O43 - CFD: 2012/01/09 20:25:04 - [] D -- C:\Users\ROY\AppData\Roaming\Yahoo!
O43 - CFD: 2015/09/18 16:11:20 - [] D -- C:\Users\ROY\AppData\Roaming\ZHP
O43 - CFD: 2011/12/17 13:28:30 - [] D -- C:\Users\ROY\AppData\Local\Adobe
O43 - CFD: 2011/12/15 15:55:22 - [0] SHD -- C:\Users\ROY\AppData\Local\Application Data
O43 - CFD: 2015/09/07 13:57:54 - [] D -- C:\Users\ROY\AppData\Local\Chromium
O43 - CFD: 2015/06/11 04:19:57 - [0] D -- C:\Users\ROY\AppData\Local\Diagnostics
O43 - CFD: 2015/06/11 04:19:57 - [0] D -- C:\Users\ROY\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/14 17:04:55 - [0] SHD -- C:\Users\ROY\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/14 17:04:55 - [0] SHD -- C:\Users\ROY\AppData\Local\EmieUserList
O43 - CFD: 2015/09/17 09:29:36 - [] D -- C:\Users\ROY\AppData\Local\Google
O43 - CFD: 2015/06/11 03:32:20 - [] D -- C:\Users\ROY\AppData\Local\GWX
O43 - CFD: 2011/12/15 15:55:22 - [0] SHD -- C:\Users\ROY\AppData\Local\Historique
O43 - CFD: 2013/03/01 13:43:57 - [] D -- C:\Users\ROY\AppData\Local\HP
O43 - CFD: 2014/03/07 17:42:22 - [] D -- C:\Users\ROY\AppData\Local\Microsoft
O43 - CFD: 2015/03/20 18:01:06 - [] D -- C:\Users\ROY\AppData\Local\Microsoft Games
O43 - CFD: 2014/11/12 14:48:58 - [] D -- C:\Users\ROY\AppData\Local\Microsoft Help
O43 - CFD: 2014/03/05 12:10:52 - [] D -- C:\Users\ROY\AppData\Local\Mysearchdial =>PUP.Optional.MySearchDial
O43 - CFD: 2013/01/04 15:34:03 - [] D -- C:\Users\ROY\AppData\Local\Nero
O43 - CFD: 2013/01/04 15:34:02 - [] D -- C:\Users\ROY\AppData\Local\Nero_AG
O43 - CFD: 2015/03/02 09:46:13 - [] D -- C:\Users\ROY\AppData\Local\Paint.NET
O43 - CFD: 2014/07/29 03:47:35 - [] D -- C:\Users\ROY\AppData\Local\Pay-By-Ads =>PUP.Optional.PaybyAds
O43 - CFD: 2014/01/21 16:56:27 - [] D -- C:\Users\ROY\AppData\Local\Programs
O43 - CFD: 2014/01/13 15:58:44 - [] D -- C:\Users\ROY\AppData\Local\SearchProtect =>PUP.Optional.SearchProtect
O43 - CFD: 2014/04/10 04:20:10 - [] D -- C:\Users\ROY\AppData\Local\Skype
O43 - CFD: 2015/09/18 16:11:31 - [] D -- C:\Users\ROY\AppData\Local\Temp
O43 - CFD: 2011/12/15 15:55:22 - [0] SHD -- C:\Users\ROY\AppData\Local\Temporary Internet Files
O43 - CFD: 2011/12/20 10:52:21 - [] D -- C:\Users\ROY\AppData\Local\Toshiba
O43 - CFD: 2014/01/13 15:58:29 - [] D -- C:\Users\ROY\AppData\Local\ValueApps
O43 - CFD: 2013/04/15 15:11:53 - [] D -- C:\Users\ROY\AppData\Local\VirtualStore
O43 - CFD: 2014/01/13 15:58:29 - [] D -- C:\Users\ROY\AppData\Local\Wajam =>PUP.Optional.Wajam
O43 - CFD: 2012/08/17 10:33:44 - [] D -- C:\Users\ROY\AppData\Local\Windows Live
O43 - CFD: 2012/02/26 11:02:14 - [] D -- C:\Users\ROY\AppData\Local\Windows Live Writer
O43 - CFD: 2012/04/17 10:02:11 - [0] D -- C:\Users\ROY\AppData\Local\{0046B814-6AF7-4D3C-B29D-C8CBFD8490D4}
O43 - CFD: 2013/08/31 15:20:05 - [0] D -- C:\Users\ROY\AppData\Local\{00841DFA-31F0-4427-81A9-580821BF6AC5}
O43 - CFD: 2012/03/03 13:23:59 - [0] D -- C:\Users\ROY\AppData\Local\{00B58CBD-CFE3-48E9-8202-6BC9A95039C8}
O43 - CFD: 2012/03/02 12:19:12 - [0] D -- C:\Users\ROY\AppData\Local\{00CD3965-8BDA-4B36-B193-CB4F78EE4EDE}
O43 - CFD: 2013/04/09 14:14:34 - [0] D -- C:\Users\ROY\AppData\Local\{01020AF5-9EB8-4180-9A48-43A1BD549B1B}
O43 - CFD: 2012/05/09 14:48:05 - [0] D -- C:\Users\ROY\AppData\Local\{0103B685-F872-42BF-9B0D-957F03A24DD9}
O43 - CFD: 2012/08/14 15:30:37 - [0] D -- C:\Users\ROY\AppData\Local\{0120FCA4-7717-4017-9752-29CB12391A47}
O43 - CFD: 2013/04/04 09:02:13 - [0] D -- C:\Users\ROY\AppData\Local\{01323F43-D716-45DA-8827-B99BC6ABBD82}
O43 - CFD: 2012/04/27 09:37:45 - [0] D -- C:\Users\ROY\AppData\Local\{01BA0215-9A2D-4DEA-867A-4FB2096D618E}
O43 - CFD: 2012/09/14 09:16:29 - [0] D -- C:\Users\ROY\AppData\Local\{01D53390-0D52-48ED-9310-71B7678025D7}
O43 - CFD: 2013/03/15 11:33:44 - [0] D -- C:\Users\ROY\AppData\Local\{02122276-91A3-4BE2-84DC-73B3A9FAFF9B}
O43 - CFD: 2012/03/13 13:31:23 - [0] D -- C:\Users\ROY\AppData\Local\{0219AF68-54EE-47CB-A9A6-3F7EC984A684}
O43 - CFD: 2013/09/04 12:01:19 - [0] D -- C:\Users\ROY\AppData\Local\{026EACD3-80FA-4238-A61D-6D992A311140}
O43 - CFD: 2012/08/09 10:41:11 - [0] D -- C:\Users\ROY\AppData\Local\{02A067C4-B367-4B2F-9942-20D132273592}
O43 - CFD: 2012/05/21 14:19:18 - [0] D -- C:\Users\ROY\AppData\Local\{02EC87DD-4BCC-459F-B671-6AF81FEFB4BD}
O43 - CFD: 2013/03/06 18:43:47 - [0] D -- C:\Users\ROY\AppData\Local\{03A7B112-E325-4B6B-ABE0-F423A42DB3B5}
O43 - CFD: 2012/01/07 16:18:41 - [0] D -- C:\Users\ROY\AppData\Local\{03A7B300-E819-4CD9-8883-9C829E7F1116}
O43 - CFD: 2012/09/10 16:23:35 - [0] D -- C:\Users\ROY\AppData\Local\{03EE542F-80AB-4CB1-A60B-BEFA6F4C5C97}
O43 - CFD: 2012/04/02 14:11:09 - [0] D -- C:\Users\ROY\AppData\Local\{03EF75F2-24EB-4254-9600-53093738F688}
O43 - CFD: 2012/08/14 10:32:28 - [0] D -- C:\Users\ROY\AppData\Local\{0528C5D8-C5B4-4E7D-8717-9EF1675B31B0}
O43 - CFD: 2012/12/22 10:45:03 - [0] D -- C:\Users\ROY\AppData\Local\{0562EF96-3922-4DAF-84AA-DEE8A181E404}
O43 - CFD: 2012/05/03 11:29:38 - [0] D -- C:\Users\ROY\AppData\Local\{05BE2855-2B65-4DE4-B67A-99AF128E0C96}
O43 - CFD: 2013/09/01 14:33:55 - [0] D -- C:\Users\ROY\AppData\Local\{05FCDD1D-7136-4FD7-BB9F-0D023875F6B4}
O43 - CFD: 2012/05/09 14:48:16 - [0] D -- C:\Users\ROY\AppData\Local\{06B476F1-6030-4824-B6FF-407D60E725BE}
O43 - CFD: 2013/05/07 11:25:06 - [0] D -- C:\Users\ROY\AppData\Local\{06B9EE56-BBE8-4122-84C6-5E80B1D12403}
O43 - CFD: 2012/05/28 17:47:36 - [0] D -- C:\Users\ROY\AppData\Local\{06E5DE11-A7C8-4CF8-8D66-F613C52001F4}
O43 - CFD: 2012/10/18 09:24:24 - [0] D -- C:\Users\ROY\AppData\Local\{070D1F91-B776-4B3B-8AA8-1FF953DFE2BC}
O43 - CFD: 2012/04/26 13:14:18 - [0] D -- C:\Users\ROY\AppData\Local\{0775F6E4-BE8C-4D0A-BA38-4DAFF81AA3A1}
O43 - CFD: 2012/02/03 19:05:49 - [0] D -- C:\Users\ROY\AppData\Local\{07859EE4-EF48-49C4-A7A9-9332B6BA01FB}
O43 - CFD: 2012/08/18 19:15:26 - [0] D -- C:\Users\ROY\AppData\Local\{0789311C-4D01-4897-AE30-0B8DB399C0CB}
O43 - CFD: 2012/10/06 15:30:50 - [0] D -- C:\Users\ROY\AppData\Local\{07F4BB6C-8D53-4FBB-AE68-792899189286}
O43 - CFD: 2012/01/22 11:46:43 - [0] D -- C:\Users\ROY\AppData\Local\{0920224D-FC7A-4A41-8567-47D1960D0831}
O43 - CFD: 2012/02/22 11:12:54 - [0] D -- C:\Users\ROY\AppData\Local\{09ECCD64-CE89-4DF7-B15E-36C40C29C64D}
O43 - CFD: 2013/06/01 17:10:52 - [0] D -- C:\Users\ROY\AppData\Local\{0A59B564-6A30-4631-83D3-9D63D235D730}
O43 - CFD: 2012/05/27 13:23:33 - [0] D -- C:\Users\ROY\AppData\Local\{0A731FCF-0FFD-43E4-AB61-1DF74B42CF53}
O43 - CFD: 2013/03/28 09:57:39 - [0] D -- C:\Users\ROY\AppData\Local\{0AAFACED-B76A-4682-9041-2369A2565876}
O43 - CFD: 2012/02/01 12:59:08 - [0] D -- C:\Users\ROY\AppData\Local\{0ACD30C7-1011-4A8E-B6E6-DB1D4D95D2D6}
O43 - CFD: 2012/04/27 20:15:13 - [0] D -- C:\Users\ROY\AppData\Local\{0AE6419E-022B-4403-8E50-F66D3ECA80DB}
O43 - CFD: 2012/10/24 10:07:41 - [0] D -- C:\Users\ROY\AppData\Local\{0B493221-5804-4D34-913C-D8900B0EC549}
O43 - CFD: 2012/06/14 16:07:01 - [0] D -- C:\Users\ROY\AppData\Local\{0B6D0B5E-ABD6-4DFF-AB6F-A75978838E0D}
O43 - CFD: 2012/08/30 12:24:22 - [0] D -- C:\Users\ROY\AppData\Local\{0B79A021-7F9B-4749-B7B1-B27B9DF5A8F2}
O43 - CFD: 2012/06/01 09:52:00 - [0] D -- C:\Users\ROY\AppData\Local\{0B9EEB1D-B45A-4526-B5EF-F41E4504FD7A}
O43 - CFD: 2012/11/21 10:40:10 - [0] D -- C:\Users\ROY\AppData\Local\{0BBDD83C-2DD0-4308-96BF-B7CA90615A77}
O43 - CFD: 2012/06/19 09:30:22 - [0] D -- C:\Users\ROY\AppData\Local\{0C79DEF5-F9BB-435E-95E2-42A4291FA5D1}
O43 - CFD: 2012/02/22 11:12:42 - [0] D -- C:\Users\ROY\AppData\Local\{0D468E96-1759-4D6B-9D56-E5C42FA2C105}
O43 - CFD: 2012/11/30 11:22:59 - [0] D -- C:\Users\ROY\AppData\Local\{0D5CD189-63AB-4AFE-9C7C-7A4ACBEC944B}
O43 - CFD: 2012/05/18 14:24:49 - [0] D -- C:\Users\ROY\AppData\Local\{0DC95BE5-6FCA-4DE4-8463-830FA43B5B39}
O43 - CFD: 2012/06/03 17:52:31 - [0] D -- C:\Users\ROY\AppData\Local\{0E6B8A52-7282-4989-A5E8-F9C3BADAD414}
O43 - CFD: 2012/09/01 09:19:40 - [0] D -- C:\Users\ROY\AppData\Local\{0EB690A2-2C42-4AF3-89C0-F7FCD6B239D8}
O43 - CFD: 2012/04/28 16:21:27 - [0] D -- C:\Users\ROY\AppData\Local\{0EB6E46C-5F64-4CB0-8CB6-14D8126AB62F}
O43 - CFD: 2012/01/02 21:26:14 - [0] D -- C:\Users\ROY\AppData\Local\{0F67B8CC-3A96-4A8D-9FBE-6A319DBA7EE2}
O43 - CFD: 2013/01/27 14:42:35 - [0] D -- C:\Users\ROY\AppData\Local\{0F6BEE8A-C50D-4C4B-962F-575E987DB1CE}
O43 - CFD: 2012/03/13 10:13:56 - [0] D -- C:\Users\ROY\AppData\Local\{0F9AC799-F9E5-4EB8-B9F2-4603103C1635}
O43 - CFD: 2012/04/30 17:56:15 - [0] D -- C:\Users\ROY\AppData\Local\{0FBA43BC-A35C-4420-867D-24888A423AF8}
O43 - CFD: 2012/03/19 10:50:50 - [0] D -- C:\Users\ROY\AppData\Local\{107B7734-7F65-468F-B30F-0A9E17CBB59F}
O43 - CFD: 2012/10/12 10:14:51 - [0] D -- C:\Users\ROY\AppData\Local\{10D50570-AC35-4A7B-AA94-4B116E405610}
O43 - CFD: 2013/03/09 12:55:53 - [0] D -- C:\Users\ROY\AppData\Local\{111DA0D8-6685-4143-9267-2FF06E9F8533}
O43 - CFD: 2012/11/19 12:43:48 - [0] D -- C:\Users\ROY\AppData\Local\{1166D0CD-B94C-4FEF-ABC0-9B808B32DD7E}
O43 - CFD: 2012/05/12 12:29:15 - [0] D -- C:\Users\ROY\AppData\Local\{1187FE0E-B215-40E5-A72B-13EDE2C7D9C9}
O43 - CFD: 2013/01/18 11:57:16 - [0] D -- C:\Users\ROY\AppData\Local\{11B41BCA-07BA-4BAC-8949-48DBF8878D7A}
O43 - CFD: 2013/05/08 13:26:55 - [0] D -- C:\Users\ROY\AppData\Local\{11EC771F-9303-4125-BFC0-D44473BD7723}
O43 - CFD: 2012/04/27 09:39:00 - [0] D -- C:\Users\ROY\AppData\Local\{123FB242-EBC0-41F7-8415-B74CC90AE7C8}
O43 - CFD: 2012/03/22 15:17:34 - [0] D -- C:\Users\ROY\AppData\Local\{1250611A-4A15-4AB2-936B-283E89BFEBE9}
O43 - CFD: 2012/01/06 11:07:35 - [0] D -- C:\Users\ROY\AppData\Local\{128F3F76-35FE-49DA-AF04-81503C33F542}
O43 - CFD: 2013/01/14 11:35:45 - [0] D -- C:\Users\ROY\AppData\Local\{12919725-F9D1-4244-82AC-A122B87DDC9D}
O43 - CFD: 2012/04/23 16:36:12 - [0] D -- C:\Users\ROY\AppData\Local\{12B4AE7D-7D89-43E9-8798-2AADD01AD4BA}
O43 - CFD: 2013/09/04 14:01:52 - [0] D -- C:\Users\ROY\AppData\Local\{12CFDA7C-0C8A-4A0D-9DD3-6D3D66B25467}
O43 - CFD: 2012/05/10 09:37:40 - [0] D -- C:\Users\ROY\AppData\Local\{1309DBC2-1304-41CE-A0DC-80A7A6D1F670}
O43 - CFD: 2013/04/06 14:34:47 - [0] D -- C:\Users\ROY\AppData\Local\{133316F2-F3FD-48B2-BE2B-EBD42D7C6694}
O43 - CFD: 2012/10/15 10:11:32 - [0] D -- C:\Users\ROY\AppData\Local\{137139C9-69B5-4583-9CA1-50A8689A726A}
O43 - CFD: 2012/08/15 10:19:30 - [0] D -- C:\Users\ROY\AppData\Local\{13A68609-F6DC-45F7-887C-AB94B65B4816}
O43 - CFD: 2012/05/07 08:48:16 - [0] D -- C:\Users\ROY\AppData\Local\{13CE5B78-45AA-4B36-8948-BCD468CC4FC0}
O43 - CFD: 2012/04/27 11:24:07 - [0] D -- C:\Users\ROY\AppData\Local\{13D39347-0BAD-4BDA-934B-84102C3408D3}
O43 - CFD: 2012/05/21 17:50:09 - [0] D -- C:\Users\ROY\AppData\Local\{140DF900-990A-45AD-B599-4B63C81F9B2D}
O43 - CFD: 2013/04/19 14:27:41 - [0] D -- C:\Users\ROY\AppData\Local\{142ED381-ED72-45D7-B982-2198BE72E5E2}
O43 - CFD: 2013/02/01 11:33:52 - [0] D -- C:\Users\ROY\AppData\Local\{14808A5D-DCDB-4B08-9F8D-EAB15BD03D5F}
O43 - CFD: 2013/03/02 13:07:33 - [0] D -- C:\Users\ROY\AppData\Local\{14863E82-80BE-4905-9827-576BDF160448}
O43 - CFD: 2013/03/16 10:12:14 - [0] D -- C:\Users\ROY\AppData\Local\{14BE1AE2-755C-41F1-ABD4-F40983CA0086}
O43 - CFD: 2012/04/19 10:32:12 - [0] D -- C:\Users\ROY\AppData\Local\{151B1751-CA31-411A-8597-804CCEE86C1D}
O43 - CFD: 2013/04/24 09:39:52 - [0] D -- C:\Users\ROY\AppData\Local\{1521B4AD-832F-4A72-AB90-EC12256DBAED}
O43 - CFD: 2012/04/16 15:06:52 - [0] D -- C:\Users\ROY\AppData\Local\{15244A11-3D4E-4FBB-876B-9EF0672CF369}
O43 - CFD: 2012/04/29 11:24:09 - [0] D -- C:\Users\ROY\AppData\Local\{16213A5A-55CE-43DC-BC25-58EA0FEC389E}
O43 - CFD: 2012/05/12 12:29:26 - [0] D -- C:\Users\ROY\AppData\Local\{165B7B05-E64E-4E40-AF38-977163C9D765}
O43 - CFD: 2012/03/22 15:17:21 - [0] D -- C:\Users\ROY\AppData\Local\{16D951CD-0DC7-4BE6-970D-766D27B71ACB}
O43 - CFD: 2012/09/07 09:28:47 - [0] D -- C:\Users\ROY\AppData\Local\{16F032BB-5345-41F5-9004-7DE9EAAA2DCB}
O43 - CFD: 2012/01/10 09:59:55 - [0] D -- C:\Users\ROY\AppData\Local\{180DB19F-806C-4DE2-B141-4E1996D88328}
O43 - CFD: 2012/06/18 09:41:33 - [0] D -- C:\Users\ROY\AppData\Local\{18AF56CB-B3B0-4B02-8480-C4F8DCBD24AC}
O43 - CFD: 2013/01/25 12:27:41 - [0] D -- C:\Users\ROY\AppData\Local\{18F60459-DFAF-4807-828D-C3BE3968FECB}
O43 - CFD: 2012/03/06 11:21:19 - [0] D -- C:\Users\ROY\AppData\Local\{19108923-8697-4B91-B512-3750070B0EC8}
O43 - CFD: 2012/04/19 09:21:24 - [0] D -- C:\Users\ROY\AppData\Local\{1947BAA7-B372-46FC-8794-8210C73808E1}
O43 - CFD: 2012/02/01 12:59:21 - [0] D -- C:\Users\ROY\AppData\Local\{197CCB0E-5FFA-4AD4-8C78-D7437BD602DB}
O43 - CFD: 2012/06/08 17:00:30 - [0] D -- C:\Users\ROY\AppData\Local\{199EBFEB-538C-431E-8282-BAAB24198461}
O43 - CFD: 2012/12/29 11:13:22 - [0] D -- C:\Users\ROY\AppData\Local\{1A2D8AC3-9B5E-46F0-A994-6FE93A05040E}
O43 - CFD: 2013/05/27 16:26:38 - [0] D -- C:\Users\ROY\AppData\Local\{1A4F8DFB-6200-4909-9A8F-008D0BDC2CD4}
O43 - CFD: 2012/04/07 14:40:14 - [0] D -- C:\Users\ROY\AppData\Local\{1A658757-F0C7-4E3C-BC31-AC23FD27675C}
O43 - CFD: 2012/04/21 16:59:07 - [0] D -- C:\Users\ROY\AppData\Local\{1A6797F7-4CD2-429F-9E93-7AA192253404}
O43 - CFD: 2012/10/30 11:17:35 - [0] D -- C:\Users\ROY\AppData\Local\{1AB98BAE-FCE5-4E18-9AFF-420423F381BF}
O43 - CFD: 2013/04/29 11:22:58 - [0] D -- C:\Users\ROY\AppData\Local\{1C2806A0-1054-4A25-8957-9BF921D88830}
O43 - CFD: 2012/08/22 10:03:44 - [0] D -- C:\Users\ROY\AppData\Local\{1C62613C-B69E-4E0A-90A2-E27C4F362719}
O43 - CFD: 2012/04/27 11:10:43 - [0] D -- C:\Users\ROY\AppData\Local\{1CE424E3-EE2F-4DE8-852B-BC7B954773D9}
O43 - CFD: 2012/05/22 11:07:32 - [0] D -- C:\Users\ROY\AppData\Local\{1CF288CA-E973-489A-955F-19488294E7D4}
O43 - CFD: 2012/06/05 15:55:56 - [0] D -- C:\Users\ROY\AppData\Local\{1D778810-2343-4E49-8CA3-B52C297F81FE}
O43 - CFD: 2012/05/18 14:25:00 - [0] D -- C:\Users\ROY\AppData\Local\{1E59A15E-CDB9-47DE-BD96-42E8D710CF21}
O43 - CFD: 2013/08/11 13:04:52 - [0] D -- C:\Users\ROY\AppData\Local\{1E816A89-45CD-414D-94CF-55F4A8DB5993}
O43 - CFD: 2012/12/12 12:51:26 - [0] D -- C:\Users\ROY\AppData\Local\{1F9BDAC0-1780-4FC9-B0DF-D9D03366F8E3}
O43 - CFD: 2012/04/26 14:47:21 - [0] D -- C:\Users\ROY\AppData\Local\{1FB61A11-3094-4489-BD15-31A0E7A423EE}
O43 - CFD: 2013/02/27 10:52:41 - [0] D -- C:\Users\ROY\AppData\Local\{2020490F-D229-4F6D-8472-A8CA0D7EE0DB}
O43 - CFD: 2012/05/21 17:50:09 - [0] D -- C:\Users\ROY\AppData\Local\{2033E940-1A7A-4871-8B36-B5852DFD58FE}
O43 - CFD: 2012/11/04 19:03:56 - [0] D -- C:\Users\ROY\AppData\Local\{205A4342-D4F8-4DB4-B678-192376AF8F23}
O43 - CFD: 2012/10/09 17:06:41 - [0] D -- C:\Users\ROY\AppData\Local\{20728EEF-F931-4959-BBDA-C84D75136ABF}
O43 - CFD: 2011/12/27 12:52:42 - [0] D -- C:\Users\ROY\AppData\Local\{21858086-4E93-4EB3-888E-8DC9BB4162B1}
O43 - CFD: 2013/06/17 20:51:14 - [0] D -- C:\Users\ROY\AppData\Local\{220DF148-FE9C-4B0D-8B98-40E8920B744A}
O43 - CFD: 2012/02/24 12:41:22 - [0] D -- C:\Users\ROY\AppData\Local\{220E05DF-954D-4454-912D-21FB86913E94}
O43 - CFD: 2013/09/02 10:17:14 - [0] D -- C:\Users\ROY\AppData\Local\{228E57C9-9951-4FFB-9A50-459FBE483FBE}
O43 - CFD: 2012/06/11 09:47:54 - [0] D -- C:\Users\ROY\AppData\Local\{22A84101-2798-47C0-A3F9-F39DBA20C49B}
O43 - CFD: 2013/08/03 16:02:28 - [0] D -- C:\Users\ROY\AppData\Local\{22C5A1E9-5A8C-416B-A885-6BA1D0BD5757}
O43 - CFD: 2012/01/29 10:58:52 - [0] D -- C:\Users\ROY\AppData\Local\{22DB14D7-7A54-479A-BFED-1898DF14A25C}
O43 - CFD: 2012/05/16 17:53:02 - [0] D -- C:\Users\ROY\AppData\Local\{22E94174-2053-4D0C-AEB0-B565A0BA0A38}
O43 - CFD: 2013/04/13 15:24:54 - [0] D -- C:\Users\ROY\AppData\Local\{2328379D-D043-44F1-A00C-7D06177E73D0}
O43 - CFD: 2012/12/25 11:53:12 - [0] D -- C:\Users\ROY\AppData\Local\{233BC51A-2AB3-4976-B29A-0C8FF9BE5234}
O43 - CFD: 2012/04/28 08:26:51 - [0] D -- C:\Users\ROY\AppData\Local\{2399178F-E60E-40DC-8813-ED08CA42A836}
O43 - CFD: 2012/03/07 10:46:48 - [0] D -- C:\Users\ROY\AppData\Local\{23D32DED-6189-4CF3-81F0-AC455F7978E2}
O43 - CFD: 2012/04/21 09:22:47 - [0] D -- C:\Users\ROY\AppData\Local\{2436EA97-166B-464A-8575-B08CC6A26B16}
O43 - CFD: 2012/10/04 11:10:41 - [0] D -- C:\Users\ROY\AppData\Local\{248A9AB6-259F-4560-A582-25F970DD0C11}
O43 - CFD: 2012/05/02 11:15:26 - [0] D -- C:\Users\ROY\AppData\Local\{2497E346-92E5-468F-ABB9-68BE096182ED}
O43 - CFD: 2012/04/27 18:33:42 - [0] D -- C:\Users\ROY\AppData\Local\{265E3509-54E0-4698-B8AE-07B9DD1C1E15}
O43 - CFD: 2012/04/22 09:41:44 - [0] D -- C:\Users\ROY\AppData\Local\{2670DE01-87B6-4584-BE28-45285228D9BC}
O43 - CFD: 2012/08/06 12:31:46 - [0] D -- C:\Users\ROY\AppData\Local\{269155F3-7486-42DE-8E12-54A82949014F}
O43 - CFD: 2013/05/04 12:26:30 - [0] D -- C:\Users\ROY\AppData\Local\{27941C07-8F4B-47E2-AE6E-1FDAB9647517}
O43 - CFD: 2012/03/19 10:51:02 - [0] D -- C:\Users\ROY\AppData\Local\{27A81433-81EE-456D-A4E3-246BB3FA4997}
O43 - CFD: 2012/04/03 09:28:51 - [0] D -- C:\Users\ROY\AppData\Local\{27CA5583-6E5C-4128-9879-FC7D40E1F91F}
O43 - CFD: 2013/03/17 16:49:26 - [0] D -- C:\Users\ROY\AppData\Local\{27D7F3CC-DAA9-4B0B-90A6-C34481C05C60}
O43 - CFD: 2012/06/02 09:13:29 - [0] D -- C:\Users\ROY\AppData\Local\{2858D5E4-DD3D-45BB-8135-486E85144038}
O43 - CFD: 2012/06/15 14:19:57 - [0] D -- C:\Users\ROY\AppData\Local\{2880366E-DF5C-42A4-B8F7-2E404D155BD3}
O43 - CFD: 2012/02/26 10:32:40 - [0] D -- C:\Users\ROY\AppData\Local\{289C0AB5-3C39-4BA5-B353-700A79642BC3}
O43 - CFD: 2013/06/08 14:12:21 - [0] D -- C:\Users\ROY\AppData\Local\{28BD5155-7293-464D-8F54-8D243DD84973}
O43 - CFD: 2012/12/10 10:52:22 - [0] D -- C:\Users\ROY\AppData\Local\{28DA9D63-6BA3-41EC-84C7-D476A60237D7}
O43 - CFD: 2012/04/28 11:06:56 - [0] D -- C:\Users\ROY\AppData\Local\{29055E26-3EC2-4A8C-A6E1-2D0065A168F1}
O43 - CFD: 2012/10/21 12:07:31 - [0] D -- C:\Users\ROY\AppData\Local\{293592E2-8A3D-4551-9792-CD3A31F34790}
O43 - CFD: 2012/08/02 11:37:41 - [0] D -- C:\Users\ROY\AppData\Local\{2961A38E-2D72-4994-A112-6ED110FA2B48}
O43 - CFD: 2012/12/06 13:05:45 - [0] D -- C:\Users\ROY\AppData\Local\{2978628F-C2EC-4D6E-B95A-0B38E88B06E4}
O43 - CFD: 2012/12/26 12:21:52 - [0] D -- C:\Users\ROY\AppData\Local\{2A42563A-D1CF-4BEE-9057-51A9D2AD97CC}
O43 - CFD: 2012/02/24 12:41:10 - [0] D -- C:\Users\ROY\AppData\Local\{2B187769-B7F7-4D1F-B307-5C133A7C880B}
O43 - CFD: 2012/05/30 11:39:39 - [0] D -- C:\Users\ROY\AppData\Local\{2B392D76-8ACF-45E8-8F5D-8D3408B5E0BB}
O43 - CFD: 2012/06/12 14:10:10 - [0] D -- C:\Users\ROY\AppData\Local\{2BA4BC83-1ECF-4179-A494-960F2995D43D}
O43 - CFD: 2013/05/06 10:23:10 - [0] D -- C:\Users\ROY\AppData\Local\{2C138EA5-1D75-42C1-AFD9-2107D65C5271}
O43 - CFD: 2013/05/03 09:45:55 - [0] D -- C:\Users\ROY\AppData\Local\{2C503EEC-E399-4A63-84EB-9D7431818088}
O43 - CFD: 2013/06/18 13:24:27 - [0] D -- C:\Users\ROY\AppData\Local\{2C7D7B8E-9146-48C0-9C57-FF996F531A8F}
O43 - CFD: 2012/08/16 09:48:34 - [0] D -- C:\Users\ROY\AppData\Local\{2CDF2DA5-8958-4F6F-91DB-D7D34C1A728E}
O43 - CFD: 2013/07/31 09:55:12 - [0] D -- C:\Users\ROY\AppData\Local\{2CFD41CD-1BD9-4602-8E81-F6E1238F5F9E}
O43 - CFD: 2012/02/27 11:52:52 - [0] D -- C:\Users\ROY\AppData\Local\{2D124C2A-C74B-4AEB-8043-4752C50F8533}
O43 - CFD: 2012/01/26 15:49:02 - [0] D -- C:\Users\ROY\AppData\Local\{2D19B080-A5CF-4C55-8047-4509949C9967}
O43 - CFD: 2013/01/28 12:46:53 - [0] D -- C:\Users\ROY\AppData\Local\{2D68CC80-F901-41DF-BAC6-99490B477031}
O43 - CFD: 2013/05/22 09:46:09 - [0] D -- C:\Users\ROY\AppData\Local\{2E0E2B9D-BC6E-4D44-A7D1-8BE00FAC117A}
O43 - CFD: 2012/04/10 09:44:47 - [0] D -- C:\Users\ROY\AppData\Local\{2E163773-D587-4CC0-9E51-89EC566EF840}
O43 - CFD: 2013/02/11 12:55:17 - [0] D -- C:\Users\ROY\AppData\Local\{2E4CC2A3-C561-4130-816E-BE487B0DFE04}
O43 - CFD: 2013/01/04 11:49:54 - [0] D -- C:\Users\ROY\AppData\Local\{2E5355D1-9B0B-4758-B402-126D08C4652B}
O43 - CFD: 2012/08/06 12:31:58 - [0] D -- C:\Users\ROY\AppData\Local\{2E552E4E-5122-4ECB-9A6D-11D44B33841B}
O43 - CFD: 2012/10/25 09:49:17 - [0] D -- C:\Users\ROY\AppData\Local\{2EBEA10E-8309-4E86-8AB2-578BAFB269E2}
O43 - CFD: 2012/12/17 12:15:35 - [0] D -- C:\Users\ROY\AppData\Local\{2FA23655-440C-4134-A24C-A3AA7E27C9CF}
O43 - CFD: 2012/10/29 12:40:14 - [0] D -- C:\Users\ROY\AppData\Local\{314E925E-0001-4058-8909-CE8553384FB4}
O43 - CFD: 2013/01/17 10:16:03 - [0] D -- C:\Users\ROY\AppData\Local\{315DDA0B-86AD-4021-84D0-A862BE45C927}
O43 - CFD: 2012/06/09 09:55:54 - [0] D -- C:\Users\ROY\AppData\Local\{3167E8AF-4ACC-445C-B895-B6FDF072A98B}
O43 - CFD: 2012/01/11 22:33:23 - [0] D -- C:\Users\ROY\AppData\Local\{31B324D4-15B2-48FC-AB92-57894FCA4F3C}
O43 - CFD: 2013/04/23 10:04:38 - [0] D -- C:\Users\ROY\AppData\Local\{31C18D19-A342-47DD-9168-D925CA9B6277}
O43 - CFD: 2012/04/28 11:22:27 - [0] D -- C:\Users\ROY\AppData\Local\{31E92AA9-7402-4DF6-9447-871140230BBF}
O43 - CFD: 2013/05/16 09:23:18 - [0] D -- C:\Users\ROY\AppData\Local\{31F876F0-5EAA-4684-A162-D4ABD29E0E92}
O43 - CFD: 2012/09/07 22:08:00 - [0] D -- C:\Users\ROY\AppData\Local\{32160ECD-16CA-4FF5-9911-481AFE6FF955}
O43 - CFD: 2013/01/07 13:10:24 - [0] D -- C:\Users\ROY\AppData\Local\{33048E39-28BE-4662-928F-91F2651AF903}
O43 - CFD: 2013/09/07 09:51:01 - [0] D -- C:\Users\ROY\AppData\Local\{33503E4A-97DB-4781-B317-A336011C06EE}
O43 - CFD: 2013/05/27 12:30:52 - [0] D -- C:\Users\ROY\AppData\Local\{335C1440-1C1C-4492-8BE5-1B7416F152F5}
O43 - CFD: 2012/06/11 09:48:05 - [0] D -- C:\Users\ROY\AppData\Local\{349E64CF-62E8-4ACA-88F4-7ACDDA5645A2}
O43 - CFD: 2012/01/23 21:17:06 - [0] D -- C:\Users\ROY\AppData\Local\{34A0943A-7F81-4AF2-AF38-3D1D4951819A}
O43 - CFD: 2012/03/18 13:03:35 - [0] D -- C:\Users\ROY\AppData\Local\{34CC52BF-A58C-43F2-BE11-383A512573ED}
O43 - CFD: 2012/05/14 15:52:45 - [0] D -- C:\Users\ROY\AppData\Local\{34FD36E9-2A75-46C8-8C2D-23B9A2B0B2B9}
O43 - CFD: 2012/12/18 11:34:27 - [0] D -- C:\Users\ROY\AppData\Local\{35ED1964-83CD-42E9-9D22-10FF8970014D}
O43 - CFD: 2012/08/17 10:33:31 - [0] D -- C:\Users\ROY\AppData\Local\{3618931B-5D91-4602-8561-38CAB463E09D}
O43 - CFD: 2012/04/28 11:05:58 - [0] D -- C:\Users\ROY\AppData\Local\{3661FA82-684F-4EE5-8B7D-0820B30A4C73}
O43 - CFD: 2012/04/26 10:54:54 - [0] D -- C:\Users\ROY\AppData\Local\{3663A731-22AE-4537-95BD-257688C6D174}
O43 - CFD: 2012/05/15 11:58:09 - [0] D -- C:\Users\ROY\AppData\Local\{366AB006-5C9C-4E70-9D21-B151D2A21956}
O43 - CFD: 2012/04/17 16:18:37 - [0] D -- C:\Users\ROY\AppData\Local\{36789D8B-3A00-41F0-BDA9-A4FC83D244BD}
O43 - CFD: 2012/12/11 10:27:18 - [0] D -- C:\Users\ROY\AppData\Local\{36B3FE47-288F-4F72-AA60-794E93F29715}
O43 - CFD: 2012/01/22 11:46:22 - [0] D -- C:\Users\ROY\AppData\Local\{36D33588-37D0-4CFC-BB55-CDADBCCA14C0}
O43 - CFD: 2013/02/20 10:23:58 - [0] D -- C:\Users\ROY\AppData\Local\{36FD25B1-04EF-4DC0-A8EC-B957F2FBFDEC}
O43 - CFD: 2012/03/31 14:38:57 - [0] D -- C:\Users\ROY\AppData\Local\{373F70ED-C788-4CA6-9842-5475E1AA37FC}
O43 - CFD: 2013/06/09 15:24:48 - [0] D -- C:\Users\ROY\AppData\Local\{37AB7D94-6E5E-42F2-8C66-20AA9D910AF3}
O43 - CFD: 2012/09/12 09:08:46 - [0] D -- C:\Users\ROY\AppData\Local\{37C43D81-B590-4F3B-BB52-8FB1FA65727D}
O43 - CFD: 2012/04/26 20:28:16 - [0] D -- C:\Users\ROY\AppData\Local\{3804AA5F-26B7-4FEB-A1E6-133DFCD75C05}
O43 - CFD: 2013/01/20 11:35:58 - [0] D -- C:\Users\ROY\AppData\Local\{3822E512-DE8F-4FFF-A26B-AB56A78160C6}
O43 - CFD: 2012/06/21 21:11:28 - [0] D -- C:\Users\ROY\AppData\Local\{38292191-60CB-4617-A0FF-80CA7E274933}
O43 - CFD: 2013/04/03 08:48:48 - [0] D -- C:\Users\ROY\AppData\Local\{382CBFC0-570A-4B06-AF04-995200727CB7}
O43 - CFD: 2012/09/28 09:44:44 - [0] D -- C:\Users\ROY\AppData\Local\{387B5EDA-98C3-4EC6-B195-54E00381B162}
O43 - CFD: 2012/03/17 14:54:58 - [0] D -- C:\Users\ROY\AppData\Local\{38D2CED1-E711-46F5-A0DA-6CFE2FFE7A82}
O43 - CFD: 2011/12/20 08:48:42 - [0] D -- C:\Users\ROY\AppData\Local\{38DEE652-55DB-40E3-BCF9-A22C84A8E383}
O43 - CFD: 2012/12/31 17:12:30 - [0] D -- C:\Users\ROY\AppData\Local\{38F74B47-93E8-4DB3-BBF8-3626AAA6A7A1}
O43 - CFD: 2012/04/26 10:19:16 - [0] D -- C:\Users\ROY\AppData\Local\{39B09ECE-0493-43F6-A78A-26AFA35DA764}
O43 - CFD: 2012/03/15 16:33:56 - [0] D -- C:\Users\ROY\AppData\Local\{39C02D8F-345B-4838-917D-D069A2F3CEA8}
O43 - CFD: 2012/04/28 11:22:16 - [0] D -- C:\Users\ROY\AppData\Local\{39C9E803-9572-4E76-A329-D98E4DC80CBD}
O43 - CFD: 2013/05/17 14:39:33 - [0] D -- C:\Users\ROY\AppData\Local\{39D14284-CD07-4A32-A3F5-BDA83DBEBFE1}
O43 - CFD: 2012/06/07 14:58:00 - [0] D -- C:\Users\ROY\AppData\Local\{39F179EF-93DD-44C5-99D4-E96A060B061F}
O43 - CFD: 2012/03/20 15:43:47 - [0] D -- C:\Users\ROY\AppData\Local\{3A3565B5-45BC-48E7-B84C-4F2D3F334D83}
O43 - CFD: 2013/08/15 17:38:21 - [0] D -- C:\Users\ROY\AppData\Local\{3A5E252D-06DC-4299-B573-523663BFDD65}
O43 - CFD: 2013/01/22 11:06:20 - [0] D -- C:\Users\ROY\AppData\Local\{3ACD6A44-35DD-462A-AC57-01770D877C9B}
O43 - CFD: 2012/12/09 09:05:15 - [0] D -- C:\Users\ROY\AppData\Local\{3BB89E47-3E22-44C7-BF7E-61790E77FEEB}
O43 - CFD: 2012/06/08 16:47:57 - [0] D -- C:\Users\ROY\AppData\Local\{3BEE3BD5-B8B1-4B6E-B78F-D27338A83C05}
O43 - CFD: 2012/05/28 17:47:25 - [0] D -- C:\Users\ROY\AppData\Local\{3C537BE2-42B9-45D1-8DC3-E32785A1C916}
O43 - CFD: 2013/06/15 14:50:21 - [0] D -- C:\Users\ROY\AppData\Local\{3C675AB3-BF60-49F8-8864-59F703B5BE72}
O43 - CFD: 2012/11/15 10:45:40 - [0] D -- C:\Users\ROY\AppData\Local\{3C742E0D-D3A3-4FC9-89F9-1050ED95E947}
O43 - CFD: 2012/11/26 15:10:29 - [0] D -- C:\Users\ROY\AppData\Local\{3C7DBF7E-58A6-4FCA-B7D5-EAD46E390180}
O43 - CFD: 2012/04/25 21:33:31 - [0] D -- C:\Users\ROY\AppData\Local\{3CA52AA9-F7D4-448F-AEAB-992F398FEF18}
O43 - CFD: 2013/02/01 10:16:31 - [0] D -- C:\Users\ROY\AppData\Local\{3CB1AF85-F83E-4DDD-BA66-9429D72FA3F0}
O43 - CFD: 2012/09/06 09:06:12 - [0] D -- C:\Users\ROY\AppData\Local\{3CB457E3-409C-46DF-A790-A479E9FB8DC5}
O43 - CFD: 2012/04/27 20:15:24 - [0] D -- C:\Users\ROY\AppData\Local\{3D22EB2D-251E-48CC-B8E6-5F2AFA11A3DE}
O43 - CFD: 2012/01/10 10:00:06 - [0] D -- C:\Users\ROY\AppData\Local\{3D919DB4-EE7D-4EED-AFB1-D6E407EFBD90}
O43 - CFD: 2012/02/15 10:34:56 - [0] D -- C:\Users\ROY\AppData\Local\{3DB03EA6-DBD4-4516-9BC6-661AA0A07E55}
O43 - CFD: 2013/08/24 14:37:02 - [0] D -- C:\Users\ROY\AppData\Local\{3DE00549-9B0D-4B27-9619-C41CC25BFA5E}
O43 - CFD: 2012/04/28 17:02:47 - [0] D -- C:\Users\ROY\AppData\Local\{3EB27325-C03A-41B3-8997-750A7C58D227}
O43 - CFD: 2012/09/11 11:37:27 - [0] D -- C:\Users\ROY\AppData\Local\{3F09AF54-3F40-4715-B9D2-497601C9CDB9}
O43 - CFD: 2012/05/26 12:01:02 - [0] D -- C:\Users\ROY\AppData\Local\{3F6256EA-EB0B-40D3-9C7B-3FF281C981DC}
O43 - CFD: 2012/04/28 11:06:08 - [0] D -- C:\Users\ROY\AppData\Local\{3F9A5784-DB45-43A5-8D58-CCE6D97A45AE}
O43 - CFD: 2012/03/20 15:43:36 - [0] D -- C:\Users\ROY\AppData\Local\{3FAE97E1-C16C-445A-AFE3-A22EAAB5100B}
O43 - CFD: 2012/10/22 09:33:23 - [0] D -- C:\Users\ROY\AppData\Local\{3FF559ED-38B0-47B1-B4B1-A2CF4B61D3F5}
O43 - CFD: 2012/06/01 09:53:27 - [0] D -- C:\Users\ROY\AppData\Local\{40F3F11F-DA3B-4D98-A7A6-A3CB1166D369}
O43 - CFD: 2013/07/29 19:36:23 - [0] D -- C:\Users\ROY\AppData\Local\{411861A7-69FA-4BD9-A178-6633024F15B1}
O43 - CFD: 2012/08/14 10:32:28 - [0] D -- C:\Users\ROY\AppData\Local\{4128D0D5-E3CB-4280-9409-2EA6BC1F0924}
O43 - CFD: 2013/09/03 09:18:21 - [0] D -- C:\Users\ROY\AppData\Local\{4148EE5B-0752-470A-9B7C-D333F8517F7B}
O43 - CFD: 2012/06/08 16:55:54 - [0] D -- C:\Users\ROY\AppData\Local\{415794D7-0D2C-401B-BF0E-3C1B8160E8D0}
O43 - CFD: 2012/02/13 10:32:32 - [0] D -- C:\Users\ROY\AppData\Local\{41A2CA21-9FD4-4666-B8DC-27720013D7DA}
O43 - CFD: 2012/11/07 11:39:26 - [0] D -- C:\Users\ROY\AppData\Local\{41D7D6B4-9BCF-4EF7-A672-463282EB602F}
O43 - CFD: 2012/04/28 14:17:08 - [0] D -- C:\Users\ROY\AppData\Local\{420821F3-37D5-48F2-8C36-4BCCB3A8F678}
O43 - CFD: 2012/11/17 14:53:30 - [0] D -- C:\Users\ROY\AppData\Local\{4328EE3E-ACC8-45D5-A59C-3C74B86CB067}
O43 - CFD: 2012/06/14 16:07:12 - [0] D -- C:\Users\ROY\AppData\Local\{435252C2-0FD5-436B-8627-CDB09E8A4959}
O43 - CFD: 2013/05/09 11:00:11 - [0] D -- C:\Users\ROY\AppData\Local\{43815114-8705-48ED-AEAC-9163ACAFDC2E}
O43 - CFD: 2012/02/03 19:05:38 - [0] D -- C:\Users\ROY\AppData\Local\{43B813C9-D417-4096-92E3-114D288DE34D}
O43 - CFD: 2012/10/31 10:39:17 - [0] D -- C:\Users\ROY\AppData\Local\{43E52885-B0AD-4DE3-BAE9-145EB17E01DB}
O43 - CFD: 2012/03/15 11:14:34 - [0] D -- C:\Users\ROY\AppData\Local\{43F0A1C3-3858-4682-82BB-91DCC8BAABAD}
O43 - CFD: 2012/11/08 10:51:53 - [0] D -- C:\Users\ROY\AppData\Local\{4463352D-4CCF-430B-8D0B-396D57E4D485}
O43 - CFD: 2012/06/19 18:46:30 - [0] D -- C:\Users\ROY\AppData\Local\{4491BCA1-B37C-45A2-95DA-9618C5D5C5DC}
O43 - CFD: 2012/03/23 10:25:56 - [0] D -- C:\Users\ROY\AppData\Local\{467991CB-7DC4-457D-B06C-39DAAA9C87A5}
O43 - CFD: 2012/04/18 11:17:08 - [0] D -- C:\Users\ROY\AppData\Local\{46C9AD19-F970-498A-9B96-F6B48003736F}
O43 - CFD: 2012/05/30 14:25:13 - [0] D -- C:\Users\ROY\AppData\Local\{46C9C4B8-9842-4E2A-B516-3672DD24336E}
O43 - CFD: 2012/06/08 16:47:46 - [0] D -- C:\Users\ROY\AppData\Local\{471724A1-98A0-4C12-AEE0-647EBCDFC1A1}
O43 - CFD: 2012/08/31 12:37:15 - [0] D -- C:\Users\ROY\AppData\Local\{471B3E09-AA61-4AFC-8FE5-7E22C3DF2308}
O43 - CFD: 2012/03/21 10:45:47 - [0] D -- C:\Users\ROY\AppData\Local\{48138C55-BB44-4C17-AE3A-9D220D9285BF}
O43 - CFD: 2012/08/29 10:05:10 - [0] D -- C:\Users\ROY\AppData\Local\{482384F9-92BF-4810-8E8F-7D2A2B66F457}
O43 - CFD: 2012/08/08 09:51:55 - [0] D -- C:\Users\ROY\AppData\Local\{48E8AF05-AF3A-42F6-AFEF-DD7F1EF25FD2}
O43 - CFD: 2012/08/26 22:52:53 - [0] D -- C:\Users\ROY\AppData\Local\{48EDCE0B-9D73-4944-B17B-267D3E7D19CF}
O43 - CFD: 2012/01/06 11:07:48 - [0] D -- C:\Users\ROY\AppData\Local\{48FAB00C-EBE7-4D64-B753-D225BA88C605}
O43 - CFD: 2012/06/04 14:09:33 - [0] D -- C:\Users\ROY\AppData\Local\{493CB1A0-2BB6-48E6-AF33-8538A3E08FB6}
O43 - CFD: 2012/10/23 09:22:49 - [0] D -- C:\Users\ROY\AppData\Local\{4983FA98-D6B0-4218-A57B-C34FE072731D}
O43 - CFD: 2012/05/17 19:33:04 - [0] D -- C:\Users\ROY\AppData\Local\{49ADE0CA-907E-4E50-A8D4-90963599471C}
O43 - CFD: 2013/08/05 09:43:08 - [0] D -- C:\Users\ROY\AppData\Local\{49BB8802-3FAC-4D32-8C65-B9C906FB7195}
O43 - CFD: 2012/04/22 19:16:59 - [0] D -- C:\Users\ROY\AppData\Local\{49D47481-4FD8-40F6-9432-745E27C0ED89}
O43 - CFD: 2013/08/22 11:37:50 - [0] D -- C:\Users\ROY\AppData\Local\{49F5CBB1-650A-4ECD-BC6D-DD4D98B427FD}
O43 - CFD: 2012/09/20 09:36:01 - [0] D -- C:\Users\ROY\AppData\Local\{4A7C1B06-8D9F-4DD3-BDD1-A2E1FFD56D6A}
O43 - CFD: 2013/08/06 11:20:00 - [0] D -- C:\Users\ROY\AppData\Local\{4A909F69-D7F7-4506-B617-B5544DDF2646}
O43 - CFD: 2012/04/27 11:04:52 - [0] D -- C:\Users\ROY\AppData\Local\{4A9B1E25-C8C6-481A-832A-73F81E474E84}
O43 - CFD: 2012/01/07 16:18:30 - [0] D -- C:\Users\ROY\AppData\Local\{4AAC95FA-53E7-49EE-A42F-0F7AB2BBE02B}
O43 - CFD: 2013/02/13 10:39:26 - [0] D -- C:\Users\ROY\AppData\Local\{4AF75B2B-9D54-4291-A6EC-E128A58D8A26}
O43 - CFD: 2012/04/04 09:43:10 - [0] D -- C:\Users\ROY\AppData\Local\{4B3E9B3E-609D-4A7D-87CF-0BC256354050}
O43 - CFD: 2012/12/15 13:49:01 - [0] D -- C:\Users\ROY\AppData\Local\{4B58E525-7FF6-4E1B-8BFB-C63B93AA4F4C}
O43 - CFD: 2012/01/27 18:35:04 - [0] D -- C:\Users\ROY\AppData\Local\{4C375D52-26CD-43A9-A88A-63B892B18107}
O43 - CFD: 2012/06/03 17:52:42 - [0] D -- C:\Users\ROY\AppData\Local\{4CDCEB3F-7607-4648-8419-C83C71A98198}
O43 - CFD: 2012/06/10 22:16:03 - [0] D -- C:\Users\ROY\AppData\Local\{4CE6E95C-BC5F-457A-B966-C4CC5BBFFB85}
O43 - CFD: 2012/03/03 13:23:47 - [0] D -- C:\Users\ROY\AppData\Local\{4D052B37-6FD7-4661-A3AC-0D0055D1639E}
O43 - CFD: 2012/06/01 09:53:38 - [0] D -- C:\Users\ROY\AppData\Local\{4DD51BD5-F228-4462-8069-E0B80FB833A4}
O43 - CFD: 2012/09/29 12:16:51 - [0] D -- C:\Users\ROY\AppData\Local\{4DE28346-8513-4F2C-9271-C2282F66A0F3}
O43 - CFD: 2012/09/05 09:35:31 - [0] D -- C:\Users\ROY\AppData\Local\{4DF8FA39-1D03-4435-AB48-767ACC3E4732}
O43 - CFD: 2012/05/01 16:22:31 - [0] D -- C:\Users\ROY\AppData\Local\{4E1E753D-0C9F-42B9-B70C-4168FBC17703}
O43 - CFD: 2012/06/07 11:26:38 - [0] D -- C:\Users\ROY\AppData\Local\{4E567C52-A78B-409E-AFCF-F012E05A863F}
O43 - CFD: 2012/06/11 14:02:09 - [0] D -- C:\Users\ROY\AppData\Local\{4F229A1A-B2D2-4049-B5F1-818323E7A4F7}
O43 - CFD: 2012/02/17 11:06:09 - [0] D -- C:\Users\ROY\AppData\Local\{4F3CC3F9-1EA3-43ED-AF47-F05AA267AB68}
O43 - CFD: 2013/05/25 11:52:48 - [0] D -- C:\Users\ROY\AppData\Local\{51EB6298-DAD7-4A82-94BA-2827A98FFF7D}
O43 - CFD: 2013/02/15 11:07:25 - [0] D -- C:\Users\ROY\AppData\Local\{5226E27B-6526-4879-87C7-8566DCFFFBE2}
O43 - CFD: 2013/04/11 09:02:02 - [0] D -- C:\Users\ROY\AppData\Local\{524C6150-4C57-441C-ADCF-5A9DA9A2CD22}
O43 - CFD: 2012/03/12 11:00:24 - [0] D -- C:\Users\ROY\AppData\Local\{5280AF50-69A4-4037-8097-9C052469F68F}
O43 - CFD: 2013/05/20 20:24:24 - [0] D -- C:\Users\ROY\AppData\Local\{52C422D6-8CAF-4E44-9A80-8511B2DC66D8}
O43 - CFD: 2012/10/26 14:25:24 - [0] D -- C:\Users\ROY\AppData\Local\{52CD7E1E-B648-4622-812A-549927A7D450}
O43 - CFD: 2012/05/05 15:56:43 - [0] D -- C:\Users\ROY\AppData\Local\{52D71757-1FAE-4AB6-8C48-917607060560}
O43 - CFD: 2012/05/16 11:31:42 - [0] D -- C:\Users\ROY\AppData\Local\{52DF807E-76BA-4FBF-A7DF-FE294E97FDEC}
O43 - CFD: 2012/04/04 09:34:57 - [0] D -- C:\Users\ROY\AppData\Local\{530DC3E9-FD2D-4AAD-BF99-E6BB07CD4748}
O43 - CFD: 2012/02/21 10:31:43 - [0] D -- C:\Users\ROY\AppData\Local\{535D4644-C61C-45FC-BAB0-F6B810AB8803}
O43 - CFD: 2012/10/08 15:18:50 - [0] D -- C:\Users\ROY\AppData\Local\{53748C55-9385-49C1-92D6-9A2F070468E1}
O43 - CFD: 2012/01/15 16:46:14 - [0] D -- C:\Users\ROY\AppData\Local\{53D82BA1-6A74-4AF2-ADFA-9A04F380223F}
O43 - CFD: 2012/01/27 18:34:52 - [0] D -- C:\Users\ROY\AppData\Local\{53E0B522-17B5-441E-99E1-CA74CFA11620}
O43 - CFD: 2011/12/31 15:02:10 - [0] D -- C:\Users\ROY\AppData\Local\{53EFC98C-EF66-4B0B-B228-29747610FDF4}
O43 - CFD: 2013/01/08 15:28:13 - [0] D -- C:\Users\ROY\AppData\Local\{5408F8B5-B08A-4D76-BF94-CFBC30F84E86}
O43 - CFD: 2012/06/20 14:59:28 - [0] D -- C:\Users\ROY\AppData\Local\{543196A0-A3A4-4106-8D43-42FFAFB18F19}
O43 - CFD: 2012/11/05 13:38:21 - [0] D -- C:\Users\ROY\AppData\Local\{544B8CF1-855F-4375-913B-A8B327F7A805}
O43 - CFD: 2013/02/26 11:09:17 - [0] D -- C:\Users\ROY\AppData\Local\{548CE91E-EA17-4612-8D33-A4BECB4F59AC}
O43 - CFD: 2012/04/26 10:54:44 - [0] D -- C:\Users\ROY\AppData\Local\{54D08243-5C16-4323-9839-C76671C392AD}
O43 - CFD: 2013/04/02 15:41:57 - [0] D -- C:\Users\ROY\AppData\Local\{5555B11D-865F-45BC-A8AA-E57D2D7DCB15}
O43 - CFD: 2012/04/16 15:06:41 - [0] D -- C:\Users\ROY\AppData\Local\{5569080B-F98A-4EA9-A4FC-DC0AB241659D}
O43 - CFD: 2013/08/16 11:50:12 - [0] D -- C:\Users\ROY\AppData\Local\{55B564CD-2B2A-4FE5-9113-D2DA90D062DD}
O43 - CFD: 2011/12/20 10:23:17 - [0] D -- C:\Users\ROY\AppData\Local\{55BCF7DF-1817-486C-BC8D-5CB771DDDE56}
O43 - CFD: 2012/04/26 14:47:21 - [0] D -- C:\Users\ROY\AppData\Local\{5678D2B2-88EF-41E2-9DDC-462F18D0FCEF}
O43 - CFD: 2013/01/06 12:49:16 - [0] D -- C:\Users\ROY\AppData\Local\{56AB7A73-BD2A-4CC7-8236-9811BBC689C3}
O43 - CFD: 2013/04/08 12:18:58 - [0] D -- C:\Users\ROY\AppData\Local\{56B27805-0B17-4A32-9984-67BA90FAC662}
O43 - CFD: 2012/12/21 10:15:38 - [0] D -- C:\Users\ROY\AppData\Local\{56D21CE2-432A-474B-AE03-5E56D6F90616}
O43 - CFD: 2011/12/30 17:39:03 - [0] D -- C:\Users\ROY\AppData\Local\{56D57F21-F52E-481B-89FA-4FE92039A31B}
O43 - CFD: 2012/06/01 09:51:47 - [0] D -- C:\Users\ROY\AppData\Local\{57780023-3464-4C07-B481-DF68A661DF9C}
O43 - CFD: 2012/09/25 11:01:36 - [0] D -- C:\Users\ROY\AppData\Local\{57F3D4FA-F097-4C39-A2F0-FA8296196354}
O43 - CFD: 2013/07/30 10:20:19 - [0] D -- C:\Users\ROY\AppData\Local\{580AB97D-97C3-4248-A949-C3694A594671}
O43 - CFD: 2012/03/04 19:55:19 - [0] D -- C:\Users\ROY\AppData\Local\{58151006-366F-4F2E-8BD2-70FA2088DC99}
O43 - CFD: 2013/01/19 18:17:49 - [0] D -- C:\Users\ROY\AppData\Local\{5841E19C-811B-434C-B915-AE5EA2CD3687}
O43 - CFD: 2012/03/24 13:22:35 - [0] D -- C:\Users\ROY\AppData\Local\{588BEE0A-7E8B-47A4-ADB8-14A1F6130395}
O43 - CFD: 2012/10/05 11:37:36 - [0] D -- C:\Users\ROY\AppData\Local\{58B546A4-E65A-4A20-A85E-92C06BFB11B1}
O43 - CFD: 2012/11/03 13:48:44 - [0] D -- C:\Users\ROY\AppData\Local\{59138251-5B0D-4644-95DF-A60CBBF74F91}
O43 - CFD: 2012/06/01 14:40:08 - [0] D -- C:\Users\ROY\AppData\Local\{59AC78B1-3330-400D-8D9F-E9CF4A6D1C81}
O43 - CFD: 2011/12/20 08:49:14 - [0] D -- C:\Users\ROY\AppData\Local\{59B52C07-A2C0-4FB6-84C4-C962941FE964}
O43 - CFD: 2012/04/23 17:04:40 - [0] D -- C:\Users\ROY\AppData\Local\{59C11432-39E3-48D5-BC07-85E59D16DC55}
O43 - CFD: 2012/05/21 14:20:30 - [0] D -- C:\Users\ROY\AppData\Local\{59CEAF35-FE5D-44D7-8CA2-ADE23F56117B}
O43 - CFD: 2012/06/19 18:41:30 - [0] D -- C:\Users\ROY\AppData\Local\{59D466C3-C2B6-4974-A865-D1591100D64B}
O43 - CFD: 2012/06/19 18:42:11 - [0] D -- C:\Users\ROY\AppData\Local\{59D5E14E-262F-465B-8914-3F4939C12366}
O43 - CFD: 2013/05/30 09:04:59 - [0] D -- C:\Users\ROY\AppData\Local\{59F3BB0D-C00C-4E54-B8A4-BD68C2B4392B}
O43 - CFD: 2012/09/27 09:31:20 - [0] D -- C:\Users\ROY\AppData\Local\{5A8D91AB-A1BE-441A-9310-80396768BC89}
O43 - CFD: 2012/04/13 09:34:38 - [0] D -- C:\Users\ROY\AppData\Local\{5A9280E9-FE9B-46CA-A6C1-6DA9C702B1D0}
O43 - CFD: 2012/06/08 11:52:21 - [0] D -- C:\Users\ROY\AppData\Local\{5AF70A0A-C65F-4A87-84EB-DA7773519004}
O43 - CFD: 2012/04/23 08:59:02 - [0] D -- C:\Users\ROY\AppData\Local\{5AF937C4-598A-488F-8973-EE7146741793}
O43 - CFD: 2012/04/23 16:36:22 - [0] D -- C:\Users\ROY\AppData\Local\{5B9666FD-E928-43F5-B245-802B63744A2C}
O43 - CFD: 2012/06/13 10:16:01 - [0] D -- C:\Users\ROY\AppData\Local\{5BCA59DB-1DAD-4D60-9A17-9883B682E1DE}
O43 - CFD: 2013/06/12 14:00:18 - [0] D -- C:\Users\ROY\AppData\Local\{5D6A37B1-3322-4392-AA3C-87171FBAF839}
O43 - CFD: 2013/05/23 09:07:47 - [0] D -- C:\Users\ROY\AppData\Local\{5DD89614-E719-44A7-A8FB-015000295A71}
O43 - CFD: 2012/05/25 14:56:18 - [0] D -- C:\Users\ROY\AppData\Local\{5DFB7012-34C5-4046-AD55-397446DDD074}
O43 - CFD: 2012/08/17 10:33:42 - [0] D -- C:\Users\ROY\AppData\Local\{5E1012BA-E294-4F62-9E40-A3B32EE48A81}
O43 - CFD: 2012/06/09 09:56:05 - [0] D -- C:\Users\ROY\AppData\Local\{5E2406AF-76CC-492E-9B1A-530327667D79}
O43 - CFD: 2012/02/23 10:13:48 - [0] D -- C:\Users\ROY\AppData\Local\{5ECBED3F-EE21-4228-B140-3B5BF6336608}
O43 - CFD: 2012/04/23 09:34:28 - [0] D -- C:\Users\ROY\AppData\Local\{5EF2F8E3-A382-42EE-BE14-3214C3D4400A}
O43 - CFD: 2013/03/30 13:10:27 - [0] D -- C:\Users\ROY\AppData\Local\{5F9CED2B-4090-467D-BF8E-67264A47B7D2}
O43 - CFD: 2013/01/16 13:40:12 - [0] D -- C:\Users\ROY\AppData\Local\{5FE66049-87D6-40C1-9EF5-C511CF55CE1C}
O43 - CFD: 2012/05/19 13:44:09 - [0] D -- C:\Users\ROY\AppData\Local\{6018EFC6-91B5-47F8-848A-21844EE1141B}
O43 - CFD: 2012/04/28 16:21:16 - [0] D -- C:\Users\ROY\AppData\Local\{60D021A9-0D0E-4C16-B5C7-A3709644CC42}
O43 - CFD: 2012/01/15 16:46:25 - [0] D -- C:\Users\ROY\AppData\Local\{6117E21D-6034-4002-8A12-BEDE646772AD}
O43 - CFD: 2012/05/26 12:00:51 - [0] D -- C:\Users\ROY\AppData\Local\{61C2F5E1-432E-4D05-8641-5E0F4B7E6A52}
O43 - CFD: 2012/11/29 11:17:00 - [0] D -- C:\Users\ROY\AppData\Local\{6201CC2E-D6E5-4F92-94A0-0B6BB4C57E0E}
O43 - CFD: 2011/12/28 19:23:04 - [0] D -- C:\Users\ROY\AppData\Local\{6235AB31-721F-44C0-BB93-FD487745CE83}
O43 - CFD: 2013/01/03 10:15:07 - [0] D -- C:\Users\ROY\AppData\Local\{625CFB10-530D-4BF5-802E-836793B0B2CC}
O43 - CFD: 2012/11/20 11:36:29 - [0] D -- C:\Users\ROY\AppData\Local\{62E4014B-BEC3-423D-9E8F-643A59F186A3}
O43 - CFD: 2012/05/23 18:27:24 - [0] D -- C:\Users\ROY\AppData\Local\{632E1289-8722-4DB3-A69A-7614F66B1B40}
O43 - CFD: 2012/06/12 09:38:14 - [0] D -- C:\Users\ROY\AppData\Local\{6372946C-1135-4EC1-8078-247721CC01BB}
O43 - CFD: 2013/02/14 09:59:40 - [0] D -- C:\Users\ROY\AppData\Local\{639EE590-8CF3-40FE-BC3E-7E4C09901CEA}
O43 - CFD: 2012/05/03 13:30:42 - [0] D -- C:\Users\ROY\AppData\Local\{64062DBB-6349-42A6-8422-33DAE973D5CE}
O43 - CFD: 2012/03/14 10:39:53 - [0] D -- C:\Users\ROY\AppData\Local\{65126FDB-D989-4D1F-872C-90560AAC03A3}
O43 - CFD: 2013/05/14 09:44:49 - [0] D -- C:\Users\ROY\AppData\Local\{653F8F5F-E11D-459C-86FE-6DE967E70693}
O43 - CFD: 2012/04/02 09:06:09 - [0] D -- C:\Users\ROY\AppData\Local\{658997D7-7EE3-463D-BA0B-531C6BBD397B}
O43 - CFD: 2012/06/12 09:38:03 - [0] D -- C:\Users\ROY\AppData\Local\{659D3387-B504-4836-8DE2-F7F370F491BC}
O43 - CFD: 2013/02/19 10:57:29 - [0] D -- C:\Users\ROY\AppData\Local\{660D6A29-3F0B-40ED-874A-6C01782A5941}
O43 - CFD: 2013/08/10 14:59:00 - [0] D -- C:\Users\ROY\AppData\Local\{66A9032D-7CDC-44BC-B6F7-78468A80A675}
O43 - CFD: 2012/06/08 17:00:19 - [0] D -- C:\Users\ROY\AppData\Local\{66C9AD8B-0638-4A80-9429-25515CF5D829}
O43 - CFD: 2012/08/02 11:37:30 - [0] D -- C:\Users\ROY\AppData\Local\{66DE7A88-797A-4DDE-BD43-F6C55A97103D}
O43 - CFD: 2012/02/19 13:21:34 - [0] D -- C:\Users\ROY\AppData\Local\{66E18E61-58AF-4621-A202-46B37CB38E04}
O43 - CFD: 2013/01/22 11:12:42 - [0] D -- C:\Users\ROY\AppData\Local\{66EFF8A2-8A4A-4189-BB44-4E4C7DF28919}
O43 - CFD: 2013/04/17 11:01:17 - [0] D -- C:\Users\ROY\AppData\Local\{67893A95-E2D1-4C46-A65D-2D8716C88C11}
O43 - CFD: 2012/05/03 11:29:27 - [0] D -- C:\Users\ROY\AppData\Local\{68412B8A-BFD9-44EF-8A4B-383E0D85F66D}
O43 - CFD: 2012/01/28 19:42:33 - [0] D -- C:\Users\ROY\AppData\Local\{68B650A9-DB58-443E-9652-6E34B9CE3A07}
O43 - CFD: 2012/01/09 19:06:41 - [0] D -- C:\Users\ROY\AppData\Local\{68E20F35-8DD4-415C-ABEB-B882C30D074A}
O43 - CFD: 2012/02/29 15:31:18 - [0] D -- C:\Users\ROY\AppData\Local\{69529B2F-0F5D-4E4F-A501-780C9B2C2D0E}
O43 - CFD: 2013/08/31 10:08:53 - [0] D -- C:\Users\ROY\AppData\Local\{69954D72-2912-4E07-A3AE-F9C75D8CE2F5}
O43 - CFD: 2012/12/02 18:20:55 - [0] D -- C:\Users\ROY\AppData\Local\{6A2302C4-21BA-46F1-A92C-6024CDCFE97C}
O43 - CFD: 2012/01/02 21:36:52 - [0] D -- C:\Users\ROY\AppData\Local\{6A67D231-4C0F-4370-B137-02587FFA8E95}
O43 - CFD: 2013/08/19 09:51:40 - [0] D -- C:\Users\ROY\AppData\Local\{6A88C05F-8F29-47F0-A5E7-80DC4C70642A}
O43 - CFD: 2013/02/24 12:05:48 - [0] D -- C:\Users\ROY\AppData\Local\{6A8DACCB-6C8A-4537-868E-7B8CC260FCE5}
O43 - CFD: 2012/11/14 11:16:01 - [0] D -- C:\Users\ROY\AppData\Local\{6B26A55A-7C4B-4504-AAA5-6B191C6F35D3}
O43 - CFD: 2012/03/28 09:49:36 - [0] D -- C:\Users\ROY\AppData\Local\{6B37E8F4-7371-4DCE-B6E7-A819F11E4439}
O43 - CFD: 2012/04/27 11:05:02 - [0] D -- C:\Users\ROY\AppData\Local\{6BA73628-B47B-4C3A-A0D0-BD4A1D491535}
O43 - CFD: 2012/12/23 12:49:20 - [0] D -- C:\Users\ROY\AppData\Local\{6BCE0FD6-C193-4EC7-BDD4-0C69B56CB326}
O43 - CFD: 2012/08/10 10:12:19 - [0] D -- C:\Users\ROY\AppData\Local\{6C5B689C-44B4-402C-94E8-9410A1F45B8B}
O43 - CFD: 2012/04/28 14:16:57 - [0] D -- C:\Users\ROY\AppData\Local\{6C613C3C-6F3A-43C4-BD96-90EF57B3D554}
O43 - CFD: 2013/08/23 10:28:19 - [0] D -- C:\Users\ROY\AppData\Local\{6C801AA1-A8C2-4F35-BE1A-56DF83298C73}
O43 - CFD: 2012/04/27 13:59:16 - [0] D -- C:\Users\ROY\AppData\Local\{6C85D5D8-092B-48B0-BF6C-8C2E50090F5F}
O43 - CFD: 2012/06/07 11:20:19 - [0] D -- C:\Users\ROY\AppData\Local\{6CAA2FD7-22E4-4515-9709-FD978607DACE}
O43 - CFD: 2012/06/06 14:48:53 - [0] D -- C:\Users\ROY\AppData\Local\{6CACA116-A1F1-4D7D-BEB3-201678B9598B}
O43 - CFD: 2012/08/03 09:36:32 - [0] D -- C:\Users\ROY\AppData\Local\{6CF15650-9015-426D-80CC-6BBF5C2882C0}
O43 - CFD: 2013/05/01 15:22:20 - [0] D -- C:\Users\ROY\AppData\Local\{6CF4064E-DE7A-429B-83C0-03D6F2CAF1A0}
O43 - CFD: 2012/03/29 10:37:32 - [0] D -- C:\Users\ROY\AppData\Local\{6D3B9711-223E-4809-B270-3BC2204FB7B2}
O43 - CFD: 2013/08/13 09:20:39 - [0] D -- C:\Users\ROY\AppData\Local\{6D3E88D8-442B-4106-B6BB-F3E0F870041F}
O43 - CFD: 2012/09/24 11:53:13 - [0] D -- C:\Users\ROY\AppData\Local\{6DAA67F9-7866-48AC-ABA0-1BB72A3FF7E4}
O43 - CFD: 2012/11/25 19:45:11 - [0] D -- C:\Users\ROY\AppData\Local\{6ED51D45-E1E3-435F-AC20-8CE8ADA71764}
O43 - CFD: 2012/03/16 11:29:29 - [0] D -- C:\Users\ROY\AppData\Local\{6F2720EB-5941-47AE-9F34-F3598FAAEE30}
O43 - CFD: 2012/06/08 16:55:43 - [0] D -- C:\Users\ROY\AppData\Local\{6F291121-0C3B-4555-8FFD-238A1E48C737}
O43 - CFD: 2012/09/09 20:38:22 - [0] D -- C:\Users\ROY\AppData\Local\{70D3BAA9-4698-4CF9-8ACC-58A3DF689908}
O43 - CFD: 2013/04/30 11:53:22 - [0] D -- C:\Users\ROY\AppData\Local\{70FD8599-FAE5-437B-A8F1-5BC5EA7345BD}
O43 - CFD: 2012/05/05 15:56:43 - [0] D -- C:\Users\ROY\AppData\Local\{71EF8C30-D370-4663-97A0-C96B907E5454}
O43 - CFD: 2012/08/28 09:39:55 - [0] D -- C:\Users\ROY\AppData\Local\{72519DFD-64FB-4EDF-833A-DD76E12E4C91}
O43 - CFD: 2012/04/17 16:18:25 - [0] D -- C:\Users\ROY\AppData\Local\{728F4FE0-C03A-47A3-8D82-0D8867E8A861}
O43 - CFD: 2012/04/27 11:01:14 - [0] D -- C:\Users\ROY\AppData\Local\{742433C1-1024-400D-8CD6-9C775526E9E8}
O43 - CFD: 2012/06/05 15:55:44 - [0] D -- C:\Users\ROY\AppData\Local\{751D3350-6F7D-4B0C-B6DC-EA12BDFA2C34}
O43 - CFD: 2012/01/13 18:55:42 - [0] D -- C:\Users\ROY\AppData\Local\{75786CC2-CE13-4C1B-96C6-89A329907038}
O43 - CFD: 2012/04/20 09:40:25 - [0] D -- C:\Users\ROY\AppData\Local\{76478918-1A4A-4766-A180-25874D028086}
O43 - CFD: 2012/01/02 20:08:26 - [0] D -- C:\Users\ROY\AppData\Local\{76CD7749-1DA1-40E0-A30F-1BA59450AC7D}
O43 - CFD: 2012/03/25 10:59:54 - [0] D -- C:\Users\ROY\AppData\Local\{77CF3144-053D-4371-97D6-9DBD0AD326F6}
O43 - CFD: 2012/03/13 10:13:58 - [0] D -- C:\Users\ROY\AppData\Local\{77DAAB04-2B8E-4D21-A1F5-B5BDE8709D8A}
O43 - CFD: 2013/02/16 17:50:58 - [0] D -- C:\Users\ROY\AppData\Local\{7800D70A-48A7-4BD8-99D3-0F0E8A58AE18}
O43 - CFD: 2012/09/17 12:05:36 - [0] D -- C:\Users\ROY\AppData\Local\{7879E5FB-DE1D-471C-95D5-93FEC07A32C5}
O43 - CFD: 2012/02/16 10:45:24 - [0] D -- C:\Users\ROY\AppData\Local\{78860C91-3BCB-4376-AD0C-BA76AE7436C2}
O43 - CFD: 2012/09/16 17:35:40 - [0] D -- C:\Users\ROY\AppData\Local\{788F627A-985B-41F8-B827-497F4D9211D1}
O43 - CFD: 2012/04/20 09:40:12 - [0] D -- C:\Users\ROY\AppData\Local\{79409B7A-FB1B-4E9F-B664-9C6A5C96069E}
O43 - CFD: 2012/04/24 14:37:58 - [0] D -- C:\Users\ROY\AppData\Local\{7968B363-EA13-4AC9-9676-F9F8FE37236B}
O43 - CFD: 2012/03/06 11:21:06 - [0] D -- C:\Users\ROY\AppData\Local\{7A2C611E-4D1F-435B-82E4-99BE309A83E0}
O43 - CFD: 2012/01/09 19:07:00 - [0] D -- C:\Users\ROY\AppData\Local\{7A2D35DC-9415-4F38-9D29-6B3F449BCCA9}
O43 - CFD: 2012/06/20 14:59:48 - [0] D -- C:\Users\ROY\AppData\Local\{7AE0B97E-DC1E-4F63-A7BE-F9C1907F9F30}
O43 - CFD: 2013/08/11 21:47:47 - [0] D -- C:\Users\ROY\AppData\Local\{7AF3A801-E716-41A5-BED6-1FDC1C3D2B8F}
O43 - CFD: 2012/04/18 11:17:19 - [0] D -- C:\Users\ROY\AppData\Local\{7B8F8F25-F1BA-4248-BB7D-3DB1AC2EC289}
O43 - CFD: 2012/04/26 10:19:27 - [0] D -- C:\Users\ROY\AppData\Local\{7B97E0BC-A220-4C79-BACC-2A39BFDBE2DD}
O43 - CFD: 2012/04/23 08:58:51 - [0] D -- C:\Users\ROY\AppData\Local\{7C201BE0-B971-4B41-AEA8-1F2F6913A5C0}
O43 - CFD: 2012/03/07 10:46:59 - [0] D -- C:\Users\ROY\AppData\Local\{7C271BFD-9E5E-41B4-9ED6-CF75F1D3EA94}
O43 - CFD: 2013/05/12 12:12:07 - [0] D -- C:\Users\ROY\AppData\Local\{7C29B0AE-A93F-4BB5-91C6-82449A1550BB}
O43 - CFD: 2012/08/01 10:01:22 - [0] D -- C:\Users\ROY\AppData\Local\{7C7F8ADE-95F3-4689-9B50-293B3F621F85}
O43 - CFD: 2013/05/28 10:53:04 - [0] D -- C:\Users\ROY\AppData\Local\{7CA36DD4-C657-4A3C-ABA3-5EDA9609AAC0}
O43 - CFD: 2012/06/17 17:29:46 - [0] D -- C:\Users\ROY\AppData\Local\{7CAECED4-7E2F-4185-B1F3-F7B2AE6A7EE1}
O43 - CFD: 2012/08/27 13:55:52 - [0] D -- C:\Users\ROY\AppData\Local\{7DD0E09B-B86C-4261-B442-172AEE07AE9B}
O43 - CFD: 2012/06/19 15:20:02 - [0] D -- C:\Users\ROY\AppData\Local\{7E61FD8A-07A4-4905-A725-7046789B7A3B}
O43 - CFD: 2012/04/26 20:28:05 - [0] D -- C:\Users\ROY\AppData\Local\{7EB7D101-16A8-4A92-8183-2FB0680CEA9E}
O43 - CFD: 2012/05/08 14:04:37 - [0] D -- C:\Users\ROY\AppData\Local\{7EC54A9B-58A6-44C9-B5BD-631B3A8CE5F3}
O43 - CFD: 2012/09/23 14:56:09 - [0] D -- C:\Users\ROY\AppData\Local\{7FCA6731-536E-442B-BD50-3072CC66568E}
O43 - CFD: 2012/03/16 18:18:18 - [0] D -- C:\Users\ROY\AppData\Local\{7FCE1B80-32C0-46C6-AC49-924EFEBD1F6E}
O43 - CFD: 2012/05/25 10:13:14 - [0] D -- C:\Users\ROY\AppData\Local\{801626E5-A564-4279-BE7F-61E705862590}
O43 - CFD: 2012/06/14 11:11:09 - [0] D -- C:\Users\ROY\AppData\Local\{80C9CFB9-F9D4-4768-B29C-C31327B39339}
O43 - CFD: 2012/04/20 12:08:38 - [0] D -- C:\Users\ROY\AppData\Local\{81AE0A13-15DF-4738-ACCF-A57A893962EF}
O43 - CFD: 2012/08/04 09:16:09 - [0] D -- C:\Users\ROY\AppData\Local\{821BFE2A-A41C-4CD5-B193-3F56DD38710E}
O43 - CFD: 2012/05/03 11:43:13 - [0] D -- C:\Users\ROY\AppData\Local\{83146C72-62C0-487F-B475-551DFE3FDDC1}
O43 - CFD: 2012/01/02 21:20:27 - [0] D -- C:\Users\ROY\AppData\Local\{83A2B000-45FD-43EA-A4D9-FC00295026DC}
O43 - CFD: 2012/02/21 10:31:21 - [0] D -- C:\Users\ROY\AppData\Local\{83B6BFF5-A494-438B-9007-E5659E697660}
O43 - CFD: 2012/10/28 19:28:57 - [0] D -- C:\Users\ROY\AppData\Local\{83CCC34E-3CF0-46A5-A402-140D53CCDF0A}
O43 - CFD: 2012/10/01 15:07:35 - [0] D -- C:\Users\ROY\AppData\Local\{83EF0BF6-A69F-4260-941E-3B87371CED10}
O43 - CFD: 2012/10/20 12:26:39 - [0] D -- C:\Users\ROY\AppData\Local\{8404BF01-6C50-42B7-8192-D8156D45ECDD}
O43 - CFD: 2013/09/06 09:05:20 - [0] D -- C:\Users\ROY\AppData\Local\{843DFF40-E7B0-4777-A0FC-F2179AD989D1}
O43 - CFD: 2013/04/08 09:39:44 - [0] D -- C:\Users\ROY\AppData\Local\{846AC4C2-5733-4C17-AA40-C0D222FEFA26}
O43 - CFD: 2012/12/27 10:58:52 - [0] D -- C:\Users\ROY\AppData\Local\{84EA024D-30C3-41BC-AA4F-8ECA84BCFB1F}
O43 - CFD: 2013/03/08 13:26:32 - [0] D -- C:\Users\ROY\AppData\Local\{859D8F62-7F31-45B4-B19F-BAB05DCE4EE0}
O43 - CFD: 2013/05/15 12:19:04 - [0] D -- C:\Users\ROY\AppData\Local\{85F5F752-DBC8-417B-B24D-8C1EFD4B33EE}
O43 - CFD: 2011/12/30 17:39:04 - [0] D -- C:\Users\ROY\AppData\Local\{8611583B-9452-48D2-8653-74031BDB722C}
O43 - CFD: 2013/08/12 09:48:11 - [0] D -- C:\Users\ROY\AppData\Local\{861ABD80-310B-4C20-A909-3D2DD7A9FE92}
O43 - CFD: 2013/04/05 09:39:04 - [0] D -- C:\Users\ROY\AppData\Local\{8769702A-FF2A-4A8A-ACC5-0DEC501EE6FD}
O43 - CFD: 2013/01/05 10:24:31 - [0] D -- C:\Users\ROY\AppData\Local\{87D5F4D0-A949-4FB2-9847-B8B7B9CDA350}
O43 - CFD: 2012/11/22 13:04:29 - [0] D -- C:\Users\ROY\AppData\Local\{884A5583-48DE-42BB-88E1-3695575DD585}
O43 - CFD: 2012/03/28 09:49:24 - [0] D -- C:\Users\ROY\AppData\Local\{88D7BDB4-1D32-47AB-9783-C1C6776269C9}
O43 - CFD: 2013/03/11 09:36:28 - [0] D -- C:\Users\ROY\AppData\Local\{89EBA233-E29B-47AA-AF87-9B8D27576FD6}
O43 - CFD: 2012/05/10 09:06:52 - [0] D -- C:\Users\ROY\AppData\Local\{8A1B2E02-750F-4064-B418-458A38DAEC74}
O43 - CFD: 2012/04/25 21:33:19 - [0] D -- C:\Users\ROY\AppData\Local\{8AD58FC9-B8C9-43E5-8EAB-F7B46B80C94A}
O43 - CFD: 2012/05/01 10:10:17 - [0] D -- C:\Users\ROY\AppData\Local\{8B32D106-E893-42FC-822D-F81E4B903F09}
O43 - CFD: 2012/02/25 16:30:44 - [0] D -- C:\Users\ROY\AppData\Local\{8B54522D-F218-456A-BE61-18BE6C6FDE9B}
O43 - CFD: 2012/02/23 10:13:35 - [0] D -- C:\Users\ROY\AppData\Local\{8C463A24-B563-48BD-8CFA-28701E4885D4}
O43 - CFD: 2012/04/27 11:06:43 - [0] D -- C:\Users\ROY\AppData\Local\{8C8BACFD-CBB3-45DE-B7F0-6C243858BCD8}
O43 - CFD: 2012/01/02 20:08:37 - [0] D -- C:\Users\ROY\AppData\Local\{8CC3D449-B25C-4526-8AB8-09043806989C}
O43 - CFD: 2012/08/31 12:44:56 - [0] D -- C:\Users\ROY\AppData\Local\{8D40F51D-8873-4E1E-A73D-49B6E212737D}
O43 - CFD: 2013/06/10 09:02:02 - [0] D -- C:\Users\ROY\AppData\Local\{8DABBB04-1C9E-4443-A8C9-0EFDEAA1B2C9}
O43 - CFD: 2012/05/03 13:30:52 - [0] D -- C:\Users\ROY\AppData\Local\{8DD543A4-87D2-4F0D-8474-E947305D1E83}
O43 - CFD: 2013/03/27 15:13:03 - [0] D -- C:\Users\ROY\AppData\Local\{8E3F0931-846C-4E82-B22D-240EE9ED8076}
O43 - CFD: 2012/04/16 19:46:57 - [0] D -- C:\Users\ROY\AppData\Local\{90A55772-9A0F-400C-A3E4-1BF3BB66E05A}
O43 - CFD: 2012/06/07 19:12:44 - [0] D -- C:\Users\ROY\AppData\Local\{90C419AA-91F2-417C-A258-C35EAF07150A}
O43 - CFD: 2012/06/22 15:04:27 - [0] D -- C:\Users\ROY\AppData\Local\{90E5B521-A327-47AC-B612-CEF8D0A42C88}
O43 - CFD: 2012/06/19 09:30:47 - [0] D -- C:\Users\ROY\AppData\Local\{910591B7-BEA6-4F9F-BFBE-EB3AA03722BB}
O43 - CFD: 2012/08/10 10:12:31 - [0] D -- C:\Users\ROY\AppData\Local\{9163D92A-5510-4CBA-9873-4F1D6BEA3708}
O43 - CFD: 2013/05/13 10:49:50 - [0] D -- C:\Users\ROY\AppData\Local\{916B5238-A2E6-43C3-8CFE-22783A535B18}
O43 - CFD: 2012/07/31 09:25:59 - [0] D -- C:\Users\ROY\AppData\Local\{918A3DE3-257E-42D3-A62B-A35923269A3F}
O43 - CFD: 2012/05/15 11:57:58 - [0] D -- C:\Users\ROY\AppData\Local\{92059350-67DA-4BFB-9BCF-D197C5D377AB}
O43 - CFD: 2012/05/10 09:37:52 - [0] D -- C:\Users\ROY\AppData\Local\{92590280-AFDC-491C-AC19-59C91377513A}
O43 - CFD: 2013/08/01 10:04:54 - [0] D -- C:\Users\ROY\AppData\Local\{9296A9B2-A160-46AA-9B30-35ED7E89EFAE}
O43 - CFD: 2013/08/27 10:40:52 - [0] D -- C:\Users\ROY\AppData\Local\{92DCB201-D45B-4E70-AC8C-1E020F610DBB}
O43 - CFD: 2012/06/10 22:16:14 - [0] D -- C:\Users\ROY\AppData\Local\{92EDC720-9C54-45F8-9D04-2410B20DC5C0}
O43 - CFD: 2012/05/25 10:13:02 - [0] D -- C:\Users\ROY\AppData\Local\{93105343-2297-4B23-AB71-284632886E92}
O43 - CFD: 2012/05/05 13:21:24 - [0] D -- C:\Users\ROY\AppData\Local\{9316E040-53DE-4924-A053-4ED1324B90A1}
O43 - CFD: 2013/04/07 17:54:48 - [0] D -- C:\Users\ROY\AppData\Local\{9321DDE1-819D-4830-8284-EC9A2561B6A8}
O43 - CFD: 2012/10/10 09:57:08 - [0] D -- C:\Users\ROY\AppData\Local\{937980C6-9FAA-4994-8C61-3801A2161570}
O43 - CFD: 2012/02/02 16:31:20 - [0] D -- C:\Users\ROY\AppData\Local\{93F076A0-C036-46F4-8520-A719AB6516DE}
O43 - CFD: 2012/04/27 11:54:48 - [0] D -- C:\Users\ROY\AppData\Local\{9402DAE1-D865-4692-A691-CB097BFD54F0}
O43 - CFD: 2012/04/29 12:36:45 - [0] D -- C:\Users\ROY\AppData\Local\{9431638D-73A6-4FF9-B3C9-54AF79FC9CFE}
O43 - CFD: 2012/03/15 16:33:43 - [0] D -- C:\Users\ROY\AppData\Local\{944C66D0-6936-468B-930A-45EA20C93D6F}
O43 - CFD: 2013/08/14 11:12:24 - [0] D -- C:\Users\ROY\AppData\Local\{94E77AA3-A16C-408A-8DFA-F9E969732E79}
O43 - CFD: 2013/05/18 08:57:25 - [0] D -- C:\Users\ROY\AppData\Local\{956EA6D5-531C-4200-895F-9089D627040A}
O43 - CFD: 2012/05/08 10:49:07 - [0] D -- C:\Users\ROY\AppData\Local\{95B827DB-29E9-461A-B82F-30A4B4DE9A11}
O43 - CFD: 2012/04/24 10:00:49 - [0] D -- C:\Users\ROY\AppData\Local\{95FF7DDC-E550-47A1-84EC-730F6CF614DA}
O43 - CFD: 2012/10/07 18:48:25 - [0] D -- C:\Users\ROY\AppData\Local\{968110A0-E7E0-44E2-8822-170449D5894E}
O43 - CFD: 2012/09/13 09:04:27 - [0] D -- C:\Users\ROY\AppData\Local\{97DDD4BC-FC35-46C6-9AE9-9AFCEA66EBD3}
O43 - CFD: 2013/01/29 12:55:29 - [0] D -- C:\Users\ROY\AppData\Local\{9814A994-A4FF-4B9D-BA8F-68F5E9254E78}
O43 - CFD: 2012/12/06 10:09:49 - [0] D -- C:\Users\ROY\AppData\Local\{98294909-9183-4CDC-89B8-D524143721B3}
O43 - CFD: 2012/11/22 10:11:18 - [0] D -- C:\Users\ROY\AppData\Local\{982E3EFB-639F-42A9-8BED-8BCC6DC39236}
O43 - CFD: 2013/03/01 10:37:01 - [0] D -- C:\Users\ROY\AppData\Local\{987E4BF3-74B0-4854-B691-AFDD5790F9F1}
O43 - CFD: 2012/06/06 19:01:18 - [0] D -- C:\Users\ROY\AppData\Local\{98D3A3DD-26E9-4AB1-83DC-E580ACAF6B7C}
O43 - CFD: 2013/03/10 11:34:36 - [0] D -- C:\Users\ROY\AppData\Local\{98FEF89A-0E43-41A7-9B3D-6D986CC7FF00}
O43 - CFD: 2012/12/24 10:44:46 - [0] D -- C:\Users\ROY\AppData\Local\{9912E93F-0C8D-40BB-B86C-D8C75704CC69}
O43 - CFD: 2012/04/27 09:38:49 - [0] D -- C:\Users\ROY\AppData\Local\{99330E67-62E6-4669-9B7D-3155EEC0D86C}
O43 - CFD: 2012/03/05 12:20:35 - [0] D -- C:\Users\ROY\AppData\Local\{9987E77B-9F09-4E17-8457-258B2DFDE0C6}
O43 - CFD: 2011/12/30 17:40:10 - [0] D -- C:\Users\ROY\AppData\Local\{99EB8587-DBE7-4304-BF5C-4E41790756EB}
O43 - CFD: 2013/01/09 10:59:19 - [0] D -- C:\Users\ROY\AppData\Local\{9ACE10F5-E419-4D25-B250-03EB0D99FD34}
O43 - CFD: 2012/05/11 16:03:31 - [0] D -- C:\Users\ROY\AppData\Local\{9B06B0C0-7033-4CD2-ABFE-358B77713D7D}
O43 - CFD: 2012/06/07 16:32:22 - [0] D -- C:\Users\ROY\AppData\Local\{9B3D2E71-B2F2-42BC-96C4-B79F86DACB36}
O43 - CFD: 2012/05/25 14:56:07 - [0] D -- C:\Users\ROY\AppData\Local\{9B67BC3A-325B-4E9F-8A31-29D6383AC0BA}
O43 - CFD: 2012/01/29 10:59:09 - [0] D -- C:\Users\ROY\AppData\Local\{9B76D2A4-E49A-4AEF-951E-A290B3481CA3}
O43 - CFD: 2012/05/22 11:07:21 - [0] D -- C:\Users\ROY\AppData\Local\{9B8F8896-8D26-436B-89F2-30FB369D29EC}
O43 - CFD: 2013/09/06 14:12:47 - [0] D -- C:\Users\ROY\AppData\Local\{9C2BB953-03EC-41DE-884C-A79532419A20}
O43 - CFD: 2013/08/29 12:50:11 - [0] D -- C:\Users\ROY\AppData\Local\{9C6A8B44-30C7-44D5-9554-4EB1A7D27BB4}
O43 - CFD: 2012/06/08 09:50:20 - [0] D -- C:\Users\ROY\AppData\Local\{9C964395-53F8-42EF-ADC8-28F9AE9AEF08}
O43 - CFD: 2013/02/25 10:54:51 - [0] D -- C:\Users\ROY\AppData\Local\{9D0D1288-8465-4937-9442-B023578D18D1}
O43 - CFD: 2012/10/19 20:42:16 - [0] D -- C:\Users\ROY\AppData\Local\{9D296977-B60F-4A72-B9ED-BE6EB65BAA8C}
O43 - CFD: 2012/06/08 09:50:31 - [0] D -- C:\Users\ROY\AppData\Local\{9D4449B3-CD78-4D69-8327-FDE3D4E3F3A6}
O43 - CFD: 2012/09/19 09:10:24 - [0] D -- C:\Users\ROY\AppData\Local\{9DBD11D4-2AF6-41A8-A284-8AADD592FA53}
O43 - CFD: 2012/11/28 10:34:06 - [0] D -- C:\Users\ROY\AppData\Local\{9E589FE6-7CD5-41D5-97D6-B85243258BDC}
O43 - CFD: 2012/05/08 10:48:57 - [0] D -- C:\Users\ROY\AppData\Local\{9EB2C179-C498-4778-B695-0C035A1FBB6C}
O43 - CFD: 2012/04/22 09:41:55 - [0] D -- C:\Users\ROY\AppData\Local\{9F71A778-E6F7-4AE8-B77C-FE35E42F503B}
O43 - CFD: 2012/01/16 18:23:48 - [0] D -- C:\Users\ROY\AppData\Local\{A00A7A91-EB21-417B-A177-DC95F9126F45}
O43 - CFD: 2013/05/10 09:32:20 - [0] D -- C:\Users\ROY\AppData\Local\{A07661E4-57E5-406B-BE6E-EA6EED17871E}
O43 - CFD: 2012/06/12 14:09:59 - [0] D -- C:\Users\ROY\AppData\Local\{A0801205-A1D9-4853-A143-B3022543B18A}
O43 - CFD: 2012/05/04 17:15:53 - [0] D -- C:\Users\ROY\AppData\Local\{A09B0153-15F4-4F02-B28C-3535C51A2E97}
O43 - CFD: 2013/08/26 11:25:19 - [0] D -- C:\Users\ROY\AppData\Local\{A0B052A0-C94E-45FD-A2E8-B9573E2D1E91}
O43 - CFD: 2013/04/20 09:24:20 - [0] D -- C:\Users\ROY\AppData\Local\{A0EEC86E-1727-4054-9129-57FA46DBFB44}
O43 - CFD: 2012/05/21 14:20:41 - [0] D -- C:\Users\ROY\AppData\Local\{A1463F94-524A-45BB-A669-94BAE6980AFE}
O43 - CFD: 2012/03/01 10:04:49 - [0] D -- C:\Users\ROY\AppData\Local\{A1938A19-88DD-487D-9BA8-3B917A58E6CD}
O43 - CFD: 2012/05/23 17:50:02 - [0] D -- C:\Users\ROY\AppData\Local\{A1DA2D34-B9BC-44C9-A863-E3E2D078C64E}
O43 - CFD: 2012/03/27 13:20:24 - [0] D -- C:\Users\ROY\AppData\Local\{A1F48D6D-3265-4182-92EA-C9609D9DDD76}
O43 - CFD: 2011/12/27 12:52:42 - [0] D -- C:\Users\ROY\AppData\Local\{A200AB8C-2268-4E14-B23D-29C57A6B6C2A}
O43 - CFD: 2012/03/16 18:18:35 - [0] D -- C:\Users\ROY\AppData\Local\{A23CF609-F40E-4E10-B84E-B4D46F2D2A36}
O43 - CFD: 2013/06/21 15:15:16 - [0] D -- C:\Users\ROY\AppData\Local\{A2AA77EA-40EA-4BC7-9C48-3FA5B2DAFC17}
O43 - CFD: 2013/04/15 09:57:07 - [0] D -- C:\Users\ROY\AppData\Local\{A2AF3C3A-E174-4DB2-97E8-C1E9C76F5F2D}
O43 - CFD: 2012/03/04 19:55:33 - [0] D -- C:\Users\ROY\AppData\Local\{A2C857D8-078D-4BCF-A55E-16FA5DB0829E}
O43 - CFD: 2012/06/08 11:52:32 - [0] D -- C:\Users\ROY\AppData\Local\{A360753B-A7A6-4179-9095-980F84D66AF7}
O43 - CFD: 2012/01/30 20:44:22 - [0] D -- C:\Users\ROY\AppData\Local\{A37565E9-43B2-4243-B697-6167206B5417}
O43 - CFD: 2012/12/03 10:01:22 - [0] D -- C:\Users\ROY\AppData\Local\{A3DC47AE-3F62-4E21-9BE0-AEAACFF90585}
O43 - CFD: 2012/04/09 12:56:40 - [0] D -- C:\Users\ROY\AppData\Local\{A3F33D6A-4371-4149-A6AC-075C9C626558}
O43 - CFD: 2012/09/18 12:13:50 - [0] D -- C:\Users\ROY\AppData\Local\{A46744FD-D36E-4F67-A0F7-97A1AEA739B9}
O43 - CFD: 2013/06/10 09:42:28 - [0] D -- C:\Users\ROY\AppData\Local\{A468D7CF-DA30-4A43-A69A-58886AA5A7DF}
O43 - CFD: 2013/06/04 12:32:03 - [0] D -- C:\Users\ROY\AppData\Local\{A483151D-FE8B-43CA-9003-75A9CA12EDC3}
O43 - CFD: 2013/05/21 09:36:53 - [0] D -- C:\Users\ROY\AppData\Local\{A5149B2D-D43E-472D-BB1F-C2EF9F1CFB2F}
O43 - CFD: 2012/11/24 10:12:09 - [0] D -- C:\Users\ROY\AppData\Local\{A5EEDADD-DC37-431F-A6A2-62CF1A358130}
O43 - CFD: 2012/02/13 10:32:20 - [0] D -- C:\Users\ROY\AppData\Local\{A645B536-D954-4385-98E9-1D21BF879645}
O43 - CFD: 2012/02/29 15:31:06 - [0] D -- C:\Users\ROY\AppData\Local\{A664980C-F41E-4E4B-9B69-15CBB385F8E2}
O43 - CFD: 2013/06/14 15:30:16 - [0] D -- C:\Users\ROY\AppData\Local\{A6686775-9B81-4980-8766-A8838C2158F8}
O43 - CFD: 2012/04/16 19:46:57 - [0] D -- C:\Users\ROY\AppData\Local\{A6D3349A-7BAA-4D63-A628-8AC1577685FC}
O43 - CFD: 2013/01/23 10:56:59 - [0] D -- C:\Users\ROY\AppData\Local\{A6F80470-A357-4F9D-A5D8-5FBF97AA51E5}
O43 - CFD: 2013/08/30 09:54:44 - [0] D -- C:\Users\ROY\AppData\Local\{A71CD6EC-32D0-4D3E-9629-8A6ED9CD4CA0}
O43 - CFD: 2012/01/11 22:33:12 - [0] D -- C:\Users\ROY\AppData\Local\{A7710B37-785F-4DB5-A49F-DDEB7AFC4A2E}
O43 - CFD: 2012/01/02 20:22:07 - [0] D -- C:\Users\ROY\AppData\Local\{A7B8CE47-D60A-4605-8614-B92269550F99}
O43 - CFD: 2012/02/14 13:35:38 - [0] D -- C:\Users\ROY\AppData\Local\{A8A5D2A3-0761-43B3-8CFB-85785E689848}
O43 - CFD: 2012/04/27 13:59:16 - [0] D -- C:\Users\ROY\AppData\Local\{A8D27EE5-A120-4FFD-B0F9-A98761F02B74}
O43 - CFD: 2012/03/30 09:14:41 - [0] D -- C:\Users\ROY\AppData\Local\{A931E77D-9E5A-496C-BC5D-BBF80988D265}
O43 - CFD: 2012/10/21 08:35:00 - [0] D -- C:\Users\ROY\AppData\Local\{AA04DABD-50F9-45CD-A580-A5F7DEC828C5}
O43 - CFD: 2012/12/06 10:36:08 - [0] D -- C:\Users\ROY\AppData\Local\{AAD4B82D-DD25-4E67-8C86-5B4DFB9BB3E7}
O43 - CFD: 2012/06/11 14:02:20 - [0] D -- C:\Users\ROY\AppData\Local\{AAD6412C-08F6-406B-81B9-A4FECB6BBCF2}
O43 - CFD: 2012/04/06 09:11:47 - [0] D -- C:\Users\ROY\AppData\Local\{AAEF3835-4892-41E3-B430-BAEEBA5AD4D4}
O43 - CFD: 2013/01/01 13:11:14 - [0] D -- C:\Users\ROY\AppData\Local\{ABA1E575-413D-4FA3-9D7B-29F5495AF440}
O43 - CFD: 2012/06/16 16:56:09 - [0] D -- C:\Users\ROY\AppData\Local\{ABA846BF-7B43-4806-A092-3B0ADEE28950}
O43 - CFD: 2012/08/11 16:34:30 - [0] D -- C:\Users\ROY\AppData\Local\{ABB11FE4-2F44-46BE-8F33-F2F01B820D56}
O43 - CFD: 2012/06/09 15:24:04 - [0] D -- C:\Users\ROY\AppData\Local\{AC5E1995-F6A4-46F5-8DA4-43EF71B354EE}
O43 - CFD: 2012/12/28 12:06:58 - [0] D -- C:\Users\ROY\AppData\Local\{AC93C33D-F7C4-46BB-9979-5C6B8AA69615}
O43 - CFD: 2013/03/29 11:14:37 - [0] D -- C:\Users\ROY\AppData\Local\{ACB9666D-B4B0-41BA-88E7-FB92C84806D4}
O43 - CFD: 2012/06/21 21:11:17 - [0] D -- C:\Users\ROY\AppData\Local\{ACF7A833-F61D-49B5-B58C-C1E8B34D6DB2}
O43 - CFD: 2013/05/22 09:45:29 - [0] D -- C:\Users\ROY\AppData\Local\{AD05C0DC-8C38-49BF-B5ED-97D4F2C64153}
O43 - CFD: 2012/09/03 09:50:38 - [0] D -- C:\Users\ROY\AppData\Local\{AD544980-2F8D-49DD-B129-0F103C5D27EC}
O43 - CFD: 2012/08/15 10:19:41 - [0] D -- C:\Users\ROY\AppData\Local\{AD5C7E23-3217-4830-B83E-6A08698DCCD6}
O43 - CFD: 2012/08/13 10:06:07 - [0] D -- C:\Users\ROY\AppData\Local\{ADFC2189-2DC2-43CF-A238-0579CCE6AB14}
O43 - CFD: 2012/06/19 15:20:13 - [0] D -- C:\Users\ROY\AppData\Local\{AEB7815D-0DD6-4610-9342-143C217F8861}
O43 - CFD: 2012/08/16 09:48:45 - [0] D -- C:\Users\ROY\AppData\Local\{AECB13F1-C060-40C7-8CAA-058EC1699942}
O43 - CFD: 2012/04/27 11:54:37 - [0] D -- C:\Users\ROY\AppData\Local\{AF4F5298-C777-4812-9A92-C5AC3BDE13BA}
O43 - CFD: 2012/05/04 17:16:05 - [0] D -- C:\Users\ROY\AppData\Local\{AF52BED5-F1D0-4D65-B2C9-F76676528B8A}
O43 - CFD: 2012/06/07 14:57:49 - [0] D -- C:\Users\ROY\AppData\Local\{B00FFA25-743F-4167-B3AC-450D3EA298A0}
O43 - CFD: 2012/11/13 17:41:41 - [0] D -- C:\Users\ROY\AppData\Local\{B065C922-E9A5-41A4-A8BF-FBE1A7841002}
O43 - CFD: 2012/04/24 14:38:09 - [0] D -- C:\Users\ROY\AppData\Local\{B08224D4-A748-4F0F-B5BB-EA1C1F545827}
O43 - CFD: 2012/04/23 09:34:17 - [0] D -- C:\Users\ROY\AppData\Local\{B119B09C-52E3-4CA8-AE78-A40054062B84}
O43 - CFD: 2013/02/10 11:42:21 - [0] D -- C:\Users\ROY\AppData\Local\{B1450706-E865-442E-A63C-E3F96AB9616F}
O43 - CFD: 2012/02/17 11:05:57 - [0] D -- C:\Users\ROY\AppData\Local\{B14AD5B6-E1C4-4078-9994-36FAC89E1552}
O43 - CFD: 2013/06/07 08:53:35 - [0] D -- C:\Users\ROY\AppData\Local\{B24A9BB5-4A7A-45A3-BE5F-293591510B77}
O43 - CFD: 2013/01/31 13:04:43 - [0] D -- C:\Users\ROY\AppData\Local\{B2ACFD62-2ED9-43B2-AD74-00FCCF94FD05}
O43 - CFD: 2011/12/30 17:39:59 - [0] D -- C:\Users\ROY\AppData\Local\{B2FCB248-DE3C-4D39-BD60-6CC087D323A8}
O43 - CFD: 2013/04/08 14:05:45 - [0] D -- C:\Users\ROY\AppData\Local\{B3481DAC-DE60-49AF-A9E8-7819F55FC4AE}
O43 - CFD: 2013/03/19 10:53:07 - [0] D -- C:\Users\ROY\AppData\Local\{B34CA94C-C9B5-48EC-81C6-9AE6D401D680}
O43 - CFD: 2012/12/07 10:51:28 - [0] D -- C:\Users\ROY\AppData\Local\{B3CCB2A5-0165-479D-A878-F58A1A09A986}
O43 - CFD: 2012/10/16 09:15:38 - [0] D -- C:\Users\ROY\AppData\Local\{B3D015B0-BEAB-4B26-9F27-93053500A803}
O43 - CFD: 2013/02/22 10:56:25 - [0] D -- C:\Users\ROY\AppData\Local\{B414E035-7FF1-4D70-8233-10AB920E8FEB}
O43 - CFD: 2012/04/22 10:05:54 - [0] D -- C:\Users\ROY\AppData\Local\{B4C097C2-F9D2-4957-B4B7-311B4A8252C6}
O43 - CFD: 2011/12/31 15:01:59 - [0] D -- C:\Users\ROY\AppData\Local\{B4D3583A-69D0-42DD-A7C4-0E7F0C17ED45}
O43 - CFD: 2013/09/05 09:20:42 - [0] D -- C:\Users\ROY\AppData\Local\{B504932F-DFBD-4752-AAD6-23F9E434083E}
O43 - CFD: 2012/04/28 17:02:57 - [0] D -- C:\Users\ROY\AppData\Local\{B65BE6D0-3104-4651-802A-B7039D40960A}
O43 - CFD: 2012/04/11 15:10:58 - [0] D -- C:\Users\ROY\AppData\Local\{B66AB212-EBB2-40E9-AB3C-C38309B3FB61}
O43 - CFD: 2013/01/21 20:46:32 - [0] D -- C:\Users\ROY\AppData\Local\{B6D2EBC1-BF7E-4D28-A593-1F11F20CB84F}
O43 - CFD: 2012/06/08 14:01:19 - [0] D -- C:\Users\ROY\AppData\Local\{B6D3D781-7FC5-4A01-8B02-DB90D5C8B17D}
O43 - CFD: 2013/04/25 17:22:13 - [0] D -- C:\Users\ROY\AppData\Local\{B76A1879-1FC0-4F6E-AA7A-63301A75E542}
O43 - CFD: 2012/06/07 16:32:11 - [0] D -- C:\Users\ROY\AppData\Local\{B797D954-BE9D-4650-8C1C-EDB8CFAD3B4C}
O43 - CFD: 2012/06/09 15:50:14 - [0] D -- C:\Users\ROY\AppData\Local\{B7DAF2E6-6D93-40F8-8A5C-0220B0868D79}
O43 - CFD: 2012/04/14 09:40:36 - [0] D -- C:\Users\ROY\AppData\Local\{B7E6BDBB-FDE2-4E5F-8D62-A75CBA94EE53}
O43 - CFD: 2013/05/24 16:34:41 - [0] D -- C:\Users\ROY\AppData\Local\{B82EE17D-0152-422A-AFB6-2BBD7002810E}
O43 - CFD: 2012/02/27 11:53:17 - [0] D -- C:\Users\ROY\AppData\Local\{B84D13AE-2505-417A-B118-BFFCACA710DB}
O43 - CFD: 2012/09/08 11:45:46 - [0] D -- C:\Users\ROY\AppData\Local\{B86A468A-A5E1-455E-8073-21BC04C59C30}
O43 - CFD: 2013/06/19 11:07:19 - [0] D -- C:\Users\ROY\AppData\Local\{B92D3A66-553B-4718-9898-E9A09CF5B259}
O43 - CFD: 2012/12/04 10:20:04 - [0] D -- C:\Users\ROY\AppData\Local\{B9DABBFA-9B78-4903-BB60-58272F83ACDD}
O43 - CFD: 2012/06/13 10:16:12 - [0] D -- C:\Users\ROY\AppData\Local\{BA46515C-2D4F-49C8-B98A-AFC45C376722}
O43 - CFD: 2012/04/23 17:04:29 - [0] D -- C:\Users\ROY\AppData\Local\{BAA7F1C6-CBFB-4DE1-9A4A-8C42742B643F}
O43 - CFD: 2012/12/17 15:04:47 - [0] D -- C:\Users\ROY\AppData\Local\{BB051A9B-E262-4E6B-80B8-6C83CE018A12}
O43 - CFD: 2013/05/29 11:07:54 - [0] D -- C:\Users\ROY\AppData\Local\{BB58BDA8-0B2F-44C5-8C89-39318CA7947D}
O43 - CFD: 2012/03/25 10:59:42 - [0] D -- C:\Users\ROY\AppData\Local\{BCAC3327-4C9D-4681-BD4F-94B4C7A15330}
O43 - CFD: 2013/01/11 15:18:41 - [0] D -- C:\Users\ROY\AppData\Local\{BD09037A-60E2-490E-B97D-0D205E9F01B5}
O43 - CFD: 2013/08/09 14:48:43 - [0] D -- C:\Users\ROY\AppData\Local\{BD460EDF-C6A2-4033-AD9E-E8F9F4030EE5}
O43 - CFD: 2012/08/13 10:05:55 - [0] D -- C:\Users\ROY\AppData\Local\{BD5E6A7E-C05E-419C-936A-E3F87D380A72}
O43 - CFD: 2012/02/18 17:01:24 - [0] D -- C:\Users\ROY\AppData\Local\{BDF4FF9D-614E-410F-8212-3A0998613FEA}
O43 - CFD: 2013/09/09 15:36:02 - [0] D -- C:\Users\ROY\AppData\Local\{BE42DF72-1FEF-4732-BA1E-3C9126BB193B}
O43 - CFD: 2013/06/02 16:36:56 - [0] D -- C:\Users\ROY\AppData\Local\{BE8A0FAB-895D-4A77-9BC6-973BDD1AD838}
O43 - CFD: 2012/04/01 10:50:02 - [0] D -- C:\Users\ROY\AppData\Local\{BE9C0B4E-12A0-4CEA-9F34-8CE983C8D34A}
O43 - CFD: 2012/03/21 10:45:36 - [0] D -- C:\Users\ROY\AppData\Local\{BEC48808-4D4A-4D1C-A3EB-5903A22179DB}
O43 - CFD: 2012/06/07 11:26:49 - [0] D -- C:\Users\ROY\AppData\Local\{BED4A444-B3E8-4159-8DBD-F462B17F206F}
O43 - CFD: 2013/03/05 17:07:06 - [0] D -- C:\Users\ROY\AppData\Local\{BFB1CFC5-234D-4AC1-96A4-B647C743C77F}
O43 - CFD: 2013/03/26 10:42:27 - [0] D -- C:\Users\ROY\AppData\Local\{BFD878C8-2133-44BF-B1A2-500B3B5BD521}
O43 - CFD: 2012/04/21 09:22:36 - [0] D -- C:\Users\ROY\AppData\Local\{BFDAE48D-B522-4A91-9F34-6298B9F028FD}
O43 - CFD: 2013/05/02 09:18:36 - [0] D -- C:\Users\ROY\AppData\Local\{C0AFB2CF-AB25-485B-9C7B-3EB7246694AA}
O43 - CFD: 2012/02/26 10:32:52 - [0] D -- C:\Users\ROY\AppData\Local\{C0B0A5B5-506A-4C62-BAE5-BACAF603852B}
O43 - CFD: 2012/06/07 16:35:45 - [0] D -- C:\Users\ROY\AppData\Local\{C0CA08D4-FC26-4A78-9F34-DCD36AC4C57F}
O43 - CFD: 2012/02/28 11:43:52 - [0] D -- C:\Users\ROY\AppData\Local\{C156AFE2-5655-46C2-B674-0DDC0FC45548}
O43 - CFD: 2012/04/13 14:03:30 - [0] D -- C:\Users\ROY\AppData\Local\{C1C602E4-1EE9-4C9A-B01A-8C3B20FAE655}
O43 - CFD: 2012/12/05 10:34:15 - [0] D -- C:\Users\ROY\AppData\Local\{C1DDA98D-099C-480E-8AFF-19B17D327DE6}
O43 - CFD: 2012/05/21 14:19:07 - [0] D -- C:\Users\ROY\AppData\Local\{C21C1175-4AB7-4C16-B737-D0F06CD9B189}
O43 - CFD: 2012/10/27 12:03:02 - [0] D -- C:\Users\ROY\AppData\Local\{C2357C82-0BDC-45A8-BD7A-246634584AB2}
O43 - CFD: 2012/07/31 09:26:20 - [0] D -- C:\Users\ROY\AppData\Local\{C2EEF8FB-7DA4-4FD9-9095-F63D52BC409E}
O43 - CFD: 2012/03/02 12:18:57 - [0] D -- C:\Users\ROY\AppData\Local\{C38CAF96-EA7B-4936-AB9E-D0E37A7C6B40}
O43 - CFD: 2012/03/15 11:14:34 - [0] D -- C:\Users\ROY\AppData\Local\{C438CEBB-C689-4A49-AAEA-3187497F38E1}
O43 - CFD: 2013/03/14 11:53:01 - [0] D -- C:\Users\ROY\AppData\Local\{C46D7E6E-4FEA-47FD-AFB9-1890699F7C3D}
O43 - CFD: 2015/09/07 13:56:38 - [] D -- C:\Users\ROY\AppData\Local\{C476F22A-E0DE-9E92-8D46-BB7AA92E47E2}
O43 - CFD: 2012/04/27 09:37:34 - [0] D -- C:\Users\ROY\AppData\Local\{C4B1CCC3-69AD-43E9-8E65-CC661A743A12}
O43 - CFD: 2012/01/12 15:11:22 - [0] D -- C:\Users\ROY\AppData\Local\{C50105C9-A391-44AF-9FCF-4FE8DFDD39BC}
O43 - CFD: 2011/12/27 12:53:43 - [0] D -- C:\Users\ROY\AppData\Local\{C54A70F1-C2B4-47BB-BA2D-8A14C954B555}
O43 - CFD: 2012/09/01 21:33:10 - [0] D -- C:\Users\ROY\AppData\Local\{C5955880-A40F-408E-A667-F627D909EF0C}
O43 - CFD: 2012/03/01 10:05:01 - [0] D -- C:\Users\ROY\AppData\Local\{C5BC6B1B-2936-4685-ADA2-05F15A5C0513}
O43 - CFD: 2013/03/20 10:56:14 - [0] D -- C:\Users\ROY\AppData\Local\{C5D01054-3CF9-49B1-BAEE-AEE45BD22EC5}
O43 - CFD: 2013/02/19 12:27:00 - [0] D -- C:\Users\ROY\AppData\Local\{C5F5B4FA-4751-4C9D-9663-B2EA04F0E8CF}
O43 - CFD: 2012/01/02 20:22:19 - [0] D -- C:\Users\ROY\AppData\Local\{C6002428-E8FE-4BA0-8C58-78E0E90A9177}
O43 - CFD: 2013/06/03 10:10:05 - [0] D -- C:\Users\ROY\AppData\Local\{C63868BF-320D-40E6-8F28-3CC13CA3CA67}
O43 - CFD: 2012/03/10 13:31:19 - [0] D -- C:\Users\ROY\AppData\Local\{C68C73D6-C4B3-4014-8E70-56957113AA96}
O43 - CFD: 2012/06/04 14:09:32 - [0] D -- C:\Users\ROY\AppData\Local\{C6A1268F-9FDD-4BAC-A653-CC57E31BC549}
O43 - CFD: 2012/03/17 14:54:46 - [0] D -- C:\Users\ROY\AppData\Local\{C6D8344B-69A4-4B9F-A10A-7B25FD2E366B}
O43 - CFD: 2012/03/14 10:39:40 - [0] D -- C:\Users\ROY\AppData\Local\{C6EF7CE2-EC2A-4AFA-BCF8-DF5C84463B69}
O43 - CFD: 2012/08/23 12:01:49 - [0] D -- C:\Users\ROY\AppData\Local\{C6F95592-90C9-485C-98DC-1EEE459912AD}
O43 - CFD: 2012/05/20 12:11:58 - [0] D -- C:\Users\ROY\AppData\Local\{C6F969AE-7DC0-4597-ADAF-53F4A48DF05B}
O43 - CFD: 2013/05/11 14:20:51 - [0] D -- C:\Users\ROY\AppData\Local\{C719508E-439C-498A-A01E-660905C6EAB8}
O43 - CFD: 2012/02/25 16:31:05 - [0] D -- C:\Users\ROY\AppData\Local\{C72084C2-120B-4231-BF38-1BC93DC1BFE8}
O43 - CFD: 2012/06/06 14:49:04 - [0] D -- C:\Users\ROY\AppData\Local\{C729AC52-A29A-45FA-BAE0-88D939195E9E}
O43 - CFD: 2013/02/19 12:25:51 - [0] D -- C:\Users\ROY\AppData\Local\{C797D115-5456-4ADA-8276-FD88EB896CD1}
O43 - CFD: 2012/05/05 13:21:13 - [0] D -- C:\Users\ROY\AppData\Local\{C7A52BBC-9435-419A-93BE-218F955DE3D5}
O43 - CFD: 2012/08/11 16:34:18 - [0] D -- C:\Users\ROY\AppData\Local\{C7C6DD5B-CD5F-4049-8368-11C16864C4E0}
O43 - CFD: 2012/04/27 11:01:25 - [0] D -- C:\Users\ROY\AppData\Local\{C7E3CCD5-6793-43FD-A1FD-BFC2B16417CD}
O43 - CFD: 2012/08/24 09:17:44 - [0] D -- C:\Users\ROY\AppData\Local\{C7EAC04F-41D3-43B4-A5DA-3150340EC5F6}
O43 - CFD: 2013/03/21 11:05:28 - [0] D -- C:\Users\ROY\AppData\Local\{C7EF44A6-230E-41F7-AD2B-6B307F33F7D7}
O43 - CFD: 2013/03/18 18:26:25 - [0] D -- C:\Users\ROY\AppData\Local\{C82B1FD4-DD7B-47A9-B211-87FC1B89A3F9}
O43 - CFD: 2012/08/14 15:30:25 - [0] D -- C:\Users\ROY\AppData\Local\{C9902205-A697-42A0-9273-483123972845}
O43 - CFD: 2013/04/22 09:42:55 - [0] D -- C:\Users\ROY\AppData\Local\{CA2D9F62-37DD-4C9F-B28E-5541EE7CA742}
O43 - CFD: 2012/12/13 16:31:38 - [0] D -- C:\Users\ROY\AppData\Local\{CA36AE24-483F-481C-A6B1-96CEA7E722EB}
O43 - CFD: 2012/03/12 11:00:37 - [0] D -- C:\Users\ROY\AppData\Local\{CB007F37-362A-4FF4-AE4B-04B5BFF75180}
O43 - CFD: 2012/05/29 15:23:38 - [0] D -- C:\Users\ROY\AppData\Local\{CB5C4C15-042D-45E2-88C7-EC7E83CA1B1A}
O43 - CFD: 2011/12/27 12:52:59 - [0] D -- C:\Users\ROY\AppData\Local\{CB87D222-9AD9-4286-B7B9-681DF4F1E142}
O43 - CFD: 2012/08/03 09:36:52 - [0] D -- C:\Users\ROY\AppData\Local\{CBE438AA-6050-4C26-AD3D-41293E4436E8}
O43 - CFD: 2012/05/29 15:23:49 - [0] D -- C:\Users\ROY\AppData\Local\{CD1B65D0-C840-45D6-903D-23F5027BBC36}
O43 - CFD: 2012/02/20 10:32:50 - [0] D -- C:\Users\ROY\AppData\Local\{CDEDFFAF-EDA5-40E1-93AC-AEF0C756FB6B}
O43 - CFD: 2012/04/17 10:02:00 - [0] D -- C:\Users\ROY\AppData\Local\{CE3274AE-85F6-46B4-ACA0-05F7AD69559E}
O43 - CFD: 2013/08/25 11:20:56 - [0] D -- C:\Users\ROY\AppData\Local\{CE62B463-B93A-48FC-8BD1-0BADCBC22A6D}
O43 - CFD: 2012/01/28 19:42:46 - [0] D -- C:\Users\ROY\AppData\Local\{CE633461-AF9A-419F-9EEA-FF584D6EB975}
O43 - CFD: 2012/01/02 11:59:56 - [0] D -- C:\Users\ROY\AppData\Local\{CE838ABC-0663-4AE3-9CA9-9B6949A3CA84}
O43 - CFD: 2012/05/09 18:09:02 - [0] D -- C:\Users\ROY\AppData\Local\{CEAF5210-9E56-4FFD-BA04-382138AB50D9}
O43 - CFD: 2012/09/04 10:26:40 - [0] D -- C:\Users\ROY\AppData\Local\{CED11856-70D0-403A-8142-DC574D785E50}
O43 - CFD: 2012/10/02 09:52:09 - [0] D -- C:\Users\ROY\AppData\Local\{CF39F3FA-862A-4E67-93E9-5F598E4A279C}
O43 - CFD: 2013/01/02 11:00:11 - [0] D -- C:\Users\ROY\AppData\Local\{CFA5102A-E91E-4B95-9771-AFC76FB4AF04}
O43 - CFD: 2013/02/23 13:41:13 - [0] D -- C:\Users\ROY\AppData\Local\{CFB42955-6647-484F-9AC3-BD380A72B5ED}
O43 - CFD: 2012/05/09 16:53:10 - [0] D -- C:\Users\ROY\AppData\Local\{D01802E3-3CAE-4040-B1CC-E4EF8B5D7506}
O43 - CFD: 2012/04/27 11:06:32 - [0] D -- C:\Users\ROY\AppData\Local\{D0FAA56F-5366-4003-989C-D425B322D52D}
O43 - CFD: 2012/02/18 13:40:02 - [0] D -- C:\Users\ROY\AppData\Local\{D136BE43-87D7-47A4-8472-51A7D8632847}
O43 - CFD: 2012/02/02 16:30:59 - [0] D -- C:\Users\ROY\AppData\Local\{D1E5ABEE-1544-4B11-AA1D-1680342F3FA7}
O43 - CFD: 2012/03/10 13:31:07 - [0] D -- C:\Users\ROY\AppData\Local\{D20FA89D-DE80-47E1-91D6-C52DCB9C5967}
O43 - CFD: 2012/06/19 18:46:18 - [0] D -- C:\Users\ROY\AppData\Local\{D2D490E7-9B00-4532-AFB2-6014E17BA218}
O43 - CFD: 2012/05/14 09:02:27 - [0] D -- C:\Users\ROY\AppData\Local\{D3064766-0144-4685-9518-D21EE121A188}
O43 - CFD: 2012/09/21 11:23:09 - [0] D -- C:\Users\ROY\AppData\Local\{D37E6AE6-4CAB-4260-B25F-A183141234EA}
O43 - CFD: 2013/02/22 11:32:13 - [0] D -- C:\Users\ROY\AppData\Local\{D398B743-F607-4749-B65D-FBC75DB8DC47}
O43 - CFD: 2012/04/28 08:27:02 - [0] D -- C:\Users\ROY\AppData\Local\{D5DBB15B-7662-417D-87AD-BC0B7EF6F2EC}
O43 - CFD: 2012/02/20 10:32:30 - [0] D -- C:\Users\ROY\AppData\Local\{D67CDA6C-EAB2-4D78-9F4B-C178E8337D5A}
O43 - CFD: 2012/06/02 09:13:28 - [0] D -- C:\Users\ROY\AppData\Local\{D67FBACE-988B-4293-9239-0600BB64213F}
O43 - CFD: 2012/12/31 11:06:27 - [0] D -- C:\Users\ROY\AppData\Local\{D80EA008-D932-4CA8-884B-228946BE16C7}
O43 - CFD: 2012/05/14 09:02:27 - [0] D -- C:\Users\ROY\AppData\Local\{D8546472-76E8-49F2-8860-7CB7DC0E05AD}
O43 - CFD: 2012/02/28 11:43:21 - [0] D -- C:\Users\ROY\AppData\Local\{D8AD76C9-6DCD-452E-A84E-6C3980B7853A}
O43 - CFD: 2013/08/09 09:47:06 - [0] D -- C:\Users\ROY\AppData\Local\{D8AF7C4B-E549-42D9-B606-3CCEE6812CAB}
O43 - CFD: 2012/05/11 16:03:42 - [0] D -- C:\Users\ROY\AppData\Local\{D8E78F7A-9D1C-4DCB-9BD1-21D07500D3A6}
O43 - CFD: 2012/01/13 18:55:59 - [0] D -- C:\Users\ROY\AppData\Local\{D9AF69CD-74A9-4BD7-9CD2-CBD42DE677F2}
O43 - CFD: 2012/11/23 10:08:49 - [0] D -- C:\Users\ROY\AppData\Local\{DA31D1D6-CFBA-453B-8746-FBCB885C0036}
O43 - CFD: 2013/03/12 11:15:44 - [0] D -- C:\Users\ROY\AppData\Local\{DA3D7534-1D52-43F3-ADC3-90773A2AEA91}
O43 - CFD: 2013/02/28 10:58:18 - [0] D -- C:\Users\ROY\AppData\Local\{DA566EA7-9B1F-4B60-A2F1-C116FDFAAA45}
O43 - CFD: 2012/01/12 15:11:11 - [0] D -- C:\Users\ROY\AppData\Local\{DA6632C2-F58D-4E52-A9B4-8A27314E8AE5}
O43 - CFD: 2013/06/11 11:35:00 - [0] D -- C:\Users\ROY\AppData\Local\{DA76CB3D-CE1C-4B3F-8F52-7880662BC3E9}
O43 - CFD: 2012/05/03 11:43:02 - [0] D -- C:\Users\ROY\AppData\Local\{DA9CC8D4-A0B9-49CD-8C36-61DCA1088890}
O43 - CFD: 2013/02/25 10:55:31 - [0] D -- C:\Users\ROY\AppData\Local\{DB590215-9178-4E64-81FD-3E9774FCF56C}
O43 - CFD: 2013/06/16 10:05:13 - [0] D -- C:\Users\ROY\AppData\Local\{DB5FBF83-DF70-4A8F-AC9E-AD0ADD4D4356}
O43 - CFD: 2012/09/26 10:58:57 - [0] D -- C:\Users\ROY\AppData\Local\{DB662DA4-1D24-46A4-98B8-43033F21508F}
O43 - CFD: 2012/10/03 10:03:00 - [0] D -- C:\Users\ROY\AppData\Local\{DBB8990F-FE52-40CA-BB14-A338B7F62FFE}
O43 - CFD: 2012/01/25 13:01:21 - [0] D -- C:\Users\ROY\AppData\Local\{DBD6E890-E0EE-4064-A8CA-55CDDAB4ADD9}
O43 - CFD: 2013/05/19 18:17:10 - [0] D -- C:\Users\ROY\AppData\Local\{DC0DAC0A-BF49-4961-AB7D-9CCB12DA48D1}
O43 - CFD: 2012/01/30 20:44:27 - [0] D -- C:\Users\ROY\AppData\Local\{DC520107-3A11-404C-AC80-36620F2C7319}
O43 - CFD: 2012/06/09 15:50:25 - [0] D -- C:\Users\ROY\AppData\Local\{DCAABAA4-0C97-48BC-9A9E-2D82E2CAF97C}
O43 - CFD: 2012/03/26 09:12:07 - [0] D -- C:\Users\ROY\AppData\Local\{DCC516DA-53FE-401F-9DB4-8EADB655F7F1}
O43 - CFD: 2012/05/19 13:44:21 - [0] D -- C:\Users\ROY\AppData\Local\{DD0CD3BF-74BD-4690-AEF0-D48C82E7055D}
O43 - CFD: 2012/05/14 15:52:34 - [0] D -- C:\Users\ROY\AppData\Local\{DD4CCF50-1B89-4C48-8ABF-0A7236ADE735}
O43 - CFD: 2012/04/21 16:58:56 - [0] D -- C:\Users\ROY\AppData\Local\{DD742AAA-8804-48E6-8E33-35BAB98ED983}
O43 - CFD: 2013/03/23 11:14:09 - [0] D -- C:\Users\ROY\AppData\Local\{DDE75B09-8DB9-4FE2-A264-A8115B42357B}
O43 - CFD: 2013/02/21 10:03:39 - [0] D -- C:\Users\ROY\AppData\Local\{DE8D25B5-6F54-4598-80B0-33268C885A23}
O43 - CFD: 2012/04/27 18:33:53 - [0] D -- C:\Users\ROY\AppData\Local\{DEA7E6AA-481C-41C5-BCD5-4F635F998FB5}
O43 - CFD: 2012/08/21 15:27:06 - [0] D -- C:\Users\ROY\AppData\Local\{DEAD0847-C11F-4D2E-9512-BB8016B28CAC}
O43 - CFD: 2013/03/04 10:43:00 - [0] D -- C:\Users\ROY\AppData\Local\{DEF194C8-E103-4C3D-B153-E0F9050FB362}
O43 - CFD: 2013/03/24 11:43:05 - [0] D -- C:\Users\ROY\AppData\Local\{DF802E10-6265-45EB-8440-8AD33C83E104}
O43 - CFD: 2013/03/07 12:58:34 - [0] D -- C:\Users\ROY\AppData\Local\{DF92F070-75A1-4720-A2D1-9FB70C3C9312}
O43 - CFD: 2012/05/30 11:39:28 - [0] D -- C:\Users\ROY\AppData\Local\{DFF6B65E-0B49-4E54-B94D-D14AC7163955}
O43 - CFD: 2013/08/20 11:59:51 - [0] D -- C:\Users\ROY\AppData\Local\{E021676C-502D-4627-9E4C-F27FA456D82D}
O43 - CFD: 2013/06/20 08:59:01 - [0] D -- C:\Users\ROY\AppData\Local\{E028D437-7FE3-4321-A107-46EBADFF021C}
O43 - CFD: 2012/08/07 10:52:01 - [0] D -- C:\Users\ROY\AppData\Local\{E0A0A16B-3032-4D48-B432-D2065D896C69}
O43 - CFD: 2012/05/17 19:32:53 - [0] D -- C:\Users\ROY\AppData\Local\{E100F343-1910-43A1-BA09-9655D8FA4E5A}
O43 - CFD: 2012/05/08 14:04:48 - [0] D -- C:\Users\ROY\AppData\Local\{E10C59A7-D98E-44E2-A68C-28D2794D3DCC}
O43 - CFD: 2012/02/14 13:35:24 - [0] D -- C:\Users\ROY\AppData\Local\{E1839D0E-4C75-4FD6-9FB9-9AEC25EEF77B}
O43 - CFD: 2012/05/07 08:48:27 - [0] D -- C:\Users\ROY\AppData\Local\{E1C30ABC-4D07-4006-A711-360DF35D15E7}
O43 - CFD: 2012/03/09 10:34:35 - [0] D -- C:\Users\ROY\AppData\Local\{E2740DB7-8174-41E5-8516-FD987EBF74FB}
O43 - CFD: 2012/12/06 10:10:43 - [0] D -- C:\Users\ROY\AppData\Local\{E3085612-A479-4961-A120-3F20B5985F2B}
O43 - CFD: 2012/03/26 09:12:20 - [0] D -- C:\Users\ROY\AppData\Local\{E3436EF7-21A8-479A-8807-039CE2C33A28}
O43 - CFD: 2012/04/26 13:14:29 - [0] D -- C:\Users\ROY\AppData\Local\{E351501C-D06A-4F98-AD98-7B9D797176AD}
O43 - CFD: 2012/06/22 15:04:15 - [0] D -- C:\Users\ROY\AppData\Local\{E3760200-1DA3-4A1D-9666-DE0AB4B7129E}
O43 - CFD: 2013/01/13 19:08:09 - [0] D -- C:\Users\ROY\AppData\Local\{E37B84E2-9C59-4BE7-B5D1-4A431D102307}
O43 - CFD: 2012/04/27 11:23:56 - [0] D -- C:\Users\ROY\AppData\Local\{E38D7D0E-8C4D-4454-ABFA-57D68957A46D}
O43 - CFD: 2012/08/19 11:49:53 - [0] D -- C:\Users\ROY\AppData\Local\{E391BAC9-88C4-4357-BE43-498D07ED2456}
O43 - CFD: 2013/05/31 09:20:28 - [0] D -- C:\Users\ROY\AppData\Local\{E3922B05-455A-4716-919E-FC0C205D1985}
O43 - CFD: 2012/04/30 17:56:04 - [0] D -- C:\Users\ROY\AppData\Local\{E3F18AD4-DDA2-4C47-B2D7-E1F4E86548AA}
O43 - CFD: 2013/08/17 16:52:56 - [0] D -- C:\Users\ROY\AppData\Local\{E3FDCB90-5DE2-4720-B92A-11BD6F6C73A0}
O43 - CFD: 2012/11/16 12:57:45 - [0] D -- C:\Users\ROY\AppData\Local\{E4274399-621D-4355-880C-0AB07A1CC867}
O43 - CFD: 2013/02/18 11:18:39 - [0] D -- C:\Users\ROY\AppData\Local\{E4620969-C63D-44B0-B5E3-8ED01445A65C}
O43 - CFD: 2012/11/12 20:32:44 - [0] D -- C:\Users\ROY\AppData\Local\{E492EB0E-DD33-4C50-8C7C-F5541394B477}
O43 - CFD: 2013/02/12 10:51:14 - [0] D -- C:\Users\ROY\AppData\Local\{E49F9923-F2EF-47CB-8A8A-76276E098E48}
O43 - CFD: 2012/11/06 10:55:07 - [0] D -- C:\Users\ROY\AppData\Local\{E50EB322-E758-4D17-959D-7999A98AE527}
O43 - CFD: 2012/09/15 14:56:12 - [0] D -- C:\Users\ROY\AppData\Local\{E5338F35-5CAC-49EE-90FC-467A772E75C8}
O43 - CFD: 2013/06/13 10:27:39 - [0] D -- C:\Users\ROY\AppData\Local\{E6B0AD63-4DE2-4590-B0AA-DB5FD6856AB3}
O43 - CFD: 2012/04/05 09:40:45 - [0] D -- C:\Users\ROY\AppData\Local\{E6C49A06-7369-4C98-81B1-91E59E66335A}
O43 - CFD: 2012/04/22 10:06:05 - [0] D -- C:\Users\ROY\AppData\Local\{E785FE15-77FC-44B1-B94F-05867B4E10E5}
O43 - CFD: 2012/10/13 13:38:42 - [0] D -- C:\Users\ROY\AppData\Local\{E7864EFE-6711-4DB6-8623-2C2163439F28}
O43 - CFD: 2013/04/10 10:01:28 - [0] D -- C:\Users\ROY\AppData\Local\{E7E04498-DB36-4607-8313-A67B44C3F40D}
O43 - CFD: 2012/03/24 13:22:47 - [0] D -- C:\Users\ROY\AppData\Local\{E8AE60C6-0747-48DD-A14B-910B54B034F2}
O43 - CFD: 2012/02/19 13:21:45 - [0] D -- C:\Users\ROY\AppData\Local\{E8C6846E-D815-4DA3-9EA5-93BA615295E9}
O43 - CFD: 2012/01/23 21:16:50 - [0] D -- C:\Users\ROY\AppData\Local\{E961E181-0E4B-4151-93D4-2F19EC53A9EC}
O43 - CFD: 2012/05/23 18:27:34 - [0] D -- C:\Users\ROY\AppData\Local\{E968D6E1-7FAA-421E-9C8F-D371D773186B}
O43 - CFD: 2012/04/19 09:21:13 - [0] D -- C:\Users\ROY\AppData\Local\{E978DF1A-ABFC-492C-A6BE-5C94E0E80F42}
O43 - CFD: 2012/08/07 10:52:12 - [0] D -- C:\Users\ROY\AppData\Local\{EB145DE0-2555-4D3A-8C32-EAFD38E6575A}
O43 - CFD: 2011/12/27 12:53:32 - [0] D -- C:\Users\ROY\AppData\Local\{EB386191-1FC4-4E41-B655-EFD92B411665}
O43 - CFD: 2012/11/27 10:09:09 - [0] D -- C:\Users\ROY\AppData\Local\{EB4CCFA6-0B36-48C4-A4D4-B281CA35371E}
O43 - CFD: 2012/05/16 17:52:51 - [0] D -- C:\Users\ROY\AppData\Local\{EB7CDE11-71B8-409D-85F1-31655FF606E2}
O43 - CFD: 2012/02/12 15:19:17 - [0] D -- C:\Users\ROY\AppData\Local\{EC1A4143-9A7B-4BF5-995D-55B4374CDD56}
O43 - CFD: 2013/08/02 09:35:00 - [0] D -- C:\Users\ROY\AppData\Local\{ECA45A98-1439-43D9-97EE-9675F74BAF0E}
O43 - CFD: 2012/04/22 19:17:10 - [0] D -- C:\Users\ROY\AppData\Local\{ECEA8E1B-5946-494C-AEA7-ABECB0A08D33}
O43 - CFD: 2013/03/22 11:45:30 - [0] D -- C:\Users\ROY\AppData\Local\{ED6C3FC8-7578-40EE-9C2E-EDEA32037D77}
O43 - CFD: 2012/05/20 12:12:09 - [0] D -- C:\Users\ROY\AppData\Local\{EDE7D407-85EE-4CAB-AE24-FEB3D103813A}
O43 - CFD: 2013/08/21 09:40:15 - [0] D -- C:\Users\ROY\AppData\Local\{EE75AC73-5B37-480A-BE75-E036893E2C06}
O43 - CFD: 2013/06/05 09:05:28 - [0] D -- C:\Users\ROY\AppData\Local\{EEA8F71F-08C3-4D58-813F-9B5434295933}
O43 - CFD: 2012/09/09 08:27:56 - [0] D -- C:\Users\ROY\AppData\Local\{EEECF3FC-D0F1-442F-8991-ABB67974FA62}
O43 - CFD: 2012/08/14 12:22:56 - [0] D -- C:\Users\ROY\AppData\Local\{EF1EC786-52CC-4D94-9866-5744C41AE5C8}
O43 - CFD: 2012/05/23 17:50:02 - [0] D -- C:\Users\ROY\AppData\Local\{EF588A98-975E-43C7-86DE-CDCA067DA2D6}
O43 - CFD: 2012/08/04 09:15:50 - [0] D -- C:\Users\ROY\AppData\Local\{EF8F5A38-79BF-4746-8521-ED45A33A9BE1}
O43 - CFD: 2012/08/08 09:51:43 - [0] D -- C:\Users\ROY\AppData\Local\{EFA068E5-D7B0-4C9E-841B-63FA7B1BA56C}
O43 - CFD: 2012/04/12 09:07:33 - [0] D -- C:\Users\ROY\AppData\Local\{F01D5E9C-EB2C-4EA8-B2F3-4A174D383784}
O43 - CFD: 2012/06/14 11:10:58 - [0] D -- C:\Users\ROY\AppData\Local\{F0236102-D2E2-4169-A395-FBB3BDF69910}
O43 - CFD: 2012/04/28 11:07:07 - [0] D -- C:\Users\ROY\AppData\Local\{F0705322-FF41-4F2D-ACFB-A0B791C0E18B}
O43 - CFD: 2013/01/12 14:55:24 - [0] D -- C:\Users\ROY\AppData\Local\{F11FB431-5CFA-4573-B446-6BB386D0D0B7}
O43 - CFD: 2012/01/25 13:01:04 - [0] D -- C:\Users\ROY\AppData\Local\{F164360B-8952-416A-A5CA-1B87C86DE07B}
O43 - CFD: 2013/04/03 21:00:57 - [0] D -- C:\Users\ROY\AppData\Local\{F1683966-B786-4892-99DD-3F13EF88C810}
O43 - CFD: 2012/04/14 09:40:25 - [0] D -- C:\Users\ROY\AppData\Local\{F17B5223-3BC9-4C00-BA45-043977B27445}
O43 - CFD: 2012/03/13 13:31:10 - [0] D -- C:\Users\ROY\AppData\Local\{F1D67FDF-7BD3-4D73-BFF7-7FE58BF60A71}
O43 - CFD: 2012/10/19 11:27:54 - [0] D -- C:\Users\ROY\AppData\Local\{F1FDC40B-2DBF-4185-8880-290E9956C933}
O43 - CFD: 2012/03/18 13:03:47 - [0] D -- C:\Users\ROY\AppData\Local\{F21EFE1E-E690-4C01-9B4C-0EF27C353528}
O43 - CFD: 2012/04/20 12:08:27 - [0] D -- C:\Users\ROY\AppData\Local\{F23FB203-A6A6-477D-8A3B-2AF21BA60A1F}
O43 - CFD: 2012/10/11 09:16:23 - [0] D -- C:\Users\ROY\AppData\Local\{F29B80B4-182E-4950-BC93-C1BE6D4786B4}
O43 - CFD: 2012/04/29 12:36:57 - [0] D -- C:\Users\ROY\AppData\Local\{F2FAF688-12A0-42D2-A90C-1793ABAAF7FE}
O43 - CFD: 2012/04/18 13:47:07 - [0] D -- C:\Users\ROY\AppData\Local\{F305A3DA-F74E-4D2C-BF70-37F1579CA9BD}
O43 - CFD: 2012/02/16 10:45:12 - [0] D -- C:\Users\ROY\AppData\Local\{F322FC02-1992-44A4-9E3A-F62DD67D8D01}
O43 - CFD: 2012/03/09 10:34:23 - [0] D -- C:\Users\ROY\AppData\Local\{F35653B7-16CE-4C7B-91D6-5606AD1130A3}
O43 - CFD: 2012/08/25 13:08:38 - [0] D -- C:\Users\ROY\AppData\Local\{F39A8C89-FB9F-42D7-A046-B5E1F86FAEF7}
O43 - CFD: 2012/12/20 10:26:31 - [0] D -- C:\Users\ROY\AppData\Local\{F47EA3DB-7D7F-46E0-9E37-F196D1287209}
O43 - CFD: 2013/02/25 10:53:21 - [0] D -- C:\Users\ROY\AppData\Local\{F4A56C0A-D109-4071-A8C8-67F54CA0B57F}
O43 - CFD: 2012/02/12 15:19:04 - [0] D -- C:\Users\ROY\AppData\Local\{F4EAA580-C6D3-47FA-A02B-DC3C806DD944}
O43 - CFD: 2012/06/07 19:12:44 - [0] D -- C:\Users\ROY\AppData\Local\{F65D28DD-E440-44F1-8908-37BBF05AAF1C}
O43 - CFD: 2012/06/01 14:40:19 - [0] D -- C:\Users\ROY\AppData\Local\{F66560F6-139B-4C73-AC74-3502012474BC}
O43 - CFD: 2013/04/16 11:54:41 - [0] D -- C:\Users\ROY\AppData\Local\{F68DCCEA-E32B-4B62-A04C-042899860344}
O43 - CFD: 2012/12/01 10:53:37 - [0] D -- C:\Users\ROY\AppData\Local\{F6ADDEA3-7571-42CD-967B-12D99BEBDC00}
O43 - CFD: 2013/05/05 16:58:25 - [0] D -- C:\Users\ROY\AppData\Local\{F6F16313-F748-4831-988E-D5280F160A02}
O43 - CFD: 2013/03/25 10:34:45 - [0] D -- C:\Users\ROY\AppData\Local\{F72B0EDD-6C7B-48D5-A890-8E0F7B48F010}
O43 - CFD: 2013/04/14 17:44:40 - [0] D -- C:\Users\ROY\AppData\Local\{F7B1BD95-A1AF-429F-983E-FCE56FC2000A}
O43 - CFD: 2012/06/08 14:01:08 - [0] D -- C:\Users\ROY\AppData\Local\{F85E0371-7D73-45C6-91D0-C2996A5F972A}
O43 - CFD: 2012/03/23 10:25:45 - [0] D -- C:\Users\ROY\AppData\Local\{F871F0CA-C2EB-4F45-B4A2-2C1F6FDF061B}
O43 - CFD: 2013/01/24 10:49:34 - [0] D -- C:\Users\ROY\AppData\Local\{F88E4265-46A1-4FDD-977C-70A0BACFEC6F}
O43 - CFD: 2012/09/22 10:44:35 - [0] D -- C:\Users\ROY\AppData\Local\{F89E2C13-ADEE-4500-8066-19EBFF64D483}
O43 - CFD: 2012/03/05 12:20:22 - [0] D -- C:\Users\ROY\AppData\Local\{F8A3287A-4A67-48BD-A23C-5D525D4D7862}
O43 - CFD: 2012/11/02 12:43:35 - [0] D -- C:\Users\ROY\AppData\Local\{F8B30293-C3BE-4DCA-A678-A49C7611ADC9}
O43 - CFD: 2012/12/14 11:31:05 - [0] D -- C:\Users\ROY\AppData\Local\{F8FA94E3-C024-4D74-B031-5FDF7D1A4FC7}
O43 - CFD: 2013/05/26 15:27:50 - [0] D -- C:\Users\ROY\AppData\Local\{F938A6BA-9551-4A6D-BABA-A66103531D5B}
O43 - CFD: 2012/10/17 10:55:03 - [0] D -- C:\Users\ROY\AppData\Local\{F9813E95-B30D-4091-A4A3-62111D4EA4A3}
O43 - CFD: 2013/01/10 10:17:54 - [0] D -- C:\Users\ROY\AppData\Local\{F9C4A645-EC4A-43F4-AF3A-D9494C59DA2F}
O43 - CFD: 2013/04/12 09:31:56 - [0] D -- C:\Users\ROY\AppData\Local\{F9E233C0-EF34-4F1F-991A-899A1449F489}
O43 - CFD: 2012/08/01 10:01:11 - [0] D -- C:\Users\ROY\AppData\Local\{FA6C549A-2944-425D-8470-8B61352DB4B8}
O43 - CFD: 2012/06/07 11:20:30 - [0] D -- C:\Users\ROY\AppData\Local\{FA8617AE-7C7C-4A5A-B378-E248E5AF9AD3}
O43 - CFD: 2012/09/02 16:52:10 - [0] D -- C:\Users\ROY\AppData\Local\{FAB6569E-E124-4565-9B85-2102C40E32CD}
O43 - CFD: 2013/03/13 12:42:47 - [0] D -- C:\Users\ROY\AppData\Local\{FACBEE7D-435D-43B0-A2C7-CB1C965A769A}
O43 - CFD: 2012/01/18 12:08:20 - [0] D -- C:\Users\ROY\AppData\Local\{FB6C46B3-C77E-439D-8371-0576EE95706D}
O43 - CFD: 2012/02/15 10:35:12 - [0] D -- C:\Users\ROY\AppData\Local\{FB790C70-DF19-4149-8608-56E162F28317}
O43 - CFD: 2012/01/26 15:49:15 - [0] D -- C:\Users\ROY\AppData\Local\{FBC32A84-DCF1-4805-9A60-B244E7B7CE5B}
O43 - CFD: 2012/01/18 12:08:32 - [0] D -- C:\Users\ROY\AppData\Local\{FC498D3C-DCF6-4ACD-902C-130DF2D3D87A}
O43 - CFD: 2013/08/08 10:44:12 - [0] D -- C:\Users\ROY\AppData\Local\{FC892FA0-6034-4205-9738-14499DABFFEE}
O43 - CFD: 2012/05/01 10:10:29 - [0] D -- C:\Users\ROY\AppData\Local\{FCA14C59-2B73-4B24-8F56-B92CD14BD8BF}
O43 - CFD: 2012/08/09 10:41:23 - [0] D -- C:\Users\ROY\AppData\Local\{FCB6E9EC-19FC-4EE7-80A7-2741F79D3EAA}
O43 - CFD: 2012/02/18 13:40:13 - [0] D -- C:\Users\ROY\AppData\Local\{FD10879E-E194-4E94-B88C-5D648C0B934D}
O43 - CFD: 2012/06/19 18:41:40 - [0] D -- C:\Users\ROY\AppData\Local\{FD2D77AB-C898-4B6C-A81A-89144BFDC039}
O43 - CFD: 2012/05/16 11:31:53 - [0] D -- C:\Users\ROY\AppData\Local\{FD4FE3AB-B081-46EC-A9F6-C48E438520CB}
O43 - CFD: 2013/04/26 11:09:23 - [0] D -- C:\Users\ROY\AppData\Local\{FD897BB5-9510-4E08-B924-794DE37A6DA7}
O43 - CFD: 2013/04/18 09:09:46 - [0] D -- C:\Users\ROY\AppData\Local\{FDC9A17C-B9CC-404D-9719-AB37CEF0F97F}
O43 - CFD: 2012/01/02 21:37:04 - [0] D -- C:\Users\ROY\AppData\Local\{FE34AF01-723B-43D5-B7BB-3DAF6CC52EEF}
O43 - CFD: 2013/01/15 13:17:55 - [0] D -- C:\Users\ROY\AppData\Local\{FE49C9B7-94B9-4E48-BF6F-71F236A5D895}
O43 - CFD: 2012/04/18 13:46:56 - [0] D -- C:\Users\ROY\AppData\Local\{FE99E572-7479-45C6-BB71-ABE330222E07}
O43 - CFD: 2012/05/30 14:25:24 - [0] D -- C:\Users\ROY\AppData\Local\{FF9AB188-91F2-4770-9938-D9F8B89F7747}
O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/12 18:34:14 - [] RD -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/01/21 16:56:27 - [] D -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/09/18 15:56:02 - [] RD -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2014/01/13 15:58:29 - [] D -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Value Apps
O43 - CFD: 2014/01/13 15:58:30 - [] D -- C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Optional.Wajam

---\\ Enumération des clés StartupReg (23) - 2s
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe ©
O53 - SMSR:HKLM\...\startupreg\Google+ Auto Backup [Key] . (.Google Inc. - AutoBackup.) -- C:\Users\ROY\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe ©
O53 - SMSR:HKLM\...\startupreg\GoogleChromeAutoLaunch_3E98548B50971E424C753C74FFD00851 [Key] . (.The Chromium Authors - Chromium.) -- C:\Users\ROY\AppData\Local\Chromium\Application\chrome.exe ©
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe ©
O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe ©
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe ©
O53 - SMSR:HKLM\...\startupreg\NBAgent [Key] . (.Nero AG - Nero BackItUp.) -- c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe ©
O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe ©
O53 - SMSR:HKLM\...\startupreg\RtHDVBg [Key] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe ©
O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ©
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ©
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ©
O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics Incorporated - .) -- C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) ©
O53 - SMSR:HKLM\...\startupreg\TCrdMain [Key] . (.TOSHIBA Corporation - .) -- C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe (.not file.) ©
O53 - SMSR:HKLM\...\startupreg\TOPI.EXE [Key] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe ©
O53 - SMSR:HKLM\...\startupreg\Toshiba Registration [Key] . (.Toshiba Europe GmbH - Toshiba Notebook Registration Reminder.) -- C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe ©
O53 - SMSR:HKLM\...\startupreg\Toshiba TEMPRO [Key] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe ©
O53 - SMSR:HKLM\...\startupreg\ToshibaServiceStation [Key] . (.TOSHIBA Corporation - TOSHIBA Service Station.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe ©
O53 - SMSR:HKLM\...\startupreg\TosNC [Key] . (.TOSHIBA Corporation - .) -- C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe (.not file.) ©
O53 - SMSR:HKLM\...\startupreg\TosReelTimeMonitor [Key] . (.TOSHIBA Corporation - .) -- C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (.not file.) ©
O53 - SMSR:HKLM\...\startupreg\TosSENotify [Key] . (.TOSHIBA Corporation - .) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe ©
O53 - SMSR:HKLM\...\startupreg\TosVolRegulator [Key] . (.TOSHIBA Corporation - Toshiba Volume Regulator.) -- C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe ©
O53 - SMSR:HKLM\...\startupreg\TPwrMain [Key] . (.TOSHIBA Corporation - .) -- C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE (.not file.) ©

---\\ Liste des pilotes du système (83) - 7s
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] ©
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] ©
O58 - SDL:2015/07/28 01:31:01 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [28656] ©
O58 - SDL:2015/07/28 01:31:01 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [90968] ©
O58 - SDL:2011/11/28 19:52:22 A . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [42328] ©
O58 - SDL:2015/07/28 01:30:56 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [93528] ©
O58 - SDL:2015/07/28 01:31:02 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [65224] ©
O58 - SDL:2015/07/28 00:38:58 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1048856] ©
O58 - SDL:2015/07/28 01:31:03 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [447944] ©
O58 - SDL:2015/07/28 01:31:05 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [150160] ©
O58 - SDL:2015/07/28 01:31:04 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [274808] ©
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] ©
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] ©
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2010/10/19 16:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] ©
O58 - SDL:2010/11/21 05:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] ©
O58 - SDL:2011/01/12 17:51:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [439320] ©
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] ©
O58 - SDL:2011/04/04 20:10:14 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [12262624] ©
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] ©
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] ©
O58 - SDL:2015/07/28 00:38:37 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\Windows\System32\drivers\ngvss.sys [115152] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] ©
O58 - SDL:2011/02/08 19:07:00 A . (.TOSHIBA Corporation - TOSHIBA Universal Camera Filter Driver.) -- C:\Windows\System32\drivers\PGEffect.sys [38096] ©
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] ©
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] ©
O58 - SDL:2007/05/14 16:06:18 A . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\drivers\RimUsb_AMD64.sys [27520] ©
O58 - SDL:2011/01/13 20:58:30 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [413800] ©
O58 - SDL:2011/01/13 13:44:26 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2712680] ©
O58 - SDL:2010/03/31 11:10:18 A . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\System32\drivers\rtl8187B.sys [450048] ©
O58 - SDL:2010/04/01 14:01:10 A . (.Realtek Semiconductor Corporation - Realtek RTL8187S PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8187Se.sys [442368] ©
O58 - SDL:2010/11/02 16:48:38 A . (.Realtek Semiconductor Corporation - Realtek RTL81892CE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8192ce.sys [1103464] ©
O58 - SDL:2010/07/02 09:14:00 A . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8192se.sys [1111144] ©
O58 - SDL:2010/04/08 10:07:58 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\Windows\System32\drivers\rtl819xp.sys [612352] ©
O58 - SDL:2010/10/29 16:11:42 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [250984] ©
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] ©
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] ©
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] ©
O58 - SDL:2011/02/03 19:59:06 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [1413680] ©
O58 - SDL:2009/07/30 20:22:04 A . (.TOSHIBA Corporation. - TOSHIBA ODD Writing Driver for x64..) -- C:\Windows\System32\drivers\tdcmdpst.sys [27784] ©
O58 - SDL:2009/06/24 15:36:48 A . (.TOSHIBA Corporation - tos_sps64.) -- C:\Windows\System32\drivers\tos_sps64.sys [482384] ©
O58 - SDL:2009/07/14 16:31:18 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\Windows\System32\drivers\TVALZ_O.SYS [26840] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ©
O58 - SDL:2014/11/27 03:29:12 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{00b8ec06-772f-413e-8843-d69020188cd2}w64.sys [48824] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/20 13:20:40 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{2296e682-b442-4ee4-a7ed-8279504b8387}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/21 11:03:46 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{22a75a9e-2a5b-4101-a6e6-608c8f25ef9a}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/04/24 12:23:48 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{29b136c9-938d-4d3d-8df8-d649d9b74d02}w64.sys [61120] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/22 21:28:58 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{30389f51-b968-4243-8e7c-c69cde75ce4d}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/11/29 14:30:46 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{3739431a-d94b-41b9-abda-8618fbaedcbf}w64.sys [48824] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/20 20:12:06 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{42ad32fb-64da-4848-a5f2-2ed54fc96139}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/11/28 12:35:04 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{4d04d451-b8ea-4a87-becc-f81f49396472}w64.sys [48824] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/22 00:30:50 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{69c4c7d9-b535-450c-adaf-acc255c3f407}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/19 23:09:16 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{6a86ad4e-d1ee-4703-baff-f697dcc0f883}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/12/01 05:32:32 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{6f8e76a6-8d83-42da-bc6d-e2c19080f60b}w64.sys [48824] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/12/01 18:39:26 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{7c18b119-d64a-4b8f-90db-d1c5b5ad5acf}w64.sys [48824] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/11 14:59:46 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{b4a621cf-697b-428b-a5cd-d3b11276ca0d}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/10/11 21:15:06 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{d34f4dc3-0643-4f3e-976b-4ffc4f4be959}w64.sys [48416] =>PUP.Optional.LinkiDoo
O58 - SDL:2014/11/30 03:30:20 A . (.StdLib - StdLib.) -- C:\Windows\System32\drivers\{f6182a48-b8df-4d42-8740-78bc721a67b7}w64.sys [48824] =>PUP.Optional.LinkiDoo

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 54s
O61 - LFC: 2015/09/18 16:00:09 A . (..) -- C:\Users\ROY\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]
O61 - LFC: 2015/09/18 13:07:06 A . (..) -- C:\Users\ROY\AppData\Local\Chromium\User Data\ev_hashes_whitelist.bin [674082]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.The Chromium Authors - Chromium.) -- C:\Users\ROY\AppData\Local\Chromium\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\ROY\AppData\Local\Chromium\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.The Chromium Authors - Chromium.) -- C:\Users\ROY\AppData\Local\Chromium\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\ROY\AppData\Local\Chromium\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (6) - 0s
O69 - SBI: SearchScopes [HKCU] OldSearch - (Search Provided by Yahoo) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {1b31c9d2-7135-442b-bb93-7c002172adc6} - (Yahoo! Search) - http://searchsimple-a.akamaihd.net/
O69 - SBI: SearchScopes [HKCU] {2A891547-EAB7-483D-8554-4775D9B87B1C} - (Yahoo! Search) - http://rts.dsrlte.com/ =>PUP.Optional.PaybyAds
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Yahoo! Search) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} - (Google) - http://www.google.com/

---\\ Enumère les services démarrés par Svchost (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2606080] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ©

---\\ Liste des exceptions du parefeu Windows (8) - 3s
O87 - FAEL: "{24EF8839-6FEC-40B4-99C9-E00EADB30104}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe (.not file.)
O87 - FAEL: "{28C65D1C-694E-4718-9607-D0735A8605F5}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe (.not file.)
O87 - FAEL: "{0E9A5666-E002-4A3A-8979-1108446191A6}" [In-None-P17-TRUE] .(...) -- E:\setup\hpznui40.exe (.not file.)
O87 - FAEL: "{12867EEB-5713-49D4-8224-116829259C13}" [In-None-P17-TRUE] .(.Copyright © 2005 Hewlett-Packard Company - HP CUE-Print Component.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
O87 - FAEL: "{479D7D37-00E5-4B1D-91CB-9FCDD2E6F0D6}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BRT.Helper.exe (.not file.)
O87 - FAEL: "{CED75B1F-3D36-48A2-8CED-B56FADEC6FB1}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BRT.Helper.exe (.not file.)
O87 - FAEL: "{AC95EEAA-D014-44AA-9D14-177059303ED1}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BRT.Helper.exe (.not file.)
O87 - FAEL: "{9CA035D1-959F-487F-92CD-8410DE1CAA4B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Mega Browse\bin\MegaBrowse.BRT.Helper.exe (.not file.)

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (26) - 15s

SR - Auto [2011/06/06 12:55:28] [ 64952] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SS - Demand [2015/08/05 09:42:44] [ 268976] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2015/07/28 00:39:33] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
SR - Demand [2015/07/28 00:26:21] [ 4047768] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe ©
SR - Auto [2010/01/28 16:44:40] [ 249200] ConfigFree WiMAX Service (cfWiMAXService) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe ©
SR - Auto [2009/03/10 18:51:20] [ 46448] ConfigFree Service (ConfigFree Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe ©
SS - Demand [2015/05/29 17:31:45] [ 373824] GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe ©
SS - Demand [2015/01/30 13:33:50] [ 265808] GamesAppService (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe ©
SR - Auto [2010/09/09 17:26:34] [ 162824] GFNEX Service (GFNEXSrv) . (.All rights reserved.) - C:\Windows\System32\GFNEXSrv.exe
SS - Auto [2015/08/30 04:09:37] [ 144200] Google Update Service (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/08/30 04:09:37] [ 144200] Google Update Service (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2012/08/15 11:04:55] [ 194032] Google Software Updater (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe ©
SS - Demand [2005/11/14 01:06:04] [ 69632] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe ©
SR - Auto [2010/12/20 18:24:36] [ 325656] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
SR - Auto [2015/09/18 10:21:59] [ 128232] MaintainerSvc3.22.1827446 (MaintainerSvc3.22.1827446) . (...) - C:\ProgramData\06154ba7-7ceb-4959-a6bd-bf38bdec8cc6\maintainer.exe =>PUP.Optional.MaintainerSvc
SStop Pending - Auto [2011/03/29 15:33:08] [ 598312] @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG.) - c:\Program Files (x86)\Nero\Update\NASvc.exe ©
SS - Demand [2011/02/10 09:25:36] [ 112080] Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) . (.Toshiba Europe GmbH.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe ©
SS - Demand [2010/11/29 14:58:30] [ 54136] TMachInfo (TMachInfo) . (.TOSHIBA Corporation.) - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe ©
SR - Auto [2010/10/20 14:41:00] [ 138656] TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\system32\TODDSrv.exe ©
SR - Auto [2010/12/09 17:45:26] [ 489384] TOSHIBA Power Saver (TosCoSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe ©
SS - Demand [2010/12/08 15:42:54] [ 137632] TOSHIBA HDD SSD Alert Service (TOSHIBA HDD SSD Alert Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe ©
SR - Auto [2010/12/20 18:24:38] [ 2656280] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©
SR - Auto [2015/09/18 16:03:13] [ 456936] Update Mega Browse (Update Mega Browse) . (...) - C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe =>PUP.Optional.MegaBrowse
SR - Auto [2015/09/18 15:54:53] [ 456936] Util Mega Browse (Util Mega Browse) . (...) - C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe =>PUP.Optional.MegaBrowse
SR - Auto [2013/08/14 13:04:32] [ 2149152] ValueApps (ValueApps) . (.Conduit.) - C:\Users\ROY\AppData\Local\ValueApps\ValueApps.exe

---\\ Scan Additionnel (52) - 0s
C:\Users\ROY\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgkmmefaeflbkbbamehfkghmmlgnpojl
C:\Windows\system32\ValueApps64.dll =>Hijacker.Winsock
HKLM\SYSTEM\CurrentControlSet\Services\MaintainerSvc3.22.1827446 =>PUP.Optional.MaintainerSvc
C:\ProgramData\06154ba7-7ceb-4959-a6bd-bf38bdec8cc6\maintainer.exe =>PUP.Optional.MaintainerSvc
HKLM\SOFTWARE\Mega Browse =>PUP.Optional.MegaBrowse
HKCU\SOFTWARE\Mega Browse =>PUP.Optional.MegaBrowse
C:\Program Files (x86)\Mega Browse =>PUP.Optional.MegaBrowse
HKLM\SYSTEM\CurrentControlSet\Services\Update Mega Browse =>PUP.Optional.MegaBrowse
C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe =>PUP.Optional.MegaBrowse
HKLM\SYSTEM\CurrentControlSet\Services\Util Mega Browse =>PUP.Optional.MegaBrowse
C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe =>PUP.Optional.MegaBrowse
C:\Users\ROY\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe =>PUP.Optional.MySearchDial
C:\Windows\Tasks\MySearchDial.job =>PUP.Optional.MySearchDial
C:\Windows\System32\Tasks\MySearchDial =>PUP.Optional.MySearchDial
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial =>PUP.Optional.MySearchDial
HKLM\SOFTWARE\Wow6432Node\InstallCore =>Adware.InstallCore
HKLM\SOFTWARE\Wow6432Node\Mega Browse =>PUP.Optional.MegaBrowse
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\Wajam =>PUP.Optional.Wajam
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\mysearchdial =>PUP.Optional.MySearchDial
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Vittalia =>PUP.Optional.Vittalia
HKCU\SOFTWARE\Wajam =>PUP.Optional.Wajam
C:\Program Files (x86)\Mysearchdial =>PUP.Optional.MySearchDial
C:\Program Files (x86)\SearchProtect =>PUP.Optional.SearchProtect
C:\Program Files (x86)\sweetpacks bundle uninstaller =>PUP.Optional.SweetIM
C:\ProgramData\Partner =>Toolbar.YahooPartner
C:\Users\ROY\AppData\Roaming\0V1L2Z2Z1T1I1L1T =>Adware.InstallCore
C:\Users\ROY\AppData\Roaming\mysearchdial =>PUP.Optional.MySearchDial
C:\Users\ROY\AppData\Local\Mysearchdial =>PUP.Optional.MySearchDial
C:\Users\ROY\AppData\Local\Pay-By-Ads =>PUP.Optional.PaybyAds
C:\Users\ROY\AppData\Local\SearchProtect =>PUP.Optional.SearchProtect
C:\Users\ROY\AppData\Local\Wajam =>PUP.Optional.Wajam
C:\Users\ROY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>PUP.Optional.Wajam
C:\Windows\System32\drivers\{00b8ec06-772f-413e-8843-d69020188cd2}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{2296e682-b442-4ee4-a7ed-8279504b8387}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{22a75a9e-2a5b-4101-a6e6-608c8f25ef9a}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{29b136c9-938d-4d3d-8df8-d649d9b74d02}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{30389f51-b968-4243-8e7c-c69cde75ce4d}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{3739431a-d94b-41b9-abda-8618fbaedcbf}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{42ad32fb-64da-4848-a5f2-2ed54fc96139}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{4d04d451-b8ea-4a87-becc-f81f49396472}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{69c4c7d9-b535-450c-adaf-acc255c3f407}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{6a86ad4e-d1ee-4703-baff-f697dcc0f883}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{6f8e76a6-8d83-42da-bc6d-e2c19080f60b}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{7c18b119-d64a-4b8f-90db-d1c5b5ad5acf}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{b4a621cf-697b-428b-a5cd-d3b11276ca0d}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{d34f4dc3-0643-4f3e-976b-4ffc4f4be959}w64.sys =>PUP.Optional.LinkiDoo
C:\Windows\System32\drivers\{f6182a48-b8df-4d42-8740-78bc721a67b7}w64.sys =>PUP.Optional.LinkiDoo

---\\ Récapitulatif des éléments trouvées sur votre station (13) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.MySearchDial
http://www.nicolascoolman.fr/pup-paybyads/ =>PUP.Optional.PaybyAds
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchSimple
http://www.nicolascoolman.fr/pup-megabrowse/ =>PUP.Optional.MegaBrowse
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaintainerSvc
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/pup-sweetim/ =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/pup-wajam/ =>PUP.Optional.Wajam
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-vittalia/ =>PUP.Optional.Vittalia
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/pup-linkidoo/ =>PUP.Optional.LinkiDoo

~ End of the scan, 19884 items in 175 seconds (1593)(0)()

Publicité


Signaler le contenu de ce document

Publicité