~ ZHPDiag v2015.11.1.160 Par Nicolas Coolman (2015/11/01)
~ Démarré par wajih (Administrator) (2015/11/02 23:05:16)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\wajih\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\wajih\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (3) - 0s
MFIE: Mozilla Firefox 41.0.2 (x86 fr) v41.0.2
OPIE: Opera 32.0.1948.69 v32.0.1948.69
MSIE: Internet Explorer v10.0.9200.17519

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (3) - 10s
Microsoft Security Client v4.8.0204.0
Microsoft Security Essentials v4.8.204.0
Windows Defender W7 (Deactivate)

---\\ Surveillance de Logiciels (1) - 10s
Adobe Flash Player 19 NPAPI

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 1954.36 MB (31% free)
~ System Restore: Activé (Enable)
~ System drive C: has 152 GB free of 236 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: WAJIH-PC
~ User Name: wajih
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 152 GB free of 236 GB (System)

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 3s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - 25/02/2011 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2871808] ©
[MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] ©
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] ©
[MD5.414AD8CBA2595B840DFB880E1D162E81] - 18/09/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2239488] ©
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] ©
[MD5.067FA52BFB59A56110A12312EF9AF243] - 20/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] ©
[MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] ©
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] ©
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 20/11/2010 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.FA886682CFC5D36718D3E436AACF10B9] - 30/05/2014 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [497152] ©
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] ©
[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] ©
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] ©
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] ©
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] ©
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] ©
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] ©
[MD5.ACB6782973BD93760D597FC7BB37E692] - 29/09/2015 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159232] ©
[MD5.09594D1089C523423B32A4229263F068] - 20/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [261632] ©
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - 24/01/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684928] ©
[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] ©
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 20/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] ©
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] ©
[MD5.70988118145F5F10EF24720B97F35F65] - 11/11/2014 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [119296] ©
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 20/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] ©

---\\ Processus lancés (31) - 3s
[MD5.C32D068757D4AD6E4781A78CFFD883E5] - (.Kingsoft Corporation - PC Doctor Service.) -- C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe [290720] [PID.1252]
[MD5.5BE101CB8BB688839E9203E827684C41] - (.Kingsoft Corporation - PC Doctor Flow Monitor.) -- C:\Program Files (x86)\Kingsoft\PCDoctor\KSafeTray.exe [742816] [PID.2544]
[MD5.64075301E301BD9E62CF8BEA67961D2A] - (.ReviverSoft 2009 - Battery Optimizer is an advanced laptop bat.) -- C:\Program Files\ReviverSoft\Battery Optimizer\BatteryOptimizerService.exe [116608] [PID.940]
[MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144] [PID.2440] ©
[MD5.B90E093E7A7250906F1054418B5339C0] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.2516] ©
[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.2688] ©
[MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240] [PID.1068] ©
[MD5.76468DF7A7A92413A57C998DE5C39290] - (.Fujitsu Technology Solutions - Testhandler Service.) -- C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264] [PID.2300] ©
[MD5.843BA5F09A391D52AC1F8486C5FC3D4F] - (.FUJITSU LIMITED - PSUService.) -- C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336] [PID.3132] ©
[MD5.4D5248427A4FA84885B6A6A869A50C9F] - (...) -- C:\Users\wajih\AppData\Roaming\Frim\frim.exe [3727952] [PID.3448]
[MD5.B5622C1549F75A2E2312B59CE2293A09] - (...) -- C:\Program Files (x86)\WebcamMax\wcmmon.exe [1038848] [PID.3468]
[MD5.7BB22EED9CFBBADFBC5E27BF8965D10A] - (.FUJITSU LIMITED - FUJ02E3 Utility.) -- C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe [36712] [PID.3496] ©
[MD5.4AB21A2CCC2100B27960E812CA6D5E19] - (.FUJITSU LIMITED - TrayManager.) -- C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264] [PID.3532] ©
[MD5.7F432A24FE9B5FA7747ADCDA4BCEFA94] - (.FUJITSU LIMITED - Tableau d’applications LifeBook / Core.) -- C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [157544] [PID.3544] ©
[MD5.DF808A60C0D1CDE231AFC90C53A80B9E] - (.FUJITSU LIMITED - Button handler.) -- C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [35176] [PID.3568] ©
[MD5.0D7CF635D9888072015EBE3B232DFB99] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352] [PID.3616] ©
[MD5.7B7BF7BB3A579630837839641F4BE374] - (.CSR, plc - Bluetooth FTP Server.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe [463264] [PID.3736] ©
[MD5.8602E6D9DAB2277CC1F899567FE70DF9] - (.FUJITSU LIMITED - Button handler KB assistant.) -- C:\Program Files\Fujitsu\Application Panel\BtnHndHkb.exe [18792] [PID.3856] ©
[MD5.86E5BAD9BD1D96ADD3EE76F87968138B] - (.CSR, plc - Skype Handsfree Support.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe [431504] [PID.3888] ©
[MD5.3BFF9166862DD2C265C09A4682146415] - (.CSR, plc - Bluetooth Audio Configuration Monitor.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe [535440] [PID.3920] ©
[MD5.90B36E644133123AA3498DB88B841D6B] - (.CSR, plc - Bluetooth Image Push Responder.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBipPushResponder.exe [419752] [PID.3936] ©
[MD5.A93F6D00702900137E4C97C17B01A600] - (.FUJITSU LIMITED - Fujitsu Display Manager.) -- C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712] [PID.3996] ©
[MD5.AF5B5054A9C86CF263781C588FA98A2C] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe [74752] [PID.3240] ©
[MD5.30DBD9CB0156FBC5EE9D76E32FCE769D] - (.FUJITSU LIMITED - Fujitsu Hotkey Utility.) -- C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [47976] [PID.3232] ©
[MD5.027D0500A592CAED765B9E450129D89E] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe [79192] [PID.2228] ©
[MD5.14DCA74CB34502CA919966F31FBB8B0D] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] [PID.2488] ©
[MD5.7248A2EF6E21DFE7D85E2361D48AB5EE] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [510488] [PID.4052] ©
[MD5.2E1050C0D0E2A75F51A638C9656FEDE4] - (.Speedbit Ltd - .) -- C:\Users\wajih\AppData\Local\Temp\Stub\-1924214366\sbw.exe [5041800] [PID.3060]
[MD5.24500CBACBA4549C5316B23805551C87] - (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152] [PID.3676]
[MD5.B29A923496E0E73B5DE2DD261018DD1A] - (.Speedbit Ltd. - SpeedBit Update Service.) -- C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2531488] [PID.5108] ©
[MD5.26FFDA193A05A3D921223AE58A00F258] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\wajih\Downloads\ZHPDiag3.exe [1963520] [PID.4824] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (1) - 0s
G2 - GCE: Preference [User Data\Default] [kbhplonhjleiopohgmppianogioknked] ["update_url" : "https://dl.addonupdater.com/zulaga] New Tab Launch

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (15) - 2s
M0 - MFSP: prefs.js [wajih - gava9wkc.default-1434493557482] http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFc10MV1wURBgXIVoATA1HR1cOeFteBxRFEVQWcg8ABwxGF1MFIk0FA18DB0VXfWFoKB8fHHJRJVhMJ1AfRQ== =>PUP.Optional.Browser
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\defsearchp@gmail.com.xpi =>PUP.Optional.PriceFountain
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\jid1-e3wSQaH5t1HqKp@jetpack.xpi
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\jid1-qj0w91o64N7Eeg@jetpack.xpi
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\manishjain9@hotmail.com_easiestyoutube.xpi
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\vdpure@link64.xpi
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\default.xml
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\istartsurf.xml =>PUP.Optional.IsStart
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\speedbit.xml
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo-lavasoft.xml
P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (.lightningnewtab.com - deskCut.) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll ©
P2 - FPN: [HKLM] [@popularscreensavers.com/Plugin] - (.Popular Screensavers.) -- C:\Program Files (x86)\PopularScreensavers\NPp5Stub.dll

---\\ Opera, Démarrage,Recherche,Plugins (1) - 0s
B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\wajih\AppData\Roaming\Opera Software\Opera Stable\Extensions\pdjpcnnkcejbglbpfhkcabckbloogjli

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (22) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.speedbit.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.ChatVibes.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.cherche.us =>PUP.Optional.ChercheUS
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://go.speedbit.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://go.speedbit.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.istartsurf.com/ =>PUP.Optional.IsStart
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ©

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (1) - 0s
O2 - BHO: ShopperProBHO [64Bits] - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} . (...) -- C:\ProgramData\ShopperPro\ShopperPro.dll (.not file.) =>PUP.Optional.ShopperPro

---\\ Internet Explorer, Barre d'outil (3) - 0s
O3 - Toolbar: 0x5BC3E6EE1861DC119C72001320C79847 - [HKCU]{EEE6C35B-6118-11DC-9C72-001320C79847} . (...) -- (.not file.)
O3 - Toolbar: Babylon Toolbar - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} . (...) -- (.not file.) =>PUP.Optional.Babylon
O3 - Toolbar: 0x00 - [HKLM]{0329E7D6-6F54-462D-93F6-F5C3118BADF2} . (.Copyright © 2001-2011. All rights reserved. - IE Toolbar Engine.) -- C:\Program Files (x86)\SPEEDbit Video Downloader\Toolbar\tbcore3.dll

---\\ Applications lancées au démarrage du système (10) - 0s
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe ©
O4 - HKCU\..\Run: [VideoDownloaderUltimate] C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe (.not file.)
O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] . (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe
O4 - HKLM\..\Wow6432Node\Run: [KSafeTray] . (.Kingsoft Corporation - PC Doctor Flow Monitor.) -- C:\Program files (x86)\Kingsoft\PCDoctor\KSafeTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-21-2597295877-1529606943-2291870144-1000\..\Run: [VideoDownloaderUltimate] C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe (.not file.)
O4 - HKUS\S-1-5-21-2597295877-1529606943-2291870144-1000\..\Run: [SpeedBitVideoAccelerator] . (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe

---\\ Raccourcis Global Startup (1) - 13s
O4 - GS\CommonDesktop [Public]: Media Downloader.lnk . (...) C:\Program Files (x86)\Media Downloader\MediaDownloader.hta =>PUP.Optional.MediaDownloader

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel (21) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©

---\\ Liste des services NT non Microsoft et non désactivés (4) - 0s
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
O23 - Service: KSafe service (KSafeSvc) . (.Kingsoft Corporation - PC Doctor Service.) - C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe
O23 - Service: SpeedBit Update (SBUpd) . (.Speedbit Ltd. - SpeedBit Update Service.) - C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe ©
O23 - Service: VideoAcceleratorService (VideoAcceleratorService) . (.SPEEDbit - .) - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe

---\\ Tâches planifiées en automatique (49) - 12s
[MD5.8C194A201698B4B4F77D974549819D1F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269000] ©
[MD5.00000000000000000000000000000000] [APT] [avast! Emergency Update] (...) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [DriverToolkit Autorun] (...) -- C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe (.not file.) [0] =>PUP.Optional.DriverToolkit
[MD5.00000000000000000000000000000000] [APT] [Express Files Updater] (...) -- C:\Program Files (x86)\ExpressFiles\EFupdater.exe (.not file.) [0] =>PUP.Optional.ExpressFiles
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core] (.Facebook Inc..) -- C:\Users\wajih\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] ©
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA] (.Facebook Inc..) -- C:\Users\wajih\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] ©
[MD5.5BE101CB8BB688839E9203E827684C41] [APT] [KsafeDelay] (.Kingsoft Corporation.) -- C:\Program Files (x86)\Kingsoft\PCDoctor\KSafeTray.exe [742816]
[MD5.4C2B66A8573E38C530F3D6FCF996125A] [APT] [Launch 21769] (.SPEEDbit.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [1517224]
[MD5.C8E6653F8C6B9A92370541B632CCDCE2] [APT] [Opera scheduled Autoupdate 1413941032] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [955512] ©
[MD5.00000000000000000000000000000000] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0]
[MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] ©
[MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] ©
[MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] ©
[MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] ©
[MD5.00000000000000000000000000000000] [APT] [UNELEVATE_29408] (...) -- C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1425\jsdrv.exe (.not file.) [0] =>PUP.Optional.ShopperPro
[MD5.00000000000000000000000000000000] [APT] [YTAUpdate] (...) -- C:\PROGRA~2\YouTube Accelerator\Updater.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [YTAUpdate_logon] (...) -- C:\PROGRA~2\YouTube Accelerator\Updater.exe (.not file.) [0]
[MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{1FDA2FB6-1B31-4EE5-86E5-07AF83D8E670}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] ©
[MD5.01E5B25A973BEA364CA745C3B5658434] [APT] [{6E03B8F3-1541-4160-8515-C8D8CAE50638}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568] ©
[MD5.00000000000000000000000000000000] [APT] [{A79C2DEA-0656-4FA7-9D9F-300F2BF92301}] (...) -- C:\Users\wajih\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) [0]
[MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{F42486E7-D552-485F-82A7-34C507680D67}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] ©
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] ©
[MD5.00000000000000000000000000000000] [APT] [Lenovo\Lenovo Customer Feedback Program 64 35] (...) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe (.not file.) [0]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\Tasks\DriverToolkit Autorun.job [358] =>PUP.Optional.DriverToolkit
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core.job [906] ©
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA.job [928] ©
O39 - APT: KsafeDelay - (.Kingsoft Corporation.) -- C:\Windows\Tasks\KsafeDelay.job [294]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] ©
O39 - APT: avast! Emergency Update - (...) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182]
O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\System32\Tasks\DriverToolkit Autorun [2714] =>PUP.Optional.DriverToolkit
O39 - APT: Express Files Updater - (...) -- C:\Windows\System32\Tasks\Express Files Updater [3082] =>PUP.Optional.ExpressFiles
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core [3536] ©
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA [3904] ©
O39 - APT: KsafeDelay - (.Kingsoft Corporation.) -- C:\Windows\System32\Tasks\KsafeDelay [3166]
O39 - APT: Launch 21769 - (.SPEEDbit.) -- C:\Windows\System32\Tasks\Launch 21769 [2988]
O39 - APT: Opera scheduled Autoupdate 1413941032 - (.Opera Software.) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1413941032 [3856] ©
O39 - APT: RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3382]
O39 - APT: RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3228]
O39 - APT: RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3362]
O39 - APT: RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3206] ©
O39 - APT: RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3340] ©
O39 - APT: RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3206] ©
O39 - APT: RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3340] ©
O39 - APT: UNELEVATE_29408 - (...) -- C:\Windows\System32\Tasks\UNELEVATE_29408 [3162] =>PUP.Optional.ShopperPro
O39 - APT: YTAUpdate - (...) -- C:\Windows\System32\Tasks\YTAUpdate [3468]
O39 - APT: YTAUpdate_logon - (...) -- C:\Windows\System32\Tasks\YTAUpdate_logon [3282]

---\\ Logiciels installés (89) - 14s
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client ©
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey ©
O42 - Logiciel: Windows Media Player 64-bit Plug-in Fix - (...) [HKLM][64Bits] -- {00a8ce68-cb2e-4652-aecd-c05c0d9d53a7}.sdb
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F} ©
O42 - Logiciel: IB Updater 2.0.0.110 - (.IncrediBar.) [HKLM][64Bits] -- {336D0C35-8A85-403a-B9D2-65C292C39087}_is1 =>PUP.Optional.InstallBrain
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {439760BC-7737-4386-9B1D-A90A3E8A22EA} ©
O42 - Logiciel: LifeBook Application Panel - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {6226477E-444F-4DFE-BA19-9F4F7D4565BC} ©
O42 - Logiciel: Power Saving Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {7254349B-460B-488F-B4DB-A96100C5C48B} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Bluetooth Feature Pack 5.0 - (.CSR Plc..) [HKLM][64Bits] -- {B2F4C332-2359-4ADE-AF0C-C631768BBB89}
O42 - Logiciel: WinZip 18.5 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240E3} ©
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6} ©
O42 - Logiciel: Fujitsu System Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {E8A5B78F-4456-4511-AB3D-E7BFFB974A7A} ©
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI ©
O42 - Logiciel: AutocompletePro - (...) [HKLM][64Bits] -- AutocompletePro3_is1 =>PUP.Optional.PredictAd
O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (...) [HKLM][64Bits] -- ffdshow_is1
O42 - Logiciel: FilesFrog Update Checker - (...) [HKLM][64Bits] -- FilesFrog Update Checker
O42 - Logiciel: Frim 2.0 - (.ООО 'MoCo Media'.) [HKLM][64Bits] -- Frim
O42 - Logiciel: Great Find - (.Great Find.) [HKLM][64Bits] -- Great Find =>PUP.Optional.GreatFind
O42 - Logiciel: Haali Media Splitter - (...) [HKLM][64Bits] -- HaaliMkx
O42 - Logiciel: Fujitsu Display Manager - (...) [HKLM][64Bits] -- InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691}
O42 - Logiciel: LifeBook Application Panel - (...) [HKLM][64Bits] -- InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}
O42 - Logiciel: Power Saving Utility - (...) [HKLM][64Bits] -- InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B}
O42 - Logiciel: Fujitsu Hotkey Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387} ©
O42 - Logiciel: Fujitsu System Extension Utility - (...) [HKLM][64Bits] -- InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}
O42 - Logiciel: Fujitsu MobilityCenter Extension Utility - (...) [HKLM][64Bits] -- InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}
O42 - Logiciel: Kingsoft PC Doctor 3.7.0.47 - (.Kingsoft PC Doctor.) [HKLM][64Bits] -- Kingsoft PC Doctor
O42 - Logiciel: LayoutsExpress - (...) [HKLM][64Bits] -- LayoutsExpress =>Toolbar.LayoutExpress
O42 - Logiciel: Media Downloader version 1.5 - (.Media Downloader.) [HKLM][64Bits] -- Media Downloader_is1 =>PUP.Optional.MediaDownloader
O42 - Logiciel: Mozilla Firefox 41.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 41.0.2 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: Opera Stable 32.0.1948.69 - (.Opera Software.) [HKLM][64Bits] -- Opera 32.0.1948.69 ©
O42 - Logiciel: SpeedBit Video Accelerator - (.SpeedBit Ltd..) [HKLM][64Bits] -- SpeedBit Video Accelerator ©
O42 - Logiciel: SpeedBit Video Downloader - (.SPEEDbit Ltd..) [HKLM][64Bits] -- SPEEDbit Video Downloader ©
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player ©
O42 - Logiciel: WebcamMax - (.COOLWAREMAX.) [HKLM][64Bits] -- WebcamMax
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp ©
O42 - Logiciel: WindowsMangerProtect20.0.0.1013 - (.WindowsProtect LIMITED.) [HKLM][64Bits] -- WindowsMangerProtect =>PUP.Optional.WpManager
O42 - Logiciel: Xvid Video Codec - (.Xvid Team.) [HKLM][64Bits] -- Xvid Video Codec 1.3.1 ©
O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM][64Bits] -- Yahoo! Messenger ©
O42 - Logiciel: Yahoo! Software Update - (...) [HKLM][64Bits] -- Yahoo! Software Update
O42 - Logiciel: Feedback Tool - (.Microsoft Corporation.) [HKLM][64Bits] -- {13A5E785-5197-4EAD-8EE3-D660271E49BC} ©
O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM][64Bits] -- {20400dbd-e6db-45b8-9b6b-1dd7033818ec} ©
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} ©
O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM][64Bits] -- {2348b586-c9ae-46ce-936c-a68e9426e214} ©
O42 - Logiciel: Java 8 Update 45 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218045F0} ©
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} ©
O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM][64Bits] -- {33cf58f5-48d8-4575-83d6-96f574e4d83a} ©
O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM][64Bits] -- {4D43D635-6FDA-4fa5-AA9B-23CF73D058EA} ©
O42 - Logiciel: Complitly - (.Complitly.) [HKLM][64Bits] -- {4FFBB818-B13C-11E0-931D-B2664824019B}_is1 =>PUP.Optional.PredictAd
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} ©
O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM][64Bits] -- {585fd044-f3c6-4c09-a58c-a3e4e4c916be} ©
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ©
O42 - Logiciel: Nero CoverDesigner - (.Nero AG.) [HKLM][64Bits] -- {62ac81f6-bdd3-4110-9d36-3e9eaab40999} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} ©
O42 - Logiciel: Battery Optimizer - (.ReviverSoft.) [HKLM][64Bits] -- {67E321F8-2A04-44AB-8F28-A88A5F66732A} ©
O42 - Logiciel: Windows Media Player Plus! 2.6 - (.BM-productions.) [HKLM][64Bits] -- {67E4EF06-E0D6-42E0-A2BA-67199B0143FB}_is1 ©
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ©
O42 - Logiciel: Skype™ 7.12 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} ©
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748ac8c-18e3-43bb-959b-088faea16fb2} ©
O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {7829db6f-a066-4e40-8912-cb07887c20bb} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM][64Bits] -- {869200db-287a-4dc0-b02b-2b6787fbcd4c} ©
O42 - Logiciel: Feedback Tool - (.Microsoft Corporation.) [HKLM][64Bits] -- {90024193-9F13-4877-89D5-A1CDF0CBBF28} ©
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} ©
O42 - Logiciel: Conseiller de mise à niveau vers Windows 7 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D10CB57-B085-44c3-B435-2D193BA153F0} ©
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {b2ec4a38-b545-4a00-8214-13fe0e915e6d} ©
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} ©
O42 - Logiciel: Fujitsu Hotkey Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {BA0CC975-682B-4678-A35C-05E607F36387} ©
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {bd5ca0da-71ad-43da-b19e-6eee0c9adc9a} ©
O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} ©
O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {cc019e3f-59d2-4486-8d4b-878105b62a71} ©
O42 - Logiciel: Nero CoverDesigner Help - (.Nero AG.) [HKLM][64Bits] -- {ce96f5a5-584d-4f8f-aa3e-9baed413db72} ©
O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {e5c7d048-f9b4-4219-b323-8bdb01a2563d} ©
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {e8a80433-302b-4ff1-815d-fcc8eac482ff} ©
O42 - Logiciel: Data Client - (.DistributedData.net.) [HKLM][64Bits] -- {E8FE4389-9EC5-42A0-8FEA-ED530145205D}
O42 - Logiciel: SystemDiagnostics - (.Fujitsu Technology Solutions.) [HKLM][64Bits] -- {EF59DB7F-7426-426E-B862-7031F83ED304} ©
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} ©
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {f4041dce-3fe1-4e18-8a9e-9de65231ee36} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} ©
O42 - Logiciel: Nero BurnRights Help - (.Nero AG.) [HKLM][64Bits] -- {f6bdd7c5-89ed-4569-9318-469aa9732572} ©
O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM][64Bits] -- {fbcdfd61-7dcf-4e71-9226-873ba0053139} ©
O42 - Logiciel: fTalk - (.Koyote-Lab Inc.) [HKCU][64Bits] -- fTalk
O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- SkyDriveSetup.exe ©
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer ©
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU][64Bits] -- Winamp Detect ©

---\\ HKCU & HKLM Software Keys (238) - 14s
HKLM\SOFTWARE\Wow6432Node\5e28fd0b66fb849 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Audible
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\BM-productions
HKLM\SOFTWARE\Wow6432Node\CDDB
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Default Tab =>Toolbar.Agent
HKLM\SOFTWARE\Wow6432Node\DistributedData.net
HKLM\SOFTWARE\Wow6432Node\ej-technologies
HKLM\SOFTWARE\Wow6432Node\Eset
HKLM\SOFTWARE\Wow6432Node\ExpressFiles =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\Wow6432Node\Freemake
HKLM\SOFTWARE\Wow6432Node\Fujitsu
HKLM\SOFTWARE\Wow6432Node\GN2
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\GreatFind =>PUP.Optional.GreatFind
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\IB Updater =>PUP.Optional.InstallBrain
HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\IncrediMail
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager
HKLM\SOFTWARE\Wow6432Node\IPCameraDSFilter
HKLM\SOFTWARE\Wow6432Node\IPCameraDSFilterRTSP
HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware =>PUP.Optional.IsStart
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\KasperskyLab
HKLM\SOFTWARE\Wow6432Node\KSafe
HKLM\SOFTWARE\Wow6432Node\Lavasoft
HKLM\SOFTWARE\Wow6432Node\LEAD Technologies, Inc.
HKLM\SOFTWARE\Wow6432Node\Lenovo
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater
HKLM\SOFTWARE\Wow6432Node\MimarSinan
HKLM\SOFTWARE\Wow6432Node\Minibar =>PUP.Optional.Minibar
HKLM\SOFTWARE\Wow6432Node\Mircrosoft
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing
HKLM\SOFTWARE\Wow6432Node\Nullsoft
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Odigo
HKLM\SOFTWARE\Wow6432Node\PCWinSoft
HKLM\SOFTWARE\Wow6432Node\PopularScreensavers
HKLM\SOFTWARE\Wow6432Node\PopularScreensavers_7i
HKLM\SOFTWARE\Wow6432Node\PTECH
HKLM\SOFTWARE\Wow6432Node\RBPlus
HKLM\SOFTWARE\Wow6432Node\RealNetworks
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Reg
HKLM\SOFTWARE\Wow6432Node\ReviverSoft
HKLM\SOFTWARE\Wow6432Node\RichFX
HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro
HKLM\SOFTWARE\Wow6432Node\SimplyGen =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\SiteSee
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SoftAssist
HKLM\SOFTWARE\Wow6432Node\SpeedBit
HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\supWPM =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\TuneUp
HKLM\SOFTWARE\Wow6432Node\Uniblue =>.Superfluous.Uniblue
HKLM\SOFTWARE\Wow6432Node\VDownloader
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\WeatherBlink =>PUP.Optional.MindSpark
HKLM\SOFTWARE\Wow6432Node\WebcamMax
HKLM\SOFTWARE\Wow6432Node\WebToGo
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\Winner Casino
HKLM\SOFTWARE\Wow6432Node\wLite
HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp.
HKLM\SOFTWARE\Wow6432Node\Xvid Team
HKLM\SOFTWARE\Wow6432Node\Yahoo
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\3Dsolar
HKCU\SOFTWARE\5e28fd0b66fb849 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Affinix
HKCU\SOFTWARE\AlterGeo
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\AutocompletePro =>PUP.Optional.PredictAd
HKCU\SOFTWARE\AutocompleteProBHO =>PUP.Optional.PredictAd
HKCU\SOFTWARE\Avg
HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution
HKCU\SOFTWARE\Badoo
HKCU\SOFTWARE\Binary Noise
HKCU\SOFTWARE\BM-productions
HKCU\SOFTWARE\BrowserTemp
HKCU\SOFTWARE\Cambridge Silicon Radio
HKCU\SOFTWARE\Camfrog
HKCU\SOFTWARE\CDDB
HKCU\SOFTWARE\Complitly =>PUP.Optional.PredictAd
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Datamngr =>PUP.Optional.Datamngr
HKCU\SOFTWARE\DataMngr_Toolbar =>PUP.Optional.Datamngr
HKCU\SOFTWARE\Datastead
HKCU\SOFTWARE\Default Tab =>Toolbar.Agent
HKCU\SOFTWARE\DistributedData
HKCU\SOFTWARE\DownloadAstro
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\DriverToolkit =>PUP.Optional.DriverToolkit
HKCU\SOFTWARE\ej-technologies
HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout
HKCU\SOFTWARE\FreeDownloadManager.ORG
HKCU\SOFTWARE\Freemake
HKCU\SOFTWARE\fTalk
HKCU\SOFTWARE\Fujitsu
HKCU\SOFTWARE\FunWebProducts =>PUP.Optional.MyWebSearch
HKCU\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\GN2
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GotClip Downloader
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HookNetwork
HKCU\SOFTWARE\HowardMedia
HKCU\SOFTWARE\IM
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster
HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\IPCameraDSFilter
HKCU\SOFTWARE\IPCameraDSFilterRTSP
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\KasperskyLab
HKCU\SOFTWARE\Kingsoft
HKCU\SOFTWARE\KSafe
HKCU\SOFTWARE\Lenovo
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Link64
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\ManyCam
HKCU\SOFTWARE\Massive Media
HKCU\SOFTWARE\McAfee
HKCU\SOFTWARE\MimarSinan
HKCU\SOFTWARE\Minibar =>PUP.Optional.Minibar
HKCU\SOFTWARE\mIRC
HKCU\SOFTWARE\Moco
HKCU\SOFTWARE\MoveNetworks
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MySpace
HKCU\SOFTWARE\NCH Software
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nico Mak Computing
HKCU\SOFTWARE\Nitro PDF
HKCU\SOFTWARE\Norton
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PopularScreensavers_7i
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Reg
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\SBCONVERT
HKCU\SOFTWARE\SecureMedia
HKCU\SOFTWARE\ShiningMorning
HKCU\SOFTWARE\Skyhook Wireless
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\SolidDocuments
HKCU\SOFTWARE\Somoto =>PUP.Optional.MegaSearch
HKCU\SOFTWARE\SpeedBit
HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Tific
HKCU\SOFTWARE\Toggle
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\TuneUp
HKCU\SOFTWARE\undefined
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\USyndication =>PUP.Optional.USyndication
HKCU\SOFTWARE\usyndication.com =>PUP.Optional.USyndication
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\WeatherBlink =>PUP.Optional.MindSpark
HKCU\SOFTWARE\webcam 7
HKCU\SOFTWARE\webcamXP
HKCU\SOFTWARE\Winamp
HKCU\SOFTWARE\Winner Casino
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WinZip Computing
HKCU\SOFTWARE\wLite
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\Yahoo
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Fun Web Products =>PUP.Optional.MyWebSearch
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\PopularScreensavers_7i
HKCU\SOFTWARE\AppDataLow\Software\RealNetworks
HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKCU\SOFTWARE\AppDataLow\Software\Unity
HKCU\SOFTWARE\AppDataLow\Software\WeatherBlink =>PUP.Optional.MindSpark
HKCU\SOFTWARE\AppDataLow\Software\Yahoo

---\\ Contenu des dossiers Programmes (669) - 34s
O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\ABC 3GP Converter
O43 - CFD: 03/02/2011 - [] D -- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 17/05/2015 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\AutocompletePro =>PUP.Optional.PredictAd
O43 - CFD: 25/10/2013 - [] D -- C:\Program Files (x86)\AVG
O43 - CFD: 25/10/2013 - [] D -- C:\Program Files (x86)\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
O43 - CFD: 31/01/2012 - [0] D -- C:\Program Files (x86)\Camfrog
O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 22/11/2011 - [] D -- C:\Program Files (x86)\Complitly =>PUP.Optional.PredictAd
O43 - CFD: 08/04/2012 - [] D -- C:\Program Files (x86)\Conduit
O43 - CFD: 14/06/2014 - [] D -- C:\Program Files (x86)\DAP
O43 - CFD: 15/08/2014 - [] D -- C:\Program Files (x86)\DistributedData
O43 - CFD: 09/11/2014 - [] D -- C:\Program Files (x86)\DriverToolkit =>PUP.Optional.DriverToolkit
O43 - CFD: 04/02/2011 - [] D -- C:\Program Files (x86)\Feedback Tool
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\ffdshow
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\FilesFrog Update Checker =>PUP.Optional.MegaSearch
O43 - CFD: 24/10/2013 - [] D -- C:\Program Files (x86)\Free Download Manager
O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Freemake
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Fujitsu
O43 - CFD: 15/07/2014 - [] D -- C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 30/06/2014 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 16/09/2015 - [] D -- C:\Program Files (x86)\Great Find =>PUP.Optional.GreatFind
O43 - CFD: 24/10/2013 - [] D -- C:\Program Files (x86)\GUM1CB4.tmp
O43 - CFD: 20/02/2013 - [] D -- C:\Program Files (x86)\GUMFDFD.tmp
O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Haali
O43 - CFD: 11/01/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 17/05/2015 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 19/08/2014 - [] D -- C:\Program Files (x86)\Kingsoft
O43 - CFD: 08/11/2012 - [] D -- C:\Program Files (x86)\LayoutsExpress =>Toolbar.LayoutExpress
O43 - CFD: 01/11/2015 - [0] D -- C:\Program Files (x86)\Lenovo
O43 - CFD: 31/10/2015 - [] D -- C:\Program Files (x86)\Media Downloader =>PUP.Optional.MediaDownloader
O43 - CFD: 14/03/2012 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 16/05/2015 - [] D -- C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 14/08/2015 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Microsoft SkyDrive
O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
O43 - CFD: 22/12/2010 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 08/11/2012 - [] D -- C:\Program Files (x86)\Minibar =>PUP.Optional.Minibar
O43 - CFD: 13/06/2014 - [] D -- C:\Program Files (x86)\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 16/10/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 16/10/2015 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 16/12/2010 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 28/02/2012 - [0] D -- C:\Program Files (x86)\MySpace
O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 24/01/2015 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information
O43 - CFD: 19/10/2015 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\PopularScreensavers
O43 - CFD: 01/05/2014 - [] D -- C:\Program Files (x86)\Real
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 16/11/2011 - [] D -- C:\Program Files (x86)\Safari
O43 - CFD: 13/11/2011 - [] D -- C:\Program Files (x86)\ScreenCamera
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\SearchPredict
O43 - CFD: 13/08/2014 - [0] D -- C:\Program Files (x86)\SiteLookup =>PUP.Optional.SiteLookup
O43 - CFD: 17/10/2015 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 14/08/2014 - [0] D -- C:\Program Files (x86)\Software Informer
O43 - CFD: 13/08/2014 - [] D -- C:\Program Files (x86)\Songbird
O43 - CFD: 02/11/2015 - [] D -- C:\Program Files (x86)\SpeedBit Video Accelerator
O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\SPEEDbit Video Downloader
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab
O43 - CFD: 22/11/2010 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 01/05/2011 - [] D -- C:\Program Files (x86)\Uniblue =>.Superfluous.Uniblue
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 29/03/2011 - [] D -- C:\Program Files (x86)\VDownloader
O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 25/10/2012 - [0] D -- C:\Program Files (x86)\Vittalia =>PUP.Optional.Vittalia
O43 - CFD: 26/08/2011 - [] D -- C:\Program Files (x86)\Webcamfirst test -v4-
O43 - CFD: 26/01/2015 - [] D -- C:\Program Files (x86)\WebcamMax
O43 - CFD: 31/01/2012 - [] D -- C:\Program Files (x86)\webcamXP 5
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\Webplayer Setup =>PUP.Optional.SocialSkinz
O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Winamp
O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Winamp Detect
O43 - CFD: 13/07/2013 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 11/04/2013 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/06/2015 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Windows Media Player Plus!
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 12/10/2012 - [0] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 24/01/2015 - [] D -- C:\Program Files (x86)\WSE_Vosteran =>PUP.Optional.Vosteran
O43 - CFD: 18/04/2014 - [] D -- C:\Program Files (x86)\Xvid
O43 - CFD: 01/10/2014 - [] D -- C:\Program Files (x86)\Yahoo!
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\YouTube Accelerator
O43 - CFD: 18/10/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 22/12/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Feature Pack 5.0
O43 - CFD: 15/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Distributed Data
O43 - CFD: 26/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
O43 - CFD: 14/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frim
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu Display Manager
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 26/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
O43 - CFD: 11/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft PC Doctor
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 31/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Downloader =>PUP.Optional.MediaDownloader
O43 - CFD: 14/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 14/11/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Power Saving Utility
O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 22/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft
O43 - CFD: 21/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenCamera
O43 - CFD: 17/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 02/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedBit Video Accelerator
O43 - CFD: 01/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SPEEDbit Video Downloader
O43 - CFD: 17/05/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tableau d’applications LifeBook
O43 - CFD: 10/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 06/11/2014 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visicom Media
O43 - CFD: 26/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebcamMax
O43 - CFD: 31/01/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\webcamXP 5
O43 - CFD: 04/06/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
O43 - CFD: 16/08/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 01/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
O43 - CFD: 18/04/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
O43 - CFD: 02/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
O43 - CFD: 30/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator
O43 - CFD: 30/11/2013 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 21/02/2011 - [] D -- C:\ProgramData\Alwil Software
O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\APN =>Toolbar.Ask
O43 - CFD: 30/09/2011 - [] D -- C:\ProgramData\Apple
O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 10/11/2014 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 25/10/2013 - [] D -- C:\ProgramData\AVG2013
O43 - CFD: 25/10/2012 - [] D -- C:\ProgramData\Avira
O43 - CFD: 02/02/2012 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 02/10/2013 - [] D -- C:\ProgramData\BitGuard =>PUP.Optional.BitGuard
O43 - CFD: 25/08/2012 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\C__Program Files (x86)_WebcamMax_wcmmon.exe
O43 - CFD: 26/01/2015 - [] D -- C:\ProgramData\C__Program Files (x86)_WebcamMax_WebcamMax.exe
O43 - CFD: 07/10/2015 - [] D -- C:\ProgramData\d64c6aa4-9b30-4b06-8859-0cfa31bd50dc
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 13/01/2013 - [] D -- C:\ProgramData\Free Download Manager
O43 - CFD: 01/11/2015 - [0] D -- C:\ProgramData\Freemake
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Fujitsu
O43 - CFD: 27/09/2013 - [] D -- C:\ProgramData\IBUpdaterService =>PUP.Optional.InstallBrain
O43 - CFD: 10/11/2014 - [] D -- C:\ProgramData\IePluginServices =>Trojan.SProtector
O43 - CFD: 24/07/2015 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 10/11/2011 - [0] D -- C:\ProgramData\IVS
O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\Kingsoft
O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\KSafe
O43 - CFD: 03/12/2012 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 16/03/2011 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 25/10/2013 - [] D -- C:\ProgramData\MFAData
O43 - CFD: 11/02/2015 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 22/12/2010 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 12/11/2012 - [] D -- C:\ProgramData\Microsoft SkyDrive
O43 - CFD: 25/10/2012 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 19/08/2015 - [] D -- C:\ProgramData\MWinManProM
O43 - CFD: 26/08/2011 - [] D -- C:\ProgramData\NCH Software
O43 - CFD: 14/11/2012 - [] D -- C:\ProgramData\Nero
O43 - CFD: 04/06/2011 - [] D -- C:\ProgramData\Nitro PDF
O43 - CFD: 17/05/2015 - [] D -- C:\ProgramData\Norton
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 17/05/2015 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Partner =>Toolbar.YahooPartner
O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\Real
O43 - CFD: 10/11/2013 - [0] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 04/05/2015 - [0] D -- C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro
O43 - CFD: 17/10/2015 - [] D -- C:\ProgramData\Skype
O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Skype Extras
O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\SpeedBit
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 26/11/2010 - [] D -- C:\ProgramData\Sun
O43 - CFD: 11/01/2015 - [] D -- C:\ProgramData\SUPPORTDIR
O43 - CFD: 01/11/2015 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 21/10/2014 - [] D -- C:\ProgramData\TuneUp Software
O43 - CFD: 06/11/2014 - [0] D -- C:\ProgramData\Visicom Media
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\VOWSoft
O43 - CFD: 18/03/2015 - [] D -- C:\ProgramData\WebcamMax
O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\webcamXP 5
O43 - CFD: 01/10/2014 - [] D -- C:\ProgramData\WinZip
O43 - CFD: 02/01/2014 - [] D -- C:\ProgramData\Yahoo!
O43 - CFD: 21/10/2014 - [0] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\{E88F004C-B80D-D1CA-098B-A148D90972C6}
O43 - CFD: 21/10/2014 - [0] SHD -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 30/11/2013 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 19/08/2014 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\Common Files\d64c6aa4-9b30-4b06-8859-0cfa31bd50dc
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Fujitsu
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 14/06/2014 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 15/08/2014 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Common Files\PC Tools
O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 30/11/2013 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 17/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 13/07/2011 - [] D -- C:\Program Files (x86)\Common Files\SpeedBit
O43 - CFD: 21/02/2011 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 10/11/2011 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 26/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 10/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Adobe
O43 - CFD: 09/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Apple Computer
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\AVG2013
O43 - CFD: 02/02/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Camfrog
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Complitly =>PUP.Optional.PredictAd
O43 - CFD: 23/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\CyberLink
O43 - CFD: 24/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\C__Program Files (x86)_WebcamMax_wcmmon.exe
O43 - CFD: 26/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\C__Program Files (x86)_WebcamMax_WebcamMax.exe
O43 - CFD: 14/03/2012 - [0] D -- C:\Users\wajih\AppData\Roaming\DMCache
O43 - CFD: 26/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\EQATEC Analytics
O43 - CFD: 19/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Frim
O43 - CFD: 08/04/2012 - [] D -- C:\Users\wajih\AppData\Roaming\GetRightToGo
O43 - CFD: 26/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Google
O43 - CFD: 22/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Identities
O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\IDM
O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\KastorAllVideoDownloader
O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\kingsoft
O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\KSafe
O43 - CFD: 26/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Macromedia
O43 - CFD: 03/12/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Malwarebytes
O43 - CFD: 26/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\ManyDownloader
O43 - CFD: 24/12/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Media Player Classic
O43 - CFD: 23/11/2013 - [] SD -- C:\Users\wajih\AppData\Roaming\Microsoft
O43 - CFD: 24/03/2012 - [] D -- C:\Users\wajih\AppData\Roaming\mIRC
O43 - CFD: 11/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Mozilla
O43 - CFD: 06/09/2011 - [] D -- C:\Users\wajih\AppData\Roaming\MySpace
O43 - CFD: 12/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Nero
O43 - CFD: 21/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Nitro PDF
O43 - CFD: 30/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\No Company Name
O43 - CFD: 15/03/2012 - [] D -- C:\Users\wajih\AppData\Roaming\ooVoo Details
O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy
O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Opera Software
O43 - CFD: 01/05/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Paltalk
O43 - CFD: 21/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\PhotoScape
O43 - CFD: 30/11/2011 - [] D -- C:\Users\wajih\AppData\Roaming\RBotPlus
O43 - CFD: 15/06/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Real
O43 - CFD: 12/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Registry Mechanic
O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\ReviverSoft
O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\RHEng =>PUP.Optional.Conduit
O43 - CFD: 27/09/2013 - [] D -- C:\Users\wajih\AppData\Roaming\RocketPDF
O43 - CFD: 16/09/2015 - [] D -- C:\Users\wajih\AppData\Roaming\RPEng
O43 - CFD: 13/08/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\SimilarAddon =>PUP.Optional.SimilarAddon
O43 - CFD: 17/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Skype
O43 - CFD: 14/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\skypePM
O43 - CFD: 14/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Software Informer
O43 - CFD: 13/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Songbird2
O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\SpeedAnalysis3 =>PUP.Optional.SpeedAnalysis
O43 - CFD: 14/06/2014 - [] D -- C:\Users\wajih\AppData\Roaming\SpeedBit
O43 - CFD: 01/10/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\Systweak =>PUP.Optional.Systweak
O43 - CFD: 10/01/2011 - [0] D -- C:\Users\wajih\AppData\Roaming\Temp
O43 - CFD: 03/02/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Tific
O43 - CFD: 17/01/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Todae
O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\TuneUp Software
O43 - CFD: 01/05/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Uniblue =>.Superfluous.Uniblue
O43 - CFD: 25/08/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Unity
O43 - CFD: 26/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Visicom Media
O43 - CFD: 17/05/2015 - [] D -- C:\Users\wajih\AppData\Roaming\vlc
O43 - CFD: 26/08/2011 - [] D -- C:\Users\wajih\AppData\Roaming\WebcamMax
O43 - CFD: 21/09/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\WebExtend
O43 - CFD: 27/09/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Winamp
O43 - CFD: 12/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\WinRAR
O43 - CFD: 24/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran
O43 - CFD: 28/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Yahoo!
O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Roaming\ZHP
O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\zulagames
O43 - CFD: 16/06/2015 - [] D -- C:\Users\wajih\AppData\Local\Adobe
O43 - CFD: 10/11/2011 - [] D -- C:\Users\wajih\AppData\Local\APN
O43 - CFD: 30/09/2011 - [] D -- C:\Users\wajih\AppData\Local\Apple
O43 - CFD: 09/10/2011 - [] D -- C:\Users\wajih\AppData\Local\Apple Computer
O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Application Data
O43 - CFD: 04/02/2011 - [] D -- C:\Users\wajih\AppData\Local\Apps
O43 - CFD: 29/07/2012 - [] D -- C:\Users\wajih\AppData\Local\Ares
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Avg2013
O43 - CFD: 27/09/2013 - [] D -- C:\Users\wajih\AppData\Local\avgchrome
O43 - CFD: 13/06/2014 - [] D -- C:\Users\wajih\AppData\Local\cache
O43 - CFD: 08/04/2012 - [0] D -- C:\Users\wajih\AppData\Local\Conduit
O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Local\CrashDumps
O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 08/04/2012 - [] D -- C:\Users\wajih\AppData\Local\CRE
O43 - CFD: 29/10/2014 - [] D -- C:\Users\wajih\AppData\Local\CyberLink
O43 - CFD: 26/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\Deployment
O43 - CFD: 02/07/2014 - [] D -- C:\Users\wajih\AppData\Local\Diagnostics
O43 - CFD: 06/11/2014 - [0] D -- C:\Users\wajih\AppData\Local\DriverToolkit =>PUP.Optional.DriverToolkit
O43 - CFD: 05/11/2014 - [] D -- C:\Users\wajih\AppData\Local\ElevatedDiagnostics
O43 - CFD: 14/06/2014 - [] SHD -- C:\Users\wajih\AppData\Local\EmieSiteList
O43 - CFD: 14/06/2014 - [] SHD -- C:\Users\wajih\AppData\Local\EmieUserList
O43 - CFD: 12/01/2015 - [] D -- C:\Users\wajih\AppData\Local\Facebook
O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Local\FreemakeVideoConverter
O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Local\fTalk
O43 - CFD: 26/10/2012 - [] D -- C:\Users\wajih\AppData\Local\GamePlayLabs Plugin =>PUP.Optional.GamePlayLabs
O43 - CFD: 30/06/2014 - [] D -- C:\Users\wajih\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 26/10/2012 - [] D -- C:\Users\wajih\AppData\Local\Google
O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Historique
O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Local\KSafe
O43 - CFD: 01/11/2015 - [0] D -- C:\Users\wajih\AppData\Local\Lenovo
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Macromedia
O43 - CFD: 11/04/2013 - [] D -- C:\Users\wajih\AppData\Local\MagicCamera
O43 - CFD: 18/09/2014 - [] D -- C:\Users\wajih\AppData\Local\Massive Media
O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Local\Media Get LLC =>PUP.Optional.MediaGet
O43 - CFD: 25/06/2011 - [] D -- C:\Users\wajih\AppData\Local\MediaGet2 =>PUP.Optional.MediaGet
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\MFAData
O43 - CFD: 15/06/2014 - [] D -- C:\Users\wajih\AppData\Local\Microsoft
O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Local\Microsoft Corporation
O43 - CFD: 20/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Microsoft Games
O43 - CFD: 22/11/2010 - [0] D -- C:\Users\wajih\AppData\Local\Microsoft Help
O43 - CFD: 08/11/2012 - [] D -- C:\Users\wajih\AppData\Local\Minibar =>PUP.Optional.Minibar
O43 - CFD: 13/06/2014 - [] D -- C:\Users\wajih\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Mozilla
O43 - CFD: 04/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\OpenCandy =>PUP.Optional.OpenCandy
O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Local\Opera Software
O43 - CFD: 01/05/2011 - [0] D -- C:\Users\wajih\AppData\Local\PackageAware =>PUP.Optional.BearShare
O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Procaster
O43 - CFD: 01/02/2013 - [] D -- C:\Users\wajih\AppData\Local\Programs
O43 - CFD: 22/11/2010 - [] D -- C:\Users\wajih\AppData\Local\Seven Zip
O43 - CFD: 28/02/2014 - [] D -- C:\Users\wajih\AppData\Local\Skype
O43 - CFD: 13/08/2014 - [] D -- C:\Users\wajih\AppData\Local\Songbird2
O43 - CFD: 26/05/2011 - [] D -- C:\Users\wajih\AppData\Local\Sun
O43 - CFD: 03/02/2011 - [] D -- C:\Users\wajih\AppData\Local\Symantec
O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Local\Temp
O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Temporary Internet Files
O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Local\TuneUp Software
O43 - CFD: 26/07/2014 - [] D -- C:\Users\wajih\AppData\Local\Unity
O43 - CFD: 30/01/2011 - [] D -- C:\Users\wajih\AppData\Local\VirtualStore
O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Visicron
O43 - CFD: 31/07/2012 - [] D -- C:\Users\wajih\AppData\Local\Windows Live
O43 - CFD: 01/10/2014 - [] D -- C:\Users\wajih\AppData\Local\WinZip
O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\Yahoo
O43 - CFD: 16/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{00A60F66-F8EA-4CCB-859F-A79ABEB5379A}
O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{013CFF1A-35CF-4A76-AD41-F74987744A13}
O43 - CFD: 08/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0303A524-3CA5-43E4-BEB2-7DF61283E25C}
O43 - CFD: 12/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0343C01D-B4EE-4238-BCCB-C7DAD5CEB804}
O43 - CFD: 22/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{05C8332C-260C-4FE1-B589-84D680EEA6B9}
O43 - CFD: 07/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0683A14D-B952-4122-9EEC-27D617E3D648}
O43 - CFD: 12/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{06D73832-6074-4BF3-A34B-88647028B3D0}
O43 - CFD: 15/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{06EC4CDF-C57A-4775-ADE7-D9AC7324632B}
O43 - CFD: 06/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{06F8125A-90E2-440E-A68B-8A1A12472744}
O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{071C5503-5CB4-4811-AA6A-EA1B211421D8}
O43 - CFD: 10/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{072022AC-BCFF-4A6C-8808-DC89610C3E5E}
O43 - CFD: 20/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{078C44B1-ADD5-4ACA-9346-524F8DF3B0A0}
O43 - CFD: 03/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{078E8B98-7A47-46D8-8C17-B86AEA0A565D}
O43 - CFD: 06/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0988CB29-EE28-4FE3-93CD-D4EDE1794EA9}
O43 - CFD: 30/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0BA7DFEE-31F4-4215-96C0-CF7B25DD727A}
O43 - CFD: 27/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0BB43A56-6E7D-41EE-8F8A-A92C0B3DBFF1}
O43 - CFD: 16/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0C0E4B8B-9137-48F3-AB71-10750C8F9BF5}
O43 - CFD: 08/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0C4FDF57-03C4-4D93-9CFD-B96C3A59C3EE}
O43 - CFD: 09/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0C744B96-7921-4B49-A694-C4E6CEEFEF70}
O43 - CFD: 31/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0D4AB388-45B2-4831-94B0-EF780D9AFB44}
O43 - CFD: 21/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0D5264A9-12A5-45A1-8C0E-829779C946E4}
O43 - CFD: 09/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0EC62D36-FE2C-4D00-BE13-C19DC0DB5F00}
O43 - CFD: 19/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0EDBE34F-AA08-4E8F-9542-6D800CE6271F}
O43 - CFD: 24/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{100B62E1-6ADF-42E9-804E-11DE49E35C05}
O43 - CFD: 18/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{113126A6-8663-4D18-88B2-B9D75E26804D}
O43 - CFD: 27/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1147FEEC-6C52-47EB-992E-5F9BC940269A}
O43 - CFD: 22/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1252A7F8-237C-41B1-8742-11058D75591C}
O43 - CFD: 04/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{125A31A3-4908-42AF-BD16-8DB609BA40E0}
O43 - CFD: 29/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{12FED009-D413-4DEC-8ADF-D428EA7B9C04}
O43 - CFD: 04/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{137B1676-A799-441B-9A8D-15F04FBA411A}
O43 - CFD: 01/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{15AE98C9-8C9B-484A-89D0-F33AA2741F8C}
O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{1620E6B8-A9F0-42DA-8511-D9EB1BB0776D}
O43 - CFD: 19/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{18A83CC1-632E-44E4-AF71-7B27BA0E030B}
O43 - CFD: 25/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{18F074D0-D0AC-4044-9AA7-D2B2E82ADF91}
O43 - CFD: 26/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1AB399A2-5B34-45E0-84B1-F79AF8DC92FE}
O43 - CFD: 03/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1BF112FA-CBFF-491C-93A8-6DFBCE169BE7}
O43 - CFD: 29/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{1C523FE4-4538-49E0-A6C9-DC81677E5A4C}
O43 - CFD: 27/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1CB734C5-53E1-4BD4-8214-3D4BCB2187FB}
O43 - CFD: 27/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1E4EC605-CDE1-4BA4-9D3A-16086155CAB3}
O43 - CFD: 06/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1F7E0DE6-311D-4D4C-853C-CFB233693F74}
O43 - CFD: 20/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1F8AD34D-3E28-413E-9CC7-E0A27756225F}
O43 - CFD: 08/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{20106AAE-B418-4111-B95E-FAA7D7AA9D7E}
O43 - CFD: 24/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{21C52948-B09F-47AD-AF38-4793E07ADCEB}
O43 - CFD: 10/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{2268F945-6D6E-42A4-ADD5-6D57E43AAC8E}
O43 - CFD: 02/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{236541C8-638C-4E3C-A625-E17301021409}
O43 - CFD: 22/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{248DCE1C-28BF-4EEE-A718-8D58FCE9E391}
O43 - CFD: 25/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{25E9532B-F24E-4254-8529-EB6FAD2995A8}
O43 - CFD: 28/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{26681244-14BA-4B9E-B91F-9606CB8EC157}
O43 - CFD: 12/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2853FB72-8EF4-4BE3-84B7-5D1CE3E3E519}
O43 - CFD: 07/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{28E8FFD6-E4F4-47E2-AA13-8758C26E6637}
O43 - CFD: 29/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2B41AC7C-9285-42C2-87BF-54FFDAE84CCC}
O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2C344488-77A3-4976-8576-65E74B454DAF}
O43 - CFD: 22/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2D8B3D95-75C0-42E0-9514-832AB8D69DF2}
O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2E21A37C-1100-4FA8-9C92-AC45967A437A}
O43 - CFD: 25/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2F26262A-5C85-4400-A500-71E2A6A0D07F}
O43 - CFD: 05/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{317ED230-C28E-404E-837E-A872E07D10FB}
O43 - CFD: 13/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{318B5E70-5849-4B9F-9A7C-C480FDC291C4}
O43 - CFD: 16/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{31A2C920-0009-4973-A816-FCE746A526C1}
O43 - CFD: 15/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{32E6D709-2416-42FC-95B7-8C52DFD9058B}
O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{355BEB20-D5D1-4D11-BEFF-AF96C1EEF871}
O43 - CFD: 24/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{357EAFEF-2E23-4775-9970-A58495465E55}
O43 - CFD: 31/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{35F15394-6ADA-4751-9045-EA7F26E2C7B6}
O43 - CFD: 16/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{35F7F074-2E22-40F2-AACC-EDB01AE1DC14}
O43 - CFD: 23/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{37623CFA-ED33-4298-ADB6-2794BA47263C}
O43 - CFD: 28/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{376CF178-E50D-4A9D-B064-064D7C242E28}
O43 - CFD: 09/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{38C50524-E4CE-4A3A-BAD7-FB73B42F22CB}
O43 - CFD: 30/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{38C8B3B8-88B7-4E99-A70A-8C3D3E750B6D}
O43 - CFD: 05/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{38EE6778-F52E-473A-8A05-23812FDBB4D7}
O43 - CFD: 21/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{394204D5-F83A-4700-B9FD-BA9EF3001823}
O43 - CFD: 17/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39467295-6320-4918-98B0-52D8B8A77AE1}
O43 - CFD: 29/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39512F48-4F26-4EB4-9418-DDE29231DCF9}
O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39B5DC48-12FB-4BBB-AEC5-6B94BAE45328}
O43 - CFD: 20/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3B9333F6-8FB9-40B8-A1E8-B7F680B10443}
O43 - CFD: 04/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3C639A89-CAFB-4FB8-86D2-A12F52B053E7}
O43 - CFD: 06/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3C721FAB-B0A3-4AA2-B039-47BA46C5C14B}
O43 - CFD: 03/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3D282713-6033-48B1-885E-AA2210420392}
O43 - CFD: 20/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3E3BEBF0-97DB-4D11-B2FC-44A36710A7B3}
O43 - CFD: 07/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{40643D44-8482-414A-8442-52853DED38FD}
O43 - CFD: 04/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{40C733F4-549E-44C4-BD0B-7869B3AEF687}
O43 - CFD: 09/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{41725C82-BED8-446D-9BC1-D37E088389B4}
O43 - CFD: 15/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{41AA8E26-EF66-4CC5-A973-7B3D3B7B35BA}
O43 - CFD: 12/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{438BC82A-B098-440C-9548-66F8CFB20434}
O43 - CFD: 14/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{43CEBE14-8808-4DF6-98AE-6218CEC65F2B}
O43 - CFD: 24/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{46C79D41-316A-446F-AF58-C35AABEBACF7}
O43 - CFD: 24/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{48DCF9B0-122E-4D02-BC47-64F91451A3C4}
O43 - CFD: 19/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{49CAC57C-E740-4A2A-96CB-F6874D8FB954}
O43 - CFD: 05/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{4AFB0FA7-9309-4427-B225-B19AE76C8438}
O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4B63CE44-2300-433A-AFCA-E4AF9A26B0C1}
O43 - CFD: 11/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4BDE0621-3A25-44E2-BBD2-8A3F088CD19D}
O43 - CFD: 07/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4C6077A7-801D-474A-BB2D-902E2A1B4071}
O43 - CFD: 24/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{4D6DCEE8-B458-489F-AC93-A28C496E7B19}
O43 - CFD: 19/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{517E444C-F2F0-4F63-A014-4B3E884AE77A}
O43 - CFD: 10/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5197EA9B-AE83-4622-A21B-50A3B63F338E}
O43 - CFD: 06/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{5227DFB9-3BC5-4E1C-92F6-ACD017884A40}
O43 - CFD: 10/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{53614420-ADAA-43D6-ABE0-4447DD3CDBB9}
O43 - CFD: 04/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{542FAB27-8E20-4E11-8C4D-79892B6D26C6}
O43 - CFD: 21/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{54855AE1-2629-407D-8B9B-E0FD1AB37849}
O43 - CFD: 16/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5550E7CA-FA69-4AB6-BDDD-1950E58E4267}
O43 - CFD: 29/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{563448AD-2DD3-4489-AEAA-529CAED0A133}
O43 - CFD: 07/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{563B433D-A5E3-4573-8DED-1A7982CD685E}
O43 - CFD: 12/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{56DEA749-A9C8-4FCA-8AA3-3B62E82581CC}
O43 - CFD: 08/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{58BDC144-680B-4F96-98B5-E23B0D9FEE0B}
O43 - CFD: 16/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{593B9626-F594-497A-BAFF-CF73769390CF}
O43 - CFD: 08/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{59B522AE-A6B2-46BB-9372-748938A6F271}
O43 - CFD: 08/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5A4DB10B-5FC3-4FCD-BF3F-3E3C28F95D7D}
O43 - CFD: 09/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5AA14AFA-4C33-40F7-8F74-0D8EDE2BF39B}
O43 - CFD: 13/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5B7042EA-5AA3-4D55-8949-5DD1B0CA358A}
O43 - CFD: 02/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5D3C4AE1-5082-4EEC-8A78-CB16543FBEA9}
O43 - CFD: 03/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{5E044ADA-0287-4D68-93D3-586D6096E7B7}
O43 - CFD: 08/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5EFE76A3-BCBF-4F38-B2E6-DCF505946286}
O43 - CFD: 21/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{5F04D1DB-65B9-4E1F-B626-8C7E47806D00}
O43 - CFD: 10/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{60253560-FAA1-4CCB-AAE1-43DDF6DD3076}
O43 - CFD: 24/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6036CF3A-C9BD-44C6-9C42-56C5F0B2710C}
O43 - CFD: 15/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{610B7480-7387-4FC2-9424-C4F39EA8253D}
O43 - CFD: 13/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6140EE0B-946C-4034-9A97-41BEFF571D8F}
O43 - CFD: 14/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{63C23C17-69A1-45B1-92AB-AF7C38F419B6}
O43 - CFD: 20/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6489E2F8-9772-4F06-A6C4-A85236BD80FE}
O43 - CFD: 11/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{65B32C2D-0579-41FA-92B2-082F0CA458D4}
O43 - CFD: 03/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{66BE1D9E-7801-44E8-8D9A-73B04C6C6A82}
O43 - CFD: 25/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{670D5CD1-EBA3-4288-BC9B-E2263EEBF1BF}
O43 - CFD: 02/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6771408C-4EBF-44FA-89A1-01AF15B3D462}
O43 - CFD: 11/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{67984654-4E6C-4021-B39F-0FAD137EC789}
O43 - CFD: 11/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6821088B-BC47-495C-9AE0-B07D8EBBACB2}
O43 - CFD: 13/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{68654897-731B-401B-8B51-EA53F3FE4BB2}
O43 - CFD: 11/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{68B4CD1D-DBAD-4636-93E1-FA5951F78A29}
O43 - CFD: 02/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{68D47A2B-C915-45AC-B197-B7A0FD45391A}
O43 - CFD: 12/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{699403C1-E2C8-4A7C-B400-2455FFB554E6}
O43 - CFD: 04/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6B882929-4D81-49DC-9A7B-70C20BDB381C}
O43 - CFD: 12/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6BC73370-23ED-4E48-B7E4-E35BE168312B}
O43 - CFD: 24/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6BE5197F-A3E8-4FF8-84E9-FC171294E20A}
O43 - CFD: 19/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6BF4425D-BCC2-476B-B403-854DA95C5B85}
O43 - CFD: 21/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6C606229-A8E7-4059-AF20-3C00595557C4}
O43 - CFD: 10/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6E2762A6-F9B8-435F-BE0F-9FE2F94BF01D}
O43 - CFD: 18/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6E4BE028-D253-4268-9D01-3E23E63F7CC0}
O43 - CFD: 18/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F104857-D6D2-497D-8909-4168327E9836}
O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F3189E9-FAE0-4E59-853D-2F3F71C95B4F}
O43 - CFD: 01/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F584BE5-00B7-4A1C-B48A-D1BEF5EC6E96}
O43 - CFD: 11/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7068A4FE-44C4-4BA2-9B8A-551807FEA674}
O43 - CFD: 07/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{71A90D29-67D9-4B3C-804F-D268B9310064}
O43 - CFD: 16/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{71B86FBC-F43F-4D09-83EB-CB173AD2749A}
O43 - CFD: 03/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{722F901E-5616-4C20-92A1-14B073CE1063}
O43 - CFD: 29/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{729FB2DC-E4BF-4E9E-BB7A-6B63277F1481}
O43 - CFD: 18/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{744749C7-BEDE-4D68-B949-5CAD5DD5F916}
O43 - CFD: 06/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{78C4AB77-7F46-4F97-A8E8-1A133E59E9F5}
O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{791EDEFF-3BE7-4B5C-816B-92AB6D9DCAA5}
O43 - CFD: 18/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7C5F5D8E-02D2-44D6-AD9A-317EC81DF664}
O43 - CFD: 23/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7D62A55A-B20F-40E2-BCF5-C66A87B4A84A}
O43 - CFD: 23/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7E144FAD-0B36-4E6B-BDC0-AC0FE52C9995}
O43 - CFD: 19/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7EBD70ED-05F8-46B4-B3A6-61D25580831E}
O43 - CFD: 23/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{7ECCD109-0300-4A47-9519-2D688B48504E}
O43 - CFD: 09/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7F1A62AB-1141-473C-8119-652D29BC5B77}
O43 - CFD: 13/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{806FD2D0-4E86-444A-929C-C8219F7C5DEF}
O43 - CFD: 18/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8122A5A9-9A17-4836-B6D3-D94B8001DDFE}
O43 - CFD: 20/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8128D2E8-8DBA-4862-8537-AABB85055106}
O43 - CFD: 16/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{81B81381-8A98-4366-BFDC-81B9B79DB014}
O43 - CFD: 26/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{821AABDF-E098-4CB6-A94A-151AF59934F4}
O43 - CFD: 30/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8293C31D-D519-40E4-9B0C-72E9CB78026F}
O43 - CFD: 06/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{845D6B0E-4DA3-4ED4-AE54-319481096464}
O43 - CFD: 23/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{84A4D092-41E9-4CE0-AB4E-F7E3B4A62439}
O43 - CFD: 14/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{84CB0D4E-00EB-41F2-8E71-08FFEBA87824}
O43 - CFD: 12/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8638AB49-6265-4D60-8742-232BA7D2B7EC}
O43 - CFD: 07/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{86ED4419-454C-4C00-864B-1584C9B49864}
O43 - CFD: 04/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8892BDBF-C921-4B82-BF2B-D948BD3BDEDA}
O43 - CFD: 16/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{88E31DF6-B10D-42E8-B96A-84709A6899D3}
O43 - CFD: 30/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{898F2447-9C99-4A74-8F2B-E7799B816DA4}
O43 - CFD: 02/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{89E03324-5F66-4A96-AFE9-5D1946CACDC1}
O43 - CFD: 19/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{89FCFF63-4382-46B5-9B97-CFFA2E6117B1}
O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8A1B11CB-A231-4B49-A958-B1B1E701753D}
O43 - CFD: 23/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8BA7A246-36E4-4AFF-B0BF-9D174A25C793}
O43 - CFD: 04/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8DDBCB2F-3FF3-4482-9C37-7EACA1E41263}
O43 - CFD: 20/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8EEE2204-07D8-4F6F-BC66-C53EE600C6D4}
O43 - CFD: 24/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8FB5BFFF-D12F-48AF-A6F2-0AA44016336E}
O43 - CFD: 12/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{90024645-2357-4E83-A00A-B6FFE36E4B1C}
O43 - CFD: 02/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{90A2B567-7399-4834-9467-63F822A3637A}
O43 - CFD: 01/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9284D857-ED44-4DC6-870A-BCBC9B2BFFAC}
O43 - CFD: 20/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{928B1367-6BB6-4148-800C-46E68FC0EA6C}
O43 - CFD: 19/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9297605F-35F6-44E9-A4E8-9B3CBF6C49CC}
O43 - CFD: 05/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{929B2A32-8B0A-492F-A66A-3CE89531BAF5}
O43 - CFD: 15/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{92F3B38E-32A4-4966-863C-186BAD8C5002}
O43 - CFD: 30/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{93144769-D573-4159-8FCB-299D9B564619}
O43 - CFD: 10/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{935CD84B-3EDA-464E-82C0-944708C70DE6}
O43 - CFD: 09/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{95407557-07EC-41F3-801E-0E297628BD62}
O43 - CFD: 01/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9648DFFA-94C1-424D-AC5B-C507E4B56B5D}
O43 - CFD: 05/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9668F339-511E-417C-A402-FCD358CB75E5}
O43 - CFD: 24/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{96F6ABD5-C7A4-41CC-AF48-C666CA6AEAFE}
O43 - CFD: 30/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{973D6F8D-D3D6-4862-8DB2-C5CFA139CCF4}
O43 - CFD: 22/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9848C138-7D42-45FB-BBF6-4765AA732FA4}
O43 - CFD: 27/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{99DBD18E-2ABF-4C6E-9FC6-F4156836BE35}
O43 - CFD: 18/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9A427675-8D1B-4783-A091-A19197463DC6}
O43 - CFD: 07/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9ABDC381-FAFB-47DD-A22B-FB22605768DD}
O43 - CFD: 15/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9B2E283A-F89D-472B-A55A-0510A642D70D}
O43 - CFD: 28/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9C279FD4-AB8A-4878-A1A9-CC6B6702DDD4}
O43 - CFD: 30/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9C7ACBC0-3B01-4399-8F49-46270E040BF7}
O43 - CFD: 03/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9DC7CBEB-D572-48C7-A492-BD9BDBD10B16}
O43 - CFD: 28/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9DEED8FF-F26B-4CBF-9263-1A5BF1EDE3AB}
O43 - CFD: 18/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9F47336D-92B6-4C26-9370-E3B247A5939A}
O43 - CFD: 30/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9F69AAD6-C7E9-4FD4-AD9F-F72703E6D6CA}
O43 - CFD: 21/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A02CC44E-F7F7-4C3E-932D-BD1D50E7AD25}
O43 - CFD: 05/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A08C1BE7-2034-488E-AC52-66CA4CCF7F9D}
O43 - CFD: 26/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A0993E1D-E9A3-416B-891F-0D06DBE1D751}
O43 - CFD: 19/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A59D0240-A3CC-4CC9-9646-09DA1A83FAAF}
O43 - CFD: 18/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A6F16EB1-2726-4841-B7D2-50F506BD63B1}
O43 - CFD: 15/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A7C46EA7-B5D3-4C69-94FA-F7977ADAFA10}
O43 - CFD: 08/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A88659B3-F960-4E98-AE96-4E72382D2108}
O43 - CFD: 21/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A9E879FD-DD52-4F24-972A-C39926A64E7C}
O43 - CFD: 03/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{AA7C41D4-CFA3-47B6-9F8D-4FE5D5D7AEE8}
O43 - CFD: 16/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AB9019D9-4769-4186-9D56-56034D02B69C}
O43 - CFD: 24/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{ACDB1664-9A4E-4F18-B672-0A1BB517B8F7}
O43 - CFD: 29/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{ACEACEC8-CEA0-45F4-896C-A4BDAD6007B6}
O43 - CFD: 28/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{AD035871-59C8-4A73-8614-38ADF8451BC1}
O43 - CFD: 02/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AD400D34-D9B1-4255-A56F-81D0F196D235}
O43 - CFD: 03/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{AD84A43F-FF4A-4AC6-A25D-F4FA440B063C}
O43 - CFD: 04/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AEF0E33C-18B2-498D-B071-0A7332434343}
O43 - CFD: 17/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B0DAAFCB-4769-41B9-8550-A65935D303D7}
O43 - CFD: 18/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B2C97BC4-3C23-44E6-810B-1B8D83A395EB}
O43 - CFD: 13/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B2E6A0EB-17B2-46F3-8161-9AC97839A419}
O43 - CFD: 07/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B2F82167-91AB-4561-B5D5-14A67A961E01}
O43 - CFD: 03/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B455B715-796B-4BE0-85A4-37F59FC32BFB}
O43 - CFD: 26/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B5514E2B-6B3F-45A1-8B38-A4042F9843C4}
O43 - CFD: 09/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B6ACBAC3-9E23-48D5-8C68-827CF2D5D662}
O43 - CFD: 18/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B7E0E918-00FB-4EC2-99FB-01BFBC82AE7B}
O43 - CFD: 02/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BA8A8FBE-D168-40F2-9275-962024D51A8F}
O43 - CFD: 15/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BB70993C-FD7C-4C88-A444-55CCEC0B0017}
O43 - CFD: 28/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BC627B67-11D9-44EB-9491-E9A2540F89A8}
O43 - CFD: 25/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{BDAE6DB3-48EB-488F-B1A5-8497649F6ABF}
O43 - CFD: 04/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C0239225-3125-44F7-8016-8CA48C5D921E}
O43 - CFD: 30/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C0E80B45-F5E3-43CD-8353-96108E35BE8A}
O43 - CFD: 27/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C102C2C8-B011-4154-9FD0-16D2AA9F0AB4}
O43 - CFD: 16/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C1359082-3A5F-4631-8C36-A4D9CD33B2AD}
O43 - CFD: 21/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C1CD12EF-CA20-49BE-B083-A2960DD82F2A}
O43 - CFD: 07/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C2AE5059-3F26-4B21-B0B6-3670E2580018}
O43 - CFD: 04/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C2E7D85B-B992-420A-9C58-780185B2F6EC}
O43 - CFD: 07/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C3FE5EBB-54B5-4AB2-864F-C6EF39E40F5B}
O43 - CFD: 26/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C45DCF71-2C2F-4EB6-967C-E80B9AF7C3D7}
O43 - CFD: 03/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C51BDDA3-C9F4-4766-825B-804C2D779DE5}
O43 - CFD: 21/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C56CB960-E2A8-4514-9662-3E51D43A14BD}
O43 - CFD: 01/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C5FFFBF9-FFE8-4D28-8B1D-0477A397DDF3}
O43 - CFD: 26/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C62740EB-9A5F-4300-A61A-DC312C54320B}
O43 - CFD: 02/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C633299B-BE2D-4EF8-9FEC-0563D54E100C}
O43 - CFD: 09/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C656802C-4C77-4D48-A167-1AB899B8A2D3}
O43 - CFD: 14/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C6CD11DE-83F9-4368-B919-F3D4240C93F2}
O43 - CFD: 22/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C77E0AD6-EEB7-466C-B947-A1CB8BAE3F5A}
O43 - CFD: 13/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C7D9A659-6517-4C8B-A1A2-A6E6C918DEC9}
O43 - CFD: 11/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CA105534-01F8-4B47-8DF5-6C3BDEDD7FB0}
O43 - CFD: 23/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CAE597EF-3DEF-41FF-A92E-3DAFBBEAC451}
O43 - CFD: 20/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CB570D76-AF13-4717-BC7B-78F9B4A172ED}
O43 - CFD: 12/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CB730866-9DCB-43F5-AC2F-46BE12210B0D}
O43 - CFD: 29/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CCF3FF5C-7989-4341-AFE4-9AAAE58840AE}
O43 - CFD: 09/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CD547C73-7F29-4164-BA2F-1F3C8D5477E4}
O43 - CFD: 10/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CDAB2AE2-3918-44C8-9F36-F9EA824C8D5A}
O43 - CFD: 02/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CDEF69AA-8EB2-418D-895B-9ED5EA149015}
O43 - CFD: 31/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CEB63C29-B356-4D13-A783-6336D61AF06A}
O43 - CFD: 16/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CED103E7-C832-4419-A2A0-B4488FA71C26}
O43 - CFD: 22/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CF0DAEAE-09A0-472D-8AEF-FF95E8621FC8}
O43 - CFD: 12/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CF82F0A0-1853-4DA9-B06E-3E3889092891}
O43 - CFD: 28/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{D0431967-CEB6-4BE9-8ACE-63952EE6C842}
O43 - CFD: 05/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D08E124F-0614-46D3-8BDF-361B003AEC53}
O43 - CFD: 04/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D0B56C43-9827-434D-8C7A-C3CA434A1CCA}
O43 - CFD: 22/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D2C4B7D9-AE2D-49C8-99D4-35BEEE9AD0F0}
O43 - CFD: 20/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D36F06E0-9CB7-434C-B286-ABA666BDDA3E}
O43 - CFD: 29/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D743A166-C3C0-4D1C-9DB5-F1A1679C5BA2}
O43 - CFD: 06/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D85D78C1-E130-487D-9741-A24D8A2923E7}
O43 - CFD: 14/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D8BCD5AD-DB78-4084-997D-72C73179FC0C}
O43 - CFD: 22/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{D8FFE5D9-865E-463F-A1A5-B7B3B09E222D}
O43 - CFD: 31/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D969D86C-750C-48AA-8DC3-1FB3CF7ECFDB}
O43 - CFD: 28/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{DAF7F6BD-FB8B-43C5-B432-29F77AFC289D}
O43 - CFD: 07/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DBA9384F-D9A6-423F-822A-5D1BFB31794C}
O43 - CFD: 14/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DBF9AD3F-13F5-4167-B53F-633DF77B86CD}
O43 - CFD: 05/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{DC1C7F2F-B4FD-403E-B365-77F8C9EBD21A}
O43 - CFD: 10/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{DC661406-902C-429A-9278-F573158C8A9F}
O43 - CFD: 27/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DCA866F1-8FC9-4D2F-9C9C-2829A4A6A747}
O43 - CFD: 26/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{DCF5536C-5838-4AF0-947C-E9EF7A918D77}
O43 - CFD: 07/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DFFFC5E2-53C0-4344-8944-D1BD3F2F9893}
O43 - CFD: 31/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E072DF3E-92EB-47EF-B648-D03BBCB56C2B}
O43 - CFD: 28/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E140FD34-813C-4337-8D97-88180E014C67}
O43 - CFD: 14/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E27BDDD7-9083-4C7E-9B96-2BC61D59A779}
O43 - CFD: 10/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E3A367B0-78E7-49B8-B157-937C80C7E1F6}
O43 - CFD: 05/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E42E856F-F804-48AC-A513-58B8F49B780C}
O43 - CFD: 06/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E44BDAEA-8FBE-4257-B51B-73CF232C6E38}
O43 - CFD: 09/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E45F88BC-2733-4EA9-BD12-0B14214DF9D8}
O43 - CFD: 10/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E4B621C8-B080-4CDF-8499-0F1B8B95B14D}
O43 - CFD: 01/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E53226C7-1EE5-44F3-BF28-224EDB8EE8BC}
O43 - CFD: 25/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E5C1A7C6-6571-4EB5-B3C8-20F901B144C4}
O43 - CFD: 03/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E627F2BA-CC6E-4B75-A3B9-881ED5F531D3}
O43 - CFD: 19/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E662E37F-5097-4B08-A1E0-C65A0C880500}
O43 - CFD: 22/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E68F13AB-09A2-4CD7-81AE-014862389AA9}
O43 - CFD: 01/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E79AAAC2-F871-46C3-92DF-341FCEABDE0C}
O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E8530D16-32BA-4929-AF4B-449F9F0EAAFF}
O43 - CFD: 09/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E8667550-0504-4FB3-9206-3122D74B0DF4}
O43 - CFD: 26/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E874F690-A503-4C1F-A526-A79D4DC32AD3}
O43 - CFD: 02/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E87C66E3-CDEB-4CDB-850E-C281312C7330}
O43 - CFD: 06/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E8FEB371-3D3E-4071-AFC8-69EB2EB7CB6E}
O43 - CFD: 14/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EAD3D2E0-0B8F-4C05-9B9C-61116B83BB2E}
O43 - CFD: 22/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{EB6B2B42-FA50-46A3-880F-1D4269591A24}
O43 - CFD: 17/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EB77C8B3-D7F1-413F-A111-D7D9AE75467B}
O43 - CFD: 06/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EB89DCC8-E15D-472A-A488-DED51BE29AD7}
O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{EDAA4B2B-39B8-47AE-92B9-A7BD65564F53}
O43 - CFD: 17/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F00E361C-460A-43E5-8AF3-2961248B3F94}
O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F06F77C6-09C5-4D85-B9B7-A1F6F5522D85}
O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F1588DED-85F0-43DD-9A19-FFF47210B388}
O43 - CFD: 06/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F1D1DF2F-3063-478A-BE81-E46AD2B3B59D}
O43 - CFD: 11/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F1D4205A-702B-42D1-B5BA-2E92DE001FCB}
O43 - CFD: 26/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F1D82824-F39D-4F67-8764-3C8962CFF6A9}
O43 - CFD: 01/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F294E545-BF7C-41D8-9DE7-634A6550A7E4}
O43 - CFD: 08/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F2CAD3B0-DFAE-4C57-BF16-E4D388669220}
O43 - CFD: 11/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F2F4EBBF-736D-416E-8F4E-A9FF58A4FC60}
O43 - CFD: 11/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F3148CBC-AC17-4B70-B6C9-05E75CAC3834}
O43 - CFD: 11/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F3C8D4EB-1B34-49AD-A113-0DB61DDFB829}
O43 - CFD: 08/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F3E3E26A-B0A8-4AB6-91AB-006992F5ED71}
O43 - CFD: 30/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F441B48D-2A58-41BF-BF31-5B7ABCF4DB4F}
O43 - CFD: 27/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F50B0746-7886-4D0D-A4F2-12EB0B81A607}
O43 - CFD: 28/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F5749CAA-34E3-4E45-B631-B7C55BAEB477}
O43 - CFD: 15/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F72C0DDD-7708-4751-96CF-A35C176B12D2}
O43 - CFD: 13/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F7CBDEE6-65CF-4C72-A906-8F26F7832E5D}
O43 - CFD: 30/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F91AB5AC-AF19-4AB0-BECE-4A4F8E7C702E}
O43 - CFD: 24/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F985D9B8-9723-42B1-A7D2-A3C6CF8BAA38}
O43 - CFD: 26/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{FCAEBE89-8F90-4D77-A686-F420BF1569B6}
O43 - CFD: 17/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{FCFD3083-8F0A-47F4-A7FE-029529AC7A84}
O43 - CFD: 15/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{FEE1942C-7336-47EA-8BB8-346668E352B3}
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 15/10/2015 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Détection de l'application Winamp
O43 - CFD: 08/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>PUP.Optional.MegaSearch
O43 - CFD: 14/09/2015 - [0] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frim
O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fTalk
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 15/10/2015 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup

---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 8s
O45 - LFCP:[MD5.413533A29C24A953B5151FBC6F69EE30] 01/11/2015 A -- C:\Windows\Prefetch\LAVASOFT.SEARCHPROTECT.WINSER-223FC669.pf =>PUP.Optional.SearchProtect

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s
O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll ©
O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll ©
O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll ©
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll ©

---\\ Liste des pilotes du système (61) - 110s
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] ©
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] ©
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] ©
O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] ©
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] ©
O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] ©
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] ©
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] ©
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] ©
O58 - SDL:2009/11/06 12:56:06 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [1550848] ©
O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] ©
O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] ©
O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2011/01/10 21:42:24 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbfake.sys [116224] ©
O58 - SDL:2011/01/10 21:42:24 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [116864] ©
O58 - SDL:2006/11/01 17:20:28 A . (.FUJITSU LIMITED - WDM driver for FUJ02B1 PnP device.) -- C:\Windows\System32\drivers\fuj02b1.sys [7808] ©
O58 - SDL:2006/11/01 17:59:24 A . (.FUJITSU LIMITED - WDM driver for FUJ02E3 PnP device.) -- C:\Windows\System32\drivers\fuj02e3.sys [7296] ©
O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2009/11/01 17:04:42 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] ©
O58 - SDL:2010/11/20 14:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] ©
O58 - SDL:2010/03/03 18:51:40 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [540696] ©
O58 - SDL:2011/03/11 07:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] ©
O58 - SDL:2009/12/18 11:38:56 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [8038080] ©
O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] ©
O58 - SDL:2009/10/26 12:39:44 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [151936] ©
O58 - SDL:2009/11/27 05:15:00 A . (.Intel(R) Corporation - Intel(R) Display HD Audio driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [244736] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] ©
O58 - SDL:2008/03/13 08:46:00 A . (.ManyCam LLC. - ManyCam Virtual Webcam, WDM Video Capture D.) -- C:\Windows\System32\drivers\ManyCam_x64.sys [27136]
O58 - SDL:2014/05/13 14:21:18 A . (.Visicom Media Inc. - ManyCam Virtual Microphone.) -- C:\Windows\System32\drivers\mcaudrv_x64.sys [35440]
O58 - SDL:2014/07/28 15:06:24 A . (.Visicom Media Inc. - ManyCam Virtual Webcam Driver.) -- C:\Windows\System32\drivers\mcvidrv.sys [49264]
O58 - SDL:2012/10/11 04:08:10 A . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Windows\System32\drivers\mcvidrv_x64.sys [44928] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] ©
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] ©
O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] ©
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] ©
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] ©
O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] ©
O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] ©
O58 - SDL:2010/03/04 21:43:00 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [346144] ©
O58 - SDL:2009/10/28 11:40:58 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2018080] ©
O58 - SDL:2009/05/08 08:15:18 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [215552] ©
O58 - SDL:2011/07/25 12:21:52 A . (.Windows (R) Server 2003 DDK provider - WDM Video Capture Driver.) -- C:\Windows\System32\drivers\scrcamhrdrv_x64.sys [241880]
O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] ©
O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] ©
O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] ©
O58 - SDL:2009/10/09 20:16:28 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [293936] ©
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] ©
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ©
O58 - SDL:2012/04/15 22:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam64.sys [1071032] ©

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (10) - 59s
O61 - LFC: 2015/10/31 23:52:42 A . (.Media Downloader.) -- C:\Users\wajih\Downloads\MediaDownloader.exe [551845] =>PUP.Optional.MediaDownloader
O61 - LFC: 2015/10/31 21:47:24 A . (.Software application.) -- C:\Users\wajih\Downloads\MediaDownloaderSetup.exe [945656]
O61 - LFC: 2015/11/01 22:21:34 A . (..) -- C:\Users\wajih\Downloads\svd3.exe [6465144]
O61 - LFC: 2015/10/31 23:54:02 A . (..) -- C:\Users\wajih\Downloads\va33.exe [2404864]
O61 - LFC: 2015/11/02 22:20:23 A . (..) -- C:\Users\wajih\Downloads\va33_17cef4084f_setup.exe [2404864]
O61 - LFC: 2015/11/01 01:46:02 A . (..) -- C:\Users\wajih\Downloads\va33_8fe3b4379f_setup.exe [2404864]
O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\TbHelper2.exe [203952] =>PUP.Optional.SocialSkinz
O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\uninstall.exe [48816] =>PUP.Optional.SocialSkinz
O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\update.exe [76976] =>PUP.Optional.SocialSkinz
O61 - LFC: 2015/11/02 22:20:36 A . (..) -- C:\Users\wajih\AppData\Local\Microsoft\Windows\1036\StructuredQuerySchema.bin [331781]

---\\ Associations Shell Spawning (11) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://www.sweet-page.com/ =>PUP.Optional.SweetPage
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe ©

---\\ Recherche d'infection sur les navigateurs (38) - 6s
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.defaultenginename", "istartsurf"); =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.alias", "istartsurf"); =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.iconURL", "http://www.istartsurf.com/favicon.ico"); =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.name", "istartsurf"); =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.ptid", "cornl"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.uid", "HitachiXHTS545025B9A300_100727PBN2033SFA42ZTX"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.url", "http://www.istartsurf.com/web/?type=ds&ts=1437692326&z=2bb7a8e6531eeb88147adfdgbz7c5[...] =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.selectedEngine", "istartsurf"); =>PUP.Optional.IsStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.startup.homepage", "http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFc10MV1wURBgXIVoATA1HR1cOeFteBxRF[...] =>PUP.Optional.Browser
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.enabledAddons", "deskCutv2%40gmail.com:0.0.20,defsearchp%40gmail.com:1.0.0.1069,%7B972ce4c6-7e08-4474-a285-3[...] =>PUP.Optional.DeskCut
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.xpiState", "{\"app-profile\":{\"defsearchp@gmail.com\":{\"d\":\"C:\\\\Users\\\\wajih\\\\AppData\\\\Roaming\\[...] =>PUP.Optional.PriceFountain
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC} - (MySpace.com) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {091843B3-C480-4CAA-B686-B65D163AC311} - () - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {0D7562AE-8EF6-416d-A838-AB665251703A} - (Facemoods Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {2B1D2049-D4CA-4c0e-B004-ECDA36C88414} - (Ask.com) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (istartsurf) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {3BB21B9D-70BC-4672-ACC3-4D21D54BC253} - (Search Here) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {483830EE-A4CD-4b71-B0A3-3D82E62A6909} - () - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {52EEF29C-DB9A-454D-B58F-509D3C14E696} - (Ask Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {557C21FE-7274-410D-853E-9ED4471BF193} - (search-web.net) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {6C3DEB76-B04E-4F0F-AF3A-497DDB517524} - (Alnaddy) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Speedbit Search) - http://go.speedbit.com/
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} - (Search Results) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {C0C3A6C6-03BC-4195-8FCB-AEA091301353} - (Yahoo!) - http://search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {C58F60F6-67C6-40e9-BC81-320259867AA2} - (SpeedBit Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} - (MyStart Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {FED2A00D-C820-4DCD-8410-E2250D835306} - (Google) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (32) - 2s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [859648] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [680960] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2607104] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [67584] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [90624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [210432] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ©

---\\ Liste des exceptions du parefeu Windows (16) - 2s
O87 - FAEL: "{5D94A9DF-3716-4D69-9D10-C47434C2D01E}" [In-None-P6-TRUE] .(...) -- C:\Windows\System32\dmwu.exe (.not file.)
O87 - FAEL: "{63918BD4-B47F-4707-8309-BDC21AFBAE9B}" [In-None-P17-TRUE] .(...) -- C:\Windows\System32\dmwu.exe (.not file.)
O87 - FAEL: "{D58AE912-0AB6-4A8F-9E53-A4DE19D6E318}" [In-None-P6-TRUE] .(...) -- C:\Windows\System32\ARFC\wrtc.exe (.not file.)
O87 - FAEL: "{6F500400-D6BA-4D95-9570-12E805700031}" [In-None-P17-TRUE] .(...) -- C:\Windows\System32\ARFC\wrtc.exe (.not file.)
O87 - FAEL: "{DB8ED855-2FDF-417A-A65E-540BFA6CCC92}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{B3817AE7-4F40-49CF-8BFC-A35412D3D239}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{CE45ECD7-A8F8-403B-BB5F-01D898376FE2}" [In-None-P6-FALSE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{70CA42DF-5801-4466-AC37-1F6A6A64DCDA}" [In-None-P17-FALSE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{0CFE87A7-AD52-4E43-9F4F-2C277EDAC34E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{521C5A4E-C285-4232-AFA4-B8EF4C04EAEF}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{53922A52-6C7B-4714-B400-862E40A9AABC}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{7759EC01-AB2F-47FE-81B8-3DC952DBA9BC}" [In-None-P17-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{015EF084-EE48-418D-9F0E-F220E5495C82}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{A6D98E53-7462-4E4F-8D94-BF09F57E9A22}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "TCP Query User{1176A022-3790-4B33-AD1F-D54254280980}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe" [In-None-P6-TRUE] .(...) -- C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe (.not file.)
O87 - FAEL: "UDP Query User{3FED7EFB-58CC-4B42-9202-824D84DADB55}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe" [In-None-P17-TRUE] .(...) -- C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe (.not file.)

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (16) - 15s

SS - Demand [19/10/2015] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SS - Auto [25/05/2011] [ 37664] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
SR - Demand [25/11/2010] [ 116608] Battery Optimizer (Battery Optimizer) . (.ReviverSoft 2009.) - C:\Program Files\ReviverSoft\Battery Optimizer\BatteryOptimizerService.exe
SR - Auto [10/04/2012] [ 290720] KSafe service (KSafeSvc) . (.Kingsoft Corporation.) - C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe
SR - Demand [01/11/2009] [ 262144] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
SS - Demand [16/10/2015] [ 147624] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Demand [16/07/2009] [ 935208] Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe ©
SR - Demand [30/07/2009] [ 63336] PowerSavingUtilityService (PowerSavingUtilityService) . (.FUJITSU LIMITED.) - C:\Program Files\Fujitsu\PSUtility\PSUService.exe ©
SS - Auto [14/04/2015] [ 2531488] SpeedBit Update (SBUpd) . (.Speedbit Ltd..) - C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe ©
SS - Demand [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SR - Demand [19/02/2009] [ 341264] Fujitsu Diagnostic Testhandler (TestHandler) . (.Fujitsu Technology Solutions.) - C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe ©
SR - Demand [01/11/2009] [ 2314240] Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©
SR - Auto [02/11/2015] [ 298152] VideoAcceleratorService (VideoAcceleratorService) . (.SPEEDbit.) - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe
SS - Demand [27/07/2011] [ 5023744] webcamXP Service (wxpSvc) . (.Moonware Studios.) - C:\Program Files (x86)\webcamXP 5\wService.exe ©
SR - Demand [09/11/2008] [ 602392] Yahoo! Updater (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe ©

---\\ Recherche de clés de registre Tracing (26) - 5s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASAPI32 =>PUP.Optional.Alnaddy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASMANCS =>PUP.Optional.Alnaddy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASAPI32 =>PUP.Optional.EORezo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASMANCS =>PUP.Optional.EORezo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASAPI32 =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASMANCS =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASAPI32 =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASMANCS =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASAPI32 =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASMANCS =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASAPI32 =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASMANCS =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASAPI32 =>PUP.Optional.VidSaver
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASMANCS =>PUP.Optional.VidSaver

---\\ Scan Additionnel (151) - 0s
C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\defsearchp@gmail.com.xpi =>PUP.Optional.PriceFountain
C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\istartsurf.xml =>PUP.Optional.IsStart
C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} =>PUP.Optional.ShopperPro
C:\Windows\Tasks\DriverToolkit Autorun.job =>PUP.Optional.DriverToolkit
C:\Windows\System32\Tasks\DriverToolkit Autorun =>PUP.Optional.DriverToolkit
C:\Windows\System32\Tasks\Express Files Updater =>PUP.Optional.ExpressFiles
C:\Windows\System32\Tasks\UNELEVATE_29408 =>PUP.Optional.ShopperPro
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1 =>PUP.Optional.InstallBrain
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1 =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Great Find =>PUP.Optional.GreatFind
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LayoutsExpress =>Toolbar.LayoutExpress
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Media Downloader_is1 =>PUP.Optional.MediaDownloader
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1 =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\5e28fd0b66fb849 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Default Tab =>Toolbar.Agent
HKLM\SOFTWARE\Wow6432Node\ExpressFiles =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\GreatFind =>PUP.Optional.GreatFind
HKLM\SOFTWARE\Wow6432Node\IB Updater =>PUP.Optional.InstallBrain
HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware =>PUP.Optional.IsStart
HKLM\SOFTWARE\Wow6432Node\Minibar =>PUP.Optional.Minibar
HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro
HKLM\SOFTWARE\Wow6432Node\SimplyGen =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\supWPM =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\Uniblue =>.Superfluous.Uniblue
HKLM\SOFTWARE\Wow6432Node\WeatherBlink =>PUP.Optional.MindSpark
HKCU\SOFTWARE\5e28fd0b66fb849 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\AutocompletePro =>PUP.Optional.PredictAd
HKCU\SOFTWARE\AutocompleteProBHO =>PUP.Optional.PredictAd
HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution
HKCU\SOFTWARE\Complitly =>PUP.Optional.PredictAd
HKCU\SOFTWARE\Datamngr =>PUP.Optional.Datamngr
HKCU\SOFTWARE\DataMngr_Toolbar =>PUP.Optional.Datamngr
HKCU\SOFTWARE\Default Tab =>Toolbar.Agent
HKCU\SOFTWARE\DriverToolkit =>PUP.Optional.DriverToolkit
HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles
HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout
HKCU\SOFTWARE\FunWebProducts =>PUP.Optional.MyWebSearch
HKCU\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo
HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster
HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\Minibar =>PUP.Optional.Minibar
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\Somoto =>PUP.Optional.MegaSearch
HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\USyndication =>PUP.Optional.USyndication
HKCU\SOFTWARE\usyndication.com =>PUP.Optional.USyndication
HKCU\SOFTWARE\WeatherBlink =>PUP.Optional.MindSpark
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Fun Web Products =>PUP.Optional.MyWebSearch
HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport
HKCU\SOFTWARE\AppDataLow\Software\WeatherBlink =>PUP.Optional.MindSpark
C:\Program Files (x86)\AutocompletePro =>PUP.Optional.PredictAd
C:\Program Files (x86)\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
C:\Program Files (x86)\Complitly =>PUP.Optional.PredictAd
C:\Program Files (x86)\DriverToolkit =>PUP.Optional.DriverToolkit
C:\Program Files (x86)\FilesFrog Update Checker =>PUP.Optional.MegaSearch
C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\Great Find =>PUP.Optional.GreatFind
C:\Program Files (x86)\LayoutsExpress =>Toolbar.LayoutExpress
C:\Program Files (x86)\Media Downloader =>PUP.Optional.MediaDownloader
C:\Program Files (x86)\Minibar =>PUP.Optional.Minibar
C:\Program Files (x86)\Mobogenie =>PUP.Optional.Mobogenie
C:\Program Files (x86)\MyPC Backup =>PUP.Optional.MyPCBackup
C:\Program Files (x86)\SiteLookup =>PUP.Optional.SiteLookup
C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab
C:\Program Files (x86)\Uniblue =>.Superfluous.Uniblue
C:\Program Files (x86)\Vittalia =>PUP.Optional.Vittalia
C:\Program Files (x86)\Webplayer Setup =>PUP.Optional.SocialSkinz
C:\Program Files (x86)\WSE_Vosteran =>PUP.Optional.Vosteran
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Downloader =>PUP.Optional.MediaDownloader
C:\ProgramData\APN =>Toolbar.Ask
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\BitGuard =>PUP.Optional.BitGuard
C:\ProgramData\IBUpdaterService =>PUP.Optional.InstallBrain
C:\ProgramData\IePluginServices =>Trojan.SProtector
C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
C:\ProgramData\Partner =>Toolbar.YahooPartner
C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro
C:\Users\wajih\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\wajih\AppData\Roaming\Complitly =>PUP.Optional.PredictAd
C:\Users\wajih\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy
C:\Users\wajih\AppData\Roaming\RHEng =>PUP.Optional.Conduit
C:\Users\wajih\AppData\Roaming\SimilarAddon =>PUP.Optional.SimilarAddon
C:\Users\wajih\AppData\Roaming\SpeedAnalysis3 =>PUP.Optional.SpeedAnalysis
C:\Users\wajih\AppData\Roaming\Systweak =>PUP.Optional.Systweak
C:\Users\wajih\AppData\Roaming\Uniblue =>.Superfluous.Uniblue
C:\Users\wajih\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran
C:\Users\wajih\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\wajih\AppData\Local\DriverToolkit =>PUP.Optional.DriverToolkit
C:\Users\wajih\AppData\Local\GamePlayLabs Plugin =>PUP.Optional.GamePlayLabs
C:\Users\wajih\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Users\wajih\AppData\Local\Media Get LLC =>PUP.Optional.MediaGet
C:\Users\wajih\AppData\Local\MediaGet2 =>PUP.Optional.MediaGet
C:\Users\wajih\AppData\Local\Minibar =>PUP.Optional.Minibar
C:\Users\wajih\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
C:\Users\wajih\AppData\Local\OpenCandy =>PUP.Optional.OpenCandy
C:\Users\wajih\AppData\Local\PackageAware =>PUP.Optional.BearShare
C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>PUP.Optional.MegaSearch
C:\Windows\Prefetch\LAVASOFT.SEARCHPROTECT.WINSER-223FC669.pf =>PUP.Optional.SearchProtect
C:\Users\wajih\Downloads\MediaDownloader.exe =>PUP.Optional.MediaDownloader
C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\TbHelper2.exe =>PUP.Optional.SocialSkinz
C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\uninstall.exe =>PUP.Optional.SocialSkinz
C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\update.exe =>PUP.Optional.SocialSkinz
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASAPI32 =>PUP.Optional.Alnaddy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASMANCS =>PUP.Optional.Alnaddy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32 =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASAPI32 =>PUP.Optional.EORezo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASMANCS =>PUP.Optional.EORezo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS =>PUP.Optional.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASAPI32 =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASMANCS =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASAPI32 =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASMANCS =>PUP.Optional.Facemoods
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASAPI32 =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASMANCS =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASAPI32 =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASMANCS =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASAPI32 =>PUP.Optional.VidSaver
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASMANCS =>PUP.Optional.VidSaver

---\\ Récapitulatif des éléments trouvées sur votre station (72) - 0s
http://www.nicolascoolman.fr/blog =>Hijacker.Browser
http://www.nicolascoolman.fr/hijacker-browsers/ =>PUP.Optional.Browser
http://www.nicolascoolman.fr/blog =>PUP.Optional.PriceFountain
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/blog =>PUP.Optional.BDYahoo
http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab
http://www.nicolascoolman.fr/pup-sweetpage/ =>PUP.Optional.SweetPage
http://www.nicolascoolman.fr/blog =>PUP.Optional.ChercheUS
http://www.nicolascoolman.fr/pup-shopperpro/ =>PUP.Optional.ShopperPro
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/blog =>PUP.Optional.MediaDownloader
http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverToolkit
http://www.nicolascoolman.fr/adware-expressfiles/ =>PUP.Optional.ExpressFiles
http://www.nicolascoolman.fr/pup-bitguard/ =>PUP.Optional.BitGuard
http://www.nicolascoolman.fr/adware-installbrain/ =>PUP.Optional.InstallBrain
http://www.nicolascoolman.fr/adware-predictad/ =>PUP.Optional.PredictAd
http://www.nicolascoolman.fr/blog =>PUP.Optional.GreatFind
http://www.nicolascoolman.fr/blog =>Toolbar.LayoutExpress
http://www.nicolascoolman.fr/pup-wpmanager/ =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/blog =>PUP.Optional.Heuristic
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/blog =>Toolbar.Agent
http://www.nicolascoolman.fr/blog =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/pup-goobzo/ =>PUP.Optional.Goobzo
http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR
http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/pup-minibar/ =>PUP.Optional.Minibar
http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/pup-sweetim/ =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/blog =>.Superfluous.Uniblue
http://www.nicolascoolman.fr/pup-mindspark/ =>PUP.Optional.MindSpark
http://www.nicolascoolman.fr/hijacker-babsolution/ =>PUP.Optional.BabSolution
http://www.nicolascoolman.fr/pup-filescout/ =>PUP.Optional.FileScout
http://www.nicolascoolman.fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch
http://www.nicolascoolman.fr/pup-specialsavings/ =>PUP.Optional.GamePlayLabs
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/blog =>Toolbar.IncrediMail
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/adware-megasearch/ =>PUP.Optional.MegaSearch
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/trojan-usyndication/ =>PUP.Optional.USyndication
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/adware-shoppingreport/ =>PUP.Optional.ShoppingReport
http://www.nicolascoolman.fr/blog =>Toolbar.AVGSafeGuard
http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/blog =>PUP.Optional.SiteLookup
http://www.nicolascoolman.fr/pup-vittalia/ =>PUP.Optional.Vittalia
http://www.nicolascoolman.fr/adware-socialskinz/ =>PUP.Optional.SocialSkinz
http://www.nicolascoolman.fr/blog =>PUP.Optional.Vosteran
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/trojan-sprotector/ =>Trojan.SProtector
http://www.nicolascoolman.fr/adware-opencandy/ =>PUP.Optional.OpenCandy
http://www.nicolascoolman.fr/blog =>PUP.Optional.SimilarAddon
http://www.nicolascoolman.fr/pup-speedanalysis/ =>PUP.Optional.SpeedAnalysis
http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak
http://www.nicolascoolman.fr/blog =>.Superfluous.CrashReports
http://www.nicolascoolman.fr/pup-mediaget/ =>PUP.Optional.MediaGet
http://www.nicolascoolman.fr/pup-bearshare/ =>PUP.Optional.BearShare
http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine
http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart
http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/hijacker-alnaddy/ =>PUP.Optional.Alnaddy
http://www.nicolascoolman.fr/blog =>Toolbar.AskBar
http://www.nicolascoolman.fr/pup-eorezo/ =>PUP.Optional.EORezo
http://www.nicolascoolman.fr/adware-facemoods/ =>PUP.Optional.Facemoods
http://www.nicolascoolman.fr/blog =>PUP.Optional.FLVPlayer
http://www.nicolascoolman.fr/adware-vidsaver/ =>PUP.Optional.VidSaver

~ End of the scan, 24001 items in 391 seconds (1716)(0)