~ ZHPDiag v2015.11.1.160 Par Nicolas Coolman (2015/11/01) ~ Démarré par wajih (Administrator) (2015/11/02 23:05:16) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\wajih\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\wajih\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601) ---\\ Navigateurs Internet (3) - 0s MFIE: Mozilla Firefox 41.0.2 (x86 fr) v41.0.2 OPIE: Opera 32.0.1948.69 v32.0.1948.69 MSIE: Internet Explorer v10.0.9200.17519 ---\\ Informations sur les produits Windows (4) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ Logiciels de protection (3) - 10s Microsoft Security Client v4.8.0204.0 Microsoft Security Essentials v4.8.204.0 Windows Defender W7 (Deactivate) ---\\ Surveillance de Logiciels (1) - 10s Adobe Flash Player 19 NPAPI ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 1954.36 MB (31% free) ~ System Restore: Activé (Enable) ~ System drive C: has 152 GB free of 236 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: WAJIH-PC ~ User Name: wajih ~ Logged in as Administrator ---\\ Enumération des unités disques (1) - 0s ~ Drive C: has 152 GB free of 236 GB (System) ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 3s [MD5.332FEAB1435662FC6C672E25BEB37BE3] - 25/02/2011 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2871808] © [MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] © [MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] © [MD5.414AD8CBA2595B840DFB880E1D162E81] - 18/09/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2239488] © [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] © [MD5.067FA52BFB59A56110A12312EF9AF243] - 20/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] © [MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] © [MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] © [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 20/11/2010 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] © [MD5.FA886682CFC5D36718D3E436AACF10B9] - 30/05/2014 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [497152] © [MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] © [MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] © [MD5.F036CE71586E93D94DAB220D7BDF4416] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] © [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] © [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] © [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] © [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] © [MD5.ACB6782973BD93760D597FC7BB37E692] - 29/09/2015 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159232] © [MD5.09594D1089C523423B32A4229263F068] - 20/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [261632] © [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - 24/01/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684928] © [MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] © [MD5.471815800AE33E6F1C32FB1B97C490CA] - 20/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] © [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] © [MD5.70988118145F5F10EF24720B97F35F65] - 11/11/2014 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [119296] © [MD5.0D08D2F3B3FF84E433346669B5E0F639] - 20/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] © ---\\ Processus lancés (31) - 3s [MD5.C32D068757D4AD6E4781A78CFFD883E5] - (.Kingsoft Corporation - PC Doctor Service.) -- C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe [290720] [PID.1252] [MD5.5BE101CB8BB688839E9203E827684C41] - (.Kingsoft Corporation - PC Doctor Flow Monitor.) -- C:\Program Files (x86)\Kingsoft\PCDoctor\KSafeTray.exe [742816] [PID.2544] [MD5.64075301E301BD9E62CF8BEA67961D2A] - (.ReviverSoft 2009 - Battery Optimizer is an advanced laptop bat.) -- C:\Program Files\ReviverSoft\Battery Optimizer\BatteryOptimizerService.exe [116608] [PID.940] [MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144] [PID.2440] © [MD5.B90E093E7A7250906F1054418B5339C0] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.2516] © [MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.2688] © [MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240] [PID.1068] © [MD5.76468DF7A7A92413A57C998DE5C39290] - (.Fujitsu Technology Solutions - Testhandler Service.) -- C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264] [PID.2300] © [MD5.843BA5F09A391D52AC1F8486C5FC3D4F] - (.FUJITSU LIMITED - PSUService.) -- C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336] [PID.3132] © [MD5.4D5248427A4FA84885B6A6A869A50C9F] - (...) -- C:\Users\wajih\AppData\Roaming\Frim\frim.exe [3727952] [PID.3448] [MD5.B5622C1549F75A2E2312B59CE2293A09] - (...) -- C:\Program Files (x86)\WebcamMax\wcmmon.exe [1038848] [PID.3468] [MD5.7BB22EED9CFBBADFBC5E27BF8965D10A] - (.FUJITSU LIMITED - FUJ02E3 Utility.) -- C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe [36712] [PID.3496] © [MD5.4AB21A2CCC2100B27960E812CA6D5E19] - (.FUJITSU LIMITED - TrayManager.) -- C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264] [PID.3532] © [MD5.7F432A24FE9B5FA7747ADCDA4BCEFA94] - (.FUJITSU LIMITED - Tableau d’applications LifeBook / Core.) -- C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [157544] [PID.3544] © [MD5.DF808A60C0D1CDE231AFC90C53A80B9E] - (.FUJITSU LIMITED - Button handler.) -- C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [35176] [PID.3568] © [MD5.0D7CF635D9888072015EBE3B232DFB99] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352] [PID.3616] © [MD5.7B7BF7BB3A579630837839641F4BE374] - (.CSR, plc - Bluetooth FTP Server.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe [463264] [PID.3736] © [MD5.8602E6D9DAB2277CC1F899567FE70DF9] - (.FUJITSU LIMITED - Button handler KB assistant.) -- C:\Program Files\Fujitsu\Application Panel\BtnHndHkb.exe [18792] [PID.3856] © [MD5.86E5BAD9BD1D96ADD3EE76F87968138B] - (.CSR, plc - Skype Handsfree Support.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe [431504] [PID.3888] © [MD5.3BFF9166862DD2C265C09A4682146415] - (.CSR, plc - Bluetooth Audio Configuration Monitor.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe [535440] [PID.3920] © [MD5.90B36E644133123AA3498DB88B841D6B] - (.CSR, plc - Bluetooth Image Push Responder.) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBipPushResponder.exe [419752] [PID.3936] © [MD5.A93F6D00702900137E4C97C17B01A600] - (.FUJITSU LIMITED - Fujitsu Display Manager.) -- C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712] [PID.3996] © [MD5.AF5B5054A9C86CF263781C588FA98A2C] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe [74752] [PID.3240] © [MD5.30DBD9CB0156FBC5EE9D76E32FCE769D] - (.FUJITSU LIMITED - Fujitsu Hotkey Utility.) -- C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [47976] [PID.3232] © [MD5.027D0500A592CAED765B9E450129D89E] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe [79192] [PID.2228] © [MD5.14DCA74CB34502CA919966F31FBB8B0D] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] [PID.2488] © [MD5.7248A2EF6E21DFE7D85E2361D48AB5EE] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [510488] [PID.4052] © [MD5.2E1050C0D0E2A75F51A638C9656FEDE4] - (.Speedbit Ltd - .) -- C:\Users\wajih\AppData\Local\Temp\Stub\-1924214366\sbw.exe [5041800] [PID.3060] [MD5.24500CBACBA4549C5316B23805551C87] - (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152] [PID.3676] [MD5.B29A923496E0E73B5DE2DD261018DD1A] - (.Speedbit Ltd. - SpeedBit Update Service.) -- C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2531488] [PID.5108] © [MD5.26FFDA193A05A3D921223AE58A00F258] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\wajih\Downloads\ZHPDiag3.exe [1963520] [PID.4824] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (1) - 0s G2 - GCE: Preference [User Data\Default] [kbhplonhjleiopohgmppianogioknked] ["update_url" : "https://dl.addonupdater.com/zulaga] New Tab Launch ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (15) - 2s M0 - MFSP: prefs.js [wajih - gava9wkc.default-1434493557482] http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFc10MV1wURBgXIVoATA1HR1cOeFteBxRFEVQWcg8ABwxGF1MFIk0FA18DB0VXfWFoKB8fHHJRJVhMJ1AfRQ== =>PUP.Optional.Browser P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\defsearchp@gmail.com.xpi =>PUP.Optional.PriceFountain P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\jid1-e3wSQaH5t1HqKp@jetpack.xpi P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\jid1-qj0w91o64N7Eeg@jetpack.xpi P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\manishjain9@hotmail.com_easiestyoutube.xpi P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\vdpure@link64.xpi P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\default.xml P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\istartsurf.xml =>PUP.Optional.IsStart P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\speedbit.xml P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo-lavasoft.xml P2 - EXT FILE: (...) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} © P2 - EXT: (.lightningnewtab.com - deskCut.) -- C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll © P2 - FPN: [HKLM] [@popularscreensavers.com/Plugin] - (.Popular Screensavers.) -- C:\Program Files (x86)\PopularScreensavers\NPp5Stub.dll ---\\ Opera, Démarrage,Recherche,Plugins (1) - 0s B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\wajih\AppData\Roaming\Opera Software\Opera Stable\Extensions\pdjpcnnkcejbglbpfhkcabckbloogjli ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (22) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.speedbit.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.ChatVibes.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.cherche.us =>PUP.Optional.ChercheUS R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://go.speedbit.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://go.speedbit.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/ =>PUP.Optional.IsStart R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.istartsurf.com/ =>PUP.Optional.IsStart R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (1) - 0s O2 - BHO: ShopperProBHO [64Bits] - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} . (...) -- C:\ProgramData\ShopperPro\ShopperPro.dll (.not file.) =>PUP.Optional.ShopperPro ---\\ Internet Explorer, Barre d'outil (3) - 0s O3 - Toolbar: 0x5BC3E6EE1861DC119C72001320C79847 - [HKCU]{EEE6C35B-6118-11DC-9C72-001320C79847} . (...) -- (.not file.) O3 - Toolbar: Babylon Toolbar - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} . (...) -- (.not file.) =>PUP.Optional.Babylon O3 - Toolbar: 0x00 - [HKLM]{0329E7D6-6F54-462D-93F6-F5C3118BADF2} . (.Copyright © 2001-2011. All rights reserved. - IE Toolbar Engine.) -- C:\Program Files (x86)\SPEEDbit Video Downloader\Toolbar\tbcore3.dll ---\\ Applications lancées au démarrage du système (10) - 0s O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe © O4 - HKCU\..\Run: [VideoDownloaderUltimate] C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe (.not file.) O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] . (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe O4 - HKLM\..\Wow6432Node\Run: [KSafeTray] . (.Kingsoft Corporation - PC Doctor Flow Monitor.) -- C:\Program files (x86)\Kingsoft\PCDoctor\KSafeTray.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-21-2597295877-1529606943-2291870144-1000\..\Run: [VideoDownloaderUltimate] C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe (.not file.) O4 - HKUS\S-1-5-21-2597295877-1529606943-2291870144-1000\..\Run: [SpeedBitVideoAccelerator] . (.SPEEDbit - .) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe ---\\ Raccourcis Global Startup (1) - 13s O4 - GS\CommonDesktop [Public]: Media Downloader.lnk . (...) C:\Program Files (x86)\Media Downloader\MediaDownloader.hta =>PUP.Optional.MediaDownloader ---\\ Modification Domaine/Adresses DNS (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel (21) - 0s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll © O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © ---\\ Liste des services NT non Microsoft et non désactivés (4) - 0s O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © O23 - Service: KSafe service (KSafeSvc) . (.Kingsoft Corporation - PC Doctor Service.) - C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe O23 - Service: SpeedBit Update (SBUpd) . (.Speedbit Ltd. - SpeedBit Update Service.) - C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe © O23 - Service: VideoAcceleratorService (VideoAcceleratorService) . (.SPEEDbit - .) - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe ---\\ Tâches planifiées en automatique (49) - 12s [MD5.8C194A201698B4B4F77D974549819D1F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269000] © [MD5.00000000000000000000000000000000] [APT] [avast! Emergency Update] (...) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [DriverToolkit Autorun] (...) -- C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe (.not file.) [0] =>PUP.Optional.DriverToolkit [MD5.00000000000000000000000000000000] [APT] [Express Files Updater] (...) -- C:\Program Files (x86)\ExpressFiles\EFupdater.exe (.not file.) [0] =>PUP.Optional.ExpressFiles [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core] (.Facebook Inc..) -- C:\Users\wajih\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA] (.Facebook Inc..) -- C:\Users\wajih\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.5BE101CB8BB688839E9203E827684C41] [APT] [KsafeDelay] (.Kingsoft Corporation.) -- C:\Program Files (x86)\Kingsoft\PCDoctor\KSafeTray.exe [742816] [MD5.4C2B66A8573E38C530F3D6FCF996125A] [APT] [Launch 21769] (.SPEEDbit.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [1517224] [MD5.C8E6653F8C6B9A92370541B632CCDCE2] [APT] [Opera scheduled Autoupdate 1413941032] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [955512] © [MD5.00000000000000000000000000000000] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0] [MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] © [MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] © [MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] © [MD5.12E910B6B2FEB81F859EB62ED032DB8E] [APT] [RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [140800] © [MD5.00000000000000000000000000000000] [APT] [UNELEVATE_29408] (...) -- C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1425\jsdrv.exe (.not file.) [0] =>PUP.Optional.ShopperPro [MD5.00000000000000000000000000000000] [APT] [YTAUpdate] (...) -- C:\PROGRA~2\YouTube Accelerator\Updater.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [YTAUpdate_logon] (...) -- C:\PROGRA~2\YouTube Accelerator\Updater.exe (.not file.) [0] [MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{1FDA2FB6-1B31-4EE5-86E5-07AF83D8E670}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] © [MD5.01E5B25A973BEA364CA745C3B5658434] [APT] [{6E03B8F3-1541-4160-8515-C8D8CAE50638}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568] © [MD5.00000000000000000000000000000000] [APT] [{A79C2DEA-0656-4FA7-9D9F-300F2BF92301}] (...) -- C:\Users\wajih\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) [0] [MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{F42486E7-D552-485F-82A7-34C507680D67}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] © [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] © [MD5.00000000000000000000000000000000] [APT] [Lenovo\Lenovo Customer Feedback Program 64 35] (...) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe (.not file.) [0] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] © O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\Tasks\DriverToolkit Autorun.job [358] =>PUP.Optional.DriverToolkit O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core.job [906] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA.job [928] © O39 - APT: KsafeDelay - (.Kingsoft Corporation.) -- C:\Windows\Tasks\KsafeDelay.job [294] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] © O39 - APT: avast! Emergency Update - (...) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\System32\Tasks\DriverToolkit Autorun [2714] =>PUP.Optional.DriverToolkit O39 - APT: Express Files Updater - (...) -- C:\Windows\System32\Tasks\Express Files Updater [3082] =>PUP.Optional.ExpressFiles O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000Core [3536] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2597295877-1529606943-2291870144-1000UA [3904] © O39 - APT: KsafeDelay - (.Kingsoft Corporation.) -- C:\Windows\System32\Tasks\KsafeDelay [3166] O39 - APT: Launch 21769 - (.SPEEDbit.) -- C:\Windows\System32\Tasks\Launch 21769 [2988] O39 - APT: Opera scheduled Autoupdate 1413941032 - (.Opera Software.) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1413941032 [3856] © O39 - APT: RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3382] O39 - APT: RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3228] O39 - APT: RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (...) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3362] O39 - APT: RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3206] © O39 - APT: RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3340] © O39 - APT: RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3206] © O39 - APT: RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2597295877-1529606943-2291870144-1000 [3340] © O39 - APT: UNELEVATE_29408 - (...) -- C:\Windows\System32\Tasks\UNELEVATE_29408 [3162] =>PUP.Optional.ShopperPro O39 - APT: YTAUpdate - (...) -- C:\Windows\System32\Tasks\YTAUpdate [3468] O39 - APT: YTAUpdate_logon - (...) -- C:\Windows\System32\Tasks\YTAUpdate_logon [3282] ---\\ Logiciels installés (89) - 14s O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client © O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey © O42 - Logiciel: Windows Media Player 64-bit Plug-in Fix - (...) [HKLM][64Bits] -- {00a8ce68-cb2e-4652-aecd-c05c0d9d53a7}.sdb O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F} © O42 - Logiciel: IB Updater 2.0.0.110 - (.IncrediBar.) [HKLM][64Bits] -- {336D0C35-8A85-403a-B9D2-65C292C39087}_is1 =>PUP.Optional.InstallBrain O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {439760BC-7737-4386-9B1D-A90A3E8A22EA} © O42 - Logiciel: LifeBook Application Panel - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {6226477E-444F-4DFE-BA19-9F4F7D4565BC} © O42 - Logiciel: Power Saving Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {7254349B-460B-488F-B4DB-A96100C5C48B} © O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} © O42 - Logiciel: Bluetooth Feature Pack 5.0 - (.CSR Plc..) [HKLM][64Bits] -- {B2F4C332-2359-4ADE-AF0C-C631768BBB89} O42 - Logiciel: WinZip 18.5 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240E3} © O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6} © O42 - Logiciel: Fujitsu System Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {E8A5B78F-4456-4511-AB3D-E7BFFB974A7A} © O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI © O42 - Logiciel: AutocompletePro - (...) [HKLM][64Bits] -- AutocompletePro3_is1 =>PUP.Optional.PredictAd O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (...) [HKLM][64Bits] -- ffdshow_is1 O42 - Logiciel: FilesFrog Update Checker - (...) [HKLM][64Bits] -- FilesFrog Update Checker O42 - Logiciel: Frim 2.0 - (.ООО 'MoCo Media'.) [HKLM][64Bits] -- Frim O42 - Logiciel: Great Find - (.Great Find.) [HKLM][64Bits] -- Great Find =>PUP.Optional.GreatFind O42 - Logiciel: Haali Media Splitter - (...) [HKLM][64Bits] -- HaaliMkx O42 - Logiciel: Fujitsu Display Manager - (...) [HKLM][64Bits] -- InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691} O42 - Logiciel: LifeBook Application Panel - (...) [HKLM][64Bits] -- InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC} O42 - Logiciel: Power Saving Utility - (...) [HKLM][64Bits] -- InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B} O42 - Logiciel: Fujitsu Hotkey Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387} © O42 - Logiciel: Fujitsu System Extension Utility - (...) [HKLM][64Bits] -- InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A} O42 - Logiciel: Fujitsu MobilityCenter Extension Utility - (...) [HKLM][64Bits] -- InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814} O42 - Logiciel: Kingsoft PC Doctor 3.7.0.47 - (.Kingsoft PC Doctor.) [HKLM][64Bits] -- Kingsoft PC Doctor O42 - Logiciel: LayoutsExpress - (...) [HKLM][64Bits] -- LayoutsExpress =>Toolbar.LayoutExpress O42 - Logiciel: Media Downloader version 1.5 - (.Media Downloader.) [HKLM][64Bits] -- Media Downloader_is1 =>PUP.Optional.MediaDownloader O42 - Logiciel: Mozilla Firefox 41.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 41.0.2 (x86 fr) © O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService © O42 - Logiciel: Opera Stable 32.0.1948.69 - (.Opera Software.) [HKLM][64Bits] -- Opera 32.0.1948.69 © O42 - Logiciel: SpeedBit Video Accelerator - (.SpeedBit Ltd..) [HKLM][64Bits] -- SpeedBit Video Accelerator © O42 - Logiciel: SpeedBit Video Downloader - (.SPEEDbit Ltd..) [HKLM][64Bits] -- SPEEDbit Video Downloader © O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player © O42 - Logiciel: WebcamMax - (.COOLWAREMAX.) [HKLM][64Bits] -- WebcamMax O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp © O42 - Logiciel: WindowsMangerProtect20.0.0.1013 - (.WindowsProtect LIMITED.) [HKLM][64Bits] -- WindowsMangerProtect =>PUP.Optional.WpManager O42 - Logiciel: Xvid Video Codec - (.Xvid Team.) [HKLM][64Bits] -- Xvid Video Codec 1.3.1 © O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM][64Bits] -- Yahoo! Messenger © O42 - Logiciel: Yahoo! Software Update - (...) [HKLM][64Bits] -- Yahoo! Software Update O42 - Logiciel: Feedback Tool - (.Microsoft Corporation.) [HKLM][64Bits] -- {13A5E785-5197-4EAD-8EE3-D660271E49BC} © O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM][64Bits] -- {20400dbd-e6db-45b8-9b6b-1dd7033818ec} © O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} © O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM][64Bits] -- {2348b586-c9ae-46ce-936c-a68e9426e214} © O42 - Logiciel: Java 8 Update 45 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218045F0} © O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} © O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM][64Bits] -- {33cf58f5-48d8-4575-83d6-96f574e4d83a} © O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM][64Bits] -- {4D43D635-6FDA-4fa5-AA9B-23CF73D058EA} © O42 - Logiciel: Complitly - (.Complitly.) [HKLM][64Bits] -- {4FFBB818-B13C-11E0-931D-B2664824019B}_is1 =>PUP.Optional.PredictAd O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} © O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM][64Bits] -- {585fd044-f3c6-4c09-a58c-a3e4e4c916be} © O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} © O42 - Logiciel: Nero CoverDesigner - (.Nero AG.) [HKLM][64Bits] -- {62ac81f6-bdd3-4110-9d36-3e9eaab40999} © O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} © O42 - Logiciel: Battery Optimizer - (.ReviverSoft.) [HKLM][64Bits] -- {67E321F8-2A04-44AB-8F28-A88A5F66732A} © O42 - Logiciel: Windows Media Player Plus! 2.6 - (.BM-productions.) [HKLM][64Bits] -- {67E4EF06-E0D6-42E0-A2BA-67199B0143FB}_is1 © O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} © O42 - Logiciel: Skype™ 7.12 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} © O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748ac8c-18e3-43bb-959b-088faea16fb2} © O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {7829db6f-a066-4e40-8912-cb07887c20bb} © O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} © O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} © O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM][64Bits] -- {869200db-287a-4dc0-b02b-2b6787fbcd4c} © O42 - Logiciel: Feedback Tool - (.Microsoft Corporation.) [HKLM][64Bits] -- {90024193-9F13-4877-89D5-A1CDF0CBBF28} © O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} © O42 - Logiciel: Conseiller de mise à niveau vers Windows 7 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D10CB57-B085-44c3-B435-2D193BA153F0} © O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {b2ec4a38-b545-4a00-8214-13fe0e915e6d} © O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} © O42 - Logiciel: Fujitsu Hotkey Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {BA0CC975-682B-4678-A35C-05E607F36387} © O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {bd5ca0da-71ad-43da-b19e-6eee0c9adc9a} © O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} © O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {cc019e3f-59d2-4486-8d4b-878105b62a71} © O42 - Logiciel: Nero CoverDesigner Help - (.Nero AG.) [HKLM][64Bits] -- {ce96f5a5-584d-4f8f-aa3e-9baed413db72} © O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {e5c7d048-f9b4-4219-b323-8bdb01a2563d} © O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {e8a80433-302b-4ff1-815d-fcc8eac482ff} © O42 - Logiciel: Data Client - (.DistributedData.net.) [HKLM][64Bits] -- {E8FE4389-9EC5-42A0-8FEA-ED530145205D} O42 - Logiciel: SystemDiagnostics - (.Fujitsu Technology Solutions.) [HKLM][64Bits] -- {EF59DB7F-7426-426E-B862-7031F83ED304} © O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} © O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} © O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {f4041dce-3fe1-4e18-8a9e-9de65231ee36} © O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} © O42 - Logiciel: Nero BurnRights Help - (.Nero AG.) [HKLM][64Bits] -- {f6bdd7c5-89ed-4569-9318-469aa9732572} © O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM][64Bits] -- {fbcdfd61-7dcf-4e71-9226-873ba0053139} © O42 - Logiciel: fTalk - (.Koyote-Lab Inc.) [HKCU][64Bits] -- fTalk O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- SkyDriveSetup.exe © O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer © O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU][64Bits] -- Winamp Detect © ---\\ HKCU & HKLM Software Keys (238) - 14s HKLM\SOFTWARE\Wow6432Node\5e28fd0b66fb849 =>PUP.Optional.Heuristic HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AppDataLow HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\Audible HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\BM-productions HKLM\SOFTWARE\Wow6432Node\CDDB HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Default Tab =>Toolbar.Agent HKLM\SOFTWARE\Wow6432Node\DistributedData.net HKLM\SOFTWARE\Wow6432Node\ej-technologies HKLM\SOFTWARE\Wow6432Node\Eset HKLM\SOFTWARE\Wow6432Node\ExpressFiles =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\Freemake HKLM\SOFTWARE\Wow6432Node\Fujitsu HKLM\SOFTWARE\Wow6432Node\GN2 HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\GreatFind =>PUP.Optional.GreatFind HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\IB Updater =>PUP.Optional.InstallBrain HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster HKLM\SOFTWARE\Wow6432Node\IncrediMail HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\Internet Download Manager HKLM\SOFTWARE\Wow6432Node\IPCameraDSFilter HKLM\SOFTWARE\Wow6432Node\IPCameraDSFilterRTSP HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware =>PUP.Optional.IsStart HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\KasperskyLab HKLM\SOFTWARE\Wow6432Node\KSafe HKLM\SOFTWARE\Wow6432Node\Lavasoft HKLM\SOFTWARE\Wow6432Node\LEAD Technologies, Inc. HKLM\SOFTWARE\Wow6432Node\Lenovo HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial) HKLM\SOFTWARE\Wow6432Node\McAfee.com HKLM\SOFTWARE\Wow6432Node\mcafeeupdater HKLM\SOFTWARE\Wow6432Node\MimarSinan HKLM\SOFTWARE\Wow6432Node\Minibar =>PUP.Optional.Minibar HKLM\SOFTWARE\Wow6432Node\Mircrosoft HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\Nero HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing HKLM\SOFTWARE\Wow6432Node\Nullsoft HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Odigo HKLM\SOFTWARE\Wow6432Node\PCWinSoft HKLM\SOFTWARE\Wow6432Node\PopularScreensavers HKLM\SOFTWARE\Wow6432Node\PopularScreensavers_7i HKLM\SOFTWARE\Wow6432Node\PTECH HKLM\SOFTWARE\Wow6432Node\RBPlus HKLM\SOFTWARE\Wow6432Node\RealNetworks HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Reg HKLM\SOFTWARE\Wow6432Node\ReviverSoft HKLM\SOFTWARE\Wow6432Node\RichFX HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro HKLM\SOFTWARE\Wow6432Node\SimplyGen =>PUP.Optional.PredictAd HKLM\SOFTWARE\Wow6432Node\SiteSee HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SoftAssist HKLM\SOFTWARE\Wow6432Node\SpeedBit HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\supWPM =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM HKLM\SOFTWARE\Wow6432Node\Symantec HKLM\SOFTWARE\Wow6432Node\TuneUp HKLM\SOFTWARE\Wow6432Node\Uniblue =>.Superfluous.Uniblue HKLM\SOFTWARE\Wow6432Node\VDownloader HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\WeatherBlink =>PUP.Optional.MindSpark HKLM\SOFTWARE\Wow6432Node\WebcamMax HKLM\SOFTWARE\Wow6432Node\WebToGo HKLM\SOFTWARE\Wow6432Node\Windows HKLM\SOFTWARE\Wow6432Node\Winner Casino HKLM\SOFTWARE\Wow6432Node\wLite HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp. HKLM\SOFTWARE\Wow6432Node\Xvid Team HKLM\SOFTWARE\Wow6432Node\Yahoo HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\3Dsolar HKCU\SOFTWARE\5e28fd0b66fb849 =>PUP.Optional.Heuristic HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Affinix HKCU\SOFTWARE\AlterGeo HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\AutocompletePro =>PUP.Optional.PredictAd HKCU\SOFTWARE\AutocompleteProBHO =>PUP.Optional.PredictAd HKCU\SOFTWARE\Avg HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution HKCU\SOFTWARE\Badoo HKCU\SOFTWARE\Binary Noise HKCU\SOFTWARE\BM-productions HKCU\SOFTWARE\BrowserTemp HKCU\SOFTWARE\Cambridge Silicon Radio HKCU\SOFTWARE\Camfrog HKCU\SOFTWARE\CDDB HKCU\SOFTWARE\Complitly =>PUP.Optional.PredictAd HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Datamngr =>PUP.Optional.Datamngr HKCU\SOFTWARE\DataMngr_Toolbar =>PUP.Optional.Datamngr HKCU\SOFTWARE\Datastead HKCU\SOFTWARE\Default Tab =>Toolbar.Agent HKCU\SOFTWARE\DistributedData HKCU\SOFTWARE\DownloadAstro HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\DriverToolkit =>PUP.Optional.DriverToolkit HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles HKCU\SOFTWARE\Facebook HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout HKCU\SOFTWARE\FreeDownloadManager.ORG HKCU\SOFTWARE\Freemake HKCU\SOFTWARE\fTalk HKCU\SOFTWARE\Fujitsu HKCU\SOFTWARE\FunWebProducts =>PUP.Optional.MyWebSearch HKCU\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate HKCU\SOFTWARE\GN2 HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo HKCU\SOFTWARE\Google HKCU\SOFTWARE\GotClip Downloader HKCU\SOFTWARE\Haali HKCU\SOFTWARE\HookNetwork HKCU\SOFTWARE\HowardMedia HKCU\SOFTWARE\IM HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail HKCU\SOFTWARE\InstallCore =>Adware.InstallCore HKCU\SOFTWARE\Intel HKCU\SOFTWARE\IPCameraDSFilter HKCU\SOFTWARE\IPCameraDSFilterRTSP HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\KasperskyLab HKCU\SOFTWARE\Kingsoft HKCU\SOFTWARE\KSafe HKCU\SOFTWARE\Lenovo HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Link64 HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\ManyCam HKCU\SOFTWARE\Massive Media HKCU\SOFTWARE\McAfee HKCU\SOFTWARE\MimarSinan HKCU\SOFTWARE\Minibar =>PUP.Optional.Minibar HKCU\SOFTWARE\mIRC HKCU\SOFTWARE\Moco HKCU\SOFTWARE\MoveNetworks HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MySpace HKCU\SOFTWARE\NCH Software HKCU\SOFTWARE\Nero HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Nico Mak Computing HKCU\SOFTWARE\Nitro PDF HKCU\SOFTWARE\Norton HKCU\SOFTWARE\OB HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PopularScreensavers_7i HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\RealNetworks HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\Reg HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\SBCONVERT HKCU\SOFTWARE\SecureMedia HKCU\SOFTWARE\ShiningMorning HKCU\SOFTWARE\Skyhook Wireless HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\SolidDocuments HKCU\SOFTWARE\Somoto =>PUP.Optional.MegaSearch HKCU\SOFTWARE\SpeedBit HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\TeleCharger HKCU\SOFTWARE\Tific HKCU\SOFTWARE\Toggle HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\TuneUp HKCU\SOFTWARE\undefined HKCU\SOFTWARE\Unity HKCU\SOFTWARE\USyndication =>PUP.Optional.USyndication HKCU\SOFTWARE\usyndication.com =>PUP.Optional.USyndication HKCU\SOFTWARE\Viber HKCU\SOFTWARE\WeatherBlink =>PUP.Optional.MindSpark HKCU\SOFTWARE\webcam 7 HKCU\SOFTWARE\webcamXP HKCU\SOFTWARE\Winamp HKCU\SOFTWARE\Winner Casino HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\WinZip Computing HKCU\SOFTWARE\wLite HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\Yahoo HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\Fun Web Products =>PUP.Optional.MyWebSearch HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\PopularScreensavers_7i HKCU\SOFTWARE\AppDataLow\Software\RealNetworks HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport HKCU\SOFTWARE\AppDataLow\Software\Unity HKCU\SOFTWARE\AppDataLow\Software\WeatherBlink =>PUP.Optional.MindSpark HKCU\SOFTWARE\AppDataLow\Software\Yahoo ---\\ Contenu des dossiers Programmes (669) - 34s O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\ABC 3GP Converter O43 - CFD: 03/02/2011 - [] D -- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites O43 - CFD: 17/05/2015 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Apple Software Update O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\AutocompletePro =>PUP.Optional.PredictAd O43 - CFD: 25/10/2013 - [] D -- C:\Program Files (x86)\AVG O43 - CFD: 25/10/2013 - [] D -- C:\Program Files (x86)\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard O43 - CFD: 31/01/2012 - [0] D -- C:\Program Files (x86)\Camfrog O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 22/11/2011 - [] D -- C:\Program Files (x86)\Complitly =>PUP.Optional.PredictAd O43 - CFD: 08/04/2012 - [] D -- C:\Program Files (x86)\Conduit O43 - CFD: 14/06/2014 - [] D -- C:\Program Files (x86)\DAP O43 - CFD: 15/08/2014 - [] D -- C:\Program Files (x86)\DistributedData O43 - CFD: 09/11/2014 - [] D -- C:\Program Files (x86)\DriverToolkit =>PUP.Optional.DriverToolkit O43 - CFD: 04/02/2011 - [] D -- C:\Program Files (x86)\Feedback Tool O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\ffdshow O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\FilesFrog Update Checker =>PUP.Optional.MegaSearch O43 - CFD: 24/10/2013 - [] D -- C:\Program Files (x86)\Free Download Manager O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Freemake O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Fujitsu O43 - CFD: 15/07/2014 - [] D -- C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate O43 - CFD: 30/06/2014 - [] D -- C:\Program Files (x86)\Google O43 - CFD: 16/09/2015 - [] D -- C:\Program Files (x86)\Great Find =>PUP.Optional.GreatFind O43 - CFD: 24/10/2013 - [] D -- C:\Program Files (x86)\GUM1CB4.tmp O43 - CFD: 20/02/2013 - [] D -- C:\Program Files (x86)\GUMFDFD.tmp O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Haali O43 - CFD: 11/01/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Internet Download Manager O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 17/05/2015 - [] D -- C:\Program Files (x86)\Java O43 - CFD: 19/08/2014 - [] D -- C:\Program Files (x86)\Kingsoft O43 - CFD: 08/11/2012 - [] D -- C:\Program Files (x86)\LayoutsExpress =>Toolbar.LayoutExpress O43 - CFD: 01/11/2015 - [0] D -- C:\Program Files (x86)\Lenovo O43 - CFD: 31/10/2015 - [] D -- C:\Program Files (x86)\Media Downloader =>PUP.Optional.MediaDownloader O43 - CFD: 14/03/2012 - [0] D -- C:\Program Files (x86)\Microsoft O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 16/05/2015 - [] D -- C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 14/08/2015 - [] D -- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Microsoft SkyDrive O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor O43 - CFD: 22/12/2010 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 08/11/2012 - [] D -- C:\Program Files (x86)\Minibar =>PUP.Optional.Minibar O43 - CFD: 13/06/2014 - [] D -- C:\Program Files (x86)\Mobogenie =>PUP.Optional.Mobogenie O43 - CFD: 16/10/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 16/10/2015 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\MSECache O43 - CFD: 16/12/2010 - [0] D -- C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\MyPC Backup =>PUP.Optional.MyPCBackup O43 - CFD: 28/02/2012 - [0] D -- C:\Program Files (x86)\MySpace O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Nero O43 - CFD: 24/01/2015 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information O43 - CFD: 19/10/2015 - [] D -- C:\Program Files (x86)\Opera O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\PopularScreensavers O43 - CFD: 01/05/2014 - [] D -- C:\Program Files (x86)\Real O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 16/11/2011 - [] D -- C:\Program Files (x86)\Safari O43 - CFD: 13/11/2011 - [] D -- C:\Program Files (x86)\ScreenCamera O43 - CFD: 26/10/2013 - [] D -- C:\Program Files (x86)\SearchPredict O43 - CFD: 13/08/2014 - [0] D -- C:\Program Files (x86)\SiteLookup =>PUP.Optional.SiteLookup O43 - CFD: 17/10/2015 - [] RD -- C:\Program Files (x86)\Skype O43 - CFD: 14/08/2014 - [0] D -- C:\Program Files (x86)\Software Informer O43 - CFD: 13/08/2014 - [] D -- C:\Program Files (x86)\Songbird O43 - CFD: 02/11/2015 - [] D -- C:\Program Files (x86)\SpeedBit Video Accelerator O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\SPEEDbit Video Downloader O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab O43 - CFD: 22/11/2010 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 01/05/2011 - [] D -- C:\Program Files (x86)\Uniblue =>.Superfluous.Uniblue O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 29/03/2011 - [] D -- C:\Program Files (x86)\VDownloader O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 25/10/2012 - [0] D -- C:\Program Files (x86)\Vittalia =>PUP.Optional.Vittalia O43 - CFD: 26/08/2011 - [] D -- C:\Program Files (x86)\Webcamfirst test -v4- O43 - CFD: 26/01/2015 - [] D -- C:\Program Files (x86)\WebcamMax O43 - CFD: 31/01/2012 - [] D -- C:\Program Files (x86)\webcamXP 5 O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\Webplayer Setup =>PUP.Optional.SocialSkinz O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Winamp O43 - CFD: 12/11/2012 - [] D -- C:\Program Files (x86)\Winamp Detect O43 - CFD: 13/07/2013 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 11/04/2013 - [] D -- C:\Program Files (x86)\Windows Live O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 11/06/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Windows Media Player Plus! O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 04/07/2011 - [] D -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 12/10/2012 - [0] D -- C:\Program Files (x86)\WinRAR O43 - CFD: 24/01/2015 - [] D -- C:\Program Files (x86)\WSE_Vosteran =>PUP.Optional.Vosteran O43 - CFD: 18/04/2014 - [] D -- C:\Program Files (x86)\Xvid O43 - CFD: 01/10/2014 - [] D -- C:\Program Files (x86)\Yahoo! O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\YouTube Accelerator O43 - CFD: 18/10/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 22/12/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Feature Pack 5.0 O43 - CFD: 15/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Distributed Data O43 - CFD: 26/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow O43 - CFD: 14/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frim O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu Display Manager O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 26/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter O43 - CFD: 11/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft PC Doctor O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 31/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Downloader =>PUP.Optional.MediaDownloader O43 - CFD: 14/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 14/11/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Power Saving Utility O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 22/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft O43 - CFD: 21/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenCamera O43 - CFD: 17/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 02/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedBit Video Accelerator O43 - CFD: 01/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SPEEDbit Video Downloader O43 - CFD: 17/05/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tableau d’applications LifeBook O43 - CFD: 10/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 06/11/2014 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visicom Media O43 - CFD: 26/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebcamMax O43 - CFD: 31/01/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\webcamXP 5 O43 - CFD: 04/06/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp O43 - CFD: 16/08/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 01/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip O43 - CFD: 18/04/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid O43 - CFD: 02/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger O43 - CFD: 30/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator O43 - CFD: 30/11/2013 - [] D -- C:\ProgramData\Adobe O43 - CFD: 21/02/2011 - [] D -- C:\ProgramData\Alwil Software O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\APN =>Toolbar.Ask O43 - CFD: 30/09/2011 - [] D -- C:\ProgramData\Apple O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 10/11/2014 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 25/10/2013 - [] D -- C:\ProgramData\AVG2013 O43 - CFD: 25/10/2012 - [] D -- C:\ProgramData\Avira O43 - CFD: 02/02/2012 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon O43 - CFD: 02/10/2013 - [] D -- C:\ProgramData\BitGuard =>PUP.Optional.BitGuard O43 - CFD: 25/08/2012 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\C__Program Files (x86)_WebcamMax_wcmmon.exe O43 - CFD: 26/01/2015 - [] D -- C:\ProgramData\C__Program Files (x86)_WebcamMax_WebcamMax.exe O43 - CFD: 07/10/2015 - [] D -- C:\ProgramData\d64c6aa4-9b30-4b06-8859-0cfa31bd50dc O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 13/01/2013 - [] D -- C:\ProgramData\Free Download Manager O43 - CFD: 01/11/2015 - [0] D -- C:\ProgramData\Freemake O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Fujitsu O43 - CFD: 27/09/2013 - [] D -- C:\ProgramData\IBUpdaterService =>PUP.Optional.InstallBrain O43 - CFD: 10/11/2014 - [] D -- C:\ProgramData\IePluginServices =>Trojan.SProtector O43 - CFD: 24/07/2015 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\install_clap O43 - CFD: 10/11/2011 - [0] D -- C:\ProgramData\IVS O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\Kingsoft O43 - CFD: 19/08/2014 - [] D -- C:\ProgramData\KSafe O43 - CFD: 03/12/2012 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 16/03/2011 - [] D -- C:\ProgramData\McAfee O43 - CFD: 25/10/2013 - [] D -- C:\ProgramData\MFAData O43 - CFD: 11/02/2015 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 22/12/2010 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 12/11/2012 - [] D -- C:\ProgramData\Microsoft SkyDrive O43 - CFD: 25/10/2012 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 19/08/2015 - [] D -- C:\ProgramData\MWinManProM O43 - CFD: 26/08/2011 - [] D -- C:\ProgramData\NCH Software O43 - CFD: 14/11/2012 - [] D -- C:\ProgramData\Nero O43 - CFD: 04/06/2011 - [] D -- C:\ProgramData\Nitro PDF O43 - CFD: 17/05/2015 - [] D -- C:\ProgramData\Norton O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 17/05/2015 - [] D -- C:\ProgramData\Oracle O43 - CFD: 22/11/2010 - [] D -- C:\ProgramData\Partner =>Toolbar.YahooPartner O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\Real O43 - CFD: 10/11/2013 - [0] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 04/05/2015 - [0] D -- C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro O43 - CFD: 17/10/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 24/10/2013 - [] D -- C:\ProgramData\Skype Extras O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\SpeedBit O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 26/11/2010 - [] D -- C:\ProgramData\Sun O43 - CFD: 11/01/2015 - [] D -- C:\ProgramData\SUPPORTDIR O43 - CFD: 01/11/2015 - [] AD -- C:\ProgramData\Temp O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 21/10/2014 - [] D -- C:\ProgramData\TuneUp Software O43 - CFD: 06/11/2014 - [0] D -- C:\ProgramData\Visicom Media O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\VOWSoft O43 - CFD: 18/03/2015 - [] D -- C:\ProgramData\WebcamMax O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\webcamXP 5 O43 - CFD: 01/10/2014 - [] D -- C:\ProgramData\WinZip O43 - CFD: 02/01/2014 - [] D -- C:\ProgramData\Yahoo! O43 - CFD: 21/10/2014 - [0] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 24/01/2015 - [] D -- C:\ProgramData\{E88F004C-B80D-D1CA-098B-A148D90972C6} O43 - CFD: 21/10/2014 - [0] SHD -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} O43 - CFD: 30/11/2013 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 19/08/2014 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\Common Files\d64c6aa4-9b30-4b06-8859-0cfa31bd50dc O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Fujitsu O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Intel O43 - CFD: 14/06/2014 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 15/08/2014 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Common Files\Nero O43 - CFD: 14/11/2012 - [] D -- C:\Program Files (x86)\Common Files\PC Tools O43 - CFD: 22/11/2010 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 30/11/2013 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 17/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 13/07/2011 - [] D -- C:\Program Files (x86)\Common Files\SpeedBit O43 - CFD: 21/02/2011 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 10/11/2011 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 26/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 10/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Adobe O43 - CFD: 09/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Apple Computer O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\AVG2013 O43 - CFD: 02/02/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Babylon =>PUP.Optional.Babylon O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Camfrog O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Complitly =>PUP.Optional.PredictAd O43 - CFD: 23/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\CyberLink O43 - CFD: 24/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\C__Program Files (x86)_WebcamMax_wcmmon.exe O43 - CFD: 26/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\C__Program Files (x86)_WebcamMax_WebcamMax.exe O43 - CFD: 14/03/2012 - [0] D -- C:\Users\wajih\AppData\Roaming\DMCache O43 - CFD: 26/10/2013 - [] D -- C:\Users\wajih\AppData\Roaming\EQATEC Analytics O43 - CFD: 19/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Frim O43 - CFD: 08/04/2012 - [] D -- C:\Users\wajih\AppData\Roaming\GetRightToGo O43 - CFD: 26/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Google O43 - CFD: 22/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Identities O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\IDM O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\KastorAllVideoDownloader O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\kingsoft O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\KSafe O43 - CFD: 26/11/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Macromedia O43 - CFD: 03/12/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Malwarebytes O43 - CFD: 26/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\ManyDownloader O43 - CFD: 24/12/2010 - [] D -- C:\Users\wajih\AppData\Roaming\Media Player Classic O43 - CFD: 23/11/2013 - [] SD -- C:\Users\wajih\AppData\Roaming\Microsoft O43 - CFD: 24/03/2012 - [] D -- C:\Users\wajih\AppData\Roaming\mIRC O43 - CFD: 11/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Mozilla O43 - CFD: 06/09/2011 - [] D -- C:\Users\wajih\AppData\Roaming\MySpace O43 - CFD: 12/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Nero O43 - CFD: 21/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Nitro PDF O43 - CFD: 30/11/2013 - [] D -- C:\Users\wajih\AppData\Roaming\No Company Name O43 - CFD: 15/03/2012 - [] D -- C:\Users\wajih\AppData\Roaming\ooVoo Details O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Opera Software O43 - CFD: 01/05/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Paltalk O43 - CFD: 21/10/2011 - [] D -- C:\Users\wajih\AppData\Roaming\PhotoScape O43 - CFD: 30/11/2011 - [] D -- C:\Users\wajih\AppData\Roaming\RBotPlus O43 - CFD: 15/06/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Real O43 - CFD: 12/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Registry Mechanic O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\ReviverSoft O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\RHEng =>PUP.Optional.Conduit O43 - CFD: 27/09/2013 - [] D -- C:\Users\wajih\AppData\Roaming\RocketPDF O43 - CFD: 16/09/2015 - [] D -- C:\Users\wajih\AppData\Roaming\RPEng O43 - CFD: 13/08/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\SimilarAddon =>PUP.Optional.SimilarAddon O43 - CFD: 17/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Skype O43 - CFD: 14/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\skypePM O43 - CFD: 14/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Software Informer O43 - CFD: 13/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Songbird2 O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\SpeedAnalysis3 =>PUP.Optional.SpeedAnalysis O43 - CFD: 14/06/2014 - [] D -- C:\Users\wajih\AppData\Roaming\SpeedBit O43 - CFD: 01/10/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\Systweak =>PUP.Optional.Systweak O43 - CFD: 10/01/2011 - [0] D -- C:\Users\wajih\AppData\Roaming\Temp O43 - CFD: 03/02/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Tific O43 - CFD: 17/01/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Todae O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\TuneUp Software O43 - CFD: 01/05/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Uniblue =>.Superfluous.Uniblue O43 - CFD: 25/08/2013 - [] D -- C:\Users\wajih\AppData\Roaming\Unity O43 - CFD: 26/08/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Visicom Media O43 - CFD: 17/05/2015 - [] D -- C:\Users\wajih\AppData\Roaming\vlc O43 - CFD: 26/08/2011 - [] D -- C:\Users\wajih\AppData\Roaming\WebcamMax O43 - CFD: 21/09/2014 - [0] D -- C:\Users\wajih\AppData\Roaming\WebExtend O43 - CFD: 27/09/2015 - [] D -- C:\Users\wajih\AppData\Roaming\Winamp O43 - CFD: 12/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\WinRAR O43 - CFD: 24/01/2015 - [] D -- C:\Users\wajih\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran O43 - CFD: 28/10/2014 - [] D -- C:\Users\wajih\AppData\Roaming\Yahoo! O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Roaming\ZHP O43 - CFD: 06/10/2015 - [] D -- C:\Users\wajih\AppData\Roaming\zulagames O43 - CFD: 16/06/2015 - [] D -- C:\Users\wajih\AppData\Local\Adobe O43 - CFD: 10/11/2011 - [] D -- C:\Users\wajih\AppData\Local\APN O43 - CFD: 30/09/2011 - [] D -- C:\Users\wajih\AppData\Local\Apple O43 - CFD: 09/10/2011 - [] D -- C:\Users\wajih\AppData\Local\Apple Computer O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Application Data O43 - CFD: 04/02/2011 - [] D -- C:\Users\wajih\AppData\Local\Apps O43 - CFD: 29/07/2012 - [] D -- C:\Users\wajih\AppData\Local\Ares O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Avg2013 O43 - CFD: 27/09/2013 - [] D -- C:\Users\wajih\AppData\Local\avgchrome O43 - CFD: 13/06/2014 - [] D -- C:\Users\wajih\AppData\Local\cache O43 - CFD: 08/04/2012 - [0] D -- C:\Users\wajih\AppData\Local\Conduit O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Local\CrashDumps O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 08/04/2012 - [] D -- C:\Users\wajih\AppData\Local\CRE O43 - CFD: 29/10/2014 - [] D -- C:\Users\wajih\AppData\Local\CyberLink O43 - CFD: 26/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\Deployment O43 - CFD: 02/07/2014 - [] D -- C:\Users\wajih\AppData\Local\Diagnostics O43 - CFD: 06/11/2014 - [0] D -- C:\Users\wajih\AppData\Local\DriverToolkit =>PUP.Optional.DriverToolkit O43 - CFD: 05/11/2014 - [] D -- C:\Users\wajih\AppData\Local\ElevatedDiagnostics O43 - CFD: 14/06/2014 - [] SHD -- C:\Users\wajih\AppData\Local\EmieSiteList O43 - CFD: 14/06/2014 - [] SHD -- C:\Users\wajih\AppData\Local\EmieUserList O43 - CFD: 12/01/2015 - [] D -- C:\Users\wajih\AppData\Local\Facebook O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Local\FreemakeVideoConverter O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Local\fTalk O43 - CFD: 26/10/2012 - [] D -- C:\Users\wajih\AppData\Local\GamePlayLabs Plugin =>PUP.Optional.GamePlayLabs O43 - CFD: 30/06/2014 - [] D -- C:\Users\wajih\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate O43 - CFD: 26/10/2012 - [] D -- C:\Users\wajih\AppData\Local\Google O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Historique O43 - CFD: 19/08/2014 - [] D -- C:\Users\wajih\AppData\Local\KSafe O43 - CFD: 01/11/2015 - [0] D -- C:\Users\wajih\AppData\Local\Lenovo O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Macromedia O43 - CFD: 11/04/2013 - [] D -- C:\Users\wajih\AppData\Local\MagicCamera O43 - CFD: 18/09/2014 - [] D -- C:\Users\wajih\AppData\Local\Massive Media O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Local\Media Get LLC =>PUP.Optional.MediaGet O43 - CFD: 25/06/2011 - [] D -- C:\Users\wajih\AppData\Local\MediaGet2 =>PUP.Optional.MediaGet O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\MFAData O43 - CFD: 15/06/2014 - [] D -- C:\Users\wajih\AppData\Local\Microsoft O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Local\Microsoft Corporation O43 - CFD: 20/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Microsoft Games O43 - CFD: 22/11/2010 - [0] D -- C:\Users\wajih\AppData\Local\Microsoft Help O43 - CFD: 08/11/2012 - [] D -- C:\Users\wajih\AppData\Local\Minibar =>PUP.Optional.Minibar O43 - CFD: 13/06/2014 - [] D -- C:\Users\wajih\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie O43 - CFD: 25/10/2013 - [] D -- C:\Users\wajih\AppData\Local\Mozilla O43 - CFD: 04/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\OpenCandy =>PUP.Optional.OpenCandy O43 - CFD: 22/10/2014 - [] D -- C:\Users\wajih\AppData\Local\Opera Software O43 - CFD: 01/05/2011 - [0] D -- C:\Users\wajih\AppData\Local\PackageAware =>PUP.Optional.BearShare O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Procaster O43 - CFD: 01/02/2013 - [] D -- C:\Users\wajih\AppData\Local\Programs O43 - CFD: 22/11/2010 - [] D -- C:\Users\wajih\AppData\Local\Seven Zip O43 - CFD: 28/02/2014 - [] D -- C:\Users\wajih\AppData\Local\Skype O43 - CFD: 13/08/2014 - [] D -- C:\Users\wajih\AppData\Local\Songbird2 O43 - CFD: 26/05/2011 - [] D -- C:\Users\wajih\AppData\Local\Sun O43 - CFD: 03/02/2011 - [] D -- C:\Users\wajih\AppData\Local\Symantec O43 - CFD: 02/11/2015 - [] D -- C:\Users\wajih\AppData\Local\Temp O43 - CFD: 22/11/2010 - [0] SHD -- C:\Users\wajih\AppData\Local\Temporary Internet Files O43 - CFD: 21/10/2014 - [] D -- C:\Users\wajih\AppData\Local\TuneUp Software O43 - CFD: 26/07/2014 - [] D -- C:\Users\wajih\AppData\Local\Unity O43 - CFD: 30/01/2011 - [] D -- C:\Users\wajih\AppData\Local\VirtualStore O43 - CFD: 31/01/2012 - [] D -- C:\Users\wajih\AppData\Local\Visicron O43 - CFD: 31/07/2012 - [] D -- C:\Users\wajih\AppData\Local\Windows Live O43 - CFD: 01/10/2014 - [] D -- C:\Users\wajih\AppData\Local\WinZip O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\Yahoo O43 - CFD: 16/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{00A60F66-F8EA-4CCB-859F-A79ABEB5379A} O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{013CFF1A-35CF-4A76-AD41-F74987744A13} O43 - CFD: 08/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0303A524-3CA5-43E4-BEB2-7DF61283E25C} O43 - CFD: 12/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0343C01D-B4EE-4238-BCCB-C7DAD5CEB804} O43 - CFD: 22/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{05C8332C-260C-4FE1-B589-84D680EEA6B9} O43 - CFD: 07/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0683A14D-B952-4122-9EEC-27D617E3D648} O43 - CFD: 12/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{06D73832-6074-4BF3-A34B-88647028B3D0} O43 - CFD: 15/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{06EC4CDF-C57A-4775-ADE7-D9AC7324632B} O43 - CFD: 06/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{06F8125A-90E2-440E-A68B-8A1A12472744} O43 - CFD: 25/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{071C5503-5CB4-4811-AA6A-EA1B211421D8} O43 - CFD: 10/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{072022AC-BCFF-4A6C-8808-DC89610C3E5E} O43 - CFD: 20/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{078C44B1-ADD5-4ACA-9346-524F8DF3B0A0} O43 - CFD: 03/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{078E8B98-7A47-46D8-8C17-B86AEA0A565D} O43 - CFD: 06/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0988CB29-EE28-4FE3-93CD-D4EDE1794EA9} O43 - CFD: 30/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0BA7DFEE-31F4-4215-96C0-CF7B25DD727A} O43 - CFD: 27/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0BB43A56-6E7D-41EE-8F8A-A92C0B3DBFF1} O43 - CFD: 16/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0C0E4B8B-9137-48F3-AB71-10750C8F9BF5} O43 - CFD: 08/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0C4FDF57-03C4-4D93-9CFD-B96C3A59C3EE} O43 - CFD: 09/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0C744B96-7921-4B49-A694-C4E6CEEFEF70} O43 - CFD: 31/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0D4AB388-45B2-4831-94B0-EF780D9AFB44} O43 - CFD: 21/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0D5264A9-12A5-45A1-8C0E-829779C946E4} O43 - CFD: 09/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{0EC62D36-FE2C-4D00-BE13-C19DC0DB5F00} O43 - CFD: 19/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{0EDBE34F-AA08-4E8F-9542-6D800CE6271F} O43 - CFD: 24/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{100B62E1-6ADF-42E9-804E-11DE49E35C05} O43 - CFD: 18/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{113126A6-8663-4D18-88B2-B9D75E26804D} O43 - CFD: 27/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1147FEEC-6C52-47EB-992E-5F9BC940269A} O43 - CFD: 22/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1252A7F8-237C-41B1-8742-11058D75591C} O43 - CFD: 04/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{125A31A3-4908-42AF-BD16-8DB609BA40E0} O43 - CFD: 29/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{12FED009-D413-4DEC-8ADF-D428EA7B9C04} O43 - CFD: 04/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{137B1676-A799-441B-9A8D-15F04FBA411A} O43 - CFD: 01/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{15AE98C9-8C9B-484A-89D0-F33AA2741F8C} O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{1620E6B8-A9F0-42DA-8511-D9EB1BB0776D} O43 - CFD: 19/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{18A83CC1-632E-44E4-AF71-7B27BA0E030B} O43 - CFD: 25/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{18F074D0-D0AC-4044-9AA7-D2B2E82ADF91} O43 - CFD: 26/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1AB399A2-5B34-45E0-84B1-F79AF8DC92FE} O43 - CFD: 03/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1BF112FA-CBFF-491C-93A8-6DFBCE169BE7} O43 - CFD: 29/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{1C523FE4-4538-49E0-A6C9-DC81677E5A4C} O43 - CFD: 27/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1CB734C5-53E1-4BD4-8214-3D4BCB2187FB} O43 - CFD: 27/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1E4EC605-CDE1-4BA4-9D3A-16086155CAB3} O43 - CFD: 06/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1F7E0DE6-311D-4D4C-853C-CFB233693F74} O43 - CFD: 20/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{1F8AD34D-3E28-413E-9CC7-E0A27756225F} O43 - CFD: 08/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{20106AAE-B418-4111-B95E-FAA7D7AA9D7E} O43 - CFD: 24/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{21C52948-B09F-47AD-AF38-4793E07ADCEB} O43 - CFD: 10/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{2268F945-6D6E-42A4-ADD5-6D57E43AAC8E} O43 - CFD: 02/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{236541C8-638C-4E3C-A625-E17301021409} O43 - CFD: 22/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{248DCE1C-28BF-4EEE-A718-8D58FCE9E391} O43 - CFD: 25/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{25E9532B-F24E-4254-8529-EB6FAD2995A8} O43 - CFD: 28/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{26681244-14BA-4B9E-B91F-9606CB8EC157} O43 - CFD: 12/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2853FB72-8EF4-4BE3-84B7-5D1CE3E3E519} O43 - CFD: 07/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{28E8FFD6-E4F4-47E2-AA13-8758C26E6637} O43 - CFD: 29/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2B41AC7C-9285-42C2-87BF-54FFDAE84CCC} O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2C344488-77A3-4976-8576-65E74B454DAF} O43 - CFD: 22/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2D8B3D95-75C0-42E0-9514-832AB8D69DF2} O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{2E21A37C-1100-4FA8-9C92-AC45967A437A} O43 - CFD: 25/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{2F26262A-5C85-4400-A500-71E2A6A0D07F} O43 - CFD: 05/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{317ED230-C28E-404E-837E-A872E07D10FB} O43 - CFD: 13/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{318B5E70-5849-4B9F-9A7C-C480FDC291C4} O43 - CFD: 16/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{31A2C920-0009-4973-A816-FCE746A526C1} O43 - CFD: 15/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{32E6D709-2416-42FC-95B7-8C52DFD9058B} O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{355BEB20-D5D1-4D11-BEFF-AF96C1EEF871} O43 - CFD: 24/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{357EAFEF-2E23-4775-9970-A58495465E55} O43 - CFD: 31/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{35F15394-6ADA-4751-9045-EA7F26E2C7B6} O43 - CFD: 16/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{35F7F074-2E22-40F2-AACC-EDB01AE1DC14} O43 - CFD: 23/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{37623CFA-ED33-4298-ADB6-2794BA47263C} O43 - CFD: 28/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{376CF178-E50D-4A9D-B064-064D7C242E28} O43 - CFD: 09/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{38C50524-E4CE-4A3A-BAD7-FB73B42F22CB} O43 - CFD: 30/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{38C8B3B8-88B7-4E99-A70A-8C3D3E750B6D} O43 - CFD: 05/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{38EE6778-F52E-473A-8A05-23812FDBB4D7} O43 - CFD: 21/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{394204D5-F83A-4700-B9FD-BA9EF3001823} O43 - CFD: 17/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39467295-6320-4918-98B0-52D8B8A77AE1} O43 - CFD: 29/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39512F48-4F26-4EB4-9418-DDE29231DCF9} O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{39B5DC48-12FB-4BBB-AEC5-6B94BAE45328} O43 - CFD: 20/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3B9333F6-8FB9-40B8-A1E8-B7F680B10443} O43 - CFD: 04/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3C639A89-CAFB-4FB8-86D2-A12F52B053E7} O43 - CFD: 06/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3C721FAB-B0A3-4AA2-B039-47BA46C5C14B} O43 - CFD: 03/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3D282713-6033-48B1-885E-AA2210420392} O43 - CFD: 20/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{3E3BEBF0-97DB-4D11-B2FC-44A36710A7B3} O43 - CFD: 07/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{40643D44-8482-414A-8442-52853DED38FD} O43 - CFD: 04/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{40C733F4-549E-44C4-BD0B-7869B3AEF687} O43 - CFD: 09/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{41725C82-BED8-446D-9BC1-D37E088389B4} O43 - CFD: 15/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{41AA8E26-EF66-4CC5-A973-7B3D3B7B35BA} O43 - CFD: 12/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{438BC82A-B098-440C-9548-66F8CFB20434} O43 - CFD: 14/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{43CEBE14-8808-4DF6-98AE-6218CEC65F2B} O43 - CFD: 24/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{46C79D41-316A-446F-AF58-C35AABEBACF7} O43 - CFD: 24/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{48DCF9B0-122E-4D02-BC47-64F91451A3C4} O43 - CFD: 19/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{49CAC57C-E740-4A2A-96CB-F6874D8FB954} O43 - CFD: 05/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{4AFB0FA7-9309-4427-B225-B19AE76C8438} O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4B63CE44-2300-433A-AFCA-E4AF9A26B0C1} O43 - CFD: 11/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4BDE0621-3A25-44E2-BBD2-8A3F088CD19D} O43 - CFD: 07/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{4C6077A7-801D-474A-BB2D-902E2A1B4071} O43 - CFD: 24/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{4D6DCEE8-B458-489F-AC93-A28C496E7B19} O43 - CFD: 19/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{517E444C-F2F0-4F63-A014-4B3E884AE77A} O43 - CFD: 10/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5197EA9B-AE83-4622-A21B-50A3B63F338E} O43 - CFD: 06/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{5227DFB9-3BC5-4E1C-92F6-ACD017884A40} O43 - CFD: 10/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{53614420-ADAA-43D6-ABE0-4447DD3CDBB9} O43 - CFD: 04/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{542FAB27-8E20-4E11-8C4D-79892B6D26C6} O43 - CFD: 21/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{54855AE1-2629-407D-8B9B-E0FD1AB37849} O43 - CFD: 16/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5550E7CA-FA69-4AB6-BDDD-1950E58E4267} O43 - CFD: 29/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{563448AD-2DD3-4489-AEAA-529CAED0A133} O43 - CFD: 07/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{563B433D-A5E3-4573-8DED-1A7982CD685E} O43 - CFD: 12/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{56DEA749-A9C8-4FCA-8AA3-3B62E82581CC} O43 - CFD: 08/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{58BDC144-680B-4F96-98B5-E23B0D9FEE0B} O43 - CFD: 16/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{593B9626-F594-497A-BAFF-CF73769390CF} O43 - CFD: 08/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{59B522AE-A6B2-46BB-9372-748938A6F271} O43 - CFD: 08/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5A4DB10B-5FC3-4FCD-BF3F-3E3C28F95D7D} O43 - CFD: 09/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5AA14AFA-4C33-40F7-8F74-0D8EDE2BF39B} O43 - CFD: 13/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5B7042EA-5AA3-4D55-8949-5DD1B0CA358A} O43 - CFD: 02/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5D3C4AE1-5082-4EEC-8A78-CB16543FBEA9} O43 - CFD: 03/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{5E044ADA-0287-4D68-93D3-586D6096E7B7} O43 - CFD: 08/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{5EFE76A3-BCBF-4F38-B2E6-DCF505946286} O43 - CFD: 21/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{5F04D1DB-65B9-4E1F-B626-8C7E47806D00} O43 - CFD: 10/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{60253560-FAA1-4CCB-AAE1-43DDF6DD3076} O43 - CFD: 24/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6036CF3A-C9BD-44C6-9C42-56C5F0B2710C} O43 - CFD: 15/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{610B7480-7387-4FC2-9424-C4F39EA8253D} O43 - CFD: 13/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6140EE0B-946C-4034-9A97-41BEFF571D8F} O43 - CFD: 14/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{63C23C17-69A1-45B1-92AB-AF7C38F419B6} O43 - CFD: 20/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6489E2F8-9772-4F06-A6C4-A85236BD80FE} O43 - CFD: 11/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{65B32C2D-0579-41FA-92B2-082F0CA458D4} O43 - CFD: 03/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{66BE1D9E-7801-44E8-8D9A-73B04C6C6A82} O43 - CFD: 25/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{670D5CD1-EBA3-4288-BC9B-E2263EEBF1BF} O43 - CFD: 02/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6771408C-4EBF-44FA-89A1-01AF15B3D462} O43 - CFD: 11/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{67984654-4E6C-4021-B39F-0FAD137EC789} O43 - CFD: 11/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6821088B-BC47-495C-9AE0-B07D8EBBACB2} O43 - CFD: 13/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{68654897-731B-401B-8B51-EA53F3FE4BB2} O43 - CFD: 11/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{68B4CD1D-DBAD-4636-93E1-FA5951F78A29} O43 - CFD: 02/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{68D47A2B-C915-45AC-B197-B7A0FD45391A} O43 - CFD: 12/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{699403C1-E2C8-4A7C-B400-2455FFB554E6} O43 - CFD: 04/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6B882929-4D81-49DC-9A7B-70C20BDB381C} O43 - CFD: 12/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6BC73370-23ED-4E48-B7E4-E35BE168312B} O43 - CFD: 24/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6BE5197F-A3E8-4FF8-84E9-FC171294E20A} O43 - CFD: 19/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6BF4425D-BCC2-476B-B403-854DA95C5B85} O43 - CFD: 21/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6C606229-A8E7-4059-AF20-3C00595557C4} O43 - CFD: 10/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{6E2762A6-F9B8-435F-BE0F-9FE2F94BF01D} O43 - CFD: 18/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6E4BE028-D253-4268-9D01-3E23E63F7CC0} O43 - CFD: 18/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F104857-D6D2-497D-8909-4168327E9836} O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F3189E9-FAE0-4E59-853D-2F3F71C95B4F} O43 - CFD: 01/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{6F584BE5-00B7-4A1C-B48A-D1BEF5EC6E96} O43 - CFD: 11/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7068A4FE-44C4-4BA2-9B8A-551807FEA674} O43 - CFD: 07/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{71A90D29-67D9-4B3C-804F-D268B9310064} O43 - CFD: 16/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{71B86FBC-F43F-4D09-83EB-CB173AD2749A} O43 - CFD: 03/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{722F901E-5616-4C20-92A1-14B073CE1063} O43 - CFD: 29/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{729FB2DC-E4BF-4E9E-BB7A-6B63277F1481} O43 - CFD: 18/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{744749C7-BEDE-4D68-B949-5CAD5DD5F916} O43 - CFD: 06/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{78C4AB77-7F46-4F97-A8E8-1A133E59E9F5} O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{791EDEFF-3BE7-4B5C-816B-92AB6D9DCAA5} O43 - CFD: 18/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7C5F5D8E-02D2-44D6-AD9A-317EC81DF664} O43 - CFD: 23/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7D62A55A-B20F-40E2-BCF5-C66A87B4A84A} O43 - CFD: 23/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7E144FAD-0B36-4E6B-BDC0-AC0FE52C9995} O43 - CFD: 19/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7EBD70ED-05F8-46B4-B3A6-61D25580831E} O43 - CFD: 23/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{7ECCD109-0300-4A47-9519-2D688B48504E} O43 - CFD: 09/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{7F1A62AB-1141-473C-8119-652D29BC5B77} O43 - CFD: 13/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{806FD2D0-4E86-444A-929C-C8219F7C5DEF} O43 - CFD: 18/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8122A5A9-9A17-4836-B6D3-D94B8001DDFE} O43 - CFD: 20/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8128D2E8-8DBA-4862-8537-AABB85055106} O43 - CFD: 16/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{81B81381-8A98-4366-BFDC-81B9B79DB014} O43 - CFD: 26/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{821AABDF-E098-4CB6-A94A-151AF59934F4} O43 - CFD: 30/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8293C31D-D519-40E4-9B0C-72E9CB78026F} O43 - CFD: 06/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{845D6B0E-4DA3-4ED4-AE54-319481096464} O43 - CFD: 23/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{84A4D092-41E9-4CE0-AB4E-F7E3B4A62439} O43 - CFD: 14/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{84CB0D4E-00EB-41F2-8E71-08FFEBA87824} O43 - CFD: 12/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8638AB49-6265-4D60-8742-232BA7D2B7EC} O43 - CFD: 07/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{86ED4419-454C-4C00-864B-1584C9B49864} O43 - CFD: 04/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8892BDBF-C921-4B82-BF2B-D948BD3BDEDA} O43 - CFD: 16/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{88E31DF6-B10D-42E8-B96A-84709A6899D3} O43 - CFD: 30/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{898F2447-9C99-4A74-8F2B-E7799B816DA4} O43 - CFD: 02/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{89E03324-5F66-4A96-AFE9-5D1946CACDC1} O43 - CFD: 19/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{89FCFF63-4382-46B5-9B97-CFFA2E6117B1} O43 - CFD: 25/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8A1B11CB-A231-4B49-A958-B1B1E701753D} O43 - CFD: 23/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{8BA7A246-36E4-4AFF-B0BF-9D174A25C793} O43 - CFD: 04/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8DDBCB2F-3FF3-4482-9C37-7EACA1E41263} O43 - CFD: 20/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8EEE2204-07D8-4F6F-BC66-C53EE600C6D4} O43 - CFD: 24/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{8FB5BFFF-D12F-48AF-A6F2-0AA44016336E} O43 - CFD: 12/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{90024645-2357-4E83-A00A-B6FFE36E4B1C} O43 - CFD: 02/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{90A2B567-7399-4834-9467-63F822A3637A} O43 - CFD: 01/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9284D857-ED44-4DC6-870A-BCBC9B2BFFAC} O43 - CFD: 20/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{928B1367-6BB6-4148-800C-46E68FC0EA6C} O43 - CFD: 19/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9297605F-35F6-44E9-A4E8-9B3CBF6C49CC} O43 - CFD: 05/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{929B2A32-8B0A-492F-A66A-3CE89531BAF5} O43 - CFD: 15/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{92F3B38E-32A4-4966-863C-186BAD8C5002} O43 - CFD: 30/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{93144769-D573-4159-8FCB-299D9B564619} O43 - CFD: 10/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{935CD84B-3EDA-464E-82C0-944708C70DE6} O43 - CFD: 09/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{95407557-07EC-41F3-801E-0E297628BD62} O43 - CFD: 01/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9648DFFA-94C1-424D-AC5B-C507E4B56B5D} O43 - CFD: 05/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9668F339-511E-417C-A402-FCD358CB75E5} O43 - CFD: 24/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{96F6ABD5-C7A4-41CC-AF48-C666CA6AEAFE} O43 - CFD: 30/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{973D6F8D-D3D6-4862-8DB2-C5CFA139CCF4} O43 - CFD: 22/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9848C138-7D42-45FB-BBF6-4765AA732FA4} O43 - CFD: 27/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{99DBD18E-2ABF-4C6E-9FC6-F4156836BE35} O43 - CFD: 18/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9A427675-8D1B-4783-A091-A19197463DC6} O43 - CFD: 07/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9ABDC381-FAFB-47DD-A22B-FB22605768DD} O43 - CFD: 15/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9B2E283A-F89D-472B-A55A-0510A642D70D} O43 - CFD: 28/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9C279FD4-AB8A-4878-A1A9-CC6B6702DDD4} O43 - CFD: 30/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9C7ACBC0-3B01-4399-8F49-46270E040BF7} O43 - CFD: 03/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9DC7CBEB-D572-48C7-A492-BD9BDBD10B16} O43 - CFD: 28/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9DEED8FF-F26B-4CBF-9263-1A5BF1EDE3AB} O43 - CFD: 18/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{9F47336D-92B6-4C26-9370-E3B247A5939A} O43 - CFD: 30/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{9F69AAD6-C7E9-4FD4-AD9F-F72703E6D6CA} O43 - CFD: 21/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A02CC44E-F7F7-4C3E-932D-BD1D50E7AD25} O43 - CFD: 05/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A08C1BE7-2034-488E-AC52-66CA4CCF7F9D} O43 - CFD: 26/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A0993E1D-E9A3-416B-891F-0D06DBE1D751} O43 - CFD: 19/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A59D0240-A3CC-4CC9-9646-09DA1A83FAAF} O43 - CFD: 18/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A6F16EB1-2726-4841-B7D2-50F506BD63B1} O43 - CFD: 15/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A7C46EA7-B5D3-4C69-94FA-F7977ADAFA10} O43 - CFD: 08/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{A88659B3-F960-4E98-AE96-4E72382D2108} O43 - CFD: 21/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{A9E879FD-DD52-4F24-972A-C39926A64E7C} O43 - CFD: 03/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{AA7C41D4-CFA3-47B6-9F8D-4FE5D5D7AEE8} O43 - CFD: 16/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AB9019D9-4769-4186-9D56-56034D02B69C} O43 - CFD: 24/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{ACDB1664-9A4E-4F18-B672-0A1BB517B8F7} O43 - CFD: 29/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{ACEACEC8-CEA0-45F4-896C-A4BDAD6007B6} O43 - CFD: 28/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{AD035871-59C8-4A73-8614-38ADF8451BC1} O43 - CFD: 02/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AD400D34-D9B1-4255-A56F-81D0F196D235} O43 - CFD: 03/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{AD84A43F-FF4A-4AC6-A25D-F4FA440B063C} O43 - CFD: 04/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{AEF0E33C-18B2-498D-B071-0A7332434343} O43 - CFD: 17/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B0DAAFCB-4769-41B9-8550-A65935D303D7} O43 - CFD: 18/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B2C97BC4-3C23-44E6-810B-1B8D83A395EB} O43 - CFD: 13/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B2E6A0EB-17B2-46F3-8161-9AC97839A419} O43 - CFD: 07/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B2F82167-91AB-4561-B5D5-14A67A961E01} O43 - CFD: 03/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B455B715-796B-4BE0-85A4-37F59FC32BFB} O43 - CFD: 26/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B5514E2B-6B3F-45A1-8B38-A4042F9843C4} O43 - CFD: 09/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{B6ACBAC3-9E23-48D5-8C68-827CF2D5D662} O43 - CFD: 18/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{B7E0E918-00FB-4EC2-99FB-01BFBC82AE7B} O43 - CFD: 02/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BA8A8FBE-D168-40F2-9275-962024D51A8F} O43 - CFD: 15/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BB70993C-FD7C-4C88-A444-55CCEC0B0017} O43 - CFD: 28/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{BC627B67-11D9-44EB-9491-E9A2540F89A8} O43 - CFD: 25/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{BDAE6DB3-48EB-488F-B1A5-8497649F6ABF} O43 - CFD: 04/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C0239225-3125-44F7-8016-8CA48C5D921E} O43 - CFD: 30/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C0E80B45-F5E3-43CD-8353-96108E35BE8A} O43 - CFD: 27/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C102C2C8-B011-4154-9FD0-16D2AA9F0AB4} O43 - CFD: 16/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C1359082-3A5F-4631-8C36-A4D9CD33B2AD} O43 - CFD: 21/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C1CD12EF-CA20-49BE-B083-A2960DD82F2A} O43 - CFD: 07/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C2AE5059-3F26-4B21-B0B6-3670E2580018} O43 - CFD: 04/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C2E7D85B-B992-420A-9C58-780185B2F6EC} O43 - CFD: 07/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C3FE5EBB-54B5-4AB2-864F-C6EF39E40F5B} O43 - CFD: 26/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C45DCF71-2C2F-4EB6-967C-E80B9AF7C3D7} O43 - CFD: 03/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C51BDDA3-C9F4-4766-825B-804C2D779DE5} O43 - CFD: 21/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C56CB960-E2A8-4514-9662-3E51D43A14BD} O43 - CFD: 01/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C5FFFBF9-FFE8-4D28-8B1D-0477A397DDF3} O43 - CFD: 26/08/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C62740EB-9A5F-4300-A61A-DC312C54320B} O43 - CFD: 02/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C633299B-BE2D-4EF8-9FEC-0563D54E100C} O43 - CFD: 09/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C656802C-4C77-4D48-A167-1AB899B8A2D3} O43 - CFD: 14/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C6CD11DE-83F9-4368-B919-F3D4240C93F2} O43 - CFD: 22/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{C77E0AD6-EEB7-466C-B947-A1CB8BAE3F5A} O43 - CFD: 13/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{C7D9A659-6517-4C8B-A1A2-A6E6C918DEC9} O43 - CFD: 11/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CA105534-01F8-4B47-8DF5-6C3BDEDD7FB0} O43 - CFD: 23/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CAE597EF-3DEF-41FF-A92E-3DAFBBEAC451} O43 - CFD: 20/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{CB570D76-AF13-4717-BC7B-78F9B4A172ED} O43 - CFD: 12/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CB730866-9DCB-43F5-AC2F-46BE12210B0D} O43 - CFD: 29/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CCF3FF5C-7989-4341-AFE4-9AAAE58840AE} O43 - CFD: 09/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CD547C73-7F29-4164-BA2F-1F3C8D5477E4} O43 - CFD: 10/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CDAB2AE2-3918-44C8-9F36-F9EA824C8D5A} O43 - CFD: 02/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CDEF69AA-8EB2-418D-895B-9ED5EA149015} O43 - CFD: 31/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CEB63C29-B356-4D13-A783-6336D61AF06A} O43 - CFD: 16/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{CED103E7-C832-4419-A2A0-B4488FA71C26} O43 - CFD: 22/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CF0DAEAE-09A0-472D-8AEF-FF95E8621FC8} O43 - CFD: 12/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{CF82F0A0-1853-4DA9-B06E-3E3889092891} O43 - CFD: 28/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{D0431967-CEB6-4BE9-8ACE-63952EE6C842} O43 - CFD: 05/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D08E124F-0614-46D3-8BDF-361B003AEC53} O43 - CFD: 04/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D0B56C43-9827-434D-8C7A-C3CA434A1CCA} O43 - CFD: 22/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D2C4B7D9-AE2D-49C8-99D4-35BEEE9AD0F0} O43 - CFD: 20/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D36F06E0-9CB7-434C-B286-ABA666BDDA3E} O43 - CFD: 29/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D743A166-C3C0-4D1C-9DB5-F1A1679C5BA2} O43 - CFD: 06/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D85D78C1-E130-487D-9741-A24D8A2923E7} O43 - CFD: 14/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{D8BCD5AD-DB78-4084-997D-72C73179FC0C} O43 - CFD: 22/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{D8FFE5D9-865E-463F-A1A5-B7B3B09E222D} O43 - CFD: 31/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{D969D86C-750C-48AA-8DC3-1FB3CF7ECFDB} O43 - CFD: 28/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{DAF7F6BD-FB8B-43C5-B432-29F77AFC289D} O43 - CFD: 07/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DBA9384F-D9A6-423F-822A-5D1BFB31794C} O43 - CFD: 14/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DBF9AD3F-13F5-4167-B53F-633DF77B86CD} O43 - CFD: 05/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{DC1C7F2F-B4FD-403E-B365-77F8C9EBD21A} O43 - CFD: 10/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{DC661406-902C-429A-9278-F573158C8A9F} O43 - CFD: 27/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DCA866F1-8FC9-4D2F-9C9C-2829A4A6A747} O43 - CFD: 26/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{DCF5536C-5838-4AF0-947C-E9EF7A918D77} O43 - CFD: 07/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{DFFFC5E2-53C0-4344-8944-D1BD3F2F9893} O43 - CFD: 31/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E072DF3E-92EB-47EF-B648-D03BBCB56C2B} O43 - CFD: 28/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E140FD34-813C-4337-8D97-88180E014C67} O43 - CFD: 14/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E27BDDD7-9083-4C7E-9B96-2BC61D59A779} O43 - CFD: 10/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E3A367B0-78E7-49B8-B157-937C80C7E1F6} O43 - CFD: 05/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E42E856F-F804-48AC-A513-58B8F49B780C} O43 - CFD: 06/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E44BDAEA-8FBE-4257-B51B-73CF232C6E38} O43 - CFD: 09/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E45F88BC-2733-4EA9-BD12-0B14214DF9D8} O43 - CFD: 10/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E4B621C8-B080-4CDF-8499-0F1B8B95B14D} O43 - CFD: 01/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E53226C7-1EE5-44F3-BF28-224EDB8EE8BC} O43 - CFD: 25/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E5C1A7C6-6571-4EB5-B3C8-20F901B144C4} O43 - CFD: 03/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E627F2BA-CC6E-4B75-A3B9-881ED5F531D3} O43 - CFD: 19/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E662E37F-5097-4B08-A1E0-C65A0C880500} O43 - CFD: 22/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E68F13AB-09A2-4CD7-81AE-014862389AA9} O43 - CFD: 01/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E79AAAC2-F871-46C3-92DF-341FCEABDE0C} O43 - CFD: 14/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E8530D16-32BA-4929-AF4B-449F9F0EAAFF} O43 - CFD: 09/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E8667550-0504-4FB3-9206-3122D74B0DF4} O43 - CFD: 26/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{E874F690-A503-4C1F-A526-A79D4DC32AD3} O43 - CFD: 02/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{E87C66E3-CDEB-4CDB-850E-C281312C7330} O43 - CFD: 06/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{E8FEB371-3D3E-4071-AFC8-69EB2EB7CB6E} O43 - CFD: 14/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EAD3D2E0-0B8F-4C05-9B9C-61116B83BB2E} O43 - CFD: 22/02/2013 - [0] D -- C:\Users\wajih\AppData\Local\{EB6B2B42-FA50-46A3-880F-1D4269591A24} O43 - CFD: 17/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EB77C8B3-D7F1-413F-A111-D7D9AE75467B} O43 - CFD: 06/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{EB89DCC8-E15D-472A-A488-DED51BE29AD7} O43 - CFD: 30/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{EDAA4B2B-39B8-47AE-92B9-A7BD65564F53} O43 - CFD: 17/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F00E361C-460A-43E5-8AF3-2961248B3F94} O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F06F77C6-09C5-4D85-B9B7-A1F6F5522D85} O43 - CFD: 14/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F1588DED-85F0-43DD-9A19-FFF47210B388} O43 - CFD: 06/04/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F1D1DF2F-3063-478A-BE81-E46AD2B3B59D} O43 - CFD: 11/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F1D4205A-702B-42D1-B5BA-2E92DE001FCB} O43 - CFD: 26/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F1D82824-F39D-4F67-8764-3C8962CFF6A9} O43 - CFD: 01/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F294E545-BF7C-41D8-9DE7-634A6550A7E4} O43 - CFD: 08/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F2CAD3B0-DFAE-4C57-BF16-E4D388669220} O43 - CFD: 11/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F2F4EBBF-736D-416E-8F4E-A9FF58A4FC60} O43 - CFD: 11/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F3148CBC-AC17-4B70-B6C9-05E75CAC3834} O43 - CFD: 11/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F3C8D4EB-1B34-49AD-A113-0DB61DDFB829} O43 - CFD: 08/07/2011 - [0] D -- C:\Users\wajih\AppData\Local\{F3E3E26A-B0A8-4AB6-91AB-006992F5ED71} O43 - CFD: 30/03/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F441B48D-2A58-41BF-BF31-5B7ABCF4DB4F} O43 - CFD: 27/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F50B0746-7886-4D0D-A4F2-12EB0B81A607} O43 - CFD: 28/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F5749CAA-34E3-4E45-B631-B7C55BAEB477} O43 - CFD: 15/10/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F72C0DDD-7708-4751-96CF-A35C176B12D2} O43 - CFD: 13/01/2013 - [0] D -- C:\Users\wajih\AppData\Local\{F7CBDEE6-65CF-4C72-A906-8F26F7832E5D} O43 - CFD: 30/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F91AB5AC-AF19-4AB0-BECE-4A4F8E7C702E} O43 - CFD: 24/12/2012 - [0] D -- C:\Users\wajih\AppData\Local\{F985D9B8-9723-42B1-A7D2-A3C6CF8BAA38} O43 - CFD: 26/11/2012 - [0] D -- C:\Users\wajih\AppData\Local\{FCAEBE89-8F90-4D77-A686-F420BF1569B6} O43 - CFD: 17/06/2011 - [0] D -- C:\Users\wajih\AppData\Local\{FCFD3083-8F0A-47F4-A7FE-029529AC7A84} O43 - CFD: 15/09/2012 - [0] D -- C:\Users\wajih\AppData\Local\{FEE1942C-7336-47EA-8BB8-346668E352B3} O43 - CFD: 14/07/2009 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 15/10/2015 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 04/06/2011 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Détection de l'application Winamp O43 - CFD: 08/11/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>PUP.Optional.MegaSearch O43 - CFD: 14/09/2015 - [0] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frim O43 - CFD: 25/10/2012 - [] D -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fTalk O43 - CFD: 14/07/2009 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 15/10/2015 - [] RD -- C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 8s O45 - LFCP:[MD5.413533A29C24A953B5151FBC6F69EE30] 01/11/2015 A -- C:\Windows\Prefetch\LAVASOFT.SEARCHPROTECT.WINSER-223FC669.pf =>PUP.Optional.SearchProtect ---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll © O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll © O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft SkyDrive Shell Extension.) -- C:\Users\wajih\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll © O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll © ---\\ Liste des pilotes du système (61) - 110s O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] © O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] © O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] © O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] © O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] © O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] © O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] © O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] © O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] © O58 - SDL:2009/11/06 12:56:06 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [1550848] © O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] © O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] © O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] © O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] © O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] © O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] © O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] © O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] © O58 - SDL:2011/01/10 21:42:24 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbfake.sys [116224] © O58 - SDL:2011/01/10 21:42:24 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [116864] © O58 - SDL:2006/11/01 17:20:28 A . (.FUJITSU LIMITED - WDM driver for FUJ02B1 PnP device.) -- C:\Windows\System32\drivers\fuj02b1.sys [7808] © O58 - SDL:2006/11/01 17:59:24 A . (.FUJITSU LIMITED - WDM driver for FUJ02E3 PnP device.) -- C:\Windows\System32\drivers\fuj02e3.sys [7296] © O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] © O58 - SDL:2009/11/01 17:04:42 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] © O58 - SDL:2010/11/20 14:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] © O58 - SDL:2010/03/03 18:51:40 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [540696] © O58 - SDL:2011/03/11 07:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] © O58 - SDL:2009/12/18 11:38:56 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [8038080] © O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] © O58 - SDL:2009/10/26 12:39:44 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [151936] © O58 - SDL:2009/11/27 05:15:00 A . (.Intel(R) Corporation - Intel(R) Display HD Audio driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [244736] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] © O58 - SDL:2008/03/13 08:46:00 A . (.ManyCam LLC. - ManyCam Virtual Webcam, WDM Video Capture D.) -- C:\Windows\System32\drivers\ManyCam_x64.sys [27136] O58 - SDL:2014/05/13 14:21:18 A . (.Visicom Media Inc. - ManyCam Virtual Microphone.) -- C:\Windows\System32\drivers\mcaudrv_x64.sys [35440] O58 - SDL:2014/07/28 15:06:24 A . (.Visicom Media Inc. - ManyCam Virtual Webcam Driver.) -- C:\Windows\System32\drivers\mcvidrv.sys [49264] O58 - SDL:2012/10/11 04:08:10 A . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Windows\System32\drivers\mcvidrv_x64.sys [44928] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] © O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] © O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] © O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] © O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] © O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] © O58 - SDL:2010/03/04 21:43:00 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [346144] © O58 - SDL:2009/10/28 11:40:58 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2018080] © O58 - SDL:2009/05/08 08:15:18 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [215552] © O58 - SDL:2011/07/25 12:21:52 A . (.Windows (R) Server 2003 DDK provider - WDM Video Capture Driver.) -- C:\Windows\System32\drivers\scrcamhrdrv_x64.sys [241880] O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] © O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] © O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] © O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] © O58 - SDL:2009/10/09 20:16:28 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [293936] © O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] © O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] © O58 - SDL:2012/04/15 22:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam64.sys [1071032] © ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (10) - 59s O61 - LFC: 2015/10/31 23:52:42 A . (.Media Downloader.) -- C:\Users\wajih\Downloads\MediaDownloader.exe [551845] =>PUP.Optional.MediaDownloader O61 - LFC: 2015/10/31 21:47:24 A . (.Software application.) -- C:\Users\wajih\Downloads\MediaDownloaderSetup.exe [945656] O61 - LFC: 2015/11/01 22:21:34 A . (..) -- C:\Users\wajih\Downloads\svd3.exe [6465144] O61 - LFC: 2015/10/31 23:54:02 A . (..) -- C:\Users\wajih\Downloads\va33.exe [2404864] O61 - LFC: 2015/11/02 22:20:23 A . (..) -- C:\Users\wajih\Downloads\va33_17cef4084f_setup.exe [2404864] O61 - LFC: 2015/11/01 01:46:02 A . (..) -- C:\Users\wajih\Downloads\va33_8fe3b4379f_setup.exe [2404864] O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\TbHelper2.exe [203952] =>PUP.Optional.SocialSkinz O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\uninstall.exe [48816] =>PUP.Optional.SocialSkinz O61 - LFC: 2015/11/01 22:48:00 A . (.Copyright © 2001-2011. All rights reserved..) -- C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\update.exe [76976] =>PUP.Optional.SocialSkinz O61 - LFC: 2015/11/02 22:20:36 A . (..) -- C:\Users\wajih\AppData\Local\Microsoft\Windows\1036\StructuredQuerySchema.bin [331781] ---\\ Associations Shell Spawning (11) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe © ---\\ Menu de démarrage Internet (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://www.sweet-page.com/ =>PUP.Optional.SweetPage O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe © ---\\ Recherche d'infection sur les navigateurs (38) - 6s O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.defaultenginename", "istartsurf"); =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.alias", "istartsurf"); =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.iconURL", "http://www.istartsurf.com/favicon.ico"); =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.name", "istartsurf"); =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.ptid", "cornl"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.uid", "HitachiXHTS545025B9A300_100727PBN2033SFA42ZTX"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.searchengine.url", "http://www.istartsurf.com/web/?type=ds&ts=1437692326&z=2bb7a8e6531eeb88147adfdgbz7c5[...] =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.search.selectedEngine", "istartsurf"); =>PUP.Optional.IsStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("browser.startup.homepage", "http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFc10MV1wURBgXIVoATA1HR1cOeFteBxRF[...] =>PUP.Optional.Browser O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.enabledAddons", "deskCutv2%40gmail.com:0.0.20,defsearchp%40gmail.com:1.0.0.1069,%7B972ce4c6-7e08-4474-a285-3[...] =>PUP.Optional.DeskCut O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [wajih - gava9wkc.default-1434493557482] user_pref("extensions.xpiState", "{\"app-profile\":{\"defsearchp@gmail.com\":{\"d\":\"C:\\\\Users\\\\wajih\\\\AppData\\\\Roaming\\[...] =>PUP.Optional.PriceFountain O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC} - (MySpace.com) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {091843B3-C480-4CAA-B686-B65D163AC311} - () - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {0D7562AE-8EF6-416d-A838-AB665251703A} - (Facemoods Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {2B1D2049-D4CA-4c0e-B004-ECDA36C88414} - (Ask.com) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (istartsurf) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {3BB21B9D-70BC-4672-ACC3-4D21D54BC253} - (Search Here) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {483830EE-A4CD-4b71-B0A3-3D82E62A6909} - () - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {52EEF29C-DB9A-454D-B58F-509D3C14E696} - (Ask Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {557C21FE-7274-410D-853E-9ED4471BF193} - (search-web.net) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {6C3DEB76-B04E-4F0F-AF3A-497DDB517524} - (Alnaddy) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Speedbit Search) - http://go.speedbit.com/ O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} - (Search Results) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {C0C3A6C6-03BC-4195-8FCB-AEA091301353} - (Yahoo!) - http://search.yahoo.com/ O69 - SBI: SearchScopes [HKCU] {C58F60F6-67C6-40e9-BC81-320259867AA2} - (SpeedBit Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} - (MyStart Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKCU] {FED2A00D-C820-4DCD-8410-E2250D835306} - (Google) - http://www.istartsurf.com/ =>PUP.Optional.IsStart O69 - SBI: SearchScopes [HKUS\.DEFAULT] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-18] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} [DefaultScope] - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (32) - 2s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [859648] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [680960] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2607104] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [30720] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [67584] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [90624] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [210432] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] © ---\\ Liste des exceptions du parefeu Windows (16) - 2s O87 - FAEL: "{5D94A9DF-3716-4D69-9D10-C47434C2D01E}" [In-None-P6-TRUE] .(...) -- C:\Windows\System32\dmwu.exe (.not file.) O87 - FAEL: "{63918BD4-B47F-4707-8309-BDC21AFBAE9B}" [In-None-P17-TRUE] .(...) -- C:\Windows\System32\dmwu.exe (.not file.) O87 - FAEL: "{D58AE912-0AB6-4A8F-9E53-A4DE19D6E318}" [In-None-P6-TRUE] .(...) -- C:\Windows\System32\ARFC\wrtc.exe (.not file.) O87 - FAEL: "{6F500400-D6BA-4D95-9570-12E805700031}" [In-None-P17-TRUE] .(...) -- C:\Windows\System32\ARFC\wrtc.exe (.not file.) O87 - FAEL: "{DB8ED855-2FDF-417A-A65E-540BFA6CCC92}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "{B3817AE7-4F40-49CF-8BFC-A35412D3D239}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "{CE45ECD7-A8F8-403B-BB5F-01D898376FE2}" [In-None-P6-FALSE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.) O87 - FAEL: "{70CA42DF-5801-4466-AC37-1F6A6A64DCDA}" [In-None-P17-FALSE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.) O87 - FAEL: "{0CFE87A7-AD52-4E43-9F4F-2C277EDAC34E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "{521C5A4E-C285-4232-AFA4-B8EF4C04EAEF}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "{53922A52-6C7B-4714-B400-862E40A9AABC}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.) O87 - FAEL: "{7759EC01-AB2F-47FE-81B8-3DC952DBA9BC}" [In-None-P17-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.) O87 - FAEL: "{015EF084-EE48-418D-9F0E-F220E5495C82}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "{A6D98E53-7462-4E4F-8D94-BF09F57E9A22}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch O87 - FAEL: "TCP Query User{1176A022-3790-4B33-AD1F-D54254280980}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe" [In-None-P6-TRUE] .(...) -- C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe (.not file.) O87 - FAEL: "UDP Query User{3FED7EFB-58CC-4B42-9202-824D84DADB55}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe" [In-None-P17-TRUE] .(...) -- C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe (.not file.) ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (16) - 15s SS - Demand [19/10/2015] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe © SS - Auto [25/05/2011] [ 37664] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © SR - Demand [25/11/2010] [ 116608] Battery Optimizer (Battery Optimizer) . (.ReviverSoft 2009.) - C:\Program Files\ReviverSoft\Battery Optimizer\BatteryOptimizerService.exe SR - Auto [10/04/2012] [ 290720] KSafe service (KSafeSvc) . (.Kingsoft Corporation.) - C:\Program files (x86)\Kingsoft\PCDoctor\KSafeSvc.exe SR - Demand [01/11/2009] [ 262144] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe © SS - Demand [16/10/2015] [ 147624] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe © SR - Demand [16/07/2009] [ 935208] Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe © SR - Demand [30/07/2009] [ 63336] PowerSavingUtilityService (PowerSavingUtilityService) . (.FUJITSU LIMITED.) - C:\Program Files\Fujitsu\PSUtility\PSUService.exe © SS - Auto [14/04/2015] [ 2531488] SpeedBit Update (SBUpd) . (.Speedbit Ltd..) - C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe © SS - Demand [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe © SR - Demand [19/02/2009] [ 341264] Fujitsu Diagnostic Testhandler (TestHandler) . (.Fujitsu Technology Solutions.) - C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe © SR - Demand [01/11/2009] [ 2314240] Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe © SR - Auto [02/11/2015] [ 298152] VideoAcceleratorService (VideoAcceleratorService) . (.SPEEDbit.) - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe SS - Demand [27/07/2011] [ 5023744] webcamXP Service (wxpSvc) . (.Moonware Studios.) - C:\Program Files (x86)\webcamXP 5\wService.exe © SR - Demand [09/11/2008] [ 602392] Yahoo! Updater (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe © ---\\ Recherche de clés de registre Tracing (26) - 5s HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASAPI32 =>PUP.Optional.Alnaddy HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASMANCS =>PUP.Optional.Alnaddy HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASAPI32 =>PUP.Optional.EORezo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASMANCS =>PUP.Optional.EORezo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASAPI32 =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASMANCS =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASAPI32 =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASMANCS =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASAPI32 =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASMANCS =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASAPI32 =>PUP.Optional.GamePlayLabs HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASMANCS =>PUP.Optional.GamePlayLabs HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASAPI32 =>PUP.Optional.VidSaver HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASMANCS =>PUP.Optional.VidSaver ---\\ Scan Additionnel (151) - 0s C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\defsearchp@gmail.com.xpi =>PUP.Optional.PriceFountain C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\istartsurf.xml =>PUP.Optional.IsStart C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo C:\Users\wajih\AppData\Roaming\Mozilla\Firefox\Profiles\gava9wkc.default-1434493557482\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} =>PUP.Optional.ShopperPro C:\Windows\Tasks\DriverToolkit Autorun.job =>PUP.Optional.DriverToolkit C:\Windows\System32\Tasks\DriverToolkit Autorun =>PUP.Optional.DriverToolkit C:\Windows\System32\Tasks\Express Files Updater =>PUP.Optional.ExpressFiles C:\Windows\System32\Tasks\UNELEVATE_29408 =>PUP.Optional.ShopperPro HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1 =>PUP.Optional.InstallBrain HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1 =>PUP.Optional.PredictAd HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Great Find =>PUP.Optional.GreatFind HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LayoutsExpress =>Toolbar.LayoutExpress HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Media Downloader_is1 =>PUP.Optional.MediaDownloader HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1 =>PUP.Optional.PredictAd HKLM\SOFTWARE\Wow6432Node\5e28fd0b66fb849 =>PUP.Optional.Heuristic HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\Wow6432Node\DataMngr =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Default Tab =>Toolbar.Agent HKLM\SOFTWARE\Wow6432Node\ExpressFiles =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo HKLM\SOFTWARE\Wow6432Node\GreatFind =>PUP.Optional.GreatFind HKLM\SOFTWARE\Wow6432Node\IB Updater =>PUP.Optional.InstallBrain HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware =>PUP.Optional.IsStart HKLM\SOFTWARE\Wow6432Node\Minibar =>PUP.Optional.Minibar HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro HKLM\SOFTWARE\Wow6432Node\SimplyGen =>PUP.Optional.PredictAd HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\supWPM =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM HKLM\SOFTWARE\Wow6432Node\Uniblue =>.Superfluous.Uniblue HKLM\SOFTWARE\Wow6432Node\WeatherBlink =>PUP.Optional.MindSpark HKCU\SOFTWARE\5e28fd0b66fb849 =>PUP.Optional.Heuristic HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\AutocompletePro =>PUP.Optional.PredictAd HKCU\SOFTWARE\AutocompleteProBHO =>PUP.Optional.PredictAd HKCU\SOFTWARE\BabSolution =>PUP.Optional.BabSolution HKCU\SOFTWARE\Complitly =>PUP.Optional.PredictAd HKCU\SOFTWARE\Datamngr =>PUP.Optional.Datamngr HKCU\SOFTWARE\DataMngr_Toolbar =>PUP.Optional.Datamngr HKCU\SOFTWARE\Default Tab =>Toolbar.Agent HKCU\SOFTWARE\DriverToolkit =>PUP.Optional.DriverToolkit HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout HKCU\SOFTWARE\FunWebProducts =>PUP.Optional.MyWebSearch HKCU\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail HKCU\SOFTWARE\InstallCore =>Adware.InstallCore HKCU\SOFTWARE\Minibar =>PUP.Optional.Minibar HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\Somoto =>PUP.Optional.MegaSearch HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM HKCU\SOFTWARE\USyndication =>PUP.Optional.USyndication HKCU\SOFTWARE\usyndication.com =>PUP.Optional.USyndication HKCU\SOFTWARE\WeatherBlink =>PUP.Optional.MindSpark HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\Fun Web Products =>PUP.Optional.MyWebSearch HKCU\SOFTWARE\AppDataLow\Software\ShoppingReport2 =>PUP.Optional.ShoppingReport HKCU\SOFTWARE\AppDataLow\Software\WeatherBlink =>PUP.Optional.MindSpark C:\Program Files (x86)\AutocompletePro =>PUP.Optional.PredictAd C:\Program Files (x86)\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard C:\Program Files (x86)\Complitly =>PUP.Optional.PredictAd C:\Program Files (x86)\DriverToolkit =>PUP.Optional.DriverToolkit C:\Program Files (x86)\FilesFrog Update Checker =>PUP.Optional.MegaSearch C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate C:\Program Files (x86)\Great Find =>PUP.Optional.GreatFind C:\Program Files (x86)\LayoutsExpress =>Toolbar.LayoutExpress C:\Program Files (x86)\Media Downloader =>PUP.Optional.MediaDownloader C:\Program Files (x86)\Minibar =>PUP.Optional.Minibar C:\Program Files (x86)\Mobogenie =>PUP.Optional.Mobogenie C:\Program Files (x86)\MyPC Backup =>PUP.Optional.MyPCBackup C:\Program Files (x86)\SiteLookup =>PUP.Optional.SiteLookup C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab C:\Program Files (x86)\Uniblue =>.Superfluous.Uniblue C:\Program Files (x86)\Vittalia =>PUP.Optional.Vittalia C:\Program Files (x86)\Webplayer Setup =>PUP.Optional.SocialSkinz C:\Program Files (x86)\WSE_Vosteran =>PUP.Optional.Vosteran C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Downloader =>PUP.Optional.MediaDownloader C:\ProgramData\APN =>Toolbar.Ask C:\ProgramData\Babylon =>PUP.Optional.Babylon C:\ProgramData\BitGuard =>PUP.Optional.BitGuard C:\ProgramData\IBUpdaterService =>PUP.Optional.InstallBrain C:\ProgramData\IePluginServices =>Trojan.SProtector C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR C:\ProgramData\Partner =>Toolbar.YahooPartner C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro C:\Users\wajih\AppData\Roaming\Babylon =>PUP.Optional.Babylon C:\Users\wajih\AppData\Roaming\Complitly =>PUP.Optional.PredictAd C:\Users\wajih\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy C:\Users\wajih\AppData\Roaming\RHEng =>PUP.Optional.Conduit C:\Users\wajih\AppData\Roaming\SimilarAddon =>PUP.Optional.SimilarAddon C:\Users\wajih\AppData\Roaming\SpeedAnalysis3 =>PUP.Optional.SpeedAnalysis C:\Users\wajih\AppData\Roaming\Systweak =>PUP.Optional.Systweak C:\Users\wajih\AppData\Roaming\Uniblue =>.Superfluous.Uniblue C:\Users\wajih\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran C:\Users\wajih\AppData\Local\CrashRpt =>.Superfluous.CrashReports C:\Users\wajih\AppData\Local\DriverToolkit =>PUP.Optional.DriverToolkit C:\Users\wajih\AppData\Local\GamePlayLabs Plugin =>PUP.Optional.GamePlayLabs C:\Users\wajih\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate C:\Users\wajih\AppData\Local\Media Get LLC =>PUP.Optional.MediaGet C:\Users\wajih\AppData\Local\MediaGet2 =>PUP.Optional.MediaGet C:\Users\wajih\AppData\Local\Minibar =>PUP.Optional.Minibar C:\Users\wajih\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie C:\Users\wajih\AppData\Local\OpenCandy =>PUP.Optional.OpenCandy C:\Users\wajih\AppData\Local\PackageAware =>PUP.Optional.BearShare C:\Users\wajih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>PUP.Optional.MegaSearch C:\Windows\Prefetch\LAVASOFT.SEARCHPROTECT.WINSER-223FC669.pf =>PUP.Optional.SearchProtect C:\Users\wajih\Downloads\MediaDownloader.exe =>PUP.Optional.MediaDownloader C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\TbHelper2.exe =>PUP.Optional.SocialSkinz C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\uninstall.exe =>PUP.Optional.SocialSkinz C:\Users\wajih\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\update.exe =>PUP.Optional.SocialSkinz HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASAPI32 =>PUP.Optional.Alnaddy HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\alnaddyToolbar_chr_only_1_6_9_5_RASMANCS =>PUP.Optional.Alnaddy HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonTC_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32 =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS =>PUP.Optional.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASAPI32 =>PUP.Optional.EORezo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\eorezo_RASMANCS =>PUP.Optional.EORezo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS =>PUP.Optional.ExpressFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASAPI32 =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoodssrv_RASMANCS =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASAPI32 =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\facemoods_RASMANCS =>PUP.Optional.Facemoods HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASAPI32 =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FlvPlayerSetup_RASMANCS =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASAPI32 =>PUP.Optional.GamePlayLabs HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GamePlayLabsInstaller_RASMANCS =>PUP.Optional.GamePlayLabs HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASAPI32 =>PUP.Optional.VidSaver HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASMANCS =>PUP.Optional.VidSaver ---\\ Récapitulatif des éléments trouvées sur votre station (72) - 0s http://www.nicolascoolman.fr/blog =>Hijacker.Browser http://www.nicolascoolman.fr/hijacker-browsers/ =>PUP.Optional.Browser http://www.nicolascoolman.fr/blog =>PUP.Optional.PriceFountain http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart http://www.nicolascoolman.fr/blog =>PUP.Optional.BDYahoo http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab http://www.nicolascoolman.fr/pup-sweetpage/ =>PUP.Optional.SweetPage http://www.nicolascoolman.fr/blog =>PUP.Optional.ChercheUS http://www.nicolascoolman.fr/pup-shopperpro/ =>PUP.Optional.ShopperPro http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon http://www.nicolascoolman.fr/blog =>PUP.Optional.MediaDownloader http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverToolkit http://www.nicolascoolman.fr/adware-expressfiles/ =>PUP.Optional.ExpressFiles http://www.nicolascoolman.fr/pup-bitguard/ =>PUP.Optional.BitGuard http://www.nicolascoolman.fr/adware-installbrain/ =>PUP.Optional.InstallBrain http://www.nicolascoolman.fr/adware-predictad/ =>PUP.Optional.PredictAd http://www.nicolascoolman.fr/blog =>PUP.Optional.GreatFind http://www.nicolascoolman.fr/blog =>Toolbar.LayoutExpress http://www.nicolascoolman.fr/pup-wpmanager/ =>PUP.Optional.WpManager http://www.nicolascoolman.fr/blog =>PUP.Optional.Heuristic http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr http://www.nicolascoolman.fr/blog =>Toolbar.Agent http://www.nicolascoolman.fr/blog =>PUP.Optional.SweetSearch http://www.nicolascoolman.fr/pup-goobzo/ =>PUP.Optional.Goobzo http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster http://www.nicolascoolman.fr/pup-minibar/ =>PUP.Optional.Minibar http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab http://www.nicolascoolman.fr/pup-sweetim/ =>PUP.Optional.SweetIM http://www.nicolascoolman.fr/blog =>.Superfluous.Uniblue http://www.nicolascoolman.fr/pup-mindspark/ =>PUP.Optional.MindSpark http://www.nicolascoolman.fr/hijacker-babsolution/ =>PUP.Optional.BabSolution http://www.nicolascoolman.fr/pup-filescout/ =>PUP.Optional.FileScout http://www.nicolascoolman.fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch http://www.nicolascoolman.fr/pup-specialsavings/ =>PUP.Optional.GamePlayLabs http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate http://www.nicolascoolman.fr/blog =>Toolbar.IncrediMail http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic http://www.nicolascoolman.fr/adware-megasearch/ =>PUP.Optional.MegaSearch http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/trojan-usyndication/ =>PUP.Optional.USyndication http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner http://www.nicolascoolman.fr/adware-shoppingreport/ =>PUP.Optional.ShoppingReport http://www.nicolascoolman.fr/blog =>Toolbar.AVGSafeGuard http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup http://www.nicolascoolman.fr/blog =>PUP.Optional.SiteLookup http://www.nicolascoolman.fr/pup-vittalia/ =>PUP.Optional.Vittalia http://www.nicolascoolman.fr/adware-socialskinz/ =>PUP.Optional.SocialSkinz http://www.nicolascoolman.fr/blog =>PUP.Optional.Vosteran http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask http://www.nicolascoolman.fr/trojan-sprotector/ =>Trojan.SProtector http://www.nicolascoolman.fr/adware-opencandy/ =>PUP.Optional.OpenCandy http://www.nicolascoolman.fr/blog =>PUP.Optional.SimilarAddon http://www.nicolascoolman.fr/pup-speedanalysis/ =>PUP.Optional.SpeedAnalysis http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak http://www.nicolascoolman.fr/blog =>.Superfluous.CrashReports http://www.nicolascoolman.fr/pup-mediaget/ =>PUP.Optional.MediaGet http://www.nicolascoolman.fr/pup-bearshare/ =>PUP.Optional.BearShare http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch http://www.nicolascoolman.fr/hijacker-alnaddy/ =>PUP.Optional.Alnaddy http://www.nicolascoolman.fr/blog =>Toolbar.AskBar http://www.nicolascoolman.fr/pup-eorezo/ =>PUP.Optional.EORezo http://www.nicolascoolman.fr/adware-facemoods/ =>PUP.Optional.Facemoods http://www.nicolascoolman.fr/blog =>PUP.Optional.FLVPlayer http://www.nicolascoolman.fr/adware-vidsaver/ =>PUP.Optional.VidSaver ~ End of the scan, 24001 items in 391 seconds (1716)(0)