Rapport de ZHPDiag v1.3.5.100 par Nicolas Coolman, Update du 19/02/2013 Run by walber at 20/02/2013 09:20:09 State : Your version is update. High Elevated Privileges : OK UAC : Activate by user ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 MFIE: Mozilla Firefox 12.0 v12.0 (Defaut) ---\\ Windows Product Information ~ Langage: Anglais Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3836 MB (66% free) System Restore: Activé (Enable) System drive C: has 326 GB (72%) free of 452 GB ---\\ Logged in mode ~ Computer Name: HP ~ User Name: walber ~ All Users Names: walber, HomeGroupUser$, Convidado, Administrador, ~ Unselected Option: O45,O61,O62,O65,O82 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\walber\AppData\Roaming\ ~ %Desktop% : C:\Users\walber\Desktop\ ~ %Favorites% : C:\Users\walber\Favorites\ ~ %LocalAppData% : C:\Users\walber\AppData\Local\ ~ %StartMenu% : C:\Users\walber\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 326 Go of 452 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 14 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) F:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\\ Search Generic System Files [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 03:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Internet Extensions para Win32.) (.14/11/2012 - 03:04:11.) -- C:\Windows\System32\wininet.dll [1392128] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.20/11/2010 - 10:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 10:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 00:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 06:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 06:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 07:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 21:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 06:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.31/08/2012 - 15:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 21:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 07:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 21:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 06:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 10:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Scan Generic Processes in 00mn 00s ---\\ Hidden files state (Hidden/Total) ~ Mes images (My Pictures) : 2/886 ~ Mes musiques (My Musics) : 3/4180 ~ Mes Videos (My Videos) : 2/219 ~ Mes Favoris (My Favorites) : 1/57 ~ Mes Documents (My Documents) : 5/930 ~ Mon Bureau (My Desktop) : 1/11965 ~ Menu demarrer (Programs) : 1/7 ~ Scan Hidden Files in 00mn 25s ---\\ Running Processes [MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136] [PID.1032] [MD5.1CE55AE7E57826457FD56EB3C50E4E54] - (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe [415016] [PID.1020] [MD5.C6331D11F80B3AFFD91A9B3858E00F23] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [210216] [PID.1084] [MD5.0D286C0FE561D1A7EB30E83A0FF305B2] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\internet explorer\iexplore.exe [757296] [PID.5052] [MD5.99B6CE3840F5AD5C4B13B666249AA467] - (.Microsoft Corporation - Microsoft Search Client Server.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe [316208] [PID.4956] [MD5.7EA9113EBB954F309679E9D28ECAEDD6] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_149_ActiveX.exe [699248] [PID.4428] [MD5.F6E3D406A555A557D0F7CF085362EB4C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5687296] [PID.3348] [MD5.00C19D97AB407530BEB8556FA1F6B08A] - (.Unknown owner - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [280168] [PID.824] [MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808] [PID.1588] [MD5.5BC1D876DFD53C31C5FC65D2E9614015] - (.DigitalPersona, Inc. - DigitalPersona Local Host.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe [322624] [PID.1732] [MD5.577582D57D90FB64276ACFEE958DBFD3] - (.DeviceVM, Inc. - Windows Metadata Export Service.) -- C:\SPLASH.SYS\config\DVMExportService.exe [323584] [PID.1956] [MD5.BCC4A8B2E2E902F52E7F2E7D8E125765] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [94264] [PID.1988] [MD5.2238B91AC1A12CC6CC4C4FED41258B2A] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.2020] [MD5.C5052FB77AA42ED440F9F6B4E37145A9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [869672] [PID.508] [MD5.791227582A5070BD78B7E05285D13446] - (.Iminent - Iminent Protection.) -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2663976] [PID.2408] [MD5.C5A75EB48E2344ABDC162BDA79E16841] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384] [PID.3176] ~ Scan Processes Running in 00mn 00s ---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) C:\Users\walber\AppData\Local\Google\Chrome\User Data\Default\Preferences ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) C:\Users\walber\AppData\Roaming\Mozilla\Firefox\Profiles\qgcfyuxk.default\prefs.js M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\buscape.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\fcmdSrchtube.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\mercadolivre.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\twitter.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-br.xml M3 - MFPP: Plugins - [walber] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-br.xml M0 - MFSP: prefs.js [walber - qgcfyuxk.default] www.google.com.br M2 - MFEP: prefs.js [walber - qgcfyuxk.default\netvideohunter@netvideohunter.com] [] NetVideoHunter v (.Peter Szabo.) M2 - MFEP: prefs.js [walber - qgcfyuxk.default\{87F8774F-B485-47E2-A755-A40A8A5E886C}] [] Modulo de Seguranca - Banco do Brasil v2.12.0.14.120 (.Peter Szabo.) P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll P2 - FPN: [HKCU] [@octoshape.com/Octoshape Streaming Services,version=1.0] - (.Octoshape ApS - Octoshape embedded video plugin.) -- C:\Users\walber\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R3 - URLSearchHook: (no name) [64Bits] - {A3BC75A2-1F87-4686-AA43-5347D756017C} . (.Octoshape ApS - Octoshape embedded video plugin.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) [64Bits] - {c2db4fe6-8409-45ce-8010-189a7b5cce86} . (.Octoshape ApS - Octoshape embedded video plugin.) (No version) -- (.not file.) R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navegador da Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects (O2) O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: DigitalPersona Personal Extension [64Bits] - {395610AE-C624-4f58-B89E-23733EA00F9A} . (.DigitalPersona, Inc. - DigitalPersona OTS Feedback.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll O2 - BHO: Search Helper [64Bits] - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Auxiliar de Conexão do Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: G-Buster Browser Defense [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Orphean Key ~ Scan Toolbar in 00mn 00s ---\\ Auto loading programs from Registry and folders (O4) O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Wow6432Node\RunOnce: [AvgUninstallURL] . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\Windows\System32\cmd.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Other User Links (O4) O4 - Global Startup: C:\Users\walber\Desktop\Any Video Converter.lnk . (.Any-Video-Converter.com.) -- C:\Program Files (x86)\AnvSoft\Any Video Converter\VideoConverter.exe O4 - Global Startup: C:\Users\walber\Desktop\Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\fsquirt.exe O4 - Global Startup: C:\Users\walber\Desktop\Calculator.lnk . (.Microsoft Corporation.) -- C:\Windows\system32\calc.exe O4 - Global Startup: C:\Users\walber\Desktop\DVDVideoSoft Free Studio.lnk . (.DvdVideoSoft Ltd..) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe O4 - Global Startup: C:\Users\walber\Desktop\Format Factory.lnk . (.Free Time.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe O4 - Global Startup: C:\Users\walber\Desktop\Free Audio Editor.lnk . (...) -- C:\Program Files (x86)\Free Audio Editor\FreeAudioEditor.exe O4 - Global Startup: C:\Users\walber\Desktop\Free DVD MP3 Ripper.lnk . (.Jodix.com.) -- C:\Program Files (x86)\Free DVD MP3 Ripper\dvd_mp3_ripper.exe O4 - Global Startup: C:\Users\walber\Desktop\Free WebM Video Converter.lnk . (.DVDVideoSoft Ltd..) -- C:\Program Files (x86)\DVDVideoSoft\Free WebM Video Converter\FreeWebMVideoConverter.exe O4 - Global Startup: C:\Users\walber\Desktop\HP QuickWeb Help.lnk . (.Microsoft Corporation.) -- C:\Windows\SysWOW64\cmd.exe O4 - Global Startup: C:\Users\walber\Desktop\MaxPayne2 - Atalho.lnk . (.Remedy Entertainment.) -- C:\MaxPayne2\MaxPayne2.exe O4 - Global Startup: C:\Users\walber\Desktop\Microsoft Office Excel 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe O4 - Global Startup: C:\Users\walber\Desktop\Microsoft Office PowerPoint 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe O4 - Global Startup: C:\Users\walber\Desktop\Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free YouTube Downloader.lnk . (.HOW Inc..) -- C:\Program Files (x86)\Free YouTube Downloader\YouTubeDownloader.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MassTube.lnk . (.Havy A. C. (ZyntaXis).) -- C:\Program Files (x86)\MassTube\MassTube.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home.lnk . (.Nero AG.) -- C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe O4 - Global Startup: C:\Users\walber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk . (.Nero AG.) -- C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe ~ Scan Global Startup in 00mn 00s ---\\ IE Options icon not visible in Control Panel (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Provedor de Correção de Nomeação de Emails.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Provedor de serviços do Microsoft Windows Sockets 2.0.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Site in Trusted Zone (O15) O15 - Trusted Zone: [HKCU\...\Domains\www] *.bancobrasil.com.br O15 - Trusted Zone: [HKCU\...\Domains\www] *.bb.com.br ~ Scan IE Zone Confiance in 00mn 00s ---\\ Lop.com/Domain Hijackers (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CCS\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CCS\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpDomain = funpec.br O17 - HKLM\System\CCS\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpDomain = funpec.br O17 - HKLM\System\CS1\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CS1\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CS1\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpDomain = funpec.br O17 - HKLM\System\CS1\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpDomain = funpec.br O17 - HKLM\System\CS2\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CS2\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpNameServer = 10.4.65.16 O17 - HKLM\System\CS2\Services\Tcpip\..\{160A687E-8E05-45F3-902F-912A9443AFED}: DhcpDomain = funpec.br O17 - HKLM\System\CS2\Services\Tcpip\..\{695F06B0-0CEC-48C0-9E1D-B38FCD814E44}: DhcpDomain = funpec.br ~ Scan Domain in 00mn 00s ---\\ Extra protocols (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ ShellServiceObjectDelayLoad (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23) O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: (DpHost) . (.DigitalPersona, Inc. - DigitalPersona Local Host.) - C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe O23 - Service: Gbp Service (GbpSv) . (.Unknown owner - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: SProtection (SProtection) . (.Iminent - Iminent Protection.) - C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe O23 - Service: Validity Fingerprint Service (vfsFPService) . (.Validity Sensors, Inc. - Validity Sensors Fingerprint Service.) - C:\Windows\system32\vfsFPService.exe O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) ~ Scan Services in 00mn 05s ---\\ Windows Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Task Planned Automatically(039) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForwalber.job [MD5.563CDCFEEAEF97163E206AF71A61AA6E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [MD5.4510E7A22B82BB99FFEE43953292BAD0] [APT] [CapSchedInst] (.CL.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSchedInst.exe [MD5.60747E27A2767B96E4A70DEAF73A30D7] [APT] [CapSvcInst] (.CL.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSvcInst.exe [MD5.86BA18FC1681C3274DA50BC6B07FAECD] [APT] [CapUninst] (.CL.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\Kernel\TV\CapUninst.exe [MD5.C6331D11F80B3AFFD91A9B3858E00F23] [APT] [CLMLSvc] (.CyberLink.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [MD5.00000000000000000000000000000000] [APT] [DVDAgent] (...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (.not file.) [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.455B6AF8235787AB6E36193FBD9BB0AA] [APT] [HPCeeScheduleForwalber] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [MD5.1CE55AE7E57826457FD56EB3C50E4E54] [APT] [TVAgent] (.CyberLink Corp..) -- c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe [MD5.00000000000000000000000000000000] [APT] [{0D5CFF84-6CFE-4C4E-B0FB-53B55B33A9D3}] (...) -- C:\Users\walber\Documents\BluetoothDriverInstaller.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{29EF1346-F402-449D-8C51-DDD33AE7C784}] (...) -- C:\Program Files\Alwil Software\Avast5\aswRundll.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{3347CE74-DC52-4C5B-ACA0-44CFBFE0A816}] (...) -- G:\Windows\Install.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{8A628CE1-D368-462A-9771-7CE7EF384E71}] (...) -- G:\branco\Aplicativo\mp3DC213.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{8EE07EC1-E3AC-4D70-BC0A-55ACC73EC6D6}] (...) -- F:\setup.exe (.not file.) [MD5.1DB8C2220EFDBA97F671F46F6A8DE51E] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [MD5.7A14C25B7EC229B7F8B3E457779C83CC] [APT] [HP Total Care Tune-Up] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [MD5.FFD052D0F464ADC243C24E71D15C9990] [APT] [HPSAObjUtilTask] (.Microsoft.) -- C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [MD5.0757398E1539E633CEC5179A3BCA5F4F] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [MD5.0757398E1539E633CEC5179A3BCA5F4F] [APT] [PC Tuneup] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [MD5.A87F567F053191361B617D7908F8E062] [APT] [Update Check] (.Hewlett-Packard.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe ~ Scan Scheduled Task in 00mn 10s ---\\ ActiveSetup Installed Components (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do Internet Explorer.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Identidade visual IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extensão shell da pasta FTP do Microsoft Internet Explorer.) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL comum do Shell do Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do Internet Explorer.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Drivers launched at startup (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (DVMIO) . (.DeviceVM, Inc. - DVMIO virtual device driver for 64bit.) - C:\SPLASH.sys\config\dvmio.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Agendador de pacotes de serviço.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Driver do Subsistema de Buffer da Unidade R.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Driver de dispositivo serial.) - C:\Windows\system32\DRIVERS\serial.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Software installed (O42) O42 - Logiciel: AMD USB Filter Driver - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {82809116-D1EE-443C-AE31-F19E709DDF7A} O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 9.3 - Português - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1046-7B44-A93000000001} O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11} O42 - Logiciel: Alps Touch Pad Driver - (.ALPS ELECTRIC CO., LTD..) [HKLM][64Bits] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} O42 - Logiciel: Any Video Converter 3.3.0 - (.Any-Video-Converter.com.) [HKLM][64Bits] -- Any Video Converter_is1 O42 - Logiciel: Arquivo do WinRAR - (.Unknown owner.) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Wireless LAN Adapter O42 - Logiciel: CAT Mpact - (.DATAPREV.) [HKLM][64Bits] -- {9EB4BF60-7941-48BF-8070-59F709F507D2}_is1 O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {E0897770-46C9-4322-AD44-8BFA6BE217B2} O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: DigitalPersona Personal 4.10 - (.DigitalPersona, Inc..) [HKLM][64Bits] -- {DD3BF908-F6B0-45A5-BED3-79E8888DDA93} O42 - Logiciel: ENE CIR Receiver Driver - (.ENE.) [HKLM][64Bits] -- 5F4DD0919B4763856B77AD385DEEEFCDF01784A8 O42 - Logiciel: FormatFactory 2.80 - (.Free Time.) [HKLM][64Bits] -- FormatFactory O42 - Logiciel: Free Audio Editor - (.FAE Inc..) [HKLM][64Bits] -- Free Audio Editor O42 - Logiciel: Free DVD MP3 Ripper 1.12 - (.Jodix Technologies Ltd..) [HKLM][64Bits] -- Free DVD MP3 Ripper_is1 O42 - Logiciel: Free WebM Video Converter version 5.0.21.1212 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free WebM Video Converter_is1 O42 - Logiciel: Free YouTube Downloader 3.3.120 - (.HOW Inc..) [HKLM][64Bits] -- {A7E19604-93AF-4611-8C9F-CE509C2B286F}_is1 O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {4286E640-B5FB-11DF-AC4B-005056C00008} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard.) [HKLM][64Bits] -- {4337D507-533C-4FDE-BA2F-DC93E56784B8} O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart Internet TV - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5} O42 - Logiciel: HP MediaSmart Internet TV - (.Hewlett-Packard.) [HKLM][64Bits] -- {E553760D-D7F7-48BF-BD8B-C7E23BA04CB5} O42 - Logiciel: HP MediaSmart Live TV - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15} O42 - Logiciel: HP MediaSmart Live TV - (.Hewlett-Packard.) [HKLM][64Bits] -- {67626E09-5366-4480-8F1E-93FADF50CA15} O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E} O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E} O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM][64Bits] -- {88E60521-1E4E-4785-B9F1-1798A4BD0C30} O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: HP Quick Launch Buttons - (.Hewlett-Packard.) [HKLM][64Bits] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} O42 - Logiciel: HP QuickWeb - (.DeviceVM, Inc..) [HKLM][64Bits] -- {21FFAF37-E51A-41AB-8749-ACD1F9CF8E37} O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {17B4760F-334B-475D-829F-1A3E94A6A4E6} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F44AF95-3CDE-4513-AD3F-6D45F17BF324} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {D46D081B-F60E-467E-A7C4-117B70D76731} O42 - Logiciel: HP User Guides 0146 - (.Hewlett-Packard.) [HKLM][64Bits] -- {45E5D641-3C82-4F95-92FB-AE5459DF2988} O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {54CC7901-804D-4155-B353-21F0CC9112AB} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.1.2.0 - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {118D6CE9-5F18-42F9-958A-14676A629FDE} O42 - Logiciel: JMicron Flash Media Controller Driver - (.JMicron Technology Corp..) [HKLM][64Bits] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C} O42 - Logiciel: Java(TM) 6 Update 15 (64-bit) - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86416015FF} O42 - Logiciel: Java(TM) 6 Update 31 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF} O42 - Logiciel: Java(TM) SE Development Kit 6 Update 15 (64-bit) - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0160150} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: K-Lite Mega Codec Pack 9.7.5 - (.Unknown owner.) [HKLM][64Bits] -- KLiteCodecPack_is1 O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {CC8E94A2-55C7-4460-953C-2A790180578C} O42 - Logiciel: MSVC80_x64_v2 - (.Nokia.) [HKLM][64Bits] -- {4D668D4F-FAA2-4726-834C-31F4614F312E} O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM][64Bits] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} O42 - Logiciel: MSVC90_x64 - (.Nokia.) [HKLM][64Bits] -- {AB071C8B-873C-459F-ACA9-9EBE03C3E89B} O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM][64Bits] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MV RegClean 6.0 - (.Unknown owner.) [HKLM][64Bits] -- MV RegClean 6.0_is1 O42 - Logiciel: Malwarebytes Anti-Malware versão 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: MassTube 5.2 - HD Edition - (.Havy A. C. (ZyntaXis).) [HKLM][64Bits] -- {622A0A32-9711-43D3-A6F1-B0FC78F1A68A}_is1 O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {EE5B6291-45EF-4705-A20E-89A3C5D2F87E} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Mozilla Firefox 12.0 (x86 pt-BR) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 12.0 (x86 pt-BR) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM][64Bits] -- {5FCCD531-1B38-4A94-924C-127F722F1046} O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM][64Bits] -- {4AA68A73-DB9C-439D-9481-981C82BD008B} O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM][64Bits] -- Nokia Ovi Suite O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM][64Bits] -- {44FB7006-C5F5-43F7-BF3E-70BC5A1C7457} O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM][64Bits] -- {A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0} O42 - Logiciel: Octoshape Streaming Services - (.Unknown owner.) [HKCU][64Bits] -- Octoshape Streaming Services O42 - Logiciel: Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0 - (.Orban, Inc..) [HKLM][64Bits] -- {DB0A8A2A-4EA7-4FE3-802E-8A6DEE32696C}_is1 O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM][64Bits] -- {BEF7FC5C-0182-4DDE-BDDD-F7D132AB833D} O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM][64Bits] -- {4CA10D13-F83A-487E-9B30-CC979FEF7A70} O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM][64Bits] -- {A2AA4204-C05A-4013-888A-AD153139297F} O42 - Logiciel: Pacote de Compatibilidade para o sistema Office 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-0416-0000-0000000FF1CE} O42 - Logiciel: Pacote de Driver do Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM][64Bits] -- FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: QLBCASL - (.Hewlett-Packard.) [HKLM][64Bits] -- {F1D7AC58-554A-4A58-B784-B61558B1449A} O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} O42 - Logiciel: SanDiskSecureAccess_Manager.exe - (.Gemalto N.V..) [HKCU][64Bits] -- @@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM][64Bits] -- {3921A67A-5AB1-4E48-9444-C71814CF3027} O42 - Logiciel: Validity Sensors software - (.Validity Sensors, Inc..) [HKLM][64Bits] -- {F65B8208-5221-43D9-AA12-DDEA64EC4AF6} O42 - Logiciel: Visual Studio 2008 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {FCDBEA60-79F0-4FAE-BBA8-55A26C609A49} O42 - Logiciel: Vivo 3G - (.Unknown owner.) [HKLM][64Bits] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D} O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) - (.Broadcom.) [HKLM][64Bits] -- 6B8550A319DDC8B17F35F4A89988705E4592349B O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) - (.Broadcom.) [HKLM][64Bits] -- 6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1 O42 - Logiciel: Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) - (.Broadcom.) [HKLM][64Bits] -- 3BA80AB4C7E9F8497C115C844953A3D4BEB84D21 O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM][64Bits] -- avast O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} ---\\ HKCU & HKLM Software Keys [HKCU\Software\8.1] [HKCU\Software\ALWIL Software] [HKCU\Software\ATI] [HKCU\Software\AVAST Software] [HKCU\Software\AVS4YOU] [HKCU\Software\Acoustica] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Alps] [HKCU\Software\AnvSoft] [HKCU\Software\AppDataLow\Avg] [HKCU\Software\AppDataLow\SOFTWARE] [HKCU\Software\AppDataLow\Software\DigitalPersona] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow] [HKCU\Software\ArcSoft] [HKCU\Software\Auslogics] [HKCU\Software\AutoHelpDesk] [HKCU\Software\Baixaki] [HKCU\Software\BenVista] [HKCU\Software\Bugsplat] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Corel] [HKCU\Software\CyberLink] [HKCU\Software\DVDVideoSoft] [HKCU\Software\DigitalPersona] [HKCU\Software\FreeTime] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\GbAs] [HKCU\Software\GbPlugin] [HKCU\Software\GeoVid] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IDT] [HKCU\Software\IM Providers] [HKCU\Software\Icaros] [HKCU\Software\Illustrate] [HKCU\Software\Iminent] [HKCU\Software\InstallCore] [HKCU\Software\InstallShield] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\LightScribe] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Macrovision] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MediaInfo] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\NCH Software] [HKCU\Software\NCH Swift Sound] [HKCU\Software\NeroDigital] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\Nokia] [HKCU\Software\Norton] [HKCU\Software\ODBC] [HKCU\Software\Octoshape] [HKCU\Software\OrolixCommunicator] [HKCU\Software\PS2Eplugin] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Remedy Entertainment] [HKCU\Software\Royal Philips] [HKCU\Software\SkypeRS] [HKCU\Software\Symantec] [HKCU\Software\Trolltech] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Winamp] [HKCU\Software\Wow6432Node] [HKCU\Software\Xilisoft] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\geissplugin] [HKCU\Software\getTube 2010] [HKCU\Software\kde.org] [HKCU\Software\madshi] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\Agere] [HKLM\Software\Alps] [HKLM\Software\CXT] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DeviceVM] [HKLM\Software\DigitalPersona] [HKLM\Software\HPQ] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDT] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\LSI] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Nokia] [HKLM\Software\ODBC] [HKLM\Software\PC Connectivity Solution] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Sonic] [HKLM\Software\Validity] [HKLM\Software\Wow6432Node\ALWIL Software] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\AVAST Software] [HKLM\Software\Wow6432Node\AVG Security Toolbar] [HKLM\Software\Wow6432Node\AVS4YOU] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\AnvSoft] [HKLM\Software\Wow6432Node\AskTBar] [HKLM\Software\Wow6432Node\Audible] [HKLM\Software\Wow6432Node\AutoHelpDesk] [HKLM\Software\Wow6432Node\BcmSetup] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\DVDVideoSoft] [HKLM\Software\Wow6432Node\Dell Computer Corporation] [HKLM\Software\Wow6432Node\DeviceVM] [HKLM\Software\Wow6432Node\Digital River] [HKLM\Software\Wow6432Node\DigitalPersona] [HKLM\Software\Wow6432Node\Free YouTube Downloader] [HKLM\Software\Wow6432Node\GNU] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\HPQLOG] [HKLM\Software\Wow6432Node\HPQ] [HKLM\Software\Wow6432Node\HP] [HKLM\Software\Wow6432Node\HaaliMkx] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\Huawei technologies] [HKLM\Software\Wow6432Node\IDT] [HKLM\Software\Wow6432Node\Icaros] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\Jodix] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\KLCodecPack] [HKLM\Software\Wow6432Node\LAV] [HKLM\Software\Wow6432Node\Licenses] [HKLM\Software\Wow6432Node\LightScribe] [HKLM\Software\Wow6432Node\Loader] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\Megacubo] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\NCH Software] [HKLM\Software\Wow6432Node\NCH Swift Sound] [HKLM\Software\Wow6432Node\NeroDigital] [HKLM\Software\Wow6432Node\Nero] [HKLM\Software\Wow6432Node\Nokia Mobile Phones] [HKLM\Software\Wow6432Node\Nokia] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\OMSI] [HKLM\Software\Wow6432Node\PC Connectivity Solution] [HKLM\Software\Wow6432Node\PCSuite] [HKLM\Software\Wow6432Node\PDR_Upgrade] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Product_Upgrade] [HKLM\Software\Wow6432Node\Protexis] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\USBDriverFlag] [HKLM\Software\Wow6432Node\Umbrella] [HKLM\Software\Wow6432Node\Uniblue] [HKLM\Software\Wow6432Node\Vivo 3G] [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\WinRAR] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\WorldUnlock Codes Calculator] [HKLM\Software\Wow6432Node\ahead] [HKLM\Software\Wow6432Node\dotNetInstaller] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node] ~ Scan Softwares in 00mn 00s ---\\ Contents of the Common Files folders (O43) O43 - CFD: 16/10/2011 - 12:17:49 - [3,320] ----D C:\Program Files (x86)\2710 Software O43 - CFD: 09/10/2010 - 16:29:05 - [221,292] ----D C:\Program Files (x86)\Adobe O43 - CFD: 20/07/2010 - 15:55:52 - [0,071] ----D C:\Program Files (x86)\AMD O43 - CFD: 11/11/2010 - 20:44:49 - [155,692] ----D C:\Program Files (x86)\AnvSoft O43 - CFD: 20/07/2010 - 15:55:40 - [80,728] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 28/02/2012 - 12:13:38 - [9,682] ----D C:\Program Files (x86)\Auslogics O43 - CFD: 13/10/2010 - 20:58:08 - [11,429] ----D C:\Program Files (x86)\AVG O43 - CFD: 18/09/2012 - 00:51:30 - [0] ----D C:\Program Files (x86)\AVS4YOU O43 - CFD: 20/09/2011 - 09:39:44 - [0,545] ----D C:\Program Files (x86)\CDex O43 - CFD: 05/11/2011 - 19:08:43 - [0,000] ----D C:\Program Files (x86)\Claro 3G O43 - CFD: 20/02/2013 - 08:56:49 - [649,838] ----D C:\Program Files (x86)\Common Files O43 - CFD: 04/07/2011 - 19:35:54 - [23,675] ----D C:\Program Files (x86)\Curso AutoCAD2007 Demo O43 - CFD: 15/12/2009 - 21:15:52 - [987,546] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 20/07/2010 - 16:22:03 - [48,863] ----D C:\Program Files (x86)\DigitalPersona O43 - CFD: 20/07/2010 - 16:16:43 - [519,514] ----D C:\Program Files (x86)\Downloaded Installations O43 - CFD: 16/01/2013 - 22:02:53 - [10,869] ----D C:\Program Files (x86)\DVDVideoSoft O43 - CFD: 23/09/2011 - 09:20:00 - [55,735] ----D C:\Program Files (x86)\Free Audio Editor O43 - CFD: 02/12/2012 - 19:31:50 - [2,796] ----D C:\Program Files (x86)\Free DVD MP3 Ripper O43 - CFD: 11/01/2012 - 09:29:06 - [27,963] ----D C:\Program Files (x86)\Free YouTube Downloader O43 - CFD: 14/04/2012 - 14:12:28 - [114,229] ----D C:\Program Files (x86)\FreeTime O43 - CFD: 02/11/2012 - 08:09:37 - [4,085] ----D C:\Program Files (x86)\GbPlugin O43 - CFD: 16/09/2012 - 20:36:18 - [88,100] ----D C:\Program Files (x86)\Google O43 - CFD: 04/03/2012 - 15:00:42 - [1449,760] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 15/12/2009 - 22:14:35 - [2,972] ----D C:\Program Files (x86)\Hp O43 - CFD: 05/11/2011 - 19:08:42 - [2,576] ----D C:\Program Files (x86)\InstallAffixationInfo O43 - CFD: 16/09/2012 - 20:20:18 - [215,594] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 26/12/2012 - 22:00:34 - [4,926] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 29/02/2012 - 14:36:36 - [85,003] ----D C:\Program Files (x86)\Java O43 - CFD: 20/07/2010 - 15:57:32 - [1,840] ----D C:\Program Files (x86)\JMicron O43 - CFD: 19/02/2013 - 15:06:09 - [71,479] ----D C:\Program Files (x86)\K-Lite Codec Pack O43 - CFD: 20/02/2013 - 08:56:33 - [12,169] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 20/02/2013 - 08:59:04 - [2,465] ----D C:\Program Files (x86)\Marcos Velasco Security O43 - CFD: 16/04/2011 - 20:52:26 - [9,404] ----D C:\Program Files (x86)\MassTube O43 - CFD: 12/11/2010 - 00:08:44 - [0,088] ----D C:\Program Files (x86)\MediaMonkey O43 - CFD: 15/12/2009 - 19:28:09 - [2,541] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 11/07/2011 - 22:26:07 - [634,662] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 15/12/2009 - 20:17:10 - [7,431] ----D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant O43 - CFD: 16/05/2012 - 07:57:08 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 15/12/2009 - 19:29:00 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 15/08/2010 - 18:18:18 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 15/08/2010 - 18:15:45 - [53,814] ----D C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 29/10/2012 - 23:38:50 - [126,264] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 06/05/2011 - 22:02:56 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 04/07/2011 - 19:42:11 - [0] ----D C:\Program Files (x86)\Mobile Partner O43 - CFD: 13/01/2013 - 11:21:36 - [36,689] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 13/01/2013 - 11:21:44 - [0,210] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 07/09/2011 - 17:11:53 - [0,391] ----D C:\Program Files (x86)\mp3DirectCut O43 - CFD: 15/08/2010 - 18:18:33 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 23/08/2010 - 23:58:05 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 11/11/2010 - 20:00:05 - [0,488] ----D C:\Program Files (x86)\NCH Software O43 - CFD: 09/10/2011 - 13:50:54 - [414,490] ----D C:\Program Files (x86)\Nero O43 - CFD: 19/02/2013 - 15:48:33 - [84,136] ----D C:\Program Files (x86)\Nokia O43 - CFD: 03/08/2010 - 14:20:17 - [19,381] R---D C:\Program Files (x86)\Online Services O43 - CFD: 02/11/2010 - 16:02:02 - [2,430] ----D C:\Program Files (x86)\Orban O43 - CFD: 19/02/2013 - 15:48:34 - [21,039] ----D C:\Program Files (x86)\PC Connectivity Solution O43 - CFD: 20/07/2010 - 15:56:13 - [0,995] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 02:32:38 - [37,270] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 02/11/2010 - 16:02:12 - [3,422] ----D C:\Program Files (x86)\SopCast O43 - CFD: 16/09/2012 - 14:25:14 - [4,599] ----D C:\Program Files (x86)\SupportInfo O43 - CFD: 14/07/2009 - 01:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 05/11/2012 - 20:15:59 - [23,675] ----D C:\Program Files (x86)\Vivo 3G O43 - CFD: 12/11/2010 - 00:10:09 - [0,008] ----D C:\Program Files (x86)\VIVO INTERNET O43 - CFD: 16/12/2009 - 01:06:29 - [0,493] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 22/06/2012 - 20:20:42 - [139,937] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 04/03/2012 - 10:31:40 - [5,870] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 04/03/2012 - 10:31:40 - [5,081] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 02:32:38 - [11,630] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 04/03/2012 - 10:31:40 - [4,210] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 04/03/2012 - 10:31:40 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 04/03/2012 - 10:31:40 - [5,716] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 23/08/2010 - 21:51:57 - [4,980] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 04/01/2011 - 13:34:49 - [0,702] ----D C:\Program Files (x86)\WorldUnlock Codes Calculator O43 - CFD: 20/02/2013 - 09:20:51 - [15,130] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 09/10/2010 - 16:29:10 - [5,980] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 15/12/2009 - 20:49:40 - [30,315] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 09/10/2011 - 13:37:06 - [5,558] ----D C:\Program Files (x86)\Common Files\Ahead O43 - CFD: 16/09/2012 - 20:18:47 - [0,000] ----D C:\Program Files (x86)\Common Files\ArcSoft O43 - CFD: 18/09/2012 - 00:51:31 - [0,171] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 15/08/2010 - 18:18:18 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 16/01/2013 - 22:03:00 - [63,145] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft O43 - CFD: 16/09/2012 - 20:18:52 - [1,979] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 29/02/2012 - 14:37:32 - [1,201] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 20/07/2010 - 16:05:50 - [35,053] ----D C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 22/06/2012 - 20:18:30 - [206,107] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 09/10/2011 - 13:52:04 - [140,929] ----D C:\Program Files (x86)\Common Files\Nero O43 - CFD: 19/02/2013 - 15:48:32 - [73,345] ----D C:\Program Files (x86)\Common Files\Nokia O43 - CFD: 14/07/2009 - 00:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 14/07/2009 - 00:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 27/08/2010 - 20:57:37 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 25/09/2012 - 22:09:26 - [42,148] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 20/02/2013 - 08:56:49 - [2,541] ----D C:\Program Files (x86)\Common Files\Umbrella O43 - CFD: 15/12/2009 - 19:26:29 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 19/02/2013 - 17:52:07 - [170,602] ----D C:\ProgramData\Adobe O43 - CFD: 29/02/2012 - 14:30:21 - [7,799] ----D C:\ProgramData\Alwil Software O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 14/04/2012 - 16:01:11 - [0,001] --H-D C:\ProgramData\ArcSoft O43 - CFD: 20/07/2010 - 16:32:56 - [0,000] ----D C:\ProgramData\ATI O43 - CFD: 19/02/2013 - 17:39:00 - [0,042] ----D C:\ProgramData\Autodesk O43 - CFD: 19/02/2013 - 14:22:44 - [7,653] ----D C:\ProgramData\AVAST Software O43 - CFD: 13/10/2010 - 21:01:18 - [0,017] ----D C:\ProgramData\AVG Security Toolbar O43 - CFD: 29/02/2012 - 14:47:31 - [256,576] ----D C:\ProgramData\AVG10 O43 - CFD: 17/09/2012 - 23:52:41 - [0] ----D C:\ProgramData\AVS4YOU O43 - CFD: 13/10/2010 - 20:59:29 - [0,000] --H-D C:\ProgramData\Common Files O43 - CFD: 02/12/2011 - 08:31:25 - [0,131] ----D C:\ProgramData\CyberLink O43 - CFD: 03/08/2010 - 14:18:25 - [0] --H-D C:\ProgramData\Dados de aplicativos O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 03/08/2010 - 14:18:25 - [0] --H-D C:\ProgramData\Documentos O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 20/07/2010 - 16:21:55 - [63,025] ----D C:\ProgramData\Downloaded Installations O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 03/08/2010 - 14:18:25 - [0] --H-D C:\ProgramData\Favoritos O43 - CFD: 05/11/2011 - 20:07:45 - [24,888] ----D C:\ProgramData\gas O43 - CFD: 10/12/2012 - 18:21:17 - [0,009] ----D C:\ProgramData\GbPlugin O43 - CFD: 16/04/2011 - 21:09:28 - [0] ----D C:\ProgramData\Google O43 - CFD: 04/03/2012 - 15:01:44 - [45,295] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 04/06/2012 - 10:58:12 - [0,038] ----D C:\ProgramData\HP O43 - CFD: 08/05/2012 - 18:36:04 - [177,942] ----D C:\ProgramData\Installations O43 - CFD: 10/10/2011 - 12:27:52 - [0,004] ----D C:\ProgramData\LightScribe O43 - CFD: 20/07/2010 - 16:22:02 - [2,438] ----D C:\ProgramData\Macrovision O43 - CFD: 20/02/2013 - 08:56:30 - [5,763] ----D C:\ProgramData\Malwarebytes O43 - CFD: 09/12/2012 - 16:47:28 - [0] ----D C:\ProgramData\McAfee O43 - CFD: 03/08/2010 - 14:18:25 - [0] --H-D C:\ProgramData\Menu Iniciar O43 - CFD: 29/02/2012 - 14:46:19 - [27,957] ----D C:\ProgramData\MFAData O43 - CFD: 08/05/2011 - 18:48:45 - [414,313] -S--D C:\ProgramData\Microsoft O43 - CFD: 14/01/2013 - 20:38:38 - [0,068] ----D C:\ProgramData\Microsoft Help O43 - CFD: 03/08/2010 - 14:18:25 - [0] --H-D C:\ProgramData\Modelos O43 - CFD: 13/01/2013 - 11:21:42 - [0,000] ----D C:\ProgramData\Mozilla O43 - CFD: 11/11/2010 - 19:58:36 - [0] ----D C:\ProgramData\NCH Swift Sound O43 - CFD: 09/10/2011 - 13:50:55 - [5,143] ----D C:\ProgramData\Nero O43 - CFD: 19/02/2013 - 15:47:03 - [795,222] ----D C:\ProgramData\Nokia O43 - CFD: 01/06/2011 - 23:33:18 - [0] ----D C:\ProgramData\NokiaAccount O43 - CFD: 22/08/2011 - 12:53:15 - [507,293] ----D C:\ProgramData\NokiaInstallerCache O43 - CFD: 27/08/2010 - 20:58:44 - [0,015] ----D C:\ProgramData\Norton O43 - CFD: 20/07/2010 - 16:18:23 - [5,392] ----D C:\ProgramData\NortonInstaller O43 - CFD: 13/04/2011 - 19:45:40 - [0,583] ----D C:\ProgramData\PC Suite O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 29/08/2010 - 20:45:12 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 12/04/2011 - 21:23:17 - [0,711] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 02:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 20/07/2010 - 16:20:10 - [20,406] ----D C:\ProgramData\{44AFD825-9603-4521-9447-A6E1C5CA2F3D} O43 - CFD: 04/03/2012 - 14:57:54 - [45,653] ----D C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E} O43 - CFD: 20/09/2011 - 09:00:04 - [0,707] ----D C:\Users\walber\AppData\Roaming\Acoustica O43 - CFD: 21/08/2010 - 22:28:25 - [1,544] ----D C:\Users\walber\AppData\Roaming\Adobe O43 - CFD: 15/09/2010 - 09:20:27 - [0,107] ----D C:\Users\walber\AppData\Roaming\Ahead O43 - CFD: 11/11/2010 - 20:44:51 - [0,488] ----D C:\Users\walber\AppData\Roaming\AnvSoft O43 - CFD: 14/04/2012 - 16:01:08 - [0,317] ----D C:\Users\walber\AppData\Roaming\ArcSoft O43 - CFD: 03/08/2010 - 14:29:38 - [0] ----D C:\Users\walber\AppData\Roaming\ATI O43 - CFD: 28/02/2012 - 12:13:44 - [0,021] ----D C:\Users\walber\AppData\Roaming\Auslogics O43 - CFD: 19/02/2013 - 17:39:00 - [0,002] ----D C:\Users\walber\AppData\Roaming\Autodesk O43 - CFD: 18/09/2012 - 00:40:55 - [15,908] ----D C:\Users\walber\AppData\Roaming\AVS4YOU O43 - CFD: 26/09/2010 - 08:52:00 - [1,853] ----D C:\Users\walber\AppData\Roaming\Corel O43 - CFD: 02/12/2011 - 08:29:19 - [0,241] ----D C:\Users\walber\AppData\Roaming\CyberLink O43 - CFD: 03/08/2010 - 14:28:42 - [0,000] ----D C:\Users\walber\AppData\Roaming\DigitalPersona O43 - CFD: 13/04/2011 - 19:55:53 - [0] ----D C:\Users\walber\AppData\Roaming\DivX O43 - CFD: 16/09/2012 - 11:40:30 - [0,000] ----D C:\Users\walber\AppData\Roaming\dvdcss O43 - CFD: 16/01/2013 - 22:03:29 - [2,236] ----D C:\Users\walber\AppData\Roaming\DVDVideoSoft O43 - CFD: 08/02/2013 - 23:18:09 - [0,006] ----D C:\Users\walber\AppData\Roaming\Free Audio Editor O43 - CFD: 08/05/2011 - 18:50:22 - [0,001] ----D C:\Users\walber\AppData\Roaming\Get from YouTube O43 - CFD: 16/04/2011 - 21:10:30 - [0,001] ----D C:\Users\walber\AppData\Roaming\Google O43 - CFD: 04/03/2012 - 18:42:19 - [0,110] ----D C:\Users\walber\AppData\Roaming\Hewlett-Packard O43 - CFD: 30/03/2011 - 19:21:16 - [0] ----D C:\Users\walber\AppData\Roaming\HP Support Assistant O43 - CFD: 04/03/2012 - 14:56:56 - [0,023] ----D C:\Users\walber\AppData\Roaming\hpqlog O43 - CFD: 30/03/2011 - 19:21:23 - [0,001] ----D C:\Users\walber\AppData\Roaming\HpUpdate O43 - CFD: 03/08/2010 - 14:28:08 - [0] ----D C:\Users\walber\AppData\Roaming\Identities O43 - CFD: 25/09/2011 - 18:26:54 - [0,001] ----D C:\Users\walber\AppData\Roaming\Import Audio from Video O43 - CFD: 22/08/2010 - 21:52:18 - [0,001] ----D C:\Users\walber\AppData\Roaming\Macromedia O43 - CFD: 03/08/2010 - 14:29:40 - [0,001] ----D C:\Users\walber\AppData\Roaming\Macrovision O43 - CFD: 20/02/2013 - 08:56:38 - [0] ----D C:\Users\walber\AppData\Roaming\Malwarebytes O43 - CFD: 16/04/2011 - 22:49:51 - [0,000] ----D C:\Users\walber\AppData\Roaming\MassTube O43 - CFD: 20/07/2010 - 21:47:16 - [0] ----D C:\Users\walber\AppData\Roaming\Media Center Programs O43 - CFD: 19/02/2013 - 15:08:07 - [0,000] ----D C:\Users\walber\AppData\Roaming\Media Player Classic O43 - CFD: 19/02/2013 - 11:58:25 - [7,517] -S--D C:\Users\walber\AppData\Roaming\Microsoft O43 - CFD: 23/02/2011 - 20:55:26 - [0,000] ----D C:\Users\walber\AppData\Roaming\mojosoft O43 - CFD: 09/11/2010 - 00:28:13 - [19,897] ----D C:\Users\walber\AppData\Roaming\Mozilla O43 - CFD: 07/09/2011 - 17:12:35 - [0,002] ----D C:\Users\walber\AppData\Roaming\mp3DirectCut O43 - CFD: 08/05/2011 - 18:57:06 - [0,006] ----D C:\Users\walber\AppData\Roaming\Music Editor Free O43 - CFD: 11/11/2010 - 19:59:21 - [0,105] ----D C:\Users\walber\AppData\Roaming\NCH Software O43 - CFD: 11/11/2010 - 19:58:10 - [0,001] ----D C:\Users\walber\AppData\Roaming\NCH Swift Sound O43 - CFD: 09/10/2011 - 14:12:35 - [0,162] ----D C:\Users\walber\AppData\Roaming\Nero O43 - CFD: 31/10/2012 - 23:31:04 - [1,072] ----D C:\Users\walber\AppData\Roaming\Nokia O43 - CFD: 01/06/2011 - 23:33:53 - [0,032] ----D C:\Users\walber\AppData\Roaming\Nokia Ovi Suite O43 - CFD: 31/10/2012 - 23:31:04 - [0] ----D C:\Users\walber\AppData\Roaming\Nokia Suite O43 - CFD: 09/11/2010 - 00:28:11 - [0,744] ----D C:\Users\walber\AppData\Roaming\Octoshape O43 - CFD: 10/01/2012 - 21:00:55 - [75,620] ----D C:\Users\walber\AppData\Roaming\PC Suite O43 - CFD: 02/02/2013 - 07:45:02 - [37,569] ----D C:\Users\walber\AppData\Roaming\SanDisk O43 - CFD: 27/08/2010 - 23:15:46 - [0] ----D C:\Users\walber\AppData\Roaming\TreeCardGames O43 - CFD: 11/11/2010 - 20:45:44 - [2,306] ----D C:\Users\walber\AppData\Roaming\Uniblue O43 - CFD: 21/11/2011 - 17:52:14 - [0] ----D C:\Users\walber\AppData\Roaming\Windows Live Writer O43 - CFD: 27/08/2010 - 23:13:00 - [0,000] ----D C:\Users\walber\AppData\Roaming\WinRAR O43 - CFD: 18/09/2012 - 00:16:33 - [0] ----D C:\Users\walber\AppData\Roaming\Xilisoft O43 - CFD: 09/10/2010 - 16:28:19 - [22,305] ----D C:\Users\walber\AppData\Local\Adobe O43 - CFD: 10/10/2011 - 20:47:11 - [11,535] ----D C:\Users\walber\AppData\Local\Ahead O43 - CFD: 14/04/2012 - 16:00:50 - [0,000] ----D C:\Users\walber\AppData\Local\ArcSoft O43 - CFD: 03/08/2010 - 14:29:38 - [0,058] ----D C:\Users\walber\AppData\Local\ATI O43 - CFD: 13/10/2010 - 21:02:35 - [0,326] ----D C:\Users\walber\AppData\Local\AVG Security Toolbar O43 - CFD: 19/02/2013 - 14:18:42 - [0] ----D C:\Users\walber\AppData\Local\CrashDumps O43 - CFD: 03/08/2010 - 14:29:53 - [0,033] ----D C:\Users\walber\AppData\Local\CyberLink O43 - CFD: 03/08/2010 - 14:18:34 - [0] ----D C:\Users\walber\AppData\Local\Dados de aplicativos O43 - CFD: 19/02/2013 - 11:59:09 - [0,360] ----D C:\Users\walber\AppData\Local\Diagnostics O43 - CFD: 03/08/2010 - 14:28:42 - [0,000] ----D C:\Users\walber\AppData\Local\DigitalPersona O43 - CFD: 17/09/2012 - 23:46:55 - [0,058] ----D C:\Users\walber\AppData\Local\Facebook O43 - CFD: 04/07/2011 - 19:39:53 - [52,046] ----D C:\Users\walber\AppData\Local\Google O43 - CFD: 21/08/2010 - 22:35:00 - [16,678] ----D C:\Users\walber\AppData\Local\Hewlett-Packard O43 - CFD: 03/08/2010 - 14:18:34 - [0] ----D C:\Users\walber\AppData\Local\Histórico O43 - CFD: 25/12/2012 - 21:52:55 - [0] ----D C:\Users\walber\AppData\Local\Macromedia O43 - CFD: 12/11/2010 - 00:08:43 - [0,168] ----D C:\Users\walber\AppData\Local\MediaMonkey O43 - CFD: 25/12/2012 - 21:52:55 - [923,188] ----D C:\Users\walber\AppData\Local\Microsoft O43 - CFD: 30/08/2010 - 13:06:41 - [0,239] ----D C:\Users\walber\AppData\Local\Microsoft Games O43 - CFD: 19/11/2010 - 21:59:28 - [0,388] ----D C:\Users\walber\AppData\Local\Microsoft Help O43 - CFD: 13/10/2010 - 20:34:50 - [66,497] ----D C:\Users\walber\AppData\Local\Mozilla O43 - CFD: 09/10/2011 - 14:49:12 - [0,061] ----D C:\Users\walber\AppData\Local\Nero O43 - CFD: 26/11/2012 - 20:34:28 - [57,769] ----D C:\Users\walber\AppData\Local\Nokia O43 - CFD: 12/06/2012 - 15:09:05 - [0,001] ----D C:\Users\walber\AppData\Local\NokiaAccount O43 - CFD: 09/11/2010 - 10:30:56 - [0,007] ----D C:\Users\walber\AppData\Local\Octoshape O43 - CFD: 03/08/2010 - 14:29:52 - [0] ----D C:\Users\walber\AppData\Local\PowerCinema O43 - CFD: 09/12/2012 - 20:26:14 - [0] ----D C:\Users\walber\AppData\Local\Programs O43 - CFD: 20/02/2013 - 09:18:15 - [150,248] ----D C:\Users\walber\AppData\Local\Temp O43 - CFD: 03/08/2010 - 14:18:34 - [0] ----D C:\Users\walber\AppData\Local\Temporary Internet Files O43 - CFD: 04/07/2011 - 21:37:46 - [59,753] ----D C:\Users\walber\AppData\Local\VirtualStore O43 - CFD: 10/07/2012 - 20:03:33 - [0,055] ----D C:\Users\walber\AppData\Local\Windows Live O43 - CFD: 21/11/2011 - 17:52:45 - [0,620] ----D C:\Users\walber\AppData\Local\Windows Live Writer O43 - CFD: 18/07/2011 - 19:31:50 - [0] ----D C:\Users\walber\AppData\Local\{00486570-641E-4441-84BD-9F94E29BA2C4} O43 - CFD: 16/12/2012 - 17:44:10 - [0] ----D C:\Users\walber\AppData\Local\{00BF4322-25F6-4069-8FB3-3706629A4605} O43 - CFD: 30/09/2011 - 09:53:02 - [0] ----D C:\Users\walber\AppData\Local\{00EF5345-F674-4F94-BEF2-400904CD20AE} O43 - CFD: 29/02/2012 - 14:27:54 - [0] ----D C:\Users\walber\AppData\Local\{01528EC3-F6C6-4E37-889E-1E1168609EAA} O43 - CFD: 22/08/2011 - 12:42:01 - [0] ----D C:\Users\walber\AppData\Local\{01B42B2A-E6C9-407E-8067-88C51BCC8F13} O43 - CFD: 28/04/2012 - 08:33:32 - [0] ----D C:\Users\walber\AppData\Local\{021BE1D9-A036-4F6F-9226-A5C2058B1F57} O43 - CFD: 02/12/2012 - 19:30:43 - [0] ----D C:\Users\walber\AppData\Local\{027F6A1A-2301-40AC-B947-6FFAEA11942D} O43 - CFD: 24/06/2012 - 18:12:53 - [0] ----D C:\Users\walber\AppData\Local\{028045AA-EC87-45E1-A9D5-C5CC3D55281E} O43 - CFD: 06/03/2012 - 21:57:05 - [0] ----D C:\Users\walber\AppData\Local\{0360BFD9-AB80-4B4C-A4D5-4FD92A59FD82} O43 - CFD: 19/02/2012 - 16:56:28 - [0] ----D C:\Users\walber\AppData\Local\{04739491-1F3D-4CFA-AB92-1F878DCF786C} O43 - CFD: 15/05/2011 - 18:10:05 - [0] ----D C:\Users\walber\AppData\Local\{04F1D6B2-C863-47F8-8474-D2034E138453} O43 - CFD: 22/10/2012 - 13:28:46 - [0] ----D C:\Users\walber\AppData\Local\{06BF1930-6209-4DB4-877F-C078DECD3B21} O43 - CFD: 25/08/2011 - 12:42:12 - [0] ----D C:\Users\walber\AppData\Local\{06DCD1D6-31CE-4F42-A3B1-5AC2B1CE8444} O43 - CFD: 01/12/2011 - 08:40:14 - [0] ----D C:\Users\walber\AppData\Local\{072EFF73-6FD6-4648-9498-F3D4E00AA282} O43 - CFD: 26/12/2012 - 22:03:36 - [0] ----D C:\Users\walber\AppData\Local\{07685C8F-F175-4A46-8907-1533D74D05FB} O43 - CFD: 18/07/2011 - 06:28:35 - [0] ----D C:\Users\walber\AppData\Local\{080F18F8-0840-4B24-BA91-12B0D53D9179} O43 - CFD: 11/02/2012 - 15:24:05 - [0] ----D C:\Users\walber\AppData\Local\{0948BCCD-8A75-449B-8BF9-0E655F97B1C1} O43 - CFD: 06/12/2012 - 20:27:53 - [0] ----D C:\Users\walber\AppData\Local\{097B66CE-3FA1-4F47-AB02-FD576035D825} O43 - CFD: 28/11/2012 - 20:38:50 - [0] ----D C:\Users\walber\AppData\Local\{0AAB30F6-D3D5-4FDF-89D9-EEF1EAD46CFC} O43 - CFD: 29/02/2012 - 07:24:21 - [0] ----D C:\Users\walber\AppData\Local\{0B0A8848-3DE7-495C-B7D2-DEAF6CD45DF6} O43 - CFD: 11/02/2012 - 08:18:10 - [0] ----D C:\Users\walber\AppData\Local\{0B2940D7-48AA-42FB-A2FE-E26370EEED55} O43 - CFD: 05/01/2012 - 08:03:01 - [0] ----D C:\Users\walber\AppData\Local\{0B2C6050-C00F-4F7D-ACEC-6B2AA5189AB1} O43 - CFD: 17/01/2013 - 21:21:48 - [0] ----D C:\Users\walber\AppData\Local\{0B34EB52-E778-49E6-B1A5-37E24FD62EEA} O43 - CFD: 25/02/2012 - 12:10:57 - [0] ----D C:\Users\walber\AppData\Local\{0B559F75-B01D-4A8E-AAEB-DD33312A6321} O43 - CFD: 23/09/2011 - 10:10:20 - [0] ----D C:\Users\walber\AppData\Local\{0C3242FD-4B3C-480A-921F-CCB2556C9F2A} O43 - CFD: 14/06/2012 - 11:52:16 - [0] ----D C:\Users\walber\AppData\Local\{0C7FA36A-C13A-46F8-A78D-50A9561634E9} O43 - CFD: 01/04/2012 - 14:52:06 - [0] ----D C:\Users\walber\AppData\Local\{0D2C4479-2848-46F0-BB7A-BD9DA3375F40} O43 - CFD: 24/09/2011 - 21:12:23 - [0] ----D C:\Users\walber\AppData\Local\{0DA2C355-C3BE-4194-8AFD-4DEE4515F928} O43 - CFD: 26/04/2011 - 19:46:03 - [0] ----D C:\Users\walber\AppData\Local\{0DA6B67E-8965-4AE8-81F6-0ADF833F9D40} O43 - CFD: 16/05/2012 - 10:06:53 - [0] ----D C:\Users\walber\AppData\Local\{1024739C-13A3-42F4-AB7A-1FC6770B571C} O43 - CFD: 06/04/2011 - 11:10:53 - [0] ----D C:\Users\walber\AppData\Local\{1033270F-BF6A-48A4-A382-771B02FCABE6} O43 - CFD: 14/09/2012 - 21:21:15 - [0] ----D C:\Users\walber\AppData\Local\{10793368-2FAF-4A3D-B7F7-BEDA578B3DB8} O43 - CFD: 22/06/2012 - 19:40:13 - [0] ----D C:\Users\walber\AppData\Local\{108F3243-C7D3-40D3-A488-61F8D3CDF55E} O43 - CFD: 12/02/2012 - 14:59:01 - [0] ----D C:\Users\walber\AppData\Local\{10BD5583-AD8D-4E96-86E7-C2D5416DDCD8} O43 - CFD: 17/06/2012 - 08:38:41 - [0] ----D C:\Users\walber\AppData\Local\{1165325E-BF65-4C06-9C9B-6A99F48B89C0} O43 - CFD: 19/11/2011 - 14:11:37 - [0] ----D C:\Users\walber\AppData\Local\{11955951-CDAF-4172-9F97-A1FDEC859D0E} O43 - CFD: 18/04/2012 - 20:01:46 - [0] ----D C:\Users\walber\AppData\Local\{11982F2B-CB50-4BB7-8A0E-2EE82FE55ECE} O43 - CFD: 05/04/2012 - 19:29:44 - [0] ----D C:\Users\walber\AppData\Local\{1223B272-475A-475F-956A-430AB434E39F} O43 - CFD: 25/04/2011 - 22:12:12 - [0] ----D C:\Users\walber\AppData\Local\{12FF0CDA-E19E-433A-8DCA-8F2C58D142E1} O43 - CFD: 05/11/2011 - 18:51:42 - [0] ----D C:\Users\walber\AppData\Local\{130D9CCC-908C-4214-B799-8AA3F9798CD3} O43 - CFD: 19/05/2012 - 13:27:58 - [0] ----D C:\Users\walber\AppData\Local\{1346BD32-6C39-49A1-B56B-292084E1E48E} O43 - CFD: 20/06/2011 - 11:24:05 - [0] ----D C:\Users\walber\AppData\Local\{1377E0F1-30B2-47AF-A4FE-C123CD3DBBC8} O43 - CFD: 31/10/2012 - 20:42:06 - [0] ----D C:\Users\walber\AppData\Local\{13D912CB-0811-4F98-945E-E60421E3B3E6} O43 - CFD: 22/06/2011 - 08:55:36 - [0] ----D C:\Users\walber\AppData\Local\{13F5B954-40CB-4F26-BC77-C3B1ADCBF484} O43 - CFD: 01/05/2012 - 10:37:53 - [0] ----D C:\Users\walber\AppData\Local\{14099135-AB11-4D28-8A6B-EF1BAF4EAC45} O43 - CFD: 23/06/2012 - 17:22:37 - [0] ----D C:\Users\walber\AppData\Local\{1426866B-EF29-429C-8E4C-33B389016CA5} O43 - CFD: 16/09/2012 - 10:43:05 - [0] ----D C:\Users\walber\AppData\Local\{1446E3CC-2886-461A-B3C0-8B23D8C40823} O43 - CFD: 29/02/2012 - 14:28:05 - [0] ----D C:\Users\walber\AppData\Local\{14F5FC14-DA9E-411A-9094-091BA1345761} O43 - CFD: 22/06/2012 - 20:31:56 - [0] ----D C:\Users\walber\AppData\Local\{15300FCA-3A84-4D6E-9E54-1455074F21E6} O43 - CFD: 19/07/2011 - 16:50:15 - [0] ----D C:\Users\walber\AppData\Local\{1592029C-1E04-4902-9732-F01326A6FC44} O43 - CFD: 27/04/2011 - 07:20:04 - [0] ----D C:\Users\walber\AppData\Local\{16A470B2-8DFB-4602-8676-CB87E96E3877} O43 - CFD: 15/06/2012 - 08:25:27 - [0] ----D C:\Users\walber\AppData\Local\{16BF454A-BB47-4AD3-B838-5D6561695036} O43 - CFD: 04/12/2012 - 21:53:24 - [0] ----D C:\Users\walber\AppData\Local\{16C8D88D-7518-45E9-9889-25C824CCE342} O43 - CFD: 21/01/2012 - 12:48:41 - [0] ----D C:\Users\walber\AppData\Local\{1702BAAF-63EB-48F2-B013-9AD5290C76F2} O43 - CFD: 06/01/2013 - 15:46:03 - [0] ----D C:\Users\walber\AppData\Local\{174AF05B-9CA3-406A-9A7A-EEB3620C718F} O43 - CFD: 09/04/2012 - 21:23:09 - [0] ----D C:\Users\walber\AppData\Local\{17BDE99D-DC77-4DAC-997A-61783B44C5C6} O43 - CFD: 17/02/2013 - 10:38:29 - [0] ----D C:\Users\walber\AppData\Local\{17DC3279-49E0-4331-A3ED-2AE02C5BAD34} O43 - CFD: 24/12/2011 - 08:36:08 - [0] ----D C:\Users\walber\AppData\Local\{18932536-28D6-4ACC-AF76-C2117BF5D53B} O43 - CFD: 27/12/2012 - 20:45:42 - [0] ----D C:\Users\walber\AppData\Local\{18DECB1F-1C88-48F1-B176-7AB88080FAD8} O43 - CFD: 16/04/2011 - 07:22:02 - [0] ----D C:\Users\walber\AppData\Local\{194D333A-082E-4EB9-BFB2-9655DA452C13} O43 - CFD: 14/10/2011 - 10:28:38 - [0] ----D C:\Users\walber\AppData\Local\{195BED64-57E1-49B2-8CCE-63854304C70E} O43 - CFD: 03/03/2012 - 16:08:14 - [0] ----D C:\Users\walber\AppData\Local\{19D1F705-C338-48D3-BF62-7C2720718E35} O43 - CFD: 25/12/2012 - 21:09:58 - [0] ----D C:\Users\walber\AppData\Local\{1A56098C-ED9B-4C41-B583-10962DD85DAC} O43 - CFD: 14/11/2011 - 21:01:45 - [0] ----D C:\Users\walber\AppData\Local\{1A6856EC-2A0E-46B4-955C-0A0B57E9563C} O43 - CFD: 09/12/2012 - 10:46:21 - [0] ----D C:\Users\walber\AppData\Local\{1B18C9A0-C147-40BC-B7F2-832199A4C0D7} O43 - CFD: 18/05/2011 - 20:13:25 - [0] ----D C:\Users\walber\AppData\Local\{1B481860-B866-4402-AD9B-56E59ED23C3A} O43 - CFD: 28/04/2012 - 16:00:40 - [0] ----D C:\Users\walber\AppData\Local\{1BBCBB88-C941-42B0-8F0E-857A41FE387C} O43 - CFD: 30/03/2012 - 08:52:16 - [0] ----D C:\Users\walber\AppData\Local\{1BE16A64-6677-442B-8C84-86C9045D06B9} O43 - CFD: 01/07/2011 - 22:07:22 - [0] ----D C:\Users\walber\AppData\Local\{1BF1BE61-3032-4EFE-9E30-10258E9A05F0} O43 - CFD: 10/10/2011 - 12:33:46 - [0] ----D C:\Users\walber\AppData\Local\{1DFDC852-57C8-437B-96DD-D17910166D84} O43 - CFD: 10/06/2012 - 14:05:33 - [0] ----D C:\Users\walber\AppData\Local\{1E6F6717-8912-4B8C-AED3-E64B64D926D1} O43 - CFD: 21/06/2012 - 09:00:10 - [0] ----D C:\Users\walber\AppData\Local\{1F227DBD-2CF1-48AB-B81C-741EE29391A8} O43 - CFD: 29/04/2012 - 20:12:31 - [0] ----D C:\Users\walber\AppData\Local\{1F4648B7-8716-4885-9BF1-6328890A3472} O43 - CFD: 21/02/2012 - 14:43:33 - [0] ----D C:\Users\walber\AppData\Local\{1F5370FE-96FC-43C6-87D3-57A584B3B3B7} O43 - CFD: 15/09/2012 - 21:44:49 - [0] ----D C:\Users\walber\AppData\Local\{2027F20E-9588-443D-A4A3-1E699ACC070F} O43 - CFD: 26/12/2011 - 20:52:43 - [0] ----D C:\Users\walber\AppData\Local\{202C5DFE-7C73-454A-9548-FA4D44B847DC} O43 - CFD: 17/09/2011 - 10:04:44 - [0] ----D C:\Users\walber\AppData\Local\{20A34D56-9C4C-4BAA-8806-FE18AABB691F} O43 - CFD: 18/12/2011 - 14:27:25 - [0] ----D C:\Users\walber\AppData\Local\{21F6676C-1509-43E4-9EBE-9BAA85356E41} O43 - CFD: 23/06/2012 - 17:22:31 - [0] ----D C:\Users\walber\AppData\Local\{227533B4-F034-4B93-8560-1DFA70A0D608} O43 - CFD: 27/10/2012 - 11:46:11 - [0] ----D C:\Users\walber\AppData\Local\{22E943E1-C40C-469C-BBA9-B5B1E2EA8697} O43 - CFD: 07/04/2012 - 16:44:07 - [0] ----D C:\Users\walber\AppData\Local\{2327FB5F-E643-4387-9806-B6DA3129EE4E} O43 - CFD: 17/04/2012 - 21:17:25 - [0] ----D C:\Users\walber\AppData\Local\{23E19D97-F4AB-4AF1-B720-B18E79685F66} O43 - CFD: 21/03/2012 - 20:05:23 - [0] ----D C:\Users\walber\AppData\Local\{24A23958-664A-40A0-95D9-C2CD547ED88C} O43 - CFD: 20/09/2011 - 08:56:37 - [0] ----D C:\Users\walber\AppData\Local\{24D54179-A5FF-48A0-B049-122712381553} O43 - CFD: 19/02/2013 - 10:07:06 - [0] ----D C:\Users\walber\AppData\Local\{25596972-3D22-41A8-AA1D-02F5DB70EE98} O43 - CFD: 22/04/2011 - 09:30:30 - [0] ----D C:\Users\walber\AppData\Local\{25C13853-DBA4-4C72-8961-80AE8F1D89F7} O43 - CFD: 11/04/2011 - 19:40:24 - [0] ----D C:\Users\walber\AppData\Local\{25EF76E9-2D7D-490B-A92A-17E67B5C6365} O43 - CFD: 30/06/2012 - 11:04:04 - [0] ----D C:\Users\walber\AppData\Local\{2653D627-7956-4D8C-A31E-2FCF4B8B2FD0} O43 - CFD: 25/02/2012 - 09:18:04 - [0] ----D C:\Users\walber\AppData\Local\{27D4AE97-159F-47B8-9799-772C353251AB} O43 - CFD: 25/12/2012 - 20:58:19 - [0] ----D C:\Users\walber\AppData\Local\{28292004-B32D-401A-816F-A7266716B943} O43 - CFD: 10/04/2011 - 13:32:28 - [0] ----D C:\Users\walber\AppData\Local\{29B0DCAE-331E-468B-85EC-6595BF06C802} O43 - CFD: 03/03/2012 - 16:08:37 - [0] ----D C:\Users\walber\AppData\Local\{29E69190-D34F-4297-980A-E5C08D845124} O43 - CFD: 16/05/2012 - 12:22:52 - [0] ----D C:\Users\walber\AppData\Local\{2B0FDEEF-3911-473E-9131-B4279386C760} O43 - CFD: 12/12/2012 - 20:51:01 - [0] ----D C:\Users\walber\AppData\Local\{2B2AF1B5-1F14-4BD5-8F78-D7FE3F8E2247} O43 - CFD: 13/02/2012 - 20:25:23 - [0] ----D C:\Users\walber\AppData\Local\{2D1EC178-D050-4284-8128-E2A46FAE42D9} O43 - CFD: 05/11/2012 - 20:15:06 - [0] ----D C:\Users\walber\AppData\Local\{2E61921A-6D16-4016-A9D1-AFCE7432F672} O43 - CFD: 03/03/2012 - 06:55:45 - [0] ----D C:\Users\walber\AppData\Local\{2E77F383-4C28-4AF9-8CA9-865840BB8A59} O43 - CFD: 10/01/2012 - 20:26:35 - [0] ----D C:\Users\walber\AppData\Local\{2E97A317-C9CF-4126-88C4-971CC9DD7D4F} O43 - CFD: 10/09/2012 - 23:18:42 - [0] ----D C:\Users\walber\AppData\Local\{2EDC56D3-B099-472D-AF15-148D195D9018} O43 - CFD: 09/01/2012 - 18:23:15 - [0] ----D C:\Users\walber\AppData\Local\{2F47C602-AC04-4398-9C41-BA9DCBFFC978} O43 - CFD: 18/01/2012 - 20:36:48 - [0] ----D C:\Users\walber\AppData\Local\{2FA6AFA7-BBAF-43C8-BE48-1ED50AD5E0E7} O43 - CFD: 12/06/2012 - 12:15:52 - [0] ----D C:\Users\walber\AppData\Local\{2FC2EC10-C112-4871-BC8C-7F1096EF62A7} O43 - CFD: 14/02/2012 - 21:10:51 - [0] ----D C:\Users\walber\AppData\Local\{3185E00D-73AD-4D0A-A84D-EC68040E945B} O43 - CFD: 07/01/2013 - 20:49:56 - [0] ----D C:\Users\walber\AppData\Local\{31F2E54F-0C58-4A07-99F6-E8D00FCA18E1} O43 - CFD: 19/09/2011 - 19:45:52 - [0] ----D C:\Users\walber\AppData\Local\{32471D93-0FD1-4177-AF0A-C3647CE12E5F} O43 - CFD: 18/08/2011 - 20:35:51 - [0] ----D C:\Users\walber\AppData\Local\{3299DAC9-EC7E-445F-AC0D-C143D40D2B12} O43 - CFD: 15/01/2012 - 19:03:10 - [0] ----D C:\Users\walber\AppData\Local\{331A75E3-D30C-457D-98FB-63B010B3197F} O43 - CFD: 18/02/2012 - 14:28:34 - [0] ----D C:\Users\walber\AppData\Local\{33B5FD1F-4009-4196-9912-24200B6B1025} O43 - CFD: 03/05/2012 - 20:32:14 - [0] ----D C:\Users\walber\AppData\Local\{33F2810F-0BD8-40B2-8DD6-69A595884676} O43 - CFD: 15/11/2011 - 20:30:58 - [0] ----D C:\Users\walber\AppData\Local\{350B22CA-FACB-40F5-B67F-F8F257BA76E6} O43 - CFD: 21/02/2012 - 12:24:56 - [0] ----D C:\Users\walber\AppData\Local\{3676A489-E9CE-4333-94FC-7A3FD0A29837} O43 - CFD: 09/10/2012 - 20:50:39 - [0] ----D C:\Users\walber\AppData\Local\{36BCC87F-1772-4854-9ED1-5F653120BE6A} O43 - CFD: 01/10/2012 - 08:00:24 - [0] ----D C:\Users\walber\AppData\Local\{37004E70-6BBF-417A-B879-4AC008D957F4} O43 - CFD: 21/06/2011 - 22:40:30 - [0] ----D C:\Users\walber\AppData\Local\{377F32AA-8E18-48EE-8B2B-ED259201E599} O43 - CFD: 03/12/2012 - 21:23:59 - [0] ----D C:\Users\walber\AppData\Local\{386B7635-66C2-4E07-856B-C2F29E6A9204} O43 - CFD: 21/07/2011 - 20:52:54 - [0] ----D C:\Users\walber\AppData\Local\{38F58A80-1A7D-4C78-9000-18D3121CBB3C} O43 - CFD: 14/06/2012 - 20:31:31 - [0] ----D C:\Users\walber\AppData\Local\{39A88F88-7A70-4288-8A20-356D95066D2F} O43 - CFD: 03/09/2011 - 22:53:37 - [0] ----D C:\Users\walber\AppData\Local\{3A1E506B-8E2A-4C92-9892-1A1C43464A77} O43 - CFD: 18/12/2011 - 20:10:44 - [0] ----D C:\Users\walber\AppData\Local\{3AEBF31D-55EC-4B17-ABC5-EB653C199809} O43 - CFD: 14/11/2011 - 21:03:54 - [0] ----D C:\Users\walber\AppData\Local\{3AF811DF-5B7D-43AF-A265-A0CC6C02C6D5} O43 - CFD: 10/04/2011 - 11:02:41 - [0] ----D C:\Users\walber\AppData\Local\{3B4DCA52-721E-44A7-88F7-E30FEDEA524C} O43 - CFD: 16/12/2012 - 10:02:00 - [0] ----D C:\Users\walber\AppData\Local\{3C5B52A5-819B-47D6-8382-5C35BD2C0997} O43 - CFD: 07/11/2011 - 20:33:19 - [0] ----D C:\Users\walber\AppData\Local\{3CC6D9A5-1645-4A03-B088-44263764FD1A} O43 - CFD: 18/06/2011 - 13:54:36 - [0] ----D C:\Users\walber\AppData\Local\{3CE1F01B-3403-4EED-9B6E-CFB1298A8451} O43 - CFD: 28/04/2011 - 05:13:53 - [0] ----D C:\Users\walber\AppData\Local\{3D611963-FCFE-47A3-AD70-4A3FCD25BDBD} O43 - CFD: 09/02/2012 - 21:01:20 - [0] ----D C:\Users\walber\AppData\Local\{3E0ED37F-A821-436B-9A98-1ECE75381859} O43 - CFD: 04/01/2012 - 07:54:39 - [0] ----D C:\Users\walber\AppData\Local\{3E37BCC8-15CF-42CB-98F4-2221AE50C035} O43 - CFD: 14/02/2012 - 07:56:34 - [0] ----D C:\Users\walber\AppData\Local\{3F8BA86A-6917-425A-B5C9-C03FAE17C953} O43 - CFD: 18/07/2011 - 20:01:28 - [0] ----D C:\Users\walber\AppData\Local\{3FFCF30E-4857-4F79-84EF-A0F683BA19E8} O43 - CFD: 29/02/2012 - 07:20:59 - [0] ----D C:\Users\walber\AppData\Local\{40F7C0D3-3B05-4521-AB9F-A4BA4065C764} O43 - CFD: 20/02/2012 - 10:37:00 - [0] ----D C:\Users\walber\AppData\Local\{411E41E3-D40B-43CB-BBDE-493FD416E29F} O43 - CFD: 18/06/2011 - 14:29:06 - [0] ----D C:\Users\walber\AppData\Local\{41BECC44-56B4-4743-8051-FD57D2EB5B4C} O43 - CFD: 11/01/2012 - 08:07:35 - [0] ----D C:\Users\walber\AppData\Local\{42FBA4CD-3AB1-45C2-A182-A13B16DD9B91} O43 - CFD: 09/05/2011 - 09:44:16 - [0] ----D C:\Users\walber\AppData\Local\{432D8346-BDEC-41EB-9A76-74F04BB70B19} O43 - CFD: 09/03/2012 - 20:01:34 - [0] ----D C:\Users\walber\AppData\Local\{438D3FEF-6E4D-4771-BC68-31C7B1240E6B} O43 - CFD: 30/06/2011 - 20:10:25 - [0] ----D C:\Users\walber\AppData\Local\{45A9C836-D861-48AC-AD61-FA9181A3F5B7} O43 - CFD: 13/01/2013 - 11:19:45 - [0] ----D C:\Users\walber\AppData\Local\{45FCCBC6-D4A4-4F33-A09C-5FE6B3A1F220} O43 - CFD: 02/02/2013 - 07:45:53 - [0] ----D C:\Users\walber\AppData\Local\{4601DFAE-10D6-44DC-9039-CB03674490B2} O43 - CFD: 22/08/2011 - 12:43:19 - [0] ----D C:\Users\walber\AppData\Local\{4648528B-2CEC-44C4-8A9B-582EB222C822} O43 - CFD: 02/06/2011 - 10:01:34 - [0] ----D C:\Users\walber\AppData\Local\{46F16B4C-1371-4430-B5BA-4D75F80C40D0} O43 - CFD: 10/12/2011 - 11:04:25 - [0] ----D C:\Users\walber\AppData\Local\{481B4444-E555-4A5A-AA47-FB65181FD880} O43 - CFD: 22/04/2011 - 18:16:39 - [0] ----D C:\Users\walber\AppData\Local\{483F8BB9-FFEE-4D7A-B486-8F6BEE908ED1} O43 - CFD: 10/11/2012 - 10:15:37 - [0] ----D C:\Users\walber\AppData\Local\{4882EE27-99D7-430F-AE6E-33BD8870943C} O43 - CFD: 07/10/2012 - 11:34:16 - [0] ----D C:\Users\walber\AppData\Local\{48D035DC-1368-4F3C-BD00-0DF6D45DCB4A} O43 - CFD: 31/03/2012 - 15:53:25 - [0] ----D C:\Users\walber\AppData\Local\{48E7698C-33D0-4669-9835-D485F4B45B42} O43 - CFD: 27/06/2011 - 21:54:32 - [0] ----D C:\Users\walber\AppData\Local\{48FA6EA1-4AA3-4133-A704-48245D450201} O43 - CFD: 28/06/2011 - 21:52:26 - [0] ----D C:\Users\walber\AppData\Local\{490D1A75-66C1-4E23-B276-703CEAA967DD} O43 - CFD: 29/12/2012 - 07:46:10 - [0] ----D C:\Users\walber\AppData\Local\{490F8D95-3B2C-4FC0-997D-E2BB4465B836} O43 - CFD: 30/05/2011 - 21:06:02 - [0] ----D C:\Users\walber\AppData\Local\{4950547A-B09A-4F86-9FA7-08D2193EA64A} O43 - CFD: 06/11/2011 - 13:33:59 - [0] ----D C:\Users\walber\AppData\Local\{4AD495F3-37B0-42A3-8BD0-239796D09B03} O43 - CFD: 26/10/2012 - 20:19:03 - [0] ----D C:\Users\walber\AppData\Local\{4B073E05-4248-4CBB-AF4E-DBF7C548D708} O43 - CFD: 19/02/2013 - 10:53:48 - [0] ----D C:\Users\walber\AppData\Local\{4B9C9C0D-3B55-4197-B5A3-58D6213D2227} O43 - CFD: 18/05/2012 - 12:37:53 - [0] ----D C:\Users\walber\AppData\Local\{4C5B3681-23E2-4EDA-8A2B-D4ABB32C9E9B} O43 - CFD: 01/04/2012 - 19:25:41 - [0] ----D C:\Users\walber\AppData\Local\{4C81A650-CFEE-42C7-B048-044B1D7129B8} O43 - CFD: 06/01/2012 - 11:58:24 - [0] ----D C:\Users\walber\AppData\Local\{4CEA5EB4-BF15-4A08-BF2C-AD6EBE0552F3} O43 - CFD: 22/03/2012 - 20:21:57 - [0] ----D C:\Users\walber\AppData\Local\{4D038A9C-4F97-4078-89F3-6EE7C7426773} O43 - CFD: 01/03/2012 - 18:59:33 - [0] ----D C:\Users\walber\AppData\Local\{4E767F15-C6A9-4E7B-B33B-850D2DA29F54} O43 - CFD: 06/01/2012 - 13:36:48 - [0] ----D C:\Users\walber\AppData\Local\{4F3D847C-70F5-4B01-BC43-45453EB02D0A} O43 - CFD: 03/03/2012 - 09:07:26 - [0] ----D C:\Users\walber\AppData\Local\{507B6D82-FE4E-452F-9561-BD277C2853AD} O43 - CFD: 11/01/2012 - 08:07:51 - [0] ----D C:\Users\walber\AppData\Local\{5092CC2B-5F49-4BB9-AA54-FD31EF5BE3CB} O43 - CFD: 12/07/2011 - 20:30:34 - [0] ----D C:\Users\walber\AppData\Local\{524F029A-070D-42E5-9736-23FB8348AAE0} O43 - CFD: 13/01/2012 - 20:43:55 - [0] ----D C:\Users\walber\AppData\Local\{52B3C984-5B12-47EA-B8C0-31CE80C64401} O43 - CFD: 23/01/2013 - 20:15:03 - [0] ----D C:\Users\walber\AppData\Local\{5340F5C7-D897-4881-B772-F1B6C32500D5} O43 - CFD: 09/03/2012 - 23:51:17 - [0] ----D C:\Users\walber\AppData\Local\{53B9002C-B383-428D-8AD8-B755AC1ACD74} O43 - CFD: 20/11/2011 - 12:32:46 - [0] ----D C:\Users\walber\AppData\Local\{5453867F-D921-4635-A3DA-509447DC1620} O43 - CFD: 25/11/2012 - 18:29:14 - [0] ----D C:\Users\walber\AppData\Local\{545B6540-5843-4744-B7AD-6B7EFDB5413B} O43 - CFD: 19/02/2012 - 12:54:18 - [0] ----D C:\Users\walber\AppData\Local\{57F1D04C-4FF0-4F05-8B1F-E623C71A3356} O43 - CFD: 31/03/2012 - 15:29:18 - [0] ----D C:\Users\walber\AppData\Local\{5805ED41-56F5-4C0B-A8D0-F04A2E829F3E} O43 - CFD: 17/11/2011 - 18:49:59 - [0] ----D C:\Users\walber\AppData\Local\{581B8594-71D8-4E14-9770-C9966E20DEFD} O43 - CFD: 01/06/2011 - 23:32:38 - [0] ----D C:\Users\walber\AppData\Local\{5867BFEC-C7F6-40C9-9982-CD204BCD0FE0} O43 - CFD: 27/07/2011 - 12:29:52 - [0] ----D C:\Users\walber\AppData\Local\{590D5972-5E21-4EEC-912A-C1B48B71C989} O43 - CFD: 09/02/2013 - 07:48:18 - [0] ----D C:\Users\walber\AppData\Local\{5914F4C6-2BFC-4BE2-A966-6628E12D1DF4} O43 - CFD: 12/11/2012 - 20:58:25 - [0] ----D C:\Users\walber\AppData\Local\{5A118516-93CA-4D50-A182-166A45848307} O43 - CFD: 14/06/2012 - 20:31:23 - [0] ----D C:\Users\walber\AppData\Local\{5ABBA9B6-E4C8-4E10-82D6-55364607BE63} O43 - CFD: 28/09/2011 - 08:27:25 - [0] ----D C:\Users\walber\AppData\Local\{5AD0BC2F-D09E-4AD2-922D-428DABFACD86} O43 - CFD: 10/02/2012 - 08:20:37 - [0] ----D C:\Users\walber\AppData\Local\{5B3EBC34-4958-430C-B226-1E191F91D21D} O43 - CFD: 25/02/2012 - 18:47:17 - [0] ----D C:\Users\walber\AppData\Local\{5B5FA39C-9D55-4F0C-9459-A41ED37F041A} O43 - CFD: 11/02/2012 - 14:43:38 - [0] ----D C:\Users\walber\AppData\Local\{5C0678A0-3564-47F3-9812-44894AD38899} O43 - CFD: 14/11/2012 - 07:45:24 - [0] ----D C:\Users\walber\AppData\Local\{5CED8AFC-88C9-4E39-85BA-B60429BE2CD0} O43 - CFD: 10/02/2012 - 17:44:33 - [0] ----D C:\Users\walber\AppData\Local\{5D9112A4-B01B-419F-9B59-1A7DB2A7C22F} O43 - CFD: 14/06/2011 - 13:56:51 - [0] ----D C:\Users\walber\AppData\Local\{5E197A52-C265-47B6-8614-434A8DE80D77} O43 - CFD: 18/11/2011 - 09:25:32 - [0] ----D C:\Users\walber\AppData\Local\{5E3C6F43-0CA1-46DE-9419-BAB50DB1B61E} O43 - CFD: 12/04/2011 - 21:22:55 - [0] ----D C:\Users\walber\AppData\Local\{5E792815-CD5C-4E3C-A73E-5BC7CC66B403} O43 - CFD: 18/12/2012 - 20:19:55 - [0] ----D C:\Users\walber\AppData\Local\{5EDA0B96-6B9E-46A8-8097-069088F5C746} O43 - CFD: 08/04/2012 - 19:20:31 - [0] ----D C:\Users\walber\AppData\Local\{5EE5C536-A071-423A-B250-26E0D3834E76} O43 - CFD: 16/05/2012 - 07:25:28 - [0] ----D C:\Users\walber\AppData\Local\{5F5DD598-5803-4621-940B-BA2AE1303436} O43 - CFD: 18/06/2012 - 10:05:43 - [0] ----D C:\Users\walber\AppData\Local\{6032233D-D421-4C10-B2A8-7BC3D3367F45} O43 - CFD: 25/05/2012 - 12:30:06 - [0] ----D C:\Users\walber\AppData\Local\{61158B24-3B5F-403F-A637-DB04FD6820A7} O43 - CFD: 20/12/2012 - 21:39:25 - [0] ----D C:\Users\walber\AppData\Local\{615DC4AB-C107-4FEB-9960-B33052E3E0EF} O43 - CFD: 27/10/2012 - 18:04:36 - [0] ----D C:\Users\walber\AppData\Local\{6330C690-5AF7-44C5-B5BE-257C16A4F52E} O43 - CFD: 16/04/2011 - 17:50:39 - [0] ----D C:\Users\walber\AppData\Local\{6363FE24-C8EC-4902-B88D-D6EB4E7366EB} O43 - CFD: 12/02/2012 - 16:17:48 - [0] ----D C:\Users\walber\AppData\Local\{644DE5B3-E0BF-4AC8-8F6E-D10F46E3224E} O43 - CFD: 14/12/2011 - 21:28:16 - [0] ----D C:\Users\walber\AppData\Local\{64732575-AFE0-4684-ABBE-35FB773E8F1B} O43 - CFD: 14/01/2013 - 20:16:22 - [0] ----D C:\Users\walber\AppData\Local\{658A7699-B021-4DD7-8505-7439622C1D5D} O43 - CFD: 25/09/2012 - 22:01:40 - [0] ----D C:\Users\walber\AppData\Local\{6705D6DB-E992-4907-B590-0274E64664CC} O43 - CFD: 10/05/2011 - 21:10:36 - [0] ----D C:\Users\walber\AppData\Local\{68848C89-A3DD-476C-B74B-1555AF5FE70B} O43 - CFD: 14/12/2012 - 20:40:13 - [0] ----D C:\Users\walber\AppData\Local\{69C96692-9394-4C77-8EF0-5F962F703BC8} O43 - CFD: 02/03/2012 - 17:40:42 - [0] ----D C:\Users\walber\AppData\Local\{69FC03B0-6245-4F63-9A4E-A60E908B0EE5} O43 - CFD: 12/04/2011 - 19:10:59 - [0] ----D C:\Users\walber\AppData\Local\{6A501BA7-BCA7-45CB-903B-E905A64488BE} O43 - CFD: 05/02/2012 - 19:28:26 - [0] ----D C:\Users\walber\AppData\Local\{6A65FA70-2E0B-4F69-A80B-F7658916257F} O43 - CFD: 28/11/2012 - 20:24:46 - [0] ----D C:\Users\walber\AppData\Local\{6AC19409-78EC-4A9D-8A20-93E14467C717} O43 - CFD: 06/02/2013 - 21:04:58 - [0] ----D C:\Users\walber\AppData\Local\{6B35071B-2219-4D66-8050-160C9736651D} O43 - CFD: 13/06/2012 - 18:34:00 - [0] ----D C:\Users\walber\AppData\Local\{6B760671-F5DC-4B5A-9DC1-8426FB318F6C} O43 - CFD: 29/04/2012 - 15:17:17 - [0] ----D C:\Users\walber\AppData\Local\{6BCC9326-B508-4801-95E6-8D9EDA7A8476} O43 - CFD: 21/11/2011 - 09:34:12 - [0] ----D C:\Users\walber\AppData\Local\{6C808D59-1F94-4D33-88C8-293292D047C2} O43 - CFD: 08/06/2011 - 20:05:17 - [0] ----D C:\Users\walber\AppData\Local\{6CEE941B-9107-48E1-8351-02B72C45793F} O43 - CFD: 31/03/2011 - 23:39:49 - [0] ----D C:\Users\walber\AppData\Local\{6D303584-C8B8-423C-91E9-D9008A75A967} O43 - CFD: 10/02/2012 - 08:20:24 - [0] ----D C:\Users\walber\AppData\Local\{6D346C10-A77C-4AC1-A2BE-62127A1983A6} O43 - CFD: 03/06/2011 - 22:56:57 - [0] ----D C:\Users\walber\AppData\Local\{6D6FA940-C75B-40DA-9CF1-6F65DBA9453E} O43 - CFD: 17/02/2012 - 22:21:37 - [0] ----D C:\Users\walber\AppData\Local\{6E499FB6-03C1-47FE-8240-379942B7CEDB} O43 - CFD: 24/12/2011 - 08:34:10 - [0] ----D C:\Users\walber\AppData\Local\{6F66EE29-2A7C-42F7-B32D-591C0100F474} O43 - CFD: 03/06/2012 - 12:24:48 - [0] ----D C:\Users\walber\AppData\Local\{70647123-FD74-483F-8461-5AAB3C99728C} O43 - CFD: 25/09/2011 - 18:25:28 - [0] ----D C:\Users\walber\AppData\Local\{70CF57E6-E759-4195-9050-60CEAF62F161} O43 - CFD: 16/12/2012 - 18:22:28 - [0] ----D C:\Users\walber\AppData\Local\{71231675-59B4-4C92-8815-D7478914E060} O43 - CFD: 06/08/2011 - 06:35:34 - [0] ----D C:\Users\walber\AppData\Local\{71254D29-5051-4983-ADCE-97FE6239761A} O43 - CFD: 23/10/2011 - 19:10:38 - [0] ----D C:\Users\walber\AppData\Local\{72011E20-CDB9-47DE-A839-1F183AA00F4C} O43 - CFD: 08/02/2013 - 22:53:36 - [0] ----D C:\Users\walber\AppData\Local\{724C4F95-8A23-4323-94CA-5FE41B4F5723} O43 - CFD: 03/01/2012 - 08:09:51 - [0] ----D C:\Users\walber\AppData\Local\{7256033F-ACCB-42A7-B45C-445A5E0B8F82} O43 - CFD: 10/07/2011 - 10:34:26 - [0] ----D C:\Users\walber\AppData\Local\{72839BAE-F7C9-4AAD-AF27-516E4FB2CEB5} O43 - CFD: 16/05/2012 - 07:28:10 - [0] ----D C:\Users\walber\AppData\Local\{729FD24B-9B73-4422-BA78-D658FD5C60E7} O43 - CFD: 17/11/2011 - 23:50:02 - [0] ----D C:\Users\walber\AppData\Local\{730985CF-4E96-4224-A270-C69EBC520655} O43 - CFD: 16/10/2012 - 21:47:35 - [0] ----D C:\Users\walber\AppData\Local\{73C2F410-E07C-44DD-AEE8-07CCCD2065C6} O43 - CFD: 26/10/2011 - 22:06:55 - [0] ----D C:\Users\walber\AppData\Local\{73D29DD3-0688-44CB-8E4E-B41C8A376E6A} O43 - CFD: 10/01/2013 - 21:19:20 - [0] ----D C:\Users\walber\AppData\Local\{74B7DE7F-487A-4482-885E-3B8A1977F4B6} O43 - CFD: 01/05/2011 - 12:17:48 - [0] ----D C:\Users\walber\AppData\Local\{74C59D51-CED0-4651-8F60-75C8DBBC72AC} O43 - CFD: 29/09/2012 - 09:56:30 - [0] ----D C:\Users\walber\AppData\Local\{768638A7-86C0-4141-9122-17E063F35E4C} O43 - CFD: 11/12/2012 - 21:34:08 - [0] ----D C:\Users\walber\AppData\Local\{77C800DA-3E63-4092-8CD5-A79FA20AD148} O43 - CFD: 07/11/2011 - 22:07:46 - [0] ----D C:\Users\walber\AppData\Local\{78B3A122-93F2-4986-8674-D10B3F3200EE} O43 - CFD: 03/05/2011 - 23:23:46 - [0] ----D C:\Users\walber\AppData\Local\{797170F9-AC90-4C1E-A250-A3046DEE89CC} O43 - CFD: 19/06/2012 - 18:41:33 - [0] ----D C:\Users\walber\AppData\Local\{7A23B8E2-3139-4827-A8D4-8230A7BA0EEA} O43 - CFD: 29/02/2012 - 14:52:06 - [0] ----D C:\Users\walber\AppData\Local\{7A4D1409-8D0E-4A9E-9ADC-12739B62C672} O43 - CFD: 27/03/2012 - 19:52:04 - [0] ----D C:\Users\walber\AppData\Local\{7A8913BC-D27F-4626-B0CE-D6DB4D4E1D72} O43 - CFD: 28/07/2012 - 10:12:06 - [0] ----D C:\Users\walber\AppData\Local\{7AAF87E9-C9B1-4299-8990-D49890CD5620} O43 - CFD: 13/12/2012 - 20:48:38 - [0] ----D C:\Users\walber\AppData\Local\{7C12E473-9C4E-48DF-8469-8D9A3F33F56C} O43 - CFD: 08/12/2011 - 09:55:29 - [0] ----D C:\Users\walber\AppData\Local\{7C62E2A7-E408-435C-8EFA-85248A6D93E5} O43 - CFD: 30/12/2011 - 09:57:05 - [0] ----D C:\Users\walber\AppData\Local\{7D272E31-9CEB-443C-A76F-CBE3DFD8C2CB} O43 - CFD: 10/07/2012 - 20:03:18 - [0] ----D C:\Users\walber\AppData\Local\{7D3E0825-5992-404E-98FB-1E0EA247170C} O43 - CFD: 21/02/2012 - 10:25:14 - [0] ----D C:\Users\walber\AppData\Local\{7D93E303-B48F-4944-8CF8-D37A53C9563C} O43 - CFD: 08/08/2011 - 12:41:42 - [0] ----D C:\Users\walber\AppData\Local\{7DB5A6A8-2A53-4259-B5CC-EE5E69A85B84} O43 - CFD: 23/11/2012 - 08:33:49 - [0] ----D C:\Users\walber\AppData\Local\{7DBE58EC-C812-4245-92DF-271C84EFF6CB} O43 - CFD: 26/03/2012 - 23:39:16 - [0] ----D C:\Users\walber\AppData\Local\{7E0FC900-F6E4-4721-B2AD-9FF143604CF8} O43 - CFD: 09/09/2011 - 10:48:39 - [0] ----D C:\Users\walber\AppData\Local\{7E446C19-C07F-4506-9B2D-FB9CACB80C6D} O43 - CFD: 29/05/2012 - 20:27:06 - [0] ----D C:\Users\walber\AppData\Local\{7E48F834-2916-4E05-8B84-191AAED7AC1E} O43 - CFD: 18/12/2011 - 20:07:54 - [0] ----D C:\Users\walber\AppData\Local\{7EE29D7D-4186-4F35-B9C5-D45490EAED6F} O43 - CFD: 18/06/2011 - 12:06:06 - [0] ----D C:\Users\walber\AppData\Local\{80212CD6-EAFA-4FDA-80FE-42391BCCCEBF} O43 - CFD: 24/06/2012 - 11:43:12 - [0] ----D C:\Users\walber\AppData\Local\{805B95FC-D3B1-48AC-BC33-AFE663F3AEB8} O43 - CFD: 01/10/2011 - 09:52:40 - [0] ----D C:\Users\walber\AppData\Local\{80919E2D-76D6-4420-B386-726C8D0C4E68} O43 - CFD: 04/03/2012 - 05:33:12 - [0] ----D C:\Users\walber\AppData\Local\{80BC42B8-6E60-4A53-94D1-0ADFFE079AA6} O43 - CFD: 14/12/2011 - 20:30:41 - [0] ----D C:\Users\walber\AppData\Local\{82596E10-5E93-4053-B0FB-41A7BF5F8614} O43 - CFD: 26/09/2011 - 21:20:44 - [0] ----D C:\Users\walber\AppData\Local\{825DB76D-F4EF-4E78-ADF9-0C3CAA1AFD37} O43 - CFD: 27/06/2011 - 21:08:25 - [0] ----D C:\Users\walber\AppData\Local\{82C532C9-8E0D-4EDC-81F5-1C7521D7B466} O43 - CFD: 09/05/2011 - 21:45:57 - [0] ----D C:\Users\walber\AppData\Local\{83359127-F04A-42BC-B852-E103D16869CF} O43 - CFD: 28/04/2011 - 21:16:48 - [0] ----D C:\Users\walber\AppData\Local\{83482802-4DF0-4D23-8D2A-6729584E9F06} O43 - CFD: 15/02/2012 - 20:36:42 - [0] ----D C:\Users\walber\AppData\Local\{8406B796-E03C-482D-B255-3C8A785B0D56} O43 - CFD: 05/10/2012 - 21:39:11 - [0] ----D C:\Users\walber\AppData\Local\{84A85345-1E99-4E4F-BDA9-46E739EB9816} O43 - CFD: 16/01/2013 - 21:58:44 - [0] ----D C:\Users\walber\AppData\Local\{863B20DA-5B2D-416F-888F-EDC0FA5139F1} O43 - CFD: 13/06/2012 - 10:40:28 - [0] ----D C:\Users\walber\AppData\Local\{8668D370-A935-43A3-83B1-F1E690050287} O43 - CFD: 25/07/2011 - 21:30:41 - [0] ----D C:\Users\walber\AppData\Local\{86E0F66F-BB94-42B2-99BA-0FD22687CA6F} O43 - CFD: 01/01/2013 - 20:28:26 - [0] ----D C:\Users\walber\AppData\Local\{874268C6-7A14-4956-874E-09548661318C} O43 - CFD: 16/04/2011 - 06:58:32 - [0] ----D C:\Users\walber\AppData\Local\{8840726B-1BEA-4227-B0EE-901837CAD480} O43 - CFD: 07/04/2011 - 18:00:47 - [0] ----D C:\Users\walber\AppData\Local\{894DC705-E9A8-414B-AAE2-2F38AE3FD7C7} O43 - CFD: 19/11/2011 - 23:52:37 - [0] ----D C:\Users\walber\AppData\Local\{89963A15-32D5-46BF-9959-6C985783558E} O43 - CFD: 30/09/2011 - 09:32:55 - [0] ----D C:\Users\walber\AppData\Local\{8A3C7332-0F53-4507-806D-27232EA45155} O43 - CFD: 05/12/2012 - 20:33:09 - [0] ----D C:\Users\walber\AppData\Local\{8AF9103A-A39D-419C-B96C-D0A06D60C09B} O43 - CFD: 19/05/2012 - 10:43:50 - [0] ----D C:\Users\walber\AppData\Local\{8B25E745-80EA-448C-8713-E239DE8412F2} O43 - CFD: 15/04/2012 - 10:22:36 - [0] ----D C:\Users\walber\AppData\Local\{8B945EA7-EDA3-43E7-93A8-8A897D471805} O43 - CFD: 11/04/2011 - 07:37:55 - [0] ----D C:\Users\walber\AppData\Local\{8BB403FC-1FAC-4329-9108-3D96177E3501} O43 - CFD: 21/06/2011 - 09:24:24 - [0] ----D C:\Users\walber\AppData\Local\{8C23B0D4-917C-4FDC-AC60-1103B95DBCB0} O43 - CFD: 29/11/2012 - 20:11:02 - [0] ----D C:\Users\walber\AppData\Local\{8C6B4878-17C8-44EB-989B-46BC473B8CCF} O43 - CFD: 23/07/2011 - 06:58:09 - [0] ----D C:\Users\walber\AppData\Local\{8C8135C3-A7CD-4816-A323-33F7B46ADB30} O43 - CFD: 27/05/2011 - 21:33:22 - [0] ----D C:\Users\walber\AppData\Local\{8D467A70-3DCE-413D-837E-901C2634CAA9} O43 - CFD: 22/11/2012 - 21:30:44 - [0] ----D C:\Users\walber\AppData\Local\{8D5BBE84-B4AA-4B49-A2C2-56088BEEE2D5} O43 - CFD: 19/06/2012 - 18:42:45 - [0] ----D C:\Users\walber\AppData\Local\{8E01441A-EA43-49EC-871E-D067AEA6A52A} O43 - CFD: 19/12/2012 - 20:42:37 - [0] ----D C:\Users\walber\AppData\Local\{8E877EC0-C349-4C74-95E1-981E3300C7AA} O43 - CFD: 27/09/2011 - 20:18:02 - [0] ----D C:\Users\walber\AppData\Local\{8E8D6CCA-5E67-40EE-BFDB-E810EABC7C57} O43 - CFD: 20/03/2012 - 20:37:19 - [0] ----D C:\Users\walber\AppData\Local\{8EEAA0ED-4248-4308-980A-A722499592BC} O43 - CFD: 04/09/2011 - 08:56:59 - [0] ----D C:\Users\walber\AppData\Local\{8F429390-1F0D-4C5F-9249-48A1501B0202} O43 - CFD: 29/05/2011 - 08:12:09 - [0] ----D C:\Users\walber\AppData\Local\{8FA05884-129D-4540-8D34-FEEF9E902359} O43 - CFD: 30/06/2012 - 13:14:40 - [0] ----D C:\Users\walber\AppData\Local\{9095AF0B-B2F1-4B31-A773-04943BA48E11} O43 - CFD: 17/09/2012 - 23:47:48 - [0] ----D C:\Users\walber\AppData\Local\{90EE8D8A-96FA-4C5B-9E76-120657BCE514} O43 - CFD: 09/06/2012 - 17:35:25 - [0] ----D C:\Users\walber\AppData\Local\{914E5601-0F81-43D6-9EB0-8B5589B182D3} O43 - CFD: 22/06/2012 - 19:40:17 - [0] ----D C:\Users\walber\AppData\Local\{91A48D4B-8D58-4208-9EC3-AD0D4797FBBC} O43 - CFD: 23/04/2011 - 21:09:22 - [0] ----D C:\Users\walber\AppData\Local\{91F806D6-82AF-4AE1-9DB9-DFF02F9511F3} O43 - CFD: 15/01/2012 - 10:48:42 - [0] ----D C:\Users\walber\AppData\Local\{92E4D55A-16D9-4240-9A8D-0B930866C550} O43 - CFD: 30/11/2011 - 08:27:50 - [0] ----D C:\Users\walber\AppData\Local\{93292EB8-76C2-4F34-89D8-DE8653715795} O43 - CFD: 03/05/2012 - 16:40:27 - [0] ----D C:\Users\walber\AppData\Local\{9387DAF0-EB16-4F13-9690-72B7BF45A7A4} O43 - CFD: 28/11/2011 - 20:57:04 - [0] ----D C:\Users\walber\AppData\Local\{93B3F956-B9A9-49F0-8E05-AD681B40346C} O43 - CFD: 14/04/2011 - 22:42:46 - [0] ----D C:\Users\walber\AppData\Local\{94225882-6BC0-462F-97E3-CCF3086B9DAD} O43 - CFD: 04/03/2012 - 05:34:04 - [0] ----D C:\Users\walber\AppData\Local\{94C8968F-175F-4909-85FB-429F0263C07E} O43 - CFD: 16/06/2012 - 16:19:27 - [0] ----D C:\Users\walber\AppData\Local\{94FE8902-2F74-4C81-8FEB-53BCF43CE4F9} O43 - CFD: 19/11/2011 - 14:09:27 - [0] ----D C:\Users\walber\AppData\Local\{956896B7-0267-446F-AC10-A7CED37EF85C} O43 - CFD: 02/11/2012 - 08:12:32 - [0] ----D C:\Users\walber\AppData\Local\{96134B16-53E7-4D6D-97B1-9CE9EBC6F55B} O43 - CFD: 23/09/2011 - 06:10:16 - [0] ----D C:\Users\walber\AppData\Local\{966C16D4-E0FE-4AD1-B80A-EE7EF166F1D1} O43 - CFD: 13/09/2012 - 12:58:13 - [0] ----D C:\Users\walber\AppData\Local\{96748A7C-960B-4172-B6D1-DED4F219BED2} O43 - CFD: 04/07/2011 - 19:17:42 - [0] ----D C:\Users\walber\AppData\Local\{967880E8-CCF3-4AA4-BDAE-77327782A136} O43 - CFD: 11/07/2011 - 20:22:06 - [0] ----D C:\Users\walber\AppData\Local\{969087F7-5DB0-4896-9EBD-8D4818CF4CD6} O43 - CFD: 11/01/2012 - 14:04:16 - [0] ----D C:\Users\walber\AppData\Local\{96C16171-052E-4D30-A309-0188C1EFE6CE} O43 - CFD: 09/01/2013 - 20:55:03 - [0] ----D C:\Users\walber\AppData\Local\{97C80508-14D8-43DD-970A-0300854054E9} O43 - CFD: 20/06/2011 - 20:18:03 - [0] ----D C:\Users\walber\AppData\Local\{983AF17F-BD44-4A0F-A087-62ABA2C7512D} O43 - CFD: 01/04/2012 - 20:23:46 - [0] ----D C:\Users\walber\AppData\Local\{99385984-EB98-4027-A4F3-2ED30F42DE66} O43 - CFD: 29/06/2011 - 22:15:24 - [0] ----D C:\Users\walber\AppData\Local\{99DE15E0-A0D7-4237-A028-B8BE2B7309FD} O43 - CFD: 09/01/2012 - 18:23:29 - [0] ----D C:\Users\walber\AppData\Local\{9A000815-2BA2-42CC-BF3C-808C87212123} O43 - CFD: 16/11/2011 - 19:32:36 - [0] ----D C:\Users\walber\AppData\Local\{9A1BA666-182E-4CE2-AE15-F31C75E578EC} O43 - CFD: 22/04/2011 - 09:07:13 - [0] ----D C:\Users\walber\AppData\Local\{9B261FA4-21A2-4BB4-8A75-7BEF95C63083} O43 - CFD: 15/04/2011 - 11:28:34 - [0] ----D C:\Users\walber\AppData\Local\{9C046615-DE61-4013-91F4-DFC293BBAAC6} O43 - CFD: 30/04/2011 - 10:15:39 - [0] ----D C:\Users\walber\AppData\Local\{9C9C03E6-EB6F-4D1B-8401-AF0BE380CC44} O43 - CFD: 04/06/2011 - 17:36:26 - [0] ----D C:\Users\walber\AppData\Local\{9CA61535-BC86-4715-8D46-85702AB383F3} O43 - CFD: 10/12/2012 - 18:23:35 - [0] ----D C:\Users\walber\AppData\Local\{9CCBA68B-1C08-4605-BFF2-6E87D8AEA232} O43 - CFD: 01/04/2011 - 21:08:18 - [0] ----D C:\Users\walber\AppData\Local\{9D6255F7-4489-4CCF-BD7B-171A4D796BA8} O43 - CFD: 09/03/2012 - 20:01:48 - [0] ----D C:\Users\walber\AppData\Local\{9DE5F20C-907F-4702-95C7-2904A9F9B1CA} O43 - CFD: 26/11/2012 - 20:20:22 - [0] ----D C:\Users\walber\AppData\Local\{9E34A512-BAF2-4118-95EA-C8EEA2AC7470} O43 - CFD: 26/06/2011 - 17:23:32 - [0] ----D C:\Users\walber\AppData\Local\{9FB45158-6A1D-410F-A22B-50F9D4ECF212} O43 - CFD: 01/05/2011 - 19:08:41 - [0] ----D C:\Users\walber\AppData\Local\{A1243B8F-B138-4A8A-AAEC-FCB89D5C844C} O43 - CFD: 28/10/2012 - 19:32:34 - [0] ----D C:\Users\walber\AppData\Local\{A12C19D2-31BF-47E7-9E2E-276EA876BC4B} O43 - CFD: 01/09/2011 - 19:57:53 - [0] ----D C:\Users\walber\AppData\Local\{A13EFE1A-11A5-45A9-BFCD-8E73F8D4639D} O43 - CFD: 18/11/2011 - 09:27:19 - [0] ----D C:\Users\walber\AppData\Local\{A150BA37-F006-4575-9CB8-77EC294BC44D} O43 - CFD: 31/05/2011 - 23:18:40 - [0] ----D C:\Users\walber\AppData\Local\{A19BD62C-DF60-4C54-8D91-C9FC357346E0} O43 - CFD: 16/04/2011 - 16:50:07 - [0] ----D C:\Users\walber\AppData\Local\{A28F3BE9-D47A-47FC-82FE-0116077E5EAF} O43 - CFD: 11/02/2012 - 12:02:50 - [0] ----D C:\Users\walber\AppData\Local\{A2C1324D-7D4E-4013-BF70-BD1271BEEC3F} O43 - CFD: 19/02/2012 - 16:30:55 - [0] ----D C:\Users\walber\AppData\Local\{A2D9D360-6DD4-47D3-8196-44E367414829} O43 - CFD: 03/04/2012 - 22:15:50 - [0] ----D C:\Users\walber\AppData\Local\{A2EBCBE0-87AE-4E8D-9C09-491DD40DA999} O43 - CFD: 16/05/2011 - 21:31:04 - [0] ----D C:\Users\walber\AppData\Local\{A4597A8B-1E50-4F3E-BA10-0DD542402110} O43 - CFD: 24/04/2011 - 15:38:34 - [0] ----D C:\Users\walber\AppData\Local\{A64F416B-3E3D-44E9-BB10-970E4ADFF695} O43 - CFD: 19/02/2012 - 14:39:00 - [0] ----D C:\Users\walber\AppData\Local\{A6E19639-6C70-4CB3-94E1-1C2DA84BE972} O43 - CFD: 04/04/2011 - 22:27:45 - [0] ----D C:\Users\walber\AppData\Local\{A6F8C685-F8F7-4298-A0CB-C10B0516B900} O43 - CFD: 16/09/2012 - 19:29:20 - [0] ----D C:\Users\walber\AppData\Local\{A7CC327B-7291-4A9C-96D7-5E4559840019} O43 - CFD: 22/11/2011 - 20:07:17 - [0] ----D C:\Users\walber\AppData\Local\{A8514874-F878-4C1B-A626-39E06D24DA32} O43 - CFD: 03/06/2011 - 19:08:40 - [0] ----D C:\Users\walber\AppData\Local\{A8765973-D7D3-4AC5-A248-047778E7219B} O43 - CFD: 05/07/2011 - 20:18:28 - [0] ----D C:\Users\walber\AppData\Local\{A885C1D4-56F3-4189-921D-0D4A9C916D5C} O43 - CFD: 29/02/2012 - 07:23:57 - [0] ----D C:\Users\walber\AppData\Local\{A8FEFD5E-1825-4B6C-B65C-3D1FBE47E6F0} O43 - CFD: 13/12/2011 - 21:04:34 - [0] ----D C:\Users\walber\AppData\Local\{A9855692-CD7F-43D7-9A36-704FFCEB1958} O43 - CFD: 09/03/2012 - 19:47:53 - [0] ----D C:\Users\walber\AppData\Local\{A9D8A031-05DA-4213-8CAD-E77E2DE9A9C0} O43 - CFD: 10/10/2012 - 08:40:14 - [0] ----D C:\Users\walber\AppData\Local\{AA830325-2A0B-4050-9AC5-AD0492D4094D} O43 - CFD: 08/02/2012 - 22:11:49 - [0] ----D C:\Users\walber\AppData\Local\{AAF7B15A-79DC-4291-A1E6-A3FA4BE72A07} O43 - CFD: 06/03/2012 - 23:39:30 - [0] ----D C:\Users\walber\AppData\Local\{AB1F5C84-F857-464A-B0C6-F3CC645E270C} O43 - CFD: 19/02/2012 - 12:55:10 - [0] ----D C:\Users\walber\AppData\Local\{ABFCC397-E475-40FC-B30C-AA36106A9C21} O43 - CFD: 07/02/2013 - 21:36:22 - [0] ----D C:\Users\walber\AppData\Local\{AD8422E1-66BE-410B-A0AD-F0597E7C4C05} O43 - CFD: 26/12/2011 - 06:37:19 - [0] ----D C:\Users\walber\AppData\Local\{ADDE7D46-9A10-4B63-A9BF-8FA9A4E9A431} O43 - CFD: 28/05/2011 - 09:34:09 - [0] ----D C:\Users\walber\AppData\Local\{ADE55C8A-F87F-4006-99BD-CAADCF252CA6} O43 - CFD: 06/11/2011 - 10:50:23 - [0] ----D C:\Users\walber\AppData\Local\{AE266640-40DF-423B-8CB7-4AEE0151CE03} O43 - CFD: 25/05/2011 - 20:19:06 - [0] ----D C:\Users\walber\AppData\Local\{AE4B80ED-C0D6-4C49-93C1-4A35F318B600} O43 - CFD: 19/04/2012 - 22:03:36 - [0] ----D C:\Users\walber\AppData\Local\{AE63BD87-2619-4BC0-AE5A-E310EE404346} O43 - CFD: 26/11/2012 - 20:42:33 - [0] ----D C:\Users\walber\AppData\Local\{AEDB9942-9300-4A48-AE42-552488C88E03} O43 - CFD: 25/11/2012 - 23:02:42 - [0] ----D C:\Users\walber\AppData\Local\{AF24A28A-7861-4BBE-A0AC-9EBF5D4BE3C2} O43 - CFD: 03/09/2011 - 13:02:56 - [0] ----D C:\Users\walber\AppData\Local\{AF555108-6595-49EA-BD90-E9623F1888B7} O43 - CFD: 03/09/2011 - 20:42:38 - [0] ----D C:\Users\walber\AppData\Local\{AF7752C1-7034-4EE9-B7F8-3504C476CA3F} O43 - CFD: 11/03/2012 - 09:14:23 - [0] ----D C:\Users\walber\AppData\Local\{B0419DB6-48A3-437B-B908-F0D3C22A1CC1} O43 - CFD: 25/10/2012 - 21:00:35 - [0] ----D C:\Users\walber\AppData\Local\{B0B593F8-3CA6-47E9-9929-48D361534A8C} O43 - CFD: 28/02/2012 - 10:37:32 - [0] ----D C:\Users\walber\AppData\Local\{B1966191-D3BA-4836-8A20-2FACB0F75DF3} O43 - CFD: 06/11/2011 - 10:51:57 - [0] ----D C:\Users\walber\AppData\Local\{B1F3A689-850B-4330-BF25-C53C257B7E2F} O43 - CFD: 21/05/2012 - 21:22:11 - [0] ----D C:\Users\walber\AppData\Local\{B25E3F81-50A6-4772-886F-9304B8DE635D} O43 - CFD: 04/01/2012 - 12:29:02 - [0] ----D C:\Users\walber\AppData\Local\{B266623F-1833-4546-A533-918EB43D5D85} O43 - CFD: 03/02/2013 - 12:19:42 - [0] ----D C:\Users\walber\AppData\Local\{B2F8AF67-BF8B-4DB6-B726-EF4F751689D7} O43 - CFD: 07/07/2011 - 08:55:19 - [0] ----D C:\Users\walber\AppData\Local\{B3A1E0D8-B685-4F20-A605-8F9AB4AFEEF0} O43 - CFD: 09/03/2012 - 19:47:34 - [0] ----D C:\Users\walber\AppData\Local\{B41320E2-17B5-4196-8F39-CC1730BA4D32} O43 - CFD: 12/06/2012 - 08:42:09 - [0] ----D C:\Users\walber\AppData\Local\{B5217CC6-20DB-4D56-B895-C0AB1E0B8AB7} O43 - CFD: 09/03/2012 - 14:10:46 - [0] ----D C:\Users\walber\AppData\Local\{B5522255-BD00-44A2-A1AE-03EC188EF2B6} O43 - CFD: 26/09/2011 - 15:40:20 - [0] ----D C:\Users\walber\AppData\Local\{B5B0D1B0-F1D9-4C3A-98EB-ADC204BB48E9} O43 - CFD: 14/09/2011 - 19:52:44 - [0] ----D C:\Users\walber\AppData\Local\{B5EE68D2-B6C0-4F53-8AAB-2A38CEE9A759} O43 - CFD: 29/02/2012 - 14:52:19 - [0] ----D C:\Users\walber\AppData\Local\{B60E5F94-A884-4623-AD28-BCD54833281A} O43 - CFD: 05/04/2012 - 10:39:39 - [0] ----D C:\Users\walber\AppData\Local\{B62AEDA5-3531-4B24-8633-2A5513B58E24} O43 - CFD: 24/06/2012 - 19:04:55 - [0] ----D C:\Users\walber\AppData\Local\{B7B18943-C9F1-4657-94EA-A8CE1DA1CA30} O43 - CFD: 09/03/2012 - 14:10:59 - [0] ----D C:\Users\walber\AppData\Local\{B864FE61-C74E-4CE1-AEC5-9145E8819656} O43 - CFD: 13/11/2011 - 11:10:05 - [0] ----D C:\Users\walber\AppData\Local\{B8C745E9-7F53-45E7-9D10-6525EE302414} O43 - CFD: 09/10/2011 - 18:28:26 - [0] ----D C:\Users\walber\AppData\Local\{B8E80DF2-5B38-48D4-A1E9-C9286F88CBF1} O43 - CFD: 25/12/2011 - 14:00:07 - [0] ----D C:\Users\walber\AppData\Local\{B910C744-AEB8-4D9D-BE61-93D08E20A7FB} O43 - CFD: 16/09/2012 - 20:35:33 - [0] ----D C:\Users\walber\AppData\Local\{B97CAC62-3625-4BED-ABAC-E66E04573A97} O43 - CFD: 21/11/2011 - 09:32:25 - [0] ----D C:\Users\walber\AppData\Local\{B9949E01-AB1F-4A02-ABC5-48E8C4F3FE3F} O43 - CFD: 04/01/2012 - 07:54:58 - [0] ----D C:\Users\walber\AppData\Local\{BA82E81A-2878-4971-87CD-04E8C7911F5E} O43 - CFD: 24/06/2012 - 19:25:36 - [0] ----D C:\Users\walber\AppData\Local\{BACA72FA-8570-419A-8052-6691D6B6F153} O43 - CFD: 10/02/2012 - 17:44:10 - [0] ----D C:\Users\walber\AppData\Local\{BC8C2BD7-398A-4AD4-BCBD-82510D22376E} O43 - CFD: 30/10/2012 - 22:11:13 - [0] ----D C:\Users\walber\AppData\Local\{BE279A7D-5C46-40C6-9BA7-38B5DA56F214} O43 - CFD: 22/01/2013 - 21:29:21 - [0] ----D C:\Users\walber\AppData\Local\{BFB20627-1640-4E07-82EF-68E8D55D2881} O43 - CFD: 29/02/2012 - 18:04:30 - [0] ----D C:\Users\walber\AppData\Local\{BFCA8DFE-AB28-424E-B743-C8728A4124E2} O43 - CFD: 24/04/2012 - 20:03:48 - [0] ----D C:\Users\walber\AppData\Local\{C0287E19-D83D-4F5A-ADAC-EAF709024990} O43 - CFD: 07/12/2012 - 18:28:33 - [0] ----D C:\Users\walber\AppData\Local\{C03B6703-255E-444A-90FB-B683B54E6903} O43 - CFD: 19/06/2012 - 16:39:01 - [0] ----D C:\Users\walber\AppData\Local\{C2144E1B-D6C4-4043-93D6-D0566FFC80D3} O43 - CFD: 20/02/2012 - 11:06:27 - [0] ----D C:\Users\walber\AppData\Local\{C48CB01D-C098-4B86-BD11-0C0E6E7FA077} O43 - CFD: 08/02/2012 - 22:38:32 - [0] ----D C:\Users\walber\AppData\Local\{C4E5EE97-61A0-4559-95C0-E81D8502124E} O43 - CFD: 25/12/2011 - 13:58:31 - [0] ----D C:\Users\walber\AppData\Local\{C7526321-F387-407B-8295-C3B982CD5E1A} O43 - CFD: 22/04/2011 - 10:26:49 - [0] ----D C:\Users\walber\AppData\Local\{C75FF88B-B0D5-46DA-9C32-201A7BBA528B} O43 - CFD: 16/10/2011 - 12:14:44 - [0] ----D C:\Users\walber\AppData\Local\{C7A8EE6E-2CCC-4316-A258-DE7F369EA8A7} O43 - CFD: 08/08/2011 - 12:39:02 - [0] ----D C:\Users\walber\AppData\Local\{C7BC0A61-8EB3-47C4-8E54-0BF8E18378E1} O43 - CFD: 22/02/2012 - 19:06:31 - [0] ----D C:\Users\walber\AppData\Local\{C8661E0A-1554-41C9-8AE5-F1F44B4DE9F2} O43 - CFD: 18/06/2011 - 10:41:02 - [0] ----D C:\Users\walber\AppData\Local\{C89BA145-AB95-4DF4-BEA0-30C719002AF6} O43 - CFD: 29/05/2011 - 14:32:41 - [0] ----D C:\Users\walber\AppData\Local\{C927785C-9553-43BB-BB1D-F6502E25167D} O43 - CFD: 25/11/2012 - 18:12:05 - [0] ----D C:\Users\walber\AppData\Local\{C93F84DB-951E-42F3-A5A3-E83FAC20C468} O43 - CFD: 04/03/2012 - 10:43:24 - [0] ----D C:\Users\walber\AppData\Local\{C98A196C-17B2-4713-B773-9D237A5BF529} O43 - CFD: 18/11/2011 - 21:51:09 - [0] ----D C:\Users\walber\AppData\Local\{C9B3D978-1844-439B-8D3D-910AE2AEFE42} O43 - CFD: 22/06/2012 - 20:32:09 - [0] ----D C:\Users\walber\AppData\Local\{CA330C34-BD5B-4401-98FF-3E6F5712B024} O43 - CFD: 18/06/2011 - 13:12:44 - [0] ----D C:\Users\walber\AppData\Local\{CAB52AA5-1BDF-4975-9AE9-0014A47051E4} O43 - CFD: 24/09/2011 - 13:33:26 - [0] ----D C:\Users\walber\AppData\Local\{CB0CB645-2C8F-4586-9C58-AD8E16A700C1} O43 - CFD: 19/10/2011 - 10:19:31 - [0] ----D C:\Users\walber\AppData\Local\{CB74F60B-56D1-4810-AD69-AF6416D0B67C} O43 - CFD: 16/01/2012 - 19:55:22 - [0] ----D C:\Users\walber\AppData\Local\{CB87ADD9-D938-4E19-AE6E-9BDED6FD7DF0} O43 - CFD: 06/01/2013 - 15:28:30 - [0] ----D C:\Users\walber\AppData\Local\{CBC0F10F-5390-4DD1-9D1C-17D4ABDE53CB} O43 - CFD: 05/04/2011 - 23:09:38 - [0] ----D C:\Users\walber\AppData\Local\{CCBAB6FD-50F7-496D-86CD-3AFD7F9BD302} O43 - CFD: 24/10/2012 - 21:03:11 - [0] ----D C:\Users\walber\AppData\Local\{CD2D230E-ABA6-4DC0-B361-53C289458985} O43 - CFD: 25/08/2011 - 12:41:05 - [0] ----D C:\Users\walber\AppData\Local\{CD6FDC95-EDCB-4FA6-9666-89ACA5AE5BA8} O43 - CFD: 04/06/2012 - 10:28:30 - [0] ----D C:\Users\walber\AppData\Local\{CD813921-3D53-4EA9-9583-9B1F479BE232} O43 - CFD: 06/11/2011 - 19:01:07 - [0] ----D C:\Users\walber\AppData\Local\{CE7B4F98-A3CC-4B72-911C-08CAD5A709CB} O43 - CFD: 09/10/2011 - 14:12:15 - [0] ----D C:\Users\walber\AppData\Local\{CEF9B2FE-F79E-4869-BDA4-CFE204252133} O43 - CFD: 21/04/2011 - 11:31:33 - [0] ----D C:\Users\walber\AppData\Local\{CEFCF2E1-0FDD-4448-AE61-4856BFB6D7D8} O43 - CFD: 05/06/2012 - 19:45:55 - [0] ----D C:\Users\walber\AppData\Local\{CFADA93C-4AA1-4199-B535-5C6FE2CE59D5} O43 - CFD: 21/06/2012 - 09:16:18 - [0] ----D C:\Users\walber\AppData\Local\{D000AF58-6F87-45D4-A05C-FD61CE661335} O43 - CFD: 03/01/2012 - 12:44:07 - [0] ----D C:\Users\walber\AppData\Local\{D03C26D1-B196-4C47-A04E-52C29F6D0428} O43 - CFD: 08/11/2012 - 21:26:25 - [0] ----D C:\Users\walber\AppData\Local\{D070F82D-874D-4A53-9178-2F2EAD01A22E} O43 - CFD: 29/04/2012 - 20:20:38 - [0] ----D C:\Users\walber\AppData\Local\{D09A7700-9031-4F64-BBF8-7D9A70F63287} O43 - CFD: 25/05/2012 - 12:29:50 - [0] ----D C:\Users\walber\AppData\Local\{D0B45FFC-6515-4923-9C67-22408D92B190} O43 - CFD: 23/04/2011 - 11:44:27 - [0] ----D C:\Users\walber\AppData\Local\{D0DA48A2-6BF9-4614-8AA7-93B5A9694E3E} O43 - CFD: 17/10/2012 - 20:38:19 - [0] ----D C:\Users\walber\AppData\Local\{D1C8268A-BE2C-4C16-B168-23E271F6BA87} O43 - CFD: 25/04/2012 - 20:45:40 - [0] ----D C:\Users\walber\AppData\Local\{D1C923FA-76ED-4F9C-9999-AB5FBFE0BA9A} O43 - CFD: 20/02/2012 - 11:07:53 - [0] ----D C:\Users\walber\AppData\Local\{D2149A21-A565-48D4-80A1-2E0606BBC102} O43 - CFD: 15/04/2012 - 17:05:20 - [0] ----D C:\Users\walber\AppData\Local\{D26DF205-C44A-4626-8B9C-5EEDCFEB900D} O43 - CFD: 28/04/2012 - 08:42:02 - [0] ----D C:\Users\walber\AppData\Local\{D3DB9DA7-308D-4DB8-B7E0-49429C17A64C} O43 - CFD: 28/12/2012 - 20:35:20 - [0] ----D C:\Users\walber\AppData\Local\{D474F816-BDB9-4C59-9BBD-1E29FC8DA95D} O43 - CFD: 22/05/2011 - 19:35:34 - [0] ----D C:\Users\walber\AppData\Local\{D49A9041-51D1-4063-B9BF-DC2FB2C69F54} O43 - CFD: 18/11/2011 - 21:12:51 - [0] ----D C:\Users\walber\AppData\Local\{D4A6BDD1-70FA-4519-B76D-E0ED154DBB4F} O43 - CFD: 05/02/2012 - 19:11:00 - [0] ----D C:\Users\walber\AppData\Local\{D4F86ADD-DFF4-4DE6-900C-77DE94202E81} O43 - CFD: 04/05/2011 - 20:24:11 - [0] ----D C:\Users\walber\AppData\Local\{D6060916-0BE8-42A9-9722-A9F58D1F499E} O43 - CFD: 27/11/2011 - 18:19:21 - [0] ----D C:\Users\walber\AppData\Local\{D6CC1DBF-F1CD-437E-9F36-00392900BB2B} O43 - CFD: 05/04/2011 - 11:08:21 - [0] ----D C:\Users\walber\AppData\Local\{D718EBF3-D6D0-4C9F-A2D3-6DF11E0F9644} O43 - CFD: 09/06/2012 - 12:07:51 - [0] ----D C:\Users\walber\AppData\Local\{D7260B66-F55A-47DC-AAA3-C556F060C1E3} O43 - CFD: 21/02/2012 - 16:24:27 - [0] ----D C:\Users\walber\AppData\Local\{D7987B7E-957B-4D7E-A83C-E03BCAF13611} O43 - CFD: 05/11/2012 - 20:33:14 - [0] ----D C:\Users\walber\AppData\Local\{D7BEF53E-D50F-41B7-913E-427495D303C2} O43 - CFD: 02/03/2012 - 17:41:17 - [0] ----D C:\Users\walber\AppData\Local\{D8DB5E5F-C9AC-481B-8103-B5AA2885657D} O43 - CFD: 16/04/2011 - 12:33:47 - [0] ----D C:\Users\walber\AppData\Local\{D98CFCA8-9D09-4DC5-83C8-82DCD093D249} O43 - CFD: 03/01/2012 - 12:44:26 - [0] ----D C:\Users\walber\AppData\Local\{D9ABE48B-C69F-4AE2-B157-D687824EEB2D} O43 - CFD: 11/03/2012 - 16:48:02 - [0] ----D C:\Users\walber\AppData\Local\{D9CCA899-F526-4CE1-82B8-5C9FA38D16A7} O43 - CFD: 23/09/2011 - 09:03:02 - [0] ----D C:\Users\walber\AppData\Local\{DADA79B2-AF05-44B3-9264-82405F11ECA1} O43 - CFD: 10/07/2012 - 20:03:27 - [0] ----D C:\Users\walber\AppData\Local\{DAF7E0EC-840F-4311-8552-3D56F6EA43C3} O43 - CFD: 17/01/2012 - 20:42:15 - [0] ----D C:\Users\walber\AppData\Local\{DB1EA884-444E-4727-9ECF-E8A2B141D79C} O43 - CFD: 12/06/2012 - 12:16:05 - [0] ----D C:\Users\walber\AppData\Local\{DB2A0C89-E40B-40D9-9AB0-4584CFF4EDBD} O43 - CFD: 28/10/2011 - 10:11:01 - [0] ----D C:\Users\walber\AppData\Local\{DC63AC3E-57BF-40AD-933E-D579F625739B} O43 - CFD: 04/02/2013 - 19:59:14 - [0] ----D C:\Users\walber\AppData\Local\{DCF81FA2-370F-4839-94B5-7C4900505CB0} O43 - CFD: 13/02/2013 - 09:22:49 - [0] ----D C:\Users\walber\AppData\Local\{DD0980E0-F407-4A0D-B892-D655D6ED665F} O43 - CFD: 06/05/2011 - 20:21:53 - [0] ----D C:\Users\walber\AppData\Local\{DDDCEB91-CAFB-4946-92E9-EE91C02EFB2A} O43 - CFD: 11/03/2012 - 11:51:05 - [0] ----D C:\Users\walber\AppData\Local\{DDF6143F-5551-423B-88A4-6F5A7F5E708D} O43 - CFD: 07/11/2012 - 20:29:26 - [0] ----D C:\Users\walber\AppData\Local\{DE369BDD-A46A-40C5-8098-110E5FF57FEA} O43 - CFD: 22/04/2011 - 14:10:41 - [0] ----D C:\Users\walber\AppData\Local\{DE96FDC0-7232-4B7E-8002-0CF7E3D684B3} O43 - CFD: 29/01/2013 - 21:27:06 - [0] ----D C:\Users\walber\AppData\Local\{DE9CEE7B-02CD-4A0D-8F5F-449097DCCA30} O43 - CFD: 16/01/2012 - 19:56:42 - [0] ----D C:\Users\walber\AppData\Local\{DF48C20A-AF28-4DE6-815D-BFC5B047602D} O43 - CFD: 07/09/2011 - 16:48:22 - [0] ----D C:\Users\walber\AppData\Local\{DF68D4EC-9E82-4AF0-B592-CEB54578DA1A} O43 - CFD: 29/09/2011 - 06:26:34 - [0] ----D C:\Users\walber\AppData\Local\{E14D6C88-89E4-4E23-B96A-3A5D9D143FE0} O43 - CFD: 12/11/2011 - 13:57:20 - [0] ----D C:\Users\walber\AppData\Local\{E1A0E8D8-7C53-404F-B679-687178FFCD45} O43 - CFD: 22/11/2011 - 20:13:15 - [0] ----D C:\Users\walber\AppData\Local\{E28AFE27-0467-4243-A6A8-264C63C6C7DC} O43 - CFD: 07/04/2011 - 00:05:36 - [0] ----D C:\Users\walber\AppData\Local\{E2C626D2-8AE7-4B36-95E9-C242909F65E0} O43 - CFD: 07/06/2011 - 19:45:14 - [0] ----D C:\Users\walber\AppData\Local\{E2E171B4-AC10-4A86-BB13-A0D5E396F3A9} O43 - CFD: 20/02/2012 - 16:16:52 - [0] ----D C:\Users\walber\AppData\Local\{E35451C9-9094-4BD1-831C-4625C3A18D08} O43 - CFD: 13/04/2011 - 19:11:08 - [0] ----D C:\Users\walber\AppData\Local\{E413B4BA-959E-4E66-A80E-DE39451DA259} O43 - CFD: 08/05/2012 - 18:32:36 - [0] ----D C:\Users\walber\AppData\Local\{E5673666-0326-475D-9194-40A715E80E1B} O43 - CFD: 25/10/2011 - 21:17:24 - [0] ----D C:\Users\walber\AppData\Local\{E57B78DA-1E7F-4897-8ADB-BAA667FCA008} O43 - CFD: 21/06/2011 - 22:22:34 - [0] ----D C:\Users\walber\AppData\Local\{E5B2ABE3-72E1-479C-BEE1-832E283115D0} O43 - CFD: 03/07/2011 - 11:12:17 - [0] ----D C:\Users\walber\AppData\Local\{E791395F-9E11-4A64-998F-FA034DC1AC61} O43 - CFD: 10/10/2011 - 20:26:28 - [0] ----D C:\Users\walber\AppData\Local\{E88ECF5E-043F-45C8-8011-3EA86AC809D2} O43 - CFD: 29/04/2012 - 16:42:27 - [0] ----D C:\Users\walber\AppData\Local\{E8A397AE-46B1-4117-897D-3B2D02A64C82} O43 - CFD: 09/10/2011 - 13:23:59 - [0] ----D C:\Users\walber\AppData\Local\{EA5BFCCF-1C54-4C3C-99C9-52897D43F936} O43 - CFD: 08/03/2012 - 20:50:19 - [0] ----D C:\Users\walber\AppData\Local\{EC05BA83-8CF9-4D96-8D1B-17F37837F608} O43 - CFD: 21/04/2011 - 17:03:52 - [0] ----D C:\Users\walber\AppData\Local\{EC183E41-511F-4D82-8382-B70A739B637B} O43 - CFD: 07/11/2011 - 20:35:56 - [0] ----D C:\Users\walber\AppData\Local\{EC7CFDAE-5B79-4A58-A0FF-B6917D50DBB1} O43 - CFD: 29/07/2012 - 12:18:47 - [0] ----D C:\Users\walber\AppData\Local\{ED0FFAEE-E385-403E-B3F4-E98C7C86B174} O43 - CFD: 01/06/2011 - 23:08:41 - [0] ----D C:\Users\walber\AppData\Local\{ED2FE20E-210F-469E-BAEE-28600537A46F} O43 - CFD: 18/09/2012 - 20:02:17 - [0] ----D C:\Users\walber\AppData\Local\{ED9E8632-454D-4B27-B9CA-D2874BD94CDC} O43 - CFD: 21/11/2011 - 15:54:43 - [0] ----D C:\Users\walber\AppData\Local\{EDD2FE8E-B0A9-43A2-B8D2-996F9F89FB50} O43 - CFD: 20/02/2012 - 10:37:49 - [0] ----D C:\Users\walber\AppData\Local\{EDDA5B55-4451-40A9-84C4-FA6D1E40AF43} O43 - CFD: 06/05/2012 - 10:36:10 - [0] ----D C:\Users\walber\AppData\Local\{EDDDF9C0-931E-42F7-B37D-75BEA6C39C21} O43 - CFD: 03/03/2012 - 09:07:02 - [0] ----D C:\Users\walber\AppData\Local\{EE87AC4C-9ADB-40C2-861D-90ADE8A0A2D6} O43 - CFD: 07/11/2011 - 21:01:20 - [0] ----D C:\Users\walber\AppData\Local\{EEAA8D28-28EB-4FF0-A269-5B12421B8A23} O43 - CFD: 21/06/2011 - 22:09:32 - [0] ----D C:\Users\walber\AppData\Local\{EF47305E-810D-4139-8BBC-662542FBE088} O43 - CFD: 21/11/2011 - 17:52:27 - [0] ----D C:\Users\walber\AppData\Local\{EF58ED52-6C39-4A31-8FB0-1410FC7DDCC7} O43 - CFD: 29/10/2012 - 19:57:00 - [0] ----D C:\Users\walber\AppData\Local\{EFB46288-B0C4-4032-86F3-7D47766F6C82} O43 - CFD: 28/04/2012 - 08:52:04 - [0] ----D C:\Users\walber\AppData\Local\{F12B21FA-5403-401C-94AB-FFDA21BC8656} O43 - CFD: 04/03/2012 - 18:51:05 - [0] ----D C:\Users\walber\AppData\Local\{F1542B3D-2BB2-4387-AAE7-7B70B6595AF1} O43 - CFD: 01/05/2012 - 18:33:53 - [0] ----D C:\Users\walber\AppData\Local\{F1796486-86A9-4DB6-B620-D866EF41D299} O43 - CFD: 16/11/2011 - 19:34:43 - [0] ----D C:\Users\walber\AppData\Local\{F2599245-9C8D-4C56-9BE0-3ACE322771C1} O43 - CFD: 15/10/2012 - 15:56:52 - [0] ----D C:\Users\walber\AppData\Local\{F2CD2FCD-2E2B-46C5-A8BE-755768B80D03} O43 - CFD: 05/03/2012 - 19:41:35 - [0] ----D C:\Users\walber\AppData\Local\{F30AB865-895A-46A3-9564-59E6E823075D} O43 - CFD: 10/06/2012 - 10:17:08 - [0] ----D C:\Users\walber\AppData\Local\{F30DA79F-F4A2-495A-BA9B-9B2EC57E5324} O43 - CFD: 13/04/2011 - 19:41:36 - [0] ----D C:\Users\walber\AppData\Local\{F3E891B6-74A0-434C-8510-A1A4614CE4E6} O43 - CFD: 13/07/2011 - 21:00:49 - [0] ----D C:\Users\walber\AppData\Local\{F46B38EA-446C-4F88-9699-6CA96038420E} O43 - CFD: 19/11/2011 - 23:50:40 - [0] ----D C:\Users\walber\AppData\Local\{F4903B32-2827-4DA6-B79A-61A464F65C97} O43 - CFD: 05/07/2011 - 21:45:13 - [0] ----D C:\Users\walber\AppData\Local\{F51B6B51-5473-4B4B-83AB-D36CB088E080} O43 - CFD: 05/06/2011 - 17:07:13 - [0] ----D C:\Users\walber\AppData\Local\{F5464FCE-A285-4CEF-9F21-28F6C9DECEE0} O43 - CFD: 14/04/2012 - 14:10:40 - [0] ----D C:\Users\walber\AppData\Local\{F645D60E-BDFC-4D23-9CAC-ED98A0692EF7} O43 - CFD: 14/06/2012 - 09:01:02 - [0] ----D C:\Users\walber\AppData\Local\{F77FE420-4C63-4930-B1EA-9B349728ECD3} O43 - CFD: 17/12/2012 - 19:58:57 - [0] ----D C:\Users\walber\AppData\Local\{F784EE0F-8360-4BEF-9C83-FEBBE09F0429} O43 - CFD: 08/05/2011 - 17:14:06 - [0] ----D C:\Users\walber\AppData\Local\{F87EFD00-01A8-4D8F-B3C1-FD7642651B8C} O43 - CFD: 06/11/2011 - 12:35:54 - [0] ----D C:\Users\walber\AppData\Local\{F98768A3-01E1-49DE-8016-D5F0FEA7DA56} O43 - CFD: 17/10/2011 - 21:26:19 - [0] ----D C:\Users\walber\AppData\Local\{F99F9FF8-D733-4EB0-87AE-A796D5C7B0AC} O43 - CFD: 02/12/2011 - 08:24:41 - [0] ----D C:\Users\walber\AppData\Local\{FC7A39B0-75CF-4E10-ADE8-4E1E552A80DD} O43 - CFD: 27/10/2012 - 12:14:59 - [0] ----D C:\Users\walber\AppData\Local\{FD13A939-2341-4125-8F39-F299005B4948} O43 - CFD: 21/01/2012 - 09:15:05 - [0] ----D C:\Users\walber\AppData\Local\{FD1F29CD-DD01-47B2-9B5E-4A349DF636D2} O43 - CFD: 19/05/2012 - 08:19:22 - [0] ----D C:\Users\walber\AppData\Local\{FDD70343-5745-4B04-A670-18DF7FB9560E} O43 - CFD: 12/07/2011 - 19:48:09 - [0] ----D C:\Users\walber\AppData\Local\{FE5B8895-B0A1-40C6-A37F-9F29262E46DB} O43 - CFD: 18/04/2011 - 14:05:08 - [0] ----D C:\Users\walber\AppData\Local\{FF59E427-15C5-4EFD-96F7-B4D5DFE05278} O43 - CFD: 19/06/2012 - 13:28:44 - [0] ----D C:\Users\walber\AppData\Local\{FF661437-24D7-40E7-9BD8-F13E28C417BB} O43 - CFD: 03/03/2012 - 06:55:33 - [0] ----D C:\Users\walber\AppData\Local\{FFB4BD70-F0B8-4382-B5C2-1AA3D7FE6B2B} O43 - CFD: 29/09/2012 - 09:55:42 - [0,000] R---D C:\Users\walber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 09/12/2012 - 16:28:25 - [0,002] ----D C:\Users\walber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SanDisk SecureAccess Manager O43 - CFD: 29/09/2012 - 09:55:42 - [0,000] R---D C:\Users\walber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Scan Program Folder in 00mn 34s ---\\ Last modified or created files under Windows and System32 (O44) O44 - LFC:[MD5.4940BA735116D51D1D49188C52AD35AD] - 20/02/2013 - 09:14:04 --H-- . (...) -- C:\dvmexp.idx [177] O44 - LFC:[MD5.DA7906FB15E04191FFC5031F6C88F43E] - 20/02/2013 - 09:11:23 . (...) -- C:\Windows\System32\perfc009.dat [] O44 - LFC:[MD5.C3C813CC4B21FF1876E4CDCB1406A7C7] - 20/02/2013 - 09:11:23 . (...) -- C:\Windows\System32\perfh009.dat [] O44 - LFC:[MD5.98AB5892DF509C9124DD8AEC219F0668] - 20/02/2013 - 09:11:23 . (...) -- C:\Windows\System32\prfc0416.dat [1535502] O44 - LFC:[MD5.0BFE7DDC5C74DF6B0BD6A7A625C47822] - 20/02/2013 - 09:11:23 . (...) -- C:\Windows\System32\prfh0416.dat [1535502] O44 - LFC:[MD5.D1A718D7234222E32499BEEDA701A10E] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1535502] O44 - LFC:[MD5.DA7906FB15E04191FFC5031F6C88F43E] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [109010] O44 - LFC:[MD5.C3C813CC4B21FF1876E4CDCB1406A7C7] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [622082] O44 - LFC:[MD5.98AB5892DF509C9124DD8AEC219F0668] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\SysNative\prfc0416.dat [131136] O44 - LFC:[MD5.0BFE7DDC5C74DF6B0BD6A7A625C47822] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\SysNative\prfh0416.dat [670206] O44 - LFC:[MD5.D1A718D7234222E32499BEEDA701A10E] - 20/02/2013 - 09:11:23 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1535502] O44 - LFC:[MD5.7B0BFADEA779CDE1491BAB53B97BAE96] - 20/02/2013 - 09:08:17 ---A- . (...) -- C:\Windows\WindowsUpdate.log [40478] O44 - LFC:[MD5.9982DE5B241F4776F71698EB4D4FC7E9] - 20/02/2013 - 09:03:52 ---A- . (...) -- C:\Windows\setupact.log [168] O44 - LFC:[MD5.868885A45F4294A06683B2BE12C93FFF] - 20/02/2013 - 09:03:41 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.21D10479F57144F1563C3B24649AA808] - 20/02/2013 - 09:03:35 ---A- . (...) -- C:\Windows\PFRO.log [81388] O44 - LFC:[MD5.A96433EB1E32EB996C281F684C7A147F] - 20/02/2013 - 09:02:41 ---A- . (...) -- C:\AdwCleaner[S1].txt [44780] O44 - LFC:[MD5.6FC2C0C52A09238C96A5BCCE7D6184FD] - 19/02/2013 - 16:57:11 . (...) -- C:\Windows\System32\FNTCACHE.DAT [] O44 - LFC:[MD5.6FC2C0C52A09238C96A5BCCE7D6184FD] - 19/02/2013 - 16:57:11 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [433296] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/02/2013 - 16:57:01 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.74D55DED81C61871F0DB7F3A63A4D312] - 19/02/2013 - 14:23:02 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [41224] O44 - LFC:[MD5.92EB844D90615CB266F84C3202B8786E] - 14/12/2012 - 16:49:28 . (...) -- C:\Windows\System32\Drivers\mbam.sys [] O44 - LFC:[MD5.6EDC79D73745FD44C41B55B2D13D0B70] - 30/10/2012 - 20:51:56 . (...) -- C:\Windows\System32\Drivers\aswTdi.sys [] O44 - LFC:[MD5.B50CDD87772D6A11CB90924AAD399DF8] - 30/10/2012 - 20:51:55 . (...) -- C:\Windows\System32\Drivers\aswMonFlt.sys [] O44 - LFC:[MD5.538A32E2C99BF073D4CA76C30BEDAA60] - 30/10/2012 - 20:51:55 . (...) -- C:\Windows\System32\Drivers\aswSP.sys [] O44 - LFC:[MD5.E71D826A1F3CE9C9DE3E77F2D02AFFBF] - 30/10/2012 - 20:51:55 . (...) -- C:\Windows\System32\Drivers\aswSnx.sys [] O44 - LFC:[MD5.4FCAEF0C5BE7629AEB878998E0FE959B] - 30/10/2012 - 20:51:53 . (...) -- C:\Windows\System32\Drivers\aswFsBlk.sys [] O44 - LFC:[MD5.57768C7DB4681F2510F247F82EF31D4F] - 15/10/2012 - 12:59:28 . (...) -- C:\Windows\System32\Drivers\aswRdr2.sys [] ~ Scan Files in 00mn 03s ---\\ Local Security Authority-LSA Deny (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Mecanismo cliente do 'Editor de configuração de segurança Windows'.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Notification Packages . (.DigitalPersona, Inc. - DPPwdFlt Module.) -- C:\Windows\System32\DPPWDFLT.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pacote de Segurança Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Safe Boot Control (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (MPKS) (O51) O51 - MPSK:{2384cc5f-9955-11e1-a7bd-002713cf5648}\AutoRun\command. (...) -- H:\NokiaPCIA_Autorun.exe (.not file.) O51 - MPSK:{78bf03cb-5954-11e0-819d-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{78bf03d1-5954-11e0-819d-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{78bf03ee-5954-11e0-819d-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{7a2bfb6b-b896-11df-bffa-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{7a2bfb6f-b896-11df-bffa-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{b64b07cc-5990-11e0-9e75-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{b64b07d5-5990-11e0-9e75-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{b64b07e0-5990-11e0-9e75-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{b64b07e2-5990-11e0-9e75-002713cf5648}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{b64b07e6-5990-11e0-9e75-002713cf5648}\AutoRun\command. (...) -- H:\AutoRun.exe (.not file.) O51 - MPSK:{de0d9e7b-df7e-11df-bc2e-806e6f6e6963}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{de0d9eb1-df7e-11df-bc2e-1cc1dedb6902}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.) O51 - MPSK:{ee08589a-0d4e-11e1-a6ad-002713cf5648}\AutoRun\command. (...) -- G:\NokiaPCIA_Autorun.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O53 - SMSR:HKLM\...\startupreg\Apoint [Key] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe O53 - SMSR:HKLM\...\startupreg\DpAgent [Key] . (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe O53 - SMSR:HKLM\...\startupreg\GrooveMonitor [Key] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O53 - SMSR:HKLM\...\startupreg\HPCam_Menu [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe O53 - SMSR:HKLM\...\startupreg\LightScribe Control Panel [Key] . (.Hewlett-Packard Company - No comment.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O53 - SMSR:HKLM\...\startupreg\NBKeyScan [Key] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe O53 - SMSR:HKLM\...\startupreg\NokiaOviSuite2 [Key] . (.Nokia - Nokia Ovi Suite.) -- C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe O53 - SMSR:HKLM\...\startupreg\Octoshape Streaming Services [Key] . (.Octoshape ApS - Main program for Octoshape client.) -- C:\Users\walber\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe O53 - SMSR:HKLM\...\startupreg\QlbCtrl.exe [Key] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe O53 - SMSR:HKLM\...\startupreg\SanDiskSecureAccess_Manager.exe [Key] . (.Gemalto N.V. - RunSanDiskSecureAccess_Win.) -- C:\Users\walber\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe O53 - SMSR:HKLM\...\startupreg\SmartMenu [Key] . (.Unknown owner - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe O53 - SMSR:HKLM\...\startupreg\SysTrayApp [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe O53 - SMSR:HKLM\...\startupreg\WirelessAssistant [Key] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 ~ Scan Keys in 00mn 00s ---\\ System Drivers List (SDL) (O58) O58 - SDL:[MD5.1CFFE9C06E66A57DAE1452E449A58240] - 08/07/2009 - 13:48:50 ---A- . (.Hewlett-Packard - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [41272] O58 - SDL:[MD5.7AE58DF54421FCE8B4D6F8058E1E60C1] - 09/10/2012 - 12:29:58 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\SysWOW64\drivers\GbpKm.sys [46440] ~ Scan Drivers in 00mn 00s ---\\ List all tools cleaner (LATC) (O63) O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ List all legacy services(LALS) (O64) O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\adp94xx.sys (adp94xx) .(.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) - LEGACY_ADP94XX O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\adpahci.sys (adpahci) .(.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) - LEGACY_ADPAHCI O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\adpu320.sys (adpu320) .(.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) - LEGACY_ADPU320 O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\drivers\aliide.sys (aliide) .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE O64 - Services: CurCS - 11/03/2011 - C:\Windows\System32\drivers\amdsata.sys (amdsata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMDSATA O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\amdsbs.sys (amdsbs) .(.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) - LEGACY_AMDSBS O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\arc.sys (arc) .(.Adaptec, Inc. - Adaptec RAID Storport Driver.) - LEGACY_ARC O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\arcsas.sys (arcsas) .(.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) - LEGACY_ARCSAS O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK O64 - Services: CurCS - 30/10/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 15/10/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\drivers\cmdide.sys (cmdide) .(.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) - LEGACY_CMDIDE O64 - Services: CurCS - 27/09/2009 - C:\SPLASH.sys\config\dvmio.sys (DVMIO) .(.DeviceVM, Inc. - DVMIO virtual device driver for 64bit.) - LEGACY_DVMIO O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\elxstor.sys (elxstor) .(.Emulex - Storport Miniport Driver for LightPulse HBA.) - LEGACY_ELXSTOR O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\HpSAMD.sys (HpSAMD) .(.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) - LEGACY_HPSAMD O64 - Services: CurCS - 11/03/2011 - C:\Windows\System32\drivers\iaStorV.sys (iaStorV) .(.Intel Corporation - Intel Matrix Storage Manager driver - x64.) - LEGACY_IASTORV O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\iirsp.sys (iirsp) .(.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) - LEGACY_IIRSP O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\lsi_fc.sys (LSI_FC) .(.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) - LEGACY_LSI_FC O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\lsi_sas.sys (LSI_SAS) .(.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) - LEGACY_LSI_SAS O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\lsi_sas2.sys (LSI_SAS2) .(.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) - LEGACY_LSI_SAS2 O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\lsi_scsi.sys (LSI_SCSI) .(.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) - LEGACY_LSI_SCSI O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\megasas.sys (megasas) .(.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) - LEGACY_MEGASAS O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\MegaSR.sys (MegaSR) .(.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) - LEGACY_MEGASR O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\nfrd960.sys (nfrd960) .(.IBM Corporation - IBM ServeRAID Controller Driver.) - LEGACY_NFRD960 O64 - Services: CurCS - 11/03/2011 - C:\Windows\System32\drivers\nvraid.sys (nvraid) .(.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) - LEGACY_NVRAID O64 - Services: CurCS - 11/03/2011 - C:\Windows\System32\drivers\nvstor.sys (nvstor) .(.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) - LEGACY_NVSTOR O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\ql2300.sys (ql2300) .(.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) - LEGACY_QL2300 O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\ql40xx.sys (ql40xx) .(.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) - LEGACY_QL40XX O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\SiSRaid2.sys (SiSRaid2) .(.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) - LEGACY_SISRAID2 O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\sisraid4.sys (SiSRaid4) .(.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) - LEGACY_SISRAID4 O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\stexstor.sys (stexstor) .(.Promise Technology - Promise SuperTrak EX Series Driver for Win.) - LEGACY_STEXSTOR O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\drivers\viaide.sys (viaide) .(.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) - LEGACY_VIAIDE O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\vsmraid.sys (vsmraid) .(.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) - LEGACY_VSMRAID ~ Scan Services in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos'.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos'.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {EE0498B6-87BC-4A19-B79A-A0A9E5A62521} [DefaultScope] - (Bing) - http://www.bing.com ~ Scan Keys in 00mn 00s ---\\ Search Svchost Services (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acesso Remoto.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistema (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor Host da Sessão da Área de.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de plano de fundo.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em uma rede IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [70656] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho Remota.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Scan Services in 00mn 00s ---\\ Search Particular Root Folder (SPRF) (O84) [MD5.FDBB13EF886880DBDDB4139150ECFD16] [SPRF][15/10/2010] (...) -- C:\ProgramData\6537E20D27.sys [88] [MD5.8AABF12CD12B873B7C59631964B043D6] [SPRF][15/10/2010] (...) -- C:\ProgramData\KGyGaAvL.sys [2828] [MD5.F5507B742562417F194CD428AC1B9850] [SPRF][14/12/2011] (.Autodesk, Inc. - Autodesk component.) -- C:\Users\walber\AppData\Local\Temp\AcDeltree.exe [39336] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][29/02/2012] (...) -- C:\Users\walber\AppData\LocalLow\prvlcl.dat [0] [MD5.7E090632163DA5F5A5580F85A70CB984] [SPRF][20/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\walber\Desktop\ZHPDiag2.exe [5400765] [MD5.DAEE914ABCF0081AAF23689E4A8C27DD] [SPRF][14/09/2010] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.1 r85.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [2826192] ~ Scan Files in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{D50BA1A9-A75E-4939-9C6B-DE408A2E0AFF}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR.exe O87 - FAEL: "{69BCC25A-B11A-4067-8E3D-E187161116DC}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{CB3DBA98-6D83-48BE-8ACC-E6DEE42993DE}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe O87 - FAEL: "{FD81F94F-4FC6-4A28-98D5-ED8015585260}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe O87 - FAEL: "{BB7A3CBC-E89E-4E9E-A39D-F6A7C3F42AA2}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Video Main Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe O87 - FAEL: "{D41FB7EB-17EC-48AD-9934-ACF1EBA77B53}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe O87 - FAEL: "{A190996F-6DD2-4A7D-8D8A-CD1AAD66B355}" | In - None - P6 - TRUE | .(.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe O87 - FAEL: "TCP Query User{FC1A835C-839E-4FC8-BE0A-6F4B25F0A206}C:\users\walber\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" | In - Public - P6 - TRUE | .(.Octoshape ApS.) -- C:\users\walber\appdata\roaming\octoshape\octos O87 - FAEL: "UDP Query User{7B7BEC9B-EBC1-4987-82F8-7998C61D6311}C:\users\walber\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" | In - Public - P17 - TRUE | .(.Octoshape ApS.) -- C:\users\walber\appdata\roaming\octoshape\octo O87 - FAEL: "{A2AF56C6-8DB6-4E84-AE68-11086CFF1729}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{4379E54A-BCFE-4812-853A-279A7A304EBF}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{90F19BF2-DBF9-442A-84D1-501141119A67}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{67322249-DCB5-4497-B0A0-D19953C1EC22}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "TCP Query User{B11C9267-817A-48CD-95AD-03103A687292}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "UDP Query User{0FEB4C88-58EE-4B46-8EF4-254ADBDAD211}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "TCP Query User{BE4151E7-69AB-45A2-84A8-462ADBB4C0B6}C:\program files (x86)\nero\nero8\nero home\nerohome.exe" | In - Public - P6 - TRUE | .(.Nero AG - Nero Home.) -- C:\program files (x86)\nero\nero8\nero home\nerohome.exe O87 - FAEL: "UDP Query User{F0698EFB-34D4-4398-91AB-9A7FE15D76E8}C:\program files (x86)\nero\nero8\nero home\nerohome.exe" | In - Public - P17 - TRUE | .(.Nero AG - Nero Home.) -- C:\program files (x86)\nero\nero8\nero home\nerohome.exe O87 - FAEL: "{449879BD-31F4-4ADC-AE91-420C7D7257E3}" | In - None - P17 - TRUE | .(.Nokia - Nokia Ovi Suite.) -- C:\Program Files (x86)\nokia\nokia ovi suite\nokiaovisuite.exe O87 - FAEL: "{DC6DB87D-23FE-4E7E-BB37-09C592DA4611}" | In - None - P17 - TRUE | .(.Nokia Corporation - Nokia Service Layer Host Process.) -- C:\Program Files (x86)\Common Files\nokia\service layer\a\nsl_host_process.exe O87 - FAEL: "{328260C7-3374-487A-89FA-2A8811529CA2}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) O87 - FAEL: "{D0533F2F-3596-464F-9625-4E16AA36A88E}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) ~ Scan Firewall in 00mn 01s ---\\ Additionnal Scan (O88) Database Version : v2.10791 - (19/02/2013) Clés trouvées (Keys found) : 24 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 4 Fichiers trouvés (Files found) : 0 [HKLM\Software\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}] =>Adware.RecordNRip [HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] =>Adware.RecordNRip [HKLM\Software\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}] =>Adware.RecordNRip [HKLM\Software\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}] =>Adware.RecordNRip [HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}] =>Adware.RecordNRip [HKLM\Software\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}] =>Adware.RecordNRip [HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] =>Adware.RecordNRip [HKLM\Software\Wow6432Node\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] =>Adware.RecordNRip [HKCU\Software\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKCU\Software\InstallCore] =>Adware.InstallCore [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{118D6CE9-5F18-42F9-958A-14676A629FDE}] =>Adware.IMBooster [HKLM\Software\Wow6432NodeAnvSoft\OpenCandy] =>Adware.OpenCandy [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand] =>Adware.IMBooster C:\Program Files (x86)\Common Files\Umbrella =>Adware.IMBooster C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch C:\Users\walber\AppData\Local\AVG Security Toolbar =>Toolbar.AVGSearch C:\Users\walber\AppData\LocalLow\AVG Security Toolbar =>Toolbar.AVGSearch ~ Scan Additionnel in 00mn 27s ---\\ Router Hijack DNS (O89) (None) ---\\ Product Upgrade Codes (O90) O90 - PUC: "00002109020061400000000000F01FEC" . (.Pacote de Compatibilidade para o sistema Office 2007.) -- C:\Windows\Installer\{90120000-0020-0416-0000-0000000FF1CE}\O12ConvIcon.exe O90 - PUC: "046E6824BF5BFD11CAB40005650C0080" . (.Google Earth.) -- C:\Windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\ARPPRODUCTICON.exe O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe O90 - PUC: "0777980E9C642234DA44B8AFB62E712B" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E0897770-46C9-4322-AD44-8BFA6BE217B2}\ARPPRODUCTICON.exe O90 - PUC: "098990BCF5D15D11E99A0005AB3E711E" . (.PowerDirector.) -- C:\Windows\Installer\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\ARPPRODUCTICON.exe O90 - PUC: "0A5902928790461E8ED95A4A4DE3E6A0" . (.ccc-utility64.) -- C:\Windows\Installer\{292095A0-0978-E164-E89D-A5A4D43E6E0A}\ARPPRODUCTICON.exe O90 - PUC: "0E512FD2C3DB89C46861FAFE90472758" . (.Windows Live Sync.) -- C:\Windows\Installer\{2DF215E0-BD3C-4C98-8616-AFEF09747285}\FolderShare48x48.ico O90 - PUC: "1097CC45D40855143B35120FCC1921BA" . (.HP Wireless Assistant.) -- C:\Windows\Installer\{54CC7901-804D-4155-B353-21F0CC9112AB}\controlPanelIcon.exe O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "12506E88E4E158749B1F71894ADBC003" . (.HP MediaSmart SmartMenu.) -- C:\Windows\Installer\{88E60521-1E4E-4785-B9F1-1798A4BD0C30}\SmartMenuIcon O90 - PUC: "1926B5EEFE5450742AE0983A5C2D8FE7" . (.Microsoft Works.) -- C:\Windows\Installer\{EE5B6291-45EF-4705-A20E-89A3C5D2F87E}\MSWorks.exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "299A2DAF4E4158B48228AF8B8A41593B" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{FAD2A992-14E4-4B85-2882-FAB8A81495B3}\ARPPRODUCTICON.exe O90 - PUC: "2A49E8CC7C55064459C3A297100875C8" . (.LightScribe System Software.) -- C:\Windows\Installer\{CC8E94A2-55C7-4460-953C-2A790180578C}\ARPPRODUCTICON.exe O90 - PUC: "31D01AC4A38FE784B903CC79F9FEA707" . (.OviMPlatform.) -- C:\Windows\Installer\{4CA10D13-F83A-487E-9B30-CC979FEF7A70}\ARPPRODUCTICON.exe O90 - PUC: "37A86AA4C9BDD934491889C128DB00B8" . (.Nokia Connectivity Cable Driver.) -- C:\Windows\Installer\{4AA68A73-DB9C-439D-9481-981C82BD008B}\ARPPRODUCTICON.exe O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe O90 - PUC: "4024AA2AA50C310488A8DA51139392F7" . (.PC Connectivity Solution.) -- C:\Windows\Installer\{A2AA4204-C05A-4013-888A-AD153139297F}\ARPPRODUCTICON.exe O90 - PUC: "424D2ABB8D4095FDE90CD5269D836A04" . (.Catalyst Control Center Graphics Previews Vista.) -- C:\Windows\Installer\{BBA2D424-04D8-DF59-9EC0-5D62D938A640}\ARPPRODUCTICON.exe O90 - PUC: "42C6FBF1DF1C10144AB2C065F4E9E897" . (.PowerStarter.) -- C:\Windows\Installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\ARPPRODUCTICON.exe O90 - PUC: "487EA05EEBAFAD641A8FB7B665CD2BE2" . (.Microsoft Office Suite Activation Assistant.) -- C:\Windows\Installer\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}\ARPPRODUCTICON.exe O90 - PUC: "5388BB6EF9E01F0A3F799757C5039B6D" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{E6BB8835-0E9F-A0F1-F397-79755C30B9D6}\ARPPRODUCTICON.exe O90 - PUC: "59FA44F6EDC33154DAF3D6541FB73F42" . (.HP Support Assistant.) -- C:\Windows\Installer\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\ARPPRODUCTICON.exe O90 - PUC: "5F97BDFFCF4F0D4127C8A8B935C99976" . (.Catalyst Control Center Core Implementation.) -- C:\Windows\Installer\{FFDB79F5-F4FC-14D0-728C-8A9B539C9967}\ARPPRODUCTICON.exe O90 - PUC: "6007BF445F5C7F34FBE307CBA5C14775" . (.Nokia Ovi Suite.) -- C:\Windows\Installer\{44FB7006-C5F5-43F7-BF3E-70BC5A1C7457}\ARPPRODUCTICON.exe O90 - PUC: "65B5BA0971B1DCCF7E9A32BF33492E81" . (.ccc-core-static.) -- C:\Windows\Installer\{90AB5B56-1B17-FCCD-E7A9-23FB3394E218}\ARPPRODUCTICON.exe O90 - PUC: "675A038F632A6BE1936295509E8C930F" . (.Catalyst Control Center Graphics Full Existing.) -- C:\Windows\Installer\{F830A576-A236-1EB6-3926-5905E9C839F0}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA76401B7449A0300000010" . (.Adobe Reader 9.3 - Português.) -- C:\Windows\Installer\{AC76BA86-7AD7-1046-7B44-A93000000001}\SC_Reader.ico O90 - PUC: "701043F6AA9F6C745BC43C1AF91155F3" . (.Hewlett-Packard ACLM.NET v1.1.2.0.) -- C:\Windows\Installer\{6F340107-F9AA-47C6-B54C-C3A19F11553F}\ARPPRODUCTICON.exe O90 - PUC: "705D7334C335EDF4ABF2CD395E76488B" . (.HP 3D DriveGuard.) -- C:\Windows\Installer\{4337D507-533C-4FDE-BA2F-DC93E56784B8}\controlPanelIcon.exe O90 - PUC: "73FAFF12A15EBA147894CA1D9FFCE873" . (.HP QuickWeb.) -- C:\Windows\Installer\{21FFAF37-E51A-41AB-8749-ACD1F9CF8E37}\ARPPRODUCTICON.exe O90 - PUC: "778138CE222908CC6785F0CA3FBDF25A" . (.Catalyst Control Center Graphics Full New.) -- C:\Windows\Installer\{EC831877-9222-CC80-7658-0FACF3DB2FA5}\ARPPRODUCTICON.exe O90 - PUC: "782BB4BF9F7372E4C9D4D283280EE8FF" . (.HP.) -- c:\Windows\Installer\{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}\ARPPRODUCTICON.exe O90 - PUC: "809FB3DD0B6F5A54EB3D978E88D8AD39" . (.DigitalPersona Personal 4.10.) -- C:\Windows\Installer\{DD3BF908-F6B0-45A5-BED3-79E8888DDA93}\ARPPRODUCTICON.exe O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.HP.) -- c:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe O90 - PUC: "90E6267666350844F8E139AFFD05AC51" . (.MediaSmart Live TV.) -- c:\Windows\Installer\{67626E09-5366-4480-8F1E-93FADF50CA15}\ARPPRODUCTICON.exe O90 - PUC: "970DACCDC29FAD442B8526F46C15A7A5" . (.MediaSmart DVD.) -- c:\Windows\Installer\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\ARPPRODUCTICON.exe O90 - PUC: "9B52EE2B00B5FCA4490F2934C3823CE9" . (.HP.) -- c:\Windows\Installer\{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}\ARPPRODUCTICON.exe O90 - PUC: "9EC6D81181F59F2459A84176A626F9ED" . (.Iminent.) -- C:\Windows\Installer\{118D6CE9-5F18-42F9-958A-14676A629FDE}\imbooster.ico O90 - PUC: "ADBE3203B1FB13843B745E1058552FE6" . (.HP.) -- c:\Windows\Installer\{3023EBDA-BF1B-4831-B347-E5018555F26E}\ARPPRODUCTICON.exe O90 - PUC: "BA0A2B44E214C8F40B851D8EEACCFD5F" . (.PowerRecover.) -- C:\Windows\Installer\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}\ARPPRODUCTICON.exe O90 - PUC: "C55C462FB84BC445F5102EADA94234C8" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{F264C55C-B48B-544C-5F01-E2DA9A24438C}\ARPPRODUCTICON.exe O90 - PUC: "C5CF7FEB2810EDD4DBDD7F1D23BA38D3" . (.Ovi Desktop Sync Engine.) -- C:\Windows\Installer\{BEF7FC5C-0182-4DDE-BDDD-F7D132AB833D}\ARPPRODUCTICON.exe O90 - PUC: "C7D8BF048FF62FA4CBB8B0D13BA20FB4" . (.HP Advisor.) -- C:\Windows\Installer\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}\ARPPRODUCTICON.exe O90 - PUC: "C7E166BD1AC99C0AD59409266C646B4C" . (.Catalyst Control Center Graphics Light.) -- C:\Windows\Installer\{DB661E7C-9CA1-A0C9-5D49-9062C646B6C4}\ARPPRODUCTICON.exe O90 - PUC: "C971C95CD8669A946BAE1012CCCF2134" . (.LabelPrint.) -- C:\Windows\Installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\ARPPRODUCTICON.exe O90 - PUC: "D067355E7F7DFB84DBB87C2EB30AC45B" . (.MediaSmart Internet TV.) -- C:\Windows\Installer\{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "FECF7F8A6AC39EC4F8AEB81BF868680F" . (.Nokia Ovi Suite Software Updater.) -- C:\Windows\Installer\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}\ARPPRODUCTICON.exe ~ Scan Files in 00mn 00s ---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 19/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 02/03/2009 89600 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe SR - | Auto 05/08/2009 203264 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 30/10/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SS - | Demand 05/05/2009 228408 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SR - | Auto 17/07/2009 322624 | (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe SR - | Auto 280168 | (GbpSv) . (...) - C:\Program Files (x86)\GbPlugin\gbpsv.exe SS - | Auto 16/09/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 16/09/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 09/09/2011 86072 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe SR - | Auto 28/03/2011 94264 | (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe SS - | Demand 28/03/2011 799800 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SR - | Auto 08/07/2009 30520 | (hpsrv) . (.Hewlett-Packard.) - C:\Windows\System32\Hpservice.exe SR - | Auto 20/08/2009 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe SS - | Demand 13/01/2013 129976 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 03/12/2007 869672 | (Nero BackItUp Scheduler 3) . (.Nero AG.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe SS - | Demand 13/12/2007 447784 | (NMIndexingService) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe SS - | Demand 04/01/2012 718888 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe SR - | Auto 25/01/2013 2663976 | (SProtection) . (.Iminent.) - C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe SR - | Auto 25/08/2009 240640 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe SR - | Auto 03/06/2009 721712 | (vfsFPService) . (.Validity Sensors, Inc..) - C:\Windows\system32\vfsFPService.exe SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 01s ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ Scan MBR in 00mn 02s ---\\ Search Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by walber at 20/02/2013 09:22:28 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 04s End of the scan (1913 lines in 02mn 18s)(0)