~ ZHPDiag v2015.9.24.145 Par Nicolas Coolman (2015/09/24)
~ Démarré par hp (Administrator) (2015/09/25 18:13:59)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\hp\Bluetooth Software\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\hp\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows VISTA, 32-bit Service Pack 1 (Build 6001)

---\\ Navigateurs Internet (2) - 0s
MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0
MSIE: Internet Explorer v8.0.6001.18904

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : KO
Windows Activation Technologies : KO

---\\ Logiciels de protection (2) - 17s
Avira AntiVir Personal - Free Antivirus v10.0.0.135
Malwarebytes Anti-Malware version 2.1.8.1057

---\\ Surveillance de Logiciels (2) - 17s
Adobe Flash Player 11 Plugin
Adobe Reader 9 - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3111.164 MB (43% free)
~ System Restore: Activé (Enable)
~ System drive C: has 154 GB free of 293 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-DE-HP
~ User Name: hp
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 154 GB free of 293 GB (System)
~ Drive D: has 1 GB free of 11 GB

---\\ Etat du Centre de Sécurité Windows (13) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: Modified
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 4s
[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2927104] ©
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544] ©
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96768] ©
[MD5.EC3B3E6071E3FCD4290BFD42676EE064] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [916480] ©
[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Application d'ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [314880] ©
[MD5.A4F30B48E548E91D9BE728BCDB1CEDFC] - (.Microsoft Corporation - DNS DLL de l'API Client.) () -- C:\Windows\System32\dnsapi.dll [165888] ©
[MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.763E172A55177E478CB419F88FD0BA03] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [273920] ©
[MD5.9C0E70031905ADBF94EDB9EA14AF943B] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21560] ©
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70144] ©
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [67072] ©
[MD5.9E635AE5E8AD93E2B5989E2E23679F97] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [75264] ©
[MD5.C87B1EE051C0464491C1A7B03FA0BC99] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [53760] ©
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [54784] ©
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [100864] ©
[MD5.7AFC42E60432FD1014F5342F2B1B1F74] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [105984] ©
[MD5.7C5FEE5B1C5728507CD96FB4A13E7A02] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [184320] ©
[MD5.B4EFFE29EB4F15538FD8A9681108492D] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1081912] ©
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360] ©
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [76288] ©
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [248832] ©
[MD5.031E6BCD53C9B2B9ACE111EAFEC347B6] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [66560] ©
[MD5.D09276B1FAB033CE1D40DCBDF303D10F] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [71680] ©
[MD5.D8B4A53DD2769F226B3EB374374987C9] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [227896] ©

---\\ Processus lancés (56) - 8s
[MD5.ECEA2C66EBA281E9D5A5F8EA54D0630C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [724992] [PID.1136] ©
[MD5.ECEA2C66EBA281E9D5A5F8EA54D0630C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [724992] [PID.1540] ©
[MD5.6D0AC28C5BD8D8495F83F5929A45E559] - (.Hewlett-Packard Corporation - HpService.) -- C:\Windows\System32\Hpservice.exe [19456] [PID.1604] ©
[MD5.4B3E3F63726F1A456F5FD5ECF08A8719] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904] [PID.2084] ©
[MD5.1954B615CAACC4DF0F742C7FB4B8C18B] - (.Cinema Plus v6V23.07 - Cinema Plus v6V23.07 exe.) -- C:\Program Files\Cinema Plus v6V23.07\1c895bea-87f1-49b9-8fef-94dd222ff36f-1-6.exe [1408080] [PID.2124] =>PUP.Optional.CrossRider
[MD5.B6F6228AB545E2819A60C0D63A84E52E] - (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200] [PID.2192] ©
[MD5.1131F49F162539DD4834C67B4E93CD89] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1316136] [PID.2200] ©
[MD5.498A9E93BCBBB3FBCEAB2ADA3B66658E] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736] [PID.2208] ©
[MD5.7A528D9DE512182BCF7FB83D4FCE7F3B] - (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe [206120] [PID.2220] ©
[MD5.EFBC44FBD75E4F80BD927AEBF6E7EADE] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\Windows\System32\agrsmsvc.exe [13312] [PID.2260] ©
[MD5.329DC04284426D0863CD7E59A44D69D7] - (.Cinema Plus v6V23.07 - Cinema Plus v6V23.07 exe.) -- C:\Program Files\Cinema Plus v6V23.07\1c895bea-87f1-49b9-8fef-94dd222ff36f-10.exe [1568336] [PID.2412] =>PUP.Optional.CrossRider
[MD5.A168271E4AC1688C162534D412F283AE] - (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224] [PID.2456] ©
[MD5.E914628A578278D2D9204A0DF5BFC189] - (.Systweak - Right Backup.) -- C:\Program Files\Right Backup\RightBackup.exe [5235312] [PID.2480] =>PUP.Optional.Systweak
[MD5.C6BC0501ACC3F9BA67A9366567D03683] - (.Corporate Inc - winservice86 exe.) -- C:\Program Files\winservice86\b84aeba7-6e01-4cc5-aced-9ee94227dffe-1-6.exe [1408512] [PID.2532] =>PUP.Optional.CrossRider
[MD5.04A9603DE8935EA6AEF8386C8286B972] - (.APN LLC. - APN Updater.) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [201616] [PID.2564] =>Toolbar.AskBar
[MD5.739D47B026C02B3C22613B6230C526D7] - (...) -- C:\Program Files\Summer Sports\summer_sports_helper_service.exe [191692] [PID.2756]
[MD5.75EF5C0ABD3306D094B23C03BBECBDEC] - (.Corporate Inc - winservice86 exe.) -- C:\Program Files\winservice86\721bec50-90c3-42e5-9ee9-a7a3f064a495.exe [370544] [PID.2764] =>PUP.Optional.CrossRider
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.2772] ©
[MD5.6F586F9C9E365B28F1E1BE3B0E38403C] - (.Camshare Inc. - Camfrog Video Chat update service.) -- C:\Program Files\Camfrog\Camfrog Video Chat\update\cf_update_service.exe [1035768] [PID.3140]
[MD5.8069D4E65749BEB9216977FADC2AEBAE] - (.http://www.goforfiles.com/ - Go for Files Updater.) -- C:\Program Files\GoforFiles\GFFUpdater.exe [200336] [PID.3168] =>PUP.Optional.YourFileDownloader
[MD5.2C45AF6FB8AADD7959078CC1B13B1A65] - (.Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [206128] [PID.3304] ©
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040] [PID.3956] ©
[MD5.690A6DF02625A46ABEE250C6151B7FBA] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [54576] [PID.3976] ©
[MD5.692493B9136287C06DE23F7CE823FC40] - (.Hewlett-Packard - HP Wireless Assistant main program.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432] [PID.3984] ©
[MD5.E4401CF27225C1D6E664E86195978562] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152544] [PID.4016] ©
[MD5.ECD70DC099936918D97DD18D26F48A3D] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1843088] [PID.4036] =>Toolbar.AskBar
[MD5.DD65069D9D28B21F8229DB38A44FF0FB] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [966656] [PID.4044] ©
[MD5.605594217CBB8354E8775E6D5D1DCF53] - (.Copyright (C) 2014 - .) -- C:\Program Files\ver2OffersWizard\L2h.exe [348672] [PID.2640] =>PUP.Optional.OffersWizard
[MD5.F16B28FEA61F8E8D76C7D58B1E713C4C] - (.PC Utilities Software Limited - Optimizer Pro Reminder.) -- C:\Program Files\Optimizer Pro\OptProReminder.exe [862800] [PID.1480] =>PUP.Optional.OptimizerPro
[MD5.C0F348DD182ACEE1BE632931F0A91AEE] - (.Systweak - Right Backup.) -- C:\Program Files\Right Backup\RBClientService.exe [48240] [PID.3556] =>PUP.Optional.Systweak
[MD5.BC0A4D47472B042537F4E57B950415FA] - (.SoftThinks - STServices.) -- C:\Program Files\SMINST\BLService.exe [365952] [PID.808] ©
[MD5.47B0091E1F412759E77F672064C16F17] - (.Reimage® - Reimage Real Time Protection.) -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [6324208] [PID.3664] =>PUP.Optional.ReImageRepair
[MD5.83742058259DCAAEEB84E832AAEDC5BA] - (.(c) 2012-2014, All rights reserved. - .) -- C:\Windows\System32\netupdsrv.exe [190464] [PID.3932]
[MD5.B7F805AB96B759F4542594E2FC26CD0D] - (.Reimage® - Reimage System Protection.) -- C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe [5726696] [PID.3928] =>PUP.Optional.ReImageRepair
[MD5.1C31169DDDC70C1605F703DA701EAEEA] - (.Copyright 2004 - CLCapSvc Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320] [PID.3020]
[MD5.290B8C381DBC15D3DBCBD2BDB6B0BA12] - (.Copyright 2004 - CLSched Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116096] [PID.1588]
[MD5.188FF0ADF66768D53AD94F43972E1E9A] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [223232] [PID.4368] ©
[MD5.B6150B61CF0728006B79F569A3B5E519] - (...) -- C:\Windows\Temp\dgen.exe [201728] [PID.6112] =>Heuristique.Suspect
[MD5.6670985685D17C2DF6DDEC47EDE1436D] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [727592] [PID.2896] ©
[MD5.732761DFCFAD0863E216931E29C75630] - (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files\MyPC Backup\MyPC Backup.exe [838752] [PID.2992] =>PUP.Optional.MyPCBackup
[MD5.350C147D2269E227627FDAF3A9F871EE] - (.Just Develop It - Backup Stack.) -- C:\Program Files\MyPC Backup\BackupStack.exe [53320] [PID.3156] =>PUP.Optional.MyPCBackup
[MD5.93F95BFF3C560A7D83D78FC9B95DBB7B] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.2528] ©
[MD5.12E94E225BD7B05A2BCCD5C0B841E921] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [222512] [PID.168] ©
[MD5.E8A39D41474BE42FD8830CED32932D6C] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553440] [PID.1988] ©
[MD5.F28C33D2589F7B89185F3B9445641F84] - (.Copyright (c) 2005 - 2008 Hewlett-Packard Development - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe [628016] [PID.5856] ©
[MD5.57735C76C3D3D23DD95E338BE164657B] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe [1624616] [PID.5832] ©
[MD5.A19B0BB5A7EB6DF2DD4A0711D36955EE] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.5508] ©
[MD5.8EAADDB5FA93AFEA073003BC8C84D260] - (.Corporate Inc - winservice86 exe.) -- C:\Program Files\winservice86\b84aeba7-6e01-4cc5-aced-9ee94227dffe-10.exe [1350144] [PID.13696] =>PUP.Optional.CrossRider
[MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2080] ©
[MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [6554424] [PID.20596] ©
[MD5.1CE7982AA6A983F4C49A32C8D624237B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [377000] [PID.15652] ©
[MD5.A117D93042EECA4E50CF6C8EBB3E8EDA] - (.Copyright 2014 - Running tester support.) -- C:\Program Files\ver2OffersWizard\B9eG190.exe [349696] [PID.5716] =>PUP.Optional.OffersWizard
[MD5.2B145A50EE1EF53989887A711A9F2981] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [271016] [PID.12164] ©
[MD5.EB0EB16E7DC48C3D645B1E136346999B] - (.Adobe Systems, Inc. - Adobe Flash Player 11.6 r602.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe [1820016] [PID.5952] ©
[MD5.EB0EB16E7DC48C3D645B1E136346999B] - (.Adobe Systems, Inc. - Adobe Flash Player 11.6 r602.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe [1820016] [PID.11236] ©
[MD5.260B29F5BCC07C91CBA92910484BE023] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\hp\AppData\Roaming\ZHP\ZHPDiag3.exe [1938944] [PID.18892] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (3) - 0s
G2 - GCE: Preference [User Data\Default] [mngdofdiffilbijcmpgahjlgomhgehia] {background:{page:b.html}content_scripts:[{all_fra
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pgafcinpmmpklohkojmllohdhomoefph(66)] BrowserProtect =>PUP.Optional.Eazel

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (42) - 6s
M0 - MFSP: prefs.js [hp - cm0c6w1a.default] https://www.malwarebytes.org/restorebrowser/?tpid=CMG-SP3&o=APN11868&pf=V7&trgb=FF&p2=%5EBZ6%5EYYYYYY%5EBY%5EMA&gct=hp&apn_ptnrs=%5EBZ6&apn_dtid=%5EYYYYYY%5EBY%5EMA&apn_dbr=launcher.exe_0_32.0.1948.25&apn_uid=27F1F638-DED1-41C2-B84A-EADD498E5E49&itbv=12.34.1.2220&doi=2015-09-17&psv=&pt=tb
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{a8f9752d-e2b8-4e7a-86b5-499f4330e2fe}
P2 - EXT FILE: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\searchplugins\bingp.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\0SPV@Z.org
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\4jffxtbr@RadioRage_4j(102).com =>PUP.Optional.MindSpark
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\525eaf00-9712-4ce5-9c71-9aa6a175421b@gmail.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\7WRCnIK8@l.net
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\7xISF@J.org
P2 - EXT: (. - ShoppingDealFactory.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\ayoaozqggykaxqaqhg@yvdskolaouuqpz.org
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\c9rA@ZR.edu
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\Caa@RtQ.edu
P2 - EXT: (. - clearConsolepenzilcom.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\clearConsole@penzil.com
P2 - EXT: (. - Website Discovery Pro.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\discoverypro@discoverypro.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\F@C1.org
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\faststartff@gmail.com =>PUP.Optional.FastStart
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\Ggc@j.com
P2 - EXT: (.Heyoya - Heyoya.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\heyoya@heyoya.com ©
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\K@i5J.com
P2 - EXT: (. - Summer Sports.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\LLFJ7@gmail.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\ohz@fRd.org
P2 - EXT: (. - CheapCoupon.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\pbgjthxtmumkjjl@csvmsjt_nstwmjzrfzp.com
P2 - EXT: (. - CheapCoupon.) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\siilrkwdohvhty@xoeeynikeyfnc.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\sp2@WR.org
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\taylorralston@hotmail.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\V@Ejnkqj58y.com
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\W8T@R.edu
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\Y2gJx9@MaP.net
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\zyoXJ7cy@Jzq.edu
P2 - EXT: (...) -- C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_168.dll ©
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ©
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/ =>Toolbar.Ask
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} Orphean

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:14014;https=127.0.0.1:14014 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (4) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
F3 - REG:win.ini: load=

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (20)

---\\ Browser Helper Object de navigateur (BHO) (2) - 1s
O2 - BHO: TicTaCioupOn - {4B532609-A788-4C10-B57C-4B955FE7527E} . (...) -- C:\Program Files\TicTaCioupOn\LaeKDoyr5tZIA1.dll (.not file.) =>PUP.Optional.Multiplug
O2 - BHO: RROyyAlSShopperApop - {d869b70f-a95a-4016-b038-a116cf1364e0} . (...) -- C:\Program Files\RROyyAlSShopperApop\dqdX4jNbAA5nvR.dll (.not file.) =>PUP.Optional.Multiplug

---\\ Applications lancées au démarrage du système (44) - 1s
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ©
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ©
O4 - HKLM\..\Run: [DVDAgent] . (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe ©
O4 - HKLM\..\Run: [TSMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe ©
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe ©
O4 - HKLM\..\Run: [TVAgent] . (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe ©
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe ©
O4 - HKLM\..\Run: [SmartMenu] . (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ©
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe ©
O4 - HKLM\..\Run: [QlbCtrl.exe] . (.Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe ©
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe ©
O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe ©
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe ©
O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe ©
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe ©
O4 - HKLM\..\Run: [WirelessAssistant] . (.Hewlett-Packard - HP Wireless Assistant main program.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe ©
O4 - HKLM\..\Run: [BillproProtect] C:\Billpro\ProtectClient.exe (.not file.)
O4 - HKLM\..\Run: [NWEReboot] (Orphean)
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe ©
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe ©
O4 - HKLM\..\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.AskBar
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (.not file.)
O4 - HKCU\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe ©
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©
O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKCU\..\Run: [Speech Recognition] . (.Microsoft Corporation - Reconnaissance vocale.) -- C:\Windows\Speech\Common\sapisvr.exe ©
O4 - HKCU\..\Run: [ares] C:\Program Files\Ares\Ares.exe (.not file.)
O4 - HKCU\..\Run: [UMService] C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe (.not file.)
O4 - HKCU\..\Run: [Camfrog] . (.Camshare, Inc. - Camfrog Video Chat.) -- C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (.not file.)
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe ©
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [Speech Recognition] . (.Microsoft Corporation - Reconnaissance vocale.) -- C:\Windows\Speech\Common\sapisvr.exe ©
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [ares] C:\Program Files\Ares\Ares.exe (.not file.)
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [UMService] C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe (.not file.)
O4 - HKUS\S-1-5-21-762683276-988834597-3537399130-1000\..\Run: [Camfrog] . (.Camshare, Inc. - Camfrog Video Chat.) -- C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe

---\\ Raccourcis Global Startup (2) - 4s
O4 - GS\CommonDesktop [Public]: PC Scan & Repair by Reimage.lnk . (.Reimage® - Reimage Downloader.) C:\Program Files\Reimage\Reimage Repair\ReimageRepair.exe =>PUP.Optional.ReImageRepair
O4 - GS\CommonDesktop [Public]: Right Backup.lnk . (.Systweak - Right Backup.) C:\Program Files\Right Backup\RightBackup.exe =>PUP.Optional.Systweak

---\\ Modification Domaine/Adresses DNS (3) - 1s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel (27) - 0s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll ©
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll ©
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Common Files\microsoft shared\Web Components\10\OWC10.DLL ©
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Common Files\microsoft shared\Web Components\11\OWC11.DLL ©
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL ©

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll (.not file.) =>PUP.Optional.SearchProtect

---\\ Liste des services NT non Microsoft et non désactivés (19) - 3s
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.Agere Systems - Agere Soft Modem Call Progress Service.) - C:\Windows\System32\agrsmsvc.exe ©
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Service de mise à jour Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\System32\Ati2evxx.exe ©
O23 - Service: Camfrog Update Service (camfrog_update_service) . (.Camshare Inc. - Camfrog Video Chat update service.) - C:\Program Files\Camfrog\Camfrog Video Chat\update\cf_update_service.exe
O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe ©
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Corporation - HpService.) - C:\Windows\System32\Hpservice.exe ©
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: OffersWizard (OffersWizard) . (.Copyright 2014 - Running tester support.) - C:\Program Files\ver2OffersWizard\B9eG190.exe =>PUP.Optional.OffersWizard
O23 - Service: RBClientService (RBClientService) . (.Systweak - Right Backup.) - C:\Program Files\Right Backup\RBClientService.exe =>PUP.Optional.Systweak
O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.SoftThinks - STServices.) - C:\Program Files\SMINST\BLService.exe ©
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage® - Reimage Real Time Protection.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>PUP.Optional.ReImageRepair
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe ©
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) . (.Copyright 2004 - CLCapSvc Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) . (.Copyright 2004 - CLSched Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
O23 - Service: Power Control [2009/07/24 03:41:07] ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.CyberLink Corp. - .) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl ©

---\\ Logiciels installés (82) - 23s
O42 - Logiciel: Package de pilotes Windows - ENE (enecir) HIDClass (09/04/2008 2.6.0.0) - (.ENE.) [HKLM] -- 7DE39862CC26DCE2446838AAF7CD5C163F835A57 ©
O42 - Logiciel: Right Backup - (.Systweak Software.) [HKLM] -- 980124D4-3D52-4c2d-AD41-9E90BDF4C031_Systweak_Ri~01F2B2E8_is1 =>PUP.Optional.Systweak
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin ©
O42 - Logiciel: Agere Systems HDA Modem - (.Agere Systems.) [HKLM] -- Agere Systems Soft Modem ©
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus v10.0.0.135 - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Borland C++ 5.02 - (...) [HKLM] -- Borland C++ 5.02
O42 - Logiciel: Camfrog Video Chat 6.11 - (.Camshare, Inc..) [HKLM] -- Camfrog
O42 - Logiciel: Deeal - (.Kreapixel inc..) [HKLM] -- Deeal =>PUP.Optional.Deeal
O42 - Logiciel: Heyoya - (.Heyoya LTD..) [HKLM] -- Heyoya
O42 - Logiciel: HSDPA USB MODEM version 4.112 - (...) [HKLM] -- HSDPA USB MODEM ALCATEL_is1
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15} ©
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E} ©
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: K-Lite Mega Codec Pack 3.4.5 - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Lotus NotesSQL 2.06 driver - (...) [HKLM] -- Lotus NotesSQL 2.06 driver
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService ©
O42 - Logiciel: Microsoft VM for Java - (...) [HKLM] -- MsJavaVM
O42 - Logiciel: Notepad++ - (...) [HKLM] -- Notepad++
O42 - Logiciel: Optimizer Pro v3.2 - (.PC Utilities Software Limited.) [HKLM] -- Optimizer Pro_is1 =>PUP.Optional.OptimizerPro
O42 - Logiciel: PC Data App - (...) [HKLM] -- PCData App
O42 - Logiciel: Reimage Repair - (.Reimage.) [HKLM] -- Reimage Repair =>PUP.Optional.ReImageRepair
O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM] -- SearchProtect =>PUP.Optional.SearchProtect
O42 - Logiciel: Shareware.Pro-FR Toolbar - (...) [HKLM] -- Shareware.Pro-FR Toolbar
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey ©
O42 - Logiciel: System Speedup - (.systemspeedup.com.) [HKLM] -- System Speedup_is1 =>PUP.Optional.SystemSpeedup
O42 - Logiciel: VLC media player 1.0.1 - (.VideoLAN Team.) [HKLM] -- VLC media player ©
O42 - Logiciel: We-Blocker - (...) [HKLM] -- WeBlocker
O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: HP Help and Support - (.Hewlett-Packard Company.) [HKLM] -- {0054A0F6-00C9-4498-B821-B5C9578F433E} ©
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology 6.0.1.6204 - (.HP.) [HKLM] -- {03D1988F-469F-4843-8E6E-E5FE9D17889D} ©
O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {154A4184-1A3D-4BF9-A5AE-4FA1660445F3} ©
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {187817E2-6407-461C-B59B-56CE73363D34} ©
O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4} ©
O42 - Logiciel: Skype™ 6.21 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} ©
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} ©
O42 - Logiciel: JMicron JMB38X Flash Media Controller Driver - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C} ©
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} ©
O42 - Logiciel: Macromedia Flash 8 - (.Macromedia.) [HKLM] -- {2BD5C305-1B27-4D41-B690-7A61172D2FEB} ©
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App © =>.WildTangent
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} ©
O42 - Logiciel: HP Quick Launch Buttons 6.40 L1 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} ©
O42 - Logiciel: HP User Guides 0126 - (.Hewlett-Packard.) [HKLM] -- {36E90C09-EB23-4EAC-8B47-12C0CA5DBD3A} ©
O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} ©
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710} ©
O42 - Logiciel: Macromedia Extension Manager - (.Nom de votre société.) [HKLM] -- {3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {47F36D92-E58E-456D-B73C-3382737E4C42} ©
O42 - Logiciel: SAGEM F@st 800-840 - (.SAGEM.) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F} ©
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {57A5AEC1-97FC-474D-92C4-908FCC2253D4} ©
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2} ©
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} ©
O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- {67626E09-5366-4480-8F1E-93FADF50CA15} ©
O42 - Logiciel: HP Common Access Service Library - (.Hewlett-Packard.) [HKLM] -- {732A3F80-008B-4350-BD58-EC5AE98707B8} ©
O42 - Logiciel: Crystal Reports - (.Seagate Software, Inc..) [HKLM] -- {7699B723-9718-41DE-8C18-549F341C02CE}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: PowerPlugs: Template Finder for PowerPoint - (...) [HKLM] -- {873F3340-3C79-41D1-9D2C-D0B2269CBF24}
O42 - Logiciel: Macromedia Flash Player 8 - (.Macromedia.) [HKLM] -- {885A63EA-382B-4DD4-A755-14809B8557D6} ©
O42 - Logiciel: Macromedia Flash 8 Video Encoder - (.Macromedia.) [HKLM] -- {8BF2C401-02CE-424D-BC26-6C4F9FB446B6} ©
O42 - Logiciel: Mobile Connection Manager - (...) [HKLM] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D}
O42 - Logiciel: HP Total Care Setup - (.Hewlett-Packard Company.) [HKLM] -- {95A747E0-DF19-46CB-A622-20A0107201BD} ©
O42 - Logiciel: ProtectSmart Hard Drive Protection - (.Hewlett-Packard.) [HKLM] -- {9D615069-AA8F-4E89-AE9D-77AAE90F529F} ©
O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM] -- {A7AC8E69-01FF-494E-9A2C-423B82CEA604} ©
O42 - Logiciel: globalupdate Helper - (.globalupdate Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001} ©
O42 - Logiciel: fix version 1.0.0.0 - (...) [HKLM] -- {ACA88935-7188-47AD-B220-B50106DC0D9C}_is1
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11} ©
O42 - Logiciel: ping version 1 - (...) [HKLM] -- {AF0A2DEF-898C-4FB5-82D2-3AFE8147C81B}_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {B0261E53-B6F1-474A-864B-E7C3CBF468E0} ©
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E} ©
O42 - Logiciel: LuicokyCoouponi - (."".) [HKLM] -- {BA5D43C9-D633-D0EC-CFEA-2ABA974B333D} =>PUP.Optional.Multiplug
O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF} ©
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {E5E29403-3D25-40C6-892B-F9FEE2A95585} ©
O42 - Logiciel: Internet Explorer Toolbar 4.9 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM] -- {F4E33CE5-A7AB-4F68-A7E7-F0AA84EF2D9E} =>PUP.Optional.SweetIM
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} ©

---\\ HKCU & HKLM Software Keys (188) - 23s
HKLM\SOFTWARE\5855d78be53fbf14 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\Agere
HKLM\SOFTWARE\ALWIL Software
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\America Online
HKLM\SOFTWARE\Analog Devices
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Avira
HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Borland
HKLM\SOFTWARE\Camfrog
HKLM\SOFTWARE\Caphyon
HKLM\SOFTWARE\Cinema Plus v6V23.07-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\City Interactive
HKLM\SOFTWARE\Client
HKLM\SOFTWARE\Codec tweak Tool
HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\CrystalGraphics
HKLM\SOFTWARE\Cyberlink
HKLM\SOFTWARE\Debug
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\EasyBits
HKLM\SOFTWARE\ErrorLists-crcodedownloader =>PUP.Optional.CrossRider
HKLM\SOFTWARE\ESET
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\GoforFiles
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\Hewlett-Packard
HKLM\SOFTWARE\Hewlett-Packard Company
HKLM\SOFTWARE\HP
HKLM\SOFTWARE\HPQ
HKLM\SOFTWARE\Huawei technologies
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KasperskyLab
HKLM\SOFTWARE\KLCodecPack
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\LightScribe
HKLM\SOFTWARE\LogMeInRescueCallingCard
HKLM\SOFTWARE\Lotus
HKLM\SOFTWARE\LphcmModem
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\MapInfo
HKLM\SOFTWARE\MimarSinan
HKLM\SOFTWARE\Mobile Connection Manager
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\Notepad++
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\P2G_Upgrade
HKLM\SOFTWARE\PCDataApp
HKLM\SOFTWARE\PowerPlugs
HKLM\SOFTWARE\RealNetworks
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\SAGEM
HKLM\SOFTWARE\Seagate Software
HKLM\SOFTWARE\Shareware.Pro-FR
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SourceCodeControlProvider
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\System Speedup =>PUP.Optional.SystemSpeedup
HKLM\SOFTWARE\systweak =>PUP.Optional.Systweak
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\troll
HKLM\SOFTWARE\TSMSTV_Upgrade
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Widcomm
HKLM\SOFTWARE\WinRAR
HKLM\SOFTWARE\winservice86-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\WinU
HKLM\SOFTWARE\WOW6432Node
HKLM\SOFTWARE\X-AVCSD
HKCU\SOFTWARE\5855d78be53fbf14 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\AC3filter
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\ALWIL Software
HKCU\SOFTWARE\Anvsoft
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\ATI Technologies Inc.
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\BasicScript Program Settings
HKCU\SOFTWARE\Binary Noise
HKCU\SOFTWARE\Borland
HKCU\SOFTWARE\Camfrog
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\Condut
HKCU\SOFTWARE\CoreVorbis
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\DSP-worx
HKCU\SOFTWARE\EasyBits
HKCU\SOFTWARE\ESET
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\GoforFiles
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GSpot Appliance Corp
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HaaliMkx
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\IM
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\LG Electronics
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LightScribe
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LogMeInRescueCallingCard
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\MainConcept (Muvee)
HKCU\SOFTWARE\MainConcept (Muvee2)
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Norton
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PC SOFT
HKCU\SOFTWARE\PCDataApp
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\reimagerepair =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\Seagate Software
HKCU\SOFTWARE\Shareware.Pro-FR
HKCU\SOFTWARE\shockwave.com
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\SOBYSOFT
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\System Speedup =>PUP.Optional.SystemSpeedup
HKCU\SOFTWARE\systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\TEST
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\Widcomm
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\MB_temp
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Toolbar
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\GenericAddon
HKCU\SOFTWARE\AppDataLow\Software\Heyoya
HKCU\SOFTWARE\AppDataLow\Software\Macromedia
HKCU\SOFTWARE\AppDataLow\Software\Monitored
HKCU\SOFTWARE\AppDataLow\Software\settings
HKCU\SOFTWARE\AppDataLow\Software\Shareware.Pro-FR
HKCU\SOFTWARE\AppDataLow\Software\Smartbar =>PUP.Optional.SmartBar

---\\ Contenu des dossiers Programmes (649) - 49s
O43 - CFD: 2009/01/24 01:57:30 - [] D -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 2009/01/24 02:00:27 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2010/05/25 18:57:32 - [] D -- C:\Program Files\Alwil Software
O43 - CFD: 2013/02/02 20:20:59 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2011/06/30 12:17:12 - [] D -- C:\Program Files\Apple Software Update(6)
O43 - CFD: 2015/09/17 18:04:19 - [] D -- C:\Program Files\AskPartnerNetwork =>Toolbar.AskBar
O43 - CFD: 2009/07/24 00:59:47 - [] D -- C:\Program Files\ATI
O43 - CFD: 2009/07/24 01:01:15 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 2013/12/25 13:50:53 - [] D -- C:\Program Files\Avira
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\BeTtterPriceChec =>PUP.Optional.Multiplug
O43 - CFD: 2011/06/30 12:04:04 - [] D -- C:\Program Files\Bonjour(7)
O43 - CFD: 2009/12/07 09:28:37 - [] D -- C:\Program Files\BORLAND
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\BugDigger
O43 - CFD: 2014/11/21 23:21:46 - [] D -- C:\Program Files\BuyingPal
O43 - CFD: 2015/09/17 18:01:43 - [] D -- C:\Program Files\Camfrog
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\Chinese English Dictionary
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\chooosuetowin
O43 - CFD: 2015/09/25 17:54:22 - [] D -- C:\Program Files\Cinema Plus v6V23.07 =>PUP.Optional.CrossRider
O43 - CFD: 2010/10/16 17:14:47 - [] D -- C:\Program Files\ClickPotatoLite =>PUP.Optional.ClickPotato
O43 - CFD: 2015/09/17 19:36:56 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2015/09/25 17:54:31 - [0] D -- C:\Program Files\ConduitEngine
O43 - CFD: 2013/12/25 13:43:21 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 2013/12/27 20:30:21 - [] D -- C:\Program Files\DAP
O43 - CFD: 2015/09/25 17:54:52 - [0] D -- C:\Program Files\Deeal =>PUP.Optional.Deeal
O43 - CFD: 2009/07/24 01:02:36 - [] D -- C:\Program Files\DIFX
O43 - CFD: 2015/09/25 17:54:33 - [] D -- C:\Program Files\DiVapton =>PUP.Optional.DiVapton
O43 - CFD: 2015/09/25 17:54:22 - [0] D -- C:\Program Files\dowwnlioadiTkeep =>PUP.Optional.Multiplug
O43 - CFD: 2014/04/11 20:25:58 - [] D -- C:\Program Files\DVDVideoSoft
O43 - CFD: 2010/06/25 23:27:23 - [] D -- C:\Program Files\EasyPHP-5.3.2i
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\Effective Measure Community Plugin
O43 - CFD: 2010/10/15 19:24:16 - [] D -- C:\Program Files\ESET
O43 - CFD: 2009/11/20 09:51:55 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2015/09/25 17:28:19 - [] D -- C:\Program Files\FlaashCCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\FLasuhCOOupooni =>PUP.Optional.Multiplug
O43 - CFD: 2014/07/01 14:49:37 - [] D -- C:\Program Files\FreePhoneLine
O43 - CFD: 2015/09/25 17:54:37 - [0] D -- C:\Program Files\GeniusXXAddon
O43 - CFD: 2014/09/16 13:29:24 - [] D -- C:\Program Files\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/09/25 18:10:15 - [] D -- C:\Program Files\GoforFiles =>PUP.Optional.YourFileDownloader
O43 - CFD: 2014/06/26 20:13:49 - [] D -- C:\Program Files\Google
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\Grand Theft Auto GTA 2013
O43 - CFD: 2009/07/24 01:49:38 - [] D -- C:\Program Files\Hewlett-Packard
O43 - CFD: 2009/01/24 00:59:42 - [] D -- C:\Program Files\Hewlett-Packard Company
O43 - CFD: 2014/03/24 21:05:10 - [] D -- C:\Program Files\Heyoya
O43 - CFD: 2013/01/24 13:53:58 - [] D -- C:\Program Files\HP
O43 - CFD: 2014/06/27 21:53:42 - [] D -- C:\Program Files\HP Games
O43 - CFD: 2010/03/25 14:09:57 - [] D -- C:\Program Files\HSDPA USB MODEM
O43 - CFD: 2012/01/02 21:16:42 - [] D -- C:\Program Files\HSPA USB MODEM
O43 - CFD: 2014/07/01 14:53:39 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2009/07/24 01:05:26 - [] D -- C:\Program Files\Intel
O43 - CFD: 2013/12/27 20:34:32 - [] D -- C:\Program Files\Internet Download Manager
O43 - CFD: 2011/04/08 22:08:37 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2014/06/27 21:48:21 - [] D -- C:\Program Files\Internet Mobile
O43 - CFD: 2013/12/25 13:22:15 - [] D -- C:\Program Files\Internet Mobile+
O43 - CFD: 2013/12/11 10:40:50 - [] D -- C:\Program Files\iPod
O43 - CFD: 2013/05/21 10:28:28 - [] D -- C:\Program Files\iPod(17)
O43 - CFD: 2012/12/18 23:58:04 - [] D -- C:\Program Files\iPod(242)
O43 - CFD: 2011/06/30 12:14:13 - [] D -- C:\Program Files\iPod(27)
O43 - CFD: 2013/12/11 10:43:36 - [] D -- C:\Program Files\iTunes
O43 - CFD: 2013/05/21 10:29:57 - [] D -- C:\Program Files\iTunes(18)
O43 - CFD: 2012/12/18 23:59:41 - [] D -- C:\Program Files\iTunes(243)
O43 - CFD: 2011/06/30 12:16:05 - [] D -- C:\Program Files\iTunes(28)
O43 - CFD: 2010/11/04 16:57:32 - [] D -- C:\Program Files\Java
O43 - CFD: 2009/12/02 16:28:48 - [] D -- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 2013/04/18 12:30:59 - [] D -- C:\Program Files\Kaspersky Lab
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\KeingCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\KiingCOupooun =>PUP.Optional.Multiplug
O43 - CFD: 2011/07/03 15:02:54 - [] D -- C:\Program Files\LG Connection Manager
O43 - CFD: 2014/07/01 14:45:44 - [] D -- C:\Program Files\LG Electronics
O43 - CFD: 2015/09/25 17:24:37 - [] D -- C:\Program Files\Lonely Evidence
O43 - CFD: 2015/09/25 17:54:22 - [0] D -- C:\Program Files\LucKyShoipper =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:22 - [0] D -- C:\Program Files\LuckyShoppeR =>PUP.Optional.Multiplug
O43 - CFD: 2015/03/06 18:36:17 - [] D -- C:\Program Files\LuicokyCoouponi =>PUP.Optional.Multiplug
O43 - CFD: 2009/12/04 15:46:27 - [] D -- C:\Program Files\Macromedia
O43 - CFD: 2015/09/25 16:02:22 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2010/06/21 22:16:43 - [] D -- C:\Program Files\MapInfo MapX
O43 - CFD: 2006/11/02 12:37:34 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2010/06/26 17:36:52 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2010/12/01 20:09:15 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2009/12/01 22:30:31 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2010/06/26 17:27:12 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 2010/06/26 17:27:12 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2013/12/11 10:43:36 - [] D -- C:\Program Files\Mobile Connection Manager
O43 - CFD: 2013/12/30 22:03:14 - [] D -- C:\Program Files\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 2010/03/10 17:06:15 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 2015/09/25 17:09:43 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/07/07 00:48:06 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2006/11/02 12:37:34 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2010/06/22 03:18:23 - [] D -- C:\Program Files\MSECache
O43 - CFD: 2009/12/04 12:19:14 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\My theme for Google
O43 - CFD: 2015/09/25 17:54:38 - [] D -- C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 2014/06/27 21:44:43 - [0] D -- C:\Program Files\Nosibay =>PUP.Optional.SPointer
O43 - CFD: 2010/06/13 20:44:27 - [] D -- C:\Program Files\Notepad++
O43 - CFD: 2010/06/21 22:18:35 - [] D -- C:\Program Files\NotesSQL
O43 - CFD: 2009/11/20 09:55:05 - [] RD -- C:\Program Files\Online Services
O43 - CFD: 2015/09/17 21:41:22 - [] D -- C:\Program Files\Opera
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\Optimizer Pro =>PUP.Optional.OptimizerPro
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\PCDApp
O43 - CFD: 2010/06/21 23:37:40 - [] D -- C:\Program Files\PowerPlugs
O43 - CFD: 2013/09/17 18:58:57 - [] D -- C:\Program Files\Prolific
O43 - CFD: 2014/07/01 14:49:04 - [] D -- C:\Program Files\Publication Web
O43 - CFD: 2013/12/12 00:41:43 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 2006/11/02 12:37:34 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2015/04/07 23:26:11 - [] D -- C:\Program Files\Reimage =>PUP.Optional.ReImageRepair
O43 - CFD: 2015/02/27 23:15:20 - [] D -- C:\Program Files\Right Backup =>PUP.Optional.Systweak
O43 - CFD: 2010/09/20 22:21:54 - [] RHD -- C:\Program Files\rnamfler
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\Rock Hand
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\RoyaalCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\RoyalCoupOn =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\RoyaLShoppeRoApp =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\RoyyalCeoupon =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\RROyyAlSShopperApop =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\RuoYalCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2010/01/14 11:48:54 - [] D -- C:\Program Files\SAGEM
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\SAlEsMagnEt =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\Saveornet =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\SavierPro =>PUP.Optional.Multiplug
O43 - CFD: 2010/06/21 22:15:59 - [] D -- C:\Program Files\Seagate Software
O43 - CFD: 2013/11/06 18:19:26 - [] D -- C:\Program Files\SearchNewTab =>PUP.Optional.FastSaveApp
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\Shareware.Pro-FR
O43 - CFD: 2010/10/16 17:14:29 - [] D -- C:\Program Files\ShopperReports3 =>PUP.Optional.ShopperReports
O43 - CFD: 2014/04/11 20:19:27 - [0] D -- C:\Program Files\SiteFinder =>PUP.Optional.ShoppingReport
O43 - CFD: 2014/10/15 23:25:12 - [] RD -- C:\Program Files\Skype
O43 - CFD: 2009/11/20 09:55:51 - [] D -- C:\Program Files\SMINST
O43 - CFD: 2015/09/25 17:54:50 - [0] D -- C:\Program Files\Softonic_France =>PUP.Optional.Softonic
O43 - CFD: 2015/06/01 19:54:26 - [] D -- C:\Program Files\Summer Sports
O43 - CFD: 2013/11/06 18:18:33 - [] D -- C:\Program Files\surf aannd keiep =>PUP.Optional.Multiplug
O43 - CFD: 2014/03/24 21:06:10 - [] D -- C:\Program Files\SweetIM =>PUP.Optional.SweetIM
O43 - CFD: 2015/09/25 17:27:12 - [0] D -- C:\Program Files\sweetpacks bundle uninstaller =>PUP.Optional.SweetIM
O43 - CFD: 2009/07/24 01:01:45 - [] D -- C:\Program Files\Synaptics
O43 - CFD: 2015/09/25 16:13:49 - [] D -- C:\Program Files\System Speedup =>PUP.Optional.SystemSpeedup
O43 - CFD: 2009/12/25 13:45:11 - [0] D -- C:\Program Files\TeamViewer
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\TicTaCioupOn =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:51 - [0] D -- C:\Program Files\TicTaCoupoN =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\TiicTaCoupoan =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:43 - [] D -- C:\Program Files\Time Warp
O43 - CFD: 2006/11/02 13:01:55 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2010/10/02 19:03:52 - [] D -- C:\Program Files\Veetle
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\Program Files\ver2OffersWizard =>PUP.Optional.OffersWizard
O43 - CFD: 2009/12/02 16:29:28 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2009/07/24 01:08:13 - [] D -- C:\Program Files\WIDCOMM
O43 - CFD: 2014/06/27 21:51:25 - [] D -- C:\Program Files\WildTangent Games
O43 - CFD: 2009/01/24 08:51:44 - [] D -- C:\Program Files\Windows Calendar
O43 - CFD: 2009/01/24 08:51:44 - [] D -- C:\Program Files\Windows Collaboration
O43 - CFD: 2009/01/24 08:51:43 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2009/01/24 08:51:43 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2009/12/01 16:24:01 - [] D -- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2010/05/19 13:12:29 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2009/12/04 13:03:10 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2009/11/20 09:51:55 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2009/01/24 08:51:43 - [] D -- C:\Program Files\Windows Photo Gallery
O43 - CFD: 2009/11/20 09:55:04 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2012/03/18 14:03:56 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/09/25 17:54:22 - [] D -- C:\Program Files\winservice86 =>PUP.Optional.CrossRider
O43 - CFD: 2015/09/25 17:54:27 - [0] D -- C:\Program Files\WinServices =>Trojan.Inject.RRE
O43 - CFD: 2012/03/11 15:17:43 - [] D -- C:\Program Files\XBMC
O43 - CFD: 2009/07/24 01:08:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2008/01/21 02:43:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/09/25 17:54:32 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector =>PUP.Optional.AdvancedSystemProtector
O43 - CFD: 2010/04/18 02:42:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
O43 - CFD: 2012/03/18 14:02:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
O43 - CFD: 2009/12/07 09:28:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Borland C++ 5.02
O43 - CFD: 2009/07/24 01:01:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2010/06/21 22:18:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crystal Reports Tools
O43 - CFD: 2010/06/25 23:27:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyPHP 5.3.2i
O43 - CFD: 2008/01/21 02:42:47 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades
O43 - CFD: 2014/03/24 21:09:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
O43 - CFD: 2014/06/27 21:51:25 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/01/24 13:54:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2011/08/06 13:37:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Games
O43 - CFD: 2010/03/25 14:10:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HSDPA USB MODEM
O43 - CFD: 2013/12/11 10:43:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2009/12/02 16:28:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 2009/12/04 15:47:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
O43 - CFD: 2006/11/02 12:56:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/09/25 16:02:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2010/06/26 17:28:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2009/12/01 22:31:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 6.0
O43 - CFD: 2009/12/04 12:25:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
O43 - CFD: 2009/11/28 22:57:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile Connection Manager
O43 - CFD: 2014/06/27 21:53:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My HP Games
O43 - CFD: 2010/06/13 20:44:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2009/11/20 09:55:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
O43 - CFD: 2015/09/25 17:54:49 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 =>PUP.Optional.OptimizerPro
O43 - CFD: 2010/06/21 23:37:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPlugs
O43 - CFD: 2009/01/24 02:15:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
O43 - CFD: 2015/04/07 23:25:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair =>PUP.Optional.ReImageRepair
O43 - CFD: 2015/02/27 23:13:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Right Backup =>PUP.Optional.Systweak
O43 - CFD: 2010/01/14 11:52:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAGEM F@st 800-840
O43 - CFD: 2009/11/20 09:55:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Services en ligne
O43 - CFD: 2014/10/15 23:25:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2010/06/15 00:01:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlideshowZilla
O43 - CFD: 2011/03/02 19:39:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast
O43 - CFD: 2014/07/01 14:52:45 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2006/11/02 12:37:34 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2012/03/18 14:03:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2012/03/18 14:03:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/12/11 10:43:41 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2010/10/16 17:14:47 - [0] D -- C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
O43 - CFD: 2013/02/24 18:24:45 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2010/07/03 16:13:19 - [0] D -- C:\ProgramData\Alwil Software
O43 - CFD: 2015/09/17 18:04:01 - [] D -- C:\ProgramData\APN =>Toolbar.Ask
O43 - CFD: 2011/04/08 22:15:50 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2011/04/08 22:10:05 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2006/11/02 13:02:03 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/09/17 18:04:18 - [] D -- C:\ProgramData\AskPartnerNetwork =>Toolbar.YahooPartner
O43 - CFD: 2009/07/24 02:02:04 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2012/02/21 17:53:00 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2013/02/12 21:57:57 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2013/10/01 19:43:57 - [] D -- C:\ProgramData\BetterSoft =>PUP.Optional.Offerware
O43 - CFD: 2014/04/26 09:41:54 - [] D -- C:\ProgramData\BlueStacks
O43 - CFD: 2009/11/20 09:51:55 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/09/17 18:01:49 - [] D -- C:\ProgramData\Camfrog Update
O43 - CFD: 2015/09/25 17:53:42 - [0] D -- C:\ProgramData\ChampionDeals =>PUP.Optional.ChampionDeals
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\CLickFouraSalae =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:27 - [0] D -- C:\ProgramData\ClickPotatoLiteSA =>PUP.Optional.ClickPotato
O43 - CFD: 2015/09/25 17:53:42 - [0] D -- C:\ProgramData\CouponFactor
O43 - CFD: 2014/01/05 11:07:58 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\daownloaditkeeep =>PUP.Optional.Multiplug
O43 - CFD: 2014/06/27 21:48:12 - [] D -- C:\ProgramData\DatacardService
O43 - CFD: 2006/11/02 13:02:03 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2006/11/02 13:02:03 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/10/01 19:43:12 - [] D -- C:\ProgramData\Downlooad keeper
O43 - CFD: 2015/01/19 16:49:55 - [] D -- C:\ProgramData\eefe22e248cc6478
O43 - CFD: 2013/12/10 21:11:21 - [] D -- C:\ProgramData\eSafe =>PUP.Optional.eSafeSecurity
O43 - CFD: 2009/11/24 20:08:33 - [] D -- C:\ProgramData\EscapeTheMuseum
O43 - CFD: 2010/10/15 19:25:08 - [] D -- C:\ProgramData\ESET
O43 - CFD: 2009/11/20 09:51:55 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2006/11/02 13:02:03 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2015/08/11 19:47:40 - [] D -- C:\ProgramData\fkjhgccejoehjdmdolhfpfefaoogcmda
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\FlashCouupoone =>PUP.Optional.Multiplug
O43 - CFD: 2009/07/24 01:56:06 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2013/12/27 20:34:21 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 2013/11/06 18:19:21 - [] D -- C:\ProgramData\InstallMate =>PUP.Optional.Tarma
O43 - CFD: 2010/05/31 23:23:03 - [] D -- C:\ProgramData\InstallShield
O43 - CFD: 2014/03/08 14:48:37 - [] D -- C:\ProgramData\Internet Mobile
O43 - CFD: 2009/11/24 16:03:40 - [] D -- C:\ProgramData\LightScribe
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\LuuuckeyShopper =>PUP.Optional.Multiplug
O43 - CFD: 2009/12/04 15:46:27 - [] D -- C:\ProgramData\Macromedia
O43 - CFD: 2015/09/25 16:02:17 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2013/02/24 18:02:05 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2009/11/20 09:51:55 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/07/07 01:08:44 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2014/11/26 23:45:56 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2009/11/20 09:51:55 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2013/11/17 14:33:51 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/08/03 19:52:52 - [] D -- C:\ProgramData\MSScanAppDataDir
O43 - CFD: 2010/04/27 16:59:07 - [] D -- C:\ProgramData\muvee Technologies
O43 - CFD: 2009/12/01 12:41:50 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2009/01/24 01:01:23 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2015/09/25 17:53:42 - [0] D -- C:\ProgramData\OnlineLowDeals =>PUP.Optional.OnlineLowDeals
O43 - CFD: 2009/11/24 17:23:29 - [] D -- C:\ProgramData\PlayFirst
O43 - CFD: 2009/12/02 16:28:46 - [0] D -- C:\ProgramData\Real
O43 - CFD: 2015/04/07 23:26:26 - [] D -- C:\ProgramData\Reimage Protector =>PUP.Optional.ReImageRepair
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\SaverPro =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:42 - [] D -- C:\ProgramData\SaverrPro =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:54:27 - [0] D -- C:\ProgramData\SearchNewTab =>PUP.Optional.FastSaveApp
O43 - CFD: 2015/09/25 17:53:42 - [0] D -- C:\ProgramData\SharkManCoupon =>PUP.Optional.Multiplug
O43 - CFD: 2015/09/25 17:53:42 - [0] D -- C:\ProgramData\ShoppingDealFactory
O43 - CFD: 2014/10/15 23:25:06 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2015/09/25 17:54:50 - [0] D -- C:\ProgramData\SoftCoup =>PUP.Optional.Multiplug
O43 - CFD: 2013/12/27 20:27:37 - [] D -- C:\ProgramData\SpeedBit
O43 - CFD: 2006/11/02 13:02:03 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/10/01 19:44:14 - [] D -- C:\ProgramData\SummerSoft
O43 - CFD: 2010/11/04 16:58:54 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2013/11/06 18:18:35 - [] D -- C:\ProgramData\surf aannd keiep =>PUP.Optional.Multiplug
O43 - CFD: 2009/11/24 15:42:53 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2015/05/22 17:21:39 - [] D -- C:\ProgramData\Systweak =>PUP.Optional.Systweak
O43 - CFD: 2009/07/24 01:55:11 - [] D -- C:\ProgramData\Temp
O43 - CFD: 2006/11/02 13:02:04 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2014/06/27 21:53:37 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2011/04/23 13:27:40 - [] D -- C:\ProgramData\WindSolutions
O43 - CFD: 2013/11/06 18:19:21 - [] D -- C:\ProgramData\WinterSoft
O43 - CFD: 2009/01/24 01:57:31 - [] D -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
O43 - CFD: 2011/04/08 22:12:13 - [] D -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 2014/03/04 18:22:21 - [0] D -- C:\ProgramData\䌐$䀀$浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/15 01:48:15 - [0] D -- C:\ProgramData\䌐)䀀)浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/08 15:14:01 - [0] D -- C:\ProgramData\䌐+䀀+浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/22 10:50:08 - [0] D -- C:\ProgramData\䌐,䀀,浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/24 10:45:38 - [0] D -- C:\ProgramData\䌐-䀀-浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/11 22:51:44 - [0] D -- C:\ProgramData\䌐.䀀.浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/24 09:48:39 - [0] D -- C:\ProgramData\䌐0䀀0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/27 15:50:05 - [0] D -- C:\ProgramData\䌐2䀀2浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/26 23:27:31 - [0] D -- C:\ProgramData\䌐3䀀3浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/04 17:37:33 - [0] D -- C:\ProgramData\䌐4䀀4浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/11 19:47:27 - [0] D -- C:\ProgramData\䌐6䀀6浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/28 11:30:43 - [0] D -- C:\ProgramData\䌐7䀀7浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/30 08:50:23 - [0] D -- C:\ProgramData\䌐;䀀;浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/23 14:23:19 - [0] D -- C:\ProgramData\䌐=䀀=浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/22 14:18:49 - [0] D -- C:\ProgramData\䌐H䀀H浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/31 22:43:25 - [0] D -- C:\ProgramData\䌐I䀀I浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/05 20:13:45 - [0] D -- C:\ProgramData\䌐s䀀s浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/11 21:28:12 - [0] D -- C:\ProgramData\䌐u䀀u浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/24 21:30:01 - [0] D -- C:\ProgramData\䌐X䀀X浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/03 11:54:04 - [0] D -- C:\ProgramData\䌐z䀀z浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/19 12:09:39 - [0] D -- C:\ProgramData\䌐{䀀{浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/07 11:29:23 - [0] D -- C:\ProgramData\䌐}䀀}浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/13 22:44:16 - [0] D -- C:\ProgramData\䌐䀀浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/14 10:08:26 - [0] D -- C:\ProgramData\䌐䀀浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/17 11:25:36 - [0] D -- C:\ProgramData\䌐ƒ䀀ƒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/11 11:42:13 - [0] D -- C:\ProgramData\䌐‡䀀‡浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/16 14:36:20 - [0] D -- C:\ProgramData\䌐ˆ䀀ˆ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/25 14:04:04 - [0] D -- C:\ProgramData\䌐‹䀀‹浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/14 10:46:09 - [0] D -- C:\ProgramData\䌐Œ䀀Œ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/12 16:23:58 - [0] D -- C:\ProgramData\䌐䀀浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/22 15:19:59 - [0] D -- C:\ProgramData\䌐Ž䀀Ž浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/20 21:27:17 - [0] D -- C:\ProgramData\䌐䀀浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/19 22:31:31 - [0] D -- C:\ProgramData\䌐䀀浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/25 11:36:56 - [0] D -- C:\ProgramData\䌐’䀀’浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/04 11:38:58 - [0] D -- C:\ProgramData\䌐—䀀—浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/26 12:55:14 - [0] D -- C:\ProgramData\䌐˜䀀˜浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/29 10:53:54 - [0] D -- C:\ProgramData\䌐œ䀀œ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/18 14:41:26 - [0] D -- C:\ProgramData\䌐Ÿ䀀Ÿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/01 21:21:43 - [0] D -- C:\ProgramData\䌐¡䀀¡浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/28 00:15:54 - [0] D -- C:\ProgramData\䌐£䀀£浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/13 12:14:54 - [0] D -- C:\ProgramData\䌐¥䀀¥浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/31 13:11:04 - [0] D -- C:\ProgramData\䌐©䀀©浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/17 17:39:02 - [0] D -- C:\ProgramData\䌐¬䀀¬浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/23 00:34:18 - [0] D -- C:\ProgramData\䌐²䀀²浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/01 16:05:38 - [0] D -- C:\ProgramData\䌐´䀀´浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/05 21:14:34 - [0] D -- C:\ProgramData\䌐¶䀀¶浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/23 18:12:50 - [0] D -- C:\ProgramData\䌐½䀀½浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/25 09:39:23 - [0] D -- C:\ProgramData\䌐ä䀀ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/26 12:45:14 - [0] D -- C:\ProgramData\䌐É䀀É浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/30 12:06:03 - [0] D -- C:\ProgramData\䌐Ì䀀Ì浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/16 08:43:23 - [0] D -- C:\ProgramData\䌐î䀀î浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/12 15:53:33 - [0] D -- C:\ProgramData\䌐ò䀀ò浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/10 21:21:38 - [0] D -- C:\ProgramData\䌐Ó䀀Ó浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/23 16:55:03 - [0] D -- C:\ProgramData\䌐ô䀀ô浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/21 11:36:57 - [0] D -- C:\ProgramData\䌐ø䀀ø浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/12 09:57:58 - [0] D -- C:\ProgramData\䌐ù䀀ù浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/06 22:11:40 - [0] D -- C:\ProgramData\䌐ú䀀ú浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/23 19:24:10 - [0] D -- C:\ProgramData\䌐û䀀û浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/10 16:01:52 - [0] D -- C:\ProgramData\䌐ü䀀ü浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/26 12:52:55 - [0] D -- C:\ProgramData\䌐Ā䀀Ā浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/07 21:39:45 - [0] D -- C:\ProgramData\䌐ă䀀ă浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/24 02:12:01 - [0] D -- C:\ProgramData\䌐ą䀀ą浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/08 15:24:37 - [0] D -- C:\ProgramData\䌐Ĉ䀀Ĉ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/10 13:54:07 - [0] D -- C:\ProgramData\䌐Ċ䀀Ċ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/27 22:42:24 - [0] D -- C:\ProgramData\䌐č䀀č浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/22 13:57:13 - [0] D -- C:\ProgramData\䌐đ䀀đ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/07 18:30:31 - [0] D -- C:\ProgramData\䌐ē䀀ē浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/04/15 19:21:45 - [0] D -- C:\ProgramData\䌐ĕ䀀ĕ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/20 19:56:51 - [0] D -- C:\ProgramData\䌐Ė䀀Ė浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/16 21:07:08 - [0] D -- C:\ProgramData\䌐ō䀀ō浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/13 19:39:23 - [0] D -- C:\ProgramData\䌐Ŏ䀀Ŏ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/27 09:55:00 - [0] D -- C:\ProgramData\䌐ŧ䀀ŧ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/23 15:11:49 - [0] D -- C:\ProgramData\䌐ų䀀ų浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/07 18:37:15 - [0] D -- C:\ProgramData\䌐Ŷ䀀Ŷ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/18 10:40:42 - [0] D -- C:\ProgramData\䌐Ź䀀Ź浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/22 20:10:09 - [0] D -- C:\ProgramData\䌐ǝ䀀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/26 10:05:31 - [0] D -- C:\ProgramData\䌐Ƙ䀀Ƙ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/04 15:05:40 - [0] D -- C:\ProgramData\䌐Ƨ䀀Ƨ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/09 19:53:52 - [0] D -- C:\ProgramData\䌐Ʈ䀀Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/06 18:25:40 - [0] D -- C:\ProgramData\䌐Ʊ䀀Ʊ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/03 15:17:26 - [0] D -- C:\ProgramData\䌐Ƴ䀀Ƴ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/24 23:35:16 - [0] D -- C:\ProgramData\䌐Ƶ䀀Ƶ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/24 22:30:49 - [0] D -- C:\ProgramData\䌐Ʒ䀀Ʒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/20 18:09:15 - [0] D -- C:\ProgramData\䌐ƻ䀀ƻ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/05 11:52:45 - [0] D -- C:\ProgramData\䌐ƽ䀀ƽ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/10 13:47:47 - [0] D -- C:\ProgramData\䌐ǀ䀀ǀ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/08 18:03:12 - [0] D -- C:\ProgramData\䌐ǁ䀀ǁ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/15 10:51:15 - [0] D -- C:\ProgramData\䌐ǂ䀀ǂ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/07 13:53:14 - [0] D -- C:\ProgramData\䌐ǃ䀀ǃ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/29 18:50:13 - [0] D -- C:\ProgramData\䌐dž䀀dž浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/17 15:35:02 - [0] D -- C:\ProgramData\䌐lj䀀lj浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/24 21:19:57 - [0] D -- C:\ProgramData\䌐Lj䀀Lj浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/26 13:09:58 - [0] D -- C:\ProgramData\䌐nj䀀nj浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/09 21:43:14 - [0] D -- C:\ProgramData\䌐Nj䀀Nj浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/30 21:09:18 - [0] D -- C:\ProgramData\䌐Ǐ䀀Ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/17 18:37:03 - [0] D -- C:\ProgramData\䌐ǒ䀀ǒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/03 12:29:21 - [0] D -- C:\ProgramData\䌐Ǔ䀀Ǔ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/26 12:14:20 - [0] D -- C:\ProgramData\䌐Ǖ䀀Ǖ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/29 14:27:54 - [0] D -- C:\ProgramData\䌐Ǘ䀀Ǘ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/26 13:23:32 - [0] D -- C:\ProgramData\䌐ǚ䀀ǚ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/06 13:54:09 - [0] D -- C:\ProgramData\䌐ǜ䀀ǜ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/23 17:43:33 - [0] D -- C:\ProgramData\䌐ǟ䀀ǟ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/11 17:18:49 - [0] D -- C:\ProgramData\䌐Ǡ䀀Ǡ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/10 21:09:12 - [0] D -- C:\ProgramData\䌐ǣ䀀ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/12 11:01:25 - [0] D -- C:\ProgramData\䌐ǥ䀀ǥ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/31 13:43:14 - [0] D -- C:\ProgramData\䌐ǧ䀀ǧ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/30 12:34:59 - [0] D -- C:\ProgramData\䌐ǩ䀀ǩ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/24 18:07:52 - [0] D -- C:\ProgramData\䌐ǫ䀀ǫ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/25 17:03:34 - [0] D -- C:\ProgramData\䌐ǭ䀀ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/09 11:23:41 - [0] D -- C:\ProgramData\䌐ǯ䀀ǯ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/22 17:26:42 - [0] D -- C:\ProgramData\䌐dz䀀dz浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/29 19:40:15 - [0] D -- C:\ProgramData\䌐Ǵ䀀Ǵ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/05/02 10:21:33 - [0] D -- C:\ProgramData\䌐Ƕ䀀Ƕ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/06 19:48:47 - [0] D -- C:\ProgramData\䌐ƿ䀀ƿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/08 18:27:41 - [0] D -- C:\ProgramData\䌐Ǹ䀀Ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/02/06 18:40:38 - [0] D -- C:\ProgramData\䌐Ǻ䀀Ǻ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/01/23 15:39:25 - [0] D -- C:\ProgramData\䌐Ǿ䀀Ǿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/25 11:23:51 - [0] D -- C:\ProgramData\䌐ȅ䀀ȅ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/03/04 00:21:35 - [0] D -- C:\ProgramData\䌐ȍ䀀ȍ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/02/24 18:02:11 - [0] D -- C:\ProgramData\䐘ǔ䃈ǔ0
O43 - CFD: 2014/06/25 01:01:05 - [0] D -- C:\ProgramData\䒐-䉐-浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/26 19:49:24 - [0] D -- C:\ProgramData\䒐Ž䉐Ž浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/24 23:00:15 - [0] D -- C:\ProgramData\䒐—䉐—浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/26 23:31:10 - [0] D -- C:\ProgramData\䒐é䉐é浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/25 23:40:47 - [0] D -- C:\ProgramData\䒐ǝ䉐ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/27 10:45:25 - [0] D -- C:\ProgramData\䒐ƫ䉐ƫ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/25 12:06:52 - [0] D -- C:\ProgramData\䒐Ǐ䉐Ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/26 22:08:08 - [0] D -- C:\ProgramData\䒐ƿ䉐ƿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2014/06/27 21:27:59 - [0] D -- C:\ProgramData\䒐ȏ䉐ȏ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/19 21:09:10 - [0] D -- C:\ProgramData\䖘 䍘 浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/09 21:03:28 - [0] D -- C:\ProgramData\䖘!䍘!浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/03 02:28:40 - [0] D -- C:\ProgramData\䖘%䍘%浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/21 10:38:29 - [0] D -- C:\ProgramData\䖘)䍘)浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/28 21:59:44 - [0] D -- C:\ProgramData\䖘+䍘+浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/27 21:59:26 - [0] D -- C:\ProgramData\䖘,䍘,浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/03 20:11:21 - [0] D -- C:\ProgramData\䖘-䍘-浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/17 16:58:43 - [0] D -- C:\ProgramData\䖘0䍘0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/02/26 22:40:27 - [0] D -- C:\ProgramData\䖘2䍘2浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/02/24 22:06:54 - [0] D -- C:\ProgramData\䖘4䍘4浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/25 18:34:58 - [0] D -- C:\ProgramData\䖘6䍘6浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/27 12:33:37 - [0] D -- C:\ProgramData\䖘7䍘7浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/12/11 11:54:32 - [0] D -- C:\ProgramData\䖘C䍘C浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/03 10:43:07 - [0] D -- C:\ProgramData\䖘I䍘I浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/25 12:46:52 - [0] D -- C:\ProgramData\䖘O䍘O浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/14 21:40:31 - [0] D -- C:\ProgramData\䖘}䍘}浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/23 14:13:10 - [0] D -- C:\ProgramData\䖘€䍘€浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/29 22:55:51 - [0] D -- C:\ProgramData\䖘䍘浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/17 17:28:04 - [0] D -- C:\ProgramData\䖘ƒ䍘ƒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/07/29 01:50:15 - [0] D -- C:\ProgramData\䖘…䍘…浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/07/31 02:23:44 - [0] D -- C:\ProgramData\䖘ˆ䍘ˆ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/06/26 22:40:52 - [0] D -- C:\ProgramData\䖘Š䍘Š浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/05 22:51:04 - [0] D -- C:\ProgramData\䖘䍘浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/10 17:53:34 - [0] D -- C:\ProgramData\䖘Ž䍘Ž浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/06 22:02:39 - [0] D -- C:\ProgramData\䖘’䍘’浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/22 18:20:04 - [0] D -- C:\ProgramData\䖘•䍘•浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/13 18:39:06 - [0] D -- C:\ProgramData\䖘—䍘—浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/26 11:32:43 - [0] D -- C:\ProgramData\䖘™䍘™浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/20 14:09:28 - [0] D -- C:\ProgramData\䖘š䍘š浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/28 14:31:57 - [0] D -- C:\ProgramData\䖘Ÿ䍘Ÿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/07 21:59:40 - [0] D -- C:\ProgramData\䖘 䍘 浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/06 17:31:34 - [0] D -- C:\ProgramData\䖘¡䍘¡浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/28 15:21:50 - [0] D -- C:\ProgramData\䖘­䍘­浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/06 20:31:48 - [0] D -- C:\ProgramData\䖘®䍘®浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/15 10:57:40 - [0] D -- C:\ProgramData\䖘±䍘±浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/26 13:30:31 - [0] D -- C:\ProgramData\䖘³䍘³浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/21 17:07:22 - [0] D -- C:\ProgramData\䖘´䍘´浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/07 22:39:48 - [0] D -- C:\ProgramData\䖘¾䍘¾浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/15 18:53:51 - [0] D -- C:\ProgramData\䖘Â䍘Â浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/06/24 21:39:53 - [0] D -- C:\ProgramData\䖘ã䍘ã浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/04 10:07:50 - [0] D -- C:\ProgramData\䖘å䍘å浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/17 21:42:01 - [0] D -- C:\ProgramData\䖘Æ䍘Æ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/22 14:15:24 - [0] D -- C:\ProgramData\䖘è䍘è浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/19 13:14:23 - [0] D -- C:\ProgramData\䖘ê䍘ê浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/18 12:23:37 - [0] D -- C:\ProgramData\䖘í䍘í浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/29 22:40:56 - [0] D -- C:\ProgramData\䖘Ð䍘Ð浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/21 18:08:48 - [0] D -- C:\ProgramData\䖘ñ䍘ñ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/27 22:03:44 - [0] D -- C:\ProgramData\䖘ó䍘ó浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/07/26 12:07:38 - [0] D -- C:\ProgramData\䖘õ䍘õ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/17 00:41:50 - [0] D -- C:\ProgramData\䖘ø䍘ø浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/12 17:28:00 - [0] D -- C:\ProgramData\䖘ù䍘ù浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/30 16:32:46 - [0] D -- C:\ProgramData\䖘ú䍘ú浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/02/25 22:07:12 - [0] D -- C:\ProgramData\䖘Þ䍘Þ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/17 23:19:53 - [0] D -- C:\ProgramData\䖘ā䍘ā浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/30 19:31:01 - [0] D -- C:\ProgramData\䖘Ă䍘Ă浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/22 12:53:58 - [0] D -- C:\ProgramData\䖘ą䍘ą浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/03 14:45:22 - [0] D -- C:\ProgramData\䖘ĉ䍘ĉ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/21 15:39:16 - [0] D -- C:\ProgramData\䖘Ċ䍘Ċ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/21 15:06:19 - [0] D -- C:\ProgramData\䖘č䍘č浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/13 21:42:38 - [0] D -- C:\ProgramData\䖘Đ䍘Đ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/02 22:01:17 - [0] D -- C:\ProgramData\䖘Ĕ䍘Ĕ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/13 23:43:32 - [0] D -- C:\ProgramData\䖘ě䍘ě浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/30 21:41:05 - [0] D -- C:\ProgramData\䖘Ĩ䍘Ĩ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/23 19:08:05 - [0] D -- C:\ProgramData\䖘Ō䍘Ō浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/30 21:12:35 - [0] D -- C:\ProgramData\䖘ŏ䍘ŏ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/09 22:46:52 - [0] D -- C:\ProgramData\䖘ŕ䍘ŕ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/28 15:02:33 - [0] D -- C:\ProgramData\䖘ř䍘ř浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/20 16:07:25 - [0] D -- C:\ProgramData\䖘ś䍘ś浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/21 21:56:49 - [0] D -- C:\ProgramData\䖘ş䍘ş浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/13 14:09:08 - [0] D -- C:\ProgramData\䖘ţ䍘ţ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/12 22:25:32 - [0] D -- C:\ProgramData\䖘ū䍘ū浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/26 20:40:01 - [0] D -- C:\ProgramData\䖘Ɓ䍘Ɓ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/18 23:33:02 - [0] D -- C:\ProgramData\䖘ǝ䍘ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/04 20:06:08 - [0] D -- C:\ProgramData\䖘Ƥ䍘Ƥ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/21 13:26:07 - [0] D -- C:\ProgramData\䖘ƨ䍘ƨ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/10 22:40:00 - [0] D -- C:\ProgramData\䖘ƪ䍘ƪ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/01 19:42:48 - [0] D -- C:\ProgramData\䖘Ʈ䍘Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/11/19 20:48:52 - [0] D -- C:\ProgramData\䖘Ʊ䍘Ʊ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/02 21:30:50 - [0] D -- C:\ProgramData\䖘ƴ䍘ƴ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/18 13:25:53 - [0] D -- C:\ProgramData\䖘ƶ䍘ƶ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/06 01:02:30 - [0] D -- C:\ProgramData\䖘Ʒ䍘Ʒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/18 16:23:09 - [0] D -- C:\ProgramData\䖘ƺ䍘ƺ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/02/27 11:29:33 - [0] D -- C:\ProgramData\䖘ƻ䍘ƻ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/22 18:39:33 - [0] D -- C:\ProgramData\䖘ƽ䍘ƽ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/31 22:22:57 - [0] D -- C:\ProgramData\䖘ƾ䍘ƾ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/12 21:50:40 - [0] D -- C:\ProgramData\䖘ǁ䍘ǁ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/25 22:11:23 - [0] D -- C:\ProgramData\䖘ǂ䍘ǂ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/25 11:24:37 - [0] D -- C:\ProgramData\䖘ǃ䍘ǃ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/17 01:07:15 - [0] D -- C:\ProgramData\䖘dž䍘dž浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/06 12:55:15 - [0] D -- C:\ProgramData\䖘LJ䍘LJ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/14 21:44:50 - [0] D -- C:\ProgramData\䖘NJ䍘NJ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/09/26 18:10:17 - [0] D -- C:\ProgramData\䖘Nj䍘Nj浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/25 00:49:22 - [0] D -- C:\ProgramData\䖘ǎ䍘ǎ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/31 13:38:08 - [0] D -- C:\ProgramData\䖘ǐ䍘ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/20 17:50:24 - [0] D -- C:\ProgramData\䖘ǒ䍘ǒ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/09 17:06:06 - [0] D -- C:\ProgramData\䖘ǔ䍘ǔ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/11 11:11:29 - [0] D -- C:\ProgramData\䖘ǖ䍘ǖ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/06 09:58:39 - [0] D -- C:\ProgramData\䖘Ǘ䍘Ǘ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/18 11:56:56 - [0] D -- C:\ProgramData\䖘Ǚ䍘Ǚ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/11 22:32:35 - [0] D -- C:\ProgramData\䖘Ǜ䍘Ǜ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/05 12:09:24 - [0] D -- C:\ProgramData\䖘Ǟ䍘Ǟ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/01 15:47:05 - [0] D -- C:\ProgramData\䖘Ǡ䍘Ǡ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/06 15:19:25 - [0] D -- C:\ProgramData\䖘Ǣ䍘Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/18 15:23:29 - [0] D -- C:\ProgramData\䖘Ǥ䍘Ǥ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/04 10:17:02 - [0] D -- C:\ProgramData\䖘ǧ䍘ǧ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/06/29 11:44:05 - [0] D -- C:\ProgramData\䖘Ǩ䍘Ǩ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/24 16:07:04 - [0] D -- C:\ProgramData\䖘ǫ䍘ǫ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/13 23:31:00 - [0] D -- C:\ProgramData\䖘Ǭ䍘Ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/08/05 18:36:01 - [0] D -- C:\ProgramData\䖘Ǯ䍘Ǯ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/07 00:02:47 - [0] D -- C:\ProgramData\䖘ǰ䍘ǰ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/26 18:17:15 - [0] D -- C:\ProgramData\䖘dz䍘dz浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/10 22:18:02 - [0] D -- C:\ProgramData\䖘Dz䍘Dz浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/01 21:37:44 - [0] D -- C:\ProgramData\䖘Ǵ䍘Ǵ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/05/21 09:59:01 - [0] D -- C:\ProgramData\䖘Ƿ䍘Ƿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/27 22:54:53 - [0] D -- C:\ProgramData\䖘ǹ䍘ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/21 00:19:58 - [0] D -- C:\ProgramData\䖘ǽ䍘ǽ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/17 18:46:56 - [0] D -- C:\ProgramData\䖘ǿ䍘ǿ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/05 15:22:55 - [0] D -- C:\ProgramData\䖘Ȁ䍘Ȁ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/10/01 19:29:40 - [0] D -- C:\ProgramData\䖘Ȃ䍘Ȃ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/04/02 11:49:38 - [0] D -- C:\ProgramData\䖘Ȏ䍘Ȏ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/21 23:32:14 - [0] D -- C:\ProgramData\䖘Ȕ䍘Ȕ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2013/03/25 13:15:34 - [0] D -- C:\ProgramData\䖘Ț䍘Ț浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰㠲尵瑦潣普杩椮楮
O43 - CFD: 2009/12/28 13:48:42 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2013/12/11 10:43:30 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Program Files\Common Files\Config
O43 - CFD: 2009/12/01 22:28:39 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2014/04/11 20:25:31 - [] D -- C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 2010/05/31 23:23:00 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2010/11/04 16:58:52 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2009/12/04 15:47:25 - [] D -- C:\Program Files\Common Files\Macromedia
O43 - CFD: 2010/06/26 17:28:47 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2006/11/02 11:18:33 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2014/10/15 23:25:10 - [] D -- C:\Program Files\Common Files\Skype
O43 - CFD: 2006/11/02 11:18:33 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2013/12/27 20:18:54 - [] D -- C:\Program Files\Common Files\SpeedBit
O43 - CFD: 2010/06/26 17:27:07 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2009/12/01 15:40:02 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 2009/12/05 11:31:09 - [] D -- C:\Users\hp\AppData\Roaming\Adobe
O43 - CFD: 2014/07/02 14:43:08 - [0] D -- C:\Users\hp\AppData\Roaming\Advanced System Protector =>PUP.Optional.AdvancedSystemProtector
O43 - CFD: 2012/12/19 00:02:29 - [] D -- C:\Users\hp\AppData\Roaming\Apple Computer
O43 - CFD: 2009/11/20 09:56:20 - [] D -- C:\Users\hp\AppData\Roaming\ATI
O43 - CFD: 2012/02/21 17:58:43 - [] D -- C:\Users\hp\AppData\Roaming\Avira
O43 - CFD: 2013/02/12 21:57:57 - [] D -- C:\Users\hp\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/09/25 17:54:32 - [0] D -- C:\Users\hp\AppData\Roaming\betadeeal =>PUP.Optional.Deeal
O43 - CFD: 2015/09/25 14:11:03 - [] D -- C:\Users\hp\AppData\Roaming\Camfrog
O43 - CFD: 2010/10/16 17:14:47 - [0] D -- C:\Users\hp\AppData\Roaming\ClickPotatoLite =>PUP.Optional.ClickPotato
O43 - CFD: 2009/12/24 15:59:00 - [] D -- C:\Users\hp\AppData\Roaming\CyberLink
O43 - CFD: 2014/01/22 20:01:47 - [] D -- C:\Users\hp\AppData\Roaming\DMCache
O43 - CFD: 2014/02/16 12:02:46 - [] D -- C:\Users\hp\AppData\Roaming\dvdcss
O43 - CFD: 2014/04/11 20:26:14 - [] D -- C:\Users\hp\AppData\Roaming\DVDVideoSoft
O43 - CFD: 2013/02/12 21:58:04 - [] D -- C:\Users\hp\AppData\Roaming\GoforFiles =>PUP.Optional.YourFileDownloader
O43 - CFD: 2009/11/20 09:56:39 - [] D -- C:\Users\hp\AppData\Roaming\hewlett-packard
O43 - CFD: 2009/11/20 09:55:08 - [] D -- C:\Users\hp\AppData\Roaming\HP TCS
O43 - CFD: 2013/01/03 19:05:27 - [] D -- C:\Users\hp\AppData\Roaming\HpUpdate
O43 - CFD: 2009/11/20 09:55:45 - [] D -- C:\Users\hp\AppData\Roaming\Identities
O43 - CFD: 2013/12/27 20:34:45 - [] D -- C:\Users\hp\AppData\Roaming\IDM
O43 - CFD: 2013/10/02 19:36:15 - [] D -- C:\Users\hp\AppData\Roaming\iFunbox_UserCache
O43 - CFD: 2010/01/14 11:48:52 - [] D -- C:\Users\hp\AppData\Roaming\InstallShield
O43 - CFD: 2011/07/03 15:02:54 - [0] D -- C:\Users\hp\AppData\Roaming\LG Connection Manager
O43 - CFD: 2009/12/04 16:00:02 - [] D -- C:\Users\hp\AppData\Roaming\Macromedia
O43 - CFD: 2010/02/04 21:41:00 - [] D -- C:\Users\hp\AppData\Roaming\Magic Academy
O43 - CFD: 2006/11/02 12:37:34 - [0] D -- C:\Users\hp\AppData\Roaming\Media Center Programs
O43 - CFD: 2009/12/09 12:48:05 - [] D -- C:\Users\hp\AppData\Roaming\Media Player Classic
O43 - CFD: 2014/11/26 23:46:05 - [] SD -- C:\Users\hp\AppData\Roaming\Microsoft
O43 - CFD: 2014/11/27 23:30:38 - [] D -- C:\Users\hp\AppData\Roaming\Mozilla
O43 - CFD: 2010/12/11 18:50:56 - [] D -- C:\Users\hp\AppData\Roaming\muvee Technologies
O43 - CFD: 2015/09/25 17:54:49 - [] D -- C:\Users\hp\AppData\Roaming\newnext.me =>PUP.Optional.NextLive
O43 - CFD: 2014/06/27 21:44:41 - [0] D -- C:\Users\hp\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
O43 - CFD: 2013/12/11 10:43:45 - [] D -- C:\Users\hp\AppData\Roaming\Notepad++
O43 - CFD: 2015/09/17 18:07:29 - [] D -- C:\Users\hp\AppData\Roaming\Opera Software
O43 - CFD: 2013/10/01 19:54:18 - [] D -- C:\Users\hp\AppData\Roaming\Optimizer Pro =>PUP.Optional.OptimizerPro
O43 - CFD: 2010/07/14 20:21:03 - [0] D -- C:\Users\hp\AppData\Roaming\PeerNetworking
O43 - CFD: 2009/11/24 17:23:29 - [] D -- C:\Users\hp\AppData\Roaming\PlayFirst
O43 - CFD: 2010/01/31 00:03:29 - [] D -- C:\Users\hp\AppData\Roaming\Real
O43 - CFD: 2015/02/27 23:15:26 - [0] D -- C:\Users\hp\AppData\Roaming\rightbackup
O43 - CFD: 2010/10/16 17:14:29 - [0] D -- C:\Users\hp\AppData\Roaming\ShopperReports3 =>PUP.Optional.ShopperReports
O43 - CFD: 2015/09/17 18:03:49 - [] D -- C:\Users\hp\AppData\Roaming\Shortcut
O43 - CFD: 2014/04/11 20:18:49 - [0] D -- C:\Users\hp\AppData\Roaming\SimilarSites =>PUP.Optional.SimilarSites
O43 - CFD: 2015/09/20 01:35:24 - [] D -- C:\Users\hp\AppData\Roaming\Skype
O43 - CFD: 2013/10/01 19:44:52 - [] D -- C:\Users\hp\AppData\Roaming\SkypEmoticons
O43 - CFD: 2013/03/05 00:07:28 - [] D -- C:\Users\hp\AppData\Roaming\skypePM
O43 - CFD: 2013/12/27 20:27:37 - [] D -- C:\Users\hp\AppData\Roaming\SpeedBit
O43 - CFD: 2010/05/13 13:59:52 - [] D -- C:\Users\hp\AppData\Roaming\SPORE Creature Creator
O43 - CFD: 2012/07/25 00:52:40 - [0] RSHD -- C:\Users\hp\AppData\Roaming\sys
O43 - CFD: 2015/09/25 15:01:41 - [] D -- C:\Users\hp\AppData\Roaming\System Speedup =>PUP.Optional.SystemSpeedup
O43 - CFD: 2015/05/21 18:18:57 - [] D -- C:\Users\hp\AppData\Roaming\systweak =>PUP.Optional.Systweak
O43 - CFD: 2009/12/24 15:05:51 - [0] D -- C:\Users\hp\AppData\Roaming\TeamViewer
O43 - CFD: 2010/03/03 16:31:28 - [0] D -- C:\Users\hp\AppData\Roaming\Template
O43 - CFD: 2015/08/30 00:15:05 - [] D -- C:\Users\hp\AppData\Roaming\vlc
O43 - CFD: 2015/09/25 17:54:51 - [] D -- C:\Users\hp\AppData\Roaming\webssearches =>PUP.Optional.WebsSearches
O43 - CFD: 2014/04/26 09:41:01 - [] D -- C:\Users\hp\AppData\Roaming\WildTangent
O43 - CFD: 2011/04/23 13:28:10 - [] D -- C:\Users\hp\AppData\Roaming\WindSolutions
O43 - CFD: 2010/03/17 16:53:03 - [] D -- C:\Users\hp\AppData\Roaming\WinRAR
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Users\hp\AppData\Roaming\winservices =>Trojan.Inject.RRE
O43 - CFD: 2015/09/25 14:01:45 - [] D -- C:\Users\hp\AppData\Roaming\wp_update =>PUP.Optional.WpManager
O43 - CFD: 2012/03/12 23:37:14 - [] D -- C:\Users\hp\AppData\Roaming\XBMC
O43 - CFD: 2015/09/25 18:14:44 - [] D -- C:\Users\hp\AppData\Roaming\ZHP
O43 - CFD: 2015/07/24 01:30:16 - [] D -- C:\Users\hp\AppData\Local\%PRODUCTNAME%
O43 - CFD: 2015/09/25 17:53:56 - [] D -- C:\Users\hp\AppData\Local\909
O43 - CFD: 2014/12/03 22:48:57 - [] D -- C:\Users\hp\AppData\Local\Adobe
O43 - CFD: 2011/04/08 22:06:06 - [] D -- C:\Users\hp\AppData\Local\Apple
O43 - CFD: 2011/04/08 22:13:11 - [] D -- C:\Users\hp\AppData\Local\Apple Computer
O43 - CFD: 2009/11/20 09:52:12 - [0] SHD -- C:\Users\hp\AppData\Local\Application Data
O43 - CFD: 2013/02/12 22:05:14 - [] D -- C:\Users\hp\AppData\Local\Ares
O43 - CFD: 2015/09/17 21:41:19 - [] D -- C:\Users\hp\AppData\Local\AskPartnerNetwork =>Toolbar.AskBar
O43 - CFD: 2009/11/20 09:56:20 - [] D -- C:\Users\hp\AppData\Local\ATI
O43 - CFD: 2013/09/24 21:06:46 - [] D -- C:\Users\hp\AppData\Local\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2013/12/30 22:03:14 - [] D -- C:\Users\hp\AppData\Local\cache
O43 - CFD: 2015/09/17 18:03:47 - [] D -- C:\Users\hp\AppData\Local\Camfrog
O43 - CFD: 2014/03/24 21:08:28 - [] D -- C:\Users\hp\AppData\Local\Conduit
O43 - CFD: 2015/09/17 18:03:40 - [] D -- C:\Users\hp\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 2010/04/27 16:58:38 - [] D -- C:\Users\hp\AppData\Local\CyberLink
O43 - CFD: 2010/07/03 18:24:05 - [] D -- C:\Users\hp\AppData\Local\ESET
O43 - CFD: 2013/12/12 16:19:39 - [] D -- C:\Users\hp\AppData\Local\Facebook
O43 - CFD: 2015/08/26 22:17:13 - [] D -- C:\Users\hp\AppData\Local\Follow Builder
O43 - CFD: 2014/06/26 20:13:33 - [] D -- C:\Users\hp\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2010/05/25 19:04:34 - [] D -- C:\Users\hp\AppData\Local\Google
O43 - CFD: 2011/07/27 23:37:04 - [] D -- C:\Users\hp\AppData\Local\Hewlett-Packard
O43 - CFD: 2009/11/20 09:52:12 - [0] SHD -- C:\Users\hp\AppData\Local\Historique
O43 - CFD: 2013/10/01 19:43:06 - [] D -- C:\Users\hp\AppData\Local\iexplorer
O43 - CFD: 2013/02/24 18:03:49 - [] D -- C:\Users\hp\AppData\Local\Macromedia
O43 - CFD: 2014/07/02 14:39:27 - [] D -- C:\Users\hp\AppData\Local\Microsoft
O43 - CFD: 2013/03/06 15:22:51 - [] D -- C:\Users\hp\AppData\Local\Microsoft Games
O43 - CFD: 2014/11/26 23:46:03 - [] D -- C:\Users\hp\AppData\Local\Microsoft Help
O43 - CFD: 2013/12/31 13:42:09 - [] D -- C:\Users\hp\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 2009/12/09 17:53:04 - [] D -- C:\Users\hp\AppData\Local\Mozilla
O43 - CFD: 2015/09/17 18:07:34 - [] D -- C:\Users\hp\AppData\Local\Opera Software
O43 - CFD: 2010/04/27 16:58:37 - [] D -- C:\Users\hp\AppData\Local\PowerCinema
O43 - CFD: 2009/12/02 16:28:46 - [0] D -- C:\Users\hp\AppData\Local\Real
O43 - CFD: 2014/03/24 21:09:33 - [] D -- C:\Users\hp\AppData\Local\Skype
O43 - CFD: 2015/09/25 18:13:48 - [] D -- C:\Users\hp\AppData\Local\Temp
O43 - CFD: 2009/11/20 09:52:12 - [0] SHD -- C:\Users\hp\AppData\Local\Temporary Internet Files
O43 - CFD: 2009/11/24 20:23:56 - [] D -- C:\Users\hp\AppData\Local\VirtualStore
O43 - CFD: 2008/01/21 02:42:46 - [] RD -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/11/20 09:55:54 - [] RD -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2009/12/07 09:28:44 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Borland C++ 5.02
O43 - CFD: 2015/09/17 18:02:01 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Camfrog Video Chat
O43 - CFD: 2013/12/25 13:41:49 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 2014/03/24 21:05:11 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heyoya
O43 - CFD: 2009/07/24 01:48:52 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2008/01/21 02:42:46 - [] RD -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/09/25 17:54:26 - [0] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 2015/09/25 17:54:26 - [] RD -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2012/03/18 14:03:56 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2012/03/11 15:17:43 - [] D -- C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC

---\\ Derniers fichiers créés dans Windows Prefetcher (2) - 31s
O45 - LFCP:[MD5.4AB7D562729913A07488CC13B5FB8ADC] 2015/09/25 14:00:42 A -- C:\Windows\Prefetch\BACKUPSTACK.EXE-D76D7F90.pf =>PUP.Optional.MyPCBackup
O45 - LFCP:[MD5.BDA9C1CCB0163D7CB5ADCACC761ABD88] 2015/09/25 01:29:00 A -- C:\Windows\Prefetch\WINSERVICE86-CODEDOWNLOADER.E-68DA7D46.pf =>PUP.Optional.CrossRider

---\\ Liste des pilotes du système (100) - 20s
O58 - SDL:2008/03/27 10:11:34 A . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\Windows\System32\drivers\Accelerometer.sys [34664] ©
O58 - SDL:2007/02/07 16:50:14 A . (.Analog Deivces - USB Firmware loader.) -- C:\Windows\System32\drivers\adildr.sys [56088]
O58 - SDL:2007/02/07 16:50:58 A . (.Analog Deivces - USB Firmware loader.) -- C:\Windows\System32\drivers\adildrx64.sys [58264]
O58 - SDL:2007/02/07 16:50:32 A . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\Windows\System32\drivers\adiusbaw.sys [118552]
O58 - SDL:2007/02/07 16:51:18 A . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\Windows\System32\drivers\adiusbawx64.sys [169496]
O58 - SDL:2008/01/21 02:23:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422968] ©
O58 - SDL:2008/01/21 02:23:25 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [300600] ©
O58 - SDL:2008/01/21 02:23:26 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\drivers\adpu160m.sys [101432] ©
O58 - SDL:2008/01/21 02:23:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [149560] ©
O58 - SDL:2008/03/21 12:13:00 A . (.Agere Systems - SoftModem Device Driver.) -- C:\Windows\System32\drivers\AGRSM.sys [1203776] ©
O58 - SDL:2009/01/24 09:11:25 N . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [17464] ©
O58 - SDL:2008/01/21 02:23:23 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [79416] ©
O58 - SDL:2008/01/21 02:23:24 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [79928] ©
O58 - SDL:2008/12/31 14:00:52 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [4172288] ©
O58 - SDL:2011/02/04 12:09:08 A . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\System32\drivers\avgntflt.sys [61960]
O58 - SDL:2011/04/10 14:57:00 A . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [137656]
O58 - SDL:2006/11/02 08:24:45 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] ©
O58 - SDL:2006/11/02 08:24:46 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] ©
O58 - SDL:2006/11/02 08:25:24 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [71808] ©
O58 - SDL:2006/11/02 08:24:44 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] ©
O58 - SDL:2006/11/02 08:24:44 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] ©
O58 - SDL:2006/11/02 08:24:47 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] ©
O58 - SDL:2008/06/23 11:54:08 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\drivers\btwaudio.sys [80424] ©
O58 - SDL:2008/06/23 11:54:08 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\drivers\btwavdt.sys [81960] ©
O58 - SDL:2008/06/23 11:54:08 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\drivers\btwrchid.sys [16168] ©
O58 - SDL:2009/01/24 09:11:25 N . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [19000] ©
O58 - SDL:2007/10/16 11:40:50 A . (.Mobile Connector - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\cmusbser.sys [97408] ©
O58 - SDL:2006/11/02 09:50:11 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [71272] ©
O58 - SDL:2008/01/21 02:23:24 A . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel.) -- C:\Windows\System32\drivers\E1G60I32.sys [118784] ©
O58 - SDL:2007/01/04 13:47:48 A . (.Analog Deivces - USB Firmware loader.) -- C:\Windows\System32\drivers\e4ldr.sys [69656]
O58 - SDL:2007/01/04 13:47:10 A . (.Analog Deivces - USB Firmware loader.) -- C:\Windows\System32\drivers\e4ldrx64.sys [71832]
O58 - SDL:2007/01/04 13:48:04 A . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\Windows\System32\drivers\e4usbaw.sys [104344]
O58 - SDL:2007/01/04 13:46:30 A . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\Windows\System32\drivers\e4usbawx64.sys [146968]
O58 - SDL:2008/01/21 02:23:22 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [342584] ©
O58 - SDL:2008/09/04 17:47:00 A . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome.) -- C:\Windows\System32\drivers\enecir.sys [54784] ©
O58 - SDL:2012/08/21 13:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840] ©
O58 - SDL:2008/01/21 02:23:26 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [40504] ©
O58 - SDL:2008/03/27 10:12:12 A . (.Hewlett-Packard Corporation - HP Disk Filter - SATA.) -- C:\Windows\System32\drivers\hpdskflt.sys [24424] ©
O58 - SDL:2007/06/18 15:12:04 A . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\System32\drivers\HpqKbFiltr.sys [16768] ©
O58 - SDL:2008/01/21 02:23:23 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [235064] ©
O58 - SDL:2006/11/02 09:50:17 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41576] ©
O58 - SDL:2006/11/02 09:50:07 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [35944] ©
O58 - SDL:2006/11/02 09:50:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [35944] ©
O58 - SDL:2008/10/23 09:42:10 A . (.JMicron Technology Corporation - JMicron JMB38X Flash Media Controller Drive.) -- C:\Windows\System32\drivers\jmcr.sys [107360] ©
O58 - SDL:2008/01/21 02:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [96312] ©
O58 - SDL:2008/01/21 02:23:25 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89656] ©
O58 - SDL:2008/01/21 02:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96312] ©
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] ©
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] ©
O58 - SDL:2015/09/25 16:12:13 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520] ©
O58 - SDL:2008/01/21 02:23:27 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [31288] ©
O58 - SDL:2008/01/21 02:23:27 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [386616] ©
O58 - SDL:2006/11/02 09:49:59 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [33384] ©
O58 - SDL:2015/06/18 08:41:50 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] ©
O58 - SDL:2012/03/26 14:50:12 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl.sys [18432] ©
O58 - SDL:2015/05/10 14:35:56 A . (.Copyright © 2014 - nethfdrv.sys.) -- C:\Windows\System32\drivers\nethfdrv.sys [49024] =>PUP.Optional.Amonetize
O58 - SDL:2008/01/21 02:23:20 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETw3v32.sys [2225664] ©
O58 - SDL:2008/08/28 23:48:46 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETw5v32.sys [3664384] ©
O58 - SDL:2006/11/02 09:50:19 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45160] ©
O58 - SDL:2006/11/02 07:36:50 A . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablett.) -- C:\Windows\System32\drivers\ntrigdigi.sys [20608] ©
O58 - SDL:2008/01/21 02:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [102968] ©
O58 - SDL:2008/01/21 02:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [45112] ©
O58 - SDL:2008/01/21 02:23:24 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1122360] ©
O58 - SDL:2006/11/02 09:50:35 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106088] ©
O58 - SDL:2006/11/02 07:30:56 A . (.Realtek Corporation - Realtek 8101/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\System32\drivers\Rtlh86.sys [44544] ©
O58 - SDL:2006/11/02 06:37:21 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] ©
O58 - SDL:2008/01/21 02:23:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [74808] ©
O58 - SDL:2014/09/04 20:28:07 A . (...) -- C:\Windows\System32\drivers\SPPD.sys [18872]
O58 - SDL:2010/06/17 14:28:02 A . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\System32\drivers\ssmdrv.sys [28520]
O58 - SDL:2006/11/02 09:50:05 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [35944] ©
O58 - SDL:2006/11/02 09:49:56 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [31848] ©
O58 - SDL:2006/11/02 09:50:03 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [34920] ©
O58 - SDL:2008/07/24 16:48:04 A . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [201264] ©
O58 - SDL:2008/01/21 02:23:20 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [238648] ©
O58 - SDL:2006/11/02 09:50:35 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [98408] ©
O58 - SDL:2008/01/21 02:23:23 A . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\drivers\ulsata2.sys [115816] ©
O58 - SDL:2012/09/28 10:32:56 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [44544] ©
O58 - SDL:2009/01/24 09:11:25 N . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [20024] ©
O58 - SDL:2008/01/21 02:23:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [130616] ©
O58 - SDL:2006/11/02 07:30:56 A . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Eth.) -- C:\Windows\System32\drivers\yk60x86.sys [194048] ©
O58 - SDL:2008/08/18 19:43:46 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys [104960] ©
O58 - SDL:2008/08/18 19:44:02 A . (.ZTE Corporation - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ZTEusbnet.sys [110080]
O58 - SDL:2008/08/18 19:44:10 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmea.sys [104960] ©
O58 - SDL:2008/08/18 19:44:12 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbser6k.sys [104960] ©
O58 - SDL:2006/11/02 07:09:42 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2006/11/02 07:09:45 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2006/11/02 07:09:41 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2006/11/02 07:09:44 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2006/11/02 07:09:44 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2006/11/02 07:09:29 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2006/11/02 07:09:35 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2006/11/02 07:09:38 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2006/11/02 07:09:40 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2006/11/02 07:09:31 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2006/11/02 07:09:20 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2006/11/02 07:09:23 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2006/11/02 07:09:24 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2006/11/02 07:09:26 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2006/11/02 07:09:22 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
O58 - SDL:1999/05/07 23:13:24 A . (...) -- C:\Windows\System32\nwt.sys [52]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 8s
O61 - LFC: 2015/09/24 23:27:43 A . (..) -- C:\Users\hp\AppData\Local\ATI\ACE\Manifest.Bin [15219]

---\\ Associations Shell Spawning (11) - 2s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (...) -- C:\Program Files\Opera\Launcher.exe

---\\ Menu de démarrage Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (215) - 40s
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.CMG-SP3.domain", "\"www.search.ask.com\""); =>Toolbar.Ask
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.CMG-SP3.hpr_ff", "\"http://www.search.ask.com/?tpid=CMG-SP3&o=APN11868&pf=V7&trgb=FF&p2=%5EBZ6%5EYYYYYY%5EBY[...] =>Toolbar.Ask
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.CMG-SP3.hpr_ie", "\"http://www.search.ask.com/?tpid=CMG-SP3&o=APN11868&pf=V7&trgb=FF&p2=%5EBZ6%5EYYYYYY%5EBY[...] =>Toolbar.Ask
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.CMG-SP3.newTabSearchURL", "\"http://www.search.ask.com/web?o=APN11868&p2=%5EBZ6%5EYYYYYY%5EYY%5EMA&tpid=CMG-[...] =>Toolbar.Ask
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.CMG-SP3.searchURL", "\"http://www.search.ask.com/web?o=APN11868&p2=%5EBZ6%5EYYYYYY%5EYY%5EMA&tpid=CMG-SP3&gc[...] =>Toolbar.Ask
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_bundledUrls.expiration",[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_bundledUrls.value", "%7B[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_bundledWithHash.expirati[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_bundledWithHash.value", [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_notBundledArr_.expiratio[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_notBundledArr_.value", "[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_regBundledWithSoftware.e[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.internaldb.monetization_plugin_regBundledWithSoftware.v[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.name", "CinemaPlus-4.1v"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.a525eaf0097124ce59c719aa6a175421bgmailcom74251.74251.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_bundledWithHash.value", "null"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_last_executable_request.expiration", "Fri[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_last_executable_request.value", "%22http%[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.ataylorralstonhotmailcom64755.64755.name", "winservice86"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.enabledAddons", "heyoya%40heyoya.com:1.3,faststartff%40gmail.com:4.3.0,%7B85A9DD51-C7AB-8CCB-1BF6-9AF83F578F[...] =>PUP.Optional.FastStart
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.jet0lfoiEH6TlSZ6.url", "http://driverguidemy.ru/sync2/?q=hfZ9ojDUhMCMCyVUojwErdaErchTB6lKDzt4ok8btNtVh7n0rjk[...] =>PUP.Optional.DriverGuide
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.mywebsearch.prevKwdEnabled", true); =>PUP.Optional.MyWebSearch
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.mywebsearch.prevKwdURL", "http://mysearch.sweetpacks.com/?src=2&st=12&i=48&did=10844&ppd=search,36198351762,[...] =>PUP.Optional.SweetIM
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.BUTTON_STRUCTURE", "[{\"b\":221359046,\"c\":\"mindspark.magnify\",\"p\":\"L.0\[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.selectedEngine.savedPrev", "true"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.selectedEngine.tb", "Ask Web Search"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser//index[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.firstKnownVersion", "5.79.3.27197"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.homepage", "http://home.tb.ask.com/index.jhtml?ptb=F9EC5EA0-98DE-4AC6-AB2C-C37[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.hp.enabled", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.hp.lastGuardTime", -169157921); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.hp.numGuards", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.initialized", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installKeysSource", "LocalStorage"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installType", "XPI"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.contextKey", ""); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.installDate", "2014030512"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.partnerId", "^ZX^xdm043^YYA^ma"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.partnerSubId", "radiopi"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.pixelUrl", "http://radiorage.dl.tb.ask.com/install_pixels.jhtml?p[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.success", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.installation.toolbarId", "F9EC5EA0-98DE-4AC6-AB2C-C379012C1EA7"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.isCompliantUninstallImplementation", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.lastActivePing", "1396633236666"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.lastKnownVersion", "6.20.3.33657"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.options.defaultSearch", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.options.homePageEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.options.keywordEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.options.tabEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.partnerPixelFired", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.searchHistory", "facebook"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.toolbarCollapsed", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark._4jMembers_.weather.location", "10001"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark.hp.enabled", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark.hp.enabled.guid", ""); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("extensions.toolbar.mindspark.lastInstalled", "radiorage@mindspark.com"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser//index.jhtml?ptb=F9EC5[...] =>PUP.Optional.SweetIM
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("sweetim.toolbar.urls.homepage", "http://mysearch.sweetpacks.com/?src=10&st=12&i=48&did=10844&ppd=search,36198351762,sky[...] =>PUP.Optional.SweetIM
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E+x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E+x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E,x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E,x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E-x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E-x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E.:2z527", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E.:2z527.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E.x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E.x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E/x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E/x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E06CG5EL8:", "6E6D686D6D6B70737776"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E06CG5EL8:.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E73737176797D7C242F4B49474F42357D5D5C3D"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E06CG5EL;8I:K.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E0x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E0x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E1x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E1x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E2x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E2x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E3x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E3x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E4x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E4x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E5x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E5x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E6x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E6x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E7x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E7x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E8x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E8x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E9x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E9x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E:x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E:x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E;x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E;x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EPUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EPUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E=x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E=x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E>x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E>x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E?x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E?x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E@x305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7E@x305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EAx305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EAx305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EBE3G=;D9N9=D.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EBx305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EBx305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7ECx305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7ECx305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EDx305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7EDx305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7Etx305", "2423"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B+7Etx305.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3G>D", "3B69703F3F4273707A45747A4620487C7777257B4F50522A21282A59595858595A5A5E2B"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3G>D.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3G@6:5;", ""); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3G@6:5;.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3GFA7EF", "2B2E2C3D"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-0?3GFA7EF.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B-3=3ECCJA=F>.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B/>01=9A6K6PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B/>01=9A6K6PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B3=>@44I48?.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B5BA==9CJAG", "663B3C3F6C41706F7A7479474A7879774D4B4B2321"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B5BA==9CJAG.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B6B11G4C56B>F;P;ANR@P", "6E6C7170737375726E72797877"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B6B11G4C56B>F;P;ANR@P.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B9643G3/9E", "6A"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B9643G3/9E.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B;45>:BI9I7IE", "2B2E2C3D"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B;45>:BI9I7IE.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B<:222H64<", "393F352F3E"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B<:222H64<.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B<:222H64PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B<:222H64PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B=+03EH8H8J?:", "4443"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B=+03EH8H8J?:.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B?+E2A52D8.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B?B0D:8AJ62PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9B?B0D:8AJ62PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9BA@0<0BI6A7GN:6@L?", "6C"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947./9BA@0<0BI6A7GN:6@L?.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.PG_ENABLE", "74727565"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.PG_ENABLE.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947._key_cl_active", "30616332663330652D323165302D343236642D616630652D326232646133363934313731"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947._key_cl_active.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_experience_000", "34"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_experience_000.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_firstuse0100", "31"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_firstuse0100.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_user_id_000", "43423135343038393039333135355F313339353734393633333838365F46697265666F78"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cb_user_id_000.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cbfirsttime", "4D6F6E204D617220323420323031342032313A30383A333420474D542B3030303020284D61726F6329")[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.cbfirsttime.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appStateReportTime", "31343032303130343835353230"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appStateReportTime.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appState_Clarity_Active", "6F6E"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appState_Clarity_Active.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appsConfig.storedInFile", true); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appsDefaultEnabled", "6E756C6C"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_appsDefaultEnabled.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_calledSetupService", "31"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_calledSetupService.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_currentVersion", "312E31332E302E3137"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_currentVersion.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_first_time", "31"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_first_time.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_lastInstallationSessionGuid", "7B62623935663434302D316533352D343531352D393334392D34383534626[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_lastInstallationSessionGuid.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_lastLoginTime", "31343032303130343838333233"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_lastLoginTime.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_localization.storedInFile", true); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_mamEnabled", "74727565"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_mamEnabled.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_settings1.13.0.17.storedInFile", true); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_showWelcomeGadget", "66616C7365"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_showWelcomeGadget.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_stamp", "35345F30"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_stamp.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_userBornDate", "3230313430333235"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_userBornDate.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_userId", "38376538343863352D356666632D346161382D393363332D643031636438393330383366"); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_userId.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_user_approval_interacted", ""); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.mam_gk_user_approval_interacted.storedInFile", false); =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.url_history0001", "687474703A2F2F7777772E736B7970652E636F6D2F676F2F6D796163636F756E743A3A3A636C6963[...] =>PUP.Optional.Conduit
O69 - SBI: prefs.js [hp - cm0c6w1a.default] user_pref("valueApps.ct3326947.url_history0001.storedInFile", true); =>PUP.Optional.Conduit
O69 - SBI: SearchScopes [HKCU] {17773E73-751E-46C5-B9BE-54AE5E41B9A5} - (Yahoo!) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {3A82BB0E-F8F3-4D8A-9135-CE98121AA54A} - (Kelkoo) - http://fr.kelkoopartners.net/
O69 - SBI: SearchScopes [HKCU] {CEA8B3DA-9EB3-41EA-9E49-4A73B868FDC1} - (AOL Recherche) - http://slirsredirect.search.aol.com/
O69 - SBI: SearchScopes [HKCU] {F8961403-6254-4DD9-9BC5-B099CF4F34C9} - (Ask Search) - http://www.search.ask.com/ =>Toolbar.Ask

---\\ Enumère les services démarrés par Svchost (32) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247296] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [122880] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [574464] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [438272] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [314368] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [260608] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [47104] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [288256] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242688] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [448512] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1929952] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [758272] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247296] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [190464] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [19968] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [45056] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153600] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [161792] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [596992] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [84992] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [68096] ©
O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992]

---\\ Liste des exceptions du parefeu Windows (25) - 9s
O87 - FAEL: "{0875A37A-89F2-4429-B8ED-B8815EA4C57B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)
O87 - FAEL: "{27004E35-9898-472E-A9F9-B25FD79D4965}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)
O87 - FAEL: "{9FB4D2BB-F2DA-401B-861E-488A345568E0}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)
O87 - FAEL: "{00D656C2-311D-416C-899C-BA259083098D}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)
O87 - FAEL: "{FD565A15-F492-4AAD-9C7C-3D5EF0B852B0}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)
O87 - FAEL: "{5EB05819-753C-4243-A395-C61D6A5535BC}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QP.exe (.not file.)
O87 - FAEL: "{57402662-F7FF-42EC-A7EF-A3CBE753F3DB}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QPService.exe (.not file.)
O87 - FAEL: "TCP Query User{56BC2399-B483-4801-9ACC-1E167FF315FD}C:\program files\ares\ares.exe" [In-None-P6-TRUE] .(...) -- C:\program files\ares\ares.exe (.not file.)
O87 - FAEL: "UDP Query User{DB8B979F-2309-425D-B634-6775A2F4926E}C:\program files\ares\ares.exe" [In-None-P17-TRUE] .(...) -- C:\program files\ares\ares.exe (.not file.)
O87 - FAEL: "TCP Query User{90F8293A-CBDC-4D93-A104-5AA5DD5EA599}C:\program files\easyphp1-7\apache\apache.exe" [In-None-P6-TRUE] .(...) -- C:\program files\easyphp1-7\apache\apache.exe (.not file.)
O87 - FAEL: "UDP Query User{50A9758A-5FA5-4FE9-B22A-440B8EFB10F1}C:\program files\easyphp1-7\apache\apache.exe" [In-None-P17-TRUE] .(...) -- C:\program files\easyphp1-7\apache\apache.exe (.not file.)
O87 - FAEL: "TCP Query User{929C4A09-C29D-45CE-BF67-F7DEE8AF53C1}C:\program files\freephoneline\freephoneline.exe" [In-None-P6-TRUE] .(...) -- C:\program files\freephoneline\freephoneline.exe (.not file.)
O87 - FAEL: "UDP Query User{46AD5D4A-99AF-4283-8638-9D0C0C087378}C:\program files\freephoneline\freephoneline.exe" [In-None-P17-TRUE] .(...) -- C:\program files\freephoneline\freephoneline.exe (.not file.)
O87 - FAEL: "TCP Query User{64A1748E-E066-4BD5-B949-0686A9863CC0}C:\program files\sopcast\sopcast.exe" [In-None-P6-TRUE] .(...) -- C:\program files\sopcast\sopcast.exe (.not file.)
O87 - FAEL: "UDP Query User{9BA9EDCA-9A23-4C2C-B6B7-CB31016F4A65}C:\program files\sopcast\sopcast.exe" [In-None-P17-TRUE] .(...) -- C:\program files\sopcast\sopcast.exe (.not file.)
O87 - FAEL: "TCP Query User{1F3CDD26-7EE5-474D-B9B4-AE732A82C0C3}C:\program files\sopcast\adv\sopadver.exe" [In-None-P6-TRUE] .(...) -- C:\program files\sopcast\adv\sopadver.exe (.not file.)
O87 - FAEL: "UDP Query User{848570F7-42C0-4855-9E16-D8F14B9D040C}C:\program files\sopcast\adv\sopadver.exe" [In-None-P17-TRUE] .(...) -- C:\program files\sopcast\adv\sopadver.exe (.not file.)
O87 - FAEL: "{8999D716-E8E1-4753-8D45-5C6CAA83F3F4}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{D602105D-3D74-48F8-B87C-77099464E93B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{5C5C0988-E760-48AF-B69F-CDCD6C26F7F0}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{A50ABC67-7970-4302-A452-537EF654F823}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{1C448283-0FDE-46A0-9BA8-812CF38148AF}" [In-None-P6-TRUE] .(...) -- C:\Program Files\PCDApp\dgen.exe (.not file.)
O87 - FAEL: "{9370C7DF-B188-462D-A87B-3FAC14F46678}" [In-None-P17-TRUE] .(...) -- C:\Program Files\PCDApp\dgen.exe (.not file.)
O87 - FAEL: "{2327F8AF-F1DA-4E14-A2EA-EF44A5C7098D}" [In-None-P6-TRUE] .(...) -- C:\Program Files\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{96FB4817-B3CA-48D1-BEC1-C2107B2458DE}" [In-None-P17-TRUE] .(...) -- C:\Program Files\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch

---\\ Enumère les codes produits des logiciels (2) - 6s
O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" . (.globalupdate Helper.) =>PUP.Optional.GlobalUpdate
O90 - PUC: "D274D43405350033677A7A857BC02210" . (.Social Search App by Ask.) -- C:\Windows\Installer\{434D472D-5350-3300-76A7-A758B70C2201}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (27) - 76s

SS - Demand [2013/02/24 18:23:21] [ 251248] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2008/03/18 12:27:12] [ 13312] Agere Modem Call Progress Audio (AgereModemAudio) . (.Agere Systems.) - C:\Windows\System32\agrsmsvc.exe ©
SS - Auto [2011/07/21 23:20:11] [ 136360] Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SS - Auto [2011/04/10 14:56:58] [ 269480] Avira AntiVir Guard (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - Auto [2015/08/21 19:02:42] [ 201616] Service de mise à jour Ask (APNMCP) . (.APN LLC..) - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
SR - Auto [2012/12/21 16:27:46] [ 57008] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
SR - Auto [2008/12/31 12:33:58] [ 724992] (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe ©
SR - Auto [2015/07/14 08:50:16] [ 1035768] Camfrog Update Service (camfrog_update_service) . (.Camshare Inc..) - C:\Program Files\Camfrog\Camfrog Video Chat\update\cf_update_service.exe
SR - Demand [2008/11/19 08:14:06] [ 222512] Com4QLBEx (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe ©
SS - Demand [2014/04/24 21:04:16] [ 227904] GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files\WildTangent Games\App\GamesAppIntegrationService.exe ©
SS - Demand [2014/06/27 21:35:13] [ 203344] GamesAppService (GamesAppService) . (...) - C:\Program Files\WildTangent Games\App\GamesAppService.exe
SR - Auto [2008/10/09 06:56:48] [ 94208] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe ©
SR - Demand [2008/10/23 11:46:02] [ 223232] hpqwmiex (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe ©
SR - Auto [2008/03/18 14:24:58] [ 19456] HP Service (hpsrv) . (.Hewlett-Packard Corporation.) - C:\Windows\System32\Hpservice.exe ©
SR - Demand [2012/12/12 13:57:02] [ 553440] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe ©
SR - Auto [2015/06/18 08:39:46] [ 1871160] (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe ©
SS - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe ©
SS - Demand [2015/07/06 15:45:51] [ 148136] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Auto [2015/03/04 00:30:47] [ 349696] OffersWizard (OffersWizard) . (.Copyright 2014.) - C:\Program Files\ver2OffersWizard\B9eG190.exe =>PUP.Optional.OffersWizard
SR - Auto [2014/07/11 17:36:30] [ 48240] RBClientService (RBClientService) . (.Systweak.) - C:\Program Files\Right Backup\RBClientService.exe =>PUP.Optional.Systweak
SR - Auto [2008/12/17 15:11:40] [ 365952] Recovery Service for Windows (Recovery Service for Windows) . (.SoftThinks.) - C:\Program Files\SMINST\BLService.exe ©
SR - Auto [2015/08/19 08:51:58] [ 6324208] Reimage Real Time Protector (ReimageRealTimeProtector) . (.Reimage®.) - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>PUP.Optional.ReImageRepair
SS - Auto [2014/04/03 20:21:48] [ 315008] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe ©
SR - Auto [2008/11/26 15:13:08] [ 296320] TV Background Capture Service (TVBCS) (TVCapSvc) . (.Copyright 2004.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
SR - Auto [2008/11/26 15:13:08] [ 116096] TV Task Scheduler (TVTS) (TVSched) . (.Copyright 2004.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
SS - Auto [2008/11/28 16:04:24] [ 87536] Power Control [2009/07/24 03:41:07] ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.CyberLink Corp..) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl ©

---\\ Scan Additionnel (163) - 0s
C:\Program Files\Cinema Plus v6V23.07\1c895bea-87f1-49b9-8fef-94dd222ff36f-1-6.exe =>PUP.Optional.CrossRider
C:\Program Files\Cinema Plus v6V23.07\1c895bea-87f1-49b9-8fef-94dd222ff36f-10.exe =>PUP.Optional.CrossRider
C:\Program Files\Right Backup\RightBackup.exe =>PUP.Optional.Systweak
C:\Program Files\winservice86\b84aeba7-6e01-4cc5-aced-9ee94227dffe-1-6.exe =>PUP.Optional.CrossRider
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.AskBar
C:\Program Files\winservice86\721bec50-90c3-42e5-9ee9-a7a3f064a495.exe =>PUP.Optional.CrossRider
C:\Program Files\GoforFiles\GFFUpdater.exe =>PUP.Optional.YourFileDownloader
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.AskBar
C:\Program Files\ver2OffersWizard\L2h.exe =>PUP.Optional.OffersWizard
C:\Program Files\Optimizer Pro\OptProReminder.exe =>PUP.Optional.OptimizerPro
C:\Program Files\Right Backup\RBClientService.exe =>PUP.Optional.Systweak
C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe =>PUP.Optional.ReImageRepair
C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe =>PUP.Optional.ReImageRepair
C:\Windows\Temp\dgen.exe =>Heuristique.Suspect
C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.Optional.MyPCBackup
C:\Program Files\winservice86\b84aeba7-6e01-4cc5-aced-9ee94227dffe-10.exe =>PUP.Optional.CrossRider
C:\Program Files\ver2OffersWizard\B9eG190.exe =>PUP.Optional.OffersWizard
C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph(66)
C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\4jffxtbr@RadioRage_4j(102).com =>PUP.Optional.MindSpark
C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\cm0c6w1a.default\extensions\faststartff@gmail.com =>PUP.Optional.FastStart
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4B532609-A788-4C10-B57C-4B955FE7527E} =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d869b70f-a95a-4016-b038-a116cf1364e0} =>PUP.Optional.Multiplug
HKLM\SYSTEM\CurrentControlSet\Services\APNMCP =>Toolbar.Ask
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
HKLM\SYSTEM\CurrentControlSet\Services\OffersWizard =>PUP.Optional.OffersWizard
HKLM\SYSTEM\CurrentControlSet\Services\RBClientService =>PUP.Optional.Systweak
HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector =>PUP.Optional.ReImageRepair
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\980124D4-3D52-4c2d-AD41-9E90BDF4C031_Systweak_Ri~01F2B2E8_is1 =>PUP.Optional.Systweak
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deeal =>PUP.Optional.Deeal
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 =>PUP.Optional.OptimizerPro
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair =>PUP.Optional.ReImageRepair
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect =>PUP.Optional.SearchProtect
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Speedup_is1 =>PUP.Optional.SystemSpeedup
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
C:\Program Files\LuicokyCoouponi =>PUP.Optional.Multiplug
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D} =>PUP.Optional.Multiplug
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4E33CE5-A7AB-4F68-A7E7-F0AA84EF2D9E} =>PUP.Optional.SweetIM
HKLM\SOFTWARE\5855d78be53fbf14 =>PUP.Optional.Heuristic
HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Cinema Plus v6V23.07-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\ErrorLists-crcodedownloader =>PUP.Optional.CrossRider
HKLM\SOFTWARE\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKLM\SOFTWARE\System Speedup =>PUP.Optional.SystemSpeedup
HKLM\SOFTWARE\systweak =>PUP.Optional.Systweak
HKLM\SOFTWARE\winservice86-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\5855d78be53fbf14 =>PUP.Optional.Heuristic
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\ImInstaller =>Toolbar.IncrediMail
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\reimagerepair =>PUP.Optional.ReImageRepair
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\System Speedup =>PUP.Optional.SystemSpeedup
HKCU\SOFTWARE\systweak =>PUP.Optional.Systweak
HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner
HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\Smartbar =>PUP.Optional.SmartBar
C:\Program Files\AskPartnerNetwork =>Toolbar.AskBar
C:\Program Files\BeTtterPriceChec =>PUP.Optional.Multiplug
C:\Program Files\Cinema Plus v6V23.07 =>PUP.Optional.CrossRider
C:\Program Files\ClickPotatoLite =>PUP.Optional.ClickPotato
C:\Program Files\Deeal =>PUP.Optional.Deeal
C:\Program Files\DiVapton =>PUP.Optional.DiVapton
C:\Program Files\dowwnlioadiTkeep =>PUP.Optional.Multiplug
C:\Program Files\FlaashCCoupon =>PUP.Optional.Multiplug
C:\Program Files\FLasuhCOOupooni =>PUP.Optional.Multiplug
C:\Program Files\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files\GoforFiles =>PUP.Optional.YourFileDownloader
C:\Program Files\KeingCoupon =>PUP.Optional.Multiplug
C:\Program Files\KiingCOupooun =>PUP.Optional.Multiplug
C:\Program Files\LucKyShoipper =>PUP.Optional.Multiplug
C:\Program Files\LuckyShoppeR =>PUP.Optional.Multiplug
C:\Program Files\Mobogenie =>PUP.Optional.Mobogenie
C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
C:\Program Files\Nosibay =>PUP.Optional.SPointer
C:\Program Files\Optimizer Pro =>PUP.Optional.OptimizerPro
C:\Program Files\Reimage =>PUP.Optional.ReImageRepair
C:\Program Files\Right Backup =>PUP.Optional.Systweak
C:\Program Files\RoyaalCoupon =>PUP.Optional.Multiplug
C:\Program Files\RoyalCoupOn =>PUP.Optional.Multiplug
C:\Program Files\RoyaLShoppeRoApp =>PUP.Optional.Multiplug
C:\Program Files\RoyyalCeoupon =>PUP.Optional.Multiplug
C:\Program Files\RROyyAlSShopperApop =>PUP.Optional.Multiplug
C:\Program Files\RuoYalCoupon =>PUP.Optional.Multiplug
C:\Program Files\SAlEsMagnEt =>PUP.Optional.Multiplug
C:\Program Files\Saveornet =>PUP.Optional.Multiplug
C:\Program Files\SavierPro =>PUP.Optional.Multiplug
C:\Program Files\SearchNewTab =>PUP.Optional.FastSaveApp
C:\Program Files\ShopperReports3 =>PUP.Optional.ShopperReports
C:\Program Files\SiteFinder =>PUP.Optional.ShoppingReport
C:\Program Files\Softonic_France =>PUP.Optional.Softonic
C:\Program Files\surf aannd keiep =>PUP.Optional.Multiplug
C:\Program Files\SweetIM =>PUP.Optional.SweetIM
C:\Program Files\sweetpacks bundle uninstaller =>PUP.Optional.SweetIM
C:\Program Files\System Speedup =>PUP.Optional.SystemSpeedup
C:\Program Files\TicTaCioupOn =>PUP.Optional.Multiplug
C:\Program Files\TicTaCoupoN =>PUP.Optional.Multiplug
C:\Program Files\TiicTaCoupoan =>PUP.Optional.Multiplug
C:\Program Files\ver2OffersWizard =>PUP.Optional.OffersWizard
C:\Program Files\winservice86 =>PUP.Optional.CrossRider
C:\Program Files\WinServices =>Trojan.Inject.RRE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector =>PUP.Optional.AdvancedSystemProtector
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 =>PUP.Optional.OptimizerPro
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair =>PUP.Optional.ReImageRepair
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Right Backup =>PUP.Optional.Systweak
C:\ProgramData\APN =>Toolbar.Ask
C:\ProgramData\AskPartnerNetwork =>Toolbar.YahooPartner
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\BetterSoft =>PUP.Optional.Offerware
C:\ProgramData\ChampionDeals =>PUP.Optional.ChampionDeals
C:\ProgramData\CLickFouraSalae =>PUP.Optional.Multiplug
C:\ProgramData\ClickPotatoLiteSA =>PUP.Optional.ClickPotato
C:\ProgramData\daownloaditkeeep =>PUP.Optional.Multiplug
C:\ProgramData\eSafe =>PUP.Optional.eSafeSecurity
C:\ProgramData\FlashCouupoone =>PUP.Optional.Multiplug
C:\ProgramData\InstallMate =>PUP.Optional.Tarma
C:\ProgramData\LuuuckeyShopper =>PUP.Optional.Multiplug
C:\ProgramData\OnlineLowDeals =>PUP.Optional.OnlineLowDeals
C:\ProgramData\Reimage Protector =>PUP.Optional.ReImageRepair
C:\ProgramData\SaverPro =>PUP.Optional.Multiplug
C:\ProgramData\SaverrPro =>PUP.Optional.Multiplug
C:\ProgramData\SearchNewTab =>PUP.Optional.FastSaveApp
C:\ProgramData\SharkManCoupon =>PUP.Optional.Multiplug
C:\ProgramData\SoftCoup =>PUP.Optional.Multiplug
C:\ProgramData\surf aannd keiep =>PUP.Optional.Multiplug
C:\ProgramData\Systweak =>PUP.Optional.Systweak
C:\Users\hp\AppData\Roaming\Advanced System Protector =>PUP.Optional.AdvancedSystemProtector
C:\Users\hp\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\hp\AppData\Roaming\betadeeal =>PUP.Optional.Deeal
C:\Users\hp\AppData\Roaming\ClickPotatoLite =>PUP.Optional.ClickPotato
C:\Users\hp\AppData\Roaming\GoforFiles =>PUP.Optional.YourFileDownloader
C:\Users\hp\AppData\Roaming\newnext.me =>PUP.Optional.NextLive
C:\Users\hp\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
C:\Users\hp\AppData\Roaming\Optimizer Pro =>PUP.Optional.OptimizerPro
C:\Users\hp\AppData\Roaming\ShopperReports3 =>PUP.Optional.ShopperReports
C:\Users\hp\AppData\Roaming\SimilarSites =>PUP.Optional.SimilarSites
C:\Users\hp\AppData\Roaming\System Speedup =>PUP.Optional.SystemSpeedup
C:\Users\hp\AppData\Roaming\systweak =>PUP.Optional.Systweak
C:\Users\hp\AppData\Roaming\webssearches =>PUP.Optional.WebsSearches
C:\Users\hp\AppData\Roaming\winservices =>Trojan.Inject.RRE
C:\Users\hp\AppData\Roaming\wp_update =>PUP.Optional.WpManager
C:\Users\hp\AppData\Local\AskPartnerNetwork =>Toolbar.AskBar
C:\Users\hp\AppData\Local\Babylon =>PUP.Optional.Babylon
C:\Users\hp\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\hp\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Users\hp\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.Optional.MyPCBackup
C:\Windows\Prefetch\BACKUPSTACK.EXE-D76D7F90.pf =>PUP.Optional.MyPCBackup
C:\Windows\Prefetch\WINSERVICE86-CODEDOWNLOADER.E-68DA7D46.pf =>PUP.Optional.CrossRider
C:\Windows\System32\drivers\nethfdrv.sys =>PUP.Optional.Amonetize
HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate
HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate
C:\Windows\Installer\{434D472D-5350-3300-76A7-A758B70C2201}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Products\D274D43405350033677A7A857BC02210 =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Features\D274D43405350033677A7A857BC02210 =>PUP.Optional.BrowserTabSearch

---\\ Récapitulatif des éléments trouvées sur votre station (57) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak
http://www.nicolascoolman.fr/blog =>Toolbar.AskBar
http://www.nicolascoolman.fr/pup-yourfiledownloader/ =>PUP.Optional.YourFileDownloader
http://www.nicolascoolman.fr/blog =>PUP.Optional.OffersWizard
http://www.nicolascoolman.fr/pup-optimizerpro/ =>PUP.Optional.OptimizerPro
http://www.nicolascoolman.fr/rogue-reimagerepair/ =>PUP.Optional.ReImageRepair
http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/hijacker-eazel/ =>PUP.Optional.Eazel
http://www.nicolascoolman.fr/pup-mindspark/ =>PUP.Optional.MindSpark
http://www.nicolascoolman.fr/blog =>PUP.Optional.FastStart
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/pup-systemspeedup/ =>PUP.Optional.SystemSpeedup
http://www.nicolascoolman.fr/pup-wpmanager/ =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/blog =>PUP.Optional.Deeal
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/pup-sweetim/ =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/blog =>PUP.Optional.Heuristic
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/blog =>PUP.Optional.BrowserExtensions
http://www.nicolascoolman.fr/blog =>Toolbar.Mamverifier
http://www.nicolascoolman.fr/blog =>Toolbar.IncrediMail
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/adware-clickpotato/ =>PUP.Optional.ClickPotato
http://www.nicolascoolman.fr/blog =>PUP.Optional.DiVapton
http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/adware-spointer/ =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/adware-fastsaveapp/ =>PUP.Optional.FastSaveApp
http://www.nicolascoolman.fr/blog =>PUP.Optional.ShopperReports
http://www.nicolascoolman.fr/adware-shoppingreport/ =>PUP.Optional.ShoppingReport
http://www.nicolascoolman.fr/blog =>Trojan.Inject.RRE
http://www.nicolascoolman.fr/pup-advancedsystemprotector/ =>PUP.Optional.AdvancedSystemProtector
http://www.nicolascoolman.fr/blog =>PUP.Optional.FileParadeBundle
http://www.nicolascoolman.fr/pup-offerware/ =>PUP.Optional.Offerware
http://www.nicolascoolman.fr/blog =>PUP.Optional.ChampionDeals
http://www.nicolascoolman.fr/pup-esafesecurity/ =>PUP.Optional.eSafeSecurity
http://www.nicolascoolman.fr/pup-tarma/ =>PUP.Optional.Tarma
http://www.nicolascoolman.fr/blog =>PUP.Optional.OnlineLowDeals
http://www.nicolascoolman.fr/pup-nextlive/ =>PUP.Optional.NextLive
http://www.nicolascoolman.fr/pup-bubbledock/ =>PUP.Optional.BubbleDock
http://www.nicolascoolman.fr/adware-similarsites/ =>PUP.Optional.SimilarSites
http://www.nicolascoolman.fr/hijacker-webssearches/ =>PUP.Optional.WebsSearches
http://www.nicolascoolman.fr/blog =>.Superfluous.CrashReports
http://www.nicolascoolman.fr/pup-amonetize/ =>PUP.Optional.Amonetize
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverGuide
http://www.nicolascoolman.fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch
http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart
http://www.nicolascoolman.fr/adware-bandoo/ =>PUP.Optional.Bandoo
http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/pup-browsertabsearch/ =>PUP.Optional.BrowserTabSearch

~ End of the scan, 34249 items in 366 seconds (1884)(0)()