~ ZHPDiag v2015.9.24.145 Par Nicolas Coolman (2015/09/24) ~ Démarré par user (Administrator) (2015/09/27 01:23:18) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\user\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\user\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 7 Starter, 32-bit Service Pack 1 (Build 7601) ---\\ Navigateurs Internet (4) - 0s GCIE: Google Chrome v39.0.2171.95 MFIE: Mozilla Firefox 38.0.5 (x86 fr) v38.0.5 OPIE: Opera 12.17.1863 v12.17.1863 MSIE: Internet Explorer v11.0.9600.18015 ---\\ Informations sur les produits Windows (9) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel Windows ID Activation : OK ~ Windows Partial Key : XYV9K Windows License : OK ~ Windows Remaining Initializations Number : 4 Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ Logiciels de protection (4) - 4s Malwarebytes Anti-Malware version 2.1.8.1057 Microsoft Security Client v4.8.0204.0 Microsoft Security Essentials v4.8.204.0 Windows Defender W7 (Deactivate) ---\\ Surveillance de Logiciels (2) - 5s Adobe Flash Player 19 NPAPI Adobe Reader XI ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2097.152 MB (27% free) ~ System Restore: Activé (Enable) ~ System drive C: has 20 GB free of 202 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: USER-PC ~ User Name: user ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 20 GB free of 202 GB (System) ~ Drive H: has 70 GB free of 102 GB ~ Drive M: has 0 GB free of 0 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (24) - 2s [MD5.40D777B7A95E00593EB1568C68514493] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2616320] © [MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544] © [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96256] © [MD5.A8C80A92549AFDD6891C8159D4C0A107] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1951232] © [MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [304128] © [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [193536] © [MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [270336] © [MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] © [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944] © [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584] © [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656] © [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544] © [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336] © [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544] © [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896] © [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888] © [MD5.FEDAAB6716B44DE8B9EFC14DD9A26215] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [124416] © [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904] © [MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1211752] © [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360] © [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] © [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168] © [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74752] © [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [245632] © ---\\ Processus lancés (56) - 3s [MD5.9C1EA4217DC30E085F8418474DCC3616] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe [229458] [PID.1228] © [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1900] © [MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\AEstSrv.exe [81920] [PID.1920] © [MD5.6416F9B6B220F0A890525C38235AFAD7] - (.LSI Corporation - LSI Soft Modem Call Progress Service.) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336] [PID.1952] © [MD5.221564CC7BE37611FE15EACF443E1BF6] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.1980] © [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.2020] © [MD5.E2ACED92A998E339DC5964C94E3DDB55] - (.Broadcom Corporation. - Bluetooth Support Server.) -- c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [595232] [PID.2044] © [MD5.9C71560AD568AAA68975433782E35942] - (...) -- C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960] [PID.428] [MD5.6FA8388F9154CB631FC675DEA85249A3] - (.Hewlett-Packard Company - hpHotkeyMonitor Service.) -- C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [265272] [PID.600] © [MD5.8F5908131E0219ECD95400BAABE88BA1] - (.Copyright (C) 2013 - DCSHOST.) -- C:\ProgramData\DatacardService\HWDeviceService.exe [276048] [PID.1120] [MD5.FCBDCC6F1801E32244235608E1277752] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.1432] © [MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.1516] © [MD5.53B8D9B905223CBB6317B0FFF61D155A] - (...) -- C:\ProgramData\Modem HDM EC156\OnlineUpdate\ouc.exe [651856] [PID.2156] [MD5.0B5258F5BF8E921652827151EEEF9757] - (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [119808] [PID.2164] © [MD5.A0FF419B61AE47E26ADF3BB15DB4F2FE] - (...) -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608] [PID.2560] [MD5.138A025177F9958599D498F5B0267382] - (.Huawei Technologies Co., Ltd. - DataCardMonitor MFC Application.) -- C:\ProgramData\DatacardService\DCSHelper.exe [238160] [PID.2740] © [MD5.AF76C6D3F5053459E18E4C519FB496C8] - (.VMware, Inc. - VMware USB Arbitration Service.) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [665200] [PID.2800] © [MD5.B348EE97B001E144352778AB786EB094] - (.VMware, Inc. - VMware NAT Service.) -- C:\Windows\System32\vmnat.exe [433264] [PID.2876] © [MD5.3ACCF0C817A2BB34EFBFB72B57B00252] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe [79872] [PID.2916] © [MD5.E58C19CA85F647B7D76B90265DB90C79] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [495708] [PID.3016] © [MD5.8B98F284BAE83E300E4BCDE18716207A] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\Windows\System32\vmnetdhcp.exe [354416] [PID.3152] © [MD5.9195717C34DAC6C598EC9096A7D5B993] - (.Hewlett-Packard Company - QLBController.) -- C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056] [PID.3172] © [MD5.D782F0C741EE2D50AC8D38774597FB2B] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe [354840] [PID.3228] © [MD5.C0BA1E3A4EB73DD5A104C8C9ABC972B6] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640] [PID.3332] © [MD5.25209D8A20B1E32E5B58B066EC82B88C] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848] [PID.3344] © [MD5.D6085ED22D42E9505448FEAD9FDFAF21] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [175640] [PID.3364] © [MD5.7C918A71111884C3D355A0CEF1C5F644] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [166936] [PID.3408] © [MD5.B2206246F4F08B733AF69392638B637C] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [268312] [PID.3440] © [MD5.75B2B53A5A75087D48ADE7C1CEBC3687] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904] [PID.3548] © [MD5.EF3EA06057132138B4E5895A61601DBE] - (.Hewlett-Packard Company - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [230968] [PID.3960] © [MD5.AEBC034888EFD533001B741E172E6463] - (.Copyright (C) 2002 - autoclk MFC Application.) -- C:\Windows\autoclk.exe [143360] [PID.1508] [MD5.28343BE55C4481EE797559BCE8CCCBAD] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.2196] © [MD5.4AA3FD6303EEA343E7CEBA9EFBB9CF13] - (...) -- C:\Program Files\HSPA USB MODEM\ModemListener.exe [98304] [PID.2540] [MD5.48E6868781B4E8BF4B77DBEC7694BCE8] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [295072] [PID.2052] © [MD5.1C1DB86A882AB2532EEC09507190E019] - (.Copyright (C) 2005 - CameraFixer MFC Application.) -- C:\Windows\FixCamera.exe [20480] [PID.2400] [MD5.09B5359E63EF3202D22F2F60349E29FB] - (.Copyright (C) 2005 - tsnp2std Microsoft.) -- C:\Windows\tsnpstd3.exe [270336] [PID.2128] [MD5.FB0C8699B87F7140BB6201BE7B4B6778] - (.Copyright 2002-2005 - CameraMonitor Application.) -- C:\Windows\vsnpstd3.exe [827392] [PID.3928] [MD5.D2E3E6D94A9E1CFA1561D9C748136FD0] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.1312] © [MD5.048EA4B978851788E9F5E8E4F081DF7A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904] [PID.2204] © [MD5.14D6542607ACD4B2D1DDB1A36E0D8813] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744] [PID.2152] © [MD5.328EF5D436FADDED0D0D709A394A0C75] - (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2736128] [PID.680] © [MD5.14560F2D4EDA150916B0B1DAC4CA6362] - (.Copyright © 2012 - CompuCare updater.) -- C:\Users\user\AppData\Roaming\SuperPump\updater.exe [260608] [PID.4296] [MD5.10F97E4666133FF3E66EE7F31551536E] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.4376] © [MD5.F1A3F9791F1704C170A869C857FECC05] - (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe [23040] [PID.4712] © [MD5.61FDD24AF4B1B66E2DF2223BFDA4B47F] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [795936] [PID.4744] © [MD5.D322AEEBDB406D85F752CB5615F51960] - (.Copyright (C) 2000 - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962660] [PID.4768] [MD5.C2AEEDE03535EE08CE9BDF32DD37E919] - (...) -- C:\Users\user\AppData\Roaming\BrowserCompanion\tbhcn.exe [692888] [PID.4816] [MD5.C84BCC03858DAEAC4DB1E95EFCCE1934] - (.Hewlett-Packard - HP Health Check Service.) -- C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [120832] [PID.6024] © [MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880] [PID.5876] © [MD5.5E85E14E91DC7EC217119178210F130B] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe [530816] [PID.2556] © [MD5.923FE895B22B22A9CA03C72F3D15CE20] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [376944] [PID.4800] © [MD5.9B660F85D4B9FE235DBD45A39CC76F8A] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [270960] [PID.3512] © [MD5.ED51CB30657A6C3217A03D1628FB9038] - (.Adobe Systems, Inc. - Adobe Flash Player 19.0 r0.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe [3425992] [PID.3428] © [MD5.ED51CB30657A6C3217A03D1628FB9038] - (.Adobe Systems, Inc. - Adobe Flash Player 19.0 r0.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe [3425992] [PID.5828] © [MD5.260B29F5BCC07C91CBA92910484BE023] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\user\AppData\Roaming\ZHP\ZHPDiag3.exe [1938944] [PID.4272] © [MD5.260B29F5BCC07C91CBA92910484BE023] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\user\AppData\Roaming\ZHP\ZHPDiag3.exe [1938944] [PID.5476] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (6) - 0s G2 - GCE: Preference [User Data\Default] [bodddioamolcibagionmmobehnbhiakf] Ginyas Browser Companion G2 - GCE: Preference [User Data\Default] [idhngdhcfkoamngbedgpaokgjbnpdiji] RealDownloader G2 - GCE: Preference [User Data\Default] [jmolcgpienlcieaajfkkdamlngancncm] IDM Integration G2 - GCE: Preference [User Data\Default] [kdidombaedgpfiiedeimiebkmbilgmlc] DefaultTab G2 - GCE: Preference [User Data\Default] [kpionmjnkbpcdpcflammlgllecmejgjj] vshare plugin G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (26) - 3s M0 - MFSP: prefs.js [user - 06e64031.default-1390175233802] https://www.google.com/ M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0} P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.xpt P2 - EXT: (.vShare.tv - vShare.tv plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll =>PUP.Optional.Pugi P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class P2 - EXT FILE: (...) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\searchplugins\delta-homes.xml =>PUP.Optional.DeltaHomes P2 - EXT FILE: (...) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\searchplugins\WebSearch.xml =>PUP.Optional.SimpleSearches P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml P2 - EXT: (. - HostSecurePlugin.) -- C:\Program Files\Mozilla Firefox\browser\extensions\9654538aa6124877979b03b4d4117045@jetpack P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} © P2 - EXT: (.lightningnewtab.com - Default NewTab.) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\extensions\default_newtabff@gmail.com =>PUP.Optional.LightningNewTab P2 - EXT: (.roc - Default SearchProtected .) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\extensions\defsearchp@gmail.com P2 - EXT: (. - DiscountExt.) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\extensions\qvpbogzgqekfssat@o_jhyqphdrpspviip.com P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_19_0_0_185.dll © P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll © P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.19] - (.Veetle Inc.) -- C:\Program Files\Veetle\plugins\npVeetle.dll P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc.) -- C:\Program Files\Veetle\Player\npvlc.dll ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (16) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434373290&from=mych123&uid=hitachixhts725032a9a364_100531pck304vkju8mjjx&z=5370488ab9cf0dbeed1553egaz2cfz6c9m7c2octfo R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434373290&from=mych123&uid=hitachixhts725032a9a364_100531pck304vkju8mjjx&z=5370488ab9cf0dbeed1553egaz2cfz6c9m7c2octfo R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.plusnetwork.com/ =>PUP.Optional.PlusNetwork R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434373290&from=mych123&uid=hitachixhts725032a9a364_100531pck304vkju8mjjx&z=5370488ab9cf0dbeed1553egaz2cfz6c9m7c2octfo R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.plusnetwork.com/ =>PUP.Optional.PlusNetwork R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434373290&from=mych123&uid=hitachixhts725032a9a364_100531pck304vkju8mjjx&z=5370488ab9cf0dbeed1553egaz2cfz6c9m7c2octfo R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.plusnetwork.com/ =>PUP.Optional.PlusNetwork R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.plusnetwork.com/ =>PUP.Optional.PlusNetwork R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://feed.plusnetwork.com/ =>PUP.Optional.PlusNetwork R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) - {b760d5a4-8d24-4cb6-942e-d6bb540ad88c} Orphean R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (1) - 0s O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL © ---\\ Internet Explorer, Barre d'outil (4) - 0s O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) O3 - Toolbar: 0x7F7C02D44A156640A1AD4243D8127440 - [HKCU]{D4027C7F-154A-4066-A1AD-4243D8127440} . (...) -- (.not file.) O3 - Toolbar: 0xAC9A093232C136419E9A4E364A424E17 - [HKCU]{32099AAC-C132-4136-9E9A-4E364A424E17} . (...) -- (.not file.) O3 - Toolbar: 0xA4D560B7248DB64C942ED6BB540AD88C - [HKCU]{B760D5A4-8D24-4CB6-942E-D6BB540AD88C} . (...) -- (.not file.) ---\\ Applications lancées au démarrage du système (47) - 2s O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe © O4 - HKLM\..\Run: [QLBController] . (.Hewlett-Packard Company - QLBController.) -- C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe © O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe © O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe © O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe © O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe © O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe © O4 - HKLM\..\Run: [NeroFilterCheck] . (.Ahead Software Gmbh - NeroCheck.) -- C:\Windows\System32\NeroCheck.exe O4 - HKLM\..\Run: [PWRISOVM.EXE] . (.PowerISO Computing, Inc. - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [autoclk] . (.Copyright (C) 2002 - autoclk MFC Application.) -- C:\Windows\autoclk.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe © O4 - HKLM\..\Run: [PlusService] C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe (.not file.) O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe © O4 - HKLM\..\Run: [MessengerPlusForSkypeService] . (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe © O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe © O4 - HKLM\..\Run: [ModemListener] . (...) -- C:\Program Files\HSPA USB MODEM\ModemListener.exe O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe © O4 - HKLM\..\Run: [vmware-tray] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files\VMware\VMware Workstation\vmware-tray.exe © O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Optional.Mobogenie O4 - HKLM\..\Run: [FixCamera] . (.Copyright (C) 2005 - CameraFixer MFC Application.) -- C:\Windows\FixCamera.exe O4 - HKLM\..\Run: [tsnpstd3] . (.Copyright (C) 2005 - tsnp2std Microsoft.) -- C:\Windows\tsnpstd3.exe O4 - HKLM\..\Run: [snpstd3] . (.Copyright 2002-2005 - CameraMonitor Application.) -- C:\Windows\vsnpstd3.exe O4 - HKLM\..\Run: [WsmUpdater] . (.Web Solution Mart - Updater.) -- C:\Program Files\Web Solution Mart\Fake Webcam Codecs Pack\Updater.exe © O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe © O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe © O4 - HKLM\..\Run: [HostSecurePlugin] C:\Program Files\Host Secure\HostSecure.exe (.not file.) O4 - HKLM\..\Run: [HostSecurePlugin3] C:\Program Files\Host Secure\HostSecure.exe (.not file.) O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe © O4 - HKLM\..\Run: [bintin] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O4 - HKCU\..\Run: [ares] C:\Program Files\Ares\Ares.exe (.not file.) O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe © O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe © O4 - HKCU\..\Run: [CompuCare Check for updates] . (.Copyright © 2012 - CompuCare updater.) -- C:\Users\user\AppData\Roaming\SuperPump\updater.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe © O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe © O4 - HKCU\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe © O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [ares] C:\Program Files\Ares\Ares.exe (.not file.) O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe © O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe © O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [CompuCare Check for updates] . (.Copyright © 2012 - CompuCare updater.) -- C:\Users\user\AppData\Roaming\SuperPump\updater.exe O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe © O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe © O4 - HKUS\S-1-5-21-355323548-142960536-4238720158-1000\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe © ---\\ Modification Domaine/Adresses DNS (12) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 82.163.143.172,82.163.142.174 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 82.163.143.172,82.163.142.174 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 82.163.143.172,82.163.142.174 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel (24) - 1s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll © O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files\Microsoft Office\Office15\MSOSB.DLL © O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype4COM.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll © O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL © ---\\ Liste des services NT non Microsoft et non désactivés (25) - 1s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\AEstSrv.exe © O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agrsmsvc.exe © O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe © O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe © O23 - Service: DeviceManager (DeviceManager) . (...) - C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe © O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) . (.Hewlett-Packard Company - hpHotkeyMonitor Service.) - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe © O23 - Service: HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2013 - DCSHOST.) - C:\ProgramData\DatacardService\HWDeviceService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe © O23 - Service: YAC Service (iSafeService) . (...) - C:\Program Files\Elex-tech\YAC\iSafeSvc.exe (.not file.) =>PUP.Optional.YetAnotherCleaner O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe © O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe © O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe © O23 - Service: Modem HDM EC156. OUC (Modem HDM EC156. RunOuc) . (...) - C:\Program Files\Modem HDM EC156\UpdateDog\ouc.exe O23 - Service: Messenger Plus! Service (MsgPlusService) . (.Yuna Software - Service - Messenger Plus! for Skype.) - C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe © O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (...) - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (.not file.) O23 - Service: RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe © O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe © O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe © O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\Windows\System32\vmnetdhcp.exe © O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe © O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\Windows\System32\vmnat.exe © ---\\ Tâches planifiées en automatique (58) - 9s [MD5.C6D147C12C424373B016C0AB0A6C61EB] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269000] © [MD5.00000000000000000000000000000000] [APT] [b23de764-5915-42e6-b4d8-63b3fd8723ac] (...) -- C:\Program Files\Media+PlayerVidEd2.0\b23de764-5915-42e6-b4d8-63b3fd8723ac.exe (.not file.) [0] [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000Core] (.Facebook Inc..) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000UA] (.Facebook Inc..) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004Core] (.Facebook Inc..) -- C:\Users\Utilisateurs Externe\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004UA] (.Facebook Inc..) -- C:\Users\Utilisateurs Externe\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] © [MD5.00000000000000000000000000000000] [APT] [GinyasBrowserCompanion Chrome Watcher] (...) -- C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [GinyasBrowserCompanion FireFox Watcher] (...) -- C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [GinyasBrowserCompanion Stats Report] (...) -- C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [GinyasBrowserCompanion Update Checker] (...) -- C:\ProgramData\GinyasBrowserCompanion\tbhcn.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [LaunchSignup] (...) -- C:\Program Files\MyPC Backup\Signup Wizard.exe (.not file.) [0] =>PUP.Optional.MyPCBackup [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [187544] © [MD5.00000000000000000000000000000000] [APT] [Superclean] (...) -- c:\programdata\{f7d2498f-a320-a487-f7d2-2498fa32263e}\hqghumeaylnlf.exe (.not file.) [0] =>PUP.Optional.Adwareplugin [MD5.64E8DB17AA4D027C24F302AC0E769EFF] [APT] [{10DC5182-0E48-406F-B00F-93D6DC113A14}] (.Opera Software.) -- c:\program files\Opera\opera.exe [879456] © [MD5.64E8DB17AA4D027C24F302AC0E769EFF] [APT] [{8B92DDBD-EBCA-4140-87E6-3B092BB8C1D7}] (.Opera Software.) -- c:\program files\Opera\opera.exe [879456] © [MD5.64E8DB17AA4D027C24F302AC0E769EFF] [APT] [{B714D24E-8D13-41FD-9766-012E633A6B12}] (.Opera Software.) -- c:\program files\Opera\opera.exe [879456] © [MD5.25E8FAE159E9D28B490A936FD41C53D6] [APT] [{F047696F-8F68-4458-BE52-8233FCF9B046}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe [53729824] © [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984] © [MD5.DACB699B2072D5C347C3AB67E046EA37] [APT] [Hewlett-Packard\HP Assistant\PC Health Analysis] (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [1379592] © [MD5.DACB699B2072D5C347C3AB67E046EA37] [APT] [Hewlett-Packard\HP Assistant\PC Tuneup] (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [1379592] © O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] © O39 - APT: b23de764-5915-42e6-b4d8-63b3fd8723ac - (...) -- C:\Windows\Tasks\b23de764-5915-42e6-b4d8-63b3fd8723ac.job [630] O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000Core.job [1070] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000UA.job [1092] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004Core.job [966] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004UA.job [988] © O39 - APT: GinyasBrowserCompanion Chrome Watcher - (...) -- C:\Windows\Tasks\GinyasBrowserCompanion Chrome Watcher.job [996] O39 - APT: GinyasBrowserCompanion FireFox Watcher - (...) -- C:\Windows\Tasks\GinyasBrowserCompanion FireFox Watcher.job [996] O39 - APT: GinyasBrowserCompanion Stats Report - (...) -- C:\Windows\Tasks\GinyasBrowserCompanion Stats Report.job [1044] O39 - APT: GinyasBrowserCompanion Update Checker - (...) -- C:\Windows\Tasks\GinyasBrowserCompanion Update Checker.job [928] O39 - APT: Superclean - (...) -- C:\Windows\Tasks\Superclean.job [338] =>PUP.Optional.Adwareplugin O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] © O39 - APT: b23de764-5915-42e6-b4d8-63b3fd8723ac - (...) -- C:\Windows\System32\Tasks\b23de764-5915-42e6-b4d8-63b3fd8723ac [3652] O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000Core [3694] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1000UA [4062] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004Core [3622] © O39 - APT: FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-355323548-142960536-4238720158-1004UA [3990] © O39 - APT: GinyasBrowserCompanion Chrome Watcher - (...) -- C:\Windows\System32\Tasks\GinyasBrowserCompanion Chrome Watcher [3612] O39 - APT: GinyasBrowserCompanion FireFox Watcher - (...) -- C:\Windows\System32\Tasks\GinyasBrowserCompanion FireFox Watcher [3612] O39 - APT: GinyasBrowserCompanion Stats Report - (...) -- C:\Windows\System32\Tasks\GinyasBrowserCompanion Stats Report [4402] O39 - APT: GinyasBrowserCompanion Update Checker - (...) -- C:\Windows\System32\Tasks\GinyasBrowserCompanion Update Checker [3612] O39 - APT: LaunchSignup - (...) -- C:\Windows\System32\Tasks\LaunchSignup [3996] =>PUP.Optional.MyPCBackup O39 - APT: RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000 [3188] © O39 - APT: RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004 [3252] © O39 - APT: RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000 [3324] © O39 - APT: RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004 [3356] © O39 - APT: RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1000 [3188] © O39 - APT: RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-355323548-142960536-4238720158-1004 [3252] © O39 - APT: RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1000 [3324] © O39 - APT: RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-355323548-142960536-4238720158-1004 [3356] © O39 - APT: Superclean - (...) -- C:\Windows\System32\Tasks\Superclean [3248] =>PUP.Optional.Adwareplugin ---\\ Logiciels installés (145) - 22s O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (12/16/2009 6.2.0.9414) - (.Broadcom.) [HKLM] -- 0973B297E079B467E3776E59F763D63FD557795B © O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) - (.Broadcom.) [HKLM] -- A6A8668C0A13640CA28FE2A7D9654BE4AE478B13 © O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR © O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI © O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player © O42 - Logiciel: Advanced WMA Workshop version 2.7.4 - (.LitexMedia, Inc..) [HKLM] -- Advanced WMA Workshop_is1 O42 - Logiciel: Allok RM RMVB to AVI MPEG DVD Converter 3.4.0609 - (.Allok Soft Inc..) [HKLM] -- Allok RM RMVB to AVI MPEG DVD Converter_is1 O42 - Logiciel: Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) - (.Broadcom.) [HKLM] -- BF20603967CFDCB2BBF91950E8A56DFBC5C833FE © O42 - Logiciel: BitTorrent - (...) [HKLM] -- BitTorrent O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11 Wireless LAN Adapter © O42 - Logiciel: BrowserCompanion - (...) [HKLM] -- BrowserCompanion O42 - Logiciel: BS.Player PRO - (.AB Team, d.o.o..) [HKLM] -- BSPlayerp O42 - Logiciel: CamStudio 2.0 Fr - (...) [HKLM] -- CamStudio 2.0 Fr_is1 O42 - Logiciel: CDex extraction audio - (...) [HKLM] -- CDex O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 © O42 - Logiciel: Cisco Networking Academy curriculum 4.0.0.0 - (.Cisco Systems, Inc..) [HKLM] -- Cisco Networking Academy curriculum_is1 © O42 - Logiciel: Adobe Widget Browser - (.Adobe Systems Incorporated..) [HKLM] -- com.adobe.WidgetBrowser © O42 - Logiciel: DAEMON Tools Toolbar - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Toolbar © O42 - Logiciel: DealPly (remove only) - (.DealPly Technologies Ltd..) [HKLM] -- DealPly =>PUP.Optional.Dealply O42 - Logiciel: Defaulttab - (.Search Results, LLC.) [HKLM] -- DefaultTab =>PUP.Optional.IMBooster O42 - Logiciel: Dev-C++ 5 beta 9 release (4.9.9.2) - (...) [HKLM] -- Dev-C++ O42 - Logiciel: Easy Audio Cutter V2.0 - (.Koyote Soft.) [HKLM] -- Easy Audio Cutter_is1 © O42 - Logiciel: Fake Webcam 7.3 - (.Web Solution Mart.) [HKLM] -- fakewebcam7.3.0_is1 © O42 - Logiciel: FormatFactory 3.00 - (.Free Time.) [HKLM] -- FormatFactory © O42 - Logiciel: Fake Webcam Codecs Pack 1.0.0 - (.Web Solution Mart.) [HKLM] -- fwccpsetup_is1 © O42 - Logiciel: GIMP 2.8.2 - (.The GIMP Team.) [HKLM] -- GIMP-2_is1 © O42 - Logiciel: GinyasBrowserCompanion - (.Ginyas.) [HKLM] -- GinyasBrowserCompanion O42 - Logiciel: GNS3 0.7.2 - (...) [HKLM] -- GNS3 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome © O42 - Logiciel: HDM Connection Manager - (.Huawei Technologies Co.,Ltd.) [HKLM] -- HDM Connection Manager © O42 - Logiciel: Host Secure v1.3 - (.Host Secure.) [HKLM] -- Host Secure O42 - Logiciel: HostSecurePlugin (remove only) - (. .) [HKLM] -- HostSecurePlugin O42 - Logiciel: HSPA USB MODEM - (.Alcatel.) [HKLM] -- HSPA USB MODEM ALCATEL_is1 © O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager © O42 - Logiciel: Internet Mobile - (.Huawei Technologies Co.,Ltd.) [HKLM] -- Internet Mobile © O42 - Logiciel: YAC(Yet Another Cleaner!) - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM] -- iSafe =>PUP.Optional.Elex O42 - Logiciel: Lagarith lossless video codec (Remove Only) - (...) [HKLM] -- LAGARITH O42 - Logiciel: LSI HDA Modem - (.LSI Corporation.) [HKLM] -- LSI Soft Modem © O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 © O42 - Logiciel: Messenger Plus! - (.Yuna Software.) [HKLM] -- Messenger Plus! © O42 - Logiciel: Messenger Plus! for Skype - (.Yuna Software.) [HKLM] -- Messenger Plus! for Skype © O42 - Logiciel: Messenger Plus Toolbar - (.Messenger Plus.) [HKLM] -- Messenger_Plus Toolbar O42 - Logiciel: Microsoft Document Explorer 2008 - (.Microsoft Corporation.) [HKLM] -- Microsoft Document Explorer 2008 © O42 - Logiciel: Module linguistique Microsoft Document Explorer 2008 - FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft Document Explorer 2008 Language Pack - FRA © O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client © O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime - (.Microsoft Corporation.) [HKLM] -- Microsoft Visual Studio 2005 Tools for Office Runtime © O42 - Logiciel: Mihov Image Resizer 1.2 (remove only) - (...) [HKLM] -- Mihov Image Resizer O42 - Logiciel: Mobogenie - (.Mobogenie.com.) [HKLM] -- Mobogenie =>PUP.Optional.Mobogenie O42 - Logiciel: Modem HDM EC156 - (.Huawei Technologies Co.,Ltd.) [HKLM] -- Modem HDM EC156 © O42 - Logiciel: Mozilla Firefox 38.0.5 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 38.0.5 (x86 fr) © O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService © O42 - Logiciel: Microsoft Project Professionnel 2013 - (.Microsoft Corporation.) [HKLM] -- Office15.PRJPRO © O42 - Logiciel: Opera 12.17 - (.Opera Software ASA.) [HKLM] -- Opera 12.17.1863 © O42 - Logiciel: Packet Tracer 5.1 - (.Cisco Systems, Inc..) [HKLM] -- Packet Tracer 5.1_is1 © O42 - Logiciel: PowerISO - (.PowerISO Computing, Inc..) [HKLM] -- PowerISO O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 16.0 © O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey © O42 - Logiciel: Veetle TV - (.Veetle, Inc.) [HKLM] -- Veetle TV © O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime - (.Microsoft Corporation.) [HKLM] -- Visual Studio Tools for the Office system 3.0 Runtime © O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FR - (.Microsoft Corporation.) [HKLM] -- Visual Studio Tools for the Office system 3.0 Runtime Language Pack - FRA © O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player © O42 - Logiciel: VMware Workstation - (.VMware, Inc.) [HKLM] -- VMware_Workstation © O42 - Logiciel: vShare.tv plugin 1.3 - (.vShare.tv, Inc..) [HKLM] -- vShare.tv plugin O42 - Logiciel: WampServer 2.0 - (.Romain Bourdon (Roms).) [HKLM] -- WampServer 2_is1 O42 - Logiciel: WinPcap 4.1.1 - (.CACE Technologies.) [HKLM] -- WinPcapInst © O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} © O42 - Logiciel: tools-freebsd - (.VMware, Inc..) [HKLM] -- {003BFBBD-6C67-419E-A24D-0DCAFC3A5249} © O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {0718A90E-93AA-49AF-A4FE-0165ACD91DF0} © O42 - Logiciel: VMware Workstation - (.VMware, Inc..) [HKLM] -- {0D94F75A-0EA6-4951-B3AF-B145FA9E05C6} © O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10} © O42 - Logiciel: ISO Recorder - (.Alex Feinman.) [HKLM] -- {1235083F-52F9-44CC-9DF5-F9B7802BB9B7} © O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {18D47FA1-0440-48D3-A7E0-DA09537FF471} © O42 - Logiciel: tools-netware - (.VMware, Inc..) [HKLM] -- {197597A7-AD33-4898-9D8E-73066818B464} © O42 - Logiciel: HP Webcam - (.Roxio.) [HKLM] -- {1D61E881-43CD-447B-9E6B-D2C6138B2862} © O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} © O42 - Logiciel: Crystal Reports Basic French Language Pack for Visual Studio 2008 - (.Business Objects.) [HKLM] -- {2516845C-017F-4036-828B-3365FF640AB6} © O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} © O42 - Logiciel: Java(TM) 6 Update 31 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF} © O42 - Logiciel: Java 7 Update 71 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF} © O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} © O42 - Logiciel: Angry Birds - (.Rovio.) [HKLM] -- {2F7D5734-056F-4A0A-A1C7-CA1AAE5BB1EB} © O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8} © O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Fran - (.Microsoft Corporation.) [HKLM] -- {3380F354-C5F7-4E71-8F51-EEE6C3F06C62} © O42 - Logiciel: Modem LG LDU-1900D - (.LG Electronics.) [HKLM] -- {43DB077F-C85F-42CC-8302-17CBEE4A6BC6} © O42 - Logiciel: Sybase PowerAMC 15.1 - (.Sybase Inc..) [HKLM] -- {48B0BE4A-EDC9-44C4-A3DB-67D62D75961F} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard.) [HKLM] -- {495A8A3C-8FD0-4C46-9979-95C26181A1AB} © O42 - Logiciel: SAGEM F@st 800-840 - (...) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F} O42 - Logiciel: Messenger Plus! Community Smartbar - (.Messenger Plus!.) [HKLM] -- {4C6C9AB1-BC69-4CC1-AE46-4053352586CB} =>PUP.Optional.SmartBar O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825} © O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} © O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C} © O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} © O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and I - (.Microsoft Corporation.) [HKLM] -- {64c5b887-b5ee-42b8-8596-78905a6b5f1f} © O42 - Logiciel: Microsoft Document Explorer 2008 - (.Microsoft Corporation.) [HKLM] -- {6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D} © O42 - Logiciel: VAudix - (.Vaudix.) [HKLM] -- {681002C6-5019-81A2-7871-A43754F71E56} =>PUP.Optional.CrossRider O42 - Logiciel: Webplayer setup version 1.0 - (...) [HKLM] -- {68D2ED23-69EB-46B7-812C-FDC04C5CA032}_is1 O42 - Logiciel: Skype™ 7.8 - (.Skype Technologies S.A..) [HKLM] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} © O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {6E3939AE-9996-4D07-9A30-14C78AE93576} © O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - (.Microsoft.) [HKLM] -- {6E88CC59-832E-39AF-AE17-B9017DDB12C3} © O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {705B639E-FAAF-40D7-AD58-C445321C7C3F} © O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} © O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} © O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries - (.Microsoft Corporation.) [HKLM] -- {842FAF7C-50EF-4463-9B8F-6222E1384D7D} © O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} © O42 - Logiciel: Sun VirtualBox - (.Sun Microsystems, Inc..) [HKLM] -- {870832ED-43F3-4425-931C-137C18902664} © O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} © O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime - (.Microsoft Corporation.) [HKLM] -- {8FB53850-246A-3507-8ADE-0060093FFEA6} © O42 - Logiciel: Microsoft Project Professional 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-003B-0000-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Project MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00B4-040C-0000-0000000FF1CE} © O42 - Logiciel: REALTEK Wireless LAN Software - (.REALTEK Semiconductor Corp..) [HKLM] -- {901F0D4C-009D-1112-8DE4-03599E7B0C5C} © O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E} © O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Pocket PC - (.Microsoft Corporation.) [HKLM] -- {94576E4F-703B-4038-806B-CDE9479A33AF} © O42 - Logiciel: VmciSockets - (.VMware, Inc..) [HKLM] -- {9757062A-CF62-47C3-B649-C91BBB8CA9DE} © O42 - Logiciel: Broadcom 2070 Bluetooth 2.1 + EDR - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E} © O42 - Logiciel: Microsoft Device Emulator version 3.0 - FRA - (.Microsoft Corporation.) [HKLM] -- {A5774693-2D17-3E6C-9324-97B17C5AA1E9} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} © O42 - Logiciel: Crystal Reports Basic for Visual Studio 2008 - (.Business Objects.) [HKLM] -- {AA467959-A1D6-4F45-90CD-11DC57733F32} © O42 - Logiciel: Microsoft Document Explorer 2008 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {AACA7728-BE87-3D11-8A3F-773664BFCF1B} © O42 - Logiciel: tools-solaris - (.VMware, Inc..) [HKLM] -- {AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4} © O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} © O42 - Logiciel: tools-winPre2k - (.VMware, Inc..) [HKLM] -- {AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D} © O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1} © O42 - Logiciel: RealDownloader - (.RealNetworks, Inc..) [HKLM] -- {AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34} © O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Win32 Tools - (.Microsoft Corporation.) [HKLM] -- {B268E9A1-04A9-40D0-9866-846BE2B74BA7} © O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7} © O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D} © O42 - Logiciel: HP Web Camera - (.Hewlett-Packard.) [HKLM] -- {C7AE4EC3-9C13-4213-8457-74D16B353F91} © O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Tools - (.Microsoft Corporation.) [HKLM] -- {CAA376AF-0DE8-4FCA-942E-C6AC579B94B3} © O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Smartphone - (.Microsoft Corporation.) [HKLM] -- {CCFA733C-2F56-4E8C-90B4-B38807400B7A} © O42 - Logiciel: tools-linux - (.VMware, Inc..) [HKLM] -- {D102611A-6466-4101-A51D-51069303AC65} © O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {D9DAD0FF-495A-472B-9F10-BAE430A26682} © O42 - Logiciel: HP HotKey Support - (.Hewlett-Packard Company.) [HKLM] -- {DEBC1876-DB4C-4A66-ABC6-E01846832610} © O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} © O42 - Logiciel: USB PC Camera-168 - (.Sonix.) [HKLM] -- {ECD03DA7-5952-406A-8156-5F0C93618D1F} © O42 - Logiciel: Adobe Widget Browser - (.Adobe Systems Incorporated..) [HKLM] -- {EFBE6DD5-B224-96E5-72B9-68D328CB12A6} © O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} © O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} © O42 - Logiciel: Realtek Ethernet Controller All-In-One Windows Driver - (.Realtek.) [HKLM] -- {F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F} © O42 - Logiciel: Livebox - (.SAGEM.) [HKLM] -- {FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E} © O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} © O42 - Logiciel: Sybase PowerAMC 11.1 Evaluation - (...) [HKLM] -- {FE492F35-7EE6-4DA5-BF68-56A9FC64A4E2} O42 - Logiciel: tools-windows - (.VMware, Inc..) [HKLM] -- {FFD9383C-01D5-4897-A954-43AF599AED30} © O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU] -- CodeBlocks © ---\\ HKCU & HKLM Software Keys (229) - 22s HKLM\SOFTWARE\"echo_installer"/n HKLM\SOFTWARE\29d2f1bb-1bf3-22b0-713a-595e2a9bff98 =>PUP.Optional.CrossRider HKLM\SOFTWARE\5a6de8cb36eef41 =>PUP.Optional.Heuristic HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\Agere HKLM\SOFTWARE\Ahead HKLM\SOFTWARE\Alcatel HKLM\SOFTWARE\Analog Devices HKLM\SOFTWARE\AppDataLow HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\Atheros HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\Audible HKLM\SOFTWARE\AVS4YOU HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon HKLM\SOFTWARE\BcmSetup HKLM\SOFTWARE\BrowserChoice HKLM\SOFTWARE\BrowserCompanion =>PUP.Optional.Blabbers HKLM\SOFTWARE\Business Objects HKLM\SOFTWARE\Canon HKLM\SOFTWARE\Caphyon HKLM\SOFTWARE\CDDB HKLM\SOFTWARE\CDex HKLM\SOFTWARE\Chilkat Software, Inc. HKLM\SOFTWARE\Client HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\Dev-C++ HKLM\SOFTWARE\DeviceHelper HKLM\SOFTWARE\DIOC HKLM\SOFTWARE\DT Soft HKLM\SOFTWARE\Elaborate Bytes HKLM\SOFTWARE\Elex-tech HKLM\SOFTWARE\ESET HKLM\SOFTWARE\GEAR Software HKLM\SOFTWARE\GinyasBrowserCompanion =>PUP.Optional.Blabbers HKLM\SOFTWARE\Google HKLM\SOFTWARE\HaaliMkx HKLM\SOFTWARE\hdcode HKLM\SOFTWARE\Hewlett-Packard HKLM\SOFTWARE\Host Secure HKLM\SOFTWARE\HP HKLM\SOFTWARE\HPQ HKLM\SOFTWARE\Huawei technologies HKLM\SOFTWARE\IDT HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Internet Download Manager HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\KasperskyLab HKLM\SOFTWARE\KONAMI HKLM\SOFTWARE\LG Electronics HKLM\SOFTWARE\Licenses HKLM\SOFTWARE\LightScribe HKLM\SOFTWARE\LSI HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Macrovision HKLM\SOFTWARE\MaxPower HKLM\SOFTWARE\McAfee.com HKLM\SOFTWARE\mcafeeupdater HKLM\SOFTWARE\MediaCoder HKLM\SOFTWARE\MediaViewerV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\MediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Messenger_Plus =>PUP.Optional.Conduit HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\Nero HKLM\SOFTWARE\Netscape HKLM\SOFTWARE\ObviousIdea HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\Opera Software HKLM\SOFTWARE\Oracle HKLM\SOFTWARE\PDFCreator HKLM\SOFTWARE\PIP =>Toolbar.Ask HKLM\SOFTWARE\PowerISO HKLM\SOFTWARE\RealNetworks HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\REALTEK Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\RichMediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Roxio HKLM\SOFTWARE\RTLSetup HKLM\SOFTWARE\RtWLan HKLM\SOFTWARE\SAGEM HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Sonix HKLM\SOFTWARE\Sun HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Sybase HKLM\SOFTWARE\Symantec HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\TeamViewer HKLM\SOFTWARE\ThinPrint HKLM\SOFTWARE\Trymedia Systems =>PUP.Optional.Trymedia HKLM\SOFTWARE\ValuSoft HKLM\SOFTWARE\Veetle HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\VMware, Inc. HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\VSO HKLM\SOFTWARE\Web Solution Mart HKLM\SOFTWARE\Webteh HKLM\SOFTWARE\Widcomm HKLM\SOFTWARE\Windows HKLM\SOFTWARE\WinPcap HKLM\SOFTWARE\WinRAR HKLM\SOFTWARE\Wow6432Node HKLM\SOFTWARE\Xing Technology Corp. HKLM\SOFTWARE\Yuna Software HKCU\SOFTWARE\5a6de8cb36eef41 =>PUP.Optional.Heuristic HKCU\SOFTWARE\AC3Filter HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Ahead HKCU\SOFTWARE\Alex Feinman HKCU\SOFTWARE\Alnaddy.com =>PUP.Optional.Alnaddy HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\Audacity HKCU\SOFTWARE\AVS4YOU HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\BrowserCompanion =>PUP.Optional.Blabbers HKCU\SOFTWARE\BrowserTemp HKCU\SOFTWARE\BST HKCU\SOFTWARE\Camfrog HKCU\SOFTWARE\Canon HKCU\SOFTWARE\Caphyon HKCU\SOFTWARE\CDDB HKCU\SOFTWARE\Chilkat Software, Inc. HKCU\SOFTWARE\CodeBlocks HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\Cygnus Solutions HKCU\SOFTWARE\David Esperalta HKCU\SOFTWARE\Digital River HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\DT Soft HKCU\SOFTWARE\EasyBits HKCU\SOFTWARE\ESET HKCU\SOFTWARE\Facebook HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\fwc HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\Generateur Mot de Passe HKCU\SOFTWARE\GoldWave HKCU\SOFTWARE\Google HKCU\SOFTWARE\Grand Virtual =>PUP.Optional.GrandVirtual HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\IDT HKCU\SOFTWARE\IE HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\kde.org HKCU\SOFTWARE\LANGAGENT HKCU\SOFTWARE\LAV HKCU\SOFTWARE\LG Electronics HKCU\SOFTWARE\LightScribe HKCU\SOFTWARE\LitexMedia HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\MCAFEE HKCU\SOFTWARE\MGinstall HKCU\SOFTWARE\Mihov Image Resizer HKCU\SOFTWARE\Mihove feke HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Nero HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Norton HKCU\SOFTWARE\ObviousIdea HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PalTalk HKCU\SOFTWARE\PDFCreator HKCU\SOFTWARE\PIP =>Toolbar.Ask HKCU\SOFTWARE\PixelChain HKCU\SOFTWARE\PowerISO HKCU\SOFTWARE\RealNetworks HKCU\SOFTWARE\RLZer HKCU\SOFTWARE\SightSpeed Inc HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Skypelauncher HKCU\SOFTWARE\SKYPEPSW HKCU\SOFTWARE\SkypeRS HKCU\SOFTWARE\SlySoft HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\StartSearch =>PUP.Optional.StartSearch HKCU\SOFTWARE\Sybase HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\TeamViewer HKCU\SOFTWARE\TeleCharger HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\UbiSoft Entertainment HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\ValuSoft HKCU\SOFTWARE\Veetle HKCU\SOFTWARE\VMware, Inc. HKCU\SOFTWARE\vShare.tv =>PUP.Optional.VShareRedir HKCU\SOFTWARE\VSO HKCU\SOFTWARE\Web Solution Mart HKCU\SOFTWARE\WebApp HKCU\SOFTWARE\Widcomm HKCU\SOFTWARE\Winamp HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Yahoo HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\Yuna Software HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\Zyrax Software HKCU\SOFTWARE\AppDataLow\RealNetworks HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Toolbar HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\Macromedia HKCU\SOFTWARE\AppDataLow\Software\Messenger_Plus =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\ShopperReports3 =>PUP.Optional.ShopperReports HKCU\SOFTWARE\AppDataLow\Software\Simplytech =>PUP.Optional.SimplyTech HKCU\SOFTWARE\AppDataLow\Software\ThinPrint ---\\ Contenu des dossiers Programmes (937) - 65s O43 - CFD: 2014/08/16 21:43:13 - [] D -- C:\Program Files\Adobe O43 - CFD: 2011/01/01 15:19:08 - [] D -- C:\Program Files\Ahead O43 - CFD: 2013/02/20 21:32:55 - [] D -- C:\Program Files\Alex Feinman O43 - CFD: 2010/12/27 01:23:18 - [] D -- C:\Program Files\Allok RM RMVB to AVI MPEG DVD Converter O43 - CFD: 2011/10/24 15:42:22 - [] D -- C:\Program Files\Apple Software Update O43 - CFD: 2010/07/21 12:30:45 - [] D -- C:\Program Files\Atheros O43 - CFD: 2011/10/01 02:06:21 - [0] D -- C:\Program Files\AVS4YOU O43 - CFD: 2012/02/08 17:34:06 - [] D -- C:\Program Files\BitTorrent O43 - CFD: 2011/11/25 21:12:23 - [] D -- C:\Program Files\Bonjour O43 - CFD: 2010/07/21 12:29:52 - [] D -- C:\Program Files\Broadcom O43 - CFD: 2015/05/20 16:27:49 - [] D -- C:\Program Files\BrowserCompanion O43 - CFD: 2010/12/21 15:54:51 - [] D -- C:\Program Files\Business Objects O43 - CFD: 2011/02/02 18:09:58 - [] D -- C:\Program Files\CamStudio O43 - CFD: 2015/04/28 13:35:19 - [] D -- C:\Program Files\Canon O43 - CFD: 2010/10/25 14:32:39 - [] D -- C:\Program Files\CDex_150 O43 - CFD: 2015/08/31 16:04:00 - [] D -- C:\Program Files\China Weather Forecast O43 - CFD: 2015/08/31 16:03:47 - [] D -- C:\Program Files\ClipMonkey O43 - CFD: 2010/12/22 03:03:13 - [] D -- C:\Program Files\CodeBlocks O43 - CFD: 2015/08/24 12:21:27 - [] D -- C:\Program Files\Common Files O43 - CFD: 2010/12/29 15:52:12 - [] D -- C:\Program Files\DAEMON Tools Lite O43 - CFD: 2010/07/21 12:27:34 - [] D -- C:\Program Files\DIFX O43 - CFD: 2015/09/27 00:58:03 - [] D -- C:\Program Files\DNS Unlocker =>PUP.Optional.DNSUnlocker O43 - CFD: 2011/12/19 22:02:47 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 2011/08/09 18:24:34 - [] D -- C:\Program Files\Easy Audio Mp3 Wma Ogg Cutter O43 - CFD: 2013/03/08 22:30:23 - [] D -- C:\Program Files\EasyPHP-12.1 O43 - CFD: 2013/03/08 21:55:26 - [] D -- C:\Program Files\EasyPHP5.3.0 O43 - CFD: 2015/06/11 15:20:39 - [] D -- C:\Program Files\Elex-tech =>PUP.Optional.Elex O43 - CFD: 2014/04/21 14:44:10 - [] D -- C:\Program Files\Fake Webcam 7.3 O43 - CFD: 2010/07/20 18:52:20 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 2013/05/30 21:53:15 - [] D -- C:\Program Files\FreeTime O43 - CFD: 2013/02/06 00:53:44 - [] D -- C:\Program Files\GIMP 2 O43 - CFD: 2014/02/21 19:44:42 - [] D -- C:\Program Files\GNS3 O43 - CFD: 2014/04/15 13:14:14 - [] D -- C:\Program Files\Google O43 - CFD: 2010/10/21 01:10:51 - [] D -- C:\Program Files\HDM Connection Manager O43 - CFD: 2010/07/21 12:34:36 - [] D -- C:\Program Files\Hewlett-Packard O43 - CFD: 2012/09/09 23:06:00 - [] D -- C:\Program Files\HSPA USB MODEM O43 - CFD: 2010/07/21 12:18:42 - [] D -- C:\Program Files\IDT O43 - CFD: 2014/04/21 14:30:56 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 2010/07/21 12:31:32 - [] D -- C:\Program Files\Intel O43 - CFD: 2013/02/20 03:05:25 - [] D -- C:\Program Files\Internet Download Manager O43 - CFD: 2015/09/10 03:25:23 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 2011/01/20 01:53:35 - [] D -- C:\Program Files\Internet Mobile O43 - CFD: 2014/06/19 00:12:49 - [] D -- C:\Program Files\iPod O43 - CFD: 2014/06/19 00:13:58 - [] D -- C:\Program Files\iTunes O43 - CFD: 2014/12/20 00:03:33 - [] D -- C:\Program Files\Java O43 - CFD: 2013/06/10 17:22:34 - [] D -- C:\Program Files\LG Electronics O43 - CFD: 2015/08/18 22:43:54 - [0] D -- C:\Program Files\LighterModulator O43 - CFD: 2011/10/01 02:06:30 - [] D -- C:\Program Files\LitexMedia O43 - CFD: 2012/11/12 15:30:05 - [] D -- C:\Program Files\Localphone Ltd O43 - CFD: 2010/07/21 12:25:34 - [] D -- C:\Program Files\LSI SoftModem O43 - CFD: 2015/09/26 22:27:59 - [] D -- C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 2015/09/27 00:04:08 - [] D -- C:\Program Files\Media+PlayerVidEd2.0 O43 - CFD: 2011/10/01 02:20:40 - [] D -- C:\Program Files\MediaCoder O43 - CFD: 2010/10/24 02:31:16 - [] D -- C:\Program Files\Messenger Plus! Live O43 - CFD: 2015/09/27 00:04:10 - [] D -- C:\Program Files\Messenger_Plus O43 - CFD: 2014/02/18 19:12:09 - [0] D -- C:\Program Files\Microsoft O43 - CFD: 2013/05/20 23:57:44 - [] D -- C:\Program Files\Microsoft Analysis Services O43 - CFD: 2010/12/21 15:52:08 - [] D -- C:\Program Files\Microsoft Device Emulator O43 - CFD: 2009/07/14 05:52:30 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 2013/05/20 23:58:42 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 2010/12/21 15:44:01 - [] D -- C:\Program Files\Microsoft SDKs O43 - CFD: 2015/05/14 03:25:26 - [] D -- C:\Program Files\Microsoft Security Client O43 - CFD: 2015/08/12 11:39:18 - [] D -- C:\Program Files\Microsoft Silverlight O43 - CFD: 2011/04/09 02:29:25 - [] D -- C:\Program Files\Microsoft SQL Server O43 - CFD: 2012/07/10 20:26:50 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 2010/12/21 15:51:28 - [] D -- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 2010/10/22 13:38:46 - [] D -- C:\Program Files\Microsoft Visual Studio O43 - CFD: 2010/10/22 13:35:16 - [] D -- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 2012/04/28 12:21:02 - [] D -- C:\Program Files\Microsoft Visual Studio 9.0 O43 - CFD: 2010/12/21 15:43:05 - [] D -- C:\Program Files\Microsoft Web Designer Tools O43 - CFD: 2010/10/24 18:42:15 - [] D -- C:\Program Files\Microsoft Works O43 - CFD: 2010/12/21 15:53:17 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 2011/02/08 15:42:15 - [] D -- C:\Program Files\Mihov Image Resizer O43 - CFD: 2015/02/11 21:16:39 - [] D -- C:\Program Files\Modem HDM EC156 O43 - CFD: 2015/09/26 23:56:39 - [] D -- C:\Program Files\Mozilla Firefox O43 - CFD: 2015/06/03 15:01:33 - [] D -- C:\Program Files\Mozilla Maintenance Service O43 - CFD: 2012/04/28 12:17:37 - [] D -- C:\Program Files\MSBuild O43 - CFD: 2011/01/02 19:01:03 - [0] D -- C:\Program Files\MSXML 4.0 O43 - CFD: 2011/02/05 04:18:54 - [] D -- C:\Program Files\Nero O43 - CFD: 2011/12/22 19:41:47 - [] D -- C:\Program Files\NetSpot Device Installer O43 - CFD: 2014/02/23 17:32:14 - [0] D -- C:\Program Files\NirSoft O43 - CFD: 2014/04/23 23:12:43 - [] D -- C:\Program Files\Opera O43 - CFD: 2012/06/21 16:26:41 - [] D -- C:\Program Files\Oracle O43 - CFD: 2011/03/22 17:39:27 - [] D -- C:\Program Files\Packet Tracer 5.1 O43 - CFD: 2011/02/07 15:44:57 - [] D -- C:\Program Files\PDFCreator O43 - CFD: 2015/09/27 00:21:11 - [] D -- C:\Program Files\Picexa =>PUP.Optional.Picexa O43 - CFD: 2010/12/12 14:05:26 - [] D -- C:\Program Files\PowerISO O43 - CFD: 2011/02/22 02:38:54 - [] D -- C:\Program Files\QuickTime O43 - CFD: 2013/01/03 20:47:09 - [] D -- C:\Program Files\Real O43 - CFD: 2013/01/03 20:47:21 - [] D -- C:\Program Files\RealNetworks O43 - CFD: 2010/07/21 12:29:02 - [] D -- C:\Program Files\Realtek O43 - CFD: 2009/07/14 05:52:30 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 2012/04/25 01:50:32 - [] D -- C:\Program Files\Rovio O43 - CFD: 2013/05/27 19:30:36 - [] D -- C:\Program Files\Safari O43 - CFD: 2011/12/07 20:39:27 - [] D -- C:\Program Files\SAGEM O43 - CFD: 2015/08/24 12:21:28 - [] RD -- C:\Program Files\Skype O43 - CFD: 2010/12/13 00:24:45 - [0] D -- C:\Program Files\SlySoft O43 - CFD: 2015/08/31 16:03:32 - [] D -- C:\Program Files\SpaeceOOFifers =>PUP.Optional.Multiplug O43 - CFD: 2010/12/15 22:50:26 - [] D -- C:\Program Files\Sun O43 - CFD: 2015/09/27 00:03:43 - [] D -- C:\Program Files\SupTab =>PUP.Optional.SupTab O43 - CFD: 2013/04/20 10:36:48 - [] D -- C:\Program Files\Sybase O43 - CFD: 2010/07/21 12:22:18 - [] D -- C:\Program Files\Synaptics O43 - CFD: 2013/05/17 19:16:00 - [] D -- C:\Program Files\TeamViewer O43 - CFD: 2012/11/13 01:31:33 - [] D -- C:\Program Files\Toolbar Uninstaller O43 - CFD: 2009/07/14 05:53:23 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 2012/02/08 21:06:08 - [] D -- C:\Program Files\Veetle O43 - CFD: 2011/06/11 23:30:57 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 2013/01/13 11:50:26 - [] D -- C:\Program Files\VMware O43 - CFD: 2014/04/21 14:59:18 - [] D -- C:\Program Files\Web Solution Mart O43 - CFD: 2012/07/02 21:11:25 - [] D -- C:\Program Files\Webteh O43 - CFD: 2010/07/21 12:27:41 - [] D -- C:\Program Files\WIDCOMM O43 - CFD: 2013/07/13 00:37:25 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 2010/12/06 04:01:20 - [] D -- C:\Program Files\Windows Live Safety Center O43 - CFD: 2011/12/19 22:02:47 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 2015/06/10 04:21:18 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 2010/12/21 15:51:59 - [] D -- C:\Program Files\Windows Mobile 5.0 SDK R2 O43 - CFD: 2010/07/20 18:52:20 - [] D -- C:\Program Files\Windows NT O43 - CFD: 2011/12/19 22:02:47 - [] D -- C:\Program Files\Windows Photo Viewer O43 - CFD: 2011/12/19 22:02:47 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 2011/12/19 22:02:47 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 2014/02/21 19:44:31 - [] D -- C:\Program Files\WinPcap O43 - CFD: 2010/10/24 14:26:53 - [] D -- C:\Program Files\WinRAR O43 - CFD: 2015/05/20 16:27:55 - [] D -- C:\Program Files\Yuna Software O43 - CFD: 2013/11/23 20:39:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\18 WoS Pedal to the Metal O43 - CFD: 2010/07/21 12:28:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2009/07/14 05:46:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2011/04/27 21:57:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced WMA Workshop O43 - CFD: 2010/12/27 01:23:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Allok RM RMVB to AVI MPEG DVD Converter O43 - CFD: 2010/12/22 03:02:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ O43 - CFD: 2013/11/23 20:39:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\C O43 - CFD: 2011/02/02 18:09:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio O43 - CFD: 2012/02/14 22:57:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon CanoScan LiDE 110 Manual O43 - CFD: 2010/10/25 14:32:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex O43 - CFD: 2012/01/15 09:54:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Networking Academy O43 - CFD: 2010/12/22 03:03:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 2010/12/29 15:48:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 2011/08/09 18:24:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyAudioCutter O43 - CFD: 2013/03/08 22:29:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyPHP 12.1 O43 - CFD: 2013/03/08 21:55:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyPHP 5.3.0 O43 - CFD: 2014/04/21 14:44:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fake Webcam 7.3 O43 - CFD: 2013/04/27 21:09:03 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2014/02/21 19:44:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3 O43 - CFD: 2015/08/11 02:14:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2010/10/21 01:09:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDM Connection Manager O43 - CFD: 2010/07/21 12:34:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 2012/09/09 23:06:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HSPA USB MODEM O43 - CFD: 2010/07/21 12:31:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager O43 - CFD: 2011/01/15 16:05:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 2012/07/10 19:26:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Mobile O43 - CFD: 2014/06/19 00:14:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 2013/12/13 23:02:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 2011/01/01 17:55:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling O43 - CFD: 2009/07/14 05:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/09/26 22:28:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 2013/05/20 23:47:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2015/09/10 03:08:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 2015/08/12 03:22:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 2010/12/21 15:54:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005 O43 - CFD: 2010/12/21 15:57:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows SDK v6.0A O43 - CFD: 2011/02/08 15:42:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mihov Image Resizer O43 - CFD: 2015/02/11 21:16:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modem HDM EC156 O43 - CFD: 2013/06/10 17:22:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modem LG LDU-1900D O43 - CFD: 2011/03/22 17:39:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packet Tracer 5.1 O43 - CFD: 2011/02/07 15:43:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator O43 - CFD: 2015/09/27 00:05:54 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa O43 - CFD: 2010/12/12 14:05:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO O43 - CFD: 2011/02/22 02:38:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 2013/01/03 20:47:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks O43 - CFD: 2013/04/27 21:09:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio O43 - CFD: 2010/12/21 00:59:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAGEM F@st 800-840 O43 - CFD: 2010/12/03 01:15:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shockwave.com O43 - CFD: 2011/01/12 02:43:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports =>PUP.Optional.ShopperReports O43 - CFD: 2015/08/24 12:21:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 2013/07/15 02:25:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2010/12/15 22:50:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sun VirtualBox O43 - CFD: 2013/04/20 10:36:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sybase O43 - CFD: 2014/04/21 13:43:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB PC Camera-168 O43 - CFD: 2012/01/24 16:53:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2013/01/13 11:51:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware O43 - CFD: 2013/03/09 14:42:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer O43 - CFD: 2012/07/10 20:26:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 2014/02/21 19:44:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap O43 - CFD: 2010/10/24 14:26:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2015/09/27 00:05:40 - [0] D -- C:\ProgramData\10537645602446519976 O43 - CFD: 2014/06/19 00:13:58 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 O43 - CFD: 2015/03/15 02:18:57 - [0] D -- C:\ProgramData\412301046 O43 - CFD: 2014/10/10 03:48:10 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2014/04/15 01:19:16 - [] D -- C:\ProgramData\Apple O43 - CFD: 2011/02/22 02:39:31 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2010/07/21 12:30:47 - [] D -- C:\ProgramData\Atheros O43 - CFD: 2011/10/01 01:50:23 - [] D -- C:\ProgramData\AVS4YOU O43 - CFD: 2011/08/11 01:30:53 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 2010/07/20 18:52:20 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 2012/02/14 23:01:48 - [] HD -- C:\ProgramData\CanonIJEGV O43 - CFD: 2015/04/28 13:34:45 - [0] HD -- C:\ProgramData\CanonIJScan O43 - CFD: 2012/02/14 22:59:27 - [] HD -- C:\ProgramData\CanonIJSolutionMenuEX O43 - CFD: 2012/02/14 22:58:13 - [] D -- C:\ProgramData\CanonIJWSpt O43 - CFD: 2010/12/29 15:46:58 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 2015/02/11 21:17:12 - [] D -- C:\ProgramData\DatacardService O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2011/02/21 22:50:32 - [] D -- C:\ProgramData\Downloaded Installations O43 - CFD: 2011/08/25 06:32:28 - [] D -- C:\ProgramData\Easybits GO O43 - CFD: 2010/12/21 02:00:18 - [0] D -- C:\ProgramData\eMule O43 - CFD: 2010/07/20 18:52:20 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 2010/10/22 14:52:16 - [] D -- C:\ProgramData\FLEXnet O43 - CFD: 2013/02/17 11:26:32 - [] D -- C:\ProgramData\Google O43 - CFD: 2010/10/26 13:00:37 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 2015/09/26 22:52:17 - [] D -- C:\ProgramData\IePluginServices =>Trojan.SProtector O43 - CFD: 2015/05/08 19:47:02 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR O43 - CFD: 2013/04/27 21:06:51 - [] D -- C:\ProgramData\iolo O43 - CFD: 2015/09/27 00:05:40 - [0] D -- C:\ProgramData\jdcihcehlnplmefpjhlmonepilkinapc O43 - CFD: 2011/01/01 18:09:34 - [] D -- C:\ProgramData\LightScribe O43 - CFD: 2015/07/18 01:13:29 - [] D -- C:\ProgramData\MailUpdate =>PUP.Optional.MailUpdate O43 - CFD: 2015/09/26 22:27:49 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2011/03/02 03:08:07 - [] D -- C:\ProgramData\McAfee O43 - CFD: 2010/07/20 18:52:20 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 2012/03/31 00:55:41 - [] D -- C:\ProgramData\Messenger Plus! O43 - CFD: 2014/04/15 21:52:06 - [] D -- C:\ProgramData\Messenger Plus! for Skype O43 - CFD: 2014/12/10 04:02:10 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2015/09/11 03:01:34 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2015/02/11 21:16:44 - [] D -- C:\ProgramData\Modem HDM EC156 O43 - CFD: 2010/07/20 18:52:20 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 2012/05/04 14:39:49 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 2011/02/05 04:25:14 - [] D -- C:\ProgramData\Nero O43 - CFD: 2012/03/17 19:47:13 - [] D -- C:\ProgramData\Norton O43 - CFD: 2010/12/03 03:40:43 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 2014/12/20 00:04:43 - [0] D -- C:\ProgramData\Oracle O43 - CFD: 2010/12/25 16:14:54 - [] D -- C:\ProgramData\PowerAMC 15 O43 - CFD: 2013/01/03 20:47:05 - [] D -- C:\ProgramData\Real O43 - CFD: 2013/01/03 20:47:15 - [] D -- C:\ProgramData\RealNetworks O43 - CFD: 2013/03/08 15:22:25 - [] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 2013/05/20 23:59:35 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 2010/12/03 03:15:21 - [0] D -- C:\ProgramData\shockwave.com O43 - CFD: 2015/08/24 12:22:11 - [] D -- C:\ProgramData\Skype O43 - CFD: 2011/08/24 01:01:30 - [] D -- C:\ProgramData\Skype Extras O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2011/03/25 02:53:37 - [] D -- C:\ProgramData\Sun O43 - CFD: 2010/12/03 03:40:44 - [] D -- C:\ProgramData\Symantec O43 - CFD: 2011/10/01 02:04:57 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 2009/07/14 05:53:55 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2010/07/21 12:17:04 - [] D -- C:\ProgramData\Uninstall O43 - CFD: 2015/09/27 00:49:22 - [] D -- C:\ProgramData\VMware O43 - CFD: 2011/01/15 20:21:44 - [] D -- C:\ProgramData\vsosdk O43 - CFD: 2011/02/22 02:40:14 - [] D -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 2010/07/21 12:34:05 - [] D -- C:\ProgramData\{657095DF-DBDB-4B17-8245-B38845C97069} O43 - CFD: 2015/09/27 00:05:40 - [0] D -- C:\ProgramData\{72c4d6b9-6976-2a5d-72c4-4d6b96975ae5} O43 - CFD: 2015/08/09 01:01:06 - [] D -- C:\ProgramData\{cf82850d-c41a-db1a-cf82-2850dc411437} O43 - CFD: 2015/09/26 23:51:21 - [] D -- C:\ProgramData\{f7d2498f-a320-a487-f7d2-2498fa32263e} O43 - CFD: 2014/08/16 21:43:23 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 2013/03/08 15:19:34 - [] D -- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 2010/10/22 14:42:15 - [] D -- C:\Program Files\Common Files\Ahead O43 - CFD: 2014/06/19 00:12:47 - [] D -- C:\Program Files\Common Files\Apple O43 - CFD: 2011/10/01 01:49:56 - [] D -- C:\Program Files\Common Files\AVSMedia O43 - CFD: 2012/02/14 22:58:21 - [] D -- C:\Program Files\Common Files\CANON O43 - CFD: 2015/09/27 00:05:46 - [0] D -- C:\Program Files\Common Files\Config O43 - CFD: 2014/05/14 03:10:25 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 2012/09/09 23:06:00 - [] D -- C:\Program Files\Common Files\DeviceHelper O43 - CFD: 2013/04/09 00:35:39 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 2010/07/21 12:23:58 - [] D -- C:\Program Files\Common Files\Intel O43 - CFD: 2014/12/20 00:04:27 - [] D -- C:\Program Files\Common Files\Java O43 - CFD: 2011/01/01 17:55:18 - [] D -- C:\Program Files\Common Files\LightScribe O43 - CFD: 2014/03/28 04:04:25 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 2011/02/05 04:27:08 - [] D -- C:\Program Files\Common Files\Nero O43 - CFD: 2011/06/09 16:01:55 - [] D -- C:\Program Files\Common Files\Real O43 - CFD: 2010/07/21 12:17:04 - [] D -- C:\Program Files\Common Files\Roxio Shared O43 - CFD: 2009/07/14 03:37:05 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 2015/08/24 12:21:27 - [] D -- C:\Program Files\Common Files\Skype O43 - CFD: 2014/04/21 14:06:24 - [] D -- C:\Program Files\Common Files\snpstd3 O43 - CFD: 2009/07/14 03:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 2012/11/12 15:51:16 - [] D -- C:\Program Files\Common Files\Spigot =>PUP.Optional.Dealio O43 - CFD: 2012/07/14 04:07:04 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 2013/01/13 11:50:23 - [] D -- C:\Program Files\Common Files\VMware O43 - CFD: 2014/04/21 14:44:16 - [] D -- C:\Program Files\Common Files\Web Solution Mart O43 - CFD: 2010/10/24 02:22:16 - [] D -- C:\Program Files\Common Files\Windows Live O43 - CFD: 2013/01/03 20:47:08 - [] D -- C:\Program Files\Common Files\xing shared O43 - CFD: 2014/10/08 19:57:44 - [] D -- C:\Users\user\AppData\Roaming\Adobe O43 - CFD: 2013/05/27 19:30:52 - [] D -- C:\Users\user\AppData\Roaming\Apple Computer O43 - CFD: 2011/10/10 19:29:47 - [] D -- C:\Users\user\AppData\Roaming\Audacity O43 - CFD: 2011/10/01 01:50:19 - [] D -- C:\Users\user\AppData\Roaming\AVS4YOU O43 - CFD: 2015/09/22 08:05:26 - [] D -- C:\Users\user\AppData\Roaming\BitTorrent O43 - CFD: 2011/10/01 02:20:39 - [0] D -- C:\Users\user\AppData\Roaming\Broad Intelligence O43 - CFD: 2015/09/27 00:49:51 - [] D -- C:\Users\user\AppData\Roaming\BrowserCompanion O43 - CFD: 2013/02/21 04:44:25 - [] D -- C:\Users\user\AppData\Roaming\BSplayer PRO O43 - CFD: 2015/04/28 13:35:16 - [0] D -- C:\Users\user\AppData\Roaming\Canon O43 - CFD: 2012/03/01 01:33:33 - [] D -- C:\Users\user\AppData\Roaming\codeblocks O43 - CFD: 2011/01/05 00:56:05 - [] D -- C:\Users\user\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 2010/12/25 02:26:25 - [] D -- C:\Users\user\AppData\Roaming\Dev-Cpp O43 - CFD: 2015/09/27 00:57:49 - [] D -- C:\Users\user\AppData\Roaming\DMCache O43 - CFD: 2015/08/06 13:24:16 - [] D -- C:\Users\user\AppData\Roaming\eCyber =>PUP.Optional.Elex O43 - CFD: 2015/06/11 15:20:38 - [] D -- C:\Users\user\AppData\Roaming\Elex-tech =>PUP.Optional.Elex O43 - CFD: 2014/12/10 20:54:37 - [] D -- C:\Users\user\AppData\Roaming\Extensions O43 - CFD: 2011/04/27 19:16:31 - [] D -- C:\Users\user\AppData\Roaming\FreeAudioPack O43 - CFD: 2011/08/25 01:02:28 - [] D -- C:\Users\user\AppData\Roaming\go O43 - CFD: 2010/10/21 01:28:58 - [] D -- C:\Users\user\AppData\Roaming\Google O43 - CFD: 2010/10/26 13:03:10 - [] D -- C:\Users\user\AppData\Roaming\Hewlett-Packard O43 - CFD: 2012/11/08 20:46:34 - [] D -- C:\Users\user\AppData\Roaming\hpqLog O43 - CFD: 2010/07/20 18:52:46 - [] D -- C:\Users\user\AppData\Roaming\Identities O43 - CFD: 2015/06/02 15:46:20 - [] D -- C:\Users\user\AppData\Roaming\IDM O43 - CFD: 2012/11/12 15:30:28 - [] D -- C:\Users\user\AppData\Roaming\Localphone_gui O43 - CFD: 2010/10/21 00:28:43 - [] D -- C:\Users\user\AppData\Roaming\Macromedia O43 - CFD: 2015/07/16 21:42:27 - [] D -- C:\Users\user\AppData\Roaming\MailUpdate =>PUP.Optional.MailUpdate O43 - CFD: 2013/06/30 00:22:37 - [] SD -- C:\Users\user\AppData\Roaming\Microsoft O43 - CFD: 2010/10/23 02:12:03 - [] D -- C:\Users\user\AppData\Roaming\Mozilla O43 - CFD: 2011/01/05 00:24:03 - [] D -- C:\Users\user\AppData\Roaming\Nero O43 - CFD: 2015/01/01 16:19:40 - [0] D -- C:\Users\user\AppData\Roaming\ObviousIdea O43 - CFD: 2012/11/12 02:24:55 - [] D -- C:\Users\user\AppData\Roaming\ooVoo Details O43 - CFD: 2013/02/28 17:27:39 - [] D -- C:\Users\user\AppData\Roaming\Opera O43 - CFD: 2010/12/17 02:58:43 - [] D -- C:\Users\user\AppData\Roaming\Paltalk O43 - CFD: 2015/06/11 15:18:07 - [] D -- C:\Users\user\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa O43 - CFD: 2013/01/10 17:26:41 - [] D -- C:\Users\user\AppData\Roaming\Real O43 - CFD: 2013/01/03 20:48:04 - [] D -- C:\Users\user\AppData\Roaming\RealNetworks O43 - CFD: 2012/04/25 01:41:22 - [] D -- C:\Users\user\AppData\Roaming\Rovio O43 - CFD: 2010/07/21 12:16:36 - [] D -- C:\Users\user\AppData\Roaming\Roxio Log Files O43 - CFD: 2010/12/03 03:15:21 - [0] D -- C:\Users\user\AppData\Roaming\shockwave.com O43 - CFD: 2015/09/25 01:28:11 - [] D -- C:\Users\user\AppData\Roaming\Skype O43 - CFD: 2013/01/04 17:02:20 - [] D -- C:\Users\user\AppData\Roaming\skypePM O43 - CFD: 2015/09/27 00:03:42 - [] D -- C:\Users\user\AppData\Roaming\SuperPump O43 - CFD: 2012/04/23 22:21:30 - [] D -- C:\Users\user\AppData\Roaming\SystemUpdaterApp O43 - CFD: 2013/05/23 00:00:23 - [] D -- C:\Users\user\AppData\Roaming\TeamViewer O43 - CFD: 2015/09/21 23:01:50 - [] D -- C:\Users\user\AppData\Roaming\vlc O43 - CFD: 2013/02/21 15:31:23 - [] D -- C:\Users\user\AppData\Roaming\VMware O43 - CFD: 2011/01/17 18:43:04 - [] D -- C:\Users\user\AppData\Roaming\Vso O43 - CFD: 2010/10/24 15:19:32 - [] D -- C:\Users\user\AppData\Roaming\WinRAR O43 - CFD: 2015/09/27 01:23:55 - [] D -- C:\Users\user\AppData\Roaming\ZHP O43 - CFD: 2015/09/27 00:05:30 - [0] D -- C:\Users\user\AppData\Local\30456 O43 - CFD: 2015/07/07 15:01:08 - [] D -- C:\Users\user\AppData\Local\Adobe O43 - CFD: 2010/12/12 13:05:02 - [] D -- C:\Users\user\AppData\Local\Ahead O43 - CFD: 2010/12/08 00:56:51 - [] D -- C:\Users\user\AppData\Local\Apple O43 - CFD: 2013/05/27 19:30:52 - [] D -- C:\Users\user\AppData\Local\Apple Computer O43 - CFD: 2010/07/20 18:52:28 - [0] SHD -- C:\Users\user\AppData\Local\Application Data O43 - CFD: 2010/12/08 03:24:57 - [] D -- C:\Users\user\AppData\Local\Apps O43 - CFD: 2010/12/07 10:24:04 - [] D -- C:\Users\user\AppData\Local\Ares O43 - CFD: 2010/07/21 12:29:59 - [] D -- C:\Users\user\AppData\Local\Broadcom O43 - CFD: 2015/02/11 21:17:34 - [] D -- C:\Users\user\AppData\Local\cache O43 - CFD: 2010/11/08 20:49:25 - [] D -- C:\Users\user\AppData\Local\canon.jp O43 - CFD: 2014/12/10 20:59:21 - [] D -- C:\Users\user\AppData\Local\com =>PUP.Optional.Generic O43 - CFD: 2015/09/25 01:30:52 - [] D -- C:\Users\user\AppData\Local\CrashDumps O43 - CFD: 2010/12/08 04:29:40 - [0] D -- C:\Users\user\AppData\Local\Deployment O43 - CFD: 2015/07/27 01:03:06 - [0] D -- C:\Users\user\AppData\Local\Diagnostics O43 - CFD: 2013/02/24 14:57:24 - [] D -- C:\Users\user\AppData\Local\Eclipse O43 - CFD: 2012/01/31 21:40:56 - [0] D -- C:\Users\user\AppData\Local\ElevatedDiagnostics O43 - CFD: 2015/06/12 02:08:25 - [0] SHD -- C:\Users\user\AppData\Local\EmieBrowserModeList O43 - CFD: 2015/06/12 02:08:25 - [0] SHD -- C:\Users\user\AppData\Local\EmieSiteList O43 - CFD: 2015/06/12 02:08:25 - [0] SHD -- C:\Users\user\AppData\Local\EmieUserList O43 - CFD: 2010/12/25 01:39:30 - [] D -- C:\Users\user\AppData\Local\ESET O43 - CFD: 2012/04/29 01:57:46 - [] D -- C:\Users\user\AppData\Local\Facebook O43 - CFD: 2013/02/06 00:56:35 - [] D -- C:\Users\user\AppData\Local\fontconfig O43 - CFD: 2013/02/06 00:56:32 - [] D -- C:\Users\user\AppData\Local\gegl-0.2 O43 - CFD: 2013/02/28 17:24:47 - [] D -- C:\Users\user\AppData\Local\Google O43 - CFD: 2010/10/26 13:00:26 - [] D -- C:\Users\user\AppData\Local\Hewlett-Packard O43 - CFD: 2010/07/20 18:52:28 - [0] SHD -- C:\Users\user\AppData\Local\Historique O43 - CFD: 2011/04/27 21:57:45 - [] D -- C:\Users\user\AppData\Local\LitexMedia O43 - CFD: 2012/06/21 14:16:02 - [] D -- C:\Users\user\AppData\Local\Macromedia O43 - CFD: 2011/12/18 23:45:15 - [] D -- C:\Users\user\AppData\Local\Messenger_Plus_Live O43 - CFD: 2014/05/11 13:08:39 - [] D -- C:\Users\user\AppData\Local\Microsoft O43 - CFD: 2011/02/10 03:20:35 - [] D -- C:\Users\user\AppData\Local\Microsoft Games O43 - CFD: 2011/12/17 16:55:10 - [] D -- C:\Users\user\AppData\Local\Microsoft Help O43 - CFD: 2015/07/16 21:40:16 - [] D -- C:\Users\user\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie O43 - CFD: 2013/10/02 02:37:26 - [] D -- C:\Users\user\AppData\Local\Mozilla O43 - CFD: 2013/02/28 17:27:40 - [] D -- C:\Users\user\AppData\Local\Opera O43 - CFD: 2012/11/07 20:43:00 - [] D -- C:\Users\user\AppData\Local\Programs O43 - CFD: 2010/10/20 18:39:04 - [] D -- C:\Users\user\AppData\Local\Roxio O43 - CFD: 2014/03/07 00:09:54 - [] D -- C:\Users\user\AppData\Local\Skype O43 - CFD: 2015/09/27 01:23:58 - [] AD -- C:\Users\user\AppData\Local\Temp O43 - CFD: 2010/07/20 18:52:28 - [0] SHD -- C:\Users\user\AppData\Local\Temporary Internet Files O43 - CFD: 2011/02/24 15:10:31 - [] D -- C:\Users\user\AppData\Local\VirtualStore O43 - CFD: 2013/02/21 15:31:23 - [] D -- C:\Users\user\AppData\Local\VMware O43 - CFD: 2012/09/23 22:08:23 - [] D -- C:\Users\user\AppData\Local\Windows Live O43 - CFD: 2012/05/21 15:42:01 - [0] D -- C:\Users\user\AppData\Local\{004481AF-1255-4DE1-B986-355E4B7F85D3} O43 - CFD: 2012/12/09 22:17:44 - [0] D -- C:\Users\user\AppData\Local\{006BE280-F4F0-4956-BF38-EC277381F849} O43 - CFD: 2012/05/07 16:04:09 - [0] D -- C:\Users\user\AppData\Local\{00B58158-2494-4CDD-A7B8-21039BE5A59F} O43 - CFD: 2013/01/11 14:33:24 - [0] D -- C:\Users\user\AppData\Local\{015CF85D-CE12-4B88-BFE8-CB808FD5076C} O43 - CFD: 2012/12/03 00:34:42 - [0] D -- C:\Users\user\AppData\Local\{025E9B58-8D62-4D0C-AABF-748B83872AE0} O43 - CFD: 2012/07/20 13:57:05 - [0] D -- C:\Users\user\AppData\Local\{02C766CD-8045-4470-88F0-F9A70D074091} O43 - CFD: 2012/08/09 16:48:14 - [0] D -- C:\Users\user\AppData\Local\{0320ADB5-2311-46CE-9C9E-EE2914C7C185} O43 - CFD: 2012/06/30 01:41:40 - [0] D -- C:\Users\user\AppData\Local\{03298DDA-8467-4DB7-A7B8-FCDEABE2E02E} O43 - CFD: 2012/05/14 13:36:58 - [0] D -- C:\Users\user\AppData\Local\{0418FA63-AEED-4BB7-B885-1C42BAF58BDC} O43 - CFD: 2012/04/20 14:43:22 - [0] D -- C:\Users\user\AppData\Local\{042FC6BB-2114-4D4F-9455-59119CE9C0FC} O43 - CFD: 2013/02/24 15:14:45 - [0] D -- C:\Users\user\AppData\Local\{0454D1A3-AF4E-4187-8CF6-5CB058C8FD92} O43 - CFD: 2013/03/07 18:48:08 - [0] D -- C:\Users\user\AppData\Local\{050826C3-2F4F-4A6D-B9E6-968C0D562F77} O43 - CFD: 2012/04/04 15:19:56 - [0] D -- C:\Users\user\AppData\Local\{054F5FBE-F7DD-406C-8CCE-04FCC017EFEC} O43 - CFD: 2012/08/01 19:35:44 - [0] D -- C:\Users\user\AppData\Local\{0554F247-47AB-4644-9635-1A3E9E764D50} O43 - CFD: 2012/07/02 11:39:55 - [0] D -- C:\Users\user\AppData\Local\{0586940B-43FA-4237-B651-834E0E8AA1CB} O43 - CFD: 2012/06/28 15:08:10 - [0] D -- C:\Users\user\AppData\Local\{05B16702-4543-4D28-A32B-74DC699D70C9} O43 - CFD: 2012/06/09 19:10:06 - [0] D -- C:\Users\user\AppData\Local\{068EF2C6-E53E-424E-A532-984D2526FAF1} O43 - CFD: 2012/07/07 02:51:59 - [0] D -- C:\Users\user\AppData\Local\{06B58F3D-0F6D-419B-A396-B7E3F9038914} O43 - CFD: 2012/06/22 00:35:28 - [0] D -- C:\Users\user\AppData\Local\{06D85F1B-AF62-4BB5-BCE2-B008EB4A0476} O43 - CFD: 2012/10/19 00:39:02 - [0] D -- C:\Users\user\AppData\Local\{072D46E3-000F-4559-AC7D-35B2D5C8790D} O43 - CFD: 2012/04/08 20:34:45 - [0] D -- C:\Users\user\AppData\Local\{07B0B45B-E167-4E9F-8E73-B5E6B455D53B} O43 - CFD: 2012/07/10 16:03:49 - [0] D -- C:\Users\user\AppData\Local\{07C1AFB8-6E42-419D-84AA-0EF20E384D60} O43 - CFD: 2013/01/19 23:00:13 - [0] D -- C:\Users\user\AppData\Local\{07D907F3-F6AF-4310-AFAE-14C4ADBC25F0} O43 - CFD: 2012/12/29 14:46:15 - [0] D -- C:\Users\user\AppData\Local\{07EA0DE4-E3DD-4556-9874-6A8C078089BD} O43 - CFD: 2013/01/01 17:25:17 - [0] D -- C:\Users\user\AppData\Local\{084401CD-355B-4E96-8037-DF5043AA75FE} O43 - CFD: 2012/06/04 15:50:17 - [0] D -- C:\Users\user\AppData\Local\{0876E24B-C125-4694-A9C9-88A06A090827} O43 - CFD: 2013/03/28 20:39:47 - [0] D -- C:\Users\user\AppData\Local\{08834818-FDEE-46E0-88A0-FAA84D33AD38} O43 - CFD: 2012/11/10 20:04:21 - [0] D -- C:\Users\user\AppData\Local\{0980A323-4DDA-483B-87F5-6A1A7B1FD130} O43 - CFD: 2012/10/06 18:47:08 - [0] D -- C:\Users\user\AppData\Local\{09FB50F4-E06B-4784-82BC-2F472F8638F6} O43 - CFD: 2012/05/11 14:45:41 - [0] D -- C:\Users\user\AppData\Local\{0A803D7B-F32A-482B-AA77-BEF17291004F} O43 - CFD: 2012/05/03 02:27:58 - [0] D -- C:\Users\user\AppData\Local\{0AF4B4B5-990E-47C3-80E3-9F138DD91D23} O43 - CFD: 2012/06/23 01:31:12 - [0] D -- C:\Users\user\AppData\Local\{0B3CFD46-7F19-4AEB-988F-04FAD0300F59} O43 - CFD: 2012/04/08 02:06:50 - [0] D -- C:\Users\user\AppData\Local\{0BD02C20-09C7-46C3-9F8C-561EBBEE8D87} O43 - CFD: 2012/10/26 22:58:42 - [0] D -- C:\Users\user\AppData\Local\{0C306F77-5F2A-4A6C-B0D6-164C36558512} O43 - CFD: 2012/11/21 20:24:16 - [0] D -- C:\Users\user\AppData\Local\{0C512735-7819-4117-B794-075CFD8C9209} O43 - CFD: 2013/04/18 16:15:08 - [0] D -- C:\Users\user\AppData\Local\{0C89A523-7C67-44B9-9C56-06C651EFE75F} O43 - CFD: 2012/12/29 18:28:00 - [0] D -- C:\Users\user\AppData\Local\{0D7B072A-87CD-43C3-8767-D9A371604397} O43 - CFD: 2012/09/04 16:30:45 - [0] D -- C:\Users\user\AppData\Local\{0D851664-ACCF-4232-88CC-6ADDF68F8EA6} O43 - CFD: 2012/09/01 14:21:22 - [0] D -- C:\Users\user\AppData\Local\{0D9D4B29-A494-423D-8A72-F77E45705F8F} O43 - CFD: 2012/12/08 19:00:10 - [0] D -- C:\Users\user\AppData\Local\{0E2B300C-E280-4E29-BB0D-98AA69502F7A} O43 - CFD: 2013/02/02 03:26:51 - [0] D -- C:\Users\user\AppData\Local\{0F2C1C78-50D4-4033-A6BA-C04FBF59D252} O43 - CFD: 2012/05/27 23:48:34 - [0] D -- C:\Users\user\AppData\Local\{0F39889F-B1D1-43BB-B4E3-DB6E31A71F38} O43 - CFD: 2012/05/31 18:42:16 - [0] D -- C:\Users\user\AppData\Local\{0F73A0F0-B428-4A53-906C-2A2278655525} O43 - CFD: 2013/02/03 03:20:14 - [0] D -- C:\Users\user\AppData\Local\{0F7C0495-9C39-4506-A651-9923D89078EE} O43 - CFD: 2012/07/30 15:49:30 - [0] D -- C:\Users\user\AppData\Local\{0F7C4581-8E39-45CF-9F70-A64B8B2441A0} O43 - CFD: 2012/04/09 20:36:16 - [0] D -- C:\Users\user\AppData\Local\{10293DB9-E5F8-4FA7-8D25-2160D3A66DAC} O43 - CFD: 2012/10/23 02:02:13 - [0] D -- C:\Users\user\AppData\Local\{10B2B428-E09F-4829-886F-CDF4CD9E9364} O43 - CFD: 2012/04/23 16:19:13 - [0] D -- C:\Users\user\AppData\Local\{1131B1BF-8054-47E4-AE44-C3778EF8A80C} O43 - CFD: 2012/12/07 14:45:42 - [0] D -- C:\Users\user\AppData\Local\{119C3A70-2802-42F9-BBE9-EB014BCEA716} O43 - CFD: 2012/06/07 02:22:57 - [0] D -- C:\Users\user\AppData\Local\{11D392FA-55D3-4D7D-A8A5-BAC3ED0B2405} O43 - CFD: 2012/07/10 04:02:50 - [0] D -- C:\Users\user\AppData\Local\{123A84A5-B614-496F-8E56-428EAC33951A} O43 - CFD: 2012/10/23 15:58:37 - [0] D -- C:\Users\user\AppData\Local\{1310BC21-E663-42A6-83F8-936DD9A85CB8} O43 - CFD: 2012/07/31 16:10:56 - [0] D -- C:\Users\user\AppData\Local\{131BBAD4-7389-4A65-A48C-CE846FA5742D} O43 - CFD: 2012/10/11 13:39:40 - [0] D -- C:\Users\user\AppData\Local\{1358C915-13A2-43B3-8360-802F4A6A57D9} O43 - CFD: 2012/06/25 13:33:02 - [0] D -- C:\Users\user\AppData\Local\{1384AD01-EE0A-46B4-ADE1-00FDF7C45DE1} O43 - CFD: 2012/06/30 01:41:29 - [0] D -- C:\Users\user\AppData\Local\{13C19430-B355-48A4-9EA5-B32D3956DD7F} O43 - CFD: 2012/10/21 17:14:45 - [0] D -- C:\Users\user\AppData\Local\{13D631A7-3F23-4191-9850-F477E466EFFE} O43 - CFD: 2012/08/02 16:54:51 - [0] D -- C:\Users\user\AppData\Local\{149861FE-A006-4801-80A8-A524802C777F} O43 - CFD: 2012/05/12 22:07:28 - [0] D -- C:\Users\user\AppData\Local\{1505FFD6-1A1A-4E4A-908A-F06BCB7CEF45} O43 - CFD: 2012/06/27 23:42:52 - [0] D -- C:\Users\user\AppData\Local\{151DA102-DE74-4832-BB9A-145B94D3BA16} O43 - CFD: 2012/10/04 14:57:47 - [0] D -- C:\Users\user\AppData\Local\{1738CF15-B9A7-4D14-9615-3BD6F9BD0EC3} O43 - CFD: 2013/04/21 00:29:18 - [0] D -- C:\Users\user\AppData\Local\{1762BCCF-4B5C-4AE1-9EB8-F104FEF4E9C2} O43 - CFD: 2012/07/30 03:00:40 - [0] D -- C:\Users\user\AppData\Local\{186F8A4D-4C13-4909-85BA-4D2BE3491C39} O43 - CFD: 2012/12/04 14:45:34 - [0] D -- C:\Users\user\AppData\Local\{18B6BEAA-5A6E-4915-866C-63087B96CBCB} O43 - CFD: 2012/11/08 15:59:56 - [0] D -- C:\Users\user\AppData\Local\{19599D4E-AC29-4861-87C9-51F4F72CF254} O43 - CFD: 2012/06/25 13:33:12 - [0] D -- C:\Users\user\AppData\Local\{19FE85A9-2210-430C-8ABA-AA3C003C20B7} O43 - CFD: 2012/05/31 01:56:23 - [0] D -- C:\Users\user\AppData\Local\{1A2F79A7-0FBC-47F6-8B65-6B265ED28CF6} O43 - CFD: 2012/07/03 19:01:57 - [0] D -- C:\Users\user\AppData\Local\{1A44C0FF-2CD4-4EC2-AF63-68287DCA4DB1} O43 - CFD: 2013/04/26 18:10:42 - [0] D -- C:\Users\user\AppData\Local\{1ABAA68D-CEAD-4E81-898B-D1614A217579} O43 - CFD: 2012/05/03 14:28:49 - [0] D -- C:\Users\user\AppData\Local\{1B201753-B705-49FD-98D7-2FABB8B3B7A3} O43 - CFD: 2012/05/15 01:37:45 - [0] D -- C:\Users\user\AppData\Local\{1B218085-E105-4882-9AD2-061DFF0064BF} O43 - CFD: 2012/04/25 15:03:49 - [0] D -- C:\Users\user\AppData\Local\{1B21BB2F-282D-4EB6-9C3C-3A2721110671} O43 - CFD: 2012/09/24 20:44:08 - [0] D -- C:\Users\user\AppData\Local\{1B670643-3A55-4B77-A9FB-F7BA26522523} O43 - CFD: 2012/05/12 22:07:18 - [0] D -- C:\Users\user\AppData\Local\{1BAB104B-F707-4C95-932F-F207954C5ABC} O43 - CFD: 2013/03/05 02:19:59 - [0] D -- C:\Users\user\AppData\Local\{1C2F94D3-43FB-4E2B-8A38-DB4D67749B28} O43 - CFD: 2012/11/18 16:00:49 - [0] D -- C:\Users\user\AppData\Local\{1C5498B5-696D-4D81-B6A3-1D0C77FB79B7} O43 - CFD: 2012/08/04 16:04:32 - [0] D -- C:\Users\user\AppData\Local\{1CED0CC9-487C-42AD-ACB0-F41F2BA9C88B} O43 - CFD: 2012/05/10 13:53:00 - [0] D -- C:\Users\user\AppData\Local\{1E0C8FC2-A4FE-4558-8680-63FD6997DD71} O43 - CFD: 2013/01/20 21:14:42 - [0] D -- C:\Users\user\AppData\Local\{1E76D21E-E230-46DF-AD8D-5390C55B803B} O43 - CFD: 2012/12/16 13:16:42 - [0] D -- C:\Users\user\AppData\Local\{1EB02D47-4BE3-4FBF-A5DF-5F1CA28456D5} O43 - CFD: 2012/04/14 01:04:26 - [0] D -- C:\Users\user\AppData\Local\{1F4757C3-EE3C-4939-9A0D-D0FF7C0EEE7C} O43 - CFD: 2013/04/10 15:04:43 - [0] D -- C:\Users\user\AppData\Local\{1FFA1D19-C0C4-4295-A54F-AC378DCCFF61} O43 - CFD: 2013/02/27 14:24:55 - [0] D -- C:\Users\user\AppData\Local\{20AE8A71-4897-451E-A93F-67597C5D480B} O43 - CFD: 2012/11/04 23:10:47 - [0] D -- C:\Users\user\AppData\Local\{20C8E911-C4BA-4CB3-B3DC-74227DE3DF9B} O43 - CFD: 2012/05/02 14:27:19 - [0] D -- C:\Users\user\AppData\Local\{20E9FBBA-1C2C-4508-8A79-B270F4BFAFEE} O43 - CFD: 2012/08/05 16:22:12 - [0] D -- C:\Users\user\AppData\Local\{21696F5F-2A40-47A9-A54F-F4BCE01ACBF7} O43 - CFD: 2012/04/22 22:24:24 - [0] D -- C:\Users\user\AppData\Local\{2197B841-A601-43A5-A8E1-64BEB4B1C31B} O43 - CFD: 2012/06/27 23:42:31 - [0] D -- C:\Users\user\AppData\Local\{21DB2D6A-5681-4E84-A083-96F8B8FB086C} O43 - CFD: 2012/10/08 15:19:25 - [0] D -- C:\Users\user\AppData\Local\{21FEA531-29EA-40B0-9559-8470BBA8BC7B} O43 - CFD: 2013/03/02 14:58:39 - [0] D -- C:\Users\user\AppData\Local\{224C4A9C-8508-48D3-A239-51C841B77C1F} O43 - CFD: 2012/10/18 12:38:36 - [0] D -- C:\Users\user\AppData\Local\{22589E20-9091-49DE-8A03-F891DDB6C6BB} O43 - CFD: 2013/03/31 21:43:15 - [0] D -- C:\Users\user\AppData\Local\{22D543B4-F5EB-48CC-94AC-178146918ED8} O43 - CFD: 2012/10/14 20:12:23 - [0] D -- C:\Users\user\AppData\Local\{22F56588-587F-4D05-8A4A-7F2F036B014E} O43 - CFD: 2012/06/07 17:03:32 - [0] D -- C:\Users\user\AppData\Local\{2336AAE4-A9FF-4B25-B8B6-E7CAF2774611} O43 - CFD: 2012/07/20 22:00:05 - [0] D -- C:\Users\user\AppData\Local\{23D4D017-74E0-44D3-850A-CB9EB64719CD} O43 - CFD: 2012/05/09 02:17:13 - [0] D -- C:\Users\user\AppData\Local\{23DCE834-FD52-4684-AAD6-AE3513E5D734} O43 - CFD: 2012/04/27 23:11:11 - [0] D -- C:\Users\user\AppData\Local\{2655E451-EA88-4EA9-B17E-F721DD67BB0F} O43 - CFD: 2013/02/06 14:00:29 - [0] D -- C:\Users\user\AppData\Local\{269AC521-ACA7-4AC3-8A53-6E58FD6E22F5} O43 - CFD: 2013/03/09 16:43:02 - [0] D -- C:\Users\user\AppData\Local\{274AC54E-5E53-4ECA-8B8C-F604155FD600} O43 - CFD: 2012/07/30 15:49:48 - [0] D -- C:\Users\user\AppData\Local\{280D345C-5A95-41AA-910F-FA1C5FD89F6F} O43 - CFD: 2012/05/01 22:55:06 - [0] D -- C:\Users\user\AppData\Local\{28B61704-F0A6-4451-86CE-1D45AE17BD00} O43 - CFD: 2012/06/23 22:34:51 - [0] D -- C:\Users\user\AppData\Local\{28F1F39D-E40E-4D74-8286-286A5C6F8875} O43 - CFD: 2012/06/07 17:03:43 - [0] D -- C:\Users\user\AppData\Local\{298CBC35-6667-4A63-A27D-A3702589FFD3} O43 - CFD: 2012/12/11 15:15:47 - [0] D -- C:\Users\user\AppData\Local\{29FA897E-EED8-41A7-A0F0-5889D9D81ABF} O43 - CFD: 2012/04/06 15:38:52 - [0] D -- C:\Users\user\AppData\Local\{2A690950-21DE-4479-A766-B549C61FB902} O43 - CFD: 2012/05/11 01:53:27 - [0] D -- C:\Users\user\AppData\Local\{2AAB25C3-8D24-45B6-8043-5D8296BF17B9} O43 - CFD: 2012/06/25 00:51:10 - [0] D -- C:\Users\user\AppData\Local\{2AB3F44B-9279-4CD7-94D2-44DA2D16534B} O43 - CFD: 2012/10/24 09:32:52 - [0] D -- C:\Users\user\AppData\Local\{2B1DA023-ABED-48E1-A1F1-219FF7F017F6} O43 - CFD: 2012/11/13 16:32:24 - [0] D -- C:\Users\user\AppData\Local\{2BBD82B3-72F6-4E73-AC19-11F115CDFCE2} O43 - CFD: 2013/02/09 10:28:45 - [0] D -- C:\Users\user\AppData\Local\{2C2C3400-1C89-483F-83F6-38D7AB89E4CA} O43 - CFD: 2012/04/30 14:27:13 - [0] D -- C:\Users\user\AppData\Local\{2D0AE470-FB4C-4E3F-B86F-09365FBEA253} O43 - CFD: 2012/09/27 14:25:09 - [0] D -- C:\Users\user\AppData\Local\{2D78CF7B-50B2-4356-B7BA-D14804261720} O43 - CFD: 2012/05/24 01:25:41 - [0] D -- C:\Users\user\AppData\Local\{2DD4C322-5470-45AE-974C-7ED1D775ADB4} O43 - CFD: 2012/06/29 13:41:03 - [0] D -- C:\Users\user\AppData\Local\{2DDDB04B-C194-44C0-B065-278F37FE8B4A} O43 - CFD: 2012/06/30 19:09:36 - [0] D -- C:\Users\user\AppData\Local\{2E15176A-94FB-457E-8ECB-35B4398540C5} O43 - CFD: 2012/08/04 00:26:26 - [0] D -- C:\Users\user\AppData\Local\{2E608300-B100-4B47-8C2B-7B8325D84533} O43 - CFD: 2013/01/12 23:55:09 - [0] D -- C:\Users\user\AppData\Local\{2E8068EC-4BE2-45BA-A46C-931F7F602C27} O43 - CFD: 2012/07/06 20:05:49 - [0] D -- C:\Users\user\AppData\Local\{2ECE1B1F-9E89-45BE-ACE1-36BA10CEB025} O43 - CFD: 2012/12/17 23:22:44 - [0] D -- C:\Users\user\AppData\Local\{30492C5C-42CB-40CA-8A1A-1DEC1B832BCA} O43 - CFD: 2012/06/23 22:35:01 - [0] D -- C:\Users\user\AppData\Local\{306A50A4-71CD-4D3B-84A3-5E1ECA0DA328} O43 - CFD: 2012/10/20 14:24:53 - [0] D -- C:\Users\user\AppData\Local\{313B791B-E7D7-4271-BE6A-F60D85BC4DE9} O43 - CFD: 2013/01/17 03:46:07 - [0] D -- C:\Users\user\AppData\Local\{32B6F16E-DA37-4627-A26E-B74A308BA62D} O43 - CFD: 2012/04/27 11:10:45 - [0] D -- C:\Users\user\AppData\Local\{330C3FA8-7499-4100-BA1D-F6DCE489DA86} O43 - CFD: 2012/04/30 00:29:57 - [0] D -- C:\Users\user\AppData\Local\{33292728-EB46-43D7-A214-AA669F78A43E} O43 - CFD: 2012/06/05 23:24:48 - [0] D -- C:\Users\user\AppData\Local\{33FAC02A-BC50-40F5-B9E2-7C0D704FCDC3} O43 - CFD: 2012/05/09 15:12:15 - [0] D -- C:\Users\user\AppData\Local\{348F9D49-345C-4224-B5B5-57EB42061C5B} O43 - CFD: 2012/08/02 00:18:49 - [0] D -- C:\Users\user\AppData\Local\{355076ED-4B17-495D-86B4-5D063E3F9BAF} O43 - CFD: 2013/03/21 16:22:26 - [0] D -- C:\Users\user\AppData\Local\{35718053-0179-4BF1-8C3B-63866ACDFDC2} O43 - CFD: 2013/02/23 10:57:23 - [0] D -- C:\Users\user\AppData\Local\{3571BFF1-D247-41FA-AB08-CD39DE9FCF82} O43 - CFD: 2012/10/13 03:14:59 - [0] D -- C:\Users\user\AppData\Local\{35A3572E-1D33-4D80-805E-981A3A909EB7} O43 - CFD: 2013/02/08 13:43:29 - [0] D -- C:\Users\user\AppData\Local\{35D2ECAB-6386-446E-AB33-925F2F7AE209} O43 - CFD: 2012/08/19 21:18:01 - [0] D -- C:\Users\user\AppData\Local\{3617F37D-D9C7-4752-913A-3C3B38F028FB} O43 - CFD: 2012/05/04 02:29:25 - [0] D -- C:\Users\user\AppData\Local\{36AE7CA1-850A-472D-9A89-A726D029D607} O43 - CFD: 2012/07/14 04:07:49 - [0] D -- C:\Users\user\AppData\Local\{373001B0-FCD4-4F08-94BE-99B1AFFB8F76} O43 - CFD: 2013/01/21 21:27:58 - [0] D -- C:\Users\user\AppData\Local\{378BA7E3-7EF0-4C9F-A636-4810348C1B5F} O43 - CFD: 2013/03/23 03:24:03 - [0] D -- C:\Users\user\AppData\Local\{38358448-FC54-4C7F-BAE4-C82B33F4D809} O43 - CFD: 2013/04/03 22:35:07 - [0] D -- C:\Users\user\AppData\Local\{38C4D55C-5FBF-4AAF-BF6F-98D7E6B3BFA9} O43 - CFD: 2012/07/21 16:51:28 - [0] D -- C:\Users\user\AppData\Local\{397BCE57-09EC-4E13-A444-86730C040DDB} O43 - CFD: 2012/06/06 14:22:10 - [0] D -- C:\Users\user\AppData\Local\{3B44E507-7C05-4CD3-8669-CA7E430FEC77} O43 - CFD: 2012/08/05 04:20:14 - [0] D -- C:\Users\user\AppData\Local\{3B6DF425-FC6A-4C33-8C20-A4ACFDEBCF02} O43 - CFD: 2012/08/09 16:48:27 - [0] D -- C:\Users\user\AppData\Local\{3B842093-B85A-4365-BF58-06AD9E247831} O43 - CFD: 2012/12/15 23:56:07 - [0] D -- C:\Users\user\AppData\Local\{3BD38ECE-C86D-4D3E-A23B-9158764FF3BC} O43 - CFD: 2012/08/08 04:13:37 - [0] D -- C:\Users\user\AppData\Local\{3BE03166-1F51-43F8-BB9B-BE5258DD753D} O43 - CFD: 2012/04/27 23:11:22 - [0] D -- C:\Users\user\AppData\Local\{3C691EB9-E4D3-4238-AA59-793579EBB6FA} O43 - CFD: 2012/08/16 19:05:57 - [0] D -- C:\Users\user\AppData\Local\{3CC592B0-3318-4313-9E51-D646D91BAE77} O43 - CFD: 2012/10/21 02:40:29 - [0] D -- C:\Users\user\AppData\Local\{3CC9AB1A-47E6-4F18-ADDF-DE8B14ADCA84} O43 - CFD: 2013/04/09 00:34:29 - [0] D -- C:\Users\user\AppData\Local\{3D2D1F5A-CC9D-48A4-9000-C304EDA1B15B} O43 - CFD: 2012/10/29 15:16:04 - [0] D -- C:\Users\user\AppData\Local\{3DC71862-546D-4916-946C-D811C5FF9227} O43 - CFD: 2012/10/05 22:15:06 - [0] D -- C:\Users\user\AppData\Local\{3E477C34-D91D-4D3F-AD9D-12497C9485FC} O43 - CFD: 2013/01/22 23:51:55 - [0] D -- C:\Users\user\AppData\Local\{3E54BB8B-0AB6-47E7-8281-EB19909D271B} O43 - CFD: 2012/05/01 22:55:18 - [0] D -- C:\Users\user\AppData\Local\{3EB74061-CF91-4A0E-BAB8-2EE1A962A46B} O43 - CFD: 2012/05/27 15:26:23 - [0] D -- C:\Users\user\AppData\Local\{3EBC1492-855C-4AF2-AB28-32B1CC1CB57C} O43 - CFD: 2013/03/21 00:32:13 - [0] D -- C:\Users\user\AppData\Local\{3F0310A3-F9FA-4C09-B83A-6020E26F4712} O43 - CFD: 2013/01/22 19:44:32 - [0] D -- C:\Users\user\AppData\Local\{3FD53D98-5260-47FA-BC1D-A39869E2654B} O43 - CFD: 2013/02/22 15:34:15 - [0] D -- C:\Users\user\AppData\Local\{3FDB04E6-333F-4589-9FF8-E1D522B0E76C} O43 - CFD: 2013/03/01 23:29:18 - [0] D -- C:\Users\user\AppData\Local\{4077932B-3336-4E20-AB20-7FFB515058AB} O43 - CFD: 2013/02/03 15:52:07 - [0] D -- C:\Users\user\AppData\Local\{40C5138A-117A-46D2-A596-9390241E86A2} O43 - CFD: 2012/04/30 00:29:47 - [0] D -- C:\Users\user\AppData\Local\{40FF314C-C120-4E3C-A369-E0EED410AA7C} O43 - CFD: 2012/10/18 00:38:09 - [0] D -- C:\Users\user\AppData\Local\{41033E66-5058-48DA-8763-70B31F1B1A84} O43 - CFD: 2012/05/05 23:03:00 - [0] D -- C:\Users\user\AppData\Local\{41BEB995-45F8-4FA5-9B49-3BA546AA14BB} O43 - CFD: 2013/02/26 12:17:57 - [0] D -- C:\Users\user\AppData\Local\{420EF1C9-193A-46A2-8264-8937617F6164} O43 - CFD: 2012/10/24 21:40:21 - [0] D -- C:\Users\user\AppData\Local\{4268A728-FFE9-40FF-B7C4-B3179D824EF9} O43 - CFD: 2013/01/23 17:19:18 - [0] D -- C:\Users\user\AppData\Local\{43738EBE-521F-405D-9CC8-6A7EB8A78074} O43 - CFD: 2012/05/03 02:28:09 - [0] D -- C:\Users\user\AppData\Local\{439E6FAC-792F-4883-98EE-72064DA1BD05} O43 - CFD: 2012/10/10 21:01:48 - [0] D -- C:\Users\user\AppData\Local\{43B043BC-D366-409F-8B83-F0AACEA9189F} O43 - CFD: 2012/07/12 03:14:53 - [0] D -- C:\Users\user\AppData\Local\{441DE7BB-D602-4758-87B8-035B12DB137E} O43 - CFD: 2012/06/26 01:33:49 - [0] D -- C:\Users\user\AppData\Local\{44C298D9-8625-488A-AF1E-20F1592BD751} O43 - CFD: 2012/06/03 23:05:10 - [0] D -- C:\Users\user\AppData\Local\{45558F5B-E754-451A-AE59-071DF3DA3C2C} O43 - CFD: 2012/08/30 22:30:17 - [0] D -- C:\Users\user\AppData\Local\{455667FA-B9CD-44F3-94E2-3A5FCCDEAB6B} O43 - CFD: 2012/05/25 19:02:41 - [0] D -- C:\Users\user\AppData\Local\{4562B8C2-0DE7-41E8-8268-02E4CCE37622} O43 - CFD: 2012/06/07 02:23:08 - [0] D -- C:\Users\user\AppData\Local\{45637B35-E6B7-43A8-95A4-E8D2BBF79A21} O43 - CFD: 2012/07/16 12:42:20 - [0] D -- C:\Users\user\AppData\Local\{461D82FD-47A9-446D-BF4D-532B861A010F} O43 - CFD: 2013/01/08 03:58:17 - [0] D -- C:\Users\user\AppData\Local\{461FF3DA-9D23-4DC7-9AD7-903A1F83F549} O43 - CFD: 2012/09/11 22:48:12 - [0] D -- C:\Users\user\AppData\Local\{4631E823-1588-44E9-99FC-D60283B79400} O43 - CFD: 2012/10/09 20:24:46 - [0] D -- C:\Users\user\AppData\Local\{4701D714-7F3F-41B7-A133-8E4743BBDE3E} O43 - CFD: 2013/01/18 20:57:41 - [0] D -- C:\Users\user\AppData\Local\{471F4BE6-DC69-45AC-92FA-B0EB7C24A68B} O43 - CFD: 2012/05/03 14:29:00 - [0] D -- C:\Users\user\AppData\Local\{48130471-3979-4750-A87E-A5CA8D5979FF} O43 - CFD: 2012/06/02 15:37:19 - [0] D -- C:\Users\user\AppData\Local\{4890BD9F-0589-4300-BDE7-D85B08DEADD2} O43 - CFD: 2012/05/26 17:18:54 - [0] D -- C:\Users\user\AppData\Local\{48C3A1C3-BE0D-46DE-8A7A-A6F8B06EA907} O43 - CFD: 2012/11/02 15:54:34 - [0] D -- C:\Users\user\AppData\Local\{48CA6812-946C-4FBF-B9A7-1CC60E374270} O43 - CFD: 2012/05/17 14:58:22 - [0] D -- C:\Users\user\AppData\Local\{4969BB09-787E-46A5-827D-E41551A31B99} O43 - CFD: 2012/05/09 15:12:26 - [0] D -- C:\Users\user\AppData\Local\{49C9509F-D7C1-4607-933D-CE55F0BB72DA} O43 - CFD: 2012/07/03 19:01:34 - [0] D -- C:\Users\user\AppData\Local\{49CD78F6-F378-4AC4-A2FD-8C1590813B3A} O43 - CFD: 2012/04/21 09:56:20 - [0] D -- C:\Users\user\AppData\Local\{4A29B1FC-5B2A-49E9-A4D9-DC297B59D8EE} O43 - CFD: 2012/07/19 13:43:53 - [0] D -- C:\Users\user\AppData\Local\{4A4C687B-F690-4315-B3BF-9EF55B463645} O43 - CFD: 2012/09/22 03:15:21 - [0] D -- C:\Users\user\AppData\Local\{4A69B5A2-1CE6-4510-ADC1-396820A8B13B} O43 - CFD: 2012/10/21 20:28:30 - [0] D -- C:\Users\user\AppData\Local\{4B1541E3-F884-43AA-8B23-C8A3AD29697C} O43 - CFD: 2013/02/07 14:48:02 - [0] D -- C:\Users\user\AppData\Local\{4D218326-1D48-4AC5-B236-5E1E11F9E831} O43 - CFD: 2012/12/26 12:54:24 - [0] D -- C:\Users\user\AppData\Local\{4D9F61C8-19F2-4002-83DA-138849A5166B} O43 - CFD: 2012/05/20 16:30:26 - [0] D -- C:\Users\user\AppData\Local\{4DA6E215-FF08-4D82-ACDC-2D569250970F} O43 - CFD: 2012/09/28 22:47:20 - [0] D -- C:\Users\user\AppData\Local\{4E93445E-6425-4909-A72D-086CE8AD2AB2} O43 - CFD: 2013/04/11 01:10:04 - [0] D -- C:\Users\user\AppData\Local\{4EA5C394-2EE3-4DC3-8605-CA5EBBB66F87} O43 - CFD: 2012/05/20 23:53:00 - [0] D -- C:\Users\user\AppData\Local\{4F0EE665-5D41-404C-914F-018736771ADE} O43 - CFD: 2013/03/05 17:15:30 - [0] D -- C:\Users\user\AppData\Local\{4F4525A5-6892-4B25-979C-3E0D881B29C7} O43 - CFD: 2012/05/12 10:06:40 - [0] D -- C:\Users\user\AppData\Local\{4F54A582-9350-435B-9834-1EF6AC9225FC} O43 - CFD: 2012/12/12 13:18:42 - [0] D -- C:\Users\user\AppData\Local\{50B82270-9F6B-4C2D-800F-E1FD50EF8424} O43 - CFD: 2012/06/30 19:09:26 - [0] D -- C:\Users\user\AppData\Local\{50DA5036-F62B-4044-A145-62D46C4A0A0A} O43 - CFD: 2012/04/26 03:04:27 - [0] D -- C:\Users\user\AppData\Local\{50FED65D-0C4C-424C-ACD9-08721A238CD0} O43 - CFD: 2013/02/02 01:10:08 - [0] D -- C:\Users\user\AppData\Local\{513AB838-2309-42A2-A8CB-8D5DF288A0C8} O43 - CFD: 2013/02/10 20:44:05 - [0] D -- C:\Users\user\AppData\Local\{51C7BC55-BDEA-4DCF-8494-641734BE2F43} O43 - CFD: 2012/05/24 01:25:31 - [0] D -- C:\Users\user\AppData\Local\{52051AE8-E3EB-4ECC-929D-CCDF6FCC1546} O43 - CFD: 2012/04/29 09:20:13 - [0] D -- C:\Users\user\AppData\Local\{5224DA2C-3CE8-4AED-912B-3FA66D072532} O43 - CFD: 2012/07/09 04:01:36 - [0] D -- C:\Users\user\AppData\Local\{52BDBD73-D519-453A-9C7F-3B664416373F} O43 - CFD: 2012/07/13 16:07:13 - [0] D -- C:\Users\user\AppData\Local\{52D1E4F3-5916-472E-A727-096D6DD7ADC9} O43 - CFD: 2012/08/04 00:26:39 - [0] D -- C:\Users\user\AppData\Local\{52EB8C76-6CEA-4996-95ED-1E651A3AE760} O43 - CFD: 2013/03/15 00:53:31 - [0] D -- C:\Users\user\AppData\Local\{5316C9AF-2A36-4BB8-945F-AACBE768D6EF} O43 - CFD: 2012/05/23 13:24:33 - [0] D -- C:\Users\user\AppData\Local\{531C1322-E674-4A57-9B78-44CD46B854F4} O43 - CFD: 2012/10/09 03:19:51 - [0] D -- C:\Users\user\AppData\Local\{5350AB28-D0A9-4496-B84F-D987296B4BA6} O43 - CFD: 2012/05/07 16:04:19 - [0] D -- C:\Users\user\AppData\Local\{5411A076-0102-4D7E-A614-849BFBA05F2F} O43 - CFD: 2013/04/04 16:50:13 - [0] D -- C:\Users\user\AppData\Local\{5412EE73-F84B-4BB9-879C-55BFEC9E2E71} O43 - CFD: 2012/06/26 14:59:22 - [0] D -- C:\Users\user\AppData\Local\{543296DC-53B6-4F92-9A01-813E9CDB868C} O43 - CFD: 2012/04/21 19:54:41 - [0] D -- C:\Users\user\AppData\Local\{55961658-7BF2-48C8-B058-29B94245EA13} O43 - CFD: 2012/10/04 15:07:32 - [0] D -- C:\Users\user\AppData\Local\{560A77F3-7916-4E7C-9FBB-4D3D9E35FFBF} O43 - CFD: 2012/10/28 23:26:04 - [0] D -- C:\Users\user\AppData\Local\{567F6C1E-4DF2-4B26-B74C-83193FF9BC78} O43 - CFD: 2012/05/15 01:37:55 - [0] D -- C:\Users\user\AppData\Local\{584051AA-174A-40B2-B7D5-76CB8679D377} O43 - CFD: 2012/05/07 12:17:54 - [0] D -- C:\Users\user\AppData\Local\{59203585-D230-4ED2-B39D-AA680B4311A1} O43 - CFD: 2012/07/31 16:03:50 - [0] D -- C:\Users\user\AppData\Local\{597DAB0E-8F03-409A-A9EC-F527389EF854} O43 - CFD: 2012/12/20 00:45:20 - [0] D -- C:\Users\user\AppData\Local\{598D94CF-0047-4BA9-904C-96F95258AB14} O43 - CFD: 2012/05/26 17:18:43 - [0] D -- C:\Users\user\AppData\Local\{5A40450C-2F85-4C18-AC56-F3EAA10E1179} O43 - CFD: 2013/01/09 01:42:47 - [0] D -- C:\Users\user\AppData\Local\{5A4C2A59-82B2-4371-83BB-1540FC0C4F25} O43 - CFD: 2013/03/09 11:30:45 - [0] D -- C:\Users\user\AppData\Local\{5BCEE784-B920-4321-9F71-8A5759AD8496} O43 - CFD: 2013/03/23 18:05:17 - [0] D -- C:\Users\user\AppData\Local\{5BE1914A-7A7F-4BA9-B615-6FC223AE45E8} O43 - CFD: 2012/10/07 16:03:08 - [0] D -- C:\Users\user\AppData\Local\{5CF91110-94D1-46BD-AB7A-427AB8AB5806} O43 - CFD: 2012/09/22 15:37:45 - [0] D -- C:\Users\user\AppData\Local\{5E2D62EC-726F-4CEF-AEE8-29AA1F9AF773} O43 - CFD: 2013/01/07 15:34:18 - [0] D -- C:\Users\user\AppData\Local\{5E8C4D44-82A2-4D43-BCEC-C2A60FDDDAEE} O43 - CFD: 2013/02/26 09:04:29 - [0] D -- C:\Users\user\AppData\Local\{5EC6447A-DA41-478E-A2E1-EBA44AA50C26} O43 - CFD: 2012/09/04 15:50:23 - [0] D -- C:\Users\user\AppData\Local\{5F089C13-09A1-4B81-92BD-69FB50D85EDD} O43 - CFD: 2012/04/26 03:04:37 - [0] D -- C:\Users\user\AppData\Local\{5F671552-2282-478A-9E81-6B7AB446FD36} O43 - CFD: 2013/02/02 15:16:06 - [0] D -- C:\Users\user\AppData\Local\{5F8D21D3-435A-45DC-8D3F-538218E90037} O43 - CFD: 2013/01/06 21:15:37 - [0] D -- C:\Users\user\AppData\Local\{5F8E47E8-512F-4ADE-B213-1A995C1D89E2} O43 - CFD: 2012/12/13 19:01:22 - [0] D -- C:\Users\user\AppData\Local\{602502E8-245C-46BF-A16E-173D255E7CB7} O43 - CFD: 2012/05/30 13:55:23 - [0] D -- C:\Users\user\AppData\Local\{60B53648-C913-47A1-9294-5D8C935BA443} O43 - CFD: 2012/12/10 15:18:25 - [0] D -- C:\Users\user\AppData\Local\{60BAEE71-784D-4F98-96C1-9247D0A4D9E8} O43 - CFD: 2012/07/17 09:07:01 - [0] D -- C:\Users\user\AppData\Local\{626BD2E8-6BCA-406E-9545-3D812D5FDE21} O43 - CFD: 2012/10/06 15:53:34 - [0] D -- C:\Users\user\AppData\Local\{62AC82BB-05DD-4342-9C5F-2633882138C0} O43 - CFD: 2012/05/05 10:05:59 - [0] D -- C:\Users\user\AppData\Local\{63268CFE-AE9B-4C64-8A3B-9B9310B27D87} O43 - CFD: 2012/08/26 20:32:13 - [0] D -- C:\Users\user\AppData\Local\{6387C048-5A1A-442F-8280-5BBAD80B9B12} O43 - CFD: 2013/02/02 02:13:21 - [0] D -- C:\Users\user\AppData\Local\{646A5E48-7F24-4038-8021-54070639F5C6} O43 - CFD: 2012/11/16 13:55:52 - [0] D -- C:\Users\user\AppData\Local\{6579C432-ED3B-4BAB-B928-5BA0C2AE4A01} O43 - CFD: 2012/11/27 02:41:29 - [0] D -- C:\Users\user\AppData\Local\{66939BAB-BF45-415F-B8AE-DC528286E4E5} O43 - CFD: 2013/02/01 15:06:31 - [0] D -- C:\Users\user\AppData\Local\{66EC8779-970C-4014-A34E-324810AC74A2} O43 - CFD: 2013/02/24 10:53:53 - [0] D -- C:\Users\user\AppData\Local\{675CF742-54B8-4CF6-8E28-34BAC96A4CEB} O43 - CFD: 2012/05/26 10:28:16 - [0] D -- C:\Users\user\AppData\Local\{67A47394-0E46-4441-81A8-EEE88C59EA89} O43 - CFD: 2012/10/31 15:14:49 - [0] D -- C:\Users\user\AppData\Local\{67B94FA4-7E27-4AB8-8A5E-3C5F19D9E69D} O43 - CFD: 2012/04/24 14:38:01 - [0] D -- C:\Users\user\AppData\Local\{68D276E4-D242-4B80-8FEA-D8F074AF8E8D} O43 - CFD: 2012/11/11 20:47:42 - [0] D -- C:\Users\user\AppData\Local\{68E20591-127D-4F91-B842-79C9B4E71105} O43 - CFD: 2012/04/06 00:27:10 - [0] D -- C:\Users\user\AppData\Local\{6963F26D-2221-4FC5-B319-5A4B20BDE5F6} O43 - CFD: 2012/07/13 16:06:56 - [0] D -- C:\Users\user\AppData\Local\{698A41B3-C617-4B5D-ADD1-AB66D795A2E1} O43 - CFD: 2012/04/21 19:54:17 - [0] D -- C:\Users\user\AppData\Local\{69DE6A5D-4AC9-40A6-B0F3-F38E3D9ABC6A} O43 - CFD: 2012/07/01 23:39:25 - [0] D -- C:\Users\user\AppData\Local\{69E7898E-DAB4-4806-AC10-63CA3BA22ED6} O43 - CFD: 2012/04/23 16:19:23 - [0] D -- C:\Users\user\AppData\Local\{6AC629AC-09E5-419E-B62B-C9FD98264671} O43 - CFD: 2013/03/09 20:18:02 - [0] D -- C:\Users\user\AppData\Local\{6BDCD6EA-B875-4625-8EAD-1DA9F1444E56} O43 - CFD: 2013/03/11 10:42:37 - [0] D -- C:\Users\user\AppData\Local\{6DC3470F-51E2-4A31-96AE-0F6543258A92} O43 - CFD: 2012/11/09 15:00:24 - [0] D -- C:\Users\user\AppData\Local\{6DC8FB5B-9586-4C03-9DD8-E95B720DF85B} O43 - CFD: 2012/07/17 03:34:14 - [0] D -- C:\Users\user\AppData\Local\{6DFCC786-DD1A-4070-AAB2-F286145F8F3A} O43 - CFD: 2012/07/02 11:40:05 - [0] D -- C:\Users\user\AppData\Local\{6E158269-16C5-4ABB-B646-00EEF74A5EAC} O43 - CFD: 2012/11/17 22:58:23 - [0] D -- C:\Users\user\AppData\Local\{6EBE760D-DCE5-443C-ACE8-1AF4FC4DE59A} O43 - CFD: 2012/06/08 16:08:52 - [0] D -- C:\Users\user\AppData\Local\{6F35C4CF-9FA4-484D-8317-8A15E8B5B62C} O43 - CFD: 2013/01/10 15:31:09 - [0] D -- C:\Users\user\AppData\Local\{6FA6D3AF-4E9B-4A87-B697-8F2179EC381D} O43 - CFD: 2012/07/09 16:02:18 - [0] D -- C:\Users\user\AppData\Local\{70040C8B-7326-4E57-A639-80EF261E04E4} O43 - CFD: 2012/04/20 00:34:09 - [0] D -- C:\Users\user\AppData\Local\{70149AEE-C3D3-48A4-89FD-4F7362FB7E19} O43 - CFD: 2012/04/06 15:38:42 - [0] D -- C:\Users\user\AppData\Local\{7169AA32-34D1-4202-8ED0-880B406AE74B} O43 - CFD: 2013/02/28 02:25:30 - [0] D -- C:\Users\user\AppData\Local\{71D27259-E476-4990-93CA-57EFE928516A} O43 - CFD: 2012/07/31 13:30:30 - [0] D -- C:\Users\user\AppData\Local\{72012464-8A5B-4F68-AC8C-DCB6C11C09E7} O43 - CFD: 2012/04/24 14:37:50 - [0] D -- C:\Users\user\AppData\Local\{72273074-FF8D-4F33-9550-F9676BB23070} O43 - CFD: 2012/12/19 00:00:40 - [0] D -- C:\Users\user\AppData\Local\{724AD673-71AA-4EFB-BBDF-80CF1958A51F} O43 - CFD: 2012/06/22 00:35:13 - [0] D -- C:\Users\user\AppData\Local\{726FF739-EDF7-4D26-BF44-2B83D0C1B61C} O43 - CFD: 2013/04/19 16:38:17 - [0] D -- C:\Users\user\AppData\Local\{729F7A13-E504-4938-8BDE-9012BFA7201B} O43 - CFD: 2013/03/03 21:33:38 - [0] D -- C:\Users\user\AppData\Local\{72F97BC4-3B1F-4318-9412-9F45BC4BC8B1} O43 - CFD: 2012/10/12 15:14:33 - [0] D -- C:\Users\user\AppData\Local\{73583A6C-9238-4048-8177-02F03082E070} O43 - CFD: 2012/05/20 23:52:50 - [0] D -- C:\Users\user\AppData\Local\{73611DBA-7C2F-4A86-9917-1E880DF96BB0} O43 - CFD: 2012/05/30 13:55:34 - [0] D -- C:\Users\user\AppData\Local\{743AE038-F443-4FC5-8C8B-C600BE114139} O43 - CFD: 2012/07/19 13:44:20 - [0] D -- C:\Users\user\AppData\Local\{745B550D-69B1-42DE-A513-BACC80976F08} O43 - CFD: 2012/05/28 17:47:05 - [0] D -- C:\Users\user\AppData\Local\{74E0EF04-7A8F-4351-A208-1A138EE0CBAD} O43 - CFD: 2013/03/26 16:39:43 - [0] D -- C:\Users\user\AppData\Local\{74FA35FB-3A45-415E-BCE5-7ED70CB5495A} O43 - CFD: 2012/10/03 18:27:08 - [0] D -- C:\Users\user\AppData\Local\{765EACE0-74B5-457A-AA7E-3723E1712C44} O43 - CFD: 2012/08/28 01:11:12 - [0] D -- C:\Users\user\AppData\Local\{76888F64-2DC8-4CFE-A984-808660DC293C} O43 - CFD: 2012/11/13 03:09:34 - [0] D -- C:\Users\user\AppData\Local\{76EDC411-CB4E-4917-AFAC-390D91BBD603} O43 - CFD: 2012/04/04 03:19:22 - [0] D -- C:\Users\user\AppData\Local\{7716DEFC-8D2E-454D-B186-720C48CA6F9E} O43 - CFD: 2013/02/25 19:37:48 - [0] D -- C:\Users\user\AppData\Local\{77CDABAB-3BFB-4334-8FCA-A9C38A5C4D8F} O43 - CFD: 2012/05/04 14:38:03 - [0] D -- C:\Users\user\AppData\Local\{77DF8F72-43F6-4306-9B92-A7FE2E3FD4A1} O43 - CFD: 2012/06/23 01:31:24 - [0] D -- C:\Users\user\AppData\Local\{77F10423-F8E0-4A89-A1BE-40AD44F672F8} O43 - CFD: 2013/01/09 15:46:30 - [0] D -- C:\Users\user\AppData\Local\{7957F0F6-38AA-4AD2-86B0-8F889008F013} O43 - CFD: 2013/03/03 02:59:16 - [0] D -- C:\Users\user\AppData\Local\{7973B099-3D65-4387-BE28-A42DE5D5347D} O43 - CFD: 2012/12/14 15:52:28 - [0] D -- C:\Users\user\AppData\Local\{79F5BA08-7AD0-4A67-A295-43DD1F6EC522} O43 - CFD: 2013/03/16 15:15:25 - [0] D -- C:\Users\user\AppData\Local\{7A6A38D7-E304-4548-ACEE-7B22DC321DD6} O43 - CFD: 2012/04/28 21:10:19 - [0] D -- C:\Users\user\AppData\Local\{7C57B387-4CBF-45A3-BACE-CA030B99B3C7} O43 - CFD: 2013/03/22 15:23:27 - [0] D -- C:\Users\user\AppData\Local\{7C8A06AC-612B-4DDE-A870-DA267EDFF974} O43 - CFD: 2013/02/04 10:36:00 - [0] D -- C:\Users\user\AppData\Local\{7D630375-5BAF-4988-A8DB-C62DE874C2CB} O43 - CFD: 2012/08/30 22:36:46 - [0] D -- C:\Users\user\AppData\Local\{7DAF5E5A-E55F-40B0-A381-FDD5DBDAA686} O43 - CFD: 2013/02/15 20:29:14 - [0] D -- C:\Users\user\AppData\Local\{7DC41448-222F-4EB5-884F-7D561E12E845} O43 - CFD: 2012/10/17 21:31:20 - [0] D -- C:\Users\user\AppData\Local\{7E262DC6-3796-431F-9888-C5EDFEB27710} O43 - CFD: 2012/05/16 16:04:10 - [0] D -- C:\Users\user\AppData\Local\{7EBAEA26-6C85-44D8-AFB2-CCD6CE450ACE} O43 - CFD: 2012/05/11 14:45:30 - [0] D -- C:\Users\user\AppData\Local\{7F1D66F1-5612-4C15-B039-BFCEFA9AD4C4} O43 - CFD: 2013/03/06 15:57:59 - [0] D -- C:\Users\user\AppData\Local\{7F59EB27-69B3-410B-9988-F5C6FCA0CEEC} O43 - CFD: 2012/06/28 15:08:00 - [0] D -- C:\Users\user\AppData\Local\{7FB96D70-5D7A-40FC-B467-B928B0C72FC5} O43 - CFD: 2012/11/30 13:22:57 - [0] D -- C:\Users\user\AppData\Local\{8041497F-103F-4415-94D9-A4E685A79389} O43 - CFD: 2012/04/06 00:26:41 - [0] D -- C:\Users\user\AppData\Local\{80CEEE16-248C-44F7-817D-5C08CBE92EE7} O43 - CFD: 2012/04/08 02:06:38 - [0] D -- C:\Users\user\AppData\Local\{80ED004A-7ABB-4975-8D15-6E39DCFFFF31} O43 - CFD: 2012/12/05 13:43:45 - [0] D -- C:\Users\user\AppData\Local\{80FF1110-3557-4CA4-B28F-B945A318B40D} O43 - CFD: 2012/05/08 14:16:35 - [0] D -- C:\Users\user\AppData\Local\{81189B51-B436-4FD3-8070-253E702AA3D2} O43 - CFD: 2013/02/04 21:00:54 - [0] D -- C:\Users\user\AppData\Local\{81D97565-D9DB-4682-BE1D-6A3E3D6C50FD} O43 - CFD: 2012/05/31 01:56:13 - [0] D -- C:\Users\user\AppData\Local\{833CCB6E-F61B-4B16-9154-BA83E3178DCD} O43 - CFD: 2012/09/01 22:43:07 - [0] D -- C:\Users\user\AppData\Local\{838FA048-0E60-4BB3-96B5-0C1D16F0AD5D} O43 - CFD: 2013/02/19 13:21:08 - [0] D -- C:\Users\user\AppData\Local\{849D7D2B-1655-4A2A-9A96-867BD5831D16} O43 - CFD: 2012/09/09 23:04:57 - [0] D -- C:\Users\user\AppData\Local\{8510B78B-C870-4DEE-8A35-B49B13EBC62F} O43 - CFD: 2012/05/20 11:52:19 - [0] D -- C:\Users\user\AppData\Local\{85BC794C-DCD8-4317-B6D8-AB98E7FB3EE8} O43 - CFD: 2012/05/23 13:24:44 - [0] D -- C:\Users\user\AppData\Local\{86515D2A-4C1A-42E5-AF61-8A40B87E371D} O43 - CFD: 2013/01/03 13:55:55 - [0] D -- C:\Users\user\AppData\Local\{86721F34-CBB9-4F8C-9BF0-BDE3454302E5} O43 - CFD: 2012/10/19 13:32:39 - [0] D -- C:\Users\user\AppData\Local\{87AE860C-335F-42C4-8C0D-C1FC52BA1F4C} O43 - CFD: 2012/04/14 01:04:38 - [0] D -- C:\Users\user\AppData\Local\{887F821C-4374-404F-9EC2-7CF1B9380CC4} O43 - CFD: 2012/06/22 13:30:33 - [0] D -- C:\Users\user\AppData\Local\{8958A317-C86B-49C2-BDBC-305E2A47BDC9} O43 - CFD: 2012/04/22 22:24:13 - [0] D -- C:\Users\user\AppData\Local\{89CCA384-22F9-4217-BC40-F3BB370E2757} O43 - CFD: 2012/11/26 00:59:23 - [0] D -- C:\Users\user\AppData\Local\{89D8E7F3-429D-4E8B-94BD-83469480D539} O43 - CFD: 2012/05/17 14:58:12 - [0] D -- C:\Users\user\AppData\Local\{8A718CE6-5363-4A37-8B76-F75309459640} O43 - CFD: 2013/02/16 10:24:27 - [0] D -- C:\Users\user\AppData\Local\{8AB27F6F-87E7-473B-90E0-CF12C54A1635} O43 - CFD: 2012/05/22 20:45:05 - [0] D -- C:\Users\user\AppData\Local\{8BF8406C-D329-4CA5-9D9A-0C30DEEE9B02} O43 - CFD: 2012/06/26 14:59:12 - [0] D -- C:\Users\user\AppData\Local\{8C0EB09B-4FAA-45CB-AE46-9AAAA8AAF708} O43 - CFD: 2013/04/20 10:10:14 - [0] D -- C:\Users\user\AppData\Local\{8CB49858-D494-4E87-B754-EE98CC561A9C} O43 - CFD: 2012/10/07 21:47:03 - [0] D -- C:\Users\user\AppData\Local\{8CD6971C-4763-4A72-A2AB-28498E007990} O43 - CFD: 2012/05/19 10:51:08 - [0] D -- C:\Users\user\AppData\Local\{8DFCA1ED-0898-4DD5-9148-84492A502C10} O43 - CFD: 2013/03/30 17:48:35 - [0] D -- C:\Users\user\AppData\Local\{8E3F502E-AEC4-4623-BE87-011F5B329E84} O43 - CFD: 2012/08/31 13:47:29 - [0] D -- C:\Users\user\AppData\Local\{8ECB8ACB-921A-4F2C-811B-65E1B36207AC} O43 - CFD: 2013/01/12 11:54:34 - [0] D -- C:\Users\user\AppData\Local\{8F3BFF5A-64DF-4A43-B9C8-63077A76DAA7} O43 - CFD: 2013/02/24 10:34:00 - [0] D -- C:\Users\user\AppData\Local\{913AB440-4036-46F5-9F34-9CB195A50AE1} O43 - CFD: 2013/02/16 22:25:02 - [0] D -- C:\Users\user\AppData\Local\{913E99E3-3773-40C6-97FF-35D0E3F4FB85} O43 - CFD: 2012/07/08 03:41:10 - [0] D -- C:\Users\user\AppData\Local\{91922A59-66B8-4559-B79C-D60BB675725A} O43 - CFD: 2012/06/01 16:28:02 - [0] D -- C:\Users\user\AppData\Local\{923FA081-A160-4B26-85D3-F631FBFA480C} O43 - CFD: 2012/11/12 15:08:59 - [0] D -- C:\Users\user\AppData\Local\{93067817-B12A-4081-A7AA-0C1FFB4235AC} O43 - CFD: 2012/10/21 20:32:28 - [0] D -- C:\Users\user\AppData\Local\{93C77D82-850F-4B65-9A68-85ACE77791FD} O43 - CFD: 2012/06/06 14:22:20 - [0] D -- C:\Users\user\AppData\Local\{93D0215E-2C39-4155-BC54-81A549776402} O43 - CFD: 2012/09/27 11:44:43 - [0] D -- C:\Users\user\AppData\Local\{93F03612-845E-4985-84E2-B777FA132A3C} O43 - CFD: 2012/10/06 16:26:38 - [0] D -- C:\Users\user\AppData\Local\{9469D120-6E4E-4458-BA33-3798D80CDE38} O43 - CFD: 2012/06/22 13:30:23 - [0] D -- C:\Users\user\AppData\Local\{948FB7EB-0034-4F18-877A-47DA761EC4C9} O43 - CFD: 2012/05/06 11:03:54 - [0] D -- C:\Users\user\AppData\Local\{9502D4E2-A260-49D9-B412-3A8919F95985} O43 - CFD: 2012/05/14 13:37:08 - [0] D -- C:\Users\user\AppData\Local\{9532C268-FF9F-4963-B528-E5EF38B98890} O43 - CFD: 2012/09/02 21:50:02 - [0] D -- C:\Users\user\AppData\Local\{954D4244-FAC0-4D7F-8336-A4D0FC68D01B} O43 - CFD: 2013/03/27 22:35:07 - [0] D -- C:\Users\user\AppData\Local\{95A9CCCE-7E3C-4CC0-8560-5EF476BFEFD0} O43 - CFD: 2012/05/19 10:51:18 - [0] D -- C:\Users\user\AppData\Local\{968301F0-6EC5-4EB9-A898-3272663747D2} O43 - CFD: 2012/07/01 23:39:12 - [0] D -- C:\Users\user\AppData\Local\{96F4E685-D08C-4A0E-95AF-E993E3350288} O43 - CFD: 2013/03/12 14:49:21 - [0] D -- C:\Users\user\AppData\Local\{97231434-B0A1-4CC5-A72C-D60FD232AB7E} O43 - CFD: 2012/07/08 03:47:54 - [0] D -- C:\Users\user\AppData\Local\{979074E7-2F37-4626-8AD7-B12597E9B30E} O43 - CFD: 2012/09/15 22:50:50 - [0] D -- C:\Users\user\AppData\Local\{97E4B4CB-294E-447C-9F42-238A37C50D3B} O43 - CFD: 2012/09/26 20:07:24 - [0] D -- C:\Users\user\AppData\Local\{98EDD767-F13C-4570-967B-57D3C8CEE969} O43 - CFD: 2012/10/03 20:06:36 - [0] D -- C:\Users\user\AppData\Local\{99A2438E-9574-4B79-9DEE-49C2914C5130} O43 - CFD: 2012/09/28 14:45:54 - [0] D -- C:\Users\user\AppData\Local\{99D592C5-FF7C-4129-AAA6-36572B7887E9} O43 - CFD: 2012/07/06 02:16:15 - [0] D -- C:\Users\user\AppData\Local\{99E5EAE3-187A-4C0B-ADB2-189586B07A84} O43 - CFD: 2013/02/17 10:27:01 - [0] D -- C:\Users\user\AppData\Local\{9A24FCE2-30F4-4674-B2CA-48D8A6198658} O43 - CFD: 2012/05/19 22:51:55 - [0] D -- C:\Users\user\AppData\Local\{9AC49193-DF5D-4410-8544-3021DA3B6BC8} O43 - CFD: 2012/11/28 16:59:26 - [0] D -- C:\Users\user\AppData\Local\{9AD51C9C-ABA0-4621-92D5-345AFCCC08F0} O43 - CFD: 2012/06/04 15:50:05 - [0] D -- C:\Users\user\AppData\Local\{9CE8A526-6DC6-4CDD-ABF0-0EF9353E1389} O43 - CFD: 2012/05/16 03:39:03 - [0] D -- C:\Users\user\AppData\Local\{9CF7CC57-455D-4DF4-B36A-6486B8A3664E} O43 - CFD: 2012/05/06 11:03:44 - [0] D -- C:\Users\user\AppData\Local\{9DD17F32-331D-4238-893B-E514034829D2} O43 - CFD: 2012/08/31 00:32:34 - [0] D -- C:\Users\user\AppData\Local\{9E10123E-EAB8-4CCD-B98A-9CE7015D0B8D} O43 - CFD: 2012/10/26 10:45:00 - [0] D -- C:\Users\user\AppData\Local\{9E62DBDE-DC91-4237-BFFE-1FEDE1979B6D} O43 - CFD: 2012/12/09 10:13:00 - [0] D -- C:\Users\user\AppData\Local\{9F15E122-F60C-4456-AA24-B42CE870648B} O43 - CFD: 2012/05/05 23:02:50 - [0] D -- C:\Users\user\AppData\Local\{9F7953B3-F6C4-4C19-A7E5-A9CA0A85EF99} O43 - CFD: 2012/09/28 17:05:57 - [0] D -- C:\Users\user\AppData\Local\{9FA34E64-8746-4D31-AB2C-19B687A8CCEC} O43 - CFD: 2012/09/21 21:41:04 - [0] D -- C:\Users\user\AppData\Local\{A0126329-0B13-4F86-9EEE-140C6EA65297} O43 - CFD: 2012/05/31 18:42:27 - [0] D -- C:\Users\user\AppData\Local\{A1A46D8A-8D47-43FF-9047-36477560EFEB} O43 - CFD: 2012/06/03 23:05:24 - [0] D -- C:\Users\user\AppData\Local\{A20F06C7-68BC-4BB9-A1FE-4FFE7533DA09} O43 - CFD: 2012/04/20 00:33:58 - [0] D -- C:\Users\user\AppData\Local\{A21BA854-F85F-4659-B13E-0CF6F287CF43} O43 - CFD: 2012/07/16 13:03:00 - [0] D -- C:\Users\user\AppData\Local\{A262BD66-4474-4329-8284-8F969FDF7E9B} O43 - CFD: 2012/08/03 12:12:39 - [0] D -- C:\Users\user\AppData\Local\{A2A56376-4611-4344-BFAD-78D0E9C5B0E9} O43 - CFD: 2012/05/10 13:52:49 - [0] D -- C:\Users\user\AppData\Local\{A330B2EE-4B68-4457-A8AC-E79FCF5CC0AA} O43 - CFD: 2013/01/02 16:00:02 - [0] D -- C:\Users\user\AppData\Local\{A3575A6A-0393-4ABF-82B4-2F3F8156DCD9} O43 - CFD: 2013/03/13 16:06:28 - [0] D -- C:\Users\user\AppData\Local\{A3CC0E14-DC1F-45C5-B05E-D90C21D61B48} O43 - CFD: 2013/01/06 01:04:55 - [0] D -- C:\Users\user\AppData\Local\{A405BE23-522E-4E5B-9B82-97E824787830} O43 - CFD: 2013/02/21 14:31:03 - [0] D -- C:\Users\user\AppData\Local\{A5B7BC97-6353-4224-851B-27D38CA0512F} O43 - CFD: 2012/12/08 10:19:15 - [0] D -- C:\Users\user\AppData\Local\{A64CF652-AB38-40AB-AFEE-82324944C552} O43 - CFD: 2012/07/10 04:03:03 - [0] D -- C:\Users\user\AppData\Local\{A7037E48-7259-49BC-A2C5-14746885587A} O43 - CFD: 2013/02/01 03:17:31 - [0] D -- C:\Users\user\AppData\Local\{A9199C0A-00BF-49FA-BF2E-7FA3819EDFD5} O43 - CFD: 2012/05/02 14:27:29 - [0] D -- C:\Users\user\AppData\Local\{A9F523B9-91AA-4B16-B814-B1CBA2376E0E} O43 - CFD: 2012/05/16 16:03:59 - [0] D -- C:\Users\user\AppData\Local\{AB35A5CE-E684-485A-B913-421C0CBFBE23} O43 - CFD: 2013/02/28 15:01:47 - [0] D -- C:\Users\user\AppData\Local\{AB63DE4A-7AF1-4A4A-9DEC-3AE29F4481B9} O43 - CFD: 2013/01/14 23:30:59 - [0] D -- C:\Users\user\AppData\Local\{AB6A1D1C-662D-4720-A5F1-25AAEBF580BD} O43 - CFD: 2012/05/18 15:40:44 - [0] D -- C:\Users\user\AppData\Local\{AC447DD7-1153-486B-900C-98E50DFB3E43} O43 - CFD: 2012/05/16 03:39:13 - [0] D -- C:\Users\user\AppData\Local\{AC81B837-D584-43C5-8153-2561787AAA58} O43 - CFD: 2012/10/22 14:01:45 - [0] D -- C:\Users\user\AppData\Local\{AC9FDB73-8AAF-4582-9057-155D4A50109D} O43 - CFD: 2012/07/21 15:11:47 - [0] D -- C:\Users\user\AppData\Local\{AD310935-C141-4517-A5FD-64C564D278F1} O43 - CFD: 2012/10/12 01:40:06 - [0] D -- C:\Users\user\AppData\Local\{AD6F3556-FB65-4564-902E-6AB56C7A2C9B} O43 - CFD: 2012/08/08 03:59:24 - [0] D -- C:\Users\user\AppData\Local\{ADCAC50A-5671-478B-AE0C-4516119448A9} O43 - CFD: 2012/07/21 00:01:31 - [0] D -- C:\Users\user\AppData\Local\{AECD71B6-5FE2-4F0E-AF0C-0AC2238E0695} O43 - CFD: 2012/11/24 20:18:18 - [0] D -- C:\Users\user\AppData\Local\{AF10311B-A59C-43E2-9C1E-0F087E06AAA6} O43 - CFD: 2012/08/07 01:28:08 - [0] D -- C:\Users\user\AppData\Local\{B07D71C5-8964-422F-B4C5-A2FB3EB631CC} O43 - CFD: 2013/01/13 14:52:31 - [0] D -- C:\Users\user\AppData\Local\{B15C5104-C9CF-4348-A471-0A131522C0B9} O43 - CFD: 2012/12/29 10:18:15 - [0] D -- C:\Users\user\AppData\Local\{B1C4EDF8-B96B-4C06-AFFC-32936C1ADAED} O43 - CFD: 2012/08/03 12:13:03 - [0] D -- C:\Users\user\AppData\Local\{B305BB01-9CA1-42F4-B9F2-0EC625665C4C} O43 - CFD: 2012/06/08 16:09:03 - [0] D -- C:\Users\user\AppData\Local\{B39F97C9-534C-46A9-B1F2-2DBAF4A11B69} O43 - CFD: 2013/03/25 17:31:06 - [0] D -- C:\Users\user\AppData\Local\{B5916C6D-AEA0-45BD-86EA-987557AA6468} O43 - CFD: 2012/12/17 23:26:25 - [0] D -- C:\Users\user\AppData\Local\{B5A2FFD3-898F-4070-88D4-1EA721956D2A} O43 - CFD: 2013/01/13 21:13:05 - [0] D -- C:\Users\user\AppData\Local\{B5B83120-1776-4351-9F41-F869DF5C9537} O43 - CFD: 2012/12/16 11:56:20 - [0] D -- C:\Users\user\AppData\Local\{B650E2D5-99B4-4BE4-8B57-08FEA1E879BF} O43 - CFD: 2013/04/02 17:55:58 - [0] D -- C:\Users\user\AppData\Local\{B66BD01D-A6C1-46D8-98FF-A79D029C7731} O43 - CFD: 2012/05/27 15:26:33 - [0] D -- C:\Users\user\AppData\Local\{B67F8547-2128-4470-B777-380DD58FDE69} O43 - CFD: 2012/08/27 02:52:40 - [0] D -- C:\Users\user\AppData\Local\{B6BFDC52-9E37-41D4-9D0E-609FEEF6A118} O43 - CFD: 2013/02/20 18:33:56 - [0] D -- C:\Users\user\AppData\Local\{B6EC1554-FBC5-4DFF-BA63-ABB97ADFD6EA} O43 - CFD: 2012/07/20 22:04:19 - [0] D -- C:\Users\user\AppData\Local\{B6F81B7C-AAF7-4521-A51B-7DE7791BC8B7} O43 - CFD: 2012/04/08 20:34:54 - [0] D -- C:\Users\user\AppData\Local\{B7758745-8820-4DDF-B2AC-59579322D881} O43 - CFD: 2012/05/13 10:20:09 - [0] D -- C:\Users\user\AppData\Local\{B7FFEBBD-6F30-4235-AC52-DECDEEE5FA42} O43 - CFD: 2012/05/06 23:04:41 - [0] D -- C:\Users\user\AppData\Local\{B8B020B7-64E7-4B70-9A0C-C8F22FE055F8} O43 - CFD: 2012/09/11 17:04:42 - [0] D -- C:\Users\user\AppData\Local\{B8DAE153-B80D-45B2-88A0-C7AF7106B29F} O43 - CFD: 2012/08/04 16:04:43 - [0] D -- C:\Users\user\AppData\Local\{B8F03370-9767-42D5-A6E6-3A19BDA7201B} O43 - CFD: 2012/10/07 12:58:02 - [0] D -- C:\Users\user\AppData\Local\{B91A289A-2DF8-4479-9B5F-4D33B5446E73} O43 - CFD: 2012/08/08 04:13:25 - [0] D -- C:\Users\user\AppData\Local\{B9407D58-B5A7-427B-A47B-1D005C9F7BF5} O43 - CFD: 2012/08/05 21:36:00 - [0] D -- C:\Users\user\AppData\Local\{B97B61F7-B558-4ED6-9859-B7043CB63D96} O43 - CFD: 2012/09/28 00:20:57 - [0] D -- C:\Users\user\AppData\Local\{B9A48D63-A55D-416A-A2F9-60C695EE5EAF} O43 - CFD: 2012/08/09 00:26:04 - [0] D -- C:\Users\user\AppData\Local\{B9BF209B-628D-42EC-A452-CEFD89D008BA} O43 - CFD: 2012/12/15 10:13:45 - [0] D -- C:\Users\user\AppData\Local\{BA2AC6DF-CD46-44B4-9128-28D0E32A56FC} O43 - CFD: 2012/09/09 23:03:01 - [0] D -- C:\Users\user\AppData\Local\{BA36DF73-CC17-459A-BD02-9A62A7045309} O43 - CFD: 2012/11/23 19:23:50 - [0] D -- C:\Users\user\AppData\Local\{BBBAD656-275C-4558-8315-7AA18C548F8C} O43 - CFD: 2012/05/13 23:03:59 - [0] D -- C:\Users\user\AppData\Local\{BE1FDC25-FFB4-45BD-9B8A-5D9F6A6E2EBC} O43 - CFD: 2012/10/20 01:33:14 - [0] D -- C:\Users\user\AppData\Local\{BEAE38F1-8599-4EED-B37F-A04403706C35} O43 - CFD: 2012/06/01 16:27:52 - [0] D -- C:\Users\user\AppData\Local\{BEF47CBB-D820-4862-A09C-09BAE6765AF7} O43 - CFD: 2013/03/18 16:02:39 - [0] D -- C:\Users\user\AppData\Local\{BEFA1DE6-3D09-42F9-AB95-AB00515DAA3B} O43 - CFD: 2012/05/13 23:04:09 - [0] D -- C:\Users\user\AppData\Local\{BF2A7F90-22CA-4655-8B7A-A20DF6F9B9F5} O43 - CFD: 2013/04/10 02:44:03 - [0] D -- C:\Users\user\AppData\Local\{BFC7B89A-44FF-4DBF-B0B5-0BF26D988244} O43 - CFD: 2012/09/12 13:55:32 - [0] D -- C:\Users\user\AppData\Local\{BFE3BC77-D5C4-4EFF-A5F5-2D975CCEA640} O43 - CFD: 2012/11/21 21:27:00 - [0] D -- C:\Users\user\AppData\Local\{C15D4DB1-A4BA-4784-A5E3-B64839EF8201} O43 - CFD: 2012/05/28 17:46:49 - [0] D -- C:\Users\user\AppData\Local\{C1782C7C-69B8-4775-B7CD-94A27FAC8163} O43 - CFD: 2012/07/16 03:04:32 - [0] D -- C:\Users\user\AppData\Local\{C19AEB8E-6B85-45E8-88B6-372683C058CE} O43 - CFD: 2012/04/11 21:10:32 - [0] D -- C:\Users\user\AppData\Local\{C2E1CFAB-66EC-4B44-A1E7-11F8D33420E0} O43 - CFD: 2012/11/30 00:47:25 - [0] D -- C:\Users\user\AppData\Local\{C3DCEA56-5E88-4097-B7AE-66BA3069E807} O43 - CFD: 2012/12/31 13:21:38 - [0] D -- C:\Users\user\AppData\Local\{C6972D19-D116-41DA-B855-ADB6801EA2AE} O43 - CFD: 2012/05/15 15:38:39 - [0] D -- C:\Users\user\AppData\Local\{C6C91D46-D8E4-4271-8FAA-9E2B9DAE1DDA} O43 - CFD: 2012/12/09 10:33:09 - [0] D -- C:\Users\user\AppData\Local\{C796A28D-26A5-4525-A3C4-684DBD7AE5CA} O43 - CFD: 2012/10/16 19:02:19 - [0] D -- C:\Users\user\AppData\Local\{C7BDAA84-C5E5-44AA-AD47-D86F34E1D816} O43 - CFD: 2012/06/21 12:33:59 - [0] D -- C:\Users\user\AppData\Local\{C8AE4555-51FF-4B75-9D38-7C252A9BCBAC} O43 - CFD: 2013/01/04 13:57:08 - [0] D -- C:\Users\user\AppData\Local\{C98B09CE-F5AC-400F-BBA5-27F41FB4DB2A} O43 - CFD: 2012/12/28 16:26:32 - [0] D -- C:\Users\user\AppData\Local\{C9F78E75-0FF9-465B-9EE1-C4FC49F8A37A} O43 - CFD: 2012/05/24 14:59:59 - [0] D -- C:\Users\user\AppData\Local\{CA5FB0F2-0102-46E3-A3D7-8A15A50C1532} O43 - CFD: 2012/11/01 11:06:57 - [0] D -- C:\Users\user\AppData\Local\{CA6319B3-32A9-4E41-8512-601EABFFCEB1} O43 - CFD: 2013/03/14 16:44:28 - [0] D -- C:\Users\user\AppData\Local\{CACC4957-886F-4B49-AF8B-68A0F3158017} O43 - CFD: 2012/08/10 14:29:26 - [0] D -- C:\Users\user\AppData\Local\{CAF2DE21-8AA9-40F4-BEAA-847E0561043F} O43 - CFD: 2012/07/04 15:39:01 - [0] D -- C:\Users\user\AppData\Local\{CBC5FA11-E033-4E75-9936-A23E7BE99AEB} O43 - CFD: 2012/07/08 16:00:37 - [0] D -- C:\Users\user\AppData\Local\{CBCF053C-24BA-4D0B-8EAB-C6D311A34E6A} O43 - CFD: 2012/10/25 16:21:25 - [0] D -- C:\Users\user\AppData\Local\{CCB85F06-5632-48F3-8CC0-3696A315B58A} O43 - CFD: 2012/09/17 03:47:39 - [0] D -- C:\Users\user\AppData\Local\{CCE091E2-6256-4422-8E64-7A713A4EF6C0} O43 - CFD: 2013/02/11 19:19:44 - [0] D -- C:\Users\user\AppData\Local\{CD3B77CA-E23B-4E60-8964-B80C66034217} O43 - CFD: 2012/12/27 20:01:33 - [0] D -- C:\Users\user\AppData\Local\{CE02BDBA-CBDC-4975-9E2B-6A70B45614DF} O43 - CFD: 2012/07/09 16:02:06 - [0] D -- C:\Users\user\AppData\Local\{CE42D57E-9CEB-487E-BBF6-B5D77E0EEA2D} O43 - CFD: 2012/11/19 04:51:43 - [0] D -- C:\Users\user\AppData\Local\{CE6F854B-AE97-435B-8DEB-655309A34BD8} O43 - CFD: 2012/09/24 19:29:20 - [0] D -- C:\Users\user\AppData\Local\{CFECE851-E0CA-4557-B937-F8D985D589FD} O43 - CFD: 2012/04/25 15:03:39 - [0] D -- C:\Users\user\AppData\Local\{D0F64479-FBA5-413A-941C-069308BC9455} O43 - CFD: 2012/05/21 15:42:11 - [0] D -- C:\Users\user\AppData\Local\{D1F093AD-E193-4ABF-818A-5080ED805254} O43 - CFD: 2012/11/26 14:40:54 - [0] D -- C:\Users\user\AppData\Local\{D246E8C2-14A6-4B45-BFBD-333F1E2C752A} O43 - CFD: 2012/06/02 15:37:30 - [0] D -- C:\Users\user\AppData\Local\{D34516D7-BD18-4FE0-BD20-BB69FF2FAAFC} O43 - CFD: 2012/09/14 15:37:12 - [0] D -- C:\Users\user\AppData\Local\{D3D02B98-0247-4594-9844-8F6996BC4103} O43 - CFD: 2012/05/19 22:52:05 - [0] D -- C:\Users\user\AppData\Local\{D436C88B-02A1-4BBE-AB54-419BB684BF5B} O43 - CFD: 2012/12/06 14:53:58 - [0] D -- C:\Users\user\AppData\Local\{D48A6BA2-8350-49C6-912B-71D3E38E0997} O43 - CFD: 2012/05/18 15:40:34 - [0] D -- C:\Users\user\AppData\Local\{D4C5746A-81DD-430D-80FD-BFDD343E9715} O43 - CFD: 2012/05/08 14:16:45 - [0] D -- C:\Users\user\AppData\Local\{D4E250FC-97F6-4ADB-9261-942078BD89C0} O43 - CFD: 2012/05/24 14:59:49 - [0] D -- C:\Users\user\AppData\Local\{D50F6892-6498-4D61-9C03-09278F27FF5C} O43 - CFD: 2012/04/30 14:27:25 - [0] D -- C:\Users\user\AppData\Local\{D53B03E6-5A15-4FEB-A134-7656046C036A} O43 - CFD: 2012/07/18 18:38:16 - [0] D -- C:\Users\user\AppData\Local\{D54F2D75-896A-4DF9-8DF1-6A333223714D} O43 - CFD: 2012/05/27 23:48:24 - [0] D -- C:\Users\user\AppData\Local\{D5C7193E-D7CF-46A5-96E0-6F92AE141BD9} O43 - CFD: 2012/10/31 16:25:37 - [0] D -- C:\Users\user\AppData\Local\{D69E40C5-B17D-4435-98BF-CE26DC3B71FA} O43 - CFD: 2012/12/20 03:07:09 - [0] D -- C:\Users\user\AppData\Local\{D6CF3F1C-726B-48EE-9E35-10FF7A08A68F} O43 - CFD: 2012/10/13 18:07:55 - [0] D -- C:\Users\user\AppData\Local\{D6D37C39-8A0E-4856-B1B4-9BFB6F873755} O43 - CFD: 2012/06/21 12:34:28 - [0] D -- C:\Users\user\AppData\Local\{D80FE2B6-865B-4CFC-8E3B-26C493FE34DA} O43 - CFD: 2013/03/04 14:19:24 - [0] D -- C:\Users\user\AppData\Local\{D840AD1F-8C16-4DA2-B595-A73913111E28} O43 - CFD: 2012/10/15 22:11:27 - [0] D -- C:\Users\user\AppData\Local\{D84E6A91-7B9C-431F-A2F9-8AC412E438CA} O43 - CFD: 2013/03/10 15:38:36 - [0] D -- C:\Users\user\AppData\Local\{D8561186-3F65-4A14-8EF1-30990E6F51CB} O43 - CFD: 2012/05/25 19:02:53 - [0] D -- C:\Users\user\AppData\Local\{D856D4C7-1795-4919-9693-940EE887D678} O43 - CFD: 2012/09/11 13:25:10 - [0] D -- C:\Users\user\AppData\Local\{D8645498-FBFE-4392-9BA8-00B4AB4D9832} O43 - CFD: 2013/03/29 23:02:20 - [0] D -- C:\Users\user\AppData\Local\{D888A495-E94F-400B-BA0D-9C4C3AB9DAA1} O43 - CFD: 2012/11/05 15:27:22 - [0] D -- C:\Users\user\AppData\Local\{D8AE5701-284B-4C99-8ACE-12099F8660E0} O43 - CFD: 2012/05/06 23:04:31 - [0] D -- C:\Users\user\AppData\Local\{D9C42B05-9A33-4A97-A7BB-C40C38D09A72} O43 - CFD: 2013/04/18 22:28:41 - [0] D -- C:\Users\user\AppData\Local\{DA2BB8E2-58F3-4B55-BEB5-63180511579B} O43 - CFD: 2012/04/28 21:10:09 - [0] D -- C:\Users\user\AppData\Local\{DB6030C2-B57B-4011-878F-121840B49E88} O43 - CFD: 2012/07/09 04:01:23 - [0] D -- C:\Users\user\AppData\Local\{DB674179-201A-458A-8A4B-2D60BA455BD5} O43 - CFD: 2012/07/07 14:52:50 - [0] D -- C:\Users\user\AppData\Local\{DBA81B64-3292-4D21-BABD-56DC6C1C5561} O43 - CFD: 2013/04/18 20:44:00 - [0] D -- C:\Users\user\AppData\Local\{DC3C569A-E740-4980-9244-06A3B047C6A1} O43 - CFD: 2012/09/04 02:55:21 - [0] D -- C:\Users\user\AppData\Local\{DCB8FECD-FD94-4311-BE48-5A4160A2160D} O43 - CFD: 2012/06/26 01:33:59 - [0] D -- C:\Users\user\AppData\Local\{DE5FB558-8AF4-46C7-BEAA-F71067D1A1A5} O43 - CFD: 2012/04/03 15:18:48 - [0] D -- C:\Users\user\AppData\Local\{DE96BD73-B8C4-4AA7-B7D1-CF2490A41901} O43 - CFD: 2013/03/03 14:59:30 - [0] D -- C:\Users\user\AppData\Local\{DEC0311D-A4EC-42DC-A9EE-67CB9852DCD1} O43 - CFD: 2012/05/04 14:37:52 - [0] D -- C:\Users\user\AppData\Local\{DEC8371F-0A46-4F50-8B04-83E210DE55E9} O43 - CFD: 2013/04/25 19:07:38 - [0] D -- C:\Users\user\AppData\Local\{DF5BFA7F-4306-477C-9D22-F0701207E7B5} O43 - CFD: 2012/04/08 14:12:15 - [0] D -- C:\Users\user\AppData\Local\{DF6F28AC-1412-4D7D-88C8-78169CA7711F} O43 - CFD: 2013/04/11 11:08:21 - [0] D -- C:\Users\user\AppData\Local\{DFF48E43-6FFA-4E09-8EA8-1FCD41EC82B4} O43 - CFD: 2013/04/19 22:08:44 - [0] D -- C:\Users\user\AppData\Local\{E019881B-FEB3-4301-B24D-788405040834} O43 - CFD: 2012/09/10 19:18:55 - [0] D -- C:\Users\user\AppData\Local\{E054782C-645F-45AA-B4ED-B81EBB021085} O43 - CFD: 2012/04/09 20:36:26 - [0] D -- C:\Users\user\AppData\Local\{E164AF09-D7F2-4814-8319-74CF57C50B3D} O43 - CFD: 2013/02/18 22:29:02 - [0] D -- C:\Users\user\AppData\Local\{E2DB6E3D-07B2-434E-86E5-35D7A9BF0629} O43 - CFD: 2012/11/27 15:37:05 - [0] D -- C:\Users\user\AppData\Local\{E35E9FA4-A2C7-43FE-9008-A1D02DBAB437} O43 - CFD: 2013/03/08 10:04:18 - [0] D -- C:\Users\user\AppData\Local\{E37A884A-39FD-49F6-B648-137F78FA350C} O43 - CFD: 2012/05/11 01:53:38 - [0] D -- C:\Users\user\AppData\Local\{E461E0EF-C753-4219-A083-AFFCDBB523C8} O43 - CFD: 2013/04/15 19:03:03 - [0] D -- C:\Users\user\AppData\Local\{E4CC6B95-1A7D-4A66-B5A7-6D5EE48518A8} O43 - CFD: 2013/02/12 20:14:30 - [0] D -- C:\Users\user\AppData\Local\{E55B33EC-EFE1-49CB-8C96-FA428932BDC9} O43 - CFD: 2012/07/08 03:48:08 - [0] D -- C:\Users\user\AppData\Local\{E5DD91DE-340A-4A25-BDCB-CA266DB334E6} O43 - CFD: 2013/03/15 16:29:44 - [0] D -- C:\Users\user\AppData\Local\{E65674BF-7558-4B1A-A655-2C66A211A464} O43 - CFD: 2012/07/18 18:38:02 - [0] D -- C:\Users\user\AppData\Local\{E65C1830-8B07-4114-BE67-213B3B06E46E} O43 - CFD: 2013/04/18 16:11:40 - [0] D -- C:\Users\user\AppData\Local\{E6D959DF-0EF8-468D-B28A-246BF0080046} O43 - CFD: 2012/09/26 20:11:17 - [0] D -- C:\Users\user\AppData\Local\{E72C60A2-3964-4BCC-8F2A-0C638EDB94F4} O43 - CFD: 2013/02/09 19:27:19 - [0] D -- C:\Users\user\AppData\Local\{E742E9F0-FED4-4FBA-824F-6041C408AFD3} O43 - CFD: 2012/05/12 10:06:29 - [0] D -- C:\Users\user\AppData\Local\{E7A6E2D1-9D5B-4D56-8E03-903D5AD68606} O43 - CFD: 2012/07/21 15:41:14 - [0] D -- C:\Users\user\AppData\Local\{E81514EF-3FDF-4860-95FD-4FCF3B550B42} O43 - CFD: 2013/02/13 15:30:37 - [0] D -- C:\Users\user\AppData\Local\{E89F8C5C-399B-4849-A409-AC443679FEFD} O43 - CFD: 2013/03/12 14:24:55 - [0] D -- C:\Users\user\AppData\Local\{E8F54EB1-BA21-4647-A6A9-DBD835E4AB65} O43 - CFD: 2013/02/17 22:27:37 - [0] D -- C:\Users\user\AppData\Local\{E9CFB207-51C8-4460-B8BB-9E4B4944C7A2} O43 - CFD: 2013/04/23 14:18:15 - [0] D -- C:\Users\user\AppData\Local\{EA822258-7AC2-44FD-8AA2-4262D7F40708} O43 - CFD: 2012/11/03 18:37:33 - [0] D -- C:\Users\user\AppData\Local\{EB694BDF-1E0C-46E3-9484-859DBF12F3F4} O43 - CFD: 2012/06/09 19:09:56 - [0] D -- C:\Users\user\AppData\Local\{EBA7E368-97D1-4E34-81A5-09AA7E7358A2} O43 - CFD: 2012/12/09 11:04:49 - [0] D -- C:\Users\user\AppData\Local\{ECBE1E00-11D5-4FD5-A27E-D9C734AEEECD} O43 - CFD: 2013/04/01 18:27:25 - [0] D -- C:\Users\user\AppData\Local\{ED550F3B-32BA-4C96-BF03-9600F45118E9} O43 - CFD: 2013/02/05 15:47:35 - [0] D -- C:\Users\user\AppData\Local\{ED87D510-F19E-4477-89EF-C3B912B401C9} O43 - CFD: 2012/12/31 01:21:03 - [0] D -- C:\Users\user\AppData\Local\{EE126183-4900-4828-9416-6A443148DF91} O43 - CFD: 2012/08/02 16:55:03 - [0] D -- C:\Users\user\AppData\Local\{EE26B37C-4E48-4606-A6AA-2EE8034BE8FE} O43 - CFD: 2012/04/26 15:10:39 - [0] D -- C:\Users\user\AppData\Local\{EE6E1605-6570-4433-9169-42ECB3B72E5E} O43 - CFD: 2012/08/09 00:26:25 - [0] D -- C:\Users\user\AppData\Local\{EE94CDD2-B98C-401D-BF18-0FAAA95023D7} O43 - CFD: 2013/03/24 21:16:20 - [0] D -- C:\Users\user\AppData\Local\{EF1187DD-8E4F-4DB9-B5D3-1B30D78500DB} O43 - CFD: 2012/07/22 00:09:23 - [0] D -- C:\Users\user\AppData\Local\{EFA3D543-B669-45B9-84ED-AC9C7424400D} O43 - CFD: 2012/05/04 02:29:36 - [0] D -- C:\Users\user\AppData\Local\{F01268CB-C955-496C-A7AF-E194617616AF} O43 - CFD: 2012/09/16 12:31:02 - [0] D -- C:\Users\user\AppData\Local\{F1373E19-7CDB-4D7C-9A21-EC4D31F89A53} O43 - CFD: 2012/04/26 15:10:29 - [0] D -- C:\Users\user\AppData\Local\{F43E3ECB-85AB-4ECB-9503-BC9B3D3F812C} O43 - CFD: 2012/07/31 15:57:23 - [0] D -- C:\Users\user\AppData\Local\{F57884D1-9843-4FD4-8E57-4DF1E286A24A} O43 - CFD: 2013/04/18 01:51:22 - [0] D -- C:\Users\user\AppData\Local\{F578AB2A-1371-4AD8-9C5F-A82A5517E6C8} O43 - CFD: 2012/07/07 02:51:43 - [0] D -- C:\Users\user\AppData\Local\{F641AAB3-D930-43D4-A243-08FE654F01EA} O43 - CFD: 2012/07/10 16:03:37 - [0] D -- C:\Users\user\AppData\Local\{F64A6EC0-1923-4DA6-B97E-84C086C5E4AD} O43 - CFD: 2012/08/05 04:20:33 - [0] D -- C:\Users\user\AppData\Local\{F8123959-4D8E-431A-8611-161C94C1BD43} O43 - CFD: 2012/08/05 21:35:47 - [0] D -- C:\Users\user\AppData\Local\{F81E8E2B-4F74-4DFB-AB47-B125C03C81C7} O43 - CFD: 2012/06/05 23:24:58 - [0] D -- C:\Users\user\AppData\Local\{F845797F-52B5-4E83-822E-7E28A5930165} O43 - CFD: 2012/07/08 16:00:52 - [0] D -- C:\Users\user\AppData\Local\{F86108B8-4732-486A-8C8E-C69F110298BB} O43 - CFD: 2012/05/09 02:17:24 - [0] D -- C:\Users\user\AppData\Local\{F86D3D04-1265-4EF4-B009-16D8C7A9E7CA} O43 - CFD: 2012/05/29 23:42:18 - [0] D -- C:\Users\user\AppData\Local\{F8C6684B-CEAA-4582-AAAA-EF57E372D8CF} O43 - CFD: 2012/07/14 04:08:01 - [0] D -- C:\Users\user\AppData\Local\{F8E6AC9B-1418-4C33-841B-ED636D1D3ED5} O43 - CFD: 2012/11/07 15:45:16 - [0] D -- C:\Users\user\AppData\Local\{F962978A-D890-4B29-A440-05B4B70BFF8A} O43 - CFD: 2012/12/21 03:57:35 - [0] D -- C:\Users\user\AppData\Local\{F986309D-4219-4B7F-8764-8CFB417D6D1F} O43 - CFD: 2013/03/01 20:30:54 - [0] D -- C:\Users\user\AppData\Local\{F99B1FF6-F0A4-4E7A-B9E0-007B542F19DE} O43 - CFD: 2013/01/01 02:15:02 - [0] D -- C:\Users\user\AppData\Local\{FA0F758B-3F76-426D-A1A6-75549928E191} O43 - CFD: 2012/11/06 16:07:13 - [0] D -- C:\Users\user\AppData\Local\{FA636994-A4B9-4327-B85E-D31761C3E987} O43 - CFD: 2012/06/25 00:51:20 - [0] D -- C:\Users\user\AppData\Local\{FA65BC74-681A-4D00-BBB2-52B9DA058C5F} O43 - CFD: 2012/07/04 15:38:51 - [0] D -- C:\Users\user\AppData\Local\{FA88AEF8-1C8F-40D5-AD63-FBC0C838493F} O43 - CFD: 2012/04/20 14:43:01 - [0] D -- C:\Users\user\AppData\Local\{FA9B742E-EB6D-49B9-B350-15FBCB3A96F5} O43 - CFD: 2012/09/25 20:19:37 - [0] D -- C:\Users\user\AppData\Local\{FB0AB2CC-C709-4DCA-A815-9CFA59AB9512} O43 - CFD: 2012/05/29 23:42:08 - [0] D -- C:\Users\user\AppData\Local\{FB2A610B-5E8A-4590-AD75-000CB6BAED4F} O43 - CFD: 2012/07/07 14:53:02 - [0] D -- C:\Users\user\AppData\Local\{FBD9776B-0A97-4429-8999-92C52E502248} O43 - CFD: 2012/07/20 21:50:25 - [0] D -- C:\Users\user\AppData\Local\{FC3B6DBD-9D1A-4BDE-8064-A83909E3ADB8} O43 - CFD: 2012/04/28 20:56:22 - [0] D -- C:\Users\user\AppData\Local\{FD04709C-A76A-4D42-8A0D-2297CE254549} O43 - CFD: 2012/12/19 12:01:49 - [0] D -- C:\Users\user\AppData\Local\{FD3546FB-AFD1-4B29-8A9C-998A62CB650F} O43 - CFD: 2012/09/23 19:53:20 - [0] D -- C:\Users\user\AppData\Local\{FD68563A-003B-42C1-BBC5-7BA1FC28D8B4} O43 - CFD: 2012/07/30 03:00:55 - [0] D -- C:\Users\user\AppData\Local\{FD6A2162-7511-48CB-8E1B-04FCA6DFAD6A} O43 - CFD: 2013/01/04 01:56:30 - [0] D -- C:\Users\user\AppData\Local\{FDC61A3F-84C2-4E6A-B623-9A82577849C0} O43 - CFD: 2013/01/15 20:32:07 - [0] D -- C:\Users\user\AppData\Local\{FEB96B38-6CA1-4FEC-A1BB-D0A23E1C7D94} O43 - CFD: 2012/05/22 20:45:15 - [0] D -- C:\Users\user\AppData\Local\{FEE0238F-7ECA-4D2E-A8ED-C7B1E2E16C2C} O43 - CFD: 2013/01/16 15:45:32 - [0] D -- C:\Users\user\AppData\Local\{FF3234A3-ABA4-4B18-89E6-DA4F108CEE1F} O43 - CFD: 2012/11/01 15:52:53 - [0] D -- C:\Users\user\AppData\Local\{FFA78D1A-4BC6-4F61-B041-9C42621ABC84} O43 - CFD: 2012/11/23 01:15:16 - [0] D -- C:\Users\user\AppData\Local\{FFAE4238-9595-415D-97DF-248EBEA814C4} O43 - CFD: 2009/07/14 05:42:04 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2015/08/12 11:41:15 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2013/01/04 16:52:40 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect =>PUP.Optional.Eazel O43 - CFD: 2010/10/25 14:32:39 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex O43 - CFD: 2010/12/22 03:02:59 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 2015/09/27 00:05:42 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly =>PUP.Optional.Dealply O43 - CFD: 2013/05/30 21:53:57 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory O43 - CFD: 2012/01/25 19:28:40 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2011/01/15 16:05:35 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 2009/07/14 05:37:42 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2011/02/08 15:42:15 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mihov Image Resizer O43 - CFD: 2014/02/19 15:30:55 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie =>PUP.Optional.Mobogenie O43 - CFD: 2011/12/22 19:41:30 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetSpot Device Installer O43 - CFD: 2015/09/27 00:32:51 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Périphériques Bluetooth O43 - CFD: 2015/09/25 16:15:47 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2012/07/02 21:12:28 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webteh O43 - CFD: 2010/10/24 14:26:53 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 9s O45 - LFCP:[MD5.D34315F40B7F42BFA2F5066CF1590A40] 2015/09/26 22:36:13 A -- C:\Windows\Prefetch\PICEXA.EXE-E87C2CBA.pf =>PUP.Optional.Picexa ---\\ ShellIconOverlayIdentifiers (SIOI) (3) - 0s O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: IDM Shell Extension [IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll © O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll © ---\\ Liste des pilotes du système (118) - 7s O58 - SDL:2004/03/02 09:26:58 A . (.Analog Deivces - USB Firmware loader.) -- C:\Windows\System32\drivers\adildr.sys [50007] O58 - SDL:2004/03/02 09:24:16 A . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\Windows\System32\drivers\adiusbaw.sys [127065] O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] © O58 - SDL:2009/07/14 02:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] © O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] © O58 - SDL:2009/08/13 12:07:12 A . (.LSI Corporation - SoftModem Device Driver.) -- C:\Windows\System32\drivers\AGRSM.sys [1163328] © O58 - SDL:2009/07/14 02:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] © O58 - SDL:2010/11/20 13:29:13 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] © O58 - SDL:2009/07/14 02:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] © O58 - SDL:2010/11/20 13:29:15 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] © O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] © O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] © O58 - SDL:2007/05/16 19:43:14 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athru6.sys [871936] © O58 - SDL:2009/07/13 23:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] © O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] © O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] © O58 - SDL:2009/07/14 01:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] © O58 - SDL:2009/07/13 23:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] © O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] © O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] © O58 - SDL:2010/01/07 11:20:56 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\drivers\btwaudio.sys [86056] © O58 - SDL:2010/01/07 11:20:58 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\drivers\btwavdt.sys [108072] © O58 - SDL:2010/01/07 11:21:02 A . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\drivers\btwl2cap.sys [29472] © O58 - SDL:2010/01/07 11:21:06 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\drivers\btwrchid.sys [18472] © O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] © O58 - SDL:2009/07/14 02:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] © O58 - SDL:2012/10/22 16:47:52 A . (.Connectify - NDIS filter driver.) -- C:\Windows\System32\drivers\cnnctfy2.sys [27248] © O58 - SDL:2009/07/14 02:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] © O58 - SDL:2009/07/14 02:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] © O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\drivers\ewdcsc.sys [25856] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [199168] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ewusbwwan.sys [381952] © O58 - SDL:2013/12/05 06:17:47 A . (.Huawei Technologies Co., Ltd. - ew_cdcacm Driver.) -- C:\Windows\System32\drivers\ew_cdcacm.sys [108032] © O58 - SDL:2013/12/05 06:17:46 A . (.Huawei Technologies Co., Ltd. - ew_hwupgrade Driver.) -- C:\Windows\System32\drivers\ew_hwupgrade.sys [19200] © O58 - SDL:2013/12/05 06:17:47 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys [95232] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\drivers\ew_jubusenum.sys [77824] © O58 - SDL:2013/12/05 06:17:46 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys [101248] © O58 - SDL:2013/12/05 06:17:46 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys [70528] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\drivers\ew_juextctrl.sys [27776] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys [208384] © O58 - SDL:2013/12/05 06:17:46 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys [11904] © O58 - SDL:2013/12/05 06:17:45 A . (.Huawei Technologies Co., Ltd. - ew_cdcndis Driver.) -- C:\Windows\System32\drivers\ew_wwanecm.sys [316544] © O58 - SDL:2012/08/21 14:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840] © O58 - SDL:2011/08/29 23:11:00 A . (.VMware, Inc. - VMware USB monitor.) -- C:\Windows\System32\drivers\hcmon.sys [32496] © O58 - SDL:2009/07/13 23:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] © O58 - SDL:2009/07/16 14:16:50 A . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\System32\drivers\HpqKbFiltr.sys [15872] © O58 - SDL:2009/07/14 02:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] © O58 - SDL:2010/01/08 14:34:12 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStor.sys [331288] © O58 - SDL:2010/11/20 13:29:54 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160] © O58 - SDL:2012/11/22 01:43:14 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [100216] © O58 - SDL:2010/01/25 19:42:44 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [6282240] © O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] © O58 - SDL:2010/03/15 09:44:46 A . (.Intel(R) Corporation - Intel(R) High Definition Audio HDMI.) -- C:\Windows\System32\drivers\IntcHdmi.sys [127488] © O58 - SDL:2008/08/26 16:39:22 A . (.LG Electronics Inc. - LG EVDOM USB ATC Driver.) -- C:\Windows\System32\drivers\lgevdomatc.sys [19840] © O58 - SDL:2008/08/26 16:39:24 A . (.LG Electronics Inc. - LG EVDOM USB Multi function Driver.) -- C:\Windows\System32\drivers\lgevdombus.sys [13696] © O58 - SDL:2008/08/26 16:39:26 A . (.LG Electronics Inc. - LG EVDOM USB Diagnostics Driver.) -- C:\Windows\System32\drivers\lgevdomdiag.sys [19840] © O58 - SDL:2008/08/26 16:39:28 A . (.LG Electronics Inc. - LG EVDOM USB Modem Driver.) -- C:\Windows\System32\drivers\lgevdommodem.sys [21632] © O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] © O58 - SDL:2009/07/14 02:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] © O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] © O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] © O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] © O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] © O58 - SDL:2015/09/27 01:04:33 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520] © O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] © O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] © O58 - SDL:2015/06/18 08:41:54 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] © O58 - SDL:2013/08/06 15:13:30 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl.sys [18944] © O58 - SDL:2009/07/14 02:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] © O58 - SDL:2009/10/20 19:19:44 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [50704] © O58 - SDL:2010/11/20 13:30:06 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120] © O58 - SDL:2010/11/20 13:30:06 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744] © O58 - SDL:2010/08/27 17:04:20 A . (.TCT International Mobile Ltd - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\qcusbser.sys [103552] O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] © O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] © O58 - SDL:2011/06/10 06:34:52 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [394856] © O58 - SDL:2010/01/29 02:46:18 A . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8192se.sys [997408] © O58 - SDL:2010/04/12 09:44:34 A . (.PowerISO Computing, Inc. - PowerISO Virtual Drive.) -- C:\Windows\System32\drivers\scdemu.sys [59388] O58 - SDL:2009/07/13 21:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] © O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] © O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] © O58 - SDL:2007/03/27 18:19:36 A . (.Sonix Co. Ltd. - USB PC Camera driver.) -- C:\Windows\System32\drivers\snpstd3.sys [10252544] O58 - SDL:2010/12/29 15:47:08 A . (...) -- C:\Windows\System32\drivers\sptd.sys [691696] O58 - SDL:2009/07/14 02:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] © O58 - SDL:2010/01/28 21:15:24 A . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\drivers\stwrt.sys [423424] © O58 - SDL:2010/05/27 22:32:58 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [245936] © O58 - SDL:2013/03/18 16:51:08 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [45056] © O58 - SDL:2009/11/10 15:54:12 A . (.Sun Microsystems, Inc. - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [116560] © O58 - SDL:2009/11/10 15:54:18 A . (.Sun Microsystems, Inc. - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\System32\drivers\VBoxNetAdp.sys [95568] © O58 - SDL:2009/11/10 15:53:54 A . (.Sun Microsystems, Inc. - VirtualBox Bridged Networking Driver.) -- C:\Windows\System32\drivers\VBoxNetFlt.sys [104016] © O58 - SDL:2009/11/10 15:53:54 A . (.Sun Microsystems, Inc. - VirtualBox USB Driver.) -- C:\Windows\System32\drivers\VBoxUSB.sys [32016] © O58 - SDL:2009/11/10 15:53:54 A . (.Sun Microsystems, Inc. - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [41424] © O58 - SDL:2009/07/14 02:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] © O58 - SDL:2011/08/08 15:58:56 A . (.VMware, Inc. - VMware PCI VMCI Bus Device.) -- C:\Windows\System32\drivers\vmci.sys [98928] © O58 - SDL:2012/01/18 14:06:02 A . (.VMware, Inc. - VMware virtual network driver (32-bit).) -- C:\Windows\System32\drivers\vmnet.sys [19568] © O58 - SDL:2012/01/18 14:06:02 A . (.VMware, Inc. - VMware virtual network adapter driver (32-b.) -- C:\Windows\System32\drivers\vmnetadapter.sys [16624] © O58 - SDL:2012/01/18 14:06:02 A . (.VMware, Inc. - VMware bridge driver (32-bit).) -- C:\Windows\System32\drivers\vmnetbridge.sys [36464] © O58 - SDL:2012/01/18 16:46:16 A . (.VMware, Inc. - VMware network application interface driver.) -- C:\Windows\System32\drivers\vmnetuserif.sys [25712] © O58 - SDL:2011/08/29 23:01:10 A . (.VMware, Inc. - VMware USB driver.) -- C:\Windows\System32\drivers\vmusb.sys [31280] © O58 - SDL:2012/01/18 16:47:36 A . (.VMware, Inc. - VMware kernel driver.) -- C:\Windows\System32\drivers\vmx86.sys [55664] © O58 - SDL:2009/07/14 02:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] © O58 - SDL:2011/07/08 16:32:56 A . (.VMware, Inc. - VMware Virtual Storage Volume Driver.) -- C:\Windows\System32\drivers\vstor2-mntapi10-shared.sys [22768] © O58 - SDL:2009/07/13 22:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2009/07/13 22:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2009/07/13 22:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2009/07/13 22:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2009/07/13 22:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2009/07/13 22:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2009/07/13 22:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2009/07/13 22:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2009/07/13 22:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2009/07/13 22:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2009/07/13 22:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2009/07/13 22:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2009/07/13 22:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 8s O61 - LFC: 2015/09/20 23:04:25 A . (..) -- C:\Users\user\Downloads\Talk With Computer.exe [122079] O61 - LFC: 2015/09/27 00:40:41 A . (.Copyright (C) 2010.) -- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_1\chromeNPAPI.dll [97072] ---\\ Associations Shell Spawning (11) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\opera.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe © ---\\ Menu de démarrage Internet (20) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- c:\program files\google\chrome\application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- c:\program files\opera\opera.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- c:\program files\safari\safari.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\opera.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\opera.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\opera.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe © ---\\ Recherche d'infection sur les navigateurs (14) - 10s O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.defaultenginename", "delta-homes"); =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.alias", "delta-homes"); =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.iconURL", "http://search.delta-homes.com/favicon.ico"); =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.name", "delta-homes"); =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.ptid", "wpm07163"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.uid", "HitachiXHTS725032A9A364_100531PCK304VKJU8MJJX"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.searchengine.url", "http://search.delta-homes.com/web/?type=ds&ts=1437079212&z=f20fc7e704a7788797f580cgd[...] =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("browser.search.selectedEngine", "delta-homes"); =>PUP.Optional.Qvo6 O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [user - 06e64031.default-1390175233802] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: SearchScopes [HKCU] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ O69 - SBI: SearchScopes [HKUS\.DEFAULT] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-18] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (32) - 0s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [679424] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [475136] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242176] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [523776] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2061824] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [585728] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [499712] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [751104] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [113664] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] © ---\\ Liste des exceptions du parefeu Windows (19) - 3s O87 - FAEL: "TCP Query User{3D6E1458-552E-44FC-8D6A-87186FBAA859}C:\program files\ares\ares.exe" [In-None-P6-TRUE] .(...) -- C:\program files\ares\ares.exe (.not file.) O87 - FAEL: "UDP Query User{58B76CDF-76A6-4F3E-A6F0-0B04F9092E1D}C:\program files\ares\ares.exe" [In-None-P17-TRUE] .(...) -- C:\program files\ares\ares.exe (.not file.) O87 - FAEL: "TCP Query User{B5FCF3FD-B6C2-4114-9FF4-BD415772132F}C:\program files\emule\emule.exe" [In-None-P6-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{EF836755-97E3-4315-BA65-D3AD81F7B0EA}C:\program files\emule\emule.exe" [In-None-P17-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{549F8B1B-3F52-4E51-9A9C-E6053B7A20CB}C:\program files\paltalk messenger\paltalk.exe" [In-None-P6-TRUE] .(...) -- C:\program files\paltalk messenger\paltalk.exe (.not file.) O87 - FAEL: "UDP Query User{95A89B46-86F9-48F0-A72D-364F696DE877}C:\program files\paltalk messenger\paltalk.exe" [In-None-P17-TRUE] .(...) -- C:\program files\paltalk messenger\paltalk.exe (.not file.) O87 - FAEL: "TCP Query User{32952018-CF2A-48B2-A4A2-4379F772BCD6}C:\program files\packet tracer 5.1\bin\packettracer5.exe" [In-None-P6-TRUE] .(...) -- C:\program files\packet tracer 5.1\bin\packettracer5.exe O87 - FAEL: "UDP Query User{DB83C34F-716D-46F0-93E1-8CC6180D8EEB}C:\program files\packet tracer 5.1\bin\packettracer5.exe" [In-None-P17-TRUE] .(...) -- C:\program files\packet tracer 5.1\bin\packettracer5.exe O87 - FAEL: "TCP Query User{5361F350-C346-498C-8305-EB6C293BFBA4}C:\program files\bittorrent\bittorrent.exe" [In-None-P6-TRUE] .(.BitTorrent, Inc. - BitTorrent.) -- C:\program files\bittorrent\bittorrent.exe O87 - FAEL: "UDP Query User{83319A9B-22BB-4F83-B1CD-5A3EACC22953}C:\program files\bittorrent\bittorrent.exe" [In-None-P17-TRUE] .(.BitTorrent, Inc. - BitTorrent.) -- C:\program files\bittorrent\bittorrent.exe O87 - FAEL: "{682FCB80-4FD8-4ABB-A81E-21A31D793F74}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe O87 - FAEL: "TCP Query User{59701131-0A40-4A86-8B03-7AE82ECBCB34}H:\eclipse-jee-helios-sr1-win32\eclipse\eclipse.exe" [In-None-P6-TRUE] .(...) -- H:\eclipse-jee-helios-sr1-win32\eclipse\eclipse.exe (.not file.) O87 - FAEL: "UDP Query User{540BF361-8034-444E-AF1C-59A9739852C3}H:\eclipse-jee-helios-sr1-win32\eclipse\eclipse.exe" [In-None-P17-TRUE] .(...) -- H:\eclipse-jee-helios-sr1-win32\eclipse\eclipse.exe (.not file.) O87 - FAEL: "TCP Query User{AB0261FA-9F9A-4D94-8CA7-0FEE1049E49D}C:\program files\oovoo\oovoo.exe" [In-None-P6-TRUE] .(...) -- C:\program files\oovoo\oovoo.exe (.not file.) O87 - FAEL: "UDP Query User{5AF82645-1013-45F8-AC1A-7D81071B3493}C:\program files\oovoo\oovoo.exe" [In-None-P17-TRUE] .(...) -- C:\program files\oovoo\oovoo.exe (.not file.) O87 - FAEL: "TCP Query User{2342410B-2108-4A74-BBAB-37A5ECA9122D}C:\program files\videolan\vlc\vlc.exe" [In-None-P6-TRUE] .(...) -- C:\program files\videolan\vlc\vlc.exe O87 - FAEL: "UDP Query User{AD90BBCF-3ABA-4925-84A3-97DC743A31D4}C:\program files\videolan\vlc\vlc.exe" [In-None-P17-TRUE] .(...) -- C:\program files\videolan\vlc\vlc.exe O87 - FAEL: "{80792FF0-DE87-4C0E-9745-0E9690041782}" [In-None-P17-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe O87 - FAEL: "{C446892F-A379-499B-ACC3-764935BC9750}" [In-None-P17-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (32) - 28s SR - Auto [2013/12/21 07:04:16] [ 65432] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © SS - Demand [2015/09/22 02:28:29] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe © SR - Auto [2009/03/03 03:43:08] [ 81920] Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\AEstSrv.exe © SR - Auto [2009/03/27 19:10:56] [ 14336] Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation.) - C:\Program Files\LSI SoftModem\agrsmsvc.exe © SR - Auto [2014/02/12 16:50:20] [ 43336] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © SR - Auto [2011/08/31 00:05:02] [ 390504] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe © SR - Auto [2009/12/29 14:31:32] [ 595232] Bluetooth Service (btwdins) . (.Broadcom Corporation..) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe © SR - Auto [2010/08/27 17:04:32] [ 40960] DeviceManager (DeviceManager) . (...) - C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe SR - Auto [2009/10/15 11:11:32] [ 120832] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard.) - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe © SR - Auto [2010/01/28 10:21:26] [ 265272] HP Hotkey Monitor (hpHotkeyMonitor) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe © SR - Demand [2009/12/17 16:33:36] [ 230968] hpqwmiex (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe © SR - Auto [2013/10/28 03:02:26] [ 276048] HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2013.) - C:\ProgramData\DatacardService\HWDeviceService.exe SR - Auto [2010/01/08 14:55:54] [ 354840] Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe © SR - Demand [2014/05/26 19:12:22] [ 553288] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe © SR - Auto [2010/08/16 14:50:42] [ 73728] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe © SR - Auto [2015/06/18 08:39:46] [ 1871160] (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe © SR - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe © SS - Auto [2013/12/05 06:18:01] [ 651856] Modem HDM EC156. OUC (Modem HDM EC156. RunOuc) . (...) - C:\Program Files\Modem HDM EC156\UpdateDog\ouc.exe SS - Demand [2015/06/02 16:31:54] [ 148080] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe © SR - Auto [2012/07/25 16:47:28] [ 119808] Messenger Plus! Service (MsgPlusService) . (.Yuna Software.) - C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe © SR - Auto [2012/11/29 21:31:04] [ 38608] RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe SS - Demand [2009/10/20 19:19:48] [ 117264] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies, Inc..) - C:\Program Files\WinPcap\rpcapd.exe © SS - Auto [2015/07/09 13:14:04] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe © SR - Auto [2010/01/28 21:15:24] [ 229458] Audio Service (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe © SR - Auto [2012/01/18 14:27:20] [ 79872] VMware Authorization Service (VMAuthdService) . (.VMware, Inc..) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe © SR - Auto [2012/01/18 16:47:20] [ 354416] VMware DHCP Service (VMnetDHCP) . (.VMware, Inc..) - C:\Windows\System32\vmnetdhcp.exe © SR - Auto [2011/08/29 23:11:00] [ 665200] VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe © SR - Auto [2012/01/18 16:47:28] [ 433264] VMware NAT Service (VMware NAT Service) . (.VMware, Inc..) - C:\Windows\System32\vmnat.exe © SS - Demand [2012/01/18 16:04:52] [11839488] VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe SS - Demand [2008/12/10 02:10:14] [ 24636] wampapache (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe © SS - Demand [2009/06/17 12:18:42] [ 6582912] wampmysqld (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe ---\\ Recherche de clés de registre Tracing (8) - 5s HKLM\SOFTWARE\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar HKLM\SOFTWARE\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32 =>PUP.Optional.ClickPotato HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS =>PUP.Optional.ClickPotato HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\DealioToolbar-stub-1_RASAPI32 =>PUP.Optional.Dealio HKLM\SOFTWARE\Microsoft\Tracing\DealioToolbar-stub-1_RASMANCS =>PUP.Optional.Dealio ---\\ Scan Additionnel (74) - 0s C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll =>PUP.Optional.Pugi C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\searchplugins\delta-homes.xml =>PUP.Optional.DeltaHomes C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\searchplugins\WebSearch.xml =>PUP.Optional.SimpleSearches C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\06e64031.default-1390175233802\extensions\default_newtabff@gmail.com =>PUP.Optional.LightningNewTab HKLM\SYSTEM\CurrentControlSet\Services\iSafeService =>PUP.Optional.YetAnotherCleaner C:\Windows\Tasks\Superclean.job =>PUP.Optional.Adwareplugin C:\Windows\System32\Tasks\LaunchSignup =>PUP.Optional.MyPCBackup C:\Windows\System32\Tasks\Superclean =>PUP.Optional.Adwareplugin HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly =>PUP.Optional.Dealply HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab =>PUP.Optional.IMBooster HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe =>PUP.Optional.Elex HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie =>PUP.Optional.Mobogenie HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4C6C9AB1-BC69-4CC1-AE46-4053352586CB} =>PUP.Optional.SmartBar HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{681002C6-5019-81A2-7871-A43754F71E56} =>PUP.Optional.CrossRider HKLM\SOFTWARE\29d2f1bb-1bf3-22b0-713a-595e2a9bff98 =>PUP.Optional.CrossRider HKLM\SOFTWARE\5a6de8cb36eef41 =>PUP.Optional.Heuristic HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon HKLM\SOFTWARE\BrowserCompanion =>PUP.Optional.Blabbers HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\GinyasBrowserCompanion =>PUP.Optional.Blabbers HKLM\SOFTWARE\MediaViewerV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\MediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Messenger_Plus =>PUP.Optional.Conduit HKLM\SOFTWARE\PIP =>Toolbar.Ask HKLM\SOFTWARE\RichMediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Trymedia Systems =>PUP.Optional.Trymedia HKCU\SOFTWARE\5a6de8cb36eef41 =>PUP.Optional.Heuristic HKCU\SOFTWARE\Alnaddy.com =>PUP.Optional.Alnaddy HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\BrowserCompanion =>PUP.Optional.Blabbers HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\Grand Virtual =>PUP.Optional.GrandVirtual HKCU\SOFTWARE\PIP =>Toolbar.Ask HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\StartSearch =>PUP.Optional.StartSearch HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\vShare.tv =>PUP.Optional.VShareRedir HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\Messenger_Plus =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\ShopperReports3 =>PUP.Optional.ShopperReports HKCU\SOFTWARE\AppDataLow\Software\Simplytech =>PUP.Optional.SimplyTech C:\Program Files\DNS Unlocker =>PUP.Optional.DNSUnlocker C:\Program Files\Elex-tech =>PUP.Optional.Elex C:\Program Files\Picexa =>PUP.Optional.Picexa C:\Program Files\SpaeceOOFifers =>PUP.Optional.Multiplug C:\Program Files\SupTab =>PUP.Optional.SupTab C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports =>PUP.Optional.ShopperReports C:\ProgramData\IePluginServices =>Trojan.SProtector C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR C:\ProgramData\MailUpdate =>PUP.Optional.MailUpdate C:\Program Files\Common Files\Spigot =>PUP.Optional.Dealio C:\Users\user\AppData\Roaming\eCyber =>PUP.Optional.Elex C:\Users\user\AppData\Roaming\Elex-tech =>PUP.Optional.Elex C:\Users\user\AppData\Roaming\MailUpdate =>PUP.Optional.MailUpdate C:\Users\user\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa C:\Users\user\AppData\Local\com =>PUP.Optional.Generic C:\Users\user\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect =>PUP.Optional.Eazel C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly =>PUP.Optional.Dealply C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie =>PUP.Optional.Mobogenie C:\Windows\Prefetch\PICEXA.EXE-E87C2CBA.pf =>PUP.Optional.Picexa HKLM\SOFTWARE\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32 =>Toolbar.AskBar HKLM\SOFTWARE\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS =>Toolbar.AskBar HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32 =>PUP.Optional.ClickPotato HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS =>PUP.Optional.ClickPotato HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Optional.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Optional.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\DealioToolbar-stub-1_RASAPI32 =>PUP.Optional.Dealio HKLM\SOFTWARE\Microsoft\Tracing\DealioToolbar-stub-1_RASMANCS =>PUP.Optional.Dealio ---\\ Récapitulatif des éléments trouvées sur votre station (47) - 0s http://www.nicolascoolman.fr/parasite-pugi/ =>PUP.Optional.Pugi http://www.nicolascoolman.fr/blog =>PUP.Optional.DeltaHomes http://www.nicolascoolman.fr/blog =>PUP.Optional.SimpleSearches http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab http://www.nicolascoolman.fr/blog =>PUP.Optional.PlusNetwork http://www.nicolascoolman.fr/hijacker-omigaplus/ =>PUP.Optional.OmigaPlus http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie http://www.nicolascoolman.fr/blog =>PUP.Optional.YetAnotherCleaner http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup http://www.nicolascoolman.fr/blog =>PUP.Optional.Adwareplugin http://www.nicolascoolman.fr/pup-dealply/ =>PUP.Optional.Dealply http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster http://www.nicolascoolman.fr/pup-elex/ =>PUP.Optional.Elex http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/blog =>PUP.Optional.Heuristic http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon http://www.nicolascoolman.fr/pup-blabbers/ =>PUP.Optional.Blabbers http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit http://www.nicolascoolman.fr/blog =>PUP.Optional.MediaViewer http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab http://www.nicolascoolman.fr/adware-trymedia/ =>PUP.Optional.Trymedia http://www.nicolascoolman.fr/hijacker-alnaddy/ =>PUP.Optional.Alnaddy http://www.nicolascoolman.fr/blog =>PUP.Optional.GrandVirtual http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch http://www.nicolascoolman.fr/pup-v9software/ =>PUP.Optional.V9Software http://www.nicolascoolman.fr/pup-vshareredir/ =>PUP.Optional.VShareRedir http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner http://www.nicolascoolman.fr/blog =>PUP.Optional.ShopperReports http://www.nicolascoolman.fr/blog =>PUP.Optional.SimplyTech http://www.nicolascoolman.fr/blog =>PUP.Optional.DNSUnlocker http://www.nicolascoolman.fr/blog =>PUP.Optional.Picexa http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug http://www.nicolascoolman.fr/trojan-sprotector/ =>Trojan.SProtector http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR http://www.nicolascoolman.fr/blog =>PUP.Optional.MailUpdate http://www.nicolascoolman.fr/pup-dealio/ =>PUP.Optional.Dealio http://www.nicolascoolman.fr/blog =>PUP.Optional.Generic http://www.nicolascoolman.fr/hijacker-eazel/ =>PUP.Optional.Eazel http://www.nicolascoolman.fr/hijacker-qvo6/ =>PUP.Optional.Qvo6 http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart http://www.nicolascoolman.fr/blog =>Toolbar.AskBar http://www.nicolascoolman.fr/adware-clickpotato/ =>PUP.Optional.ClickPotato http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr ~ End of the scan, 55548 items in 220 seconds (2081)(0)()