~ ZHPDiag v2015.9.12.140 Par Nicolas Coolman (2015/09/12) ~ Démarré par Jaclyne (Administrator) (2015/09/13 20:17:37) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Jaclyne\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Jaclyne\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows VISTA, 32-bit Service Pack 2 (Build 6002) ---\\ Navigateurs Internet (3) - 0s GCIE: Google Chrome v45.0.2454.85 MFIE: Mozilla Firefox 40.0.3 (x86 fr) v40.0.3 MSIE: Internet Explorer v9.0.8112.16421 ---\\ Informations sur les produits Windows (9) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows Operating System - Vista, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : B9HD2 Windows License : OK Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ Logiciels de protection (2) - 2s Avast Free Antivirus v10.3.2225 Windows Defender VISTA (Deactivate) ---\\ Logiciels de protection et autres (Superflus) (1) - 2s McAfee Security Scan Plus v3.11.163.2 ---\\ Logiciels d'optimisation (1) - 2s CCleaner v5.05 ---\\ Surveillance de Logiciels (2) - 2s Adobe Flash Player 18 NPAPI Adobe Reader X ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 23 Stepping 6, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3405.072 MB (58% free) ~ System Restore: Activé (Enable) ~ System drive C: has 187 GB free of 294 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PC-DE-JACLYNE ~ User Name: Jaclyne ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 187 GB free of 294 GB (System) ~ Drive D: has 8 GB free of 10 GB ~ Drive K: has 235 GB free of 476 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (24) - 1s [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2926592] © [MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544] © [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96768] © [MD5.605FFF8DF63D05DB523E635A14DDB43C] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1129472] © [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [314368] © [MD5.85E861D0B88DB2B54ACB0839654C09F7] - (.Microsoft Corporation - DNS DLL de l'API Client.) () -- C:\Windows\System32\dnsapi.dll [168448] © [MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] © [MD5.F5272A105F59A7B3B345D9D6D87DA7AD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [273408] © [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [19944] © [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70144] © [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [67072] © [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [75264] © [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [561152] © [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [54784] © [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [100864] © [MD5.1B864548B2ACEC1C0BB29B615CC42978] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [107008] © [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [185856] © [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1082232] © [MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360] © [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [76288] © [MD5.0245418224CFA77BF4B41C2FE0622258] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [242688] © [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [66560] © [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [72192] © [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [224640] © ---\\ Processus lancés (26) - 0s [MD5.C797D9EE6AEB9DBC01FC00B14216E02F] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [610304] [PID.1048] © [MD5.C797D9EE6AEB9DBC01FC00B14216E02F] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [610304] [PID.1512] © [MD5.4956380A54B1C9E6BFDF3D80DACB9698] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1716] © [MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.1036] © [MD5.D2B87FC03BE28CD0B33C2B5C1119FD8E] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744] [PID.1140] © [MD5.6C1890D62A505F3019765A83521D8416] - (.Cisco WebEx LLC - WebEx Host for Support Center.) -- C:\Windows\System32\atashost.exe [136784] [PID.1384] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1452] © [MD5.EF0565704C56617F8B1A998884CB82B7] - (.Sage - Sage 50 Connection Manager [0038-rel\2015.0.) -- C:\Program Files\Winsim\ConnectionManager\SimplyConnectionManager.exe [24880] [PID.1628] © [MD5.86724A200BF1F08A03FB563660FCD928] - (.Hewlett-Packard Company - .) -- C:\Program Files\HP\HPBDSService\HPBDSService.exe [13824] [PID.1596] © [MD5.64E96B86D6C5D29C89B206D6F19DABE9] - (.HP - HP LaserJet Service.) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [174592] [PID.2028] © [MD5.1878A79551F2EDAE7EBD110AAE6D33AD] - (.Hewlett-Packard Company - SolutionsFrameworkService.) -- C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe [89840] [PID.1612] © [MD5.0F2A43DB0A4A70EF400295F413527293] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [5095264] [PID.2684] © [MD5.FB01D4AE207B9EFDBABFC55DC95C7E31] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1713536] [PID.2840] © [MD5.C649F293B8B047A2694F3C615D09BF17] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [193920] [PID.2996] © [MD5.A4C778C47836C9786C6A648C828DFF2B] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3218624] [PID.3148] © [MD5.3DF7AC30A381C57D0C70EAEFEE3C4EF2] - (.Google Inc. - Gmail Notifier.) -- C:\Program Files\Google\Gmail Notifier\gnotify.exe [479232] [PID.4440] © [MD5.FFBECCF2BB24715FAA716073A1E0A067] - (.Sage - Sage 50 Connection Manager [0038-rel\2015.0.) -- C:\Program Files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe [164656] [PID.4508] © [MD5.F66203AF9C159E2CBD54DF981654F499] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824] [PID.4784] © [MD5.7C6D524C78A1722AD987B9E47AC1FEE2] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\Jaclyne\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512] [PID.4804] © [MD5.FA4F60BC4A168299EC08A2AE5E2CA5AE] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe [277920] [PID.4844] © [MD5.1F014EA12ECB13C909DA9395E9CD3D18] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [6278424] [PID.4856] © [MD5.88D881B1B9D87923B8C17E2437F0B27B] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Jaclyne\AppData\Roaming\Dropbox\bin\Dropbox.exe [39175960] [PID.4932] © [MD5.08C4F5FE2A3F73A351AF44F5F7FF28A4] - (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbarsvc.exe [89424] [PID.5112] =>PUP.Optional.ScriptHost [MD5.2EAEA353A328B7D020093FD6F52F9AD3] - (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\AppIntegrator.exe [229712] [PID.5016] =>PUP.Optional.ScriptHost [MD5.9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F] - (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192] [PID.4572] © [MD5.BF7E18EDD711B341A49A201333B15373] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Jaclyne\Downloads\ZHPDiag3-2015.9.12.140(1).exe [1927168] [PID.7544] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (12) - 1s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com/ G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (11) - 0s M0 - MFSP: prefs.js [Jaclyne - 7dzcjqjo.default-1408659274778] http://ici.radio-canada.ca/quebec M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nsIQTScriptablePlugin.xpt P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class P2 - EXT FILE: (...) -- C:\Users\Jaclyne\AppData\Roaming\Mozilla\Firefox\Profiles\7dzcjqjo.default-1408659274778\searchplugins\avg-secure-search.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} © P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_18_0_0_232.dll © P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll © P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll =>Toolbar.AVGSearch ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/ =>Toolbar.Ask R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R3 - URLSearchHook: (no name) - {0740f3dd-e1f0-4ec6-8855-04f999d071fa} Orphean R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (6) - 1s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:20092 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Etude du fichier hosts (2) - 0s 0 ~ Le fichier hôte est sain (The hosts file is clean) (23) ---\\ Browser Helper Object de navigateur (BHO) (10) - 0s O2 - BHO: Amazon 1Button App for IE - {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} (Orphean) O2 - BHO: Search Assistant BHO - {481f6b47-2ad8-4c6a-8554-a2897e6cf900} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqSrcAs.dll O2 - BHO: Toolbar BHO - {5818cea7-889d-459a-9a75-889e1298a892} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbar.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll © O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll © O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll © O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} (Orphean) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll © O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} (Orphean) O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll © ---\\ Internet Explorer, Barre d'outil (2) - 0s O3 - Toolbar: 0x2B98AB1AD777F144B3058909DAC045F2 - [HKCU]{1AAB982B-77D7-44F1-B305-8909DAC045F2} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbar.dll =>PUP.Optional.ScriptHost O3 - Toolbar: (no name) - [HKLM]{1aab982b-77d7-44f1-b305-8909dac045f2} (Orphean) =>PUP.Optional.ScriptHost ---\\ Applications lancées au démarrage du système (15) - 0s O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] . (.Google Inc. - Gmail Notifier.) -- C:\Program Files\Google\Gmail Notifier\gnotify.exe © O4 - HKLM\..\Run: [Amazing3DAquariumWallpaper] (Orphean) O4 - HKLM\..\Run: [ConnectionManager] . (.Sage - Sage 50 Connection Manager [0038-rel\2015.0.) -- C:\Program Files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe © O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe © O4 - HKLM\..\Run: [DownSpeedTest EPM Support] . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqmedint.exe =>PUP.Optional.ScriptHost O4 - HKCU\..\Run: [EleFunAnimatedWallpaper] (Orphean) O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe © O4 - HKCU\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\Jaclyne\AppData\Local\Dropbox\Update\DropboxUpdate.exe © O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe © O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe © O4 - HKUS\S-1-5-21-572497329-332907695-1306557948-1000\..\Run: [EleFunAnimatedWallpaper] (Orphean) O4 - HKUS\S-1-5-21-572497329-332907695-1306557948-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe © O4 - HKUS\S-1-5-21-572497329-332907695-1306557948-1000\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\Jaclyne\AppData\Local\Dropbox\Update\DropboxUpdate.exe © ---\\ Modification Domaine/Adresses DNS (4) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS3\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 ---\\ Protocole additionnel (32) - 0s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: intu-ir2007 - {52BAEC6B-9405-46f9-A131-6D50720A3CC4} . (...) -- C:\Program Files\ImpotRapide 2007\ic2007pp.dll (.not file.) O18 - Handler: intu-ir2008 - {729D3592-92E7-4cbc-8E44-3C22B3F457B3} . (...) -- C:\Program Files\ImpotRapide 2008\ic2008pp.dll (.not file.) O18 - Handler: intu-ir2009 - {E4616804-F2F8-4839-B728-5305004DA6A7} . (...) -- C:\Program Files\ImpotRapide 2009\ic2009pp.dll (.not file.) O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll © O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll © O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll © O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Common Files\microsoft shared\Web Components\10\OWC10.DLL © O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Common Files\microsoft shared\Web Components\11\OWC11.DLL © O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype4COM.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll © O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll © O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll © O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL © ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (...) - c:\progra~1\google\google~2\goec62~1.dll ,C:\PROGRA~1\Amazon\AMAZON~1\AMAZON~1.DLL (.not file.) ---\\ Liste des services NT non Microsoft et non désactivés (17) - 1s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © O23 - Service: WebEx Service Host for Support Center (atashost) . (.Cisco WebEx LLC - WebEx Host for Support Center.) - C:\Windows\System32\atashost.exe O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\System32\Ati2evxx.exe © O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe © O23 - Service: DownSpeedTestService (DownSpeedTest_dqService) . (.Mindspark - Mindspark Toolbar Platform.) - C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbarsvc.exe =>PUP.Optional.ScriptHost O23 - Service: Sage 50 Gestionnaire de connexion de base de données (Gestionnaire de connexion de Simple Comptable) . (.Sage - Sage 50 Connection Manager [0038-rel\2015.0.) - C:\Program Files\Winsim\ConnectionManager\SimplyConnectionManager.exe © O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe © O23 - Service: HP DS Service (HP DS Service) . (.Hewlett-Packard Company - .) - C:\Program Files\HP\HPBDSService\HPBDSService.exe © O23 - Service: HP LaserJet Service (HP LaserJet Service) . (.HP - HP LaserJet Service.) - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe © O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company - SolutionsFrameworkService.) - C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe © O23 - Service: @C:\Windows\system32\msimsg.dll,-27 (msiserver) . (...) - C:\Windows\system32\msiexec /V (.not file.) O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) . (.Sonic Solutions - RoxWatch12 Module.) - C:\Program Files\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe © O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe © O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) . (...) - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (.not file.) O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe © ---\\ Tâches planifiées en automatique (31) - 3s [MD5.78497C1D5754BD187281A3D774F8ED0D] [APT] [1214avUpdateInfo] (.Copyright (C) 2011 . All rights reserved..) -- C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe [2778648] [MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] © [MD5.368290D0A612D62DA6F3D798B1BB8FE7] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269000] © [MD5.76F586CEF7018BD376CBBD74AEAC93F5] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1373872] © [MD5.1F014EA12ECB13C909DA9395E9CD3D18] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6278424] © [MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000Core] (.Dropbox, Inc..) -- C:\Users\Jaclyne\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512] © [MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000UA] (.Dropbox, Inc..) -- C:\Users\Jaclyne\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512] © [MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] © [MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] © [MD5.3EF07081505A103FF7AE4BA7E066E0C0] [APT] [HPLJCustParticipation] (.Hewlett Packard.) -- C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe [43832] © [MD5.00000000000000000000000000000000] [APT] [Knight System Protector Startup] (...) -- C:\Program Files\Knight System Protector\KnightSystemProtector.exe (.not file.) [0] =>PUP.Optional.KnightSystemProtector [MD5.00000000000000000000000000000000] [APT] [Super Optimizer Schedule] (...) -- C:\Program Files\Super Optimizer\SupOptLauncher.exe (.not file.) [0] =>PUP.Optional.SuperOptimizer [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984] © O39 - APT: 1214avUpdateInfo - (.Copyright (C) 2011 . All rights reserved..) -- C:\Windows\Tasks\1214avUpdateInfo.job [320] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] © O39 - APT: DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000Core - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000Core.job [1152] © O39 - APT: DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000UA - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000UA.job [1204] © O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056] © O39 - APT: 1214avUpdateInfo - (.Copyright (C) 2011 . All rights reserved..) -- C:\Windows\System32\Tasks\1214avUpdateInfo [2442] O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874] © O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3854] © O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] © O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2804] © O39 - APT: DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000Core - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000Core [3696] © O39 - APT: DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000UA - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-572497329-332907695-1306557948-1000UA [4092] © O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3800] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4052] © O39 - APT: HPLJCustParticipation - (.Hewlett Packard.) -- C:\Windows\System32\Tasks\HPLJCustParticipation [3398] © O39 - APT: Knight System Protector Startup - (...) -- C:\Windows\System32\Tasks\Knight System Protector Startup [3370] =>PUP.Optional.KnightSystemProtector O39 - APT: Super Optimizer Schedule - (...) -- C:\Windows\System32\Tasks\Super Optimizer Schedule [3254] =>PUP.Optional.SuperOptimizer ---\\ Logiciels installés (133) - 12s O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI © O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player © O42 - Logiciel: Advanced Audio FX Engine - (...) [HKLM] -- Advanced Audio FX Engine O42 - Logiciel: Advanced Video FX Engine - (...) [HKLM] -- Advanced Video FX Engine O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast © O42 - Logiciel: Canon Utilities CameraWindow DC 8 - (.Canon Inc..) [HKLM] -- CameraWindowDC8 © O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (...) [HKLM] -- CameraWindowDVC6 O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher © O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder © O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder © O42 - Logiciel: PIXMA Extended Survey Program - (...) [HKLM] -- CANONIJPLM100 O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner © O42 - Logiciel: Monitor Webcam (SP2208WFP) Driver (1.00.08.0720) - (...) [HKLM] -- Creative OEM005 O42 - Logiciel: CutePDF Writer 2.8 - (...) [HKLM] -- CutePDF Writer Installation O42 - Logiciel: Dell Webcam Center - (...) [HKLM] -- Dell Webcam Center O42 - Logiciel: Dell Webcam Manager - (...) [HKLM] -- Dell Webcam Manager O42 - Logiciel: DownSpeedTest Internet Explorer Toolbar - (.Mindspark Interactive Network.) [HKLM] -- DownSpeedTest_dqbar Uninstall Internet Explorer =>PUP.Optional.MindSpark O42 - Logiciel: Flash Movie Player 1.5 - (.Eolsoft.) [HKLM] -- Flash Movie Player © O42 - Logiciel: FLV Player (remove only) - (...) [HKLM] -- FLVM Player =>PUP.Optional.FLVMPlayer O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome © O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop © O42 - Logiciel: GoToAssist 8.0.0.514 - (...) [HKLM] -- GoToAssist O42 - Logiciel: Impôt Professionnel 2012 - (.Les Logiciels Marichênes.) [HKLM] -- Impôt Professionnel 2012_is1 O42 - Logiciel: Impôt Professionnel 2013 - (.Les Logiciels Marichênes.) [HKLM] -- Impôt Professionnel 2013_is1 O42 - Logiciel: Impôt Professionnel 2014 - (.Les Logiciels Marichênes.) [HKLM] -- Impôt Professionnel 2014_is1 O42 - Logiciel: Sage 50 Comptabilité Version 2015 - (.Sage Software.) [HKLM] -- InstallShield_{1585982E-766D-476A-BF0D-5FE4A1C1BE9F} © O42 - Logiciel: Canon RemoteCapture Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{28291BD5-92D2-4685-82DC-CCA925C53CCA} © O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM] -- InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} O42 - Logiciel: Sage Simple Comptable 2011 - (.Sage Software.) [HKLM] -- InstallShield_{53AB83B3-9908-44DF-97B5-C107140F26AD} © O42 - Logiciel: Canon Camera Window DS for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{91203BD3-6C3E-472F-ADBD-F60FDC7C4010} © O42 - Logiciel: Sage 50 Comptabilité - (.Sage Software.) [HKLM] -- InstallShield_{B9DBDDE5-ED84-4D53-92BD-DD5BE646BB4B} © O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 © O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan © O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- MovieEditTask © O42 - Logiciel: Mozilla Firefox 40.0.3 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 40.0.3 (x86 fr) © O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService © O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera © O42 - Logiciel: PrimoPDF -- brought to you by Nitro PDF Software - (.Nitro PDF Software.) [HKLM] -- PrimoPDF © O42 - Logiciel: Intel(R) PRO Network Connections 12.1.11.0 - (.Intel.) [HKLM] -- PROSetDX © O42 - Logiciel: RealArcade - (...) [HKLM] -- RealArcade 1.2 O42 - Logiciel: Canon Utilities RemoteCapture DC - (.Canon Inc..) [HKLM] -- RemoteCaptureDC © O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (...) [HKLM] -- RemoteCaptureTask O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM] -- TeamViewer 8 © O42 - Logiciel: TurboMeeting - (.RHUB Communications, Inc..) [HKLM] -- TurboMeeting O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: WinRAS 2015 - (.Revenu Québec.) [HKLM] -- WinRAS_2015_is1 © O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX © O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility © O42 - Logiciel: Google Gmail Notifier - (.Google Inc..) [HKLM] -- {0228e555-4f9c-4e35-a3ec-b109a192b4c2} © O42 - Logiciel: ATI Catalyst Control Center - (...) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} © O42 - Logiciel: Sage 50 Comptabilité - (.Sage Software.) [HKLM] -- {1585982E-766D-476A-BF0D-5FE4A1C1BE9F} © O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} © O42 - Logiciel: hppM125LaserJetService - (.Hewlett-Packard.) [HKLM] -- {18D5B189-DBDD-4E57-A84B-58C7700E9BB0} © O42 - Logiciel: HP Product FWUpdater - (.Hewlett-Packard Company.) [HKLM] -- {1A8F20ED-C9CC-43FD-A678-20970BB83A9E} © O42 - Logiciel: Live! Cam Avatar - (.Creative.) [HKLM] -- {1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995} © O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} © O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} © O42 - Logiciel: Skype™ 7.3 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} © O42 - Logiciel: Java(TM) 6 Update 23 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216010FF} © O42 - Logiciel: PaperPort Image Printer - (.Nuance Communications, Inc..) [HKLM] -- {2BC2781A-F7F6-452E-95EB-018A522F1B2C} © O42 - Logiciel: Soap 3.0 Toolkit - (.Your Company Name.) [HKLM] -- {2C464EC1-2B0C-4490-9CAC-D4562DD8377A} © O42 - Logiciel: HPLJUTM127_128 - (.HP.) [HKLM] -- {2C886751-51BD-4A8C-B33A-B4C513AB5B9A} © O42 - Logiciel: Google Toolbar for Firefox - (.Google.) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F} © O42 - Logiciel: HP LJ M127128 Scan HP Scan - (.Hewlett-Packard Co..) [HKLM] -- {2F518061-89DB-4AF0-9A7A-2BF73B60E6F0} © O42 - Logiciel: HPLJUTCore - (.HP.) [HKLM] -- {30DD7187-F392-4D83-8AED-D9A2DC64EF15} © O42 - Logiciel: Java(TM) SE Runtime Environment 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160000} © O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0} © O42 - Logiciel: HP LaserJet Pro MFP M127-M128 - (.Hewlett-Packard.) [HKLM] -- {3b050369-8d19-413d-9dec-84ff278472eb} © O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710} © O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} © O42 - Logiciel: Roxio Creator 2010 - (.Roxio.) [HKLM] -- {43CD257A-4F32-4BDE-9B3D-14E6E10C8307} © O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {447CDCE5-F555-429B-BFA6-642C3C6D684F} © O42 - Logiciel: MSXML4SP2 - (.Logiciel Dr Tax Software Inc..) [HKLM] -- {451BB54C-8B23-4455-8BDC-14FC7D43E056} O42 - Logiciel: Sage Simply Accounting 2011 - (.Sage Software.) [HKLM] -- {53AB83B3-9908-44DF-97B5-C107140F26AD} © O42 - Logiciel: Roxio BackOnTrack - (.Roxio.) [HKLM] -- {5A06423A-210C-49FB-950E-CB0EB8C5CEC7} © O42 - Logiciel: SupportSoft Assisted Service - (.SupportSoft.) [HKLM] -- {5A3F6A80-7913-475E-8B96-477A952CFA43} © O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} © O42 - Logiciel: Roxio File Backup - (.Roxio.) [HKLM] -- {60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} © O42 - Logiciel: HP LaserJet Pro MFP M127-M128 HP Device Toolbox - (.Hewlett-Packard Co..) [HKLM] -- {612631AC-0D84-4116-9D8A-D2D63467B7BF} © O42 - Logiciel: Browser Address Error Redirector - (.Dell.) [HKLM] -- {62230596-37E5-4618-A329-0D21F529A86F} © O42 - Logiciel: hpStatusAlerts - (.Hewlett Packard.) [HKLM] -- {6470E292-3B55-41DC-B5EB-91C34C5ACB5D} © O42 - Logiciel: HP LaserJet Pro MFP M127-M128 Fax Driver - (.Hewlett-Packard Co..) [HKLM] -- {65072E52-F51B-4280-9DA6-EA5F1EE72C3A} © O42 - Logiciel: Live! Cam Avatar Creator - (.Creative.) [HKLM] -- {65D0C510-D7B6-4438-9FC8-E6B91115AB0D} © O42 - Logiciel: MySQL Connector/ODBC 3.51 - (.Oracle Corporation.) [HKLM] -- {6A85286D-BA0F-4318-8C30-AD74A33AAD36} © O42 - Logiciel: MySQL Connector/ODBC 5.2(a) - (.Oracle Corporation.) [HKLM] -- {6BAA9A62-1520-4063-A5B4-FFB3D6EC62BB} © O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC} © O42 - Logiciel: Roxio CinePlayer - (.Roxio.) [HKLM] -- {733CDF24-0A93-426E-AA89-DF281EB54793} © O42 - Logiciel: Roxio Creator 2010 - (.Roxio.) [HKLM] -- {74DC8A26-4E05-40B6-AD11-C9428A1AE150} © O42 - Logiciel: Intel(R) PRO Network Connections 12.1.11.0 - (.Intel.) [HKLM] -- {777CA40C-0206-4EF6-A0FC-618BF06BF8D0} © O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} © O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} © O42 - Logiciel: ScanSoft PaperPort 11 - (.Nuance Communications, Inc..) [HKLM] -- {7A8FF745-BBC5-482B-88E4-18D3178249A9} © O42 - Logiciel: ImageMixer 3 SE - (.PIXELA.) [HKLM] -- {82C19692-571C-45D2-BAF2-278225787A35} © O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} © O42 - Logiciel: Roxio Video Capture USB - (.Roxio.) [HKLM] -- {86DDDAAD-AEB9-42E5-BE01-0E8FABD2BB29} © O42 - Logiciel: Roxio Creator 2010 - (.Roxio.) [HKLM] -- {89A15676-78AE-4D51-BF5B-DEE3E0D46C94} © O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} © O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} © O42 - Logiciel: hpStatusAlertsM127-M128 - (.Hewlett-Packard.) [HKLM] -- {92374A19-CD4A-498F-92CB-26473EF31FB3} © O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} © O42 - Logiciel: Guide de mise en route Dell - (.Dell Inc..) [HKLM] -- {9954484F-6EE4-4040-94E3-4B380646F867} © O42 - Logiciel: Roxio CinePlayer Decoder Pack - (.Roxio.) [HKLM] -- {9A00EC4E-27E1-42C4-98DD-662F32AC8870} © O42 - Logiciel: Roxio Activation Module - (.Roxio.) [HKLM] -- {A121EEDE-C68F-461D-91AA-D48BA226AF1C} © O42 - Logiciel: Roxio Burn - (.Roxio.) [HKLM] -- {A33E7B0C-B99C-4EC9-B702-8A328B161AF9} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} © O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824147215} © O42 - Logiciel: Adobe Reader X (10.1.15) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001} © O42 - Logiciel: DirectX 9 Runtime - (.Sonic Solutions.) [HKLM] -- {AF9E97C1-7431-426D-A8D5-ABE40995C0B1} © O42 - Logiciel: HP Unified IO - (.HP.) [HKLM] -- {B1CB7E99-4685-45CB-867E-2FB58EDA0A39} © O42 - Logiciel: OGA Notifier 2.0.0048.0 - (.Microsoft Corporation.) [HKLM] -- {B2544A03-10D0-4E5E-BA69-0362FFC20D18} © O42 - Logiciel: HPLJProMFPM127M128 - (.Hewlett-Packard.) [HKLM] -- {B5409C23-DE0C-4B48-8C8A-50AE38694955} © O42 - Logiciel: Sage 50 Comptabilité - (.Sage Software.) [HKLM] -- {B9DBDDE5-ED84-4D53-92BD-DD5BE646BB4B} © O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} © O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF} © O42 - Logiciel: Simple Comptable de Sage 2009 - (.Sage Software.) [HKLM] -- {C54856BC-3549-4ADE-AD4B-BC48C336DF5A} © O42 - Logiciel: HP LaserJet Pro MFP M127-M128 Fax - (.Hewlett-Packard Co..) [HKLM] -- {C5835004-643A-4EB6-A280-706F9F62F985} © O42 - Logiciel: ScanSoft OmniPage SE 4 - (.Nuance Communications, Inc..) [HKLM] -- {DEE88727-779B-47A9-ACEF-F87CA5F92A65} © O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} © O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {E1DB0812-2D60-43DB-AE09-6C7027D93B28} © O42 - Logiciel: Winter Afternoon - (.EleFun Desktops.) [HKLM] -- {ENW3139F-4DD5-81C6-25A8-624AC34560089}_is1 O42 - Logiciel: Realtek High Definition Audio Driver - (...) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} © O42 - Logiciel: HP LaserJet Pro MFP M127-M128 Fax - (.Hewlett-Packard Co..) [HKLM] -- {FAE97B40-E8E2-4B52-9A9E-219C3CCC0107} © O42 - Logiciel: HP Support Solutions Framework - (.Hewlett-Packard Company.) [HKLM] -- {FC3C2B77-6800-48C6-A15D-9D1031130C16} © O42 - Logiciel: Cisco WebEx Meetings - (.Cisco WebEx LLC.) [HKCU] -- ActiveTouchMeetingClient O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox © O42 - Logiciel: MétéoMédia - (.MétéoMédia.) [HKCU] -- MétéoMédia O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU] -- Notification de cadeaux MSN © O42 - Logiciel: TurboMeeting - (.RHUB Communications, Inc..) [HKCU] -- TurboMeeting O42 - Logiciel: WinDirStat 1.1.2 - (...) [HKCU] -- WinDirStat ---\\ HKCU & HKLM Software Keys (220) - 12s HKLM\SOFTWARE\Acro Software Inc HKLM\SOFTWARE\ActiveTouch HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\Alchemex (Pty) Ltd HKLM\SOFTWARE\America Online HKLM\SOFTWARE\AppDataLow HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\ATI HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\AVAST Software HKLM\SOFTWARE\Avg HKLM\SOFTWARE\AVG Tuneup HKLM\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKLM\SOFTWARE\Brother HKLM\SOFTWARE\Canon HKLM\SOFTWARE\Canon_Inc_IC HKLM\SOFTWARE\CDDB HKLM\SOFTWARE\Citrix HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\Creative HKLM\SOFTWARE\Creative Tech HKLM\SOFTWARE\Debug HKLM\SOFTWARE\Dell HKLM\SOFTWARE\DownSpeedTest_dq HKLM\SOFTWARE\Dr Tax HKLM\SOFTWARE\Dropbox HKLM\SOFTWARE\eFAX HKLM\SOFTWARE\EleFun Desktops HKLM\SOFTWARE\FullCircle HKLM\SOFTWARE\GameHouse HKLM\SOFTWARE\GEAR Software HKLM\SOFTWARE\GFI Solutions PME Inc. HKLM\SOFTWARE\Google HKLM\SOFTWARE\GPL Ghostscript HKLM\SOFTWARE\Hewlett-Packard HKLM\SOFTWARE\HewlettPackard HKLM\SOFTWARE\illiminable HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\ImpotPro HKLM\SOFTWARE\InstallShield HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Intuit HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\Jodix HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\KasperskyLab HKLM\SOFTWARE\Lavasoft HKLM\SOFTWARE\Licenses HKLM\SOFTWARE\Logitech HKLM\SOFTWARE\LogMeIn Rescue HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Marvell HKLM\SOFTWARE\McAfee.com HKLM\SOFTWARE\mcafeeupdater HKLM\SOFTWARE\MimarSinan HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\MusicNet HKLM\SOFTWARE\Musicnotes HKLM\SOFTWARE\MySQL AB HKLM\SOFTWARE\Netscape HKLM\SOFTWARE\Nuance HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\ParetoLogic =>PUP.Optional.Paretologic HKLM\SOFTWARE\PC-Doctor HKLM\SOFTWARE\PDF Architect 2 HKLM\SOFTWARE\Piriform HKLM\SOFTWARE\PIXELA HKLM\SOFTWARE\PocketSoft HKLM\SOFTWARE\Reallusion HKLM\SOFTWARE\RealNetworks HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\Roxio HKLM\SOFTWARE\RST =>PUP.Optional.WinRST HKLM\SOFTWARE\Sage HKLM\SOFTWARE\Sage Software HKLM\SOFTWARE\sbyocns HKLM\SOFTWARE\ScanSoft HKLM\SOFTWARE\SI-App =>PUP.Optional.WinRST HKLM\SOFTWARE\Sibelius Software HKLM\SOFTWARE\Skype HKLM\SOFTWARE\SmartPCFixer HKLM\SOFTWARE\SmartSound Software HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\Sonic Desktop Software HKLM\SOFTWARE\SpeedMaxPc =>PUP.Optional.SpeedMaxPc HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\SupportSoft HKLM\SOFTWARE\Symantec HKLM\SOFTWARE\Systweak =>PUP.Optional.Systweak HKLM\SOFTWARE\TeamViewer HKLM\SOFTWARE\Uniblue =>PUP.Optional.Uniblue HKLM\SOFTWARE\Upt =>PUP.Optional.WinRST HKLM\SOFTWARE\Vantage Software Technologies HKLM\SOFTWARE\VBMZ HKLM\SOFTWARE\Visioneer HKLM\SOFTWARE\Visualbee =>PUP.Optional.VisualBeeToolbar HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\WebEx HKLM\SOFTWARE\Windows HKLM\SOFTWARE\WinUpd =>PUP.Optional.WinRST HKLM\SOFTWARE\Xerox HKLM\SOFTWARE\Xing Technology Corp. HKLM\SOFTWARE\Yahoo HKLM\SOFTWARE\Zeon HKCU\SOFTWARE\Acomba HKCU\SOFTWARE\Acro Software Inc HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\APEXOFT HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ATI HKCU\SOFTWARE\ATI Technologies Inc. HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Avg Secure Update HKCU\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\Brother HKCU\SOFTWARE\Canon HKCU\SOFTWARE\CanonBJ HKCU\SOFTWARE\Canon_Inc_IC HKCU\SOFTWARE\CDDB HKCU\SOFTWARE\CISRA HKCU\SOFTWARE\Citrix HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\Convertisseur PDF de QuickBooks HKCU\SOFTWARE\Creative HKCU\SOFTWARE\Creative Tech HKCU\SOFTWARE\DELL HKCU\SOFTWARE\Distromatic HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\Dr Tax HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\DropboxUpdate HKCU\SOFTWARE\DSCLauncher HKCU\SOFTWARE\EleFun Desktops HKCU\SOFTWARE\EleFun Multimedia HKCU\SOFTWARE\EyePower Games HKCU\SOFTWARE\Free Converting HKCU\SOFTWARE\Free WMV Player HKCU\SOFTWARE\funkitron HKCU\SOFTWARE\Garmin HKCU\SOFTWARE\GFMA HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\HookNetwork HKCU\SOFTWARE\HP HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\iMesh =>PUP.Optional.iMesh HKCU\SOFTWARE\InstallShield HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Intuit HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\kde.org HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Ligos HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Logitech HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Macrovision HKCU\SOFTWARE\Magnet HKCU\SOFTWARE\MainConcept (Sonic) HKCU\SOFTWARE\Marvell HKCU\SOFTWARE\MicroVision HKCU\SOFTWARE\Mixi.DJ HKCU\SOFTWARE\MMTWN HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Musicnotes HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Northcode Inc HKCU\SOFTWARE\Nuance HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\PC Booster =>PUP.Optional.PCBooster HKCU\SOFTWARE\PC-Doctor HKCU\SOFTWARE\PDF Architect 2 HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\PIXELA HKCU\SOFTWARE\RealNetworks HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\Roxio HKCU\SOFTWARE\Sage Software HKCU\SOFTWARE\sbyocns HKCU\SOFTWARE\ScanSoft HKCU\SOFTWARE\Seagate Software HKCU\SOFTWARE\Seifert HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar HKCU\SOFTWARE\SmartSound Software HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\Sonic HKCU\SOFTWARE\SpeedMaxPc =>PUP.Optional.SpeedMaxPc HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer HKCU\SOFTWARE\Systweak =>PUP.Optional.Systweak HKCU\SOFTWARE\TeamViewer HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\Vantage Software Technologies HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\Visioneer HKCU\SOFTWARE\Visualbee =>PUP.Optional.VisualBeeToolbar HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Yahoo HKCU\SOFTWARE\yahooinstall HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Aurigma HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\DownSpeedTest_dq HKCU\SOFTWARE\AppDataLow\Software\Google HKCU\SOFTWARE\AppDataLow\Software\imeshmediabartb =>PUP.Optional.iMesh HKCU\SOFTWARE\AppDataLow\Software\Musicnotes HKCU\SOFTWARE\AppDataLow\Software\SmartBar =>PUP.Optional.SmartBar HKCU\SOFTWARE\AppDataLow\Software\UM ---\\ Contenu des dossiers Programmes (547) - 20s O43 - CFD: 2012/05/18 09:04:59 - [] D -- C:\Program Files\Acro Software O43 - CFD: 2014/02/27 22:32:27 - [] D -- C:\Program Files\Adobe O43 - CFD: 2014/01/25 20:41:29 - [0] D -- C:\Program Files\Advanced System Protector =>PUP.Optional.AdvancedSystemProtector O43 - CFD: 2010/08/11 09:38:36 - [] D -- C:\Program Files\Alwil Software O43 - CFD: 2012/04/18 12:39:52 - [] D -- C:\Program Files\Apple Software Update O43 - CFD: 2008/05/28 15:12:11 - [] D -- C:\Program Files\ATI Technologies O43 - CFD: 2015/05/09 12:26:35 - [] D -- C:\Program Files\AVAST Software O43 - CFD: 2013/02/25 11:53:03 - [] D -- C:\Program Files\Bonjour O43 - CFD: 2013/02/15 09:55:52 - [] D -- C:\Program Files\Canon O43 - CFD: 2015/05/09 11:40:10 - [] D -- C:\Program Files\CCleaner O43 - CFD: 2015/05/09 16:09:32 - [] D -- C:\Program Files\Common Files O43 - CFD: 2013/09/13 21:45:10 - [] D -- C:\Program Files\Conduit O43 - CFD: 2008/05/28 15:14:14 - [] D -- C:\Program Files\Creative O43 - CFD: 2008/05/28 15:13:17 - [] D -- C:\Program Files\Creative Live! Cam O43 - CFD: 2008/05/28 15:27:23 - [] D -- C:\Program Files\Dell O43 - CFD: 2015/09/13 19:45:08 - [] D -- C:\Program Files\DownSpeedTest_dq =>PUP.Optional.ScriptHost O43 - CFD: 2013/02/13 22:44:37 - [] D -- C:\Program Files\Dropbox O43 - CFD: 2011/12/21 22:35:01 - [] D -- C:\Program Files\EleFun Desktops O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 2008/12/13 23:08:04 - [] D -- C:\Program Files\Flash Movie Player O43 - CFD: 2013/09/13 21:43:20 - [] D -- C:\Program Files\GameHouse O43 - CFD: 2015/05/09 12:29:45 - [] D -- C:\Program Files\Google O43 - CFD: 2012/05/18 09:05:40 - [] D -- C:\Program Files\GPLGS O43 - CFD: 2015/04/10 10:01:57 - [] D -- C:\Program Files\Hewlett-Packard O43 - CFD: 2015/03/07 15:09:59 - [] D -- C:\Program Files\HP O43 - CFD: 2014/10/31 20:09:19 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 2008/05/28 15:11:00 - [] D -- C:\Program Files\Intel O43 - CFD: 2015/09/11 08:13:37 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 2015/03/02 18:18:13 - [] D -- C:\Program Files\iPod O43 - CFD: 2013/12/30 20:05:30 - [] D -- C:\Program Files\iPod(11) O43 - CFD: 2015/03/02 18:18:38 - [] D -- C:\Program Files\iTunes O43 - CFD: 2013/12/30 20:06:14 - [] D -- C:\Program Files\iTunes(12) O43 - CFD: 2012/08/25 22:00:49 - [] D -- C:\Program Files\Java O43 - CFD: 2014/10/09 11:27:33 - [] D -- C:\Program Files\Knight System Protector =>PUP.Optional.KnightSystemProtector O43 - CFD: 2009/01/09 20:18:11 - [] D -- C:\Program Files\Logitech O43 - CFD: 2015/09/08 08:59:17 - [] D -- C:\Program Files\McAfee Security Scan O43 - CFD: 2011/04/16 21:03:41 - [] D -- C:\Program Files\Microsoft O43 - CFD: 2008/11/11 09:06:41 - [] D -- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 2006/11/02 08:37:34 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 2011/07/25 17:59:04 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 2010/03/07 22:08:11 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 2008/07/30 21:04:02 - [] D -- C:\Program Files\Microsoft Visual Studio O43 - CFD: 2012/10/11 09:04:44 - [] D -- C:\Program Files\Microsoft Works O43 - CFD: 2010/06/26 13:14:51 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 2010/08/12 09:46:28 - [] D -- C:\Program Files\Movie Maker O43 - CFD: 2015/08/28 08:54:17 - [] D -- C:\Program Files\Mozilla Firefox O43 - CFD: 2015/08/28 08:54:17 - [] D -- C:\Program Files\Mozilla Maintenance Service O43 - CFD: 2006/11/02 08:37:34 - [] D -- C:\Program Files\MSBuild O43 - CFD: 2008/11/11 09:06:27 - [0] D -- C:\Program Files\MSXML 4.0 O43 - CFD: 2008/12/28 10:28:08 - [] D -- C:\Program Files\Musicalis O43 - CFD: 2013/12/28 14:12:22 - [0] D -- C:\Program Files\My Dell O43 - CFD: 2015/05/09 13:09:30 - [0] D -- C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup O43 - CFD: 2014/10/07 21:16:28 - [0] D -- C:\Program Files\MyPCBackup =>PUP.Optional.MyPCBackup O43 - CFD: 2014/01/28 12:04:26 - [] D -- C:\Program Files\MySQL O43 - CFD: 2012/05/25 09:01:52 - [] D -- C:\Program Files\Nitro PDF O43 - CFD: 2009/03/06 21:37:31 - [] D -- C:\Program Files\Nuance O43 - CFD: 2014/10/10 15:42:56 - [0] D -- C:\Program Files\PC Booster =>PUP.Optional.PCBooster O43 - CFD: 2013/09/19 21:32:05 - [0] D -- C:\Program Files\PC Speed Maximizer =>PUP.Optional.PCSpeedMaximizer O43 - CFD: 2010/06/26 20:49:36 - [] D -- C:\Program Files\PIXELA O43 - CFD: 2015/03/02 18:02:18 - [] D -- C:\Program Files\QuickTime O43 - CFD: 2009/01/04 17:35:49 - [] D -- C:\Program Files\Real O43 - CFD: 2015/05/09 13:09:11 - [0] D -- C:\Program Files\RebateInformer O43 - CFD: 2006/11/02 08:37:34 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 2012/10/17 12:40:05 - [] D -- C:\Program Files\Roxio O43 - CFD: 2010/08/05 20:09:09 - [] D -- C:\Program Files\Roxio 2010 O43 - CFD: 2014/07/04 09:47:45 - [] D -- C:\Program Files\Sage 50 Comptabilité Pro O43 - CFD: 2015/07/06 10:40:00 - [] D -- C:\Program Files\Sage 50 Comptabilité Pro Version 2015 O43 - CFD: 2009/03/06 21:36:11 - [] D -- C:\Program Files\ScanSoft O43 - CFD: 2009/05/31 09:41:44 - [] D -- C:\Program Files\Seagate Software O43 - CFD: 2015/05/09 15:03:04 - [0] D -- C:\Program Files\SearchProtect =>PUP.Optional.SearchProtect O43 - CFD: 2015/04/16 17:33:08 - [] RD -- C:\Program Files\Skype O43 - CFD: 2010/08/05 20:04:24 - [] D -- C:\Program Files\SmartSound Software O43 - CFD: 2014/01/26 10:27:20 - [0] D -- C:\Program Files\Systweak Support Dock =>PUP.Optional.SystSupportDock O43 - CFD: 2013/10/24 08:56:16 - [] D -- C:\Program Files\TeamViewer O43 - CFD: 2013/09/14 21:23:08 - [] D -- C:\Program Files\Uniblue =>PUP.Optional.Uniblue O43 - CFD: 2006/11/02 09:01:55 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 2014/09/08 10:56:00 - [] D -- C:\Program Files\WinDirStat O43 - CFD: 2009/11/19 19:59:14 - [] D -- C:\Program Files\Windows Calendar O43 - CFD: 2009/11/19 19:59:14 - [] D -- C:\Program Files\Windows Collaboration O43 - CFD: 2009/11/19 19:59:13 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 2015/09/11 08:13:41 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 2012/07/18 21:00:09 - [] D -- C:\Program Files\Windows Live O43 - CFD: 2008/09/20 19:36:35 - [] D -- C:\Program Files\Windows Live Favorites O43 - CFD: 2010/03/07 22:09:31 - [] D -- C:\Program Files\Windows Live Toolbar O43 - CFD: 2012/04/12 09:12:32 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 2015/06/11 03:17:01 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 2008/06/04 15:57:13 - [] D -- C:\Program Files\Windows NT O43 - CFD: 2009/11/19 19:59:14 - [] D -- C:\Program Files\Windows Photo Gallery O43 - CFD: 2009/11/21 10:16:14 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 2011/05/15 18:43:57 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 2008/06/06 16:56:57 - [] D -- C:\Program Files\WinRAR O43 - CFD: 2015/01/09 11:22:29 - [] D -- C:\Program Files\WinRAS 2015.01 O43 - CFD: 2014/10/31 20:09:57 - [] D -- C:\Program Files\Winsim O43 - CFD: 2014/09/08 10:47:07 - [0] D -- C:\Program Files\WinZip System Utilities Suite O43 - CFD: 2013/09/14 21:24:17 - [] D -- C:\Program Files\WordBiz O43 - CFD: 2011/02/24 12:41:16 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2011/02/24 12:41:16 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/05/09 12:30:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software O43 - CFD: 2013/02/15 09:55:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities O43 - CFD: 2008/05/28 15:11:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center O43 - CFD: 2015/05/09 11:40:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 2008/05/28 15:13:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative O43 - CFD: 2012/05/18 09:05:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF O43 - CFD: 2013/12/28 14:12:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell O43 - CFD: 2008/06/04 15:53:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam O43 - CFD: 2011/12/21 22:35:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EleFun Desktops O43 - CFD: 2008/06/19 10:32:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades O43 - CFD: 2008/12/13 23:07:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Movie Player O43 - CFD: 2008/06/19 10:32:28 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2008/06/06 16:38:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gmail Notifier O43 - CFD: 2015/05/09 12:29:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2010/07/08 16:44:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Desktop O43 - CFD: 2015/03/07 15:07:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 2014/02/17 11:15:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impôt Professionnel 2012 O43 - CFD: 2014/04/29 08:07:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impôt Professionnel 2013 O43 - CFD: 2015/03/21 15:01:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impôt Professionnel 2014 O43 - CFD: 2015/03/02 18:18:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 2006/11/02 08:56:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/09/08 08:59:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus O43 - CFD: 2010/07/15 11:08:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2010/08/04 09:00:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in O43 - CFD: 2012/10/11 09:04:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works O43 - CFD: 2011/05/25 19:38:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox O43 - CFD: 2012/05/01 12:00:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paie Construction O43 - CFD: 2010/06/26 20:49:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PIXELA O43 - CFD: 2012/05/25 09:01:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrimoPDF O43 - CFD: 2015/03/02 18:02:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 2010/08/05 20:05:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio 2010 O43 - CFD: 2014/10/31 20:09:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sage O43 - CFD: 2008/11/09 16:49:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4 O43 - CFD: 2009/03/06 21:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11 O43 - CFD: 2014/09/22 09:05:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 2015/09/08 08:59:18 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2014/10/07 20:03:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer =>PUP.Optional.SuperOptimizer O43 - CFD: 2006/11/02 08:37:34 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2014/09/08 10:56:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat O43 - CFD: 2008/06/06 16:56:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2015/01/09 11:22:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAS 2015.01 O43 - CFD: 2015/03/02 18:18:02 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 O43 - CFD: 2013/12/30 20:06:14 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1(14) O43 - CFD: 2010/02/23 23:40:08 - [] D -- C:\ProgramData\88F O43 - CFD: 2014/01/25 15:34:59 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2010/08/10 22:23:45 - [] D -- C:\ProgramData\Alwil Software O43 - CFD: 2014/09/16 09:50:17 - [] D -- C:\ProgramData\Apple O43 - CFD: 2008/07/21 16:37:49 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2008/06/04 16:03:21 - [] D -- C:\ProgramData\ATI O43 - CFD: 2015/05/09 12:26:19 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 2015/05/06 10:12:53 - [] D -- C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch O43 - CFD: 2015/05/06 10:13:32 - [] D -- C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch O43 - CFD: 2015/05/06 10:13:20 - [] D -- C:\ProgramData\AVG Web TuneUp =>Toolbar.AVGSafeGuard O43 - CFD: 2014/12/10 09:45:57 - [] D -- C:\ProgramData\Avg_Update_1214av O43 - CFD: 2015/03/02 18:18:38 - [] D -- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB O43 - CFD: 2009/03/06 21:35:00 - [] D -- C:\ProgramData\Brother O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 2009/02/07 16:53:05 - [] D -- C:\ProgramData\CanonIJPLM O43 - CFD: 2014/10/07 20:05:34 - [] D -- C:\ProgramData\COMMON FILES O43 - CFD: 2015/05/09 14:24:19 - [0] D -- C:\ProgramData\Conduit O43 - CFD: 2010/11/20 20:23:00 - [] D -- C:\ProgramData\Dell O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2015/06/17 08:29:05 - [] D -- C:\ProgramData\Dropbox O43 - CFD: 2010/08/05 20:04:27 - [] D -- C:\ProgramData\eSellerate O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 2009/03/05 19:51:29 - [] D -- C:\ProgramData\Google O43 - CFD: 2014/01/12 19:33:57 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 2015/03/07 15:09:53 - [] D -- C:\ProgramData\HP O43 - CFD: 2008/05/28 15:19:51 - [] D -- C:\ProgramData\InstallShield O43 - CFD: 2009/06/03 19:30:31 - [] D -- C:\ProgramData\Intuit O43 - CFD: 2010/03/01 10:57:24 - [] D -- C:\ProgramData\Intuit Canada O43 - CFD: 2010/08/05 19:32:50 - [] D -- C:\ProgramData\Macrovision O43 - CFD: 2015/05/09 12:40:48 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2014/11/10 10:04:41 - [] D -- C:\ProgramData\McAfee O43 - CFD: 2015/08/02 18:54:25 - [] D -- C:\ProgramData\McAfee Security Scan O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 2015/05/09 13:34:47 - [] D -- C:\ProgramData\MFAData O43 - CFD: 2014/02/26 10:45:13 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2008/06/04 15:57:13 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 2012/04/26 22:23:52 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 2013/02/20 19:31:11 - [] D -- C:\ProgramData\MSScanAppDataDir O43 - CFD: 2010/02/17 12:06:49 - [0] D -- C:\ProgramData\Musicnotes O43 - CFD: 2009/10/06 08:58:47 - [] D -- C:\ProgramData\Office Genuine Advantage O43 - CFD: 2015/04/10 10:54:03 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 2014/10/09 11:17:56 - [] D -- C:\ProgramData\PC Booster =>PUP.Optional.PCBooster O43 - CFD: 2013/12/12 18:25:04 - [] D -- C:\ProgramData\PCDr O43 - CFD: 2014/11/17 10:59:09 - [] D -- C:\ProgramData\PDF Architect 2 O43 - CFD: 2010/06/27 19:58:23 - [] D -- C:\ProgramData\PIXELA O43 - CFD: 2009/01/04 17:39:00 - [] D -- C:\ProgramData\PlayFirst O43 - CFD: 2014/02/14 12:03:13 - [] D -- C:\ProgramData\Protexis O43 - CFD: 2013/02/11 20:23:46 - [] D -- C:\ProgramData\Roxio O43 - CFD: 2014/10/31 20:08:00 - [] D -- C:\ProgramData\Sage 50 Canadian O43 - CFD: 2009/04/07 22:52:58 - [] D -- C:\ProgramData\ScanSoft O43 - CFD: 2015/04/16 17:33:19 - [] D -- C:\ProgramData\Skype O43 - CFD: 2010/08/05 20:27:19 - [] D -- C:\ProgramData\SmartSound Software Inc O43 - CFD: 2010/08/05 21:56:21 - [] D -- C:\ProgramData\Sonic O43 - CFD: 2013/09/28 20:01:45 - [] D -- C:\ProgramData\SpeedMaxPc =>PUP.Optional.SpeedMaxPc O43 - CFD: 2010/04/08 18:12:31 - [] D -- C:\ProgramData\Sun O43 - CFD: 2009/04/12 21:35:14 - [0] D -- C:\ProgramData\Symantec O43 - CFD: 2014/10/07 20:22:20 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 2010/08/05 20:14:07 - [] D -- C:\ProgramData\Uninstall O43 - CFD: 2015/04/29 10:54:25 - [] D -- C:\ProgramData\WebEx O43 - CFD: 2010/10/23 10:04:26 - [] D -- C:\ProgramData\Western Digital O43 - CFD: 2014/01/25 20:34:52 - [] D -- C:\ProgramData\WindowsSearch O43 - CFD: 2008/09/20 19:34:00 - [] D -- C:\ProgramData\WLInstaller O43 - CFD: 2008/11/09 16:33:25 - [] D -- C:\ProgramData\Xerox O43 - CFD: 2013/09/01 18:46:00 - [0] D -- C:\ProgramData\ZoomBrowser O43 - CFD: 2010/12/26 20:04:46 - [] D -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 2014/01/25 15:35:10 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 2010/11/26 11:32:05 - [] D -- C:\Program Files\Common Files\AnswerWorks 5.0 O43 - CFD: 2015/03/02 18:18:13 - [] D -- C:\Program Files\Common Files\Apple O43 - CFD: 2015/05/06 10:13:01 - [] D -- C:\Program Files\Common Files\AVG Secure Search =>Toolbar.AVGSearch O43 - CFD: 2014/02/14 14:46:27 - [] D -- C:\Program Files\Common Files\Barcodesoft O43 - CFD: 2014/01/31 18:07:34 - [] D -- C:\Program Files\Common Files\BIComponents O43 - CFD: 2014/01/31 18:08:09 - [] D -- C:\Program Files\Common Files\BIComponentsDotNet O43 - CFD: 2014/01/31 18:08:09 - [] D -- C:\Program Files\Common Files\BIGenerator O43 - CFD: 2010/08/31 22:24:21 - [] D -- C:\Program Files\Common Files\CANON O43 - CFD: 2008/05/28 15:13:31 - [] D -- C:\Program Files\Common Files\Creative O43 - CFD: 2008/07/30 21:04:12 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 2010/02/27 14:29:04 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 2012/10/31 10:48:31 - [] D -- C:\Program Files\Common Files\Intuit O43 - CFD: 2010/08/31 10:30:13 - [] D -- C:\Program Files\Common Files\Java O43 - CFD: 2013/01/13 17:19:14 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 2009/05/31 09:43:13 - [] D -- C:\Program Files\Common Files\ODBC O43 - CFD: 2010/08/05 20:09:11 - [] D -- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 2009/03/15 19:18:32 - [] D -- C:\Program Files\Common Files\Real O43 - CFD: 2008/05/28 15:14:05 - [] D -- C:\Program Files\Common Files\Reallusion O43 - CFD: 2012/10/17 12:39:53 - [] D -- C:\Program Files\Common Files\Roxio Shared O43 - CFD: 2009/03/06 21:36:16 - [] D -- C:\Program Files\Common Files\ScanSoft Shared O43 - CFD: 2006/11/02 07:18:33 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 2014/09/22 09:05:42 - [] D -- C:\Program Files\Common Files\Skype O43 - CFD: 2012/10/17 12:39:40 - [] D -- C:\Program Files\Common Files\Sonic Shared O43 - CFD: 2006/11/02 07:18:33 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 2010/11/20 20:21:47 - [] D -- C:\Program Files\Common Files\supportsoft O43 - CFD: 2009/06/03 19:36:20 - [0] D -- C:\Program Files\Common Files\SWF Studio O43 - CFD: 2011/11/10 09:27:29 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 2010/03/07 22:02:15 - [] D -- C:\Program Files\Common Files\Windows Live O43 - CFD: 2008/09/20 19:35:28 - [] SHDC -- C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD: 2009/06/03 19:42:47 - [0] SHD -- C:\Users\Jaclyne\AppData\Roaming\.# O43 - CFD: 2012/01/11 23:27:50 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Adobe O43 - CFD: 2014/01/25 20:45:04 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\amazon O43 - CFD: 2010/12/26 20:10:27 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Apple Computer O43 - CFD: 2008/06/04 16:03:21 - [] D -- C:\Users\Jaclyne\AppData\Roaming\ATI O43 - CFD: 2015/05/09 12:31:01 - [] D -- C:\Users\Jaclyne\AppData\Roaming\AVAST Software O43 - CFD: 2009/03/06 21:59:23 - [] RD -- C:\Users\Jaclyne\AppData\Roaming\Brother O43 - CFD: 2013/02/15 09:53:14 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Canon O43 - CFD: 2010/09/19 20:12:21 - [] D -- C:\Users\Jaclyne\AppData\Roaming\CANON INC O43 - CFD: 2009/01/07 19:48:24 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Creative O43 - CFD: 2011/05/25 11:08:14 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Dell O43 - CFD: 2013/09/27 11:08:54 - [] D -- C:\Users\Jaclyne\AppData\Roaming\DriverCure =>PUP.Optional.Paretologic O43 - CFD: 2015/09/13 19:41:46 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Dropbox O43 - CFD: 2011/12/21 22:35:12 - [] D -- C:\Users\Jaclyne\AppData\Roaming\elefundesktops O43 - CFD: 2010/04/10 14:12:54 - [] D -- C:\Users\Jaclyne\AppData\Roaming\GARMIN O43 - CFD: 2008/06/04 16:09:30 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Google O43 - CFD: 2014/01/12 19:33:58 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Hewlett-Packard Company O43 - CFD: 2015/03/07 15:48:05 - [] D -- C:\Users\Jaclyne\AppData\Roaming\HpUpdate O43 - CFD: 2008/06/04 16:02:18 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Identities O43 - CFD: 2014/04/22 09:12:50 - [] D -- C:\Users\Jaclyne\AppData\Roaming\InstallShield O43 - CFD: 2010/03/01 10:58:46 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Intuit Canada O43 - CFD: 2015/05/09 15:55:51 - [] D -- C:\Users\Jaclyne\AppData\Roaming\LavasoftStatistics O43 - CFD: 2009/02/21 19:43:09 - [] D -- C:\Users\Jaclyne\AppData\Roaming\LimeWire O43 - CFD: 2008/06/04 16:08:34 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Macromedia O43 - CFD: 2010/08/05 20:21:01 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Macrovision O43 - CFD: 2006/11/02 08:37:34 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Media Center Programs O43 - CFD: 2012/01/19 11:12:16 - [] SD -- C:\Users\Jaclyne\AppData\Roaming\Microsoft O43 - CFD: 2010/02/23 23:39:53 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Mozilla O43 - CFD: 2010/02/23 23:42:52 - [] D -- C:\Users\Jaclyne\AppData\Roaming\MusicNet O43 - CFD: 2013/09/28 20:01:59 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Nico Mak Computing O43 - CFD: 2010/08/06 11:09:43 - [] D -- C:\Users\Jaclyne\AppData\Roaming\OpenOffice.org2 O43 - CFD: 2009/12/16 09:54:35 - [] D -- C:\Users\Jaclyne\AppData\Roaming\PC-FAX TX O43 - CFD: 2011/05/25 11:03:51 - [] D -- C:\Users\Jaclyne\AppData\Roaming\PCDr O43 - CFD: 2014/11/17 19:26:41 - [] D -- C:\Users\Jaclyne\AppData\Roaming\PDF Architect 2 O43 - CFD: 2009/01/04 17:39:00 - [] D -- C:\Users\Jaclyne\AppData\Roaming\PlayFirst O43 - CFD: 2015/09/08 10:13:33 - [] D -- C:\Users\Jaclyne\AppData\Roaming\PrimoPDF O43 - CFD: 2009/01/03 15:45:28 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Real O43 - CFD: 2010/08/05 20:28:58 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Reallusion O43 - CFD: 2010/08/20 16:19:44 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Roxio O43 - CFD: 2010/08/05 19:20:10 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Roxio Log Files O43 - CFD: 2014/02/14 14:54:13 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Sage O43 - CFD: 2009/03/06 22:13:53 - [] D -- C:\Users\Jaclyne\AppData\Roaming\ScanSoft O43 - CFD: 2010/02/23 23:24:41 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Sibelius Software O43 - CFD: 2015/09/05 20:59:02 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Skype O43 - CFD: 2011/07/26 08:32:41 - [] D -- C:\Users\Jaclyne\AppData\Roaming\skypePM O43 - CFD: 2010/08/05 21:58:39 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Sonic O43 - CFD: 2013/09/27 11:08:53 - [] D -- C:\Users\Jaclyne\AppData\Roaming\SpeedMaxPc =>PUP.Optional.SpeedMaxPc O43 - CFD: 2014/10/07 20:22:14 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Super Optimizer =>PUP.Optional.SuperOptimizer O43 - CFD: 2014/01/26 10:28:35 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Systweak =>PUP.Optional.Systweak O43 - CFD: 2009/01/03 15:29:20 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Talkback O43 - CFD: 2015/05/09 11:41:19 - [] D -- C:\Users\Jaclyne\AppData\Roaming\TeamViewer O43 - CFD: 2009/12/15 18:39:32 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Template O43 - CFD: 2010/08/05 20:28:57 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\tmp O43 - CFD: 2014/10/07 20:40:05 - [] D -- C:\Users\Jaclyne\AppData\Roaming\TuneUp Software O43 - CFD: 2015/05/25 09:52:44 - [] D -- C:\Users\Jaclyne\AppData\Roaming\TurboMeeting O43 - CFD: 2013/09/14 21:23:10 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Uniblue =>PUP.Optional.Uniblue O43 - CFD: 2015/05/05 08:26:23 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Update Manager O43 - CFD: 2010/12/21 11:08:55 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Windows Live Writer O43 - CFD: 2008/06/24 12:52:04 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\WinRAR O43 - CFD: 2015/01/09 11:22:34 - [] D -- C:\Users\Jaclyne\AppData\Roaming\WinRAS_2015 O43 - CFD: 2015/09/13 20:17:45 - [] D -- C:\Users\Jaclyne\AppData\Roaming\ZHP O43 - CFD: 2014/02/09 15:55:09 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\ZoomBrowser EX O43 - CFD: 2015/07/10 14:41:15 - [] D -- C:\Users\Jaclyne\AppData\Local\Adobe O43 - CFD: 2013/12/27 23:19:38 - [] D -- C:\Users\Jaclyne\AppData\Local\Adobe_Systems_Incorporate O43 - CFD: 2008/07/29 14:39:00 - [] D -- C:\Users\Jaclyne\AppData\Local\Apple O43 - CFD: 2015/01/06 20:43:01 - [] D -- C:\Users\Jaclyne\AppData\Local\Apple Computer O43 - CFD: 2008/06/04 16:01:24 - [0] SHD -- C:\Users\Jaclyne\AppData\Local\Application Data O43 - CFD: 2015/05/09 11:14:51 - [] D -- C:\Users\Jaclyne\AppData\Local\ApplicationHistory O43 - CFD: 2008/09/04 20:32:12 - [] D -- C:\Users\Jaclyne\AppData\Local\Apps O43 - CFD: 2008/06/04 16:03:19 - [] D -- C:\Users\Jaclyne\AppData\Local\ATI O43 - CFD: 2015/05/06 14:14:02 - [] D -- C:\Users\Jaclyne\AppData\Local\AVG Web TuneUp =>Toolbar.AVGSafeGuard O43 - CFD: 2014/10/07 20:05:34 - [] D -- C:\Users\Jaclyne\AppData\Local\Avg2014 O43 - CFD: 2013/12/27 22:57:00 - [] D -- C:\Users\Jaclyne\AppData\Local\cache O43 - CFD: 2009/06/01 10:13:32 - [] D -- C:\Users\Jaclyne\AppData\Local\Citrix O43 - CFD: 2013/09/28 20:05:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\Conduit O43 - CFD: 2015/05/09 13:09:11 - [] D -- C:\Users\Jaclyne\AppData\Local\CopyFileInterpreter O43 - CFD: 2015/05/09 13:09:30 - [0] D -- C:\Users\Jaclyne\AppData\Local\CRE O43 - CFD: 2012/05/22 10:10:38 - [] D -- C:\Users\Jaclyne\AppData\Local\CutePDF Writer O43 - CFD: 2008/10/31 18:47:24 - [] D -- C:\Users\Jaclyne\AppData\Local\Dell O43 - CFD: 2015/09/13 19:46:18 - [] D -- C:\Users\Jaclyne\AppData\Local\DownSpeedTest_dq =>PUP.Optional.ScriptHost O43 - CFD: 2015/06/17 08:29:05 - [] D -- C:\Users\Jaclyne\AppData\Local\Dropbox O43 - CFD: 2014/10/07 21:24:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\genienext =>PUP.Optional.NextLive O43 - CFD: 2015/07/17 10:51:09 - [] D -- C:\Users\Jaclyne\AppData\Local\Google O43 - CFD: 2015/03/07 13:56:48 - [] D -- C:\Users\Jaclyne\AppData\Local\Hewlett-Packard O43 - CFD: 2008/06/04 16:01:24 - [0] SHD -- C:\Users\Jaclyne\AppData\Local\Historique O43 - CFD: 2014/02/11 20:03:48 - [] D -- C:\Users\Jaclyne\AppData\Local\HP O43 - CFD: 2010/11/13 20:14:50 - [] D -- C:\Users\Jaclyne\AppData\Local\iMesh =>PUP.Optional.iMesh O43 - CFD: 2009/06/03 19:31:48 - [] D -- C:\Users\Jaclyne\AppData\Local\intuit O43 - CFD: 2010/11/19 21:43:15 - [] D -- C:\Users\Jaclyne\AppData\Local\LANCITE O43 - CFD: 2015/05/09 11:18:39 - [] D -- C:\Users\Jaclyne\AppData\Local\Lavasoft O43 - CFD: 2014/07/21 10:42:20 - [] D -- C:\Users\Jaclyne\AppData\Local\LogMeIn Rescue Applet O43 - CFD: 2012/08/28 10:14:27 - [] D -- C:\Users\Jaclyne\AppData\Local\Macromedia O43 - CFD: 2014/10/07 20:05:34 - [] D -- C:\Users\Jaclyne\AppData\Local\MFAData O43 - CFD: 2014/10/23 09:22:35 - [] D -- C:\Users\Jaclyne\AppData\Local\Microsoft O43 - CFD: 2013/10/15 11:07:00 - [] D -- C:\Users\Jaclyne\AppData\Local\Microsoft Corporation O43 - CFD: 2008/09/05 21:35:44 - [] D -- C:\Users\Jaclyne\AppData\Local\Microsoft Games O43 - CFD: 2008/06/06 09:49:38 - [] D -- C:\Users\Jaclyne\AppData\Local\MicroVision Applications O43 - CFD: 2014/01/25 20:47:09 - [] D -- C:\Users\Jaclyne\AppData\Local\MigWiz O43 - CFD: 2013/12/28 11:59:28 - [] D -- C:\Users\Jaclyne\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie O43 - CFD: 2009/01/03 15:28:44 - [] D -- C:\Users\Jaclyne\AppData\Local\Mozilla O43 - CFD: 2014/07/20 21:08:17 - [] D -- C:\Users\Jaclyne\AppData\Local\MétéoMédia O43 - CFD: 2010/11/13 20:05:05 - [0] D -- C:\Users\Jaclyne\AppData\Local\PackageAware =>PUP.Optional.BearShare O43 - CFD: 2012/12/27 15:42:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\Protexis O43 - CFD: 2015/04/11 09:15:57 - [] D -- C:\Users\Jaclyne\AppData\Local\Sage O43 - CFD: 2009/06/14 20:26:28 - [] D -- C:\Users\Jaclyne\AppData\Local\Sage Software O43 - CFD: 2008/11/10 12:04:56 - [] D -- C:\Users\Jaclyne\AppData\Local\Scansoft O43 - CFD: 2011/01/17 10:12:40 - [] D -- C:\Users\Jaclyne\AppData\Local\Simply O43 - CFD: 2014/10/31 20:10:18 - [] D -- C:\Users\Jaclyne\AppData\Local\Simply Accounting O43 - CFD: 2014/03/27 08:18:36 - [] D -- C:\Users\Jaclyne\AppData\Local\Skype O43 - CFD: 2010/08/05 21:53:14 - [] D -- C:\Users\Jaclyne\AppData\Local\Sonic_Solutions O43 - CFD: 2015/05/09 13:09:30 - [0] D -- C:\Users\Jaclyne\AppData\Local\SwvUpdater =>PUP.Optional.SoftwareUpdater O43 - CFD: 2015/09/13 20:17:19 - [] D -- C:\Users\Jaclyne\AppData\Local\Temp O43 - CFD: 2008/06/04 16:01:24 - [0] SHD -- C:\Users\Jaclyne\AppData\Local\Temporary Internet Files O43 - CFD: 2010/10/24 14:02:20 - [] D -- C:\Users\Jaclyne\AppData\Local\V-Safe 100 O43 - CFD: 2012/01/19 11:12:16 - [] D -- C:\Users\Jaclyne\AppData\Local\VirtualStore O43 - CFD: 2015/04/29 09:27:30 - [] D -- C:\Users\Jaclyne\AppData\Local\WebEx O43 - CFD: 2010/10/23 10:01:14 - [] D -- C:\Users\Jaclyne\AppData\Local\Western Digital O43 - CFD: 2014/03/01 21:59:30 - [] D -- C:\Users\Jaclyne\AppData\Local\Windows Live O43 - CFD: 2010/12/21 11:09:02 - [] D -- C:\Users\Jaclyne\AppData\Local\Windows Live Writer O43 - CFD: 2008/07/11 21:55:40 - [] D -- C:\Users\Jaclyne\AppData\Local\WindowsUpdate O43 - CFD: 2010/11/19 21:44:20 - [] D -- C:\Users\Jaclyne\AppData\Local\Xenocode O43 - CFD: 2015/04/21 09:46:08 - [0] D -- C:\Users\Jaclyne\AppData\Local\{023CA433-C967-4633-8F27-B93786587DE3} O43 - CFD: 2012/05/15 19:14:00 - [0] D -- C:\Users\Jaclyne\AppData\Local\{03F6C685-578F-4F73-8AD0-55963A48A664} O43 - CFD: 2011/08/07 20:47:43 - [0] D -- C:\Users\Jaclyne\AppData\Local\{055228DB-3A08-4852-B906-A8190B4069B7} O43 - CFD: 2012/05/15 19:31:06 - [0] D -- C:\Users\Jaclyne\AppData\Local\{06003AAC-5CD9-4915-963C-477609FAFAD5} O43 - CFD: 2011/09/02 14:31:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{06972DFE-4506-452A-842E-3943A7D26461} O43 - CFD: 2014/02/05 19:11:36 - [0] D -- C:\Users\Jaclyne\AppData\Local\{06C50E1E-CBC1-46C6-B731-7506D80008F6} O43 - CFD: 2012/01/11 22:14:51 - [0] D -- C:\Users\Jaclyne\AppData\Local\{075EED3D-9DC0-4536-9F56-BCC69577F944} O43 - CFD: 2013/12/14 22:29:39 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0844D111-D1BF-4112-920D-5D44C8DD797A} O43 - CFD: 2012/07/18 21:03:42 - [0] D -- C:\Users\Jaclyne\AppData\Local\{096BBCA2-09FD-48DC-BCE3-01EF48DD0BD1} O43 - CFD: 2014/12/21 17:42:00 - [0] D -- C:\Users\Jaclyne\AppData\Local\{09DC8F6E-1982-40F7-B37A-26EAAA28349D} O43 - CFD: 2011/06/26 10:48:16 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0B972296-4144-4503-8DAA-FDA8E4B864EF} O43 - CFD: 2011/12/02 16:28:42 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0C28855B-336E-4B3E-B7EA-F7F02191BAB2} O43 - CFD: 2014/12/22 21:18:12 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0DFC8476-CE73-43B8-80D1-A5AA44628C70} O43 - CFD: 2015/05/26 08:20:17 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0E987892-92F7-4579-B727-874D16600BA4} O43 - CFD: 2012/05/15 19:39:26 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0FB1A9C1-D833-4838-B81F-7C870E470730} O43 - CFD: 2011/12/02 13:04:54 - [0] D -- C:\Users\Jaclyne\AppData\Local\{0FB30E61-9E0F-4F39-81B3-9FA22C61536B} O43 - CFD: 2013/10/27 18:31:44 - [0] D -- C:\Users\Jaclyne\AppData\Local\{11B11919-A4F1-4E5B-B8B7-56302682B207} O43 - CFD: 2014/01/24 13:29:49 - [0] D -- C:\Users\Jaclyne\AppData\Local\{12C7A90B-F3F8-46C2-9160-C99FD48DF58D} O43 - CFD: 2014/01/18 20:05:03 - [0] D -- C:\Users\Jaclyne\AppData\Local\{14AC88C9-5CC8-4C02-B6D0-46B28CA2CEA8} O43 - CFD: 2014/06/28 21:50:37 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1688970A-5F21-4141-9588-C7462DD9A620} O43 - CFD: 2011/12/02 10:39:42 - [0] D -- C:\Users\Jaclyne\AppData\Local\{19DE1D08-0EDA-484E-90B0-94979BE9D8F5} O43 - CFD: 2015/06/09 20:58:17 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1A31035E-1B9E-495A-A9B2-6D1A57559846} O43 - CFD: 2012/05/15 19:13:59 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1CFDCE7E-5EAF-44D3-97BE-EEB26AB25040} O43 - CFD: 2012/08/20 10:25:24 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1EB1AD1F-DE7A-4ADC-AF5A-3D56E6D523F1} O43 - CFD: 2012/07/18 20:55:22 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1F628BDD-48D3-47A2-92A6-45A76B4D86C1} O43 - CFD: 2014/07/06 13:20:19 - [0] D -- C:\Users\Jaclyne\AppData\Local\{1FDFA1F5-21D1-44E2-8FD4-0202F316B5F5} O43 - CFD: 2012/02/05 18:32:42 - [0] D -- C:\Users\Jaclyne\AppData\Local\{2247B26C-9745-4499-B653-784E9D55B84B} O43 - CFD: 2012/07/04 18:32:20 - [0] D -- C:\Users\Jaclyne\AppData\Local\{25B10EB4-2402-4963-8576-C2F077182C4D} O43 - CFD: 2014/01/06 18:49:26 - [0] D -- C:\Users\Jaclyne\AppData\Local\{28E59346-8221-4F6E-8C25-77E8CC10B9C9} O43 - CFD: 2011/11/09 12:21:41 - [0] D -- C:\Users\Jaclyne\AppData\Local\{293B0273-22B5-4BED-A4B9-313ACF69A696} O43 - CFD: 2012/05/15 10:43:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{299DB1AC-21DE-489C-A891-781350242B99} O43 - CFD: 2012/03/05 22:06:46 - [0] D -- C:\Users\Jaclyne\AppData\Local\{2B1D1308-8728-4DC8-AB67-AF9B7BE5FA4B} O43 - CFD: 2013/02/16 13:45:04 - [0] D -- C:\Users\Jaclyne\AppData\Local\{3363DBDB-D529-47AB-B919-F1130D57DC9A} O43 - CFD: 2013/05/04 15:19:13 - [0] D -- C:\Users\Jaclyne\AppData\Local\{3467EB0B-2286-41FA-8934-C53A30FD2850} O43 - CFD: 2012/09/19 20:01:49 - [0] D -- C:\Users\Jaclyne\AppData\Local\{352E484C-4383-4F3B-B53C-828AE6AA4187} O43 - CFD: 2012/05/15 19:44:55 - [0] D -- C:\Users\Jaclyne\AppData\Local\{364C729E-B300-4DF6-9913-4CF55E981AEB} O43 - CFD: 2014/12/15 22:13:47 - [0] D -- C:\Users\Jaclyne\AppData\Local\{367CB81F-0583-40CA-B9B9-DA1FD12B317E} O43 - CFD: 2015/06/08 19:43:11 - [0] D -- C:\Users\Jaclyne\AppData\Local\{377F598A-2547-48D0-A765-4FEFAF4B7D9B} O43 - CFD: 2011/11/20 18:54:45 - [0] D -- C:\Users\Jaclyne\AppData\Local\{378E1307-E97D-468D-822B-2382F0C36658} O43 - CFD: 2012/08/24 11:36:55 - [0] D -- C:\Users\Jaclyne\AppData\Local\{394DE552-4037-4E32-81C1-1586A28C83ED} O43 - CFD: 2012/06/09 18:24:16 - [0] D -- C:\Users\Jaclyne\AppData\Local\{3B298CF6-C6AC-4A3C-AF6C-76AA3A41268E} O43 - CFD: 2015/04/19 16:30:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{3C01C330-2541-4770-BD2F-72E09C630767} O43 - CFD: 2012/01/11 22:14:50 - [0] D -- C:\Users\Jaclyne\AppData\Local\{3E812BAC-D40B-4543-9A23-040E39AA7AC1} O43 - CFD: 2012/03/05 20:58:20 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4077A77C-E709-4E4B-83D6-58D017FB09DC} O43 - CFD: 2011/09/22 18:32:13 - [0] D -- C:\Users\Jaclyne\AppData\Local\{40D46F0D-2CEA-497F-8E25-31033D28D145} O43 - CFD: 2012/01/04 23:01:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4114176D-92EE-438A-BB86-3F25E41A6A29} O43 - CFD: 2011/11/09 12:21:39 - [0] D -- C:\Users\Jaclyne\AppData\Local\{42B712A2-AB87-4542-9702-8A4DB9478598} O43 - CFD: 2012/07/04 18:32:22 - [0] D -- C:\Users\Jaclyne\AppData\Local\{43B89DF1-223F-4303-8944-8EB1CBA5FB93} O43 - CFD: 2014/03/01 21:59:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4516FA21-2277-4470-BB68-A00836BEF8FA} O43 - CFD: 2012/05/21 16:02:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{461EC13E-360B-443A-9827-4BCC9A07BF8D} O43 - CFD: 2012/05/15 19:24:57 - [0] D -- C:\Users\Jaclyne\AppData\Local\{46AC4DBE-841E-4CB5-8FF6-169905DBADCB} O43 - CFD: 2015/04/29 17:29:46 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4764B449-A7E9-4BAD-B9A7-3F35E79ED759} O43 - CFD: 2012/03/05 21:09:15 - [0] D -- C:\Users\Jaclyne\AppData\Local\{47936FAE-8A40-4827-8C99-9088A0711FE8} O43 - CFD: 2012/07/18 20:55:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{483E4931-4D4C-4967-A6FF-A4F821D11C03} O43 - CFD: 2013/06/16 14:43:02 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4B8CADE4-B30B-4C95-B890-68A0AE06B2B0} O43 - CFD: 2012/03/05 22:06:47 - [0] D -- C:\Users\Jaclyne\AppData\Local\{4C199DFE-2079-4957-91AA-4903BB3C9062} O43 - CFD: 2012/09/13 16:47:20 - [0] D -- C:\Users\Jaclyne\AppData\Local\{504C5EA0-56E0-4B38-87F2-792C0F4BCDD6} O43 - CFD: 2012/06/09 18:24:38 - [0] D -- C:\Users\Jaclyne\AppData\Local\{50AC43EC-2141-47C9-988D-FB53A8DA5ADD} O43 - CFD: 2011/12/10 20:56:48 - [0] D -- C:\Users\Jaclyne\AppData\Local\{51050496-3EEE-4707-8746-6A5D5DFC76D2} O43 - CFD: 2012/03/05 21:09:14 - [0] D -- C:\Users\Jaclyne\AppData\Local\{53E59B5A-C96F-447A-A411-94B0BBFFF653} O43 - CFD: 2014/01/18 19:50:45 - [0] D -- C:\Users\Jaclyne\AppData\Local\{55130FF4-8037-4B53-B5A7-1F353C17F136} O43 - CFD: 2015/03/06 20:42:06 - [0] D -- C:\Users\Jaclyne\AppData\Local\{55389700-C74C-4580-A65A-B5489CFE05AF} O43 - CFD: 2012/08/05 09:18:33 - [0] D -- C:\Users\Jaclyne\AppData\Local\{5570C91F-0832-49DA-A395-66AAC14130DF} O43 - CFD: 2013/06/13 21:27:01 - [0] D -- C:\Users\Jaclyne\AppData\Local\{58C85631-2F50-4693-B18D-F4C347EEBDD5} O43 - CFD: 2012/05/15 19:24:56 - [0] D -- C:\Users\Jaclyne\AppData\Local\{59C89C47-841C-40B3-9D79-E9D28BB3267A} O43 - CFD: 2014/02/09 15:59:15 - [0] D -- C:\Users\Jaclyne\AppData\Local\{5AB17525-2904-439F-AF3A-9A662225D2DF} O43 - CFD: 2014/01/19 16:21:13 - [0] D -- C:\Users\Jaclyne\AppData\Local\{5D0B53A6-2753-4E2D-B213-BAEC1FE17609} O43 - CFD: 2011/09/11 20:00:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\{5D84AE7A-8589-48A0-AC6E-1257B28B25E0} O43 - CFD: 2013/02/17 10:28:39 - [0] D -- C:\Users\Jaclyne\AppData\Local\{5EE0CCB3-4693-4722-988A-D9499DA47AB8} O43 - CFD: 2012/05/15 19:44:55 - [0] D -- C:\Users\Jaclyne\AppData\Local\{61DBDE05-E7D7-46E9-88F3-9A5E071C2578} O43 - CFD: 2011/12/11 17:41:16 - [0] D -- C:\Users\Jaclyne\AppData\Local\{64E18F54-D719-43D5-A7CE-BC50808D4C90} O43 - CFD: 2012/05/15 19:39:27 - [0] D -- C:\Users\Jaclyne\AppData\Local\{65A5726E-01D2-4512-BB0E-DE3157D4FF08} O43 - CFD: 2011/12/02 12:29:26 - [0] D -- C:\Users\Jaclyne\AppData\Local\{65E46450-20E2-4220-A8A0-100C449A7489} O43 - CFD: 2011/12/02 12:29:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{69D9678D-40BE-497E-96CD-EAF0BADEEABC} O43 - CFD: 2015/05/06 09:30:31 - [0] D -- C:\Users\Jaclyne\AppData\Local\{6B0E0750-B67D-4E91-A0B8-7894C8EFE6DF} O43 - CFD: 2013/03/01 20:47:15 - [0] D -- C:\Users\Jaclyne\AppData\Local\{6C827FAC-94C6-4D26-93A1-46447461F594} O43 - CFD: 2012/05/21 16:02:30 - [0] D -- C:\Users\Jaclyne\AppData\Local\{712C4D24-DBD8-4C7B-84C3-0262CFAA310F} O43 - CFD: 2012/05/15 19:31:06 - [0] D -- C:\Users\Jaclyne\AppData\Local\{72250029-538A-4374-AF79-D439AA4C4A5F} O43 - CFD: 2014/08/01 21:15:37 - [0] D -- C:\Users\Jaclyne\AppData\Local\{72F83758-2CC7-44AB-936A-2952BE2B8A38} O43 - CFD: 2012/05/15 19:57:08 - [0] D -- C:\Users\Jaclyne\AppData\Local\{738844DD-D2D6-4A91-83C8-1262D6478ACE} O43 - CFD: 2013/12/22 14:51:37 - [0] D -- C:\Users\Jaclyne\AppData\Local\{7446331E-522D-42C8-A5F7-0AC39FF97355} O43 - CFD: 2013/06/20 21:03:43 - [0] D -- C:\Users\Jaclyne\AppData\Local\{74652032-E9BA-432B-8349-E5CA5D331AD1} O43 - CFD: 2013/05/03 20:20:10 - [0] D -- C:\Users\Jaclyne\AppData\Local\{772CFA71-94AD-4A2B-9AB0-A0B539717CEE} O43 - CFD: 2011/09/22 18:32:58 - [0] D -- C:\Users\Jaclyne\AppData\Local\{77BC68C7-CC49-4113-BE8A-BBA8CF2DF55F} O43 - CFD: 2011/11/26 21:29:39 - [0] D -- C:\Users\Jaclyne\AppData\Local\{7A0885F1-0737-4AE3-92F0-B650682A5EEC} O43 - CFD: 2012/06/21 09:04:59 - [0] D -- C:\Users\Jaclyne\AppData\Local\{7FE2E4EB-864B-4763-965B-711E38069664} O43 - CFD: 2012/05/27 10:58:22 - [0] D -- C:\Users\Jaclyne\AppData\Local\{80E5E7FE-4730-413A-92C3-9689B2017EA1} O43 - CFD: 2014/07/03 09:37:45 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8522ED33-5327-4FC7-A908-6634067858F9} O43 - CFD: 2012/10/31 10:19:51 - [0] D -- C:\Users\Jaclyne\AppData\Local\{86937AB4-4175-4138-AC7A-459EB8BA49F0} O43 - CFD: 2012/05/27 10:58:21 - [0] D -- C:\Users\Jaclyne\AppData\Local\{86BCD5B8-83EA-4706-AAEF-2F1893FC8D38} O43 - CFD: 2011/06/29 18:15:38 - [0] D -- C:\Users\Jaclyne\AppData\Local\{89447B2C-797E-4F71-87C1-A88180FA2E34} O43 - CFD: 2011/12/02 16:28:41 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8B002D48-A033-4DFB-9B81-507A6F83B1E6} O43 - CFD: 2014/09/08 10:20:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8BDF69E1-36FE-4A51-A458-3007844EFF36} O43 - CFD: 2011/06/27 10:42:57 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8D0A1E0F-22D8-4CB7-9331-5EABE8F3A289} O43 - CFD: 2011/12/02 16:27:15 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8D3506E1-2E68-4919-879C-DA7EC5621C97} O43 - CFD: 2012/06/09 18:40:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{8E15CB18-2C33-4232-9D85-4E35076B04FF} O43 - CFD: 2011/12/24 22:18:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{90026371-C3A5-4E1B-B599-E89D114B277A} O43 - CFD: 2013/02/04 13:36:24 - [0] D -- C:\Users\Jaclyne\AppData\Local\{91C91BCA-FB8D-4B89-970B-62EFF5C1B53A} O43 - CFD: 2014/08/05 22:17:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{92C60DB8-9C38-45F0-BE2A-D8E299D8CE3E} O43 - CFD: 2013/08/05 09:51:32 - [0] D -- C:\Users\Jaclyne\AppData\Local\{92F12BB5-6CAA-4C27-AE88-EC3205C1B2CF} O43 - CFD: 2012/03/05 22:02:01 - [0] D -- C:\Users\Jaclyne\AppData\Local\{93D0369E-9C31-45C3-8BD6-1281A599353E} O43 - CFD: 2012/05/27 10:23:16 - [0] D -- C:\Users\Jaclyne\AppData\Local\{94688F26-6CE9-45AE-8824-539D10F433EF} O43 - CFD: 2011/11/20 18:54:46 - [0] D -- C:\Users\Jaclyne\AppData\Local\{95DDB2FF-F249-43D1-A6CD-B70C197E23C8} O43 - CFD: 2011/12/26 18:39:44 - [0] D -- C:\Users\Jaclyne\AppData\Local\{98224F5E-B1E5-4029-BB4A-4505C5C48197} O43 - CFD: 2012/05/27 11:29:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{9AD7D061-40EC-4363-BC47-0DED8E0817C2} O43 - CFD: 2014/01/18 22:06:08 - [0] D -- C:\Users\Jaclyne\AppData\Local\{9E8D7854-8999-48E7-B0B8-11CC8C9235ED} O43 - CFD: 2012/06/21 09:05:04 - [0] D -- C:\Users\Jaclyne\AppData\Local\{9F1F9107-00D9-482C-A741-D820A1B07722} O43 - CFD: 2012/02/05 18:32:41 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A033BED5-359E-4D3A-B6B3-0F679809BF86} O43 - CFD: 2014/01/18 19:43:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A09D1AE5-E91B-490F-8F7B-85C33FC4ACB3} O43 - CFD: 2013/01/28 22:35:07 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A12CEAFA-ED17-465F-A251-8DB2362C41C9} O43 - CFD: 2012/08/05 09:18:30 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A257E0E6-339B-4451-B78F-156CCEF4F590} O43 - CFD: 2015/07/06 09:33:20 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A3560381-2C2B-4F68-A3DB-03E9EDAF9429} O43 - CFD: 2015/06/08 19:45:41 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A7D98D15-7080-4347-A7BA-C4E83B3EAE9B} O43 - CFD: 2012/07/18 20:55:52 - [0] D -- C:\Users\Jaclyne\AppData\Local\{A88932BA-6133-4D6A-B213-AF84856DD570} O43 - CFD: 2011/12/10 20:56:49 - [0] D -- C:\Users\Jaclyne\AppData\Local\{AA4961A0-9A37-4EB4-B8A8-E89891A7B19A} O43 - CFD: 2014/02/26 12:03:44 - [0] D -- C:\Users\Jaclyne\AppData\Local\{AB028644-9E11-40D6-A0FE-E232765F8299} O43 - CFD: 2012/11/05 10:16:28 - [0] D -- C:\Users\Jaclyne\AppData\Local\{AB3BD3D3-2751-45BF-B454-744F7D1F457B} O43 - CFD: 2011/09/13 09:48:47 - [0] D -- C:\Users\Jaclyne\AppData\Local\{AEF78594-97A5-4AD2-98F0-35A8DF4E6A85} O43 - CFD: 2013/05/02 21:36:22 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B0039797-FA37-4528-8754-DC304431C8E8} O43 - CFD: 2013/02/18 09:52:01 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B1F477FD-91D3-47F1-B917-A5BC07EA475C} O43 - CFD: 2014/01/25 16:02:56 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B22B1D8F-0CCA-4B92-8040-D43084B9838F} O43 - CFD: 2011/12/24 22:18:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B27AD263-58FD-4108-9998-794B415B721E} O43 - CFD: 2011/09/11 20:00:26 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B51D2825-B70C-4D86-AEB8-63931474B8EC} O43 - CFD: 2012/06/09 18:40:41 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B555ACB7-3F9A-4FD9-A72F-80DF7ADAFD98} O43 - CFD: 2012/07/18 21:03:45 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B8917B9D-F7A8-403D-ACD7-5D955AF0686F} O43 - CFD: 2013/03/17 17:58:25 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B89DD242-6CAC-47C0-805F-E4EE0957E965} O43 - CFD: 2013/11/16 21:43:57 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B8E2DEA9-4350-4296-A793-C0486F54AC68} O43 - CFD: 2011/11/26 21:29:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B93FAF21-598E-45BF-9925-1876DB5ECA89} O43 - CFD: 2012/05/27 10:23:21 - [0] D -- C:\Users\Jaclyne\AppData\Local\{B9AD60FE-AA93-4B8D-9C56-66B42624FD44} O43 - CFD: 2011/12/26 18:39:45 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BAB2D918-53E9-4FD2-9208-683C14CC4F3D} O43 - CFD: 2013/05/22 21:52:11 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BB76252E-70AA-424E-A81D-00C95DD23BE6} O43 - CFD: 2014/12/07 22:33:11 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BCF1A374-84AC-4E38-A439-6890464AD48F} O43 - CFD: 2011/08/07 20:48:50 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BD998BC9-BB08-498A-A1AE-8944E509D0FD} O43 - CFD: 2014/07/15 20:13:10 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BE51EF4D-983F-4860-B4F7-405171E49E8B} O43 - CFD: 2014/01/20 20:22:43 - [0] D -- C:\Users\Jaclyne\AppData\Local\{BE52C8D3-C5CB-4B40-B3F0-5028074A5605} O43 - CFD: 2012/05/27 11:29:39 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C293F7BB-AF3F-4625-BEDD-227156222A61} O43 - CFD: 2011/06/29 18:22:16 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C3B4786C-3B3E-4AC1-9590-C5461E0D5B3C} O43 - CFD: 2014/01/20 20:21:02 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C41869C1-7620-43AE-99E1-703E6557BC8A} O43 - CFD: 2015/03/08 15:59:11 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C42A6CDC-BB3D-4CD7-B4D6-2C0494729932} O43 - CFD: 2012/10/08 15:19:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C4548962-8349-4ED5-997C-6DA268870BE5} O43 - CFD: 2015/04/21 09:47:02 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C52DD06D-EA19-4722-AC90-21AA2C62CD46} O43 - CFD: 2014/01/26 10:47:44 - [0] D -- C:\Users\Jaclyne\AppData\Local\{C887B215-A515-4D43-968A-112807A788E4} O43 - CFD: 2015/01/25 15:57:19 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CA2BB2E2-26C2-496B-8FA1-CA9C0BCA0A94} O43 - CFD: 2012/07/18 20:55:50 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CA4FD6B9-4FCE-43D5-AF7A-FD2977537752} O43 - CFD: 2012/12/21 19:53:57 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CA5D4334-BD6E-41BC-9A48-4DE1EE4DD8A4} O43 - CFD: 2012/05/05 18:36:22 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CBE4A33B-EDDA-4DE4-8404-A01BC36F404F} O43 - CFD: 2012/08/06 11:37:58 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CD26A006-53DB-4B20-82FF-0B26AD81D6EE} O43 - CFD: 2011/09/02 14:31:29 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CDF34D0F-F20D-430F-AC93-E5DB53EDDB57} O43 - CFD: 2012/11/17 11:32:53 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CDFA1514-C6D6-4DBD-A9AC-259037394F7D} O43 - CFD: 2012/05/15 19:57:09 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CE57DD3F-62DF-410B-BDBD-95C0CFBA271D} O43 - CFD: 2011/12/02 10:39:40 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CEEDEC15-D1D7-4B03-8A1A-AD9571D1CB1E} O43 - CFD: 2011/12/02 16:27:14 - [0] D -- C:\Users\Jaclyne\AppData\Local\{CF03511E-1A92-4069-8B98-366E528B95CB} O43 - CFD: 2011/06/30 19:03:26 - [0] D -- C:\Users\Jaclyne\AppData\Local\{D2404CF4-D1AE-4181-B016-AC501DDA9141} O43 - CFD: 2011/09/22 18:32:14 - [0] D -- C:\Users\Jaclyne\AppData\Local\{D9FEC12A-AA64-4B25-B961-AD5665DDCDE0} O43 - CFD: 2013/06/01 20:16:27 - [0] D -- C:\Users\Jaclyne\AppData\Local\{DF4D9096-9C29-4F40-955C-22EBAAA81F9B} O43 - CFD: 2012/03/05 22:02:02 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E12CA7B6-131E-478D-A46E-1D7723195D54} O43 - CFD: 2012/11/20 11:45:53 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E15F91BD-14F6-4862-B3AD-88F41E3B7A4B} O43 - CFD: 2012/01/04 23:01:42 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E1FC3236-62A0-4F33-888B-9764FB8F6A95} O43 - CFD: 2012/09/16 19:10:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E2E57A62-9564-4BA0-82BC-4F5A96B9DE66} O43 - CFD: 2012/05/27 21:57:00 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E39A0FEF-82FD-43F4-85EE-428F951FEB41} O43 - CFD: 2015/05/05 10:14:34 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E4714570-5966-4B3F-AB30-D40511A0AA00} O43 - CFD: 2015/05/23 21:17:21 - [0] D -- C:\Users\Jaclyne\AppData\Local\{E6B5F891-E877-4006-A8E7-7EE796FBF558} O43 - CFD: 2012/05/27 21:57:01 - [0] D -- C:\Users\Jaclyne\AppData\Local\{EB8D7B3F-1D69-4D4A-8302-83FB169F7CC8} O43 - CFD: 2011/12/11 17:41:15 - [0] D -- C:\Users\Jaclyne\AppData\Local\{EDB79155-01E9-4A17-960E-E124CA736272} O43 - CFD: 2013/02/15 11:19:07 - [0] D -- C:\Users\Jaclyne\AppData\Local\{EFD3E973-96BA-4232-B8BD-A0BF587A2D2E} O43 - CFD: 2013/06/30 10:38:19 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F148F29C-DF02-4F5B-A59A-5EB10D2A4B24} O43 - CFD: 2012/08/06 11:37:57 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F2F1818B-8CB0-4CEF-B6FF-2365EE58597C} O43 - CFD: 2013/02/13 20:33:44 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F501C2B9-88B1-4EA7-972E-7532993F3B81} O43 - CFD: 2012/08/26 20:20:23 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F747D61F-DBBE-44A8-A273-916A512B5EE8} O43 - CFD: 2011/06/12 22:10:49 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F7676693-3DE4-4D4D-936D-8B0F469FC0DD} O43 - CFD: 2011/12/02 13:04:53 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F7B7147E-54D2-406A-84A9-16006C44100C} O43 - CFD: 2014/04/18 17:58:11 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F7B9C779-A89B-4D6C-ABC7-E962BE340D39} O43 - CFD: 2012/03/05 20:58:21 - [0] D -- C:\Users\Jaclyne\AppData\Local\{F7FC50A4-FAEA-422D-9B2D-B394FDAFAD8B} O43 - CFD: 2012/08/25 08:53:49 - [0] D -- C:\Users\Jaclyne\AppData\Local\{FBC2D502-CA18-4349-830F-09961184B1F8} O43 - CFD: 2011/09/13 09:48:46 - [0] D -- C:\Users\Jaclyne\AppData\Local\{FC14FF67-D7BE-43DF-A20A-9B79FBE1CBA0} O43 - CFD: 2012/05/15 10:43:28 - [0] D -- C:\Users\Jaclyne\AppData\Local\{FC3D9FA0-6310-4A99-A9F1-C6710BEFBA57} O43 - CFD: 2011/09/22 18:32:58 - [0] D -- C:\Users\Jaclyne\AppData\Local\{FE347E1C-58F3-4E3E-98FC-9EB838027642} O43 - CFD: 2015/03/08 15:58:13 - [0] D -- C:\Users\Jaclyne\AppData\Local\{FEBA0AC7-DC56-4946-9FFF-00DEBF309700} O43 - CFD: 2008/05/28 14:56:31 - [] RD -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2008/06/04 16:02:28 - [] RD -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/09/01 09:45:39 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 2008/12/13 23:07:59 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flash Movie Player O43 - CFD: 2008/06/06 16:38:20 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gmail Notifier O43 - CFD: 2015/03/07 15:07:25 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 2008/05/28 14:56:31 - [] RD -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2014/07/20 21:08:13 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MétéoMédia O43 - CFD: 2015/09/01 09:45:56 - [] RD -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2015/05/25 09:52:45 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TurboMeeting O43 - CFD: 2014/09/08 10:56:00 - [0] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat O43 - CFD: 2008/06/06 16:56:57 - [] D -- C:\Users\Jaclyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (3) - 5s O45 - LFCP:[MD5.2C0E8C129D4138FA245BF9BB78B882C3] 2015/09/13 19:45:06 A -- C:\Windows\Prefetch\DOWNSPEEDTEST.F0B5A91367614C6-7AF27FE1.pf =>PUP.Optional.ScriptHost O45 - LFCP:[MD5.E23C016688BDA262D1BB19AE73B5E70D] 2015/09/13 19:45:03 A -- C:\Windows\Prefetch\DOWNSPEEDTEST.F0B5A91367614C6-89F50B9C.pf =>PUP.Optional.ScriptHost O45 - LFCP:[MD5.EB6D08075B9555E61925AD1ECB865310] 2015/09/13 19:45:14 A -- C:\Windows\Prefetch\DOWNSPEEDTESTSETUP.EXE-FA989BB7.pf =>PUP.Optional.ScriptHost ---\\ Enumération des clés StartupReg (30) - 2s O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe © O53 - SMSR:HKLM\...\startupreg\Browser Extensions [Key] . (...) -- C:\Users\Jaclyne\AppData\Roaming\BrowserExtensions\BEHelper.exe (.not file.) =>PUP.Optional.BrowserExtensions O53 - SMSR:HKLM\...\startupreg\CPMonitor [Key] . (.Copyright (C) 2008 - CPMonitor Application.) -- C:\Program Files\Roxio 2010\5.0\CPMonitor.exe O53 - SMSR:HKLM\...\startupreg\DELL Webcam Manager [Key] . (.Creative Technology Ltd. - Dell Webcam Manager Application.) -- C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe © O53 - SMSR:HKLM\...\startupreg\DellSupportCenter [Key] . (...) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Desktop Disc Tool [Key] . (.Copyright 2008 - Roxio Burn Launcher.) -- C:\Program Files\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe O53 - SMSR:HKLM\...\startupreg\ECenter [Key] . (...) -- C:\DELL\E-Center\EULALauncher.exe O53 - SMSR:HKLM\...\startupreg\eDealPop [Key] . (...) -- C:\Program Files\eDealPop\eDealPop.exe (.not file.) =>PUP.Optional.eDeals O53 - SMSR:HKLM\...\startupreg\ehTray.exe [Key] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe © O53 - SMSR:HKLM\...\startupreg\Google Desktop Search [Key] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe © O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe © O53 - SMSR:HKLM\...\startupreg\IndexSearch [Key] . (.Nuance Communications, Inc. - PaperPort IndexSearch.) -- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe © O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe © O53 - SMSR:HKLM\...\startupreg\mobilegeni daemon [Key] . (...) -- C:\Program Files\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Optional.Mobogenie O53 - SMSR:HKLM\...\startupreg\OEM05Mon.exe [Key] . (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\OEM05Mon.exe © O53 - SMSR:HKLM\...\startupreg\OpwareSE4 [Key] . (.Nuance Communications, Inc. - OCR Aware.) -- C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe © O53 - SMSR:HKLM\...\startupreg\PaperPort PTD [Key] . (.Nuance Communications, Inc. - PaperPort Print to Desktop for NT.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe © O53 - SMSR:HKLM\...\startupreg\PPort11reminder [Key] . (.Nuance Communications, Inc. - Ereg.) -- C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe © O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe © O53 - SMSR:HKLM\...\startupreg\RoxWatchTray [Key] . (.Sonic Solutions - RoxMMTrayApp Module.) -- C:\Program Files\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatchTray12.exe © O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - HD Audio Control Panel.) -- RtHDVCpl.exe (.not file.) © O53 - SMSR:HKLM\...\startupreg\Settings Manager [Key] . (...) -- C:\Users\Jaclyne\AppData\Roaming\Settings Manager\SettingsManager.EXE (.not file.) =>PUP.Optional.SettingsManager O53 - SMSR:HKLM\...\startupreg\Sidebar [Key] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe © O53 - SMSR:HKLM\...\startupreg\SSBkgdUpdate [Key] . (.Nuance Communications, Inc. - SSBkgdUpdate.) -- C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe © O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (...) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O53 - SMSR:HKLM\...\startupreg\StatusAlerts [Key] . (.Hewlett-Packard Company - HPStatusAlerts.) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe © O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (...) -- C:\Program Files\Java\jre6\bin\jusched.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Super Optimizer [Key] . (...) -- C:\Program Files\Super Optimizer\SupOptLauncher.exe (.not file.) =>PUP.Optional.SuperOptimizer O53 - SMSR:HKLM\...\startupreg\swg [Key] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe © ---\\ Liste des pilotes du système (89) - 25s O58 - SDL:2006/11/02 05:51:38 N . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [420968] © O58 - SDL:2006/11/02 05:51:32 N . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297576] © O58 - SDL:2006/11/02 05:50:35 N . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\drivers\adpu160m.sys [98408] © O58 - SDL:2006/11/02 05:51:00 N . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [147048] © O58 - SDL:2008/05/28 22:43:32 N . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [17464] © O58 - SDL:2006/11/02 05:50:09 N . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [67688] © O58 - SDL:2006/11/02 05:50:10 N . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [67688] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [24016] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [76000] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! TDI Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [55200] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [49776] © O58 - SDL:2015/09/08 19:12:12 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [788784] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [433264] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! Stream Filter.) -- C:\Windows\System32\drivers\aswStmXP.sys [161472] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [57888] © O58 - SDL:2015/09/08 19:12:20 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [208664] © O58 - SDL:2007/08/20 01:08:08 N . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [2930176] © O58 - SDL:2006/11/02 04:24:45 N . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] © O58 - SDL:2006/11/02 04:24:46 N . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] © O58 - SDL:2006/11/02 04:25:24 N . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [71808] © O58 - SDL:2006/12/12 12:28:26 N . (.Brother Industries Ltd. - Brotehr Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerIf.sys [52224] © O58 - SDL:2006/11/02 04:24:44 N . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] © O58 - SDL:2006/11/02 04:24:44 N . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] © O58 - SDL:2006/09/03 10:53:54 N . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] © O58 - SDL:2009/06/23 03:00:00 A . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see Px.) -- C:\Windows\System32\drivers\cdr4_xp.sys [9072] © O58 - SDL:2009/06/23 03:00:00 A . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\Windows\System32\drivers\cdralw2k.sys [9200] © O58 - SDL:2008/05/28 22:43:32 N . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [19000] © O58 - SDL:2006/11/02 05:50:11 N . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [71272] © O58 - SDL:2007/04/29 04:42:24 N . (.Intel Corporation - Intel(R) PRO/1000 Adapter NDIS 6 deserializ.) -- C:\Windows\System32\drivers\e1e6032.sys [228224] © O58 - SDL:2006/11/02 03:30:54 N . (.Intel Corporation - Intel(R) PRO/1000 Adapter NDIS 6 deserializ.) -- C:\Windows\System32\drivers\E1G60I32.sys [117760] © O58 - SDL:2006/11/02 05:51:34 N . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [316520] © O58 - SDL:2012/08/21 14:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840] © O58 - SDL:2006/11/02 05:50:10 N . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [37480] © O58 - SDL:2012/11/07 23:00:45 A . (.Copyright (C) 2008-2009 HP Semiconductor - HP Fax Software Driver.) -- C:\Windows\System32\drivers\HPM1210FAX.sys [13824] O58 - SDL:2007/04/26 06:41:38 N . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStor.sys [304920] © O58 - SDL:2006/11/02 05:51:25 N . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [232040] © O58 - SDL:2006/11/02 05:50:17 N . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41576] © O58 - SDL:2007/03/09 18:04:42 N . (.Intel Corporation - Intel(R) Network Adapter Diagnostic Driver.) -- C:\Windows\System32\drivers\iqvw32.sys [31072] © O58 - SDL:2006/11/02 05:50:07 N . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [35944] © O58 - SDL:2006/11/02 05:50:09 N . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [35944] © O58 - SDL:2007/01/15 18:57:08 A . (...) -- C:\Windows\System32\drivers\livecamv.sys [31616] O58 - SDL:2006/11/02 05:50:04 N . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [65640] © O58 - SDL:2006/11/02 05:50:05 N . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [65640] © O58 - SDL:2006/11/02 05:50:10 N . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [65640] © O58 - SDL:2003/06/26 23:05:38 N . (.Logitech Inc. - Video Minidriver.) -- C:\Windows\System32\drivers\lvcm.sys [472332] © O58 - SDL:2003/06/26 23:03:48 N . (.Logitech Inc. - USB Statistic Driver.) -- C:\Windows\System32\drivers\LVUSBSta.sys [12112] © O58 - SDL:2006/11/02 05:49:53 N . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [28776] © O58 - SDL:2006/11/02 05:49:59 N . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [33384] © O58 - SDL:2012/11/07 23:00:46 A . (.Marvell Semiconductor, Inc. - USB EWS Device Driver.) -- C:\Windows\System32\drivers\mvusbews.sys [16896] © O58 - SDL:2006/11/02 05:50:19 N . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45160] © O58 - SDL:2015/09/08 19:12:11 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\Windows\System32\drivers\ngvss.sys [95112] © O58 - SDL:2006/11/02 03:36:50 N . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablett.) -- C:\Windows\System32\drivers\ntrigdigi.sys [20608] © O58 - SDL:2006/11/02 05:50:24 N . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [88680] © O58 - SDL:2006/11/02 05:50:13 N . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [40040] © O58 - SDL:2007/08/22 01:39:04 A . (.Creative Technology Ltd. - Advanced Audio FX Driver.) -- C:\Windows\System32\drivers\OEM05Afx.sys [141376] © O58 - SDL:2007/08/22 01:39:18 A . (.EyePower Games Pte. Ltd. - Advanced Video FX Filter Driver (Win2K bas.) -- C:\Windows\System32\drivers\OEM05Vfx.sys [7424] O58 - SDL:2007/08/22 01:39:20 A . (.Creative Technology Ltd. - Video Capture Device Driver.) -- C:\Windows\System32\drivers\OEM05Vid.sys [235616] © O58 - SDL:2009/07/09 03:00:00 A . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\Windows\System32\drivers\pxhelp20.sys [45200] © O58 - SDL:2006/11/02 05:51:45 N . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [900712] © O58 - SDL:2006/11/02 05:50:35 N . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106088] © O58 - SDL:2007/05/11 09:26:46 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [1773536] © O58 - SDL:2006/11/02 02:37:21 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] © O58 - SDL:2006/11/02 05:50:10 N . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [38504] © O58 - SDL:2006/11/02 05:50:16 N . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [71784] © O58 - SDL:2006/11/02 05:50:05 N . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [35944] © O58 - SDL:2006/11/02 05:49:56 N . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [31848] © O58 - SDL:2006/11/02 05:50:03 N . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [34920] © O58 - SDL:2006/11/02 05:51:25 N . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [235112] © O58 - SDL:2006/11/02 05:50:35 N . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [98408] © O58 - SDL:2006/11/02 05:50:45 N . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\drivers\ulsata2.sys [115816] © O58 - SDL:2010/09/28 16:44:52 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [41984] © O58 - SDL:2008/05/28 22:43:32 N . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [20024] © O58 - SDL:2006/11/02 05:50:41 N . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\System32\drivers\vsmraid.sys [112232] © O58 - SDL:2009/02/13 12:02:52 A . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\Windows\System32\drivers\wdcsam.sys [11520] © O58 - SDL:2006/11/02 03:09:42 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2006/11/02 03:09:45 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2006/11/02 03:09:41 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2006/11/02 03:09:44 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2006/11/02 03:09:44 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2006/11/02 03:09:29 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2006/11/02 03:09:35 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2006/11/02 03:09:38 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2006/11/02 03:09:40 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2006/11/02 03:09:31 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2006/11/02 03:09:20 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2006/11/02 03:09:23 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2006/11/02 03:09:24 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2006/11/02 03:09:26 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2006/11/02 03:09:22 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ---\\ Associations Shell Spawning (11) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe © ---\\ Menu de démarrage Internet (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Recherche d'infection sur les navigateurs (5) - 8s O69 - SBI: prefs.js [Jaclyne - 7dzcjqjo.default-1408659274778] user_pref("browser.search.selectedEngine", "AVG Secure Search"); =>Toolbar.AVGSearch O69 - SBI: prefs.js [Jaclyne - 7dzcjqjo.default-1408659274778] user_pref("startpage.ntsearch_url", "https://search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=523482&p={searchTerms}")[...] =>PUP.Optional.Dealio O69 - SBI: SearchScopes [HKCU] {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} [DefaultScope] - (Bing (by Mircosoft)) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {95B7759C-8C7F-4BF1-B163-73684A933233} - (AVG Secure Search) - http://mysearch.avg.com/ O69 - SBI: SearchScopes [HKCU] {ca6a7ab9-f4b5-4d50-b5d2-33e996549ae3} - (Ask Web Search) - http://int.search.tb.ask.com/ =>Toolbar.Ask ---\\ Enumère les fichiers Crack & Keygen (3) - 11s O82 - LFC: 2015/08/27 18:40:47 A . (.Sage Software, Inc..) -- C:\Users\Jaclyne\AppData\Local\Temp\{53AB83B3-9908-44DF-97B5-C107140F26AD}\sa_keygen.dll [81920] =>.Crack,Keygen O82 - LFC: 2015/08/27 18:40:47 A . (.ACCPAC International, Inc..) -- C:\Users\Jaclyne\AppData\Local\Temp\{53AB83B3-9908-44DF-97B5-C107140F26AD}\sa_keygen85.dll [69632] =>.Crack,Keygen O82 - LFC: 2015/08/27 18:40:47 A . (.ACCPAC International, Inc..) -- C:\Users\Jaclyne\AppData\Local\Temp\{53AB83B3-9908-44DF-97B5-C107140F26AD}\sa_keygen90.dll [77824] =>.Crack,Keygen ---\\ Enumère les services démarrés par Svchost (31) - 0s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [444928] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [316928] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [47104] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [288256] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242688] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [449536] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [758784] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [200704] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [19968] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [45056] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153600] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [602112] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [84992] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [68096] © ---\\ Liste des exceptions du parefeu Windows (39) - 3s O87 - FAEL: "{A1958286-58F2-4E0F-8C0F-E6B2B5047FE6}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Winsim\ConnectionManager\MySqlBinary\5.0.38\mysql\mysqld-nt.exe O87 - FAEL: "{0474EC18-19E3-4DEF-9584-EDD8D9DAB243}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Winsim\ConnectionManager\MySqlBinary\5.0.38\mysql\mysqld-nt.exe O87 - FAEL: "{8694E51E-0A1F-4773-9EE7-01B61603ABED}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Winsim\ConnectionManager\MySqlBinary\5.0.38\mysql\mysqld-nt.exe O87 - FAEL: "{0E8CFC45-48D7-429C-80BC-A88EC9C7C051}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Winsim\ConnectionManager\MySqlBinary\5.6.10\mysql\mysqld.exe O87 - FAEL: "{A4C94C9D-7725-4754-8FFE-1C8CCDF14CA5}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Winsim\ConnectionManager\MySqlBinary\5.6.10\mysql\mysqld.exe O87 - FAEL: "{46401B12-325D-4206-BF94-1D275FA4DCFD}" [In-None-P6-TRUE] .(...) -- E:\Installer\hpbcsiInstaller.exe (.not file.) O87 - FAEL: "{C5E2B037-F53F-4266-9A01-3F49178DA210}" [In-None-P17-TRUE] .(...) -- E:\Installer\hpbcsiInstaller.exe (.not file.) O87 - FAEL: "{00F3B061-A4C8-4D60-A3FF-D080E22F825E}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVG\AVG2015\avgmfapx.exe (.not file.) O87 - FAEL: "{77A6ACC0-E91E-4F25-B58F-80758A414538}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVG\AVG2015\avgmfapx.exe (.not file.) O87 - FAEL: "{76BADC38-A72F-4C33-A091-B678863BDE73}" [In-None-P6-TRUE] .(...) -- C:\Program Files\LimeWire\LimeWire.exe (.not file.) O87 - FAEL: "{87C80C34-1FF4-4CF5-9F95-2D58377E45A9}" [In-None-P17-TRUE] .(...) -- C:\Program Files\LimeWire\LimeWire.exe (.not file.) O87 - FAEL: "{F7DA3DDA-C2AF-40E0-A97F-534807DD5CCE}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "TCP Query User{44C479E8-3DE3-414F-89CC-0F1A54D9AC29}C:\program files\limewire\limewire.exe" [In-None-P6-TRUE] .(...) -- C:\program files\limewire\limewire.exe (.not file.) O87 - FAEL: "UDP Query User{FD2E4B22-6AF3-4B38-91E0-8BD29F238E5A}C:\program files\limewire\limewire.exe" [In-None-P17-TRUE] .(...) -- C:\program files\limewire\limewire.exe (.not file.) O87 - FAEL: "TCP Query User{D3EDA777-08D2-4B13-8F08-5C556D3DD6DF}C:\program files\real\realplayer\realplay.exe" [In-None-P6-TRUE] .(...) -- C:\program files\real\realplayer\realplay.exe (.not file.) O87 - FAEL: "UDP Query User{F475F70D-6B3D-4369-AC01-4D56D3040034}C:\program files\real\realplayer\realplay.exe" [In-None-P17-TRUE] .(...) -- C:\program files\real\realplayer\realplay.exe (.not file.) O87 - FAEL: "TCP Query User{BFEFCEA4-9C64-4FED-B1B7-13A212B03668}C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe" [In-None-P6-TRUE] .(...) -- C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe (.not file.) O87 - FAEL: "UDP Query User{9754917F-BE07-4B0E-9183-8F38041BB825}C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe" [In-None-P17-TRUE] .(...) -- C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe (.not file.) O87 - FAEL: "{8DBF740F-9FE6-46CF-936B-7EEADDB96430}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{CCDFF2D5-040A-473B-AFE0-6EEA83F53A2F}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{6326A92D-8662-4C2B-8EE7-1D7B8453EA2B}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\SimplyAccounting.exe (.not file.) O87 - FAEL: "{C394824E-1C30-48BD-91A8-7F29D605CC6B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\SimplyAccounting.exe (.not file.) O87 - FAEL: "{E4C9CD16-6559-4528-A714-E36C5A471D65}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\conversion\upgradejet\SimplyAccounting_upgradejet.exe (.not file.) O87 - FAEL: "{5FDE65D8-6661-42E9-A098-FC229468C0F1}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\conversion\upgradejet\SimplyAccounting_upgradejet.exe (.not file.) O87 - FAEL: "{903B6337-27D8-434F-B210-9CB574403B98}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\conversion\simconv160\SimplyAccounting_conv160.exe (.not file.) O87 - FAEL: "{37C3030D-8E88-44C0-96CF-19F4FB3AAA13}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Simple Comptable Pro 2009\conversion\simconv160\SimplyAccounting_conv160.exe (.not file.) O87 - FAEL: "{BD823304-3A37-44B0-BE9E-4D9A02012F48}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{FBFF712E-8F48-419A-9859-E51D85C5EB0A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{A3BEFB1C-DACB-4DF5-AF47-013A2CE26B76}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{720FB49D-D864-4919-B981-958655CF8DF3}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{C3E678FA-2837-44E7-A5C1-84F04B905F4B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.) O87 - FAEL: "{6B09754C-9C70-4A92-B0A5-76F14968EB5C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh O87 - FAEL: "{7DD3E5F4-ADB0-4A4A-A79F-45CDAAF17BFC}" [In-None-P17-TRUE] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh O87 - FAEL: "TCP Query User{7148148E-55D7-4D67-A830-76E6C1ADA946}C:\program files\imesh applications\imesh\imesh.exe" [In-None-P6-TRUE] .(...) -- C:\program files\imesh applications\imesh\imesh.exe (.not file.) =>PUP.Optional.iMesh O87 - FAEL: "UDP Query User{642ADE9D-5963-4EAC-B7A3-E82006F74DEE}C:\program files\imesh applications\imesh\imesh.exe" [In-None-P17-TRUE] .(...) -- C:\program files\imesh applications\imesh\imesh.exe (.not file.) =>PUP.Optional.iMesh O87 - FAEL: "{65031245-5F1E-4C96-88DC-B3F873563857}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Sage Simple Comptable Pro 2011\SimplyAccounting.exe (.not file.) O87 - FAEL: "{D891C669-4319-4DE1-A8B8-B2B2D208EF44}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Sage Simple Comptable Pro 2011\SimplyAccounting.exe (.not file.) O87 - FAEL: "{7685678B-99CC-4EB5-B99C-FCC728FFAD2B}" [Out-None-P17-TRUE] .(...) -- C:\Users\Jaclyne\AppData\Local\Temp\nsf21B9.tmp\CnetInstaller-75966242.exe (.not file.) O87 - FAEL: "{64710C45-FEBF-4CC0-B00D-E1B046583095}" [In-None-P17-TRUE] .(...) -- C:\Users\Jaclyne\AppData\Local\Temp\nsf21B9.tmp\CnetInstaller-75966242.exe (.not file.) ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (29) - 36s SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © SS - Demand [2015/08/12 11:36:42] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe © SR - Auto [2015/01/20 00:30:38] [ 60744] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © SR - Auto [2013/01/29 11:11:28] [ 136784] WebEx Service Host for Support Center (atashost) . (.Cisco WebEx LLC.) - C:\Windows\System32\atashost.exe SR - Auto [2007/08/20 01:08:08] [ 610304] (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe © SR - Auto [2015/09/08 19:12:16] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © SR - Demand [2015/09/08 19:12:09] [ 3218624] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe © SR - Auto [2011/08/31 00:05:02] [ 390504] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe © SR - Auto [2015/09/10 10:29:48] [ 89424] DownSpeedTestService (DownSpeedTest_dqService) . (.Mindspark.) - C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbarsvc.exe =>PUP.Optional.ScriptHost SR - Auto [2014/08/12 00:00:00] [ 24880] Sage 50 Gestionnaire de connexion de base de données (Gestionnaire de connexion de Simple Comptable) . (.Sage.) - C:\Program Files\Winsim\ConnectionManager\SimplyConnectionManager.exe © SS - Demand [2010/12/10 00:00:00] [ 46408] Gestionnaire de transactions de Sage Simple Comptable 2011 (Gestionnaire de transactions de Sage Simple Comptable 2011 - CDN) . (.Sage.) - C:\Program Files\Winsim\TransactionManager2011 - CDN\Sage_SA.TransactionManager.exe © SS - Demand [2010/07/08 11:11:38] [ 30192] Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe © SS - Auto [2015/08/28 14:31:56] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe © SS - Demand [2015/08/28 14:31:56] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe © SS - Demand [2012/08/16 21:55:48] [ 194032] Google Software Updater (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe © SR - Auto [2011/10/17 16:51:54] [ 13824] HP DS Service (HP DS Service) . (.Hewlett-Packard Company.) - C:\Program Files\HP\HPBDSService\HPBDSService.exe © SR - Auto [2012/12/04 11:52:22] [ 174592] HP LaserJet Service (HP LaserJet Service) . (.HP.) - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe © SR - Auto [2015/03/28 12:58:42] [ 89840] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe © SS - Demand [2007/04/13 02:49:00] [ 101528] PIXMA Extended Survey Program (IJPLMSVC) . (.Copyright CANON INC. 2006-2007 All Rights Reserved.) - C:\Program Files\Canon\IJPLM\ijplmsvc.exe SS - Demand [2015/02/13 08:55:36] [ 540968] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe © SS - Demand [2015/07/31 10:42:02] [ 235696] McAfee Security Scan Component Host Service (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe © SS - Demand [2015/08/27 21:15:52] [ 149160] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe © SS - Demand [2009/07/24 08:33:10] [ 1116656] RoxMediaDB12 (RoxMediaDB12) . (.Sonic Solutions.) - C:\Program Files\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe © SS - Auto [2009/07/24 08:33:34] [ 219632] Roxio Hard Drive Watcher 12 (RoxWatch12) . (.Sonic Solutions.) - C:\Program Files\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe © SS - Demand [2014/06/12 00:00:00] [ 36144] Sage 50 Gestionnaire de transactions 2014 - CDN (Sage 50 Gestionnaire de transactions 2014 - CDN) . (.Sage.) - C:\Program Files\Winsim\TransactionManager2014 - CDN\Sage_SA.TransactionManager.exe © SS - Demand [2015/06/09 00:00:00] [ 36144] Sage 50 Gestionnaire de transactions 2015 - CDN (Sage 50 Gestionnaire de transactions 2015 - CDN) . (.Sage.) - C:\Program Files\Winsim\TransactionManager2015 - CDN\Sage_SA.TransactionManager.exe © SS - Auto [2015/02/18 19:11:32] [ 315488] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe © SR - Auto [2014/08/04 03:48:17] [ 5095264] TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe © ---\\ Scan Additionnel (67) - 0s C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbarsvc.exe =>PUP.Optional.ScriptHost C:\Program Files\DownSpeedTest_dq\bar\1.bin\AppIntegrator.exe =>PUP.Optional.ScriptHost C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqbar.dll =>PUP.Optional.ScriptHost C:\Program Files\DownSpeedTest_dq\bar\1.bin\dqmedint.exe =>PUP.Optional.ScriptHost HKLM\SYSTEM\CurrentControlSet\Services\DownSpeedTest_dqService =>PUP.Optional.ScriptHost C:\Windows\System32\Tasks\Knight System Protector Startup =>PUP.Optional.KnightSystemProtector C:\Windows\System32\Tasks\Super Optimizer Schedule =>PUP.Optional.SuperOptimizer HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DownSpeedTest_dqbar Uninstall Internet Explorer =>PUP.Optional.MindSpark HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLVM Player =>PUP.Optional.FLVMPlayer HKLM\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKLM\SOFTWARE\Conduit =>PUP.Optional.Conduit HKLM\SOFTWARE\ParetoLogic =>PUP.Optional.Paretologic HKLM\SOFTWARE\RST =>PUP.Optional.WinRST HKLM\SOFTWARE\SI-App =>PUP.Optional.WinRST HKLM\SOFTWARE\SpeedMaxPc =>PUP.Optional.SpeedMaxPc HKLM\SOFTWARE\Systweak =>PUP.Optional.Systweak HKLM\SOFTWARE\Uniblue =>PUP.Optional.Uniblue HKLM\SOFTWARE\Upt =>PUP.Optional.WinRST HKLM\SOFTWARE\Visualbee =>PUP.Optional.VisualBeeToolbar HKLM\SOFTWARE\WinUpd =>PUP.Optional.WinRST HKCU\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\iMesh =>PUP.Optional.iMesh HKCU\SOFTWARE\PC Booster =>PUP.Optional.PCBooster HKCU\SOFTWARE\Smartbar =>PUP.Optional.SmartBar HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\SpeedMaxPc =>PUP.Optional.SpeedMaxPc HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer HKCU\SOFTWARE\Systweak =>PUP.Optional.Systweak HKCU\SOFTWARE\Visualbee =>PUP.Optional.VisualBeeToolbar HKCU\SOFTWARE\YahooPartnerToolbar =>Toolbar.YahooPartner HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner HKCU\SOFTWARE\AppDataLow\Software\Conduit =>PUP.Optional.Conduit HKCU\SOFTWARE\AppDataLow\Software\imeshmediabartb =>PUP.Optional.iMesh HKCU\SOFTWARE\AppDataLow\Software\SmartBar =>PUP.Optional.SmartBar C:\Program Files\Advanced System Protector =>PUP.Optional.AdvancedSystemProtector C:\Program Files\DownSpeedTest_dq =>PUP.Optional.ScriptHost C:\Program Files\Knight System Protector =>PUP.Optional.KnightSystemProtector C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup C:\Program Files\MyPCBackup =>PUP.Optional.MyPCBackup C:\Program Files\PC Booster =>PUP.Optional.PCBooster C:\Program Files\PC Speed Maximizer =>PUP.Optional.PCSpeedMaximizer C:\Program Files\SearchProtect =>PUP.Optional.SearchProtect C:\Program Files\Systweak Support Dock =>PUP.Optional.SystSupportDock C:\Program Files\Uniblue =>PUP.Optional.Uniblue C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer =>PUP.Optional.SuperOptimizer C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch C:\ProgramData\AVG Web TuneUp =>Toolbar.AVGSafeGuard C:\ProgramData\PC Booster =>PUP.Optional.PCBooster C:\ProgramData\SpeedMaxPc =>PUP.Optional.SpeedMaxPc C:\Program Files\Common Files\AVG Secure Search =>Toolbar.AVGSearch C:\Users\Jaclyne\AppData\Roaming\DriverCure =>PUP.Optional.Paretologic C:\Users\Jaclyne\AppData\Roaming\SpeedMaxPc =>PUP.Optional.SpeedMaxPc C:\Users\Jaclyne\AppData\Roaming\Super Optimizer =>PUP.Optional.SuperOptimizer C:\Users\Jaclyne\AppData\Roaming\Systweak =>PUP.Optional.Systweak C:\Users\Jaclyne\AppData\Roaming\Uniblue =>PUP.Optional.Uniblue C:\Users\Jaclyne\AppData\Local\AVG Web TuneUp =>Toolbar.AVGSafeGuard C:\Users\Jaclyne\AppData\Local\DownSpeedTest_dq =>PUP.Optional.ScriptHost C:\Users\Jaclyne\AppData\Local\genienext =>PUP.Optional.NextLive C:\Users\Jaclyne\AppData\Local\iMesh =>PUP.Optional.iMesh C:\Users\Jaclyne\AppData\Local\Mobogenie =>PUP.Optional.Mobogenie C:\Users\Jaclyne\AppData\Local\PackageAware =>PUP.Optional.BearShare C:\Users\Jaclyne\AppData\Local\SwvUpdater =>PUP.Optional.SoftwareUpdater C:\Windows\Prefetch\DOWNSPEEDTEST.F0B5A91367614C6-7AF27FE1.pf =>PUP.Optional.ScriptHost C:\Windows\Prefetch\DOWNSPEEDTEST.F0B5A91367614C6-89F50B9C.pf =>PUP.Optional.ScriptHost C:\Windows\Prefetch\DOWNSPEEDTESTSETUP.EXE-FA989BB7.pf =>PUP.Optional.ScriptHost ---\\ Récapitulatif des éléments trouvées sur votre station (34) - 0s http://www.nicolascoolman.fr/adware-scripthost/ =>PUP.Optional.ScriptHost http://www.nicolascoolman.fr/blog =>Toolbar.AVGSearch http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask http://www.nicolascoolman.fr/blog =>PUP.Optional.KnightSystemProtector http://www.nicolascoolman.fr/blog =>PUP.Optional.SuperOptimizer http://www.nicolascoolman.fr/pup-mindspark/ =>PUP.Optional.MindSpark http://www.nicolascoolman.fr/blog =>PUP.Optional.FLVMPlayer http://www.nicolascoolman.fr/blog =>Toolbar.AVGSafeGuard http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit http://www.nicolascoolman.fr/blog =>PUP.Optional.Paretologic http://www.nicolascoolman.fr/blog =>PUP.Optional.WinRST http://www.nicolascoolman.fr/pup-speedmaxpc/ =>PUP.Optional.SpeedMaxPc http://www.nicolascoolman.fr/pup-systweak/ =>PUP.Optional.Systweak http://www.nicolascoolman.fr/blog =>PUP.Optional.Uniblue http://www.nicolascoolman.fr/adware-visualbeetoolbar/ =>PUP.Optional.VisualBeeToolbar http://www.nicolascoolman.fr/pup-imesh/ =>PUP.Optional.iMesh http://www.nicolascoolman.fr/blog =>PUP.Optional.PCBooster http://www.nicolascoolman.fr/hijacker-smartbar/ =>PUP.Optional.SmartBar http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner http://www.nicolascoolman.fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner http://www.nicolascoolman.fr/pup-advancedsystemprotector/ =>PUP.Optional.AdvancedSystemProtector http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup http://www.nicolascoolman.fr/rogue-pcspeedmaximizer/ =>PUP.Optional.PCSpeedMaximizer http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect http://www.nicolascoolman.fr/pup-systsupportdock/ =>PUP.Optional.SystSupportDock http://www.nicolascoolman.fr/pup-nextlive/ =>PUP.Optional.NextLive http://www.nicolascoolman.fr/pup-mobogenie/ =>PUP.Optional.Mobogenie http://www.nicolascoolman.fr/pup-bearshare/ =>PUP.Optional.BearShare http://www.nicolascoolman.fr/pup-software-updater/ =>PUP.Optional.SoftwareUpdater http://www.nicolascoolman.fr/blog =>PUP.Optional.BrowserExtensions http://www.nicolascoolman.fr/blog =>PUP.Optional.eDeals http://www.nicolascoolman.fr/blog =>PUP.Optional.SettingsManager http://www.nicolascoolman.fr/pup-dealio/ =>PUP.Optional.Dealio ~ End of the scan, 37100 items in 170 seconds (1541)(3)()