~ ZHPDiag v2015.12.25.197 By Nicolas Coolman (2015/12/25) ~ Run by Flora (Administrator) (2015/12/26 11:47:25) ~ Web: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ State version: Version OK ~ Mode: Scan ~ Report: C:\Users\Flora\Desktop\ZHPDiag.txt ~ Report: C:\Users\Flora\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ System startup: Normal (Normal boot) Windows 7 Starter, 32-bit Service Pack 1 (Build 7601) ---\\ Internet Browsers (2) - 0s GCIE: Google Chrome v47.0.2526.106 MSIE: Internet Explorer v11.0.9600.17633 ---\\ Windows Product Information (4) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ System protection software (2) - 15s Malwarebytes Anti-Malware versão 2.2.0.1024 Windows Defender W7 (Deactivate) ---\\ Surveillance software (2) - 16s Adobe Flash Player 11 ActiveX Adobe Reader 9.5.5 MUI ---\\ Information on the system (6) - 0s ~ Operating System: x86 Family 6 Model 28 Stepping 10, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 1036.152 MB (7% free) System Restore: Activé (Enable) System drive C: has 151 GB () free of 219 GB ---\\ Connection to the system mode (3) - 0s ~ Computer Name: FLORA-HP ~ User Name: Flora ~ Logged in as Administrator ---\\ Enumeration of the disk units (2) - 0s ~ Drive C: has 151 GB free of 219 GB (System) ~ Drive D: has 2 GB free of 18 GB ---\\ State of the Windows Security Center (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Search Generic System Files (23) - 2s [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - 25/02/2011 - (.Microsoft Corporation - Windows Explorer.) -- C:\Windows\Explorer.exe [2616320] © [MD5.51138BEEA3E2C21EC44D0932C71762A8] - 13/07/2009 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] © [MD5.B5C5DCAD3899512020D135600129D665] - 13/07/2009 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\Windows\System32\Wininit.exe [96256] © [MD5.F285D499EC42969D963CA49EADA63218] - 11/01/2015 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\Windows\System32\wininet.dll [1888256] © [MD5.52449FD429D6053B78AE564DEF303870] - 16/07/2014 - (.Microsoft Corporation - Windows Logon Application.) -- C:\Windows\System32\Winlogon.exe [304128] © [MD5.E3AE23569749DE12D45BA3B489A036AE] - 20/11/2010 - (.Microsoft Corporation - Software Licensing Library.) -- C:\Windows\System32\sppcomapi.dll [193536] © [MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\Windows\System32\dnsapi.dll [270336] © [MD5.D0B388DA1D111A34366E04EB4A5DD156] - 30/05/2014 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] © [MD5.338C86357871C167A96AB976519BF59E] - 13/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows® [MD5.77EA11B065E0A8AB902D78145CA51E10] - 13/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] © [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] © [MD5.F024449C97EC1E464AAFFDA18593DB88] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] © [MD5.9036377B8A6C15DC2EEC53E489D159B5] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] © [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 13/07/2009 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] © [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 13/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] © [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - 27/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123904] © [MD5.280122DDCF04B378EDD1AD54D71C1E54] - 20/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] © [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - 24/01/2014 - (.Microsoft Corporation - NT File System Driver.) -- C:\Windows\System32\drivers\ntfs.sys [1212352] =>.Microsoft Windows® [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 13/07/2009 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\Windows\System32\drivers\Parport.sys [79360] © [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 13/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] © [MD5.3E21C083B8A01CB70BA1F09303010FCE] - 13/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] © [MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - 10/11/2014 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74752] © [MD5.F497F67932C6FA693D7DE2780631CFE7] - 20/11/2010 - (.Microsoft Corporation - Volume Shadow Copy Driver.) -- C:\Windows\System32\drivers\volsnap.sys [245632] =>.Microsoft Windows® ---\\ Non Microsoft non disabled Windows Services (18) - 8s O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\IDT\WDM\AEstSrv.exe © O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2015\avgidsagent.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: Watchdog do AVG (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2015\avgwdsvc.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: Serviço do Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe © O23 - Service: HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe =>.Hewlett-Packard Company® O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe =>.Hewlett-Packard Company® O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe =>.Hewlett-Packard Company® O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe =>.Hewlett-Packard Company® O23 - Service: HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2008 - DCSHOST.) - C:\ProgramData\DatacardService\HWDeviceService.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation® O23 - Service: (MBAMScheduler) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe =>.Malwarebytes Corporation® O23 - Service: (MBAMService) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® O23 - Service: RoxioNow Service (RoxioNow Service) . (.Roxio - Windows Service App.) - C:\Program Files\Roxio\RoxioNow Player\RNowSvc.exe =>.Sonic Solutions® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Technologies SA® O23 - Service: @C:\Windows\system32\stlang.dll,-10101 (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\stacsv.exe © ---\\ Task Planned Automatically (13) - 13s [MD5.00000000000000000000000000000000] [APT] [0215tbUpdateInfo] (...) -- C:\ProgramData\Avg_Update_0215tb\0215tb_{3E138358-CC38-4EA9-9496-CAA86ACE19EF}.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [0915tbUpdateInfo] (...) -- C:\ProgramData\Avg_Update_0915tb\0915tb_{9C2DAFFA-8511-4DFC-B1D6-5CE8080C0344}.exe (.not file.) [0] [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc® [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc® [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984] =>.Apple Inc.® O39 - APT: 0215tbUpdateInfo - (...) -- C:\Windows\Tasks\0215tbUpdateInfo.job [348] O39 - APT: 0915tbUpdateInfo - (...) -- C:\Windows\Tasks\0915tbUpdateInfo.job [368] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [882] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [886] © O39 - APT: 0215tbUpdateInfo - (...) -- C:\Windows\System32\Tasks\0215tbUpdateInfo [2466] O39 - APT: 0915tbUpdateInfo - (...) -- C:\Windows\System32\Tasks\0915tbUpdateInfo [2486] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3630] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3882] © ---\\ Process running (11) - 8s [MD5.7AEFC130355AA99307B31EE678614380] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\stacsv.exe [245842] [PID.1404] © [MD5.0A60B80DF8E0FD580ED65472B586284E] - (.Oceanis - WallPape Application.) -- C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe [115888] [PID.392] © [MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Program Files\IDT\WDM\AEstSrv.exe [81920] [PID.1564] © [MD5.EE06215C6BD7E56D941CCC5819A4FC69] - (.DeviceVM, Inc. - Windows Metadata Export Service.) -- C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe [338208] [PID.2180] {0100000000011C9DE3CE41} [MD5.E956C0614367D4106A4411F151D494A5] - (.Copyright (C) 2008 - DCSHOST.) -- C:\ProgramData\DatacardService\HWDeviceService.exe [264704] [PID.2404] [MD5.06602AAC468BFACD8E5344DB0AE3DDD3] - (.Huawei Technologies Co., Ltd. - DataCardMonitor MFC Application.) -- C:\ProgramData\DatacardService\DCSHelper.exe [230912] [PID.2468] © [MD5.BB1FC298BE53AAB1E110F6E786BD8AC5] - (.Hewlett-Packard Company - HP Support Assistant Service.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528] [PID.4672] © [MD5.C155A13687144076286989EF078112C2] - (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe [1917440] [PID.6460] © [MD5.9B8EAF7F70273FC07558897AB22BDB7F] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Flora\Desktop\ZHPDiag3.exe [2042368] [PID.5860] © [MD5.9B8EAF7F70273FC07558897AB22BDB7F] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Flora\Desktop\ZHPDiag3.exe [2042368] [PID.4516] © [MD5.9B8EAF7F70273FC07558897AB22BDB7F] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Flora\Desktop\ZHPDiag3.exe [2042368] [PID.2036] © ---\\ Google Chrome, Start,Search,Extensions (2) - 0s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com.br G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (1) - 1s P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll © ---\\ Internet Explorer Extensions, Start, Search (11) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.br R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} Orphean R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer, Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © ---\\ Hosts file redirection (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object (BHO) (4) - 1s O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated® O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation® O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll =>.Skype Technologies SA® O2 - BHO: Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} . (.Oceanis - Windows 7 Starter Helper.) -- C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll © ---\\ Auto loading programs from Registry and folders (6) - 0s O4 - HKLM\..\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2015\avgui.exe =>.AVG Technologies CZ, s.r.o.® O4 - HKLM\..\RunOnce: [NCPluginUpdater] . (.Hewlett-Packard - NCPluginUpdater.) -- C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe =>.Hewlett-Packard Company® O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © ---\\ Lop.com/Domain Hijackers (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E85B261-B91A-485F-B54E-38BF6338FF2B}: DhcpNameServer = 192.168.1.1 192.168.1.1 ---\\ Extra protocols (27) - 2s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll © O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll © O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) -- C:\Program Files\AVG\AVG2012\avgpp.dll (.not file.) O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll (.not file.) O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll © O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll (.not file.) O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll © O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll =>.Skype Technologies SA® O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll =>.Skype Technologies SA® O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll © O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation® O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® ---\\ Software installed (115) - 51s O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D} © O42 - Logiciel: 4500_G510nz_Help_Web - (.Hewlett-Packard.) [HKLM] -- {843BD817-4551-451C-AB7A-EF113BF9C036} © O42 - Logiciel: 4500G510nz_Software_Min - (.Hewlett-Packard.) [HKLM] -- {3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5} © O42 - Logiciel: 4500G510nz_web - (.Hewlett-Packard.) [HKLM] -- {2A8F9255-F4AB-4a37-8F39-7C6E15B5158B} © O42 - Logiciel: 7-Zip 9.20 - (...) [HKLM] -- 7-Zip O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} © O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Reader 9.5.5 MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001} © O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc.) [HKLM] -- {3B834B54-EC4B-48E2-BFC6-03FF5DA06F62} © O42 - Logiciel: Agatha Christie - Peril at End House - (.WildTangent.) [HKLM] -- WT089362 © =>.WildTangent Inc O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM] -- {1588DD21-B959-4674-9CF0-4D13B7D75020} © O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM] -- InstallShield_{1588DD21-B959-4674-9CF0-4D13B7D75020} © O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01} © O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} © O42 - Logiciel: AVG 2015 - (.AVG Technologies.) [HKLM] -- {4A938EA5-FBE6-4605-AE68-EDF28BF1CD61} © O42 - Logiciel: AVG 2015 - (.AVG Technologies.) [HKLM] -- {B42CDB35-A412-4FE4-8285-85EEB0C787AF} © O42 - Logiciel: AVG 2015 - (.AVG Technologies.) [HKLM] -- AVG =>.AVG Technologies CZ, s.r.o.® O42 - Logiciel: AVG Web TuneUp - (.AVG Technologies.) [HKLM] -- AVG Web TuneUp =>Toolbar.AVGSafeGuard O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM] -- WT087428 © =>.WildTangent Inc O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM] -- WT089308 © =>.WildTangent Inc O42 - Logiciel: Blio - (.K-NFB Reading Technology, Inc..) [HKLM] -- {504CC891-B140-4E1B-860B-5E4C1DFBA9E3} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} © O42 - Logiciel: Bounce Symphony - (.WildTangent.) [HKLM] -- WT087330 © =>.WildTangent Inc O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11 Wireless LAN Adapter © O42 - Logiciel: BufferChm - (.Hewlett-Packard.) [HKLM] -- {2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C} © O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM] -- WT089359 © =>.WildTangent Inc O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM] -- WT087453 © =>.WildTangent Inc O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} =>.CyberLink® O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} =>.CyberLink® O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} © O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM] -- WT087536 © =>.WildTangent Inc O42 - Logiciel: Dream Chronicles - (.WildTangent.) [HKLM] -- WT087467 © =>.WildTangent Inc O42 - Logiciel: Energy Star Digital Logo - (.Hewlett-Packard.) [HKLM] -- {BD1A34C9-4764-4F79-AE1F-112F8C89D3D4} © O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} © O42 - Logiciel: Evernote - (.Evernote Corp..) [HKLM] -- {F761359C-9CED-45AE-9A51-9D6605CD55C4} © O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM] -- WT089328 © =>.WildTangent Inc O42 - Logiciel: FATE - (.WildTangent.) [HKLM] -- WT087361 © =>.WildTangent Inc O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} © O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} © O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} © O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} © O42 - Logiciel: HP CloudDrive - (.Zecter Inc..) [HKLM] -- ZumoDrive O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544} © O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM] -- {9D87DD24-2400-4920-B51B-E1AFC054941B} © O42 - Logiciel: HP Game Console - (.WildTangent.) [HKLM] -- My HP Game Console © =>.WildTangent Inc O42 - Logiciel: HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall © =>.WildTangent Inc O42 - Logiciel: HP HomeBase - (.ArcSoft.) [HKLM] -- {4F22707C-C8E4-4BC8-881C-FAAB2EF5914B} © O42 - Logiciel: HP MovieStore - (.Hewlett-Packard.) [HKLM] -- {637E8378-C99C-47E1-9DF8-2DC0251BA276} © O42 - Logiciel: HP MovieStore - (.Hewlett-Packard.) [HKLM] -- {9008D736-35CA-40DB-A2BE-5F32D954E5AA} =>.Sonic Solutions® O42 - Logiciel: HP Officejet 4500 G510n-z - (.HP.) [HKLM] -- {F27CFD16-939A-4232-98CD-180898D14713} =>.Hewlett Packard® O42 - Logiciel: HP Photo Creations - (.HP Photo Creations Powered by RocketLife.) [HKLM] -- HP Photo Creations {2EF75B7A43D5EF9FFB3B64C9F8457DA1} © O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM] -- {AF306BD8-F9D1-4627-89B9-246E59074A05} © O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM] -- {626B5918-B395-4B69-A06B-14C3EB1C3942} © O42 - Logiciel: HP QuickSync - (.Hewlett-Packard Company.) [HKLM] -- {40C19172-F700-4056-8683-2C64BE3202C8} © O42 - Logiciel: HP QuickWeb Installer - (.DeviceVM Inc..) [HKLM] -- {394FA67A-FF0A-4356-BB77-D85E5A300BDE} O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM] -- {53469506-A37E-4314-A9D9-38724EC23A75} © O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} © O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM] -- {9B50678F-3A52-4426-804C-AAA9A731E655} © O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96} © O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard Company.) [HKLM] -- {13DCC2C7-454D-42F0-A892-E0E9A5DE4E67} © O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} © O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM] -- WT087480 © =>.WildTangent Inc O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI =>.Intel Corporation® O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} =>.Intel Corporation® O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {F27717C9-F009-4E51-9F46-524556C1F5FD} © O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF} © O42 - Logiciel: Java Auto Updater - (.Sun Microsystems, Inc..) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} © O42 - Logiciel: Jewel Quest - Heritage - (.WildTangent.) [HKLM] -- WT087374 © =>.WildTangent Inc O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM] -- WT087485 © =>.WildTangent Inc O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM] -- WT087490 © =>.WildTangent Inc O42 - Logiciel: JoJo's Fashion Show - (.WildTangent.) [HKLM] -- WT087385 © =>.WildTangent Inc O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} © O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM] -- WT087495 © =>.WildTangent Inc O42 - Logiciel: Malwarebytes Anti-Malware versão 2.2.0.1024 - (.Malwarebytes.) [HKLM] -- Malwarebytes Anti-Malware_is1 © O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} © O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13} © O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} © O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} © O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} © O42 - Logiciel: Network - (.Hewlett-Packard.) [HKLM] -- {75247E38-5C9B-45D6-ADF8-E11CB56B4990} © O42 - Logiciel: Oceanis Change Background Windows 7 - (.Oceanis.) [HKLM] -- Oceanis Change Background Windows 7_is1 © O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {261D556C-7307-4C30-A229-42B4115C0329} © O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM] -- WT087394 © =>.WildTangent Inc O42 - Logiciel: PictureMover - (.Hewlett-Packard Company.) [HKLM] -- {264FE20A-757B-492a-B0C3-4009E2997D8A} © O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM] -- WT087501 © =>.WildTangent Inc O42 - Logiciel: PlayReady PC Runtime x86 - (.Microsoft Corporation.) [HKLM] -- {CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61} © O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM] -- WT087396 © =>.WildTangent Inc O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} =>.CyberLink® O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} =>.CyberLink® O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp® O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} =>.CyberLink® O42 - Logiciel: RoxioNow Player - (.RoxioNow.) [HKLM] -- {0EDEB615-1A60-425E-8306-0E10519C7B55} O42 - Logiciel: Scan - (.Hewlett-Packard.) [HKLM] -- {0F367CA3-3B2F-43F9-A44A-25A8EE69E45D} © O42 - Logiciel: Skip-Bo - Castaway Caper - (.WildTangent.) [HKLM] -- WT087408 © =>.WildTangent Inc O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} © O42 - Logiciel: Skype™ 6.1 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} © O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM] -- WT087510 © =>.WildTangent Inc O42 - Logiciel: Suporte para Aplicativos Apple - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D} © O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey © O42 - Logiciel: Times Reader - (.The New York Times Company.) [HKLM] -- {491ADA37-04EE-2ECE-9F86-DDC0106047AC} O42 - Logiciel: Times Reader - (.The New York Times Company.) [HKLM] -- com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1 O42 - Logiciel: Toolbox - (.Hewlett-Packard.) [HKLM] -- {6BBA26E9-AB03-4FE7-831A-3535584CA002} © O42 - Logiciel: Tradewinds Legends - (.WildTangent.) [HKLM] -- WT087409 © =>.WildTangent Inc O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM] -- WT087513 © =>.WildTangent Inc O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} © O42 - Logiciel: Vivo - Guia Vivo Internet versão 1.0 - (.Vivo.) [HKLM] -- {C2E8B9C9-677A-46E6-AEC7-9435B5BCA765}_is1 O42 - Logiciel: VIVO INTERNET - (.Huawei Technologies Co.,Ltd.) [HKLM] -- VIVO INTERNET © O42 - Logiciel: WebReg - (.Hewlett-Packard.) [HKLM] -- {43CDF946-F5D9-4292-B006-BA0D92013021} © O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM] -- WT087519 © =>.WildTangent Inc O42 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 © O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM] -- WT087533 © =>.WildTangent Inc ---\\ HKCU & HKLM Software Keys (109) - 51s HKLM\SOFTWARE\7-Zip HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\AdwCleaner HKLM\SOFTWARE\Ammyy HKLM\SOFTWARE\AppDataLow HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\ArcSoft HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\AVG HKLM\SOFTWARE\Avg Secure Update HKLM\SOFTWARE\AVG Tuneup HKLM\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKLM\SOFTWARE\baidu HKLM\SOFTWARE\Baidu Security HKLM\SOFTWARE\BcmSetup HKLM\SOFTWARE\Caphyon HKLM\SOFTWARE\CXT HKLM\SOFTWARE\CyberLink HKLM\SOFTWARE\DeviceVM HKLM\SOFTWARE\Evernote HKLM\SOFTWARE\GEAR Software HKLM\SOFTWARE\Google HKLM\SOFTWARE\Hewlett-Packard HKLM\SOFTWARE\HPQ HKLM\SOFTWARE\Huawei technologies HKLM\SOFTWARE\ICE HKLM\SOFTWARE\IDT HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Insyde HKLM\SOFTWARE\Intel HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\K-NFB Reading Technology, Inc. HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial) HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\Oceanis HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\OpenOffice.org HKLM\SOFTWARE\P2G_Upgrade HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Reg HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\RocketLife HKLM\SOFTWARE\Roxio HKLM\SOFTWARE\RTLSetup HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\Symantec HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\TeamViewer HKLM\SOFTWARE\Visan HKLM\SOFTWARE\WildTangent HKLM\SOFTWARE\Windows HKLM\SOFTWARE\Wow6432Node HKLM\SOFTWARE\Zecter HKLM\SOFTWARE\ZumoDrive HKCU\SOFTWARE\7-Zip HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Ammyy HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\Avg HKCU\SOFTWARE\Avg Secure Update HKCU\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\Baidu Security HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\IDT HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Norton HKCU\SOFTWARE\OCNS HKCU\SOFTWARE\OpenOffice.org HKCU\SOFTWARE\Reg HKCU\SOFTWARE\RegBuffNumType HKCU\SOFTWARE\RegDownloadFilePath HKCU\SOFTWARE\RegPicSavePath HKCU\SOFTWARE\RegPlaybackFilePath HKCU\SOFTWARE\RegPlaybackPicPath HKCU\SOFTWARE\RegPlayWndType HKCU\SOFTWARE\RegProtocolType HKCU\SOFTWARE\RegRecSavePath HKCU\SOFTWARE\RegSaveSizeType HKCU\SOFTWARE\RegSaveStreamType HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\syncables HKCU\SOFTWARE\TeamViewer HKCU\SOFTWARE\Tific HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Avg HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\Avg HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contents of the Common Files folders (627) - 245s O43 - CFD: 14/10/2014 - [] D -- C:\Program Files\7-Zip O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\AmIcoSingLun O43 - CFD: 22/10/2013 - [] D -- C:\Program Files\Apple Software Update =>.Apple Inc.® O43 - CFD: 05/11/2014 - [] D -- C:\Program Files\AVG =>.AVG Technologies CZ, s.r.o.® O43 - CFD: 06/03/2015 - [] D -- C:\Program Files\AVG Web TuneUp =>Toolbar.AVGSafeGuard =>Toolbar.AVGSafeGuard O43 - CFD: 22/10/2013 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Broadcom =>.Broadcom Corporation® O43 - CFD: 26/12/2015 - [] D -- C:\Program Files\Common Files O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\CyberLink =>.CyberLink® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Downloaded Installations O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\Evernote O43 - CFD: 14/10/2014 - [] D -- C:\Program Files\Google =>.Google Inc® O43 - CFD: 22/09/2015 - [] D -- C:\Program Files\GUM710A.tmp =>.Google Inc® O43 - CFD: 21/01/2013 - [] D -- C:\Program Files\Hewlett-Packard =>.Hewlett-Packard Company® O43 - CFD: 05/03/2012 - [] D -- C:\Program Files\HP =>.Hewlett Packard® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\HP Games O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\HP Photo Creations {2EF75B7A43D5EF9FFB3B64C9F8457DA1} O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\IDT O43 - CFD: 21/01/2013 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Intel =>.Intel Corporation® O43 - CFD: 22/09/2015 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 22/10/2013 - [] D -- C:\Program Files\iPod =>.Apple Inc.® O43 - CFD: 22/10/2013 - [] D -- C:\Program Files\iTunes =>.Apple Inc.® O43 - CFD: 07/02/2014 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.® O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\K-NFB Reading Technology Inc {010000000001272FA34E76} O43 - CFD: 25/12/2015 - [] D -- C:\Program Files\Malwarebytes Anti-Malware =>.Malwarebytes Corporation® O43 - CFD: 12/11/2014 - [0] D -- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 25/05/2011 - [0] D -- C:\Program Files\Microsoft O43 - CFD: 26/07/2014 - [] D -- C:\Program Files\Microsoft Application Virtualization Client =>.Microsoft Corporation® O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 24/07/2014 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 24/07/2014 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Microsoft WSE O43 - CFD: 24/05/2011 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild O43 - CFD: 16/05/2011 - [0] D -- C:\Program Files\MSXML 4.0 O43 - CFD: 02/07/2011 - [] D -- C:\Program Files\Oceanis O43 - CFD: 12/05/2011 - [] RD -- C:\Program Files\Online Services =>.Skype Technologies SA® O43 - CFD: 25/05/2011 - [] D -- C:\Program Files\OpenOffice.org 3 O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\PictureMover =>.Hewlett-Packard Company® O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\PlayReady O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Roxio =>.Sonic Solutions® O43 - CFD: 03/02/2013 - [] RD -- C:\Program Files\Skype =>.Skype Technologies SA® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Times Reader O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 21/01/2012 - [] D -- C:\Program Files\Vivo O43 - CFD: 21/01/2012 - [] D -- C:\Program Files\VIVO INTERNET O43 - CFD: 19/07/2013 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 03/02/2013 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation® O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 12/12/2013 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows NT O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 13/11/2014 - [] D -- C:\Program Files\ZHPDiag O43 - CFD: 14/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 26/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG O43 - CFD: 08/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Energy Star O43 - CFD: 08/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote O43 - CFD: 25/03/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 11/01/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 05/03/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 11/02/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support O43 - CFD: 25/03/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP QuickWeb O43 - CFD: 25/03/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 22/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 25/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 08/11/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media & Games O43 - CFD: 24/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (English) O43 - CFD: 24/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 12/05/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services O43 - CFD: 26/05/2011 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 O43 - CFD: 08/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio O43 - CFD: 11/02/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 13/11/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 21/01/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vivo O43 - CFD: 21/01/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIVO INTERNET O43 - CFD: 21/06/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 13/11/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP O43 - CFD: 03/02/2013 - [] HD -- C:\ProgramData\.HPQuickSync O43 - CFD: 03/02/2013 - [0] D -- C:\ProgramData\.syncables O43 - CFD: 03/02/2013 - [] HD -- C:\ProgramData\.syncID O43 - CFD: 22/10/2013 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 O43 - CFD: 18/07/2012 - [] D -- C:\ProgramData\Adobe O43 - CFD: 06/03/2015 - [] D -- C:\ProgramData\AMMYY O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\AmUStor O43 - CFD: 22/10/2013 - [] D -- C:\ProgramData\Apple O43 - CFD: 22/10/2013 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 17/12/2014 - [] D -- C:\ProgramData\AVG Web TuneUp =>Toolbar.AVGSafeGuard O43 - CFD: 12/11/2014 - [] D -- C:\ProgramData\AVG2015 O43 - CFD: 12/11/2014 - [0] D -- C:\ProgramData\Baidu Security O43 - CFD: 05/07/2011 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 21/01/2012 - [] D -- C:\ProgramData\DatacardService O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 14/10/2014 - [] D -- C:\ProgramData\Google O43 - CFD: 20/01/2013 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 05/06/2011 - [] D -- C:\ProgramData\HP O43 - CFD: 08/11/2010 - [] D -- C:\ProgramData\HP Photo Creations O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Macrovision O43 - CFD: 12/11/2014 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 26/12/2015 - [] D -- C:\ProgramData\MFAData O43 - CFD: 17/01/2015 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 01/07/2012 - [] D -- C:\ProgramData\Norton O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 07/02/2014 - [0] D -- C:\ProgramData\Oracle O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\PictureMover O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Recovery O43 - CFD: 11/02/2013 - [] D -- C:\ProgramData\RoxioNow O43 - CFD: 03/02/2013 - [] D -- C:\ProgramData\Skype O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Sonic O43 - CFD: 08/11/2010 - [] D -- C:\ProgramData\Stardock O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 08/11/2010 - [] D -- C:\ProgramData\Sun O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Temp O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 25/03/2011 - [] D -- C:\ProgramData\Uninstall O43 - CFD: 01/07/2012 - [] D -- C:\ProgramData\WildTangent O43 - CFD: 21/01/2013 - [] D -- C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 22/10/2013 - [] D -- C:\Program Files\Common Files\Apple O43 - CFD: 26/12/2015 - [] D -- C:\Program Files\Common Files\AV O43 - CFD: 26/07/2014 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 05/06/2011 - [] D -- C:\Program Files\Common Files\Hewlett-Packard O43 - CFD: 05/06/2011 - [] D -- C:\Program Files\Common Files\HP O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 02/07/2013 - [] D -- C:\Program Files\Common Files\Java O43 - CFD: 24/07/2014 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 25/03/2011 - [] D -- C:\Program Files\Common Files\Roxio Shared O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 03/02/2013 - [] D -- C:\Program Files\Common Files\Skype O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 30/10/2012 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 08/11/2010 - [] D -- C:\Program Files\Common Files\Windows Live O43 - CFD: 03/06/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Adobe O43 - CFD: 22/10/2013 - [] D -- C:\Users\Flora\AppData\Roaming\Apple Computer O43 - CFD: 05/11/2014 - [] D -- C:\Users\Flora\AppData\Roaming\AVG2015 O43 - CFD: 13/11/2013 - [] D -- C:\Users\Flora\AppData\Roaming\Blio O43 - CFD: 19/07/2012 - [] D -- C:\Users\Flora\AppData\Roaming\Google O43 - CFD: 17/09/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Hewlett-Packard O43 - CFD: 05/06/2011 - [] D -- C:\Users\Flora\AppData\Roaming\HP O43 - CFD: 21/01/2013 - [] D -- C:\Users\Flora\AppData\Roaming\hpqlog O43 - CFD: 12/05/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Identities O43 - CFD: 12/05/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Intel Corporation O43 - CFD: 25/03/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Macromedia O43 - CFD: 12/11/2014 - [0] D -- C:\Users\Flora\AppData\Roaming\Malwarebytes O43 - CFD: 10/11/2014 - [] SD -- C:\Users\Flora\AppData\Roaming\Microsoft O43 - CFD: 25/05/2011 - [] D -- C:\Users\Flora\AppData\Roaming\Mozilla O43 - CFD: 26/05/2011 - [] D -- C:\Users\Flora\AppData\Roaming\OpenOffice.org O43 - CFD: 12/05/2011 - [] D -- C:\Users\Flora\AppData\Roaming\PictureMover O43 - CFD: 13/11/2014 - [] D -- C:\Users\Flora\AppData\Roaming\Skype O43 - CFD: 11/11/2014 - [] D -- C:\Users\Flora\AppData\Roaming\SoftGrid Client O43 - CFD: 05/04/2012 - [] D -- C:\Users\Flora\AppData\Roaming\TeamViewer O43 - CFD: 06/06/2012 - [] D -- C:\Users\Flora\AppData\Roaming\Tific O43 - CFD: 24/07/2014 - [0] D -- C:\Users\Flora\AppData\Roaming\TP O43 - CFD: 05/11/2014 - [] D -- C:\Users\Flora\AppData\Roaming\TuneUp Software O43 - CFD: 11/02/2013 - [] D -- C:\Users\Flora\AppData\Roaming\VIVO INTERNET O43 - CFD: 01/07/2012 - [] D -- C:\Users\Flora\AppData\Roaming\WildTangent O43 - CFD: 14/05/2011 - [0] D -- C:\Users\Flora\AppData\Roaming\Windows Live Writer O43 - CFD: 26/12/2015 - [] D -- C:\Users\Flora\AppData\Roaming\ZHP O43 - CFD: 03/06/2011 - [] D -- C:\Users\Flora\AppData\Local\Adobe O43 - CFD: 22/10/2013 - [] D -- C:\Users\Flora\AppData\Local\Apple O43 - CFD: 22/10/2013 - [] D -- C:\Users\Flora\AppData\Local\Apple Computer O43 - CFD: 12/05/2011 - [0] SHD -- C:\Users\Flora\AppData\Local\Application Data O43 - CFD: 23/01/2012 - [] D -- C:\Users\Flora\AppData\Local\Apps O43 - CFD: 25/12/2015 - [] D -- C:\Users\Flora\AppData\Local\Avg O43 - CFD: 06/03/2015 - [] D -- C:\Users\Flora\AppData\Local\AVG Web TuneUp =>Toolbar.AVGSafeGuard O43 - CFD: 12/11/2014 - [] D -- C:\Users\Flora\AppData\Local\Avg2015 O43 - CFD: 12/11/2014 - [] D -- C:\Users\Flora\AppData\Local\CrashDumps O43 - CFD: 23/01/2012 - [0] D -- C:\Users\Flora\AppData\Local\Deployment O43 - CFD: 30/03/2013 - [] D -- C:\Users\Flora\AppData\Local\Diagnostics O43 - CFD: 25/12/2015 - [] D -- C:\Users\Flora\AppData\Local\ElevatedDiagnostics O43 - CFD: 18/11/2014 - [] SHD -- C:\Users\Flora\AppData\Local\EmieBrowserModeList O43 - CFD: 05/09/2014 - [] SHD -- C:\Users\Flora\AppData\Local\EmieSiteList O43 - CFD: 05/09/2014 - [] SHD -- C:\Users\Flora\AppData\Local\EmieUserList O43 - CFD: 26/12/2015 - [] D -- C:\Users\Flora\AppData\Local\Google O43 - CFD: 02/06/2011 - [] D -- C:\Users\Flora\AppData\Local\Hewlett-Packard O43 - CFD: 12/05/2011 - [] D -- C:\Users\Flora\AppData\Local\Hewlett-Packard_Company O43 - CFD: 12/05/2011 - [0] SHD -- C:\Users\Flora\AppData\Local\History O43 - CFD: 05/11/2014 - [] D -- C:\Users\Flora\AppData\Local\MFAData O43 - CFD: 24/07/2014 - [] D -- C:\Users\Flora\AppData\Local\Microsoft O43 - CFD: 12/02/2014 - [] DC -- C:\Users\Flora\AppData\Local\MigWiz O43 - CFD: 14/10/2014 - [] D -- C:\Users\Flora\AppData\Local\Programs O43 - CFD: 12/05/2011 - [] D -- C:\Users\Flora\AppData\Local\RemEngine O43 - CFD: 24/07/2014 - [] D -- C:\Users\Flora\AppData\Local\SoftGrid Client O43 - CFD: 26/12/2015 - [] D -- C:\Users\Flora\AppData\Local\Temp O43 - CFD: 12/05/2011 - [0] SHD -- C:\Users\Flora\AppData\Local\Temporary Internet Files O43 - CFD: 01/07/2012 - [] D -- C:\Users\Flora\AppData\Local\VirtualStore O43 - CFD: 16/05/2014 - [] D -- C:\Users\Flora\AppData\Local\Windows Live O43 - CFD: 14/05/2011 - [] D -- C:\Users\Flora\AppData\Local\Windows Live Writer O43 - CFD: 20/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0134D9BE-CA82-41DA-94D6-54CA6F3E1AAE} =>.Empty O43 - CFD: 26/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{01FF216A-1FBC-4DB5-B5C0-1933DFFD6890} =>.Empty O43 - CFD: 30/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{03583F45-8B35-4010-B712-F9C7E2F0BF85} =>.Empty O43 - CFD: 03/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{03D80747-184F-470C-9A9D-986E471AA945} =>.Empty O43 - CFD: 20/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{049BFA2E-B841-4147-A811-349E9ABCFA89} =>.Empty O43 - CFD: 12/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{049DBC9A-51B4-407D-8D88-AA8D83A250FE} =>.Empty O43 - CFD: 27/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{04C0E5B3-7F16-4AED-A8E2-9E33E1C4F398} =>.Empty O43 - CFD: 12/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{054F8036-AFD0-4A13-AEF1-A80881FDD04D} =>.Empty O43 - CFD: 18/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{058D5B02-D70B-44AB-99F1-B4981730667D} =>.Empty O43 - CFD: 02/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{06004CF2-4908-4939-A85E-E8605F6D2B93} =>.Empty O43 - CFD: 06/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{063593D2-DC4B-416E-87B2-97E275720011} =>.Empty O43 - CFD: 31/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{06373C45-230E-440F-ABEB-1FFC74E75F6C} =>.Empty O43 - CFD: 17/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{07A78F2F-38A7-4D04-88FA-6F1AFAF4FD73} =>.Empty O43 - CFD: 13/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{08AE0CD0-1302-4C3B-9C44-5823AE11D525} =>.Empty O43 - CFD: 29/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{08BBD25A-FF7C-4B74-8FA7-A3324958907A} =>.Empty O43 - CFD: 30/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{08D10145-6930-4FEB-8244-6B373E8D5F80} =>.Empty O43 - CFD: 26/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{09658B79-298E-4919-9E01-1FAD1490D22A} =>.Empty O43 - CFD: 26/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{096622A4-221E-41F6-A42F-9B7C795755DC} =>.Empty O43 - CFD: 17/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{09DA0467-0F9E-4BEE-9998-2AEB48849CCC} =>.Empty O43 - CFD: 30/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{09E67D88-C7A3-444C-8CDD-395EBF5C496A} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0B717512-A396-4D0E-B647-3A5363131B64} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0B9118B7-E940-4678-8ED2-01811DB6EDAD} =>.Empty O43 - CFD: 23/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0B985C14-DEF2-42EC-92EB-672CFFA550BB} =>.Empty O43 - CFD: 23/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0B986FF6-7B66-40CE-BAC4-A36FB1F15635} =>.Empty O43 - CFD: 19/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{0C12FC68-0742-4736-8921-4669A6E10495} =>.Empty O43 - CFD: 24/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0C1A4E9A-0188-4759-A63B-AC18FA65F017} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{0CDDA12E-5D72-42EA-A3B4-E41C6EB30DFF} =>.Empty O43 - CFD: 12/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{0DF565AE-0C99-41BC-B2F7-D34FE1961924} =>.Empty O43 - CFD: 09/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{0F3203CF-1D9C-43D8-814C-89093E80C7F0} =>.Empty O43 - CFD: 21/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{10865684-9966-4022-9F31-4BAD2D52BAB7} =>.Empty O43 - CFD: 13/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{10F56C11-D984-4DC7-AFDD-06C30EB8F896} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{11BE7CF8-9586-4F1D-B3FB-74A0A8462F7E} =>.Empty O43 - CFD: 06/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{12306A87-B2BC-41DB-A423-F6F58A631B41} =>.Empty O43 - CFD: 03/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{14505F9B-D898-4F58-B901-6178C35CB393} =>.Empty O43 - CFD: 08/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{150F9F9B-DB90-4A7C-B65E-E2DEBB213B46} =>.Empty O43 - CFD: 27/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{160BE5B3-5DB5-4860-9B85-09C3BF6646C8} =>.Empty O43 - CFD: 30/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{162BF73E-C7B7-45C5-856A-FA2C7ECD9D41} =>.Empty O43 - CFD: 23/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1655FBA8-733D-42F5-8F0D-F2A5F838E516} =>.Empty O43 - CFD: 30/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{17968D6F-99A4-40BC-A6D1-3181308F4889} =>.Empty O43 - CFD: 11/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{179E88AC-5B83-4914-856F-A5277CE82CB9} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{189FEF80-2088-4FAF-8ABD-0EC3DFD04805} =>.Empty O43 - CFD: 19/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{18FA633A-44CA-4D42-A6D6-7A2ED6270FA2} =>.Empty O43 - CFD: 22/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{19528CAE-F538-42AC-B189-EB10D546B78D} =>.Empty O43 - CFD: 29/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{198E1D8F-CFD8-4DF5-817C-95FB90CE7BAF} =>.Empty O43 - CFD: 27/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1CBFF58C-9636-45A2-A474-3D4F70D16EFF} =>.Empty O43 - CFD: 09/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1E23E0AA-EBFF-4912-859D-CD02632E4CC7} =>.Empty O43 - CFD: 08/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{1E57A3F6-BDA2-4F17-A780-258A3AA2E59E} =>.Empty O43 - CFD: 24/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1E662C2A-EDA6-4EEB-A8D0-F3B3CD490114} =>.Empty O43 - CFD: 30/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1EB2BC86-131A-4B88-BA45-4F6BDC84A878} =>.Empty O43 - CFD: 23/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{1FEDE289-CECF-4AB4-8EDB-B500B4A66056} =>.Empty O43 - CFD: 08/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{20246787-18B3-4410-A680-434720972FFC} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{20433C72-557D-4575-A84A-A3A00221EF19} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2045353E-A316-4E1F-8C31-72EF65BB9951} =>.Empty O43 - CFD: 14/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{207F1ABA-18B2-4B0E-A9DB-9CEF83B96FD0} =>.Empty O43 - CFD: 18/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{20964E61-2751-47FD-9FB0-3ABD5948CA88} =>.Empty O43 - CFD: 27/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{20AA9571-DA54-41BD-9C4F-1764C55FFC92} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{20BBE74B-4622-41E1-A68F-DF40589591F5} =>.Empty O43 - CFD: 28/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{21DE9ABA-5E02-48B2-8388-75FE50FB890F} =>.Empty O43 - CFD: 06/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2270B4D2-D01F-4ABF-A6CD-9B87F392960E} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{236E2547-DDC6-4524-B2E8-5E87DADCABEA} =>.Empty O43 - CFD: 29/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{257E4D8D-EC88-4ADC-A2B8-DD2AD9B60348} =>.Empty O43 - CFD: 01/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2599EA9F-4D33-4360-9CC3-F3595B3B5253} =>.Empty O43 - CFD: 04/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{259DF7AE-0536-4874-BFD5-9331B2CB8716} =>.Empty O43 - CFD: 24/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{25E16F8D-33D4-4E0D-83FB-4B700CBDC8FF} =>.Empty O43 - CFD: 07/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{261C7A0E-7DBB-4F81-A0B5-93E5C7DC398A} =>.Empty O43 - CFD: 25/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{262C063F-8201-443F-ADE1-E1193BFB5CEF} =>.Empty O43 - CFD: 02/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2667776B-B6B4-43FE-865A-C85D5D4A79E1} =>.Empty O43 - CFD: 24/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{27EFE2E6-3474-4578-A869-AFB2DD54A05D} =>.Empty O43 - CFD: 07/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{27F5BB0F-388E-4F32-9DBF-FB5BA029A29F} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{284637F0-B8AF-4FDD-AAF3-9AFA7AC89EA9} =>.Empty O43 - CFD: 17/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{28817F11-F9F9-4B2B-95C1-9803476B84C3} =>.Empty O43 - CFD: 07/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2896150B-3929-4CCB-A284-EEC3D0603FF5} =>.Empty O43 - CFD: 08/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{28AC6A9A-E6B3-4CDC-BDE9-8D8DACB9B1F8} =>.Empty O43 - CFD: 31/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{2914C683-0D83-4635-B2DB-98C961B5BAF8} =>.Empty O43 - CFD: 04/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{291CFB29-EE81-4B4B-B2DE-AAA257D358CD} =>.Empty O43 - CFD: 18/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{296266FD-16B5-4D19-B040-FB77C660BE55} =>.Empty O43 - CFD: 25/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{29DFDD97-C2AF-41FD-8E05-D4D99C729BAE} =>.Empty O43 - CFD: 15/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{2A6AD378-FDE2-4A6A-A314-3EF1E30AEBD2} =>.Empty O43 - CFD: 20/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2AB9DF4F-3890-424B-AE1A-ECAE3765D2EC} =>.Empty O43 - CFD: 05/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2BDC39A7-DA27-48FB-A376-49FF0A12141E} =>.Empty O43 - CFD: 21/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2C89F000-73A2-45A5-A9A8-33F487CD818B} =>.Empty O43 - CFD: 21/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{2CA25347-7881-4A83-A0AD-BDA11343501A} =>.Empty O43 - CFD: 24/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2DEA74D0-B553-48C9-BAB2-D49CCE3A4E77} =>.Empty O43 - CFD: 06/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2E254628-1BDF-405C-81F9-41AD3A38C25F} =>.Empty O43 - CFD: 31/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2E3249B2-5C92-4F1E-9CEC-FD67FDFF2515} =>.Empty O43 - CFD: 07/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2E587497-B193-4FFE-B484-86287619E86A} =>.Empty O43 - CFD: 10/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2EA050F7-A72C-43F2-9E36-A0CC1977F1DF} =>.Empty O43 - CFD: 16/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2F93A349-043B-4801-B835-F3EB6C9FAE05} =>.Empty O43 - CFD: 07/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{2FB02C32-84C5-4E9E-8EC4-6191663C376C} =>.Empty O43 - CFD: 25/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3019FFF2-7465-491C-9927-20F37B93EC9B} =>.Empty O43 - CFD: 21/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{30819364-773D-45FA-89F9-EF52976936D2} =>.Empty O43 - CFD: 17/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{31558B50-3D4E-4548-8CFF-3647A0087524} =>.Empty O43 - CFD: 20/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{31760448-8C83-48E7-8586-030FC0987CB1} =>.Empty O43 - CFD: 22/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{32661DFD-AC25-46A7-AF8C-B41099FF4174} =>.Empty O43 - CFD: 25/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{32AF8F5C-FA33-4F1E-AD83-810D23176A37} =>.Empty O43 - CFD: 07/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{32DA52CD-FE8A-424F-B420-7AFB60C441CC} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{339ABECF-E862-4A5D-AFB0-131D6296AFD3} =>.Empty O43 - CFD: 23/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{350B9702-D694-4D87-A1A8-DA6DA0F83D86} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3524D150-1A86-4EC9-8F93-5712782DE5B3} =>.Empty O43 - CFD: 08/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3544A9B6-3423-4DE6-A296-9E3191D0C9E4} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{359FDB2D-065B-4AAA-8175-3494248B713F} =>.Empty O43 - CFD: 11/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{35F54040-BCB2-423F-B785-DC8A8534B703} =>.Empty O43 - CFD: 27/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{36C15099-5FA6-44E3-9AC1-A0BB5F059CA9} =>.Empty O43 - CFD: 27/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{378E2216-2B38-4954-8509-F0ADA48929A0} =>.Empty O43 - CFD: 26/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3830B3FD-97FC-436B-B754-E95D985DCF2A} =>.Empty O43 - CFD: 06/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{38385585-56ED-49EB-9A03-3A5A41DE0D4A} =>.Empty O43 - CFD: 18/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{38EAAA13-416C-4331-841D-F779793A25BD} =>.Empty O43 - CFD: 28/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3A621058-CB7D-442A-AF47-000D39A325B4} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3ABEFADA-C465-4101-AD34-824BD0CBD19C} =>.Empty O43 - CFD: 20/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3AF17D1F-2B58-4F98-BDA1-5D0A7E025B84} =>.Empty O43 - CFD: 23/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{3B0A647E-3EDF-44C3-A197-428C998FCDE2} =>.Empty O43 - CFD: 26/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3CB3FF75-D1A3-46A1-9D5D-63884161A5A1} =>.Empty O43 - CFD: 16/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3DCC6227-366A-4F19-B2C2-60238C133F41} =>.Empty O43 - CFD: 24/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3DEB2B45-74DB-4BC3-9EA7-DF96BE0C0603} =>.Empty O43 - CFD: 12/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3E0C2A8B-B4EC-4EF7-98A4-9D3EBCDC38E3} =>.Empty O43 - CFD: 27/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3E807293-9463-4CDD-869E-19AD412053B5} =>.Empty O43 - CFD: 15/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{3F208B9C-0ABB-4AB1-B63D-E8EACC5269E8} =>.Empty O43 - CFD: 17/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{3F7ED219-CC09-4D48-8FA2-5AC7C4D9BBD2} =>.Empty O43 - CFD: 30/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{40C587F3-A261-4144-B3D5-96BCFB8C5570} =>.Empty O43 - CFD: 28/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{41D70D64-FAE0-4DA0-8C88-FAF4E0C5FD85} =>.Empty O43 - CFD: 18/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4385F14E-A211-451B-98CA-603692E21399} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{44DA69C8-2EBD-4ADB-BC57-B0C16525DA31} =>.Empty O43 - CFD: 15/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4781B74D-CAE8-42ED-9DF6-38DD9A61AB1A} =>.Empty O43 - CFD: 15/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{47B1268A-6988-4363-B7FB-A22ED22D6A00} =>.Empty O43 - CFD: 16/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{47CF6488-905C-458E-BA9F-61D15F23CCDA} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{47E6FC7A-A472-4A7A-B2A1-8AB27747BE9F} =>.Empty O43 - CFD: 13/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{482EDB56-4490-4017-909D-A1031E1A18FB} =>.Empty O43 - CFD: 20/07/2011 - [0] D -- C:\Users\Flora\AppData\Local\{4981E9AF-FA29-40E6-BA13-4A2A3660AA14} =>.Empty O43 - CFD: 25/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4A21C29A-EE14-4563-B28B-8492ED84693A} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4A6C7CA1-432C-4317-95A7-03CBE6247713} =>.Empty O43 - CFD: 07/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4B61C384-A4EC-4464-8D25-8A50AE74D180} =>.Empty O43 - CFD: 21/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4BF3D527-CDF2-4E7A-9BDA-6A7F01D260AA} =>.Empty O43 - CFD: 28/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4CBF7E7E-9121-4266-91EE-FA32619C0C76} =>.Empty O43 - CFD: 01/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{4DE06D4C-1FAA-4263-9643-1E29BD642A75} =>.Empty O43 - CFD: 18/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4E8CE88B-9183-4152-9ACC-A1B507428553} =>.Empty O43 - CFD: 19/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4E921709-10E8-42BE-9073-D1D27B3A08C4} =>.Empty O43 - CFD: 16/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{4ED76E67-C510-4F73-B065-523A900BE580} =>.Empty O43 - CFD: 12/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{501734C4-9C39-4134-8473-73400857E8CF} =>.Empty O43 - CFD: 25/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{50A5F337-1F07-4644-8D09-5DDDB754B7D1} =>.Empty O43 - CFD: 24/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5107C572-4B05-498F-BE9F-28F77B9CFA82} =>.Empty O43 - CFD: 06/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{51287D3D-1140-4325-BE33-A327583F880B} =>.Empty O43 - CFD: 20/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{51EA4C1C-B785-409E-AD92-147F1D90F0F7} =>.Empty O43 - CFD: 19/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{521C1604-E5C6-4A5C-B5DD-49E65AF0C3DA} =>.Empty O43 - CFD: 25/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{53E93E86-1120-44EC-BFEC-27EB88B1E072} =>.Empty O43 - CFD: 30/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5543B23E-AE1F-4CE6-A0DF-95ED94BD123D} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5571B0F6-10CE-49A1-905B-31EFC807EA75} =>.Empty O43 - CFD: 20/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{55C306B2-341E-4590-A6E4-EB72FFAA4334} =>.Empty O43 - CFD: 03/02/2013 - [0] D -- C:\Users\Flora\AppData\Local\{56D3231E-7DF6-4270-9E43-7A4341CACF70} =>.Empty O43 - CFD: 17/07/2011 - [0] D -- C:\Users\Flora\AppData\Local\{574117D8-D40C-4BAC-ABB1-2D5A835814D6} =>.Empty O43 - CFD: 25/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5798F775-9A45-4F80-ABC4-6F493E528DEB} =>.Empty O43 - CFD: 07/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{57D6E89A-85AB-47DE-BF2C-D5322670D30D} =>.Empty O43 - CFD: 19/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{585D2F1D-57EF-4FA0-9A6B-803A08329FE5} =>.Empty O43 - CFD: 05/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{587F8B3C-54F8-4F30-96DE-B07569A582AE} =>.Empty O43 - CFD: 30/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{59347543-601F-4558-8709-51FBC31B60AF} =>.Empty O43 - CFD: 13/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5A9CC935-CF9B-400F-9C64-3A92B6F44D6C} =>.Empty O43 - CFD: 24/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5AD8EB2D-159C-4E11-9DDF-5AA564DC75E9} =>.Empty O43 - CFD: 28/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5B11FE34-E6BD-43D3-B926-B79C94C2EC7A} =>.Empty O43 - CFD: 23/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5B4160A9-F2CA-472C-BDB9-AFCFA538CA68} =>.Empty O43 - CFD: 07/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5B9EA073-AB21-4C36-B5F5-C10E0404B687} =>.Empty O43 - CFD: 19/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5BF1D599-EAFD-462A-8027-9B3BD2C26E4D} =>.Empty O43 - CFD: 26/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5D52E7B5-B1F5-4122-8FEF-E23D79AB59A0} =>.Empty O43 - CFD: 28/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5DE52879-E569-4C82-8431-534190394E88} =>.Empty O43 - CFD: 15/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5DF97687-F773-46DF-A325-8F99399E2B82} =>.Empty O43 - CFD: 26/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5E5C2379-EBFE-4B39-9A19-317CD1252BB3} =>.Empty O43 - CFD: 25/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5E9724F8-5988-4837-933F-9F95965106FC} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{5EAED415-2F10-4FD5-895F-BAEB0D2ADC37} =>.Empty O43 - CFD: 28/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6049630B-1FD8-48A2-9BF7-4579D53F90EE} =>.Empty O43 - CFD: 25/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{60C6F666-81B9-4AE2-9331-8314C85514CB} =>.Empty O43 - CFD: 31/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{61AE3096-06D8-42FD-AD33-42D5E7017D6F} =>.Empty O43 - CFD: 03/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6243A710-AFE6-4BC9-8E2A-4C1B09390D33} =>.Empty O43 - CFD: 28/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{645E3484-8597-4AF6-A578-33E867C70A15} =>.Empty O43 - CFD: 13/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{648FD29A-5756-403C-BBA7-3AEF2F47F520} =>.Empty O43 - CFD: 12/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{651A9969-CEDC-4B64-8F3D-103FA77ABA6E} =>.Empty O43 - CFD: 19/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{655B6A6B-DB1B-4EC8-966C-3AB43FA4FCF3} =>.Empty O43 - CFD: 25/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{65BB7F31-930A-43FC-B1FC-39EF5B56E75F} =>.Empty O43 - CFD: 30/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{661A188E-28AC-4924-8687-3BDD2F85A62C} =>.Empty O43 - CFD: 24/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{68655852-E212-4FAA-A821-4BBE6DF1A9E9} =>.Empty O43 - CFD: 13/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{689CE2A3-E145-4257-89FA-1581FCD3351C} =>.Empty O43 - CFD: 02/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{68E8C274-DF61-439E-AD85-F34061259D3C} =>.Empty O43 - CFD: 24/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{690CC847-9673-48B6-BF22-A1FF9839BF03} =>.Empty O43 - CFD: 13/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6955D809-07CB-4711-9998-F5CD0FE800EF} =>.Empty O43 - CFD: 28/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{695D3523-46AF-4FF8-9266-E1C8150FB302} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6A1F8835-0DF4-4988-B8CC-DD5D6E8494CA} =>.Empty O43 - CFD: 14/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6AAC21DB-8737-41A5-9DAF-7D267CB63CB7} =>.Empty O43 - CFD: 07/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6B5B6DB8-C766-469B-AD16-C1E15F406DA5} =>.Empty O43 - CFD: 29/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6BDC4336-BA00-4F10-82F0-35F60B2F19F4} =>.Empty O43 - CFD: 05/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6C1C00E3-25C7-4D3E-8863-A5434770A7E3} =>.Empty O43 - CFD: 15/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6C431AEF-B985-4025-A53F-B5B36BFDFE0B} =>.Empty O43 - CFD: 26/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6CB9A645-44E5-41C8-BDC0-CAE09AD27AB1} =>.Empty O43 - CFD: 01/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{6CF4F9D0-5157-4532-99CB-DF351A1865B2} =>.Empty O43 - CFD: 11/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6D5CA68E-745E-471F-BC86-7C00655C32B8} =>.Empty O43 - CFD: 09/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6DAD1543-4B4C-480F-9DA8-2191C2BC5C84} =>.Empty O43 - CFD: 25/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6DAE4B3A-5591-4B6E-B56F-09F08152692D} =>.Empty O43 - CFD: 04/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6E8929FC-38F7-4031-9872-2E92467A1698} =>.Empty O43 - CFD: 31/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{6EF27D6F-E2F4-4B7B-BD58-8EECF5515704} =>.Empty O43 - CFD: 26/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6F11BF36-559D-4546-B4FE-738EAA3D27BE} =>.Empty O43 - CFD: 08/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{6F34EBFE-87FA-40E0-958C-74B42CEB429E} =>.Empty O43 - CFD: 16/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6FCCF3EA-394A-4383-828B-A00E6D49335A} =>.Empty O43 - CFD: 12/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{6FD3E4FA-751A-49F5-9D73-DF23A547D40E} =>.Empty O43 - CFD: 22/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{70150AB2-4EE7-40BC-9150-3FA2418E4C9B} =>.Empty O43 - CFD: 05/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{705A127D-BE8F-468F-B93C-30EB53E98102} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{705E1534-64A2-494F-A077-37925CCE4DBE} =>.Empty O43 - CFD: 15/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{708883DA-EA95-4E53-BFBF-D98BBD6883A7} =>.Empty O43 - CFD: 23/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{715AB111-F693-4108-B7E6-CFF1AF71562C} =>.Empty O43 - CFD: 30/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{71F771B3-9A9E-4322-90CB-1EFFDD3686DE} =>.Empty O43 - CFD: 08/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{72093515-BF53-4F21-9CC5-1D86ACC48953} =>.Empty O43 - CFD: 04/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{73A0CEF5-C5C4-4F15-9C68-FF1B8E251092} =>.Empty O43 - CFD: 27/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{743BEE2B-D7AE-4E48-BB31-672535520884} =>.Empty O43 - CFD: 11/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{74ACF93D-EBB2-46D5-BD5B-0CD27EDA8788} =>.Empty O43 - CFD: 24/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7562FA0A-8919-4C71-A04F-4321E300ECF6} =>.Empty O43 - CFD: 21/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{76DBD18A-7CB7-4E70-BBE3-250CBF1E42CA} =>.Empty O43 - CFD: 02/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{76E646DF-D1E2-4500-9B3E-F88BD8B5FE2D} =>.Empty O43 - CFD: 11/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{77F499C6-98B9-4D7C-95DD-0AF96889BFE4} =>.Empty O43 - CFD: 06/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{78F34302-948F-41DB-8D9D-14009FD18F3A} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7927E37E-FC96-49C5-85E4-6D40C56A6EEB} =>.Empty O43 - CFD: 29/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{792FF446-648E-4E8D-84A6-24FD406C578E} =>.Empty O43 - CFD: 17/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{7AA9B8B8-5E98-4C01-B2B9-26FAF4114D59} =>.Empty O43 - CFD: 11/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7AC38FD8-813D-477F-8222-B891236EF67D} =>.Empty O43 - CFD: 27/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7AF0AD02-9955-40DA-AE00-6BA7D1E5F780} =>.Empty O43 - CFD: 26/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{7B392AE4-B7C9-4EEB-8F8F-12B876F1A1BD} =>.Empty O43 - CFD: 28/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7BF8A90F-9F1F-4358-9E72-9D3C1F6185E7} =>.Empty O43 - CFD: 24/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{7D322D5E-296A-4BB3-B55F-30962D9BDAC9} =>.Empty O43 - CFD: 22/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{7DA99332-3C8E-4184-BDB7-0C023D611F7B} =>.Empty O43 - CFD: 30/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{7E70ADCD-0534-402B-B91B-487A42FE5D68} =>.Empty O43 - CFD: 22/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{7EC90C25-68EC-4253-976B-4C0A81D99337} =>.Empty O43 - CFD: 06/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{80E074C3-9837-4560-8C82-CF6CE3D3F5EB} =>.Empty O43 - CFD: 26/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8182CBB1-176E-4C7C-AB64-2DB546F67CFB} =>.Empty O43 - CFD: 28/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{82B9405B-2EEE-4ADE-B374-0983B5D3B54A} =>.Empty O43 - CFD: 26/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{8346E518-8B66-4E4F-BDB3-80F13C30D500} =>.Empty O43 - CFD: 17/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{83A7C38B-1C96-4129-9283-03773A3E883F} =>.Empty O43 - CFD: 16/05/2014 - [0] D -- C:\Users\Flora\AppData\Local\{853A8A69-F265-419B-912F-F48A34FA7B30} =>.Empty O43 - CFD: 06/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8649DB49-9293-494D-B2BF-CEA98B5E0115} =>.Empty O43 - CFD: 07/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{866E29A6-D578-46CB-8438-122BD9C867DF} =>.Empty O43 - CFD: 16/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8684DEF7-7777-43AC-9922-3E163648D634} =>.Empty O43 - CFD: 27/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{87E54E58-5A70-430D-BB04-0DDF713BC8B8} =>.Empty O43 - CFD: 20/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{883ABFC9-D955-4FEB-B384-F1B1FFA598F2} =>.Empty O43 - CFD: 30/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{88BC6F76-CDE7-473B-9E8E-348EBA47AADF} =>.Empty O43 - CFD: 21/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{894F0789-C0CD-433A-B3CE-D7A6927707FE} =>.Empty O43 - CFD: 16/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{89F44086-545A-409F-AC82-C06F86CA4780} =>.Empty O43 - CFD: 05/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8A1FC017-4DCA-4D02-AA27-630290A830EF} =>.Empty O43 - CFD: 23/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8A2B2EA7-06D7-44BF-8B00-2DABD43DEC33} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8A7C5AF6-F039-4247-866D-AEF991BC3BAC} =>.Empty O43 - CFD: 27/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8C4FD5A1-8C01-4026-BB2C-F41E4E7785B6} =>.Empty O43 - CFD: 15/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8C59F0D7-4E04-4EE3-BA09-80DAA4B4E064} =>.Empty O43 - CFD: 18/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8CA5A703-DE28-4012-8C1A-3CE95D9672D1} =>.Empty O43 - CFD: 11/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8E4D4C49-0952-4109-A79D-4EE954CCC11C} =>.Empty O43 - CFD: 08/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8E6470FB-A338-4FCA-9D4B-45B40E9031BC} =>.Empty O43 - CFD: 28/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8EEA74E7-CA14-4E51-8A1F-6184B4198599} =>.Empty O43 - CFD: 30/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8F1099E3-B9E7-474A-B24C-2206A677646F} =>.Empty O43 - CFD: 21/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8F7DB650-D168-4D8D-88DA-E807DD59A950} =>.Empty O43 - CFD: 27/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{8F898D6E-957E-4422-BC3A-F140B0BBFAAE} =>.Empty O43 - CFD: 09/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{90A59D2B-C2F2-43EF-8198-65849219A2D7} =>.Empty O43 - CFD: 10/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{911ABD4D-A3C1-45E6-90E0-E4DE03E0C36D} =>.Empty O43 - CFD: 24/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{912FC25C-9EE2-43DF-8425-AE9749F7632D} =>.Empty O43 - CFD: 04/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{913B8403-AEBC-40C1-9531-6501B3F932B9} =>.Empty O43 - CFD: 25/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{920008F8-3AD4-40D4-A7CC-68BBCCD4210E} =>.Empty O43 - CFD: 28/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{92B5AAB0-DCF5-4296-8F32-54F95EC9137A} =>.Empty O43 - CFD: 17/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{94B56B1F-1F66-461A-B206-F71CC18271FD} =>.Empty O43 - CFD: 01/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{95158282-F1A7-498F-A1A5-3BECC7323CE0} =>.Empty O43 - CFD: 11/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9528FDBB-D0B0-443E-9366-D681CEE32CB0} =>.Empty O43 - CFD: 30/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{952F43EE-5457-42E2-A127-DBF34CAA9D24} =>.Empty O43 - CFD: 17/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{95C96F48-9BC2-4028-AFEB-3D14C43835A3} =>.Empty O43 - CFD: 03/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{96A32CC4-2B21-4C00-8F60-41688346C3E4} =>.Empty O43 - CFD: 05/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{96F126CF-2064-4043-906D-81DE131E8F60} =>.Empty O43 - CFD: 28/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{974BE4F3-0B36-4D4A-ABEA-815C00C6A9A8} =>.Empty O43 - CFD: 23/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9762D717-0463-4E9C-BF28-0E01A71048D7} =>.Empty O43 - CFD: 30/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{978B5640-CED4-4D45-B60C-130218D1F73A} =>.Empty O43 - CFD: 12/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{97A73D0E-D152-4515-A893-2E24EECD6DFB} =>.Empty O43 - CFD: 10/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9853DE8B-EE1B-4207-BB95-6B6D39A44A2E} =>.Empty O43 - CFD: 26/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{993B239A-93CC-4C63-B57C-87BD859EF7EE} =>.Empty O43 - CFD: 20/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{9A405C1A-3DD3-497F-8027-4A7D30B8ABA9} =>.Empty O43 - CFD: 12/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9B50CF8A-96FB-45CD-882A-53AD29114890} =>.Empty O43 - CFD: 12/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9B853056-6E4B-4455-9B49-404B4C43B7E6} =>.Empty O43 - CFD: 02/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9C415AED-2E66-47F8-B4F4-83E924705537} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9D382954-8EB8-4C97-AFE9-3F97938B1A59} =>.Empty O43 - CFD: 04/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9D89D226-076F-468D-B4E5-0B6CD60EBC0F} =>.Empty O43 - CFD: 05/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{9E8AB805-B2E3-4CE9-8E95-48A95BB82F41} =>.Empty O43 - CFD: 10/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{9F7EC3E5-BCFF-4F15-9471-079CE0DF63B2} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A09CE206-C918-4DC5-9E94-9FB70224DDC1} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A0F1045D-B549-45C9-980F-F3C2BF4054A1} =>.Empty O43 - CFD: 23/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A11F7479-3ED4-4258-A943-4C37DECBB534} =>.Empty O43 - CFD: 21/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A1406216-951B-4C8E-8634-E0239B10921B} =>.Empty O43 - CFD: 12/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A24EB974-4CD7-4F92-93CC-C87F5A398113} =>.Empty O43 - CFD: 16/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A2799A81-00DB-41C1-809F-8539B73DA5AA} =>.Empty O43 - CFD: 28/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A3990064-72C0-495E-8995-B8B62FCB25A7} =>.Empty O43 - CFD: 12/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A40902EF-6D13-4D29-9B16-C12A91ED0B39} =>.Empty O43 - CFD: 15/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A4DDEFD6-2618-443D-BDCC-D121519711A4} =>.Empty O43 - CFD: 09/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A59DEDD8-4535-48C3-877F-2633EB253761} =>.Empty O43 - CFD: 03/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{A8BE3CD8-2A60-4ADD-AA00-66D75A0A93CB} =>.Empty O43 - CFD: 01/02/2013 - [0] D -- C:\Users\Flora\AppData\Local\{AB31B6D1-0E70-426B-86B8-B53DFEE2E867} =>.Empty O43 - CFD: 17/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{ABB4D51D-7302-4B8F-908A-0EA0A2FADF62} =>.Empty O43 - CFD: 02/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{AC084323-4960-4586-A0B1-34F7F908A528} =>.Empty O43 - CFD: 09/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{ADFB5F55-1EE5-44F9-9A25-FBD874B96E5D} =>.Empty O43 - CFD: 20/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{AF164FCD-1AB7-4D78-8BCF-D0E299BBF20D} =>.Empty O43 - CFD: 20/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B06608CB-B974-472A-A0EB-9CE14D36732B} =>.Empty O43 - CFD: 23/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{B0D3CBDE-E3AC-4EE7-8773-0EA42E8BCED0} =>.Empty O43 - CFD: 11/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B1889F23-DAE5-4E19-81C5-2B1AA37E3502} =>.Empty O43 - CFD: 02/02/2013 - [0] D -- C:\Users\Flora\AppData\Local\{B21B68A0-F5C6-450A-8581-6F9C26415FD7} =>.Empty O43 - CFD: 06/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B326C677-8645-4CC9-A7FF-B8381372B46D} =>.Empty O43 - CFD: 07/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B3583B87-50F9-4BD9-8D7F-AAFAD9A3D1F9} =>.Empty O43 - CFD: 11/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B3B81C03-47EB-4880-97AF-FBE2211A67FD} =>.Empty O43 - CFD: 21/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B3C64887-B294-48EE-8C65-B83A6FF1ABF2} =>.Empty O43 - CFD: 14/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B4706800-37DD-46AB-99B5-CD0ADB8BCA59} =>.Empty O43 - CFD: 05/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B506EB1F-001A-4D60-8668-A0952CA24FF2} =>.Empty O43 - CFD: 26/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B544E871-8E8B-40DE-90F1-513B0173C95D} =>.Empty O43 - CFD: 11/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B5612D5F-1B5F-483E-8C30-094BF5F594A5} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B58AEAAB-1134-4243-9C88-82A3D7317019} =>.Empty O43 - CFD: 28/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B5ED3C86-A9A6-4745-8FD1-AE4F29207641} =>.Empty O43 - CFD: 07/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B5ED4676-58C2-4EF8-879E-CD4186005163} =>.Empty O43 - CFD: 28/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B6022E7B-E1C0-4B20-AC0F-4AF35A5A5AB8} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B6248DC2-D6F2-46D4-806F-EA31C778540B} =>.Empty O43 - CFD: 23/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B6DCC636-BD41-49BA-8A02-9E64BAB6E62A} =>.Empty O43 - CFD: 04/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B6E96825-FFFA-44FC-BBD1-FF6CA7E93BCA} =>.Empty O43 - CFD: 31/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B70B9708-A406-4374-B78E-F0905A291858} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B86FE174-834D-4E2E-9409-FA59C448F8BE} =>.Empty O43 - CFD: 01/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B912A06A-33B0-4318-88F4-42A4D5A77D92} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B931AF27-00CB-4ECE-89C0-76F1624F5E17} =>.Empty O43 - CFD: 12/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B93B44E9-0415-4F54-92B4-F5A03D6A5AF4} =>.Empty O43 - CFD: 21/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{B9F37860-F3EB-40EA-9C11-CCF01598EBEF} =>.Empty O43 - CFD: 18/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BAC235DD-8F05-4B26-8E4D-9524D396D89F} =>.Empty O43 - CFD: 12/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BB28DEC3-C018-4950-9E8A-284C860FCAB0} =>.Empty O43 - CFD: 06/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BBAAB842-4C41-42A6-8249-C0EC87295C8B} =>.Empty O43 - CFD: 07/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BD2D0BE4-FBC8-4098-BDEE-721C6444D3E2} =>.Empty O43 - CFD: 24/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BD715386-0A15-4C28-A328-069888865306} =>.Empty O43 - CFD: 18/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BDA8B5E2-CC36-477C-AD3F-F2B69571B937} =>.Empty O43 - CFD: 07/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BDE01880-523D-4EE1-942B-188A9A71553F} =>.Empty O43 - CFD: 06/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BE777234-317F-4814-A9D4-8F352409ABC0} =>.Empty O43 - CFD: 17/07/2011 - [0] D -- C:\Users\Flora\AppData\Local\{BFACBF9B-8388-4604-88A3-A4540F0B32DB} =>.Empty O43 - CFD: 15/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BFE19232-7C6B-4ECD-8FDA-924F4D55F1CF} =>.Empty O43 - CFD: 24/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{BFEB4529-397E-4A32-AA58-99EB223BC07C} =>.Empty O43 - CFD: 02/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{C3631B0A-81A4-4694-BFD9-D88FB1A55F8C} =>.Empty O43 - CFD: 11/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C3C4B7D4-8278-47AD-8C5F-4C03BEC7DA7C} =>.Empty O43 - CFD: 18/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C525DC1A-713D-4F66-9C0B-E70027B93651} =>.Empty O43 - CFD: 20/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C5DBE54D-2781-4B03-B711-4B5E5D5D8EC0} =>.Empty O43 - CFD: 30/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C673F23F-5BD0-4C3C-90E3-866E358E6F7B} =>.Empty O43 - CFD: 21/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C72EC590-1129-4B60-B2A9-EFBCE71F39B4} =>.Empty O43 - CFD: 20/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C8EC3139-A64F-4393-9D3C-1C90CBF1B44B} =>.Empty O43 - CFD: 12/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{C94A5E66-954E-4B14-8BD6-D9F0DD6336AB} =>.Empty O43 - CFD: 28/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{CBBC4F01-933E-4B15-97A1-08355CCD4384} =>.Empty O43 - CFD: 22/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{CC7010DB-FC5F-485B-A299-7212A9B0C909} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{CDEAE385-90E8-422E-BABF-90AFF7CFC55B} =>.Empty O43 - CFD: 19/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{CF4C7C4A-092D-43CB-BAFD-CEBCDF8FF4A0} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{CFD2C70F-F1CD-4BFC-B9FD-BD28E4B8C79F} =>.Empty O43 - CFD: 09/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D068514D-268C-481A-8280-138143BDAC49} =>.Empty O43 - CFD: 27/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D09CCDFC-9077-4F64-87A4-3D6AE9D9262F} =>.Empty O43 - CFD: 27/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D1605D9D-96DF-4965-94E4-9590FA12BFE7} =>.Empty O43 - CFD: 04/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D1E346B9-6B14-45EB-BF43-64965E89D0D4} =>.Empty O43 - CFD: 26/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D2DB0143-14D5-4390-BC30-06F271577637} =>.Empty O43 - CFD: 26/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D593CB31-A60E-432D-8CE3-CC84657E4252} =>.Empty O43 - CFD: 25/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D6730D19-CB34-44A9-9230-71C2A9054BC6} =>.Empty O43 - CFD: 11/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D703AD96-BA7A-487D-BAF6-E109FAA77D4F} =>.Empty O43 - CFD: 28/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{D7EFFB05-308B-4AE9-8643-D217BAE09151} =>.Empty O43 - CFD: 19/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D8A64169-EF8E-4779-9123-1A71612ED1B9} =>.Empty O43 - CFD: 29/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D93238BF-AD09-4DF8-8CD7-DF98EB12A1CE} =>.Empty O43 - CFD: 06/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{D98AFAEE-CCCD-4C08-A1AA-2EFEDB70A1AC} =>.Empty O43 - CFD: 21/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DA814858-7551-48E1-9475-69C719CAE5FA} =>.Empty O43 - CFD: 04/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DAA61D00-662C-4E58-A034-691D12B73892} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DBE1F1EF-4C4A-4F49-A10F-371C68C71529} =>.Empty O43 - CFD: 11/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DC391F4D-90BF-4A17-8306-DAF2DB286446} =>.Empty O43 - CFD: 22/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DC7379BB-FE5D-4908-B2FE-6E6FC5D8441F} =>.Empty O43 - CFD: 18/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DCCB6DBE-C0EA-4ED2-881B-770ABB296E95} =>.Empty O43 - CFD: 11/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{DD1AD7B9-3176-4904-965E-B8DCC3E66A8A} =>.Empty O43 - CFD: 04/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DDC3AF4F-E6B2-4E53-8D30-1971B5BCB402} =>.Empty O43 - CFD: 29/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DDC54D9D-0EDD-4D84-AF2B-57EC9B24BEB9} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DE8234FA-CAF5-443C-BEB4-194D0EA80D72} =>.Empty O43 - CFD: 04/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DEB91D72-6096-4795-A06A-81522C55C407} =>.Empty O43 - CFD: 30/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DFDE09AD-A95D-4726-9F6C-B59BF61A68EA} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DFEF4B50-F323-446A-9D8E-C1ACE3BB75CB} =>.Empty O43 - CFD: 21/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{DFF60D6F-C24A-49A9-9F0A-AE456A0839C8} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E01052D1-5342-455E-9CC1-764657C4BE46} =>.Empty O43 - CFD: 14/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E0F5FF46-7138-42F6-A12D-6FAA6CE681F9} =>.Empty O43 - CFD: 01/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{E10D9BD8-B92A-4BCB-BA7C-D070BF0CAA34} =>.Empty O43 - CFD: 02/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E1F88FB0-9FFC-4D83-9F1A-FDEC1BC4622D} =>.Empty O43 - CFD: 12/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E23CDFF9-8BBB-4889-B105-594270D114EB} =>.Empty O43 - CFD: 16/11/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E31C2466-B717-4FA9-90E1-5FF4A430BCD3} =>.Empty O43 - CFD: 09/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E34EA347-51BF-43F8-B21D-4C530D858FF9} =>.Empty O43 - CFD: 07/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E42AFD59-C882-457B-9699-3461226E39E6} =>.Empty O43 - CFD: 23/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E45C8105-AA0D-4190-A904-30284AA34231} =>.Empty O43 - CFD: 06/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E460AD67-8C48-4C25-8EDC-73BEB542DDED} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E4AA6CF8-DB73-4DFF-8A5C-36EC00FF5C47} =>.Empty O43 - CFD: 19/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E4FB5E64-84EF-4BF6-BB2D-C0E9B5013E7C} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E536403E-CBDD-468E-9950-7E909AD86B86} =>.Empty O43 - CFD: 21/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E551305D-A303-4476-B686-262D73524836} =>.Empty O43 - CFD: 17/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E5C18B4C-76B2-47D6-B985-B921159EA227} =>.Empty O43 - CFD: 19/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E6E58788-0E7A-4359-A500-7E2E5E3970BA} =>.Empty O43 - CFD: 30/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E72C8D93-200B-42BB-BE55-5464C531922F} =>.Empty O43 - CFD: 14/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E775FAAA-2CAF-4AF9-9240-0585669F056F} =>.Empty O43 - CFD: 29/09/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E7B5EDB4-7A0F-4622-8353-E844F85DF9A5} =>.Empty O43 - CFD: 26/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{E7BED55C-5A7B-4B03-B0F7-6F2ED85792F1} =>.Empty O43 - CFD: 26/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EA072167-E174-49D7-B7B0-30CA1A4948DE} =>.Empty O43 - CFD: 29/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EADEABBD-24DA-4593-9163-8AF9FDC6E7B5} =>.Empty O43 - CFD: 06/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EBFACCFE-1FFB-4AC4-852B-B4546290E9B4} =>.Empty O43 - CFD: 29/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EC2174A6-6140-4035-B28B-FDA28EAB439F} =>.Empty O43 - CFD: 15/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EC5B1E59-8221-40C4-8CC5-A13116C3BADF} =>.Empty O43 - CFD: 08/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{ECAC3E6A-54D6-4AC7-936C-0E2E0D3D76DA} =>.Empty O43 - CFD: 23/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{ED40D33E-78FF-4645-B6E2-8BBD7821AA1E} =>.Empty O43 - CFD: 20/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{ED4C7843-A1B7-4306-A3CF-BD884FD65745} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EE78AB39-7D65-4E76-954B-DEBFFC92ECE7} =>.Empty O43 - CFD: 22/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{EEA9D7AC-331C-455C-BA98-2F806FB02486} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F12DDA82-A951-4E33-8197-1CB6DEEAE2A1} =>.Empty O43 - CFD: 30/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F131BDF1-27F5-4F0F-B9FD-0FF881C86CB3} =>.Empty O43 - CFD: 22/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F176F0AD-0FE5-4126-999A-26A3C7B479D7} =>.Empty O43 - CFD: 09/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F3AD4CD4-D138-46C5-A7D0-7D632DF6C695} =>.Empty O43 - CFD: 14/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F3CE2368-AF39-4A38-B1BB-B7DFC696FC45} =>.Empty O43 - CFD: 07/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{F4190E73-3B2C-49A9-9BEA-103AE89B808E} =>.Empty O43 - CFD: 04/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F76C1EAE-2962-4F5D-A55A-82F3D2083AF6} =>.Empty O43 - CFD: 29/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F825A754-5896-4A2F-8CBB-46F08F8B2BE9} =>.Empty O43 - CFD: 01/07/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F84FA7AC-5438-4B6C-BEDF-74F24CF325C0} =>.Empty O43 - CFD: 08/05/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F90C5AF1-EC3E-4DE5-9511-2D19E33E3E04} =>.Empty O43 - CFD: 22/01/2013 - [0] D -- C:\Users\Flora\AppData\Local\{F99A147C-5903-4155-8C6A-DFF9932B8D55} =>.Empty O43 - CFD: 13/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{F9E2F60E-EE90-4C23-A34D-97019495FE39} =>.Empty O43 - CFD: 13/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FA7365A1-32D3-4120-81AB-7F459D32922F} =>.Empty O43 - CFD: 12/06/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FAEEA52A-B975-4075-8B23-923E05FB7D32} =>.Empty O43 - CFD: 13/04/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FC8F8D80-CD8C-4E80-A455-40034FFC3659} =>.Empty O43 - CFD: 05/10/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FE806027-E2D7-444F-8E23-FD63E3252109} =>.Empty O43 - CFD: 14/08/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FF0AA1E8-AF05-4D15-BFE6-DB54C72B1E81} =>.Empty O43 - CFD: 27/12/2012 - [0] D -- C:\Users\Flora\AppData\Local\{FFB22FEE-C207-46AB-90D0-F03D7B371F97} =>.Empty O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Flora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 09/09/2014 - [] RD -- C:\Users\Flora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Flora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 13/11/2014 - [] RD -- C:\Users\Flora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ---\\ ShellIconOverlayIdentifiers (SIOI) (7) - 3s O106 - SIOI: Zecter [00Zecter] - {D25B32FE-CB96-491A-98FF-AD59DA382D69}. (.Versionate Inc. - ShellExt Dynamic Link Library.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ShellExt.dll O106 - SIOI: Zecter [01Zecter] - {EB24CA6D-F315-4A81-AC1A-C79CFD77F3F5}. (.Versionate Inc. - ShellExt Dynamic Link Library.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ShellExt.dll O106 - SIOI: Zecter [02Zecter] - {B3C78E40-6B64-47C3-AE34-60B770881EB8}. (.Versionate Inc. - ShellExt Dynamic Link Library.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ShellExt.dll O106 - SIOI: Zecter [03Zecter] - {622AFE52-33F6-4D9F-9966-E0BC52D7D69D}. (.Versionate Inc. - ShellExt Dynamic Link Library.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ShellExt.dll O106 - SIOI: Zecter [04Zecter] - {855156F0-2A0F-11DE-8C30-0800200C9A66}. (.Versionate Inc. - ShellExt Dynamic Link Library.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ShellExt.dll O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll © ---\\ ShareTools MSconfig StartupReg (17) - 5s O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe © O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe © O53 - SMSR:HKLM\...\startupreg\AmIcoSinglun [Key] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe © O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe © O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe © O53 - SMSR:HKLM\...\startupreg\HP Quick Launch [Key] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe © O53 - SMSR:HKLM\...\startupreg\HPWirelessAssistant [Key] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe O53 - SMSR:HKLM\...\startupreg\HW_OPENEYE_OUC_VIVO INTERNET [Key] . (.Huawei Technologies Co., Ltd. - Online Update Clinet.) -- C:\Program Files\VIVO INTERNET\UpdateDog\ouc.exe © O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe © O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe © O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe © O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe © O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe © O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe © O53 - SMSR:HKLM\...\startupreg\Syncables [Key] . (.Hewlett-Packard - QuickSync.) -- C:\Program Files\Hewlett-Packard\HP QuickSync\QuickSync.exe © O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe © O53 - SMSR:HKLM\...\startupreg\SysTrayApp [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe © ---\\ System Drivers List (98) - 56s O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows® O58 - SDL:2011/03/11 03:38:37 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows® O58 - SDL:2011/03/11 03:38:37 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] =>.Microsoft Windows® O58 - SDL:2010/06/17 16:28:34 A . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\Windows\System32\drivers\AmUStor.sys [27136] © O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows® O58 - SDL:2015/03/11 11:13:46 A . (.AVG Technologies CZ, s.r.o. - AVG File Vault Driver.) -- C:\Windows\System32\drivers\avgdiskx.sys [132576] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/10/19 12:38:58 A . (.AVG Technologies CZ, s.r.o. - AVG IDS Application Activity Monitor Driver.) -- C:\Windows\System32\drivers\avgidsdriverx.sys [252336] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2011/02/22 09:12:50 A . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) -- C:\Windows\System32\drivers\AVGIDSEH.sys [22992] =>.AVG Technologies® O58 - SDL:2015/08/19 10:52:38 A . (.AVG Technologies CZ, s.r.o. - AVG Application Activity Monitor Helper Dri.) -- C:\Windows\System32\drivers\avgidshx.sys [222640] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/07/23 15:44:26 A . (.AVG Technologies CZ, s.r.o. - AVG IDS Application Activity Monitor Loader.) -- C:\Windows\System32\drivers\avgidsshimx.sys [31664] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/06/16 14:54:52 A . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) -- C:\Windows\System32\drivers\avgldx86.sys [207328] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/05/07 12:52:08 A . (.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) -- C:\Windows\System32\drivers\avglogx.sys [290272] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/08/04 10:32:46 A . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) -- C:\Windows\System32\drivers\avgmfx86.sys [189872] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/03/20 11:18:22 A . (.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) -- C:\Windows\System32\drivers\avgrkx86.sys [35808] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/08/04 10:33:00 A . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) -- C:\Windows\System32\drivers\avgtdix.sys [230832] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2014/12/17 14:26:06 A . (.AVG Technologies - .) -- C:\Windows\System32\drivers\avgtpx86.sys [43296] =>Toolbar.AVGSafeGuard O58 - SDL:2009/07/13 20:02:49 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] © O58 - SDL:2011/03/25 11:30:33 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\BCMWL6.SYS [2710592] =>.Broadcom Corporation® O58 - SDL:2009/07/13 20:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] © O58 - SDL:2009/07/13 20:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] © O58 - SDL:2009/07/13 22:57:25 A . (.Brother Industries Ltd. - Brotehr Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] © O58 - SDL:2009/07/13 20:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] © O58 - SDL:2009/07/13 20:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] © O58 - SDL:2009/07/13 20:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] © O58 - SDL:2009/07/13 20:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] © O58 - SDL:2009/07/13 23:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows® O58 - SDL:2009/11/11 18:09:22 AH . (.DeviceVM, Inc. - DVMIO virtual device driver.) -- C:\Windows\System32\drivers\dvmio.sys [18136] {0100000000011C9DE3CE41} O58 - SDL:2009/07/13 23:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows® O58 - SDL:2009/07/13 20:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] © O58 - SDL:2010/10/08 16:55:06 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\drivers\ewdcsc.sys [25856] © O58 - SDL:2010/12/24 11:48:26 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [193792] © O58 - SDL:2010/12/23 09:46:46 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ewusbwwan.sys [353280] © O58 - SDL:2010/09/26 18:09:22 A . (.Huawei Technologies Co., Ltd. - ew_hwupgrade Driver.) -- C:\Windows\System32\drivers\ew_hwupgrade.sys [19200] © O58 - SDL:2010/07/27 09:52:02 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys [102784] © O58 - SDL:2011/01/30 18:19:02 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\drivers\ew_jubusenum.sys [73216] © O58 - SDL:2011/01/30 18:19:02 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys [90112] © O58 - SDL:2011/01/30 18:19:02 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys [64384] © O58 - SDL:2011/01/30 18:19:02 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\drivers\ew_juextctrl.sys [26624] © O58 - SDL:2011/01/30 18:19:20 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys [181760] © O58 - SDL:2010/03/20 12:06:58 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys [11136] © O58 - SDL:2012/08/21 13:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840] =>.GEAR Software Inc.® O58 - SDL:2009/07/13 20:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] © O58 - SDL:2009/07/13 23:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows® O58 - SDL:2010/06/08 15:23:34 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\System32\drivers\iaStor.sys [435736] =>.Intel Corporation® O58 - SDL:2011/03/11 03:38:51 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160] =>.Microsoft Windows® O58 - SDL:2010/04/19 14:12:58 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [4806144] © O58 - SDL:2009/07/13 23:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows® O58 - SDL:2015/10/05 09:50:04 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] =>.Malwarebytes Corporation® O58 - SDL:2015/10/05 09:50:08 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] =>.Malwarebytes Corporation® O58 - SDL:2015/12/26 11:08:50 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [170200] =>.Malwarebytes Corporation® O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows® O58 - SDL:2010/08/06 07:42:34 A . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\Windows\System32\drivers\mod7700.sys [861696] O58 - SDL:2015/10/05 09:50:16 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] =>.Malwarebytes Corporation® O58 - SDL:2009/07/13 20:02:51 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\netw5v32.sys [4231168] © O58 - SDL:2009/07/13 23:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows® O58 - SDL:2011/03/11 03:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120] =>.Microsoft Windows® O58 - SDL:2011/03/11 03:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows® O58 - SDL:2010/06/23 22:10:54 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [275048] =>.Realtek Semiconductor Corp® O58 - SDL:2009/07/13 18:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] © O58 - SDL:2009/07/13 23:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows® O58 - SDL:2010/08/02 22:32:34 A . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\drivers\stwrt.sys [431616] © O58 - SDL:2010/07/30 02:30:48 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [1306800] =>.Synaptics Incorporated® O58 - SDL:2009/07/13 23:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows® O58 - SDL:2009/07/13 20:13:45 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\drivers\VSTAZL3.SYS [207360] © O58 - SDL:2009/07/13 20:13:45 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\drivers\VSTCNXT3.SYS [661504] © O58 - SDL:2009/07/13 20:13:46 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\drivers\VSTDPV3.SYS [980992] © O58 - SDL:2009/07/13 20:02:53 A . (.Marvell - Miniport Driver for Marvell Yukon Ethernet.) -- C:\Windows\System32\drivers\yk62x86.sys [311296] © O58 - SDL:2009/07/13 19:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2009/07/13 19:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2009/07/13 19:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2009/07/13 19:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2009/07/13 19:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2009/07/13 19:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2009/07/13 19:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2009/07/13 19:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2009/07/13 19:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2009/07/13 19:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2009/07/13 19:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2009/07/13 19:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2009/07/13 19:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2009/07/13 19:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2009/07/13 19:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ---\\ File Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Start Menu Internet (8) - 1s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Search Browser Infection (9) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {4BA395FA-3DBA-4D1E-8D71-348D606CAFEF} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://en.wikipedia.org/ O69 - SBI: SearchScopes [HKCU] {FB6EFAFF-2FE4-410B-83A1-F94CEFFF1B61} - ((www.google.com) Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKLM] {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKLM] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://en.wikipedia.org/ O69 - SBI: SearchScopes [HKLM] {d944bb61-2e34-4dbf-a683-47e505c587dc} - (eBay) - http://rover.ebay.com/ O69 - SBI: SearchScopes [HKLM] {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} - (Bing) - http://www.bing.com/ ---\\ Search Svchost Services (32) - 7s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll [62464] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [168960] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [593408] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [679424] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\Windows\System32\audiosrv.dll [475136] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [90624] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [286208] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [75264] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [49664] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [300544] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [242176] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Remote Desktop Session Host Server Remote C.) -- C:\Windows\System32\termsrv.dll [523776] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [1973728] =>.Microsoft Windows Component Publisher® O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [585728] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [328192] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [499712] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\Windows\System32\seclogon.dll [21504] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [47104] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [114688] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\Windows\System32\mmcss.dll [49664] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [61440] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [98304] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [750592] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\System32\KMSVC.DLL [71168] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [113664] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [102912] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [37376] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [76800] © ---\\ Firewall Active Exception List (3) - 12s O87 - FAEL: "{04BDA1FA-F49E-489C-864C-29D90522452C}" [In-None-P17-TRUE] .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe {2030AA6846186FBA65E8E22020758675} O87 - FAEL: "{15238674-5FF9-43EE-9207-B8E48C52B909}" [Out-None-P17-TRUE] .(.Zecter Inc. - HP CloudDrive.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe {2030AA6846186FBA65E8E22020758675} O87 - FAEL: "{BD7907A5-F5B7-4BC6-9029-21F803A49A90}" [In-None-P17-TRUE] .(...) -- C:\Users\Flora\AppData\Local\Temp\HP\OJ4500vG510n-z_Basic_13_en\setup\hpznui01.exe (.not file.) ---\\ Services not Microsoft (SR=Run, SS=Stop) (23) - 88s SR - Auto [02/08/2010] [ 81920] Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AEstSrv.exe © SR - Auto [07/09/2013] [ 55624] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® SS - Auto [30/10/2015] [ 3642280] AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2015\avgidsagent.exe =>.AVG Technologies CZ, s.r.o.® SR - Auto [30/10/2015] [ 335656] Watchdog do AVG (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2015\avgwdsvc.exe =>.AVG Technologies CZ, s.r.o.® SR - Auto [30/08/2011] [ 390504] Serviço do Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SS - Demand [18/06/2010] [ 246520] GameConsoleService (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe =>.WildTangent Inc® SS - Auto [22/09/2015] [ 144200] Google Update Service (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [22/09/2015] [ 144200] Serviço do Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [27/09/2012] [ 86528] HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe © SR - Auto [21/07/2010] [ 103992] HP Wireless Assistant Service (HP Wireless Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe =>.Hewlett-Packard Company® SR - Auto [06/08/2010] [ 210488] HP Client Services (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe =>.Hewlett-Packard Company® SR - Auto [10/08/2012] [ 197536] HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe =>.Hewlett-Packard Company® SR - Demand [10/08/2012] [ 1001376] HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe =>.Hewlett-Packard Company® SR - Auto [23/08/2010] [ 26680] HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe =>.Hewlett-Packard Company® SR - Auto [16/11/2010] [ 264704] HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2008.) - C:\ProgramData\DatacardService\HWDeviceService.exe SR - Auto [08/06/2010] [ 13336] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation® SS - Demand [19/10/2013] [ 553288] iPod Service (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.® SR - Auto [05/10/2015] [ 1513784] (MBAMScheduler) . (.Malwarebytes.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe =>.Malwarebytes Corporation® SS - Auto [05/10/2015] [ 1135416] (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® SR - Auto [11/09/2010] [ 399344] RoxioNow Service (RoxioNow Service) . (.Roxio.) - C:\Program Files\Roxio\RoxioNow Player\RNowSvc.exe =>.Sonic Solutions® SS - Auto [08/01/2013] [ 161536] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Technologies SA® SR - Auto [02/08/2010] [ 245842] @C:\Windows\system32\stlang.dll,-10101 (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\stacsv.exe © ---\\ Additional Scan (O88) (5) - 0s HKLM\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\AVG Web TuneUp =>Toolbar.AVGSafeGuard C:\Program Files\AVG Web TuneUp =>Toolbar.AVGSafeGuard C:\ProgramData\AVG Web TuneUp =>Toolbar.AVGSafeGuard C:\Users\Flora\AppData\Local\AVG Web TuneUp =>Toolbar.AVGSafeGuard ---\\ Summary of the elements found (1) - 0s http://www.nicolascoolman.fr/?p=4664 =>Toolbar.AVGSafeGuard ~ End of the scan, 28089 items in 00h10mn31s (1259)(0)