~ ZHPDiag v2017.7.1.110 Par Nicolas Coolman (2017/07/01) ~ Démarré par peve (Administrator) (2017/07/02 09:40:14) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Certificate ZHPDiag: Legal ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\peve\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\peve\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) =>.Microsoft Corporation ---\\ Navigateurs Internet (2) - 1s ~ MFIE: Mozilla Firefox 54.0.1 (x86 fr) ~ MSIE: Internet Explorer v11.0.9600.18697 ---\\ Informations sur les produits Windows (4) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection (1) - 5s Avast Antivirus Gratuit v17.4.2294 (Protection) ---\\ Logiciels de protection et autres (Superflus) (1) - 5s ~ Spybot - Search & Destroy v2.0.12 (Superfluous) ---\\ Surveillance de Logiciels (1) - 6s ~ Adobe Reader 9.5.5 MUI (Surveillance) ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4051.456 MB (52% free) : OK =>.RAM Value System Restore: Activé (Enable) System drive C: has 137 GB (46%) free of 293 GB : OK =>.Disk Space ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PEVE-PC ~ User Name: peve ~ Logged in as Administrator ---\\ Enumération des unités disques (1) - 0s ~ Drive C: has 137 GB free of 293 GB (System) ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (23) - 2s [MD5.38AE1B3C38FAEF56FE4907922F0385BA] - 29/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [3229696] =>.Microsoft Corporation [MD5.C36BB659F08F046B139C8D1B980BF1AC] - 30/03/2017 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [46080] =>.Microsoft Corporation [MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation [MD5.1AAE329190ED545F5FB02941F3644094] - 14/05/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [3240960] =>.Microsoft Corporation [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] =>.Microsoft Corporation [MD5.067FA52BFB59A56110A12312EF9AF243] - 20/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 20/11/2010 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.0DC2A9882540DEA4A55B08785E09D8FC] - 04/04/2017 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [496128] =>.Microsoft Corporation [MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows® [MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation [MD5.F036CE71586E93D94DAB220D7BDF4416] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation [MD5.9B38580063D281A99E68EF5813022A5F] - 08/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [106496] =>.Microsoft Corporation [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation [MD5.9B08FBED1849FB5A6E0BA1D44396191D] - 21/05/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159744] =>.Microsoft Corporation [MD5.E47D571FEC2C76E867935109AB2A770C] - 11/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262144] =>.Microsoft Corporation [MD5.47B2D0B31BDC3EBE6090228E2BA3764D] - 11/01/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684416] =>.Microsoft Windows® [MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation [MD5.471815800AE33E6F1C32FB1B97C490CA] - 20/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation [MD5.028D61D9803FBEFB7426696A7840BB48] - 10/05/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [117248] =>.Microsoft Corporation [MD5.0D08D2F3B3FF84E433346669B5E0F639] - 20/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (25) - 10s O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agr64svc.exe =>.LSI Corporation O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe =>.AMD O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - Avast Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.® O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe =>.Acer Incorporated® O23 - Service: GRegService (Greg_Service) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe =>.Acer Incorporated® O23 - Service: HP Network Devices Support (HPSLPSVC) . (.Hewlett-Packard Co. - HP Network Devices Support.) - C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL =>.Hewlett Packard® O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation® O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation® O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe =>.Malwarebytes Corporation® O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® O23 - Service: MyWinLocker Service (MWLService) . (.Egis Technology Inc. - MyWinLocker Service.) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe =>.EGIS TECHNOLOGY INC.® O23 - Service: (Net Driver HPZ12) . (.Hewlett-Packard - Dot4Net Module.) - C:\Windows\system32\HPZinw12.dll =>.Hewlett-Packard O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe =>.NewTech Infosystems, Inc® O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe =>.NewTech Infosystems, Inc® O23 - Service: PDF Architect 3 Creator (PDF Architect 3 Creator) . (.pdfforge GmbH - PDF Architect 3.) - C:\Program Files (x86)\PDF Architect 3\creator-ws.exe =>.pdfforge GmbH® O23 - Service: (Pml Driver HPZ12) . (.Hewlett-Packard - PmlDrv Module.) - C:\Windows\system32\HPZipm12.dll =>.Hewlett-Packard O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe (.not file.) O23 - Service: Raw Socket Service (RS_Service) . (.Acer Incorporated - Raw Socket Service.) - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe =>.Acer Incorporated O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer Networking Ltd.® O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer Networking Ltd.® O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer Networking Ltd.® O23 - Service: Service SFR Gestionnaire Connexion (ServiceSFRABCD) . (.SFR & Celliance - Service Windows SFR ABCd.) - C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCDService.exe =>.CELLIANCE® O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation® O23 - Service: Updater Service (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (30) - 50s SR - Auto [28/03/2009] [ 16896] Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation.) - C:\Program Files\LSI SoftModem\agr64svc.exe =>.LSI Corporation SR - Auto [10/12/2009] [ 202752] (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe =>.AMD SR - Demand [09/05/2017] [ 7346208] aswbIDSAgent (aswbIDSAgent) . (.AVAST Software s.r.o..) - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe =>.AVAST Software s.r.o.® SR - Auto [09/05/2017] [ 263304] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.® SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SR - Auto [30/09/2009] [ 844320] Acer ePower Service (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe =>.Acer Incorporated® SR - Auto [28/08/2009] [ 1150496] GRegService (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe =>.Acer Incorporated® SR - Auto [30/01/2010] [ 1043584] HP Network Devices Support (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL =>.Hewlett Packard® SR - Auto [05/06/2009] [ 354840] Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation® SR - Demand [09/05/2017] [ 689464] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.® SR - Auto [01/10/2009] [ 268824] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation® SR - Auto [04/04/2013] [ 418376] (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe =>.Malwarebytes Corporation® SR - Auto [04/04/2013] [ 701512] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® SS - Demand [28/06/2017] [ 175560] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SS - Auto [11/09/2009] [ 305448] MyWinLocker Service (MWLService) . (.Egis Technology Inc..) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe =>.EGIS TECHNOLOGY INC.® SR - Auto [14/05/2009] [ 71680] (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\system32\HPZinw12.dll =>.Hewlett-Packard SR - Auto [25/09/2009] [ 62720] NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe =>.NewTech Infosystems, Inc® SS - Demand [18/06/2009] [ 50432] NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe =>.NewTech Infosystems, Inc® SR - Auto [18/06/2009] [ 144640] NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe =>.NewTech Infosystems, Inc® SS - Demand [24/04/2015] [ 2244312] PDF Architect 3 (PDF Architect 3) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 3\ws.exe =>.pdfforge GmbH® SS - Demand [24/04/2015] [ 901336] PDF Architect 3 CrashHandler (PDF Architect 3 CrashHandler) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe =>.pdfforge GmbH® SR - Auto [24/04/2015] [ 740568] PDF Architect 3 Creator (PDF Architect 3 Creator) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 3\creator-ws.exe =>.pdfforge GmbH® SR - Auto [14/05/2009] [ 89600] (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\system32\HPZipm12.dll =>.Hewlett-Packard SR - Auto [10/07/2009] [ 253952] Raw Socket Service (RS_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe =>.Acer Incorporated SR - Auto [13/11/2012] [ 1103392] Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer Networking Ltd.® SR - Auto [13/11/2012] [ 1369624] Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer Networking Ltd.® SR - Auto [13/11/2012] [ 168384] Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer Networking Ltd.® SR - Auto [05/11/2009] [ 657536] Service SFR Gestionnaire Connexion (ServiceSFRABCD) . (.SFR & Celliance.) - C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCDService.exe =>.CELLIANCE® SR - Auto [01/10/2009] [ 2320920] Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation® SR - Auto [04/07/2009] [ 240160] Updater Service (Updater Service) . (.Acer.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® ---\\ Tâches planifiées en automatique (38) - 7s O39 - APT: Unknown - (.GlarySoft.) -- C:\Windows\Tasks\GlaryInitialize 3.job [330] =>.Glarysoft O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\AdobeFlashPlayerUpdate [3444] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\AdobeFlashPlayerUpdate 2 [3184] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\Avast Emergency Update [4172] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-693311413-2573380420-1684544616-1000 [3254] O39 - APT: Unknown - (.IObit.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2770] =>.IObit O39 - APT: Unknown - (.Microsoft Corporation.) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3534] =>.Microsoft Corporation O39 - APT: Unknown - (.GlarySoft.) -- C:\Windows\System32\Tasks\GlaryInitialize 3 [2624] =>.Glarysoft O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\LaunchSignup [4022] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\Optimizer Pro Schedule [3238] =>PUP.Optional.OptimizerPro O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\PC Performer [3120] =>PUP.Optional.PCPerformer O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-693311413-2573380420-1684544616-1000 [3200] =>.Alcatel Lucent O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-693311413-2573380420-1684544616-1000 [3336] =>.Alcatel Lucent O39 - APT: Unknown - (.Avast Software s.r.o.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458748131 [3918] =>.Avast Software s.r.o O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{048393E7-52F4-4583-9BB4-069A5D3E3B31} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{1F59CF30-8916-4AB9-86C4-011BD5B35A06} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{5885F9B7-8884-48BE-8230-25329CFCD951} [3138] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{5AFEC98A-9E50-4372-B237-BA1958A40209} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{6481F768-2AA0-4033-917F-157741C0B685} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{656A0467-AF93-43E2-9EBC-A43C8C8638FA} [3288] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{7ED11314-B452-4A6E-931E-0A45B958F05F} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{89BAFE2F-4A74-4EE8-95BF-D7A9C9B8E3CC} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{8A231A93-AC25-4DBD-9B98-B984A7CE19D2} [3144] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{8AE9C6CB-9EED-46C9-AA98-290E2168A5CE} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{8C5FEC34-5275-4409-9294-A13699BD2AF1} [3148] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{982A49B6-B19F-45D7-8D2D-5644AFD8F9E1} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{A0073F26-CE19-45B2-BEDD-0B56D1EE5F3D} [3092] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{A0910AB8-C010-49CF-8D3A-DC7277E75DE6} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{BC2CAFB9-FA68-434F-BFD9-0042C1AC1D1A} [3256] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{C11B0ED3-42FE-4A9E-9A08-6E253E0331DF} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{C9BF56B8-6DFB-4A12-A0C2-C3911B1F1F87} [3098] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{CEC8D9A5-67D1-49F8-B31A-10DB8C960BB4} [3104] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{D2B42368-48C0-4D4D-9848-99F8FCC5E222} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{D8AEC70B-13A2-42E7-BE85-642826624C45} [3140] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{DBB5654A-9D0A-4F95-807E-2F28DCCA9A72} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{E1B5394C-1211-4706-AF52-B58B471412FE} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{F788253C-E33A-49DC-8819-EB6469848058} [2942] O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{F9DD8289-3B63-4FD6-B90C-D6470485ED86} [2942] ---\\ Applications lancées au démarrage du système (21) - 3s O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe =>.Intel Corporation® O4 - HKLM\..\Run: [mwlDaemon] . (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe =>.EGIS TECHNOLOGY INC.® O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated® O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe =>.Acer Incorporated® O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - AvLaunch component.) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe =>.AVAST Software s.r.o.® O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.® O4 - HKCU\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe =>.Safer Networking Ltd.® O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe =>.NewTech Infosystems, Inc® O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe =>.Symantec Corporation® O4 - HKLM\..\Wow6432Node\Run: [EgisTecLiveUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe =>.EGIS TECHNOLOGY INC.® O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc. O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe =>.Dritek System Inc.® O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe =>.Apple Inc.® O4 - HKLM\..\Wow6432Node\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe =>.Safer Networking Ltd.® O4 - HKLM\..\Wow6432Node\Run: [PlayMovie] . (.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe =>.CyberLink® O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-693311413-2573380420-1684544616-1000\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe =>.Safer Networking Ltd.® ---\\ Processus lancés (46) - 7s [MD5.00000000000000000000000000000000] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [0] [PID.116] =>.AMD [MD5.00000000000000000000000000000000] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [0] [PID.1268] =>.AMD [MD5.D961A7C05A76302E782B1B0CF6546BA7] - (.AVAST Software - Avast Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304] [PID.1356] =>.AVAST Software s.r.o.® [MD5.5AF1E9600E3FF841E522703A4993ED0C] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904] [PID.700] =>.Intel Corporation® [MD5.3B30F234512DB4EFDD0168928C61FC8E] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472] [PID.1636] =>.Synaptics Incorporated® [MD5.E64270B5DB7218E60AD62ED0C52E3A09] - (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840] [PID.1384] =>.Acer Incorporated® [MD5.B3E7F1FBF29EF94A797238B9ACB8D993] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [303928] [PID.1976] =>.Apple Inc.® [MD5.131E6FE09470F057000B0CC01C14D8B7] - (.Acer Incorporated - Acer VCM.) -- C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe [708608] [PID.1364] =>.Acer Incorporated [MD5.8FE697AB8A4C28D79C1CDB97C6FB1A17] - (.AVAST Software - Avast Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [8470464] [PID.2052] =>.AVAST Software s.r.o.® [MD5.9713EB9E1CBC6803E8D088311F5E10F4] - (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888] [PID.2100] =>.NewTech Infosystems, Inc® [MD5.EF533F9D1E4F51C783D4349A7C3F518F] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464] [PID.2168] =>.EGIS TECHNOLOGY INC.® [MD5.B65F8DBA54F251906BBE8611B5A0E7AB] - (.LSI Corporation - LSI Soft Modem Call Progress Service.) -- C:\Program Files\LSI SoftModem\agr64svc.exe [16896] [PID.2580] =>.LSI Corporation [MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.2652] =>.Apple Inc.® [MD5.FB67AA8AC61B9365ADD546139A21BED6] - (.Acer Incorporated - ePowerSvc.) -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [844320] [PID.2768] =>.Acer Incorporated® [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [1150496] [PID.2856] =>.Acer Incorporated® [MD5.7485FBCEF9136F530953575E2977859D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [268824] [PID.2152] =>.Intel Corporation® [MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.2216] =>.Malwarebytes Corporation® [MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2372] =>.Malwarebytes Corporation® [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1180] =>.Malwarebytes Corporation® [MD5.14E66F603FB187713AEB02AD3B0390CF] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [62720] [PID.1852] =>.NewTech Infosystems, Inc® [MD5.3F6268A2EC33CD38CF75C880AF8DED42] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640] [PID.2972] =>.NewTech Infosystems, Inc® [MD5.1234BB5F8C7EC1E52F32A3EBF65F52EA] - (.pdfforge GmbH - PDF Architect 3.) -- C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [740568] [PID.2688] =>.pdfforge GmbH® [MD5.A1DD33D16F277CE34124EE52AB2C0F14] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [75064] [PID.3136] =>.Even Balance, Inc.® [MD5.B5A4B7D779CF4070DF408DE18BD33B02] - (.Acer Incorporated - Raw Socket Service.) -- C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [253952] [PID.3188] =>.Acer Incorporated [MD5.206387AB881E93A1A6EB89966C8651F1] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392] [PID.3348] =>.Safer Networking Ltd.® [MD5.7C35F557654ED9E65E3C0DEDC280F1B5] - (.SFR & Celliance - Service Windows SFR ABCd.) -- C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCDService.exe [657536] [PID.3484] =>.CELLIANCE® [MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160] [PID.3556] =>.Acer Incorporated® [MD5.2BACD71123F42CEA603F4E205E1AE337] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096] [PID.3632] =>.Microsoft Corporation® [MD5.7548066DF68A8A1A56B043359F915F37] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe [354840] [PID.3692] =>.Intel Corporation® [MD5.2A46FFE841EC43001D5A293A54DB34DE] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223104] [PID.3740] =>.Microsoft Corporation® [MD5.A529CFE32565C0B145578FFB2B32C9A5] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624] [PID.3872] =>.Safer Networking Ltd.® [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [PID.3200] =>.Advanced Micro Devices Inc. [MD5.CB63BDB77BB86549FC3303C2F11EDC18] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384] [PID.3652] =>.Safer Networking Ltd.® [MD5.2CA8BDCD46DA5CFA6B54A067BA27267E] - (.Acer Incorporated - ePowerEvent.) -- C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe [467488] [PID.3780] =>.Acer Incorporated® [MD5.A760C2AFBA1A71E0F7310A6E900CB0E4] - (.AVAST Software s.r.o. - Avast Behavior Shield.) -- C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208] [PID.1928] =>.AVAST Software s.r.o.® [MD5.8A2A79444C72D6342976724F6908495B] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [689464] [PID.4364] =>.Apple Inc.® [MD5.BCB742E868592973406ACE3ADA97304F] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [121128] [PID.4664] =>.Synaptics Incorporated® [MD5.70B893DEA2E128CC0144461C483217BE] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1100368] [PID.4672] =>.Dritek System Inc.® [MD5.B5A4EBA9487F08BECC843A87422B8052] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176] [PID.4960] =>.Safer Networking Ltd.® [MD5.EA96FBD8C937FBA76E48EF0A820C4B18] - (.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480] [PID.4624] =>.CyberLink® [MD5.308F2EE28005510DE616409148CF077B] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896] [PID.4032] =>.Oracle America, Inc.® [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [65536] [PID.4600] =>.ATI Technologies Inc. [MD5.765F2DD351BA064F657751D8D75E58C0] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2320920] [PID.3312] =>.Intel Corporation® [MD5.A9CA1AAD4E4890826D3C2E2F74CDF8E1] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [511872] [PID.4868] =>.Oracle America, Inc.® [MD5.18B0495523F5FE00888D4D43873F520B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\peve\Downloads\ZHPDiag3.exe [2763648] [PID.2344] =>.Nicolas Coolman [MD5.866FF7A49542CDBBF7EE0FD4FD0ADC02] - (.AVAST Software - Avast Emergency Update.) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2326672] [PID.4288] =>.AVAST Software s.r.o.® ---\\ Google Chrome, Démarrage,Recherche,Extensions (6) - 1s G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.myadfilter.com {MyAdFilter} G2 - GCE: Preference [User Data\Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice =>.Avast Software s.r.o G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security =>.Avast Software s.r.o G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension G2 - GCE: Preference [User Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick start =>PUP.Optional.QuickStart G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>PUP.Optional.QuickStart ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (13) - 8s M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\toolbar@iadah.com P2 - EXT: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated® P2 - EXT: (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppl3260.dll =>.RealNetworks, Inc.® P2 - EXT: (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nprjplug.dll =>.RealNetworks, Inc. P2 - EXT: (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nprpjplug.dll =>.RealNetworks, Inc. P2 - EXT FILE: (.Avast SafePrice - Avast SafePrice - safe shopping extens.) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\extensions\sp@avast.com.xpi =>.Avast SafePrice P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\extensions\wrc@avast.com.xpi =>.Avast Online Security P2 - EXT FILE: (.Antivirus link scanner - Antivirus link scanner.) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\extensions\{490d85d0-682a-4a4a-9d9f-baba6a56c323}.xpi P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus P2 - EXT FILE: (.Bing - Bing. Search by Microsoft..) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\searchplugins\bing.xml =>.Bing P2 - EXT FILE: (.Google (avast) - Google Search from avast.) -- C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\searchplugins\google-avast.xml =>.Google (avast) P2 - EXT: (...) -- C:\Users\peve\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} =>PUP.Optional.Wajam C:\Users\peve\AppData\Roaming\Mozilla\Firefox\Profiles\6bevug4m.default-1346227212902\Allin1Convert_8h =>.Superfluous.MindSpark ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://fr.yahoo.com?fr=hp-avast&type=avastbcl =>.Yahoo! Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://google.com =>.Google Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc. R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = http://fr.yahoo.com?fr=hp-avast&type=avastbcl =>.Yahoo! Inc. R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKEY_USERS\S-1-5-21-693311413-2573380420-1684544616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://fr.yahoo.com?fr=hp-avast&type=avastbcl =>.Yahoo! Inc. R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (6) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (5) - 1s O1 - Hosts: 127.0.0.1 www.download-avast.com =>PUM.Misplaced.Certificate O1 - Hosts: 127.0.0.1 download-avast.com =>PUM.Misplaced.Certificate O1 - Hosts: 127.0.0.1 www.telecharger-avast.com =>PUM.Misplaced.Certificate O1 - Hosts: 127.0.0.1 telecharger-avast.com =>PUM.Misplaced.Certificate ~ Nombre lignes détournées 4/15514 (Hosts file redirected) ---\\ Browser Helper Object de navigateur (BHO) (3) - 1s O2 - BHO: McAfee Phishing Filter [64Bits] - {27B4851A-3207-45A2-B947-BE8AFE6163AB} . (...) -- c:\Program Files\McAfee\MSK\mskapbho.dll =>.McAfee, Inc.® O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software s.r.o.® O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation® ---\\ Internet Explorer, Barre d'outil (5) - 0s O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) O3 - Toolbar: 0x5D5FC80F07621545A49045A549D285C0 - [HKCU]{0FC85F5D-6207-4515-A490-45A549D285C0} . (...) -- (.not file.) O3 - Toolbar: 0xEB15B89B9F3F114E9150CB70E29B40FC - [HKCU]{9BB815EB-3F9F-4E11-9150-CB70E29B40FC} . (...) -- (.not file.) O3 - Toolbar: 0x15B9F93055B72648820B08FBA6BD249D - [HKCU]{30F9B915-B755-4826-820B-08FBA6BD249D} . (...) -- (.not file.) O3 - Toolbar: Conduit Engine - [HKLM]{30F9B915-B755-4826-820B-08FBA6BD249D} . (...) -- (.not file.) =>.Superfluous.Conduit ---\\ Raccourcis Global Startup (80) - 20s O4 - GS\Desktop [Administrateur]: PC Inspector File Recovery.lnk . (...) C:\Program Files (x86)\Convar\PC Inspector File Recovery\Filerecovery.exe O4 - GS\Desktop [Administrateur]: tableau travail.xlsx - Raccourci.lnk . (...) C:\Users\peve\Documents\tableau travail.xlsx O4 - GS\Desktop [Administrateur]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\peve\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\peve\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Glary Utilities 3.lnk . (.Glarysoft Ltd - Glary Utilities 3.) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe =>.Glarysoft Ltd® O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [Administrateur]: WarThunder.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://mmotraffic.com/ =>.Mozilla Corporation O4 - GS\Quicklaunch [Administrateur]: YesMessenger.lnk . (...) C:\Program Files (x86)\YesMessenger\YesMessenger.exe O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\TaskBar [Administrateur]: Welcome Center.lnk . (.Acer Incorporated - Welcome Center.) C:\Program Files (x86)\Acer\Welcome Center\OEMWelcomeCenter.exe =>.Acer Incorporated® O4 - GS\TaskBar [Administrateur]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Desktop [peve]: PC Inspector File Recovery.lnk . (...) C:\Program Files (x86)\Convar\PC Inspector File Recovery\Filerecovery.exe O4 - GS\Desktop [peve]: tableau travail.xlsx - Raccourci.lnk . (...) C:\Users\peve\Documents\tableau travail.xlsx O4 - GS\Desktop [peve]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\peve\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman O4 - GS\Desktop [peve]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\peve\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [peve]: Glary Utilities 3.lnk . (.Glarysoft Ltd - Glary Utilities 3.) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe =>.Glarysoft Ltd® O4 - GS\Quicklaunch [peve]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [peve]: WarThunder.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://mmotraffic.com/ =>.Mozilla Corporation O4 - GS\Quicklaunch [peve]: YesMessenger.lnk . (...) C:\Program Files (x86)\YesMessenger\YesMessenger.exe O4 - GS\sendTo [peve]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\TaskBar [peve]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\TaskBar [peve]: Welcome Center.lnk . (.Acer Incorporated - Welcome Center.) C:\Program Files (x86)\Acer\Welcome Center\OEMWelcomeCenter.exe =>.Acer Incorporated® O4 - GS\TaskBar [peve]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [peve]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Programs [peve]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\CommonDesktop [Public]: Avast Antivirus Gratuit.lnk . (.AVAST Software - Avast Antivirus.) C:\Program Files\AVAST Software\Avast\AvastUI.exe =>.AVAST Software s.r.o.® O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - .) C:\Program Files (x86)\iTunes\iTunes.exe =>.Apple Inc. O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (...) C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation O4 - GS\Startup [Public]: Acer VCM.lnk . (.Acer Incorporated - Acer VCM.) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe =>.Acer Incorporated O4 - GS\Startup [Public]: McAfee Security Scan Plus.lnk . (...) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Acrobat.com.lnk . (...) C:\Program Files (x86)\Adobe\Acrobat.com\Acrobat.com.exe O4 - GS\ProgramsCommon [Public]: Adobe Reader 9.lnk . (...) C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-A91000000001}\SC_Reader.ico =>.Adobe Inc. O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\Windows\Installer\{52D87F32-70E4-4348-8148-C0B9F35B1314}\AppleSoftwareUpdateIco.exe =>.Apple Inc. O4 - GS\ProgramsCommon [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.® O4 - GS\ProgramsCommon [Public]: Glary Utilities 3.lnk . (.Glarysoft Ltd - Glary Utilities 3.) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe =>.Glarysoft Ltd® O4 - GS\ProgramsCommon [Public]: Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation - Microsoft® Works.) C:\Program Files (x86)\Microsoft Works\MSWorks.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe =>.Safer Networking Ltd.® O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) C:\Windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\DVD Maker\DVDMaker.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Windows Live Photo Gallery.lnk . (.Microsoft Corporation - Windows Live Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Windows Movie Maker 2.6.lnk . (.Microsoft Corporation - Windows Movie Maker.) C:\Windows\Installer\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}\MOVIEMK.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation ---\\ Modification Domaine/Adresses DNS (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{55D0D576-E135-4E4E-B0FE-32FAA7EB55BF}: DhcpNameServer = 172.20.10.1 =>.Private IP O17 - HKLM\System\CCS\Services\Tcpip\..\{E114879E-680A-42EE-849C-379ABDD9E2DE}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress ---\\ Protocole additionnel (27) - 5s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation® O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: ms-itss [64Bits] - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll =>.Microsoft Corporation® O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation® O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Enumère les données de BootExecute (2) - 0s O34 - HKLM BootExecute: (BootDefrag.exe) (. - BootDefrag.exe.) -- BootDefrag.exe O34 - HKLM BootExecute: (sdnclean64.exe) =>.Safer Networking Ltd ---\\ Logiciels installés (94) - 29s O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {BE930E38-7BB3-45B6-85B2-5251F374F844} =>.Hewlett-Packard O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} =>.CyberLink® O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761} =>.CyberLink® O42 - Logiciel: Acer Backup Manager - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93} =>.NewTech Infosystems, Inc® O42 - Logiciel: Acer Crystal Eye webcam Ver:1.1.124.1120 - (.Chicony Electronics Co.,Ltd..) [HKLM][64Bits] -- {D0ACE89D-EC7F-470F-80BE-4C98ED366B32} =>.Chicony Electronics Co., Ltd.® O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} =>.Acer Incorporated O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated® O42 - Logiciel: Acer GameZone Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1 =>.Oberon Media, Inc. O42 - Logiciel: Acer GridVista - (.Acer Inc..) [HKLM][64Bits] -- GridVista =>.Dritek System Inc.® O42 - Logiciel: Acer Registration - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Registration =>.Acer Incorporated® O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Screensaver =>.Acer Incorporated O42 - Logiciel: Acer Updater - (.Acer Incorporated.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA} =>.Acer Incorporated® O42 - Logiciel: Acer VCM - (.Acer Incorporated.) [HKLM][64Bits] -- {047F790A-7A2A-4B6A-AD02-38092BA63DAC} =>.Acer Incorporated O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Reader 9.5.5 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001} =>.Adobe Systems Incorporated O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- {DBCE1208-433D-4D3E-A26A-CB1B5E71A8F5} =>.Alcor Micro Corp. O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{DBCE1208-433D-4D3E-A26A-CB1B5E71A8F5} =>.Alcor Micro Corp. O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {52D87F32-70E4-4348-8148-C0B9F35B1314} =>.Apple Inc. O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {11F38253-8940-FFDA-D131-B14120C357E4} =>.ATI Technologies, Inc. O42 - Logiciel: Auslogics BoostSpeed - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1 =>.Auslogics Software Pty Ltd® O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 =>.Auslogics Software Pty Ltd® O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast Antivirus =>.AVAST Software s.r.o.® O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM][64Bits] -- {72B776E5-4530-4C4B-9453-751DF87D9D93} =>.NewTech Infosystems, Inc® O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc. O42 - Logiciel: Broadcom Gigabit NetLink Controller - (.Broadcom Corporation.) [HKLM][64Bits] -- {A325B368-A9EC-40EF-A95C-9DEAD3683AE3} =>.Broadcom Corporation O42 - Logiciel: CANAL+ pour Windows Media Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {E2A6B1A0-C1E3-4311-BF86-EAF18841FD67} =>.Microsoft Corporation O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {34A0D249-747E-4D6C-803D-329C120C6B79} =>.ATI O42 - Logiciel: Catalyst Control Center Core Implementation - (.ATI.) [HKLM][64Bits] -- {1FF19BBD-554D-733C-3BDF-B55C99349198} =>.ATI O42 - Logiciel: Catalyst Control Center Graphics Full Existing - (.ATI.) [HKLM][64Bits] -- {4507185D-FAB8-B77D-4546-2CF31DA906AD} =>.ATI O42 - Logiciel: Catalyst Control Center Graphics Full New - (.ATI.) [HKLM][64Bits] -- {14D6085A-9A42-C0B5-823E-8C9619AC1026} =>.ATI O42 - Logiciel: Catalyst Control Center Graphics Light - (.ATI.) [HKLM][64Bits] -- {C09EECFB-8925-5E54-1580-3FAEB6A78856} =>.ATI O42 - Logiciel: Catalyst Control Center Graphics Previews Vista - (.ATI.) [HKLM][64Bits] -- {41BC23C5-157F-77A0-6662-17A5096E7946} =>.ATI O42 - Logiciel: Catalyst Control Center InstallProxy - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {F6B7BF58-36D0-A76E-53E2-F65DBD4A6A52} =>.ATI Technologies, Inc. O42 - Logiciel: Catalyst Control Center Localization All - (.ATI.) [HKLM][64Bits] -- {A8CB3994-B273-D81E-315C-CA3A8376415E} =>.ATI O42 - Logiciel: ccc-core-static - (.ATI Technologies.) [HKLM][64Bits] -- {357C0C30-051F-FE77-4709-025786123FB1} =>.ATI Technologies O42 - Logiciel: ccc-utility64 - (.ATI.) [HKLM][64Bits] -- {BD41C9CA-7722-7C0F-8BFE-E88A81865287} =>.ATI O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft O42 - Logiciel: DJ_AIO_06_F4500_SW_MIN - (.Hewlett-Packard.) [HKLM][64Bits] -- {85498904-0748-45AA-9482-6DB8EA971B91} =>.Hewlett-Packard O42 - Logiciel: Gestionnaire de Connexion 3G SFR 2009.11 - (..) [HKLM][64Bits] -- Gestionnaire de Connexion 3G SFR_is1 O42 - Logiciel: Glary Utilities 3.9.4 - (.Glarysoft Ltd.) [HKLM][64Bits] -- Glary Utilities 3 =>.Glarysoft Ltd O42 - Logiciel: HP Deskjet F4500 All-in-One Driver 14.0 Rel. 6 - (.HP.) [HKLM][64Bits] -- {0AFFEA39-60AF-4C4F-BB47-4A1F7CB12129} =>.Hewlett Packard® O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card =>.Acer Incorporated® O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation® O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM][64Bits] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E} =>.Intel Corporation® O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424} =>.Microsoft Corporation O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {F0C7385A-9D20-45F3-8101-05D383885180} =>.Apple Inc. O42 - Logiciel: Java 7 Update 67 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F03217067FF} =>.Oracle O42 - Logiciel: Java Auto Updater - (.Oracle, Inc..) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle, Inc. O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} =>.Microsoft Corporation O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM][64Bits] -- LManager =>.Dritek System Inc.® O42 - Logiciel: LSI HDA Modem - (.LSI Corporation.) [HKLM][64Bits] -- LSI Soft Modem =>.LSI Corporation O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan =>.McAfee, Inc. O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673} =>.Microsoft Corporation O42 - Logiciel: MobileMe Control Panel - (.Apple Inc..) [HKLM][64Bits] -- {6DD01FF3-63CE-436B-96DB-61363EAA4EB8} =>.Apple Inc. O42 - Logiciel: Mozilla Firefox 54.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 54.0.1 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation O42 - Logiciel: Multi Virus Cleaner 2017 - (.AxBx.) [HKLM][64Bits] -- Multi Virus Cleaner 2017_is1 =>.AxBx® O42 - Logiciel: MyWinLocker - (.Egis Technology Inc..) [HKLM][64Bits] -- {68301905-2DEA-41CE-A4D4-E8B443B099BA} =>.Egis Technology Inc. O42 - Logiciel: Network64 - (.Hewlett-Packard.) [HKLM][64Bits] -- {48C0866E-57EB-444C-8371-8E4321066BC3} =>.Hewlett-Packard O42 - Logiciel: Norton Online Backup - (.Symantec.) [HKLM][64Bits] -- {C57BCDE1-7CB9-467D-B3BA-7E119916CDC1} =>.Symantec O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403} =>.NewTech Infosystems, Inc® O42 - Logiciel: NTI Backup Now Standard - (.NewTech Infosystems.) [HKLM][64Bits] -- {12EFA1A4-AC3B-443C-8143-237EDE760403} =>.NewTech Infosystems O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM][64Bits] -- {2413930C-8309-47A6-BC61-5EF27A4222BC} =>.NewTech Infosystems O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC} =>.NewTech Infosystems O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {1C4551A6-4743-4093-91E4-1477CD655043} =>.NVIDIA Corporation O42 - Logiciel: PDF Architect 3 - (.pdfforge GmbH.) [HKLM][64Bits] -- PDF Architect 3 =>.pdfforge GmbH® O42 - Logiciel: PDF Architect 3 Create Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {38BA288B-C4F4-4C62-9237-4BFAB374F966} =>.pdfforge GmbH O42 - Logiciel: PDF Architect 3 Edit Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {5183F03D-90FA-493B-A074-F0F78B8486AD} =>.pdfforge GmbH O42 - Logiciel: PDF Architect 3 View Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {EB24E9E7-4BC1-4FD7-BF86-BDE07A7A03D7} =>.pdfforge GmbH O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} =>.pdfforge O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc =>.EA Digital Illusions CE AB® O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 12.0 =>.RealNetworks, Inc.® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} =>.RealNetworks, Inc. O42 - Logiciel: SafeZone Stable 3.55.2393.596 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 3.55.2393.596 =>.AVAST Software s.r.o.® O42 - Logiciel: SaveItCoupons - (.SaveItCoupons.) [HKLM][64Bits] -- {37476589-E48E-439E-A706-56189E2ED4C4}_is1 =>PUP.Optional.SaveOn O42 - Logiciel: Scan - (.Hewlett-Packard.) [HKLM][64Bits] -- {06A1D88C-E102-4527-AF70-29FFD7AF215A} =>.Hewlett-Packard O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054} =>.McAfee O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 =>.Safer Networking Ltd.® O42 - Logiciel: Stronghold - (.Firefly Studios.) [HKLM][64Bits] -- {C917BA70-28A3-4C74-B163-41FD8C8E1A5A} =>.Firefly Studios® O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: Toolbox - (.Hewlett-Packard.) [HKLM][64Bits] -- {292F0F52-B62D-4E71-921B-89A682402201} =>.Hewlett-Packard O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer =>.Unity Technologies ApS O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: VoiceOver Kit - (.Apple Inc..) [HKLM][64Bits] -- {6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA} =>.Apple Inc. O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Welcome Center =>.Acer Incorporated® O42 - Logiciel: Windows Media Center Add-in for Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EDBEB2B-7C8D-42E6-8312-0F84394A3223} =>.Microsoft Corporation ---\\ HKCU & HKLM Software Keys (127) - 29s HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe HKLM\SOFTWARE\Wow6432Node\AdobeFlashPlayerUpdate HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies =>.AGEIA Technologies HKLM\SOFTWARE\Wow6432Node\America Online =>.America Online HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. =>.Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc. HKLM\SOFTWARE\Wow6432Node\ATI =>.ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies =>.ATI Technologies HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software HKLM\SOFTWARE\Wow6432Node\CDDB =>.Cddb Software HKLM\SOFTWARE\Wow6432Node\conduitEngine HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation HKLM\SOFTWARE\Wow6432Node\DICE =>.DICE HKLM\SOFTWARE\Wow6432Node\Digital River =>.Digital River Entreprise HKLM\SOFTWARE\Wow6432Node\EdenFlirt HKLM\SOFTWARE\Wow6432Node\EgisTec Egis Software Update =>.EgisTec HKLM\SOFTWARE\Wow6432Node\Electronic Arts =>.Electronic Arts HKLM\SOFTWARE\Wow6432Node\Full Tilt Poker HKLM\SOFTWARE\Wow6432Node\GlarySoft =>.Glarysoft HKLM\SOFTWARE\Wow6432Node\Google =>.Google HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard =>.Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\ICE =>.Legitimate HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft HKLM\SOFTWARE\Wow6432Node\Jawego =>.Superfluous.JawegoPartners HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics HKLM\SOFTWARE\Wow6432Node\Lavasoft =>.Lavasoft HKLM\SOFTWARE\Wow6432Node\Licenses =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial) =>.Malwarebytes HKLM\SOFTWARE\Wow6432Node\MaxPower =>.Legitimate HKLM\SOFTWARE\Wow6432Node\McAfee =>.McAfee Inc. HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NewTech Infosystems =>.NewTech Infosystems HKLM\SOFTWARE\Wow6432Node\nSplitter =>.Legitimate HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\Wow6432Node\OEM =>.OEM HKLM\SOFTWARE\Wow6432Node\Opera Software =>.Opera Software HKLM\SOFTWARE\Wow6432Node\PC HKLM\SOFTWARE\Wow6432Node\PDF Architect 2 =>.pdfforge GmbH HKLM\SOFTWARE\Wow6432Node\PDF Architect 3 =>.pdfforge GmbH HKLM\SOFTWARE\Wow6432Node\RealNetworks =>.RealNetworks HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited =>.Safer Networking Limited HKLM\SOFTWARE\Wow6432Node\SecureDigitalServices HKLM\SOFTWARE\Wow6432Node\SFR =>.SFR HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype HKLM\SOFTWARE\Wow6432Node\SynergeticSoft =>.Synergeticsoft HKLM\SOFTWARE\Wow6432Node\TeamViewer =>.TeamViewer HKLM\SOFTWARE\Wow6432Node\Valve =>.Valve HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\Wistron =>.Wistron HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp. =>.Xing Technology Corp. HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! Inc. HKLM\SOFTWARE\Wow6432Node\Even Balance =>.Even Balance Inc HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\Acer =>.Acer HKCU\SOFTWARE\Adobe =>.Adobe HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. =>.Apple Inc. HKCU\SOFTWARE\ATI =>.ATI HKCU\SOFTWARE\Auslogics =>.Auslogics HKCU\SOFTWARE\Avast Software =>.AVAST Software HKCU\SOFTWARE\CDDB =>.Cddb Software HKCU\SOFTWARE\Chromium =>.Chromium HKCU\SOFTWARE\Convar =>.Legitimate HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation HKCU\SOFTWARE\DevNet =>Toolbar.Lookineo HKCU\SOFTWARE\DSS =>.DSS Software HKCU\SOFTWARE\Full Tilt Poker HKCU\SOFTWARE\Glarysoft =>.Glarysoft HKCU\SOFTWARE\GoldenGate =>.Oracle HKCU\SOFTWARE\Google =>.Google HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard HKCU\SOFTWARE\HookNetwork =>.Hook Network HKCU\SOFTWARE\IM Providers =>.IM Providers HKCU\SOFTWARE\Intel =>.Intel HKCU\SOFTWARE\JavaSoft =>.JavaSoft HKCU\SOFTWARE\Licenses =>.Microsoft Corporation HKCU\SOFTWARE\Macromedia =>.Macromedia HKCU\SOFTWARE\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware HKCU\SOFTWARE\MCAFEE =>.McAfee Inc. HKCU\SOFTWARE\Mozilla =>.Mozilla HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKCU\SOFTWARE\Netscape =>.Netscape HKCU\SOFTWARE\Northcode Inc =>.Northcode Inc HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions HKCU\SOFTWARE\OEM =>.OEM HKCU\SOFTWARE\Opera Software =>.Opera Software HKCU\SOFTWARE\PC HKCU\SOFTWARE\PDF Architect 3 =>.pdfforge GmbH HKCU\SOFTWARE\PDFCreator.net =>.Philip Chinery HKCU\SOFTWARE\Piriform =>.Piriform HKCU\SOFTWARE\RealNetworks =>.RealNetworks HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKCU\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited HKCU\SOFTWARE\SecuROM =>.SecuROM HKCU\SOFTWARE\SFR =>.SFR HKCU\SOFTWARE\Skype =>.Skype HKCU\SOFTWARE\Sonix =>.Sonix HKCU\SOFTWARE\Synaptics =>.Synaptics HKCU\SOFTWARE\SynergeticSoft =>.Synergeticsoft HKCU\SOFTWARE\TeamViewer =>.TeamViewer HKCU\SOFTWARE\TikGames HKCU\SOFTWARE\Trolltech =>.Trolltech HKCU\SOFTWARE\Unity =>.Unity HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation HKCU\SOFTWARE\Vodafone =>.Vodafone HKCU\SOFTWARE\Wistron =>.Wistron HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKCU\SOFTWARE\Yahoo =>.Yahoo! Inc. HKCU\SOFTWARE\yahooinstall =>.Yahoo! Inc. HKCU\SOFTWARE\ZHP =>.Nicolas Coolman HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation HKCU\SOFTWARE\AppDataLow\Toolbar HKCU\SOFTWARE\AppDataLow\Software\conduitEngine HKCU\SOFTWARE\AppDataLow\Software\Google =>.Google HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft HKCU\SOFTWARE\AppDataLow\Software\Monitored =>.Legitimate HKCU\SOFTWARE\AppDataLow\Software\settings =>.Samsung Electronics HKCU\SOFTWARE\AppDataLow\Software\Unity =>.Unity HKCU\SOFTWARE\AppDataLow\Software\Yahoo =>.Yahoo! Inc. ---\\ Contenu des dossiers Programmes (1036) - 126s O43 - CFD: 11/01/2010 - [] D -- C:\Program Files\Acer =>.Acer Incorporated® O43 - CFD: 25/02/2010 - [] D -- C:\Program Files\Acer Accessory Store =>.Acer Inc. O43 - CFD: 11/01/2010 - [] D -- C:\Program Files\ATI =>.ATI Technologies, Inc® O43 - CFD: 23/03/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.® O43 - CFD: 02/11/2015 - [] D -- C:\Program Files\Bonjour =>.Apple Inc. O43 - CFD: 05/11/2009 - [] D -- C:\Program Files\Broadcom =>.Broadcom O43 - CFD: 05/11/2013 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd O43 - CFD: 01/07/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation O43 - CFD: 24/03/2017 - [] D -- C:\Program Files\DVD Maker =>.Aone Software O43 - CFD: 25/02/2010 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation O43 - CFD: 26/08/2012 - [0] D -- C:\Program Files\Google =>.Google O43 - CFD: 10/01/2014 - [] D -- C:\Program Files\HP =>.Hewlett-Packard O43 - CFD: 15/06/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation O43 - CFD: 06/06/2017 - [] D -- C:\Program Files\iPod =>.Apple Inc.® O43 - CFD: 06/06/2017 - [] D -- C:\Program Files\iTunes =>.Apple Inc. O43 - CFD: 24/03/2017 - [] D -- C:\Program Files\LSI SoftModem =>.LSI Corporation O43 - CFD: 15/03/2013 - [] D -- C:\Program Files\McAfee =>.McAfee O43 - CFD: 21/08/2014 - [] D -- C:\Program Files\McAfee Security Scan =>.McAfee O43 - CFD: 17/08/2010 - [] D -- C:\Program Files\McAfee.com =>.McAfee Inc. O43 - CFD: 12/01/2010 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation O43 - CFD: 05/11/2009 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation O43 - CFD: 30/07/2015 - [] D -- C:\Program Files\PDFCreator =>.Philip Chinery O43 - CFD: 11/01/2010 - [] D -- C:\Program Files\Realtek =>.Realtek O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation O43 - CFD: 11/07/2013 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation O43 - CFD: 03/05/2012 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 13/10/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Acer =>.Acer Incorporated® O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Acer Arcade Deluxe =>.Acer Inc. O43 - CFD: 25/08/2012 - [] D -- C:\Program Files (x86)\Acer GameZone =>.Acer Inc. O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Acer Inc =>.Dritek System Inc.® O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 13/02/2013 - [0] D -- C:\Program Files (x86)\adslTV =>.adslTV O43 - CFD: 05/11/2012 - [] D -- C:\Program Files (x86)\AGEIA Technologies =>.AGEIA Technologies O43 - CFD: 05/11/2013 - [] D -- C:\Program Files (x86)\AmIcoSingLun =>.Alcor Micro Corporation O43 - CFD: 06/06/2017 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc. O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\ATI Technologies =>.ATI Technologies O43 - CFD: 15/03/2013 - [] D -- C:\Program Files (x86)\Auslogics =>.Auslogics O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\AxBx =>.AxBx® O43 - CFD: 02/11/2015 - [] D -- C:\Program Files (x86)\Bonjour =>.Apple Inc. O43 - CFD: 03/12/2015 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\Convar =>.Convar Deutschland GmbH O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Cyberlink =>.CyberLink Corporation O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\EgisTec =>.EgisTec O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\EgisTec Egis Software Update =>.EgisTec O43 - CFD: 18/07/2013 - [] D -- C:\Program Files (x86)\Electronic Arts =>.Electronic Arts O43 - CFD: 05/11/2013 - [] D -- C:\Program Files (x86)\Extreme Tux Racer O43 - CFD: 23/01/2012 - [] D -- C:\Program Files (x86)\Firefly Studios =>.Firefly Studios® O43 - CFD: 25/08/2012 - [] D -- C:\Program Files (x86)\Free Belote O43 - CFD: 25/08/2012 - [] D -- C:\Program Files (x86)\Full Tilt Poker O43 - CFD: 19/06/2014 - [] D -- C:\Program Files (x86)\Glary Utilities 3 =>.GlarySoft O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\Google =>.Google O43 - CFD: 28/05/2015 - [0] D -- C:\Program Files (x86)\GUMF620.tmp O43 - CFD: 01/05/2017 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard O43 - CFD: 25/08/2012 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield Software O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation O43 - CFD: 15/06/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation O43 - CFD: 04/12/2016 - [] D -- C:\Program Files (x86)\iTunes =>.Apple Inc. O43 - CFD: 18/08/2014 - [] D -- C:\Program Files (x86)\Java =>.Oracle O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Launch Manager =>.Legitimate O43 - CFD: 06/11/2013 - [] D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware =>.Malwarebytes Corporation® O43 - CFD: 22/10/2012 - [] D -- C:\Program Files (x86)\McAfee =>.McAfee O43 - CFD: 18/08/2010 - [] D -- C:\Program Files (x86)\McAfee.com =>.McAfee Inc. O43 - CFD: 11/02/2012 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 =>.Microsoft Corporation O43 - CFD: 10/10/2012 - [] D -- C:\Program Files (x86)\Microsoft Works =>.Microsoft Corporation O43 - CFD: 23/11/2010 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation O43 - CFD: 05/11/2012 - [] D -- C:\Program Files (x86)\Movie Maker 2.6 =>.Microsoft Corporation O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation O43 - CFD: 26/02/2010 - [0] D -- C:\Program Files (x86)\MSXML 4.0 =>.Microsoft Corporation O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\NewTech Infosystems =>.NewTech Infosystems, Inc® O43 - CFD: 29/06/2010 - [] D -- C:\Program Files (x86)\Oberon Media =>.Oberon Media O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\Opera =>.Opera Software O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\PDF Architect 3 =>.pdfforge GmbH O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\PokerStars.FR =>.PokerStars.fr O43 - CFD: 14/12/2010 - [] D -- C:\Program Files (x86)\Real =>.RealNetworks Inc. O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 20/01/2013 - [] D -- C:\Program Files (x86)\SFR =>.SFR O43 - CFD: 06/11/2013 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2 =>.SaferNetworking O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Symantec =>.Symantec O43 - CFD: 11/01/2010 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation O43 - CFD: 09/03/2010 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team O43 - CFD: 04/02/2012 - [] D -- C:\Program Files (x86)\VideoScavenger_1eEI O43 - CFD: 11/07/2013 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation O43 - CFD: 03/05/2012 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 13/10/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 11/02/2012 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 26/08/2012 - [] D -- C:\Program Files (x86)\Yahoo! =>.Yahoo! O43 - CFD: 05/11/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer =>.Acer O43 - CFD: 11/01/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Arcade Deluxe =>.Acer Inc. O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager =>.Acer Inc. O43 - CFD: 11/01/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye webcam =>.Acer Inc. O43 - CFD: 25/08/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone =>.Acer Inc. O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GridVista =>.Acer Inc. O43 - CFD: 05/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem =>.Acer Inc. O43 - CFD: 05/11/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 15/03/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics =>.Auslogics O43 - CFD: 19/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software =>.AVAST Software O43 - CFD: 11/01/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center =>.Advanced Micro Devices Inc O43 - CFD: 05/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec =>.EgisTec O43 - CFD: 16/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player O43 - CFD: 01/07/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation O43 - CFD: 05/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3 =>.GlarySoft O43 - CFD: 06/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc. O43 - CFD: 18/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft =>.Lavasoft O43 - CFD: 05/11/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 21/08/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus =>.McAfee Inc. O43 - CFD: 13/09/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation O43 - CFD: 10/10/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works =>.Microsoft Corporation O43 - CFD: 01/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multi Virus Cleaner 2017 O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Backup Now 5 =>.NTI Corporation O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 8 =>.NTI Corporation O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 3 =>.pdfforge GmbH O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator =>.Philip Chinery O43 - CFD: 05/11/2013 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pop up Blocker v6.0.6 O43 - CFD: 01/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 11/11/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team O43 - CFD: 03/05/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live =>.Microsoft Corporation O43 - CFD: 19/02/2015 - [] D -- C:\ProgramData\.mono =>.Legitimate O43 - CFD: 10/12/2014 - [] D -- C:\ProgramData\15047809351170750478UL O43 - CFD: 03/11/2014 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 =>.GEAR Software, Inc. O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Acer =>.Acer O43 - CFD: 17/05/2013 - [] D -- C:\ProgramData\Adobe =>.Adobe O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\AmUStor =>.Alocr Micro O43 - CFD: 01/07/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc. O43 - CFD: 24/08/2010 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc. O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\ProgramData\ATI =>.ATI O43 - CFD: 24/03/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\BackupManager =>.BackupManager O43 - CFD: 04/02/2012 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org O43 - CFD: 30/03/2010 - [] D -- C:\ProgramData\Boss Media O43 - CFD: 25/02/2010 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation O43 - CFD: 08/08/2011 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation O43 - CFD: 07/05/2015 - [] D -- C:\ProgramData\dckifemmdbeiokoomhnohdmneckjcobc O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation O43 - CFD: 06/11/2012 - [] SHD -- C:\ProgramData\DSS =>.DSS Software O43 - CFD: 02/11/2015 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 =>.Gearbox Software O43 - CFD: 16/03/2013 - [] D -- C:\ProgramData\EA Logs =>.Electronic Arts, Inc. O43 - CFD: 11/01/2010 - [] D -- C:\ProgramData\EgisTec =>.EgisTec O43 - CFD: 18/07/2013 - [] D -- C:\ProgramData\Electronic Arts =>.Electronic Arts O43 - CFD: 04/03/2011 - [] D -- C:\ProgramData\eSobi =>.eSobi Inc O43 - CFD: 25/02/2010 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation O43 - CFD: 05/11/2013 - [] D -- C:\ProgramData\GlarySoft =>.GlarySoft O43 - CFD: 25/08/2012 - [] D -- C:\ProgramData\Google =>.Google O43 - CFD: 10/01/2014 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard O43 - CFD: 10/06/2010 - [] D -- C:\ProgramData\InstallShield =>.InstallShield O43 - CFD: 06/11/2013 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes O43 - CFD: 22/10/2012 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 23/11/2014 - [] D -- C:\ProgramData\McAfee Security Scan =>.McAfee O43 - CFD: 25/02/2010 - [] D -- C:\ProgramData\McQcModifier-5c47-a7b0 O43 - CFD: 25/02/2010 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation O43 - CFD: 13/06/2015 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation O43 - CFD: 14/06/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation O43 - CFD: 15/05/2012 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation O43 - CFD: 25/02/2010 - [] D -- C:\ProgramData\OEM =>.OEM O43 - CFD: 18/08/2014 - [0] D -- C:\ProgramData\Oracle =>.Oracle O43 - CFD: 13/02/2013 - [0] D -- C:\ProgramData\Origin =>.Electronic Arts, Inc. O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\PDF Architect 3 =>.pdfforge GmbH O43 - CFD: 07/12/2010 - [] D -- C:\ProgramData\Real =>.RealNetworks Inc. O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\SiteAdvisor =>.McAfee Inc. O43 - CFD: 07/09/2013 - [] D -- C:\ProgramData\Skype =>.Skype O43 - CFD: 06/11/2013 - [] D -- C:\ProgramData\Spybot - Search & Destroy =>.SaferNetworking O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation O43 - CFD: 26/02/2010 - [] D -- C:\ProgramData\Sun =>.Oracle O43 - CFD: 01/07/2017 - [0] D -- C:\ProgramData\SWCUTemp O43 - CFD: 05/11/2009 - [] D -- C:\ProgramData\Symantec =>.Symantec O43 - CFD: 01/07/2017 - [] AD -- C:\ProgramData\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation O43 - CFD: 15/03/2013 - [] D -- C:\ProgramData\UAB =>.UAB Software O43 - CFD: 10/06/2010 - [] D -- C:\ProgramData\Vodafone =>.Vodafone O43 - CFD: 25/08/2012 - [0] D -- C:\ProgramData\Yahoo! =>.Yahoo! O43 - CFD: 10/02/2012 - [] HDC -- C:\ProgramData\{1B0B54CA-AA7D-41D3-A84A-29E7C9CB13A2} O43 - CFD: 24/08/2010 - [] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} =>.GEAR Software, Inc. O43 - CFD: 01/02/2011 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe O43 - CFD: 01/07/2017 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc. O43 - CFD: 14/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast O43 - CFD: 14/05/2014 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Common Files\EgisTec =>.EgisTec O43 - CFD: 10/01/2014 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard =>.Hewlett-Packard O43 - CFD: 10/01/2014 - [] D -- C:\Program Files (x86)\Common Files\HP =>.Hewlett-Packard O43 - CFD: 10/06/2010 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield O43 - CFD: 18/08/2014 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle O43 - CFD: 15/03/2013 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee O43 - CFD: 24/03/2017 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Common Files\Oberon Media =>.Oberon Media O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Common Files\postureAgent =>.Microsoft Corporation O43 - CFD: 15/12/2010 - [0] D -- C:\Program Files (x86)\Common Files\Real =>.RealNetworks Inc. O43 - CFD: 05/11/2009 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation O43 - CFD: 09/08/2014 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games O43 - CFD: 11/07/2012 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation O43 - CFD: 11/01/2010 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation O43 - CFD: 05/11/2012 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard =>.Seagate O43 - CFD: 14/12/2010 - [] D -- C:\Program Files (x86)\Common Files\xing shared =>.Xing O43 - CFD: 07/06/2017 - [0] SHD -- C:\Users\peve\AppData\Roaming\.# O43 - CFD: 20/11/2013 - [] D -- C:\Users\peve\AppData\Roaming\.mono =>.Legitimate O43 - CFD: 02/09/2013 - [] D -- C:\Users\peve\AppData\Roaming\7go O43 - CFD: 26/02/2010 - [] D -- C:\Users\peve\AppData\Roaming\Adobe =>.Adobe O43 - CFD: 03/01/2017 - [] D -- C:\Users\peve\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Roaming\ATI =>.ATI O43 - CFD: 15/03/2013 - [] D -- C:\Users\peve\AppData\Roaming\Auslogics =>.Auslogics O43 - CFD: 06/11/2013 - [] D -- C:\Users\peve\AppData\Roaming\AVAST Software =>.AVAST Software O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Roaming\CyberLink =>.CyberLink Corporation O43 - CFD: 11/02/2017 - [] D -- C:\Users\peve\AppData\Roaming\dvdcss =>.VideoLan Team O43 - CFD: 14/09/2010 - [] D -- C:\Users\peve\AppData\Roaming\eSobi =>.eSobi Inc O43 - CFD: 29/06/2010 - [] D -- C:\Users\peve\AppData\Roaming\funkitron =>.Funkitron Games O43 - CFD: 01/03/2010 - [] D -- C:\Users\peve\AppData\Roaming\GameConsole =>.Legitimate O43 - CFD: 05/11/2013 - [] D -- C:\Users\peve\AppData\Roaming\GlarySoft =>.GlarySoft O43 - CFD: 24/11/2014 - [] HD -- C:\Users\peve\AppData\Roaming\GoldenGate =>.Oracle O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Roaming\Google =>.Google O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Roaming\gtk-2.0 =>.GTK Project O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Roaming\Identities =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Roaming\Macromedia =>.Macromedia O43 - CFD: 18/07/2013 - [] D -- C:\Users\peve\AppData\Roaming\Malwarebytes =>.Malwarebytes O43 - CFD: 05/11/2009 - [0] D -- C:\Users\peve\AppData\Roaming\Media Center Programs =>.Microsoft Corporation O43 - CFD: 27/07/2016 - [] SD -- C:\Users\peve\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 01/05/2010 - [] D -- C:\Users\peve\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 20/07/2013 - [] D -- C:\Users\peve\AppData\Roaming\Mupen64Plus O43 - CFD: 30/07/2015 - [] D -- C:\Users\peve\AppData\Roaming\Opera Software =>.Opera Software O43 - CFD: 18/08/2014 - [] D -- C:\Users\peve\AppData\Roaming\Oracle =>.Oracle O43 - CFD: 12/09/2012 - [] D -- C:\Users\peve\AppData\Roaming\Origin =>.Electronic Arts, Inc. O43 - CFD: 30/07/2015 - [] D -- C:\Users\peve\AppData\Roaming\PDF Architect 3 =>.pdfforge GmbH O43 - CFD: 01/05/2017 - [0] D -- C:\Users\peve\AppData\Roaming\PDF Producer =>.PDF Pro Software O43 - CFD: 30/07/2015 - [] D -- C:\Users\peve\AppData\Roaming\pdfforge =>.pdfforge O43 - CFD: 11/08/2011 - [] D -- C:\Users\peve\AppData\Roaming\PowerCinema =>.CyberLink Corporation O43 - CFD: 30/04/2013 - [] D -- C:\Users\peve\AppData\Roaming\Real =>.RealNetworks Inc. O43 - CFD: 12/09/2012 - [] RHD -- C:\Users\peve\AppData\Roaming\SecuROM =>.SecuROM O43 - CFD: 20/01/2013 - [] D -- C:\Users\peve\AppData\Roaming\SFR =>.SFR O43 - CFD: 30/07/2015 - [] D -- C:\Users\peve\AppData\Roaming\Shortcut =>.Shortcut Software O43 - CFD: 07/09/2013 - [] D -- C:\Users\peve\AppData\Roaming\Skype =>.Skype O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Roaming\SoftDMA =>.CyberLink Corporation O43 - CFD: 22/01/2016 - [] D -- C:\Users\peve\AppData\Roaming\sparta111 =>.Legitimate O43 - CFD: 17/07/2013 - [] D -- C:\Users\peve\AppData\Roaming\TeamViewer =>.TeamViewer O43 - CFD: 19/07/2013 - [] D -- C:\Users\peve\AppData\Roaming\Teeworlds =>.Teeworlds O43 - CFD: 18/01/2016 - [] D -- C:\Users\peve\AppData\Roaming\Template =>.Microsoft Corporation O43 - CFD: 14/11/2013 - [] D -- C:\Users\peve\AppData\Roaming\Unity =>.Unity O43 - CFD: 11/02/2017 - [] D -- C:\Users\peve\AppData\Roaming\vlc =>.VideoLan Team O43 - CFD: 10/06/2010 - [] D -- C:\Users\peve\AppData\Roaming\Vodafone =>.Vodafone O43 - CFD: 26/01/2016 - [0] D -- C:\Users\peve\AppData\Roaming\WarThunder =>.Games Software O43 - CFD: 12/12/2016 - [] D -- C:\Users\peve\AppData\Roaming\Windows Live Writer =>.Microsoft Corporation O43 - CFD: 21/09/2010 - [] D -- C:\Users\peve\AppData\Roaming\Yahoo! =>.Yahoo! O43 - CFD: 02/07/2017 - [] D -- C:\Users\peve\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Local\Acer Arcade Deluxe =>.Acer Inc. O43 - CFD: 25/09/2014 - [] D -- C:\Users\peve\AppData\Local\Adobe =>.Adobe O43 - CFD: 25/08/2012 - [] D -- C:\Users\peve\AppData\Local\adslTV =>.adslTV O43 - CFD: 24/08/2010 - [] D -- C:\Users\peve\AppData\Local\Apple =>.Apple Inc. O43 - CFD: 02/11/2015 - [] D -- C:\Users\peve\AppData\Local\Apple Computer =>.Apple Inc. O43 - CFD: 25/02/2010 - [0] SHD -- C:\Users\peve\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 24/08/2011 - [] D -- C:\Users\peve\AppData\Local\Apps =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Local\ATI =>.ATI O43 - CFD: 30/03/2010 - [] D -- C:\Users\peve\AppData\Local\Boss Media O43 - CFD: 27/03/2010 - [] D -- C:\Users\peve\AppData\Local\cache =>.Legitimate O43 - CFD: 04/01/2017 - [] D -- C:\Users\peve\AppData\Local\CEF =>.CEF O43 - CFD: 22/01/2016 - [] D -- C:\Users\peve\AppData\Local\Chromium =>.Chromium O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Local\CyberLink =>.CyberLink Corporation O43 - CFD: 24/08/2014 - [0] D -- C:\Users\peve\AppData\Local\Diagnostics =>.Microsoft Corporation O43 - CFD: 21/07/2010 - [] D -- C:\Users\peve\AppData\Local\EdenFlash O43 - CFD: 25/02/2010 - [] D -- C:\Users\peve\AppData\Local\EgisTec =>.EgisTec O43 - CFD: 05/06/2017 - [0] D -- C:\Users\peve\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation O43 - CFD: 30/07/2015 - [0] SHD -- C:\Users\peve\AppData\Local\EmieSiteList =>.Enterprise mode Site List Mgr O43 - CFD: 30/07/2015 - [0] SHD -- C:\Users\peve\AppData\Local\EmieUserList =>.Enterprise mode Site List Mgr O43 - CFD: 02/03/2010 - [] D -- C:\Users\peve\AppData\Local\FullTiltPoker O43 - CFD: 16/02/2017 - [] D -- C:\Users\peve\AppData\Local\Google =>.Google O43 - CFD: 25/02/2010 - [0] SHD -- C:\Users\peve\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 13/07/2012 - [] D -- C:\Users\peve\AppData\Local\Macromedia =>.Macromedia O43 - CFD: 01/05/2017 - [] D -- C:\Users\peve\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 30/06/2010 - [] D -- C:\Users\peve\AppData\Local\Microsoft Games =>.Microsoft Corporation O43 - CFD: 17/09/2013 - [] D -- C:\Users\peve\AppData\Local\Mozilla =>.Mozilla Corporation O43 - CFD: 03/03/2010 - [] D -- C:\Users\peve\AppData\Local\Oberon Games =>.Oberon Games O43 - CFD: 30/07/2015 - [] D -- C:\Users\peve\AppData\Local\Opera Software =>.Opera Software O43 - CFD: 17/08/2014 - [] D -- C:\Users\peve\AppData\Local\Packages =>.Microsoft Corporation O43 - CFD: 30/07/2015 - [0] D -- C:\Users\peve\AppData\Local\PDFCreator =>.Philip Chinery O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Local\PlayMovie =>.PlayMovie O43 - CFD: 01/07/2017 - [] D -- C:\Users\peve\AppData\Local\PokerStars.FR =>.PokerStars.fr O43 - CFD: 08/08/2011 - [] D -- C:\Users\peve\AppData\Local\PowerCinema =>.CyberLink Corporation O43 - CFD: 18/07/2013 - [] D -- C:\Users\peve\AppData\Local\Programs =>.Microsoft Corporation O43 - CFD: 06/11/2012 - [] D -- C:\Users\peve\AppData\Local\PunkBuster =>.PunkBuster Games O43 - CFD: 05/07/2010 - [] D -- C:\Users\peve\AppData\Local\Real =>.RealNetworks Inc. O43 - CFD: 01/03/2010 - [] D -- C:\Users\peve\AppData\Local\Shalsoft =>.ShalSoft O43 - CFD: 26/01/2016 - [0] D -- C:\Users\peve\AppData\Local\Sparta =>.Sparta O43 - CFD: 02/07/2017 - [] D -- C:\Users\peve\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [0] SHD -- C:\Users\peve\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 19/02/2015 - [] D -- C:\Users\peve\AppData\Local\Unity =>.Unity O43 - CFD: 05/07/2010 - [] D -- C:\Users\peve\AppData\Local\VirtualStore =>.Microsoft Corporation O43 - CFD: 25/05/2016 - [] D -- C:\Users\peve\AppData\Local\Windows Live =>.Microsoft Corporation O43 - CFD: 20/09/2012 - [] D -- C:\Users\peve\AppData\Local\Windows Live Writer =>.Microsoft Corporation O43 - CFD: 05/11/2012 - [0] D -- C:\Users\peve\AppData\Local\WMTools Downloaded Files =>.WMTools O43 - CFD: 05/10/2010 - [] D -- C:\Users\peve\AppData\Local\Yahoo O43 - CFD: 17/07/2011 - [] D -- C:\Users\peve\AppData\Local\YesMessenger =>.Yes! Messenger O43 - CFD: 02/07/2017 - [] D -- C:\Users\peve\AppData\Local\ZHP =>.Nicolas Coolman O43 - CFD: 14/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{01C89488-0328-4252-A320-2EF8898B4BFA} O43 - CFD: 12/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{027F55FE-DE17-421E-890F-B1D116BC2088} O43 - CFD: 11/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{0295C59C-39AB-4B58-B887-68B1BBC6FACA} O43 - CFD: 18/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{02CD57C8-5691-46B3-82E5-D5791BC778FD} O43 - CFD: 18/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{02D32E43-8A76-4186-97C4-1010BAA17533} O43 - CFD: 22/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{0301DCF0-3917-4E1D-A527-F6A43722DFC8} O43 - CFD: 07/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{03078EB5-2983-486D-806D-718954FABF3D} O43 - CFD: 22/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{030B75C4-14A1-4E90-8542-1AF694B00091} O43 - CFD: 20/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{03472D49-3949-40A5-BECB-C74004BDD32A} O43 - CFD: 19/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{034F614E-8F77-4D35-B131-A7035948E596} O43 - CFD: 26/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{03829C05-FBFB-4B45-84FC-AD61930A6285} O43 - CFD: 16/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{03C82F6F-43DE-40EC-A78A-15F287BD9ED9} O43 - CFD: 12/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{03FBAB29-7659-4D7E-A285-E318C8298D7C} O43 - CFD: 23/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{040BF21B-FEED-4277-B8DA-43F449B07234} O43 - CFD: 10/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{0453DC42-FF21-45D4-A78C-846554076840} O43 - CFD: 20/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{045D6EBE-25B4-436A-B86B-79127DFF011A} O43 - CFD: 11/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{04D4EF55-6139-47A2-98EC-2A902792C784} O43 - CFD: 15/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{0588ACB7-1356-448E-A8F7-FF6568D37DE9} O43 - CFD: 23/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{05CB8E1B-30DB-4F2B-8D9D-34C228667995} O43 - CFD: 24/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{05DC62F3-1CF4-48DD-A4E2-AEE4DC06855B} O43 - CFD: 25/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{06369B06-CE85-4C26-9C7E-069566C1C115} O43 - CFD: 26/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{06764270-61F6-4791-BAB8-A4CCB87EEA0A} O43 - CFD: 21/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{0685E0EE-3D9F-4FFA-A9D0-26E4015E33A2} O43 - CFD: 01/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{089B8426-80D6-4A91-94CC-053326D46B9D} O43 - CFD: 19/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{089EAA03-B1D9-409A-8EA4-3269FF2D657A} O43 - CFD: 09/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{092E163A-6500-470D-8985-66DB9B166AE5} O43 - CFD: 05/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{0954418A-7AA1-4702-BFCB-28EB7A45D4E8} O43 - CFD: 23/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{0965E552-C76B-4E13-9EB8-C3E5BC5258D7} O43 - CFD: 11/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{0971A189-BBA8-4E97-9AC6-DBCDFE11500E} O43 - CFD: 15/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{097291A5-68C4-4AAB-A3E3-79CCCBA440C1} O43 - CFD: 20/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{09D4FA4F-F7E7-4F86-B54C-909A05B5FA92} O43 - CFD: 28/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{09E20848-C556-4890-B40D-38FE13FE6840} O43 - CFD: 24/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{09EE4E85-B01D-49EB-BB94-1B3A34D70180} O43 - CFD: 20/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{0A27D77F-4123-4711-8E80-BEA0C7FD737D} O43 - CFD: 30/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{0A4B3DF5-1661-4276-A56C-4B8D125871B8} O43 - CFD: 25/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{0AD3BB57-F90C-4382-87D0-29CEDA6A0B61} O43 - CFD: 23/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{0AF52B35-439A-4054-8CD8-9652ACAA28A6} O43 - CFD: 25/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{0B8EB4DB-2A60-4034-A09D-7CEDB0238081} O43 - CFD: 11/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{0BF5AA89-5D80-427E-925C-C090AB201C89} O43 - CFD: 11/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{0C4B2B8D-1588-499C-9F94-845D5B5360DA} O43 - CFD: 19/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{0C8A7552-4D8E-43AE-A62C-24B4AB5B0412} O43 - CFD: 13/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{0CA1FEFC-1B77-488C-B5A4-38525D1C57F7} O43 - CFD: 16/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{0CD86739-C961-4D2B-8488-EA43932E4DFC} O43 - CFD: 29/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{0CEF21E4-A146-4DE2-B26B-6C199431F450} O43 - CFD: 10/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{0D251844-0377-4122-9BD5-B380B4A34370} O43 - CFD: 13/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{0D41645E-B459-478E-953F-5082548D9572} O43 - CFD: 21/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{0D723344-8CEB-491C-AFD1-9BDF58385E4C} O43 - CFD: 22/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{0E3A4EDB-BBD4-4E11-B35D-450E3E49330E} O43 - CFD: 28/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{0F8B1885-4267-4557-A499-25ADD36D9798} O43 - CFD: 22/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{0FB6C8C6-7F90-47B1-9CC8-EA630DA79291} O43 - CFD: 05/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{0FC1EB0B-A027-442A-8799-6CD102F674E3} O43 - CFD: 27/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{102BA526-9FD6-4CA2-9458-4D86207D0D45} O43 - CFD: 06/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{103F05E2-7D24-4C12-9B9D-22F2CBA12179} O43 - CFD: 22/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{10F4B6DE-3BEC-4750-884B-3E334560AAEA} O43 - CFD: 17/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{11E1166A-76A5-4A8E-99A5-A6EAA19B1A2B} O43 - CFD: 25/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{13695D04-E96F-44DE-BE1E-A03CAD7F7E92} O43 - CFD: 26/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{13D0F46C-1A49-467A-8F05-5E076D44BEE5} O43 - CFD: 08/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{13EEB4C6-6A5B-4B29-A585-B19741C2C5AE} O43 - CFD: 27/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{141B435C-AF1A-418F-B760-B74190781DB0} O43 - CFD: 13/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{143CE443-F402-4521-B2F4-C6615BB29346} O43 - CFD: 26/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{155DB18C-128E-41BB-B40F-7E25AF56114D} O43 - CFD: 28/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{15BFA829-9093-45EF-8058-DBB11FB06947} O43 - CFD: 21/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{16063AD7-1AEE-450C-9E3C-0C0A40BE374E} O43 - CFD: 26/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{161F6794-7EC2-4E85-AFA3-38F34008C686} O43 - CFD: 16/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{16518A36-0A0D-434D-975C-7CA8FF8E20A2} O43 - CFD: 15/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{16D34077-DC62-4491-96B2-401DBA98EFAE} O43 - CFD: 10/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{17620CB0-7DA9-48AA-9CB1-7CD99ED28D6D} O43 - CFD: 19/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{17A056B5-D96E-4A7F-9958-0C515CB47E7A} O43 - CFD: 19/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{17C7D6D1-1B9B-41D0-96ED-1AE1AEE2E4FC} O43 - CFD: 04/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{1844A20B-4A63-4AB4-AFD6-A7864B26B539} O43 - CFD: 09/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{187D071A-A185-442A-8349-94922A5F0745} O43 - CFD: 12/12/2016 - [0] D -- C:\Users\peve\AppData\Local\{18DB27A7-2611-4FEE-B5AD-306AC9812652} O43 - CFD: 12/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{19202F3F-EEC7-4F42-98C7-688AFC5B7B52} O43 - CFD: 01/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{1A8A40CA-5E3E-4B22-BC75-8A97830D9E70} O43 - CFD: 16/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{1AD7F4FB-E821-430D-9CE3-1B934E712C4F} O43 - CFD: 29/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{1AFD3C72-107B-4F71-8F70-EE020B989D91} O43 - CFD: 31/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{1B5F345A-2905-44C0-8E94-2FF16DADCA46} O43 - CFD: 07/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{1B639756-4C46-4B89-A552-FCD18C94D306} O43 - CFD: 08/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{1B742245-4915-42F6-BE43-8238F7E1B855} O43 - CFD: 19/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{1BA6CAB0-0C01-451F-8517-4FEFB45F22B1} O43 - CFD: 16/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{1C09F42F-9AC3-4815-9053-09B0C0F4071C} O43 - CFD: 17/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{1C71B416-FB60-44EB-89E5-13029F34A426} O43 - CFD: 07/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{1CC49205-A300-4C72-9AA5-6FBC533BD423} O43 - CFD: 11/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{1DE00109-B8E6-49D6-97C6-21B0A432C43A} O43 - CFD: 08/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{1DF18D92-4CB1-436C-8F1B-2F842D53E4C1} O43 - CFD: 11/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{1E6B8BFF-E792-4772-AF12-1BA670EA03E3} O43 - CFD: 30/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{1E8F4AC8-0952-43A5-85B9-B0D230C41D50} O43 - CFD: 20/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{1F03AA24-DEEA-4925-B77F-8A031B8C87CD} O43 - CFD: 26/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{1F9D0463-DF44-4FE5-9D6B-412D0C424145} O43 - CFD: 04/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{1FC5DB4C-2F38-4EB9-8BE0-FBB119F9C72A} O43 - CFD: 14/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{204E3A7C-9EF2-42BA-8256-C97E8C76C65F} O43 - CFD: 04/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{20697108-A67A-4333-83C1-2E624BD5E958} O43 - CFD: 03/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{20BCDCAE-66F0-40E2-BBCA-6CC0C5350654} O43 - CFD: 20/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{21139E59-258C-4A11-8B95-06113D426987} O43 - CFD: 14/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{2146AD05-64F5-46BB-8BD1-9999611BF0DD} O43 - CFD: 12/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{21825B9D-48AA-4EEB-A940-3C860A35F71D} O43 - CFD: 24/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{21F2A555-0BDE-4752-B16D-4CCD8ED13A9D} O43 - CFD: 26/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{21FC8819-8568-4F75-9716-8A63A059B28C} O43 - CFD: 06/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{2378B294-E83A-40A5-9A0B-D4731A7567AA} O43 - CFD: 09/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{23BD37C8-7F46-4EA4-9D08-0A9AEC251A2D} O43 - CFD: 01/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{2419B681-6542-44B8-8F83-BEA158F95750} O43 - CFD: 18/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{242252EB-E544-4E29-A41C-7E852E7E440A} O43 - CFD: 24/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{2474F374-3E5B-4AEE-A1A8-A207BE262755} O43 - CFD: 06/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{25AFF451-1DCC-4847-AF09-D0AEB15CF2CB} O43 - CFD: 11/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{26A4812F-6902-4480-B0F1-2F59293E0C97} O43 - CFD: 04/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{26D43530-50D0-4A70-9579-25584B2FFD3F} O43 - CFD: 24/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{275CFC8A-5E4D-45D3-A8C9-90BBBF19E35A} O43 - CFD: 18/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{2792C15E-6410-4869-A807-98B6D122FD29} O43 - CFD: 30/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{27BF274A-CF42-4CEB-81D2-954451759A52} O43 - CFD: 21/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{27DCA60C-B4E6-4A8D-A5E6-DA0D366D8407} O43 - CFD: 23/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{28854C13-FF78-4618-9D16-4EEA765C3D08} O43 - CFD: 29/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{28B35015-41BB-407D-AD81-8436F57C5177} O43 - CFD: 16/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{28B4F9EA-310B-426A-951A-12E354A7D4C4} O43 - CFD: 31/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{29707CE1-873D-40A2-9D16-E52916DA068E} O43 - CFD: 27/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{2975B747-6D66-42BD-8C2F-5C63130A999D} O43 - CFD: 25/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{29E55B52-638D-40FE-84C7-EFB5D91C26FE} O43 - CFD: 12/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{2A371BF5-8037-4ECB-A2D9-E76782578CF1} O43 - CFD: 21/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{2A3AD232-94F2-459B-BE6B-94168008C890} O43 - CFD: 05/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{2A58D79D-2704-4055-A3E2-D2DA8D5D314A} O43 - CFD: 03/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{2A77C72E-281A-46A8-A138-02308806E863} O43 - CFD: 02/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{2A77DD7D-53AB-4F36-8714-85E55FA25F9C} O43 - CFD: 14/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{2A88D884-08B6-49EA-A6B2-54C0F55BC452} O43 - CFD: 12/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{2AA152B5-4553-429A-B730-93A3AB398E0C} O43 - CFD: 09/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{2B4616E0-323D-4BBF-88F7-0B2AEEC904B5} O43 - CFD: 07/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{2B701FA2-0843-4790-B338-438D95834037} O43 - CFD: 04/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{2C2183D2-1A21-4D8F-B058-D6AE5A2D6647} O43 - CFD: 23/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{2C2572DF-1980-418E-8663-3EFCAA77CCCD} O43 - CFD: 15/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{2C34226C-55D4-42E1-AEDB-B81ACF5D9A1C} O43 - CFD: 12/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{2C78744C-55CB-47A6-9BF6-71AB8E1ADD9C} O43 - CFD: 08/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{2D3C9C0D-DC8C-4A48-BC6C-A25EC44BC8B3} O43 - CFD: 10/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{2D4AD374-522B-4720-8C3C-9E91680DA971} O43 - CFD: 24/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{2D7819B5-FA54-4AEF-AC46-99921063D4A7} O43 - CFD: 27/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{2DE955F8-A329-4B3F-B704-DC2D172E7D7C} O43 - CFD: 12/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{2F2AB5D8-E231-4166-8D93-B237C51F4E4B} O43 - CFD: 30/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{2FE5A4C6-724C-4125-AA4A-A39521E78728} O43 - CFD: 20/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{300D000F-CE26-47BC-ABAD-0ABB8DB1470B} O43 - CFD: 16/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{306D589B-6BB7-4F96-A8D3-4536BF8748B1} O43 - CFD: 29/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{30F725B8-F58E-4D66-AD42-98886C434284} O43 - CFD: 28/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{3127B06D-80FC-4542-9408-A621B6640C63} O43 - CFD: 20/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{318466DC-9F13-4181-B087-DACA9F782109} O43 - CFD: 05/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{31C53F1A-D273-4CC8-8284-C99B111C010B} O43 - CFD: 18/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{31C5B3DD-9A3C-4EAE-B377-00F6338C7B1C} O43 - CFD: 05/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{324220D2-AA15-4D6E-9DF9-FB1FB0820DF4} O43 - CFD: 05/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{3250D1B9-426C-47A8-A389-69C4A172A7A6} O43 - CFD: 20/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{328C7DF4-4AD2-41F1-976E-C3AB9B9E235B} O43 - CFD: 05/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{329E94FA-91CC-4DB3-BC88-12228970206E} O43 - CFD: 12/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{32BF4711-B0EF-4584-A654-AADCC108E0BD} O43 - CFD: 26/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{336C0B5C-1869-4534-8AFE-3B2C3728D9F2} O43 - CFD: 26/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{34316A21-93EF-440A-ADAD-0A16B1CBEB21} O43 - CFD: 11/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{3448C082-8972-4663-8B94-7BB6CE3CC62E} O43 - CFD: 30/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{349634DC-4C1A-42E4-8C21-602A88772888} O43 - CFD: 18/04/2016 - [] D -- C:\Users\peve\AppData\Local\{34C7029B-106F-6E23-7DF7-4BCB599FB753} O43 - CFD: 06/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{35001181-49C5-4871-B9D8-8B6EDC8A284D} O43 - CFD: 09/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{3565B794-A266-47E9-B5D3-F1B578DDB306} O43 - CFD: 29/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{358C86F9-EECF-444E-AA28-F863CD5961FC} O43 - CFD: 20/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{35C07060-2618-4546-8DD7-35A459D5903F} O43 - CFD: 17/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{36711103-FA47-4859-B787-33CD83BE0A34} O43 - CFD: 10/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{3744446C-5830-4BC7-8568-B3C5CF4055ED} O43 - CFD: 02/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{375B2A5C-D5F4-447B-894D-80BB53C5477D} O43 - CFD: 02/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{37BE0A15-0911-4F96-8E3C-720C0ADB06CB} O43 - CFD: 30/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{37CDA74F-41AA-4333-88F9-0AD82DAFAB88} O43 - CFD: 17/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{37CFBA02-4114-4F6C-9465-1DA2583269A3} O43 - CFD: 10/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{3883A84F-2748-43D1-892F-0D53ED1E01E3} O43 - CFD: 30/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{39012100-C580-4CEC-9FB9-F6C8A1856799} O43 - CFD: 22/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{39A348C5-5880-4BF1-A49C-356F20CA99BD} O43 - CFD: 14/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{39CF3691-3AA4-4FDE-A565-D80A9AFB37B9} O43 - CFD: 08/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{39DA499D-4D33-4C63-963E-394AF2DF147A} O43 - CFD: 23/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{3B45608F-1131-4BCC-86EB-608993CE59B1} O43 - CFD: 18/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{3B609B92-315E-4DAB-AF07-E449B327F632} O43 - CFD: 11/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{3BB89971-2FA3-4210-AEA8-60AC8552F079} O43 - CFD: 25/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{3BFAEFA9-F3D2-4753-9996-FA2D580FB6FB} O43 - CFD: 30/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{3C2D7A72-73FB-4CC2-AAD4-653434EBBB4D} O43 - CFD: 24/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{3C88F28F-F8DD-4DEF-B3E7-F8C2F76C71E7} O43 - CFD: 10/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{3D558AB3-B9F0-42AB-B4DA-2D05AD0470EE} O43 - CFD: 23/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{3DBB360D-0380-4798-A7AF-FB1329E8FEE4} O43 - CFD: 26/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{3E2450E2-F3EC-49CF-AD29-22CD53A95EAA} O43 - CFD: 08/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{3F38853C-C743-4B02-9986-9C7E2BFACF3D} O43 - CFD: 11/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{3F992AC8-9364-41C2-A986-28470A4D65BC} O43 - CFD: 08/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{40D80527-2FF4-4B53-B8CA-5D1FB9545386} O43 - CFD: 17/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{40DA44D1-F2E2-4E11-B2CD-960B9C38E3C7} O43 - CFD: 18/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{40E15971-A977-42D5-865F-2961A9AA5D89} O43 - CFD: 10/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{4128CFA6-2D4E-4A95-A259-015B3594AF44} O43 - CFD: 08/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{41550EF2-90C1-4322-BCA5-5952B4D8125C} O43 - CFD: 27/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{417C95AD-8DB7-46DE-B7E7-B6A068758B75} O43 - CFD: 13/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{41EC6CD0-555F-4996-852D-A9A34475C4FB} O43 - CFD: 02/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{42096841-442E-42B0-9F26-933A97019496} O43 - CFD: 17/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{423C9D1C-6167-40EC-AFDB-022DDDF94EA8} O43 - CFD: 23/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{42642E23-5C47-44BF-B164-579AE0CAA0F4} O43 - CFD: 27/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{430CF829-AA0E-4D75-853A-1226DF8B6F05} O43 - CFD: 09/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{430DA2CC-7449-4307-A3DE-2C64B6FDB167} O43 - CFD: 30/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{442DF513-A561-4574-82DA-47394C869921} O43 - CFD: 27/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{44C3CC43-DEF0-4108-86D9-6249B6C0A9C1} O43 - CFD: 10/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{44CE3BDF-E660-48E8-9147-BF5E1AFE5059} O43 - CFD: 25/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{44EFE9CC-3F36-40D5-A1C7-BA8123C5D9E1} O43 - CFD: 22/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{45B2580D-C14F-46AB-BFA9-01DD43EA27C0} O43 - CFD: 30/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{4642C441-D3E4-41E6-A354-02740226A60C} O43 - CFD: 27/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{46B2B7EA-52E1-414E-AE98-C59637D6FF2C} O43 - CFD: 24/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{47771CCC-0543-4FC7-9BBD-E7528C19B5DC} O43 - CFD: 02/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{479C55BF-473A-4D41-8E5A-26C6485D25D5} O43 - CFD: 05/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{47A568CC-C6FA-4978-8A21-84FCC6B038D8} O43 - CFD: 01/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{48396448-6933-40F1-9E1B-8F8B9F8DDA79} O43 - CFD: 24/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{48960ABA-5EBC-4AD5-814A-2751422D68E7} O43 - CFD: 15/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{48D6220F-657A-4493-91E1-30763993B49E} O43 - CFD: 03/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{48DA94E1-FC67-4F9E-8D3C-288A43B0FEB4} O43 - CFD: 25/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{491C7A22-8A2A-4C5B-8139-5ED647C20E91} O43 - CFD: 12/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{495F785E-D4C6-4A5F-B0FD-9B621A940881} O43 - CFD: 08/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{49657462-79C9-41B4-8797-87B4F4C1AAC4} O43 - CFD: 29/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{498F9492-8810-446C-86BA-2400682A7B6C} O43 - CFD: 05/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{4A55CCF0-3851-4E44-968E-EA26C63EFC69} O43 - CFD: 01/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{4B2A8CA4-E907-4B48-9BE9-C54A1AF4CD47} O43 - CFD: 29/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{4B9E779C-8EC6-4895-8FB3-6FB0B2FA7D03} O43 - CFD: 06/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{4C2EA008-76B9-42D4-85C4-A7D12F3CF23B} O43 - CFD: 05/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{4C3105EC-CBB0-47BD-9448-8F00C0242A84} O43 - CFD: 14/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{4C73618E-9650-4B04-8DF0-B5FC726F779E} O43 - CFD: 29/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{4D072FC8-FDF2-40BA-8B9F-D633D2C91234} O43 - CFD: 03/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{4EA76A9E-578A-433A-8A51-1965DAFA3D5B} O43 - CFD: 03/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{4F1399D1-7AD2-4383-8128-7E627FB2F049} O43 - CFD: 13/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{4FC03D9F-7F12-4C89-8B19-C75885E3E28A} O43 - CFD: 16/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{4FD26E88-DF6B-43A6-ACE8-D79778EA6627} O43 - CFD: 23/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{4FE310C3-581B-4A68-AF43-CDA6CAA32DBF} O43 - CFD: 22/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{502A7D66-49A3-42CC-941B-35A60367404E} O43 - CFD: 10/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{50A30F8D-71BE-487C-BF98-FC2B6488E736} O43 - CFD: 09/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{50BB2C78-D321-426E-BF51-4FC5377E6642} O43 - CFD: 25/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{5104C176-CE5B-4DC2-9BE3-17D36C18B738} O43 - CFD: 28/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{51734701-9EF7-4825-955F-A0299EAE1021} O43 - CFD: 09/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{51769EC6-3531-428B-9FF6-BBB56EEC5E02} O43 - CFD: 19/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{5183511D-9C52-43CE-B4CF-82B48B3B8A87} O43 - CFD: 14/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{51B1B113-0517-4E8E-AD57-CFAE0836CFD0} O43 - CFD: 13/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{51C574E0-7410-4D01-AA84-DD876A08B187} O43 - CFD: 13/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{52ABB445-384C-4452-934B-121E7C544C7C} O43 - CFD: 15/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{52E4BF69-538F-411D-A49A-4D1C4D1ECABC} O43 - CFD: 11/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{531DE0C8-335D-4D18-B0BF-1145E8D59F03} O43 - CFD: 09/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{53CF6A5B-3685-4A8A-B4B1-F86A16D0B3B2} O43 - CFD: 05/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{542244D8-CE38-4141-8404-7D6CC42CA9B6} O43 - CFD: 07/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{5442759E-FC5F-40C1-8EF1-DFB24A488834} O43 - CFD: 11/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{545FD0EC-3D41-4B94-951C-0BE24CFB055C} O43 - CFD: 28/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{548FF2A2-65D9-4952-860B-363B3ACFFC94} O43 - CFD: 04/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{54BB7F2B-0BE2-4CCD-9264-D11424EDB04B} O43 - CFD: 14/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{54F64E63-C160-451B-A921-73ECBB9C4D8F} O43 - CFD: 01/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{5525B83B-EBBA-4490-B3DC-4A28CD24A058} O43 - CFD: 19/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{563B0EE3-C2B8-4F55-8768-6E92381F470F} O43 - CFD: 04/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{57169ED0-7DB5-4532-9BBB-E791D8F1DC8C} O43 - CFD: 30/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{57A882E8-07F8-4D3D-A69D-F548EF7A608A} O43 - CFD: 04/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{588895DE-27A7-4DC6-8514-0A3D0C797899} O43 - CFD: 20/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{58D58AD5-03EC-4044-B5F9-03FAA6D64B19} O43 - CFD: 25/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{59DC5AA6-6601-4F69-81E7-A4671FCADEE8} O43 - CFD: 16/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{5A3F120C-9900-4CBC-B8C6-482ED9C8F677} O43 - CFD: 26/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{5A4B56ED-3E55-48BE-B9DD-20F144D77003} O43 - CFD: 23/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{5A549BDF-5638-4CA0-B118-80F862B0D4FE} O43 - CFD: 06/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{5A67C3D0-FAF1-44F2-AAD5-495E4B21CB33} O43 - CFD: 05/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{5ADEA89D-1B0B-4B17-8212-78BDF2E20697} O43 - CFD: 10/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{5C0DBCF2-284C-4055-AFDF-4EF52220938E} O43 - CFD: 24/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{5C0F8B56-A4F8-43C8-A081-90D73D6CD89B} O43 - CFD: 22/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{5C153ECE-71EE-42CD-BA8C-9B352F0B9089} O43 - CFD: 01/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{5C45963E-4DEB-475F-8CEB-C6D01807615F} O43 - CFD: 03/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{5C67C8D6-7228-494D-A714-21E4AF8C2666} O43 - CFD: 25/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{5D1F77F9-16AE-4B0A-84D5-DBCB7B78D2FC} O43 - CFD: 20/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{5DBC32D0-F441-4733-8B2F-832E59C1A64C} O43 - CFD: 05/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{5DE2110D-40A5-45D9-8D37-112428035150} O43 - CFD: 06/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{5DE3E913-EA7F-42C7-B3C2-0CA828DDC202} O43 - CFD: 30/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{5DFB34EE-1243-4905-88C8-1CCEB493E874} O43 - CFD: 25/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{5E105905-4451-4A59-8B0A-DD1E476A888D} O43 - CFD: 30/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{5E626A47-BA8D-4928-9A88-EC2E283FD7A7} O43 - CFD: 26/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{5E8E088C-FAD2-47E4-B006-220E93F0881E} O43 - CFD: 30/07/2015 - [0] D -- C:\Users\peve\AppData\Local\{5EB6C222-8CB7-40E4-8DF9-C9B4DDB18C6F} O43 - CFD: 18/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{5EE7FA5D-A387-4EB2-BAD3-86183C15BEFD} O43 - CFD: 18/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{5F0DC929-6797-4D54-A089-E78FC8F35FF0} O43 - CFD: 13/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{5F3F3F4C-1CDC-4B63-B161-4A3673C664B7} O43 - CFD: 11/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{5F83C9C4-F769-40EB-B8F5-5FD1FA65E17A} O43 - CFD: 21/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{60960A91-4858-461E-82B6-179CD00D7D5F} O43 - CFD: 21/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{60DB8457-78F8-4F03-8AC7-26C7A5AD1D87} O43 - CFD: 12/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{61809DB8-7227-4CD4-942F-DDD7C6AB5BC6} O43 - CFD: 15/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{622303BA-494B-444C-854E-0A4D35A9758D} O43 - CFD: 07/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{62E4D6BD-E9C9-4F09-A47C-BFC27507C3B2} O43 - CFD: 02/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{6374EF6E-E50D-42B2-B225-8341A40E977D} O43 - CFD: 24/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{64A77D1E-779E-414C-9C9D-00E82A3F0EC0} O43 - CFD: 25/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{64DAF42C-E8B5-46EF-BF94-ADB7BC1E14F6} O43 - CFD: 26/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{65833FBC-E23B-4511-A17A-209C43489D7D} O43 - CFD: 22/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{66D439E1-BAC6-48F4-93F4-D64462F24148} O43 - CFD: 29/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{66F75761-3672-4170-8451-4870C1FF8D85} O43 - CFD: 30/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{6707DA03-E8F0-4A5F-B4F4-6376AAB8FAF3} O43 - CFD: 04/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{6735EE57-6489-4F8D-BD62-9D80CC467540} O43 - CFD: 12/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{67960C14-7897-4506-AF66-FF87FABE8E87} O43 - CFD: 02/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{67C5ABB0-F1BC-4061-9240-E1012912A7E3} O43 - CFD: 25/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{67F5F4BB-D16F-4EE0-863A-295916463CEB} O43 - CFD: 22/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{6889349F-CFD5-4665-B3DD-98D8E0A9E734} O43 - CFD: 24/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{692ECEE8-2FFA-4711-9675-B786D22A5CCB} O43 - CFD: 28/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{6936D345-5DE7-4080-B210-1D961448202D} O43 - CFD: 18/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{69F7ABE4-E1A7-4EA1-8DEB-357DBAC818C6} O43 - CFD: 18/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{6A5B1225-8B09-4130-8798-BD131B2757B2} O43 - CFD: 27/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{6A61B074-3DEA-4B95-A196-D1730CD00C62} O43 - CFD: 12/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{6AA8E318-DCC8-48C0-B34E-9E4183DEB0A3} O43 - CFD: 28/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{6BA35D3B-9B97-455F-840C-7DD66C9AB2BA} O43 - CFD: 27/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{6BCAE2E1-6765-4AE6-AECB-2E74A3E390BA} O43 - CFD: 20/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{6BF2D7AE-8B1D-4A58-B984-A3AFA2DEDC02} O43 - CFD: 26/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{6C1C12D3-C92F-4779-973C-4DCF523DDF68} O43 - CFD: 08/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{6C5051BD-A381-473E-844C-410D94D22D69} O43 - CFD: 01/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{6C5BC0EC-8453-42D7-BCF3-4179F5FE5952} O43 - CFD: 24/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{6D500B8E-D699-4FAD-8924-096FAF83674E} O43 - CFD: 24/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{6D71E555-8928-4829-BC4E-C903BAD411D9} O43 - CFD: 26/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{6E08B476-576E-4438-87E4-530A4FBA38EF} O43 - CFD: 02/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{6E3910A4-86B2-46BD-ABBF-D8042B4BB400} O43 - CFD: 14/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{6E51E782-13C9-4A7C-93E0-95EA9C2A25FA} O43 - CFD: 02/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{6FBD2D19-56DB-4C48-8A1A-C42D545BE094} O43 - CFD: 13/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{6FC951E2-D7B9-4C4D-88A7-3BC6C5B0F2CF} O43 - CFD: 03/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{703661FC-D197-4F8F-9800-36F54E00D4D1} O43 - CFD: 24/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{70833286-01E7-42A5-8F25-FB20E9C34F07} O43 - CFD: 21/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{70B3991E-4638-4BFF-BF00-40983E28623C} O43 - CFD: 08/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{70D53A21-FC40-4618-8454-1A9DBF1E1FCA} O43 - CFD: 03/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{70D6575A-CED1-4A1E-92E5-E0022016EFAF} O43 - CFD: 02/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{71FE9F6C-9EA4-45F4-8B66-DB4582056392} O43 - CFD: 11/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{72622E63-AB64-4E07-BA58-8B0C2CA1C438} O43 - CFD: 19/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{726580EF-5160-4E90-BAC8-A51E6B9F1BCB} O43 - CFD: 07/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{7267269F-0914-48E8-8AF8-6839DDD5FF93} O43 - CFD: 19/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{7295894B-7537-4BC5-B95D-AE1CDF72E786} O43 - CFD: 25/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{732F02E6-A7A2-4D9A-A758-825B6B297B0F} O43 - CFD: 28/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{733C5E57-C2B8-48D8-83BC-49645AB45313} O43 - CFD: 23/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{74D39BFD-4290-484C-AE4B-D0DCB7CAFEDA} O43 - CFD: 17/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{75B4E02B-8B84-4CB9-B24F-684339DFB1D5} O43 - CFD: 23/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{75E7059D-7CA0-4CBF-A1C1-A1464508B634} O43 - CFD: 29/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{7660BC2A-BCB4-4B37-85DB-EDC8FCB27651} O43 - CFD: 02/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{78FAAA2D-FF76-4394-86DE-FECA18AE4970} O43 - CFD: 25/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{7933FD32-43FA-4E14-9B63-16FB4F4E3ACB} O43 - CFD: 08/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{794FFFAD-A9C0-484D-9AB7-EBEB4B1C396B} O43 - CFD: 06/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{7979E35A-EF11-46C0-940F-BE19E0328B35} O43 - CFD: 16/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{79C7DD61-996D-42E0-A2A5-A4E83E84B3D6} O43 - CFD: 14/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{7AA7C902-2A5E-4479-AD9B-758B166101F2} O43 - CFD: 12/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{7AAF59FC-0A1B-4922-9787-9C2D77066065} O43 - CFD: 20/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{7AB73613-9EFC-4581-B8D3-1CC13D56515F} O43 - CFD: 31/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{7B831FA7-0DBD-4A01-985E-06977A9CFE40} O43 - CFD: 31/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{7BD38572-658D-405C-B514-47ED3A62FFED} O43 - CFD: 19/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{7BEF3D5D-FABB-47F7-BAB3-C1AEA14BE634} O43 - CFD: 07/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{7C07A346-89F0-4E75-BE1F-29DF2098D3E5} O43 - CFD: 08/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{7CB3C6FC-D60C-4A4A-9A32-153BBA43D27D} O43 - CFD: 13/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{7CCA024B-FAE1-4D0E-A76F-8719831109D1} O43 - CFD: 03/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{7D060539-4788-40CB-B808-17D5C8162C08} O43 - CFD: 30/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{7D1DF7C9-99E1-4FE5-A418-F40FAB45CB07} O43 - CFD: 17/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{7D269E55-4834-4FEB-A4D8-140441BB1CDB} O43 - CFD: 23/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{7D57D7AE-E8BF-450B-A45F-A417B1B7C21A} O43 - CFD: 24/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{7D8DAD9C-B20F-44E3-ABA7-96C2FE161F4E} O43 - CFD: 10/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{7D90F656-496F-48AF-878B-C6882EF2121D} O43 - CFD: 07/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{7DB99BAC-8143-458E-A4B6-39D70FDD93EF} O43 - CFD: 08/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{7DC08955-63F1-4B7C-BACB-A008E714646A} O43 - CFD: 11/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{7E2003E4-A7EB-4123-AA5D-B8D78D2FDB1F} O43 - CFD: 21/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{7E28C894-F29C-4FC7-95E7-04F0441312E7} O43 - CFD: 02/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{7E2C62DA-92DE-47F1-AA64-03D95A97EFF8} O43 - CFD: 27/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{7E2F593B-2C4F-4EBC-A287-C17C605A3DDE} O43 - CFD: 06/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{7E7813D1-0392-4E9D-9CE7-0D4F45A1F7CB} O43 - CFD: 21/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{7E85477F-2BB3-4211-B241-90539CF2FE39} O43 - CFD: 21/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{7E8EE7C8-5CE8-4603-8060-18AD41ED0636} O43 - CFD: 13/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{7EB05AFA-B832-4113-AD3E-3A86C5938EE4} O43 - CFD: 07/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{7F2E0C43-3DD5-4FD7-887D-19B8114390DD} O43 - CFD: 06/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{7FDBAAC0-64A3-40EF-9D57-D91799A6FC36} O43 - CFD: 08/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{7FEE2552-EDAB-436C-B56F-BA3A94BAA789} O43 - CFD: 08/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{801F2EBD-E035-4FA2-80A7-841B926C7676} O43 - CFD: 02/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{803D39F6-E260-4FF1-B041-687C4CF6D9A2} O43 - CFD: 27/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{804CE26F-DB90-4CC2-A2D1-A8EC5E8DF443} O43 - CFD: 17/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{8086999A-688A-4840-8217-265A6D9A4AFD} O43 - CFD: 22/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{8124CA56-6679-461C-ADDF-F4E82C6588E4} O43 - CFD: 05/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{814224FE-7C71-4AE7-B6BB-E69D324AC80D} O43 - CFD: 15/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{81CFA087-2D11-4C25-B860-1C48DD22B545} O43 - CFD: 23/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{822A4524-2B45-462D-B7F2-5DD7CF042F34} O43 - CFD: 02/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{82794B88-618B-43A2-9FF8-9DCFEB1175AA} O43 - CFD: 28/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{829C57FB-83D8-4C9F-B4D5-6734412E1DC5} O43 - CFD: 29/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{82CC01FA-0519-4DAD-8701-E83A9F58FDEB} O43 - CFD: 09/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{82CCE3A0-131D-4E6A-88AC-B3D458DCD4BA} O43 - CFD: 12/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{830FF0FB-CF45-4AF0-9A53-27C052D7E19E} O43 - CFD: 12/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{832EE503-A74A-419F-A74D-15C159A28731} O43 - CFD: 11/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{8337FDB6-17C6-4923-92EB-6329844AB3DB} O43 - CFD: 20/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{843C6643-A722-4198-9197-8A411B7C109E} O43 - CFD: 03/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{84422732-A80A-4F88-A76D-488C0DC02884} O43 - CFD: 09/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{8465308B-2B25-4860-B9FA-8AB3FF2C56CC} O43 - CFD: 14/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{84653E24-C9DF-4972-B54A-1FD64A27B8C0} O43 - CFD: 14/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{848E59DC-832F-404A-B891-BE6A51CA6770} O43 - CFD: 10/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{8495AB78-CC5E-4DF8-B793-D9AB564F8243} O43 - CFD: 13/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{84C25E06-2A74-4584-9DC7-6A49C53A324D} O43 - CFD: 04/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{84D6C3B1-DD13-4FFF-AC9B-9C999F6A9FBF} O43 - CFD: 29/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{84DB4981-2AC2-4072-9FF8-78169C4996D2} O43 - CFD: 21/07/2015 - [0] D -- C:\Users\peve\AppData\Local\{855C8834-A832-40F9-B0D9-603789669DAE} O43 - CFD: 26/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{858F4776-3097-480F-A0C3-837FF4823038} O43 - CFD: 07/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{859149F1-AB08-4164-8181-2FE03D15EF49} O43 - CFD: 03/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{85E372BA-D455-45FA-852F-752BC7D7016B} O43 - CFD: 05/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{867FD424-9451-4E42-A84B-3B45FAE6527E} O43 - CFD: 01/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{86AF0A60-063A-40D7-9AE1-CBB0ED2918A3} O43 - CFD: 01/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{86CD5BB7-84E9-42E2-AD0C-DB647D5DCFA4} O43 - CFD: 29/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{86F13F1C-D0E7-4331-A215-EB203DEC3F93} O43 - CFD: 28/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{86F57738-08DE-4F79-8BF0-1FC30B30CAED} O43 - CFD: 26/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{876409B0-EDEE-458D-A9D9-556F6DB2D846} O43 - CFD: 29/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{87FE1537-B056-4EFC-BE27-A4C53771B152} O43 - CFD: 17/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{88320EF3-FB14-4EBD-9922-546CA7C9E52D} O43 - CFD: 30/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{883AFE35-327B-4B88-A6DE-F37F2A133636} O43 - CFD: 13/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{88511FE0-F975-446A-9FF5-BEAB237E68A5} O43 - CFD: 01/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{89319F57-3192-4D5B-B090-53FFFB544A76} O43 - CFD: 29/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{8A0B6E88-823C-4225-BF6E-20CC32034543} O43 - CFD: 24/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{8A1F64F4-251D-4108-83D7-1B69E4E40562} O43 - CFD: 20/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{8A32266B-815F-4D57-8F1F-D2BB020E876C} O43 - CFD: 14/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{8AB4DE5C-9BF6-47DA-A37C-B2BB56FAE7F3} O43 - CFD: 15/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{8B16E5AF-2B65-4241-AF52-739F008278BA} O43 - CFD: 31/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{8B982BA1-FC79-44F4-B48E-EFC1AB39B57B} O43 - CFD: 18/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{8BAFDE65-BF4C-4623-9ADE-C2732C14438B} O43 - CFD: 15/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{8BFE42CB-3110-4EAE-87D9-99D70BF7B1FD} O43 - CFD: 23/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{8CDC5C1E-6F40-4043-B897-A8F85835E9A5} O43 - CFD: 16/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{8D759DAA-B6F2-4C35-93CC-E78CFAE72BD1} O43 - CFD: 27/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{8DAB6222-0A1A-4BEF-B839-4486CF4C1FEB} O43 - CFD: 30/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{8DB380EA-FB05-4C22-99D7-D38D307AC508} O43 - CFD: 11/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{8DF9B271-AD10-4F7A-89E1-EA36E05D82BB} O43 - CFD: 15/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{8E0831E9-FD28-4896-9B67-18711F13DE4C} O43 - CFD: 25/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{8EA448D7-65D6-454D-9D72-9D31FD4D2815} O43 - CFD: 14/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{8ED60205-C645-4C3A-8FFB-823AE0E69B6F} O43 - CFD: 13/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{8F5A76A3-F059-4CED-9771-315E17F1E43F} O43 - CFD: 19/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{900A9106-4BFD-49A9-A521-56F36FD1B155} O43 - CFD: 01/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{90B9BDDF-585E-4610-9C04-BC89609E5E88} O43 - CFD: 24/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{90E070DA-9ED6-42BB-A0F3-4C3C08D825FC} O43 - CFD: 28/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{90F83479-2EF0-42AD-8666-21FD73675CB3} O43 - CFD: 03/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{9109D222-B6E0-44AB-A178-AB1E4338E05A} O43 - CFD: 03/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{91C2E2F7-B46F-47A7-9DEC-183188BA30CB} O43 - CFD: 22/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{91EFAD7B-E47A-44C7-BF29-808F3D0D52E9} O43 - CFD: 07/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{91F0A1BC-E475-4C20-B1D7-8C91B36B6C06} O43 - CFD: 19/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{92B84822-D137-42F7-A48F-91CB2ACC7849} O43 - CFD: 16/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{92C3A427-793F-4770-8476-63F1D3498BA8} O43 - CFD: 06/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{933CFD5F-465C-4A4C-9C36-D414791E7ED2} O43 - CFD: 03/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{93DFA8E0-C4A5-41A5-A4CB-51472ECC062A} O43 - CFD: 28/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{941B1DA1-EC15-495E-BD94-305DC954E479} O43 - CFD: 13/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{957426DF-3482-41B9-897B-AEA6FB21E296} O43 - CFD: 31/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{95CCC852-C1CD-463D-9187-04995A22A050} O43 - CFD: 26/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{96C85691-7EFF-4DB2-85CC-277503B6159D} O43 - CFD: 27/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{97292651-9DD9-4144-9381-BDFD1D0C414D} O43 - CFD: 23/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{974ED54C-7149-4EFB-8463-5F8625857DE4} O43 - CFD: 19/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{97A40608-46EF-4F69-9F21-8652CBBC4EB4} O43 - CFD: 13/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{97E44D0F-7423-457D-B62C-ADE19405525F} O43 - CFD: 23/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{981613DE-E881-4BC7-B950-55BBC2044729} O43 - CFD: 09/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{98957B50-4EFF-4930-9855-DE36FF8AAA69} O43 - CFD: 04/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{99BBF51D-81A4-4CD1-862F-6C3F4CF855B7} O43 - CFD: 14/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{99CD7F04-87E9-4760-90D6-73890B23DC99} O43 - CFD: 08/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{99ECD152-CF85-4E34-9143-F43A0554D40F} O43 - CFD: 01/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{9A78D737-5BD3-4169-BE47-B6DAB9640766} O43 - CFD: 24/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{9AACD926-81C8-4524-A512-2CB39B04CF81} O43 - CFD: 26/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{9AAE1732-9B88-4503-98D2-CD585384937A} O43 - CFD: 05/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{9B4E4262-0916-42D6-844A-FB2116C63183} O43 - CFD: 22/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{9B54C2CF-0D41-487C-96D3-F2564747400C} O43 - CFD: 19/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{9C241F2C-6569-4092-9746-FD6826F2E8BA} O43 - CFD: 23/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{9C4861EB-1751-44BD-BBC0-983CE777ADDC} O43 - CFD: 25/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{9C700D71-A902-443D-BE26-9DB40B98BB68} O43 - CFD: 03/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{9E291076-2327-4F4C-822E-009547E98711} O43 - CFD: 06/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{9E55175B-DEE8-4975-AAEF-B92BBD08BBDD} O43 - CFD: 11/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{9E742FF0-112A-4F10-87A6-86E2714B1E8F} O43 - CFD: 31/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{9E8F8652-E9AB-4077-8855-46CB244CED69} O43 - CFD: 02/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{9F2235C9-3504-4D6C-ACEA-6B45D2ABB703} O43 - CFD: 11/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{9F4DAB52-C683-47E2-9E2C-1162C3CD6F6F} O43 - CFD: 08/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{9F8A1658-ACB7-4B69-86C0-84B0D650F278} O43 - CFD: 30/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{9FDF9D5C-8471-41CD-A180-5A918212E4EF} O43 - CFD: 05/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{A097E3BA-EE45-40BE-8E0F-A97DBFE004B0} O43 - CFD: 01/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{A0DD7416-4CBE-4FCE-B4C9-CE975F99E0BB} O43 - CFD: 16/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{A1246410-4CB0-4243-8399-D1487080EB4C} O43 - CFD: 27/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{A26EAA46-250A-4B88-A901-5D62AE228FFB} O43 - CFD: 20/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{A30699DA-443D-4EB6-8C64-58B4DF3CEDAB} O43 - CFD: 17/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{A43FB148-8722-4E7D-913D-6022A76BD7C5} O43 - CFD: 16/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{A543B518-EBDF-42C0-8FCD-36BD63EEFE45} O43 - CFD: 18/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{A5F3D701-8A33-4C34-9D34-3A2693820CEA} O43 - CFD: 20/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{A6651D7F-1148-4053-B076-B0C1F5A34A9B} O43 - CFD: 16/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{A699966F-0E30-4FC3-BE0B-CCC89CD90075} O43 - CFD: 26/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{A7508F6F-8C66-4FC7-B084-403BB2577F45} O43 - CFD: 01/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{A7D01D87-7C72-4C9D-AF0A-B6644A573E17} O43 - CFD: 07/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{A7D64BE6-C558-41A6-ACF3-234BDC672A02} O43 - CFD: 17/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{A7EBD6CB-1297-47FA-A559-3088B0542A36} O43 - CFD: 27/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{A840793E-DD28-4FDE-87B3-95DF3072C9DC} O43 - CFD: 25/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{A8C33DBA-BCBF-4C43-BAA5-3362E97C5A28} O43 - CFD: 18/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{A925D19A-98F0-45CF-9F05-0DE90DD6978F} O43 - CFD: 29/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{A9BF1207-98AD-477E-A8F2-2F7DB40F67B9} O43 - CFD: 08/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{AA3C3CC5-78FD-4F11-9CC9-5857036F1707} O43 - CFD: 15/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{AA79D7DA-19CF-4F77-A17E-4EE96437DDA6} O43 - CFD: 04/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{AADEF156-8C14-40BD-8B4F-30DFAAA6861B} O43 - CFD: 27/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{ABBF94F8-4AF1-40D1-9365-9C84013B605B} O43 - CFD: 17/06/2011 - [0] D -- C:\Users\peve\AppData\Local\{AC0468E6-E918-46A3-9332-A79C37636252} O43 - CFD: 06/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{AD4E9419-4B8C-4294-BCFC-89A3E63682AC} O43 - CFD: 06/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{AD601C73-CA62-4C2E-B915-B664F5A1CB9F} O43 - CFD: 05/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{AD6720F4-DA20-4016-869B-64D5ADAC3C31} O43 - CFD: 01/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{AD9CDF11-F111-4604-A1B9-5AEC65210715} O43 - CFD: 10/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{AE3B7267-D3D4-41C1-B25B-E19B5D630186} O43 - CFD: 23/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{AEC0816F-DDD5-4E6F-8BF8-9CE596EEF3BB} O43 - CFD: 03/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{AEC87044-11F7-478A-A9A2-5B8F3A712680} O43 - CFD: 03/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{AF6DF57F-FB11-4174-9E5C-4628B8410CEB} O43 - CFD: 20/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{AF8164FC-95E2-4C3F-8307-AE66B369FB10} O43 - CFD: 16/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{AFA0B8B5-F549-4E93-B6CB-5A609FF8A761} O43 - CFD: 16/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{AFFB4582-072D-4B5A-9209-479BFA40089E} O43 - CFD: 01/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{B07E1E91-96E7-4457-B097-BE869D160635} O43 - CFD: 03/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{B1188F23-C7A4-4ACF-9334-3DEC6F1BC7E7} O43 - CFD: 24/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{B145441F-3412-48A9-B7BB-778158E507EE} O43 - CFD: 24/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{B1526228-D35E-47A2-BD40-E119EC97FBB5} O43 - CFD: 19/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{B1F715F9-5577-48D8-95A3-5D4FEDAAEAC6} O43 - CFD: 31/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{B28FD52A-7CB9-4501-8215-F0D603E99180} O43 - CFD: 21/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{B4060072-8F00-40EC-BE76-D54F850C2F53} O43 - CFD: 22/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{B4352375-3FFE-44C2-9B6B-A1BB0252C801} O43 - CFD: 05/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{B50287AE-1916-43FE-99DC-D5652E8C5CCD} O43 - CFD: 01/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{B518E0BC-D4EC-4010-B275-07EA87D09B8E} O43 - CFD: 30/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{B5209DCD-498E-4609-880E-F53DB50825CB} O43 - CFD: 20/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{B537DE57-5CB1-448D-8108-658C475EAF3F} O43 - CFD: 18/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{B53DA00D-D8AF-4786-8DA1-7AC2C5F57C6B} O43 - CFD: 01/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{B6C1325C-40CE-44AF-9D25-520950099641} O43 - CFD: 24/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{B72FE617-20CA-4BE1-865A-66CF10EA81E2} O43 - CFD: 11/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{B79448A0-57C8-4DBB-9B10-686910B7402D} O43 - CFD: 01/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{B81D3395-1E13-49B4-90CC-09A33E8D7739} O43 - CFD: 02/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{B83F4F61-98C5-47E6-8809-CC8435197197} O43 - CFD: 05/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{B894A124-57C7-4B84-ACA0-D8EC8CBF892B} O43 - CFD: 15/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{B89761BB-48E2-4D6A-8DE3-E30F73270708} O43 - CFD: 07/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{B8E35461-99E9-4EE2-B553-4E0D93014651} O43 - CFD: 01/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{B8E60892-EB93-4FE9-BBC3-084AFB7B0369} O43 - CFD: 01/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{B9E7008F-0703-49CA-B803-8C666718282E} O43 - CFD: 11/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{BA9EDDFF-531F-4069-AC13-0D8890B4B087} O43 - CFD: 19/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{BAABA9B6-F4D7-4DFC-BF65-A77DDB05BD2E} O43 - CFD: 10/06/2010 - [] D -- C:\Users\peve\AppData\Local\{BAD7C248-517D-4CE1-B65A-829C01BEFDB1} O43 - CFD: 25/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{BC24AD14-A334-4007-A66B-460FB7CA4CBE} O43 - CFD: 28/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{BC4B64C4-8A97-49F2-A9A3-142AFBDF2414} O43 - CFD: 04/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{BC64CF14-E015-45AE-A8EB-0935B0526BB0} O43 - CFD: 13/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{BC69308F-CCF5-4442-BB18-689D6156637E} O43 - CFD: 17/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{BC8E6FA3-233A-4CE5-B4F6-F9A88A703775} O43 - CFD: 29/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{BDB82E59-0B62-41F7-B2C6-9E720709E030} O43 - CFD: 28/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{BE824DD9-1B5B-46E4-B520-E3F8E6B676B2} O43 - CFD: 30/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{BF7564C6-78F2-46E2-A7D0-5189E2C7AB84} O43 - CFD: 20/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{BFB0A8B1-241A-443D-AAB7-60E3F0B22B68} O43 - CFD: 05/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{BFB74757-5266-4615-8F04-B70C15CD57CF} O43 - CFD: 09/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{C093693C-A332-4EEF-9034-EE07B084A5C6} O43 - CFD: 12/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{C0F4AF88-9491-44C1-88D1-EB5D03BC073C} O43 - CFD: 14/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{C19AC017-FC95-43A4-97CA-219F64AC0DA3} O43 - CFD: 25/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{C1BAD960-CC79-4AF8-AA0A-B2F89F4D2EA7} O43 - CFD: 26/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{C2193AB4-A02E-4CFB-8AC1-1CB931D76625} O43 - CFD: 08/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{C247BA22-5F1F-4C0B-A723-265639C65E34} O43 - CFD: 12/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{C2BDA863-A2A7-4047-8F11-809F0D3F2590} O43 - CFD: 02/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{C3314D24-BAE9-471B-BC02-B42E8C5E4087} O43 - CFD: 03/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{C39CBA0F-712C-42C1-B09B-7D1160D969B2} O43 - CFD: 22/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{C3C94DE1-8823-4814-A57E-381A10783E6C} O43 - CFD: 03/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{C435EC4B-3FC0-45FC-BEA5-B0F08FEE19E9} O43 - CFD: 03/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{C4D8BA5A-4DE3-4760-8249-D7A7721B1606} O43 - CFD: 05/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{C555994D-04B0-4A40-9758-E7F69D83A4C8} O43 - CFD: 28/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{C5DD1C72-1BEF-4F2C-AEF6-4CC27B9859D8} O43 - CFD: 26/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{C670576F-06BE-46D0-9B0C-760900F0A76B} O43 - CFD: 27/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{C69F38C1-A7C0-4C1D-B524-A89B3D044C1D} O43 - CFD: 07/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{C70EC1D9-F7B0-4F4C-A56A-2E7238DE2173} O43 - CFD: 13/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{C71C0345-E6EE-4A24-BB56-800BA0C912CF} O43 - CFD: 09/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{C75B6D6B-839D-4F4F-8C33-8854E3DAB052} O43 - CFD: 08/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{C78BF399-D363-4336-9DAB-661D2F6976F7} O43 - CFD: 11/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{C7E47C9C-EACA-4F6F-AEC1-23BC4BE43FC3} O43 - CFD: 12/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{C838301C-C76C-4F05-ACA5-E5EF25F625A2} O43 - CFD: 10/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{C85768B1-AACF-4C3D-A9A1-0E581DBE6C5B} O43 - CFD: 27/04/2011 - [0] D -- C:\Users\peve\AppData\Local\{C857BC62-2799-496A-8031-4966CEA69F15} O43 - CFD: 08/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{C8C3C18E-0183-415E-914E-D862E345AAE0} O43 - CFD: 10/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{C97AC091-C3AF-4C3F-8B17-1586F68B7641} O43 - CFD: 04/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{C987D3A7-79D3-43A7-B165-D7BAEDC3A073} O43 - CFD: 22/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{C99ED261-7981-4FEE-B5E5-E8324CF10B8E} O43 - CFD: 15/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{C9F3019F-EF49-4642-86A6-B72E99ED7A2D} O43 - CFD: 07/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{CA156F87-ECC7-4FFB-81F2-87CB7B55A949} O43 - CFD: 12/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{CA23A7AA-5B3E-464A-8771-C83D46172E90} O43 - CFD: 30/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{CA8344C5-2834-4C0B-AEC1-C5DCD04CDCDD} O43 - CFD: 31/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{CABA56DD-C922-4246-A245-3E50B2382B89} O43 - CFD: 30/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{CB838B47-4ED8-44DA-8E42-A696183A8068} O43 - CFD: 12/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{CB866E79-76E3-472E-9E1A-5077738666A4} O43 - CFD: 25/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{CB8E424B-73D8-497F-A44C-4AEEE97372F1} O43 - CFD: 08/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{CB983983-E762-4B5A-840D-329489AE3FAF} O43 - CFD: 14/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{CBB23B52-6762-4FB8-A018-297E8D4A20C3} O43 - CFD: 05/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{CC0BDB62-F31A-4BE1-849D-B06D9823D7B0} O43 - CFD: 04/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{CC5A8AE2-CB96-408A-8904-EC6A1DFADAFD} O43 - CFD: 22/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{CD9FC074-F146-4D6D-B4F8-6E3765FD4A2E} O43 - CFD: 22/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{CDC4AD8F-51DB-4710-9F42-FC51FF65058B} O43 - CFD: 07/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{CF6EBD25-E03D-4704-B085-E525D57698BC} O43 - CFD: 02/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{D00AEBB6-5459-4128-83AA-8A9018761DEC} O43 - CFD: 15/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{D0BD6565-2477-4333-BD46-A918B483D99E} O43 - CFD: 07/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{D12C4331-5FA2-4FC2-A807-DFE5180A42E4} O43 - CFD: 07/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{D1375808-1C87-437C-9D93-73E5C77AC6E1} O43 - CFD: 06/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{D19E90B6-4CF4-4A98-B4E9-DFED6B1E8DE0} O43 - CFD: 02/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{D1C976E5-6ED4-4BC2-8627-03A52767CFFE} O43 - CFD: 06/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{D1D18159-04EB-425D-B035-9158454EE58F} O43 - CFD: 04/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{D29234A6-E8CB-452F-AB5E-0B9BB5D54F3C} O43 - CFD: 22/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{D3141058-253B-487D-A642-992DE75A9841} O43 - CFD: 15/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{D349D48F-55FA-4FA4-AF9A-84F38F7D0BAE} O43 - CFD: 05/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{D419DF5D-E82A-4E8D-ADE4-14F1A1F87B09} O43 - CFD: 11/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{D42490F2-4285-4A6D-979E-6CA4FE5D80FC} O43 - CFD: 12/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{D43C50EF-645B-4506-8894-FFA2A9B027CA} O43 - CFD: 18/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{D49E7282-C05F-4D3E-83BF-7BEA639AB2BC} O43 - CFD: 17/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{D51F2534-6270-412D-BC09-26FF10647BE8} O43 - CFD: 28/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{D526645F-B5F4-481E-97D5-1B2A3D48B080} O43 - CFD: 08/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{D5A5F4E3-E302-4B7A-8ADC-86BD641C8E78} O43 - CFD: 06/11/2013 - [0] D -- C:\Users\peve\AppData\Local\{D5A7A9CC-97DE-45E5-A80C-119162879519} O43 - CFD: 19/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{D644ECD4-B1C7-40BC-A0D9-6319B892D0CE} O43 - CFD: 13/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{D6A192C2-ECB6-4F0E-8A65-4588829AA171} O43 - CFD: 17/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{D6A5030D-82B1-4BAD-AA86-BBEE6224FD82} O43 - CFD: 14/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{D710DEEE-938B-4315-A713-F18A1F47D1CC} O43 - CFD: 03/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{D76C3DDC-C7E7-4ACC-BC4F-9E4AC45D7270} O43 - CFD: 20/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{D7DB096A-5D69-4ADA-ABA6-36955FCF388D} O43 - CFD: 22/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{D828A9EE-369E-4524-A1EE-ED8374F0C545} O43 - CFD: 29/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{D8303DD7-F80E-4E5E-8B21-9B74265F7A1E} O43 - CFD: 26/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{D968FDAE-2EF8-4D71-81D4-1236BA5A6CEC} O43 - CFD: 19/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{D9806DA9-59F1-458B-9B7F-DCECE6039B23} O43 - CFD: 16/05/2017 - [0] D -- C:\Users\peve\AppData\Local\{D98A53FE-B79B-4821-99E4-012DC8BB83B2} O43 - CFD: 17/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{D9D0C802-5591-42C2-95CB-0C1923032E5E} O43 - CFD: 27/05/2011 - [0] D -- C:\Users\peve\AppData\Local\{DB25C265-FB8F-46E3-AF5A-85A7184B35A2} O43 - CFD: 22/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{DC1889BD-9570-41BF-B11F-0E2AAB5FA4D9} O43 - CFD: 15/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{DD50F1D5-8CDE-47B8-BF42-9E07287D06D2} O43 - CFD: 24/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{DD97DA6E-6102-4D0F-9685-E395824758BE} O43 - CFD: 20/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{DDB96C0E-51B2-4E98-8DE3-DBFC22BEBEFC} O43 - CFD: 14/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{DE0C3989-5C5E-4912-B058-1C3B9EA4E727} O43 - CFD: 15/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{DEDC6923-52CC-47F6-B4F6-BB0464E3E353} O43 - CFD: 23/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{DF12EEBC-B73D-4AFE-9598-5F05473EB65B} O43 - CFD: 10/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{E040C20A-1D3C-4DE4-AD10-AC3C446140DD} O43 - CFD: 15/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{E0CAEAC5-90C8-4A50-858E-B60DCBC7C44C} O43 - CFD: 06/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{E155F5DC-7532-4090-9C58-CBB2A09657D8} O43 - CFD: 22/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{E1AB0365-9C42-4A21-B0B9-D9E3C91FEA1A} O43 - CFD: 17/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{E1CD23EA-F8B0-4D80-9DA0-646633506B67} O43 - CFD: 22/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{E25CC842-B0AF-4AB0-BE20-321F0D7678AA} O43 - CFD: 06/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{E2A69F49-A9AD-437B-A844-B829003B90F4} O43 - CFD: 15/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{E2F6557A-FEB0-4437-86B3-EECE3C1E686F} O43 - CFD: 06/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{E3BAF5FE-6AD5-42B9-A7BB-D822E51F8D51} O43 - CFD: 23/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{E3D8F87A-D303-4D68-AAA0-9722DB2DBD9B} O43 - CFD: 26/07/2011 - [0] D -- C:\Users\peve\AppData\Local\{E40C1C65-7203-4EB5-BD34-390B15E34C7E} O43 - CFD: 05/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{E463DAE3-EBB3-4FF8-A0FA-C1D528A2B019} O43 - CFD: 03/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{E58BCB98-3417-49EE-BB9A-1883869989C7} O43 - CFD: 19/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{E592B9E5-472C-4827-9479-09D7F0B8D161} O43 - CFD: 16/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{E5945B18-1B51-449B-B29B-2E56525EC05B} O43 - CFD: 22/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{E5FC4CE6-0179-4E2A-BC25-14928E13049A} O43 - CFD: 21/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{E60C50B6-311E-4FA6-9551-7EA839295B03} O43 - CFD: 13/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{E618533B-A657-4459-ADEA-D74630C40C94} O43 - CFD: 27/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{E65F9F5D-2E5D-405D-9D83-A8861583C871} O43 - CFD: 20/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{E69FC2F2-34EF-42DB-BC87-FE2AC6720824} O43 - CFD: 23/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{E6AF484E-D9BE-4135-9956-31A3BC16C56E} O43 - CFD: 02/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{E6AF5D4C-AFB7-4E84-8046-01A01C751232} O43 - CFD: 03/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{E8C29F42-F1F8-4238-A80B-17856EC58290} O43 - CFD: 25/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{E8EBA11F-721A-4364-AC9E-05A1431A8A53} O43 - CFD: 08/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{E9464EAB-CD63-4414-8968-B08300F09D21} O43 - CFD: 07/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{E9743CE6-7836-4BE3-8FD9-E00A5AF4D251} O43 - CFD: 09/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{EA1C984D-3968-49E9-8604-C703E41E6BCA} O43 - CFD: 26/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{EA5914B2-9E27-41CE-8EE2-DD3E6B5B42E6} O43 - CFD: 15/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{EADE5A54-F8FF-49CF-A53F-6372ABF7A011} O43 - CFD: 09/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{EB042471-61D5-42EC-9FC3-E7AA2DCD61DB} O43 - CFD: 15/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{EB1EBF47-615B-4B5D-BB7C-ABEDA2899909} O43 - CFD: 29/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{EB9F8172-3D49-44F6-BFE4-ABCA882C45E8} O43 - CFD: 07/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{EBA30DD2-52F5-4DB1-9146-CA2D104B4E58} O43 - CFD: 14/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{EBB8B51E-359C-4D25-8168-6B5567045D3E} O43 - CFD: 17/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{EBC0162B-D522-4A98-9ABA-E19B59793D19} O43 - CFD: 31/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{EBC24F3A-B5DC-4F11-A5B8-D900E280BDA6} O43 - CFD: 11/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{EBC64C02-DF73-4934-B603-59C84BAFF557} O43 - CFD: 17/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{EBFEA788-4904-409E-B105-6E4A04DD526D} O43 - CFD: 26/09/2013 - [0] D -- C:\Users\peve\AppData\Local\{EC440C86-6D52-4D50-ACFF-27FFD65D3A33} O43 - CFD: 12/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{EC9682FD-9E90-4CBF-91AE-265F9B92AAA1} O43 - CFD: 22/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{ECDFAEAD-3921-4FA2-B196-053C15BD6104} O43 - CFD: 04/10/2013 - [0] D -- C:\Users\peve\AppData\Local\{ED00EEC9-EFA9-4133-9272-F4B2B499025D} O43 - CFD: 19/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{EDE1444B-F7FC-4430-9F4C-1F54B07285B4} O43 - CFD: 15/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{EE0C1693-0E09-44E3-9CE9-B24F6E20F095} O43 - CFD: 24/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{EE341413-F96A-48F2-87B2-8AD442BF4529} O43 - CFD: 28/07/2013 - [0] D -- C:\Users\peve\AppData\Local\{EED83405-1AE3-46E6-B078-5B1FB14588D7} O43 - CFD: 27/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{EF3356BC-B5AE-42C6-8466-69BE454BB4C3} O43 - CFD: 26/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{EF8A1E09-5B02-436E-A61E-44C5C5827269} O43 - CFD: 13/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{EF94972F-CB73-4AD0-9D68-349443140D7E} O43 - CFD: 02/02/2013 - [0] D -- C:\Users\peve\AppData\Local\{F028DA81-3EC0-4996-9FC9-92FE8A55CBDA} O43 - CFD: 02/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{F03AA79B-D8FB-4293-A4A4-0AF65AEFEC6D} O43 - CFD: 13/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{F0724110-DB1C-4EA4-AC9B-7C989F8B7B62} O43 - CFD: 03/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{F086988E-9892-4662-9252-7464B29F62CD} O43 - CFD: 14/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{F1EBA01C-5A1A-48A3-B084-FDA66DFDCBC9} O43 - CFD: 25/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{F2AC7B9A-5705-4BC3-8C49-B561CC38F36D} O43 - CFD: 08/03/2012 - [0] D -- C:\Users\peve\AppData\Local\{F2DB9F3D-3015-40FB-BE26-E60D96AEC348} O43 - CFD: 06/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{F326DDEB-C535-48A3-ACD7-AC7E3B21B88F} O43 - CFD: 19/06/2013 - [0] D -- C:\Users\peve\AppData\Local\{F34C6C14-A472-4EFB-9D51-39DDFF7600F1} O43 - CFD: 23/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{F3663132-FB2B-4D56-8CB4-B1E69FE30FE7} O43 - CFD: 26/02/2012 - [0] D -- C:\Users\peve\AppData\Local\{F36E66BA-097C-4125-8AC6-ED25D7D9E38A} O43 - CFD: 21/03/2013 - [0] D -- C:\Users\peve\AppData\Local\{F40083DF-AB39-4D46-B3E9-34DF2285E21D} O43 - CFD: 20/05/2012 - [0] D -- C:\Users\peve\AppData\Local\{F435776B-6A8E-44B7-9304-48B83C42873C} O43 - CFD: 18/05/2013 - [0] D -- C:\Users\peve\AppData\Local\{F43CBCCF-C2BC-47C4-B7F0-62D44A211610} O43 - CFD: 05/11/2011 - [0] D -- C:\Users\peve\AppData\Local\{F4D082B8-9C6A-4C95-BC1B-299294B40CF6} O43 - CFD: 28/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{F4E9060D-3971-4EBC-9C96-2ABECE4B5955} O43 - CFD: 17/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{F56021CE-59C5-46DC-A3D2-15ECC2AF01C0} O43 - CFD: 05/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{F58126AA-B4F5-47BE-80B5-43C1FFDBF058} O43 - CFD: 03/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{F658B216-627D-4B73-A704-907C56A356ED} O43 - CFD: 10/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{F65B8406-4369-4FF4-8F10-8DE4804DCD4E} O43 - CFD: 04/07/2012 - [0] D -- C:\Users\peve\AppData\Local\{F73B4105-E76E-4374-AE42-70481D199B39} O43 - CFD: 08/08/2011 - [0] D -- C:\Users\peve\AppData\Local\{F741CECE-7A99-4A67-B44A-27A48356DAF1} O43 - CFD: 09/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{F78BD56B-806E-4F50-B890-D2DA01606D85} O43 - CFD: 22/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{F7FAD619-BBBB-4AEE-90FC-CEAACE5F5BF4} O43 - CFD: 02/12/2011 - [0] D -- C:\Users\peve\AppData\Local\{F82363F9-572C-4AA1-BFA9-1E7536CE162E} O43 - CFD: 20/01/2013 - [0] D -- C:\Users\peve\AppData\Local\{F8243648-8DA2-4A63-9D8A-1EA8D64DC708} O43 - CFD: 25/06/2012 - [0] D -- C:\Users\peve\AppData\Local\{F84E868B-B2D7-4B83-BA8D-582A57CF7286} O43 - CFD: 21/09/2011 - [0] D -- C:\Users\peve\AppData\Local\{F85AEAB2-37C0-489F-A8EF-681921ABB3BD} O43 - CFD: 25/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{F87D3557-EAA7-4DB7-B07D-D5344928EA8D} O43 - CFD: 16/11/2012 - [0] D -- C:\Users\peve\AppData\Local\{F90C15E1-FBC4-4C04-889D-5E268CF58C3F} O43 - CFD: 02/10/2011 - [0] D -- C:\Users\peve\AppData\Local\{F9BBB450-C4DE-4EB7-BCCE-25200FFBD761} O43 - CFD: 04/04/2013 - [0] D -- C:\Users\peve\AppData\Local\{FA3A2C9D-C6D1-4821-B61B-A970D559C3B4} O43 - CFD: 01/01/2012 - [0] D -- C:\Users\peve\AppData\Local\{FA6D51C5-945E-4D22-AA95-57DDF58245CA} O43 - CFD: 24/09/2012 - [0] D -- C:\Users\peve\AppData\Local\{FAC9FE64-13A9-4040-AECA-889144FC53CF} O43 - CFD: 01/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{FAE83553-8371-467A-BFE7-32ACD4CDDC97} O43 - CFD: 27/12/2012 - [0] D -- C:\Users\peve\AppData\Local\{FAF64BDC-4CCB-4060-A591-DA7758AEE25A} O43 - CFD: 24/04/2012 - [0] D -- C:\Users\peve\AppData\Local\{FB20738B-4D3A-4A08-869D-8A536C90F583} O43 - CFD: 09/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{FD5C38E5-439C-4CE8-B739-6295922229C3} O43 - CFD: 10/08/2013 - [0] D -- C:\Users\peve\AppData\Local\{FD6137D1-F86B-4343-9B89-F5D986E88052} O43 - CFD: 04/10/2012 - [0] D -- C:\Users\peve\AppData\Local\{FE039609-FAC5-493B-B6EF-29809988BB14} O43 - CFD: 28/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{FE06AF90-A29A-4DFC-9826-751AF9050C75} O43 - CFD: 16/08/2012 - [0] D -- C:\Users\peve\AppData\Local\{FEF52494-A258-4FC1-9328-154DE240DC81} O43 - CFD: 18/07/2013 - [0] D -- C:\Users\peve\AppData\Local\Programs\Common =>.Microsoft Corporation O43 - CFD: 05/11/2009 - [] RD -- C:\Users\peve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 15/06/2017 - [] RD -- C:\Users\peve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 03/01/2017 - [] D -- C:\Users\peve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar =>.Convar Deutschland GmbH O43 - CFD: 05/11/2009 - [] RD -- C:\Users\peve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 15/06/2017 - [] RD -- C:\Users\peve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 26/02/2010 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 25/02/2010 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 26/02/2010 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 25/04/2011 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Google =>.Google O43 - CFD: 14/07/2009 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 10/02/2012 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 04/01/2017 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 24/03/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\PDF Architect 3 =>.pdfforge GmbH O43 - CFD: 25/02/2010 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\SACore =>.SACore O43 - CFD: 10/06/2010 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Vodafone =>.Vodafone User empty folders CLSID founds (691). Clean with ZHPFix 'EmptyCLSID' command =>.Superfluous.Empty.CLSID ---\\ ShellIconOverlayIdentifiers (SIOI) (4) - 1s O106 - SIOI: avast [00asw] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.® O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.® O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation ---\\ Image File Execution Options (4) - 2s O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation ---\\ Enumération des clés StartupReg (13) - 2s O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\AmIcoSinglun64 [Key] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe =>.AlcorMicro Co., Ltd. O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (...) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\ArcadeDeluxeAgent [Key] . (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe =>.CyberLink Corp. O53 - SMSR:HKLM\...\startupreg\CCleaner [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O53 - SMSR:HKLM\...\startupreg\FLV Player [Key] . (...) -- C:\Users\peve\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc. O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation O53 - SMSR:HKLM\...\startupreg\PLFSetI [Key] . (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (...) -- C:\Program Files (x86)\QuickTime\QTTask.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor O53 - SMSR:HKLM\...\startupreg\TkBellExe [Key] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\Real\realplayer\Update\realsched.exe =>.RealNetworks, Inc. ---\\ Liste des pilotes du système (84) - 142s O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows® O58 - SDL:2009/08/13 21:20:46 A . (.LSI Corporation - SoftModem Device Driver.) -- C:\Windows\System32\drivers\agrsm64.sys [1209856] =>.LSI Corporation O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows® O58 - SDL:2009/07/23 00:06:26 A . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\Windows\System32\drivers\AmUStor.sys [40448] =>.Alcor Micro, Corp. O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows® O58 - SDL:2017/05/09 15:22:27 A . (.AVAST Software s.r.o. - IDS Application Activity Monitor Driver..) -- C:\Windows\System32\drivers\aswbidsdrivera.sys [311808] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:22:27 A . (.AVAST Software s.r.o. - Application Activity Monitor Helper Driver.) -- C:\Windows\System32\drivers\aswbidsha.sys [190256] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:22:27 A . (.AVAST Software s.r.o. - Logging Driver.) -- C:\Windows\System32\drivers\aswbloga.sys [334576] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:22:27 A . (.AVAST Software s.r.o. - Universal Driver.) -- C:\Windows\System32\drivers\aswbuniva.sys [49016] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:52 A . (.AVAST Software - Avast HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [38296] =>.AVAST Software s.r.o.® (.AVAST Software) O58 - SDL:2017/05/09 15:22:55 A . (.AVAST Software - Avast Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [32600] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:52 A . (.AVAST Software - Avast File System Minifilter for Windows 20.) -- C:\Windows\System32\drivers\aswMonFlt.sys [128648] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:50 A . (.AVAST Software - Avast WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [101152] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:52 A . (.AVAST Software - Avast Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [75704] =>.AVAST Software s.r.o.® (.AVAST Software) O58 - SDL:2017/05/09 15:22:56 A . (.AVAST Software - Avast Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1007160] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:52 A . (.AVAST Software - Avast self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [569192] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/12 20:30:04 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswstm.sys [158880] =>.AVAST Software s.r.o.® O58 - SDL:2017/05/09 15:23:53 A . (.AVAST Software - Avast VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [339696] =>.AVAST Software s.r.o.® (.AVAST Software) O58 - SDL:2009/09/21 21:00:44 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [1537024] =>.Atheros Communications, Inc. O58 - SDL:2009/12/10 13:40:30 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [6179328] =>.ATI Technologies Inc. O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation O58 - SDL:2009/06/10 22:34:38 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\BCMWL664.SYS [1311232] =>.Broadcom Corporation O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd. O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd. O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows® O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation O58 - SDL:2012/08/21 14:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] =>.GEAR Software Inc.® O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc. O58 - SDL:2009/09/17 22:54:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation® O58 - SDL:2010/11/20 15:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows® O58 - SDL:2009/06/05 04:54:36 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [408600] =>.Intel Corporation® O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows® O58 - SDL:2009/06/10 22:37:05 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [6108416] =>.Intel Corporation O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows® O58 - SDL:2009/08/06 14:43:58 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\Windows\System32\drivers\k57nd60a.sys [320040] =>.Broadcom Corporation® O58 - SDL:2009/06/20 04:09:57 A . (.Atheros Communications, Inc. - Atheros AR8121/AR8113/AR8114 PCI-E Ethernet.) -- C:\Windows\System32\drivers\L1E62x64.sys [54272] =>.Atheros Communications, Inc. O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows® O58 - SDL:2008/09/15 14:26:10 RA . (.ZTE Incorporated - ZTE CDROM Filter.) -- C:\Windows\System32\drivers\massfilter.sys [9216] =>.ZTE Incorporated O58 - SDL:2013/04/04 14:50:32 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25928] =>.Malwarebytes Corporation® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows® O58 - SDL:2009/06/03 05:15:30 A . (.Egis Technology Inc. - PSD Filter Driver.) -- C:\Windows\System32\drivers\mwlPSDFilter.sys [22576] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2009/06/03 05:15:30 A . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) -- C:\Windows\System32\drivers\mwlPSDNserv.sys [20016] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2009/06/03 05:15:30 A . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) -- C:\Windows\System32\drivers\mwlPSDVDisk.sys [60464] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2013/07/25 17:53:46 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl64.sys [23040] =>.Apple Inc. O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows® O58 - SDL:2009/05/06 02:46:08 A . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [18432] =>.NewTech Infosystems, Inc® O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows® O58 - SDL:2009/06/25 04:23:24 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RtHDMIVX.sys [205472] =>.Realtek Semiconductor Corp® O58 - SDL:2009/10/28 21:40:58 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2018080] =>.Realtek Semiconductor Corp® O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows® O58 - SDL:2009/09/18 06:12:06 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [292912] =>.Synaptics Incorporated® O58 - SDL:2009/05/06 02:46:08 A . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [16896] =>.NewTech Infosystems, Inc® O58 - SDL:2015/06/17 18:04:24 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc. O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows® O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys [119680] =>.ZTE Incorporated O58 - SDL:2009/08/21 17:44:00 A . (.ZTE Corporation - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ZTEusbnet.sys [135168] =>.ZTE Corporation O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmea.sys [119680] =>.ZTE Incorporated O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmeaext.sys [119680] =>.ZTE Incorporated O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmeaext2.sys [119680] =>.ZTE Incorporated O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbser6k.sys [119680] =>.ZTE Incorporated O58 - SDL:2009/10/09 12:46:00 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbvoice.sys [119680] =>.ZTE Incorporated ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 112s O61 - LFC: 2017/07/02 09:34:08 A . (..) -- C:\Users\peve\AppData\Local\ATI\ACE\Manifest.Bin [26869] =>.ATI Technologies ---\\ Associations Shell Spawning (9) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (16) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software ---\\ Recherche d'infection sur les navigateurs (11) - 20s O69 - SBI: prefs.js [peve - 6bevug4m.default-1346227212902] user_pref("extensions.7go@7go.com.mzID", "93"); =>.Superfluous.7GoGames O69 - SBI: prefs.js [peve - 6bevug4m.default-1346227212902] user_pref("extensions.speedanalysis03@SpeedAnalysis.com.mzID", "81"); =>PUP.Optional.SpeedAnalysis O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKCU] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (Bing) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKCU] {37451e14-920f-40dd-82e7-af44b850c719} - (iadah) - http://www.iadah.com/ O69 - SBI: SearchScopes [HKCU] {668CD3B5-A9AD-460A-BCCF-70C6BB0526F0} - (Ask Search) - http://websearch.ask.com/ =>Toolbar.Ask O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com/ =>.Google Inc. O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com/ =>.Google Inc. O69 - SBI: SearchScopes [HKLM] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/ =>.Google Inc. O69 - SBI: SearchScopes [HKLM] {9CB96984-43C3-4D44-90EF-01466EFCF7BB} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com ---\\ Enumère les services démarrés par Svchost (32) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680448] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2651136] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (3) - 4s O87 - FAEL: "TCP Query User{5D73A1EE-C9E6-4B7C-A76D-DBD332CFEC49}C:\jeux\teeworlds-0.6.1-win32\teeworlds-b122-r50edfd37-win32\teeworlds_srv.exe" [In-None-P6-TRUE] .(...) -- C:\jeux\teeworlds-0.6.1-win32\teeworlds-b122-r50edfd37-win32\teeworlds_srv.exe O87 - FAEL: "UDP Query User{914ED4F6-EEF1-4F83-8E8B-4EA422BDAF91}C:\jeux\teeworlds-0.6.1-win32\teeworlds-b122-r50edfd37-win32\teeworlds_srv.exe" [In-None-P17-TRUE] .(...) -- C:\jeux\teeworlds-0.6.1-win32\teeworlds-b122-r50edfd37-win32\teeworlds_srv.exe O87 - FAEL: "{12EBFBF0-6C01-4474-9679-6D061225E7CC}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.) ---\\ Scan Additionnel (10) - 1s C:\Windows\System32\Tasks\Optimizer Pro Schedule =>PUP.Optional.OptimizerPro C:\Windows\System32\Tasks\PC Performer =>PUP.Optional.PCPerformer C:\Users\peve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm =>PUP.Optional.QuickStart C:\Users\peve\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} =>PUP.Optional.Wajam [[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D}] =>.Superfluous.Conduit [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1] =>PUP.Optional.SaveOn [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1] =>PUP.Optional.SaveOn [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{668CD3B5-A9AD-460A-BCCF-70C6BB0526F0}] =>Toolbar.Ask ---\\ Récapitulatif des éléments trouvés sur votre station (14) - 0s https://www.nicolascoolman.com/fr/pup-optimizerpro/ =>PUP.Optional.OptimizerPro https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.PCPerformer https://www.nicolascoolman.com/fr/pup-quickstart/ =>PUP.Optional.QuickStart https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.Superfluous.Conduit https://www.nicolascoolman.com/fr/pup-saveon/ =>PUP.Optional.SaveOn https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.JawegoPartners https://www.nicolascoolman.com/fr/les-toolbars/ =>Toolbar.Lookineo https://www.anti-malware.top/2016/06/09/superfluous-7gogames/ =>.Superfluous.7GoGames https://www.nicolascoolman.com/fr/pup-speedanalysis/ =>PUP.Optional.SpeedAnalysis https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask ~ Unselected Options: O82, ~ End of the scan, 77129 items in 10mn10s (1942)(0)