Aller au contenu

Pierrot33

Membres
  • Compteur de contenus

    20
  • Inscription

  • Dernière visite

Tout ce qui a été posté par Pierrot33

  1. A priori non, tout marche parfaitement ! Encore merci et bonne continuation ! Passez une bonne année 2013 !
  2. Bonjour, Voici le rapport ZHPFix: http://pjjoint.malekal.com/files.php?id=20130107_i8l13n6t5g5
  3. Bon pas de réponse donc j'en conclu que non ! Merci beaucoup pour votre aide !
  4. Autant pour moi ! Donc j'ai fais ce que vous m'avez dit, ça à l'air bon. Y'a-t-il d'autres manip' à effectuer ?
  5. Tout ce qui est entre quoi et quoi ?
  6. Ah d'accord ! Par contre premier problème: "Copiez/Collez les lignes vertes dans le cadre ci dessous:" =► donc sur mon rapport j'ai des lignes colorées en bleu, et d'autres dans un jaune marron mais pas vraiment de vertes à proprement parlé. De plus, je n'ai pas de cadre comme mentionné sur le copié-collé ci-dessus entre guillemets. Que dois-je faire ?
  7. "La suite:" ? Cela signifie-t-il que vous n'avez pas eu le rapport complet ? Si tel est le cas, ne serait-il pas plus simple (pour moi) de vous poster le rapport complet ici même, quitte à ce que celui ci prenne deux messages ?! (vous l'aurez compris je suis loin d'être un as de l'informatique !).
  8. Bonjour, Voici le lien de mon rapport ZHPDiag. Merci de me dire si cela ne fonctionne pas ! http://pjjoint.malekal.com/files.php?id=ZHPDiag_20130106_x11r6q12w15j7
  9. Bonjour, Voilà j'ai Mystart by IncrediBar qui s'est incrusté à la place de Google Chrome, ainsi qu'en toolbar, et je n'arrive pas à m'en défaire. J'ai lu deux trois sujets, fais les démarches via AdwCleaner, et je joints à ce post une copie du scan de ce dernier. J'attends donc votre aide avec impatience pour que vous me guidiez et vous remercie d'avance ! # AdwCleaner v1.701 - Rapport créé le 05/01/2013 à 16:47:50 # Mis à jour le 02/07/2012 par Xplode # Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits) # Nom d'utilisateur : bleuris - PC-DE-BLEURIS # Exécuté depuis : C:\Users\bleuris\Downloads\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib ***** [Registre] ***** ***** [Registre - GUID] ***** ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Le registre ne contient aucune entrée illégitime. -\\ Google Chrome v23.0.1271.97 Fichier : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences Supprimée : "name": "IncrediBar for Chrome\u2122", Supprimée : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...] Supprimée : "default_title": "uTorrentBar_FR Community Toolbar", Supprimée : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...] Supprimée : "name": "uTorrentBar_FR", Supprimée : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT285163[...] Supprimée : "path": "C:\\Users\\bleuris\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll", ************************* AdwCleaner[R1].txt - [3982 octets] - [05/07/2012 12:19:11] AdwCleaner[s1].txt - [320 octets] - [05/07/2012 13:27:30] AdwCleaner[s2].txt - [4180 octets] - [05/07/2012 13:28:13] AdwCleaner[R2].txt - [10501 octets] - [04/01/2013 17:49:41] AdwCleaner[R3].txt - [9162 octets] - [05/01/2013 11:52:11] AdwCleaner[s3].txt - [514 octets] - [05/01/2013 11:57:06] AdwCleaner[R4].txt - [10227 octets] - [05/01/2013 15:59:27] AdwCleaner[s4].txt - [9306 octets] - [05/01/2013 16:02:27] AdwCleaner[R5].txt - [3146 octets] - [05/01/2013 16:39:22] AdwCleaner[s5].txt - [2077 octets] - [05/01/2013 16:47:50] ########## EOF - C:\AdwCleaner[s5].txt - [2205 octets] ##########
  10. Parfait et bien sur ce, je pense que le sujet est bel et bien clos. C'était mon baptême du feu sur ce site et je le recommanderai à mes proches sans hésiter ! Encore une fois un grand merci à vous mon cher Pear pour votre réactivité, votre patience et votre professionnalisme ! Bonne continuation ! Cordialement ! Pierrot.
  11. Je pense que c'était une erreur dans l'adresse j'avais "http://www.google/" et il me semble qu'il manquait le ".fr". En tout cas maintenant ça fonctionne, j'ai fait autrement. Avant d'en finir pour de bon, d'autres questions d'ordre pratique: 1/ Vous m'avez dit qu'on verrait plus tard, alors maintenant je me demande: que fait-on de "Snapshots2" ? 2/ Dois-je conserver les rapports "ZHPDiag" et "ZHPFixReport" ? 3/ Que dois-je faire de mon fichier "nouveau document texte" et du fichier "regis" qui se sont mis sur mon bureau ?
  12. J'ai fait toute la procédure sans soucis, aucun message d'erreur, mais quand je clique sur l'icone pour démarrer Internet Explorer, ça ne fonctionne toujours pas je tombe toujours sur "Internet Explorer ne peut pas afficher cette page Web"...
  13. Pour les post de rapports lourds, je le saurais pour la prochaine fois ! Zeb si tu nous lis, désolé ! La machine à l'air de bien tourner ! Merci pour ton aide ! Par contre, quand j'ouvre Internet Explorer, je tombe sur "Internet Explorer ne peut pas afficher cette page Web". Voici donc mes nouvelles questions: 1/ Est-ce normal ? 2/ Comment remettre google en page d'accueil ?
  14. Voici le rapport de suppression de ZHP Fix: Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012 Fichier d'export Registre : Run by bleuris at 06/07/2012 14:05:21 Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002) Web site : ZHPFix Fix de rapport Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com ========== Logiciel(s) ========== ABSENT Software Key: Everest Poker.fr ABSENT Software Key: PokerStars.fr ABSENT Software Key: {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 ========== Clé(s) du Registre ========== ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoRezo_is1 ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{38470B46-9BF1-40AE-A588-F6AD6D1C2D42} ABSENT Key: HKLM\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17} ABSENT Key: HKLM\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac} ABSENT Key: HKLM\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f} ABSENT Key: HKLM\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a} ABSENT Key: HKLM\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82} ABSENT Key: HKLM\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119} ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a} ABSENT Key: Service: SBSDWSCService ========== Valeur(s) du Registre ========== ABSENT TCP Query User{643D2104-D7CD-4D14-AA4E-01FCBD00FFED}C:/program files/freetvradio/freetvradio.exe ABSENT UDP Query User{5BEBE02B-CD74-4975-9C5C-60985508D007}C:/program files/freetvradio/freetvradio.exe ABSENT [HKLM\Software\Mozilla\Firefox\Extensions]:SpiderMessengerHelper@spidermessenger.com SUPPRIME TDSD Value: l3codecp.acm ABSENT {A51F85BF-F860-4CF0-80C2-DD652500518D} ABSENT {3A5B8B1A-BFBA-4454-9626-A5BC8131FBD3} ABSENT {A2E475C0-D6FD-42FA-972E-F02C4FE1C671} ABSENT {F22659CE-88DF-405F-95A9-706EDD339282} ABSENT {C119B398-0B3E-4810-9347-14AE4EB8F768} ABSENT {31A7D37C-EF4D-40DF-BEFA-968D28DDEFAA} ABSENT Valeur Standard Profile: FirewallRaz : ABSENT Valeur Domain Profile: FirewallRaz : ========== Dossier(s) ========== ABSENT C:\Program Files\Everest Poker.fr ABSENT C:\Program Files\PokerStars.FR ABSENT C:\Program Files\Spybot - Search & Destroy ABSENT C:\ProgramData\Spybot - Search & Destroy ABSENT C:\Users\bleuris\AppData\Local\PokerStars.FR SUPPRIME Flash Cookies: SUPPRIME Temporaires Windows: ========== Fichier(s) ========== ABSENT File: c:\users\bleuris\appdata\roaming\microsoft\windows\start menu\programs\spotify.lnk ABSENT File: c:\users\bleuris\desktop\pierre\spotify.exe ABSENT File: c:\users\bleuris\desktop\spybot - search & destroy.lnk ABSENT File: c:\program files\spybot - search & destroy\spybotsd.exe ABSENT File: c:\users\bleuris\appdata\roaming\microsoft\internet explorer\quick launch\pokerstars.fr.lnk ABSENT File: c:\program files\pokerstars.fr\pokerstarsupdate.exe ABSENT File: c:\users\bleuris\appdata\roaming\microsoft\internet explorer\quick launch\spybot - search & destroy.lnk ABSENT File: c:\users\bleuris\appdata\roaming\microsoft\internet explorer\quick launch\vos démarches administratives.lnk ABSENT File: c:\users\bleuris\appdata\roaming\microsoft\internet explorer\quick launch\µtorrent.lnk ABSENT File: c:\users\bleuris\desktop\pierre\utorrent.exe ABSENT File: c:\program files\spybot - search & destroy\sdwinsec.exe SUPPRIME Reboot c:\windows\system32\l3codecp.acm ABSENT Folder/File: c:\users\bleuris\appdata\local\temp\tbutor.dll SUPPRIME Flash Cookies: SUPPRIME Temporaires Windows: ========== Restauration Système ========== Point de restauration du système créé avec succès ========== Récapitulatif ========== 10 : Clé(s) du Registre 12 : Valeur(s) du Registre 7 : Dossier(s) 15 : Fichier(s) 3 : Logiciel(s) 1 : Restauration Système End of clean in 00mn 30s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 06/07/2012 12:52:28 [6722] C:\ZHP\ZHPFix[R2].txt - 06/07/2012 14:05:21 [4024]
  15. Re bonjour pear, Ma question c'était: dois je aussi effacer le contenu de "Snapshots2" ?
  16. Bonjour pear ! Pour MBAM, je l'ai réinstallé hier en désactivant TeaTimer. Pour Snapshots, j'ai deux dossiers: le premier, intitulé "Snapshots", est un dossier vide. Le second, intitulé "Snapshots2", est un dossier comprenant plein de fichiers commençant par "RegD...". Dois-je les supprimer ? J'attends votre réponse pour poursuivre avec ZHP. Merci.
  17. Bonsoir c'est encore moi ! Je viens d'utiliser ZHPDiag, j'ai pas bien compris l'étape pour publier le rapport que tu as décris pear, donc je l'ai enregistré et j'espère qu'en le postant ainsi, cela te conviendra quand même. Si ce n'est pas le cas, je veux bien quelques lumières supplémentaires ! Donc voici le rapport ZHPDiag: Rapport de ZHPDiag v1.31.105 par Nicolas Coolman, Update du 25/06/2012 Run by bleuris at 05/07/2012 20:51:13 Web site : ZHPDiag Outil de diagnostic Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com State : Version à jour. ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 GCIE: Google Chrome v20.0.1132.47 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002) Windows Server License Manager Script : OK ~ Vista, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : WQD8Q Windows License : OK Windows Automatic Updates : OK ---\\ System Information ~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3068 MB (44% free) System Restore: Activé (Enable) System drive C: has 120 GB (41%) free of 288 GB ---\\ Logged in mode ~ Computer Name: PC-DE-BLEURIS ~ User Name: bleuris ~ All Users Names: bleuris, Administrateur, ~ Unselected Option: O45,O61 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\bleuris\AppData\Roaming\ ~ %Desktop% : C:\Users\bleuris\Desktop\ ~ %Favorites% : C:\Users\bleuris\Favorites\ ~ %LocalAppData% : C:\Users\bleuris\AppData\Local\ ~ %StartMenu% : C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 120 Go of 288 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 11 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 7 Go) G:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 7 Go) H:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.1C191A4F0960F21B5D58C8A65BAF5427] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/05/2012 - 23:35:47.) -- C:\Windows\System32\wininet.dll [1129472] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856] [MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 07:32:49.) -- C:\Windows\system32\Drivers\ntfs.sys [1083880] [MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192] [MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 07:32:55.) -- C:\Windows\system32\Drivers\volsnap.sys [226280] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/909 ~ Mes musiques (My Musics) : 1/290 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/34 ~ Mes Documents (My Documents) : 1/1053 ~ Mon Bureau (My Desktop) : 1/6236 ~ Menu demarrer (Programs) : 1/33 ~ Scan Hidden Files in 00mn 05s ---\\ Processus lancés [MD5.4B3E3F63726F1A456F5FD5ECF08A8719] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904] [PID.3696] [MD5.F7EA1BAED492C634C96D5544AB0D3BB9] - (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200] [PID.956] [MD5.19FCD84D75DA46F9514046E91FFCF564] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296] [PID.3724] [MD5.E572B4F595FB0D025F1A74DE86180076] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736] [PID.3856] [MD5.C18DAD67061885AE0D8BEA58726EA921] - (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688] [PID.2256] [MD5.F7CF218E5CAA6FC0BB55791AD31E2B3F] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [202032] [PID.3472] [MD5.21293443961A4E2597453EE7A9347F22] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [54840] [PID.4080] [MD5.8CB896C573FD15AE8B13180DA53E93D2] - (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752] [PID.3752] [MD5.782FEF655DBF8653C9F2722BEBF7A8A6] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4241512] [PID.2108] [MD5.5DBF1E0450D1E8B896D9AD0F8AA6499C] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [450659] [PID.2072] [MD5.4B555106290BD117334E9A08761C035A] - (...) -- ystem32\rundll32.exe [0] [PID.] [MD5.98A078F838A70F84E1BD490D7C7675F4] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2688] [MD5.D9D79F547AE2A70C650DFCFC27AEC0F7] - (.Apple Inc. - iTunesHelper.) -- C:\iTunes\iTunesHelper.exe [421736] [PID.832] [MD5.4A9295C9BE22739D030AB072E9A0B169] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392] [PID.3124] [MD5.615F5FD6A019633B7EE6451BFA65A881] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080] [PID.4000] [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.] [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3876] [MD5.B6080F3A1CA495190D1583C2202CAA61] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17148552] [PID.2064] [MD5.89F7C30A91E5581BDF14C62AB46A2B2D] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe [255536] [PID.3948] [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.708] [MD5.8D07F0687318214A3CEF62EA1048D101] - (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.exe [316720] [PID.4252] [MD5.1EDC4865C8003A0251956835273904B1] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe [685360] [PID.4736] [MD5.93F95BFF3C560A7D83D78FC9B95DBB7B] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.5768] [MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.5784] [MD5.E75717A75F2A35130BF7F7AEE09DCB7D] - (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe [1250328] [PID.4688] [MD5.BE955BAB4EFC2A28BE2692D102FFC85A] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [3838464] [PID.5128] [MD5.5EC3A0DAC239DB3EBF9DC455EB559BA7] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.1.) -- C:\Windows\system32\nvvsvc.exe [196608] [PID.] [MD5.3017DF7A43E5FC7E361C7B161DD9C81A] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657] [PID.] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.] [MD5.6D0AC28C5BD8D8495F83F5929A45E559] - (.Hewlett-Packard Corporation - HpService.) -- C:\Windows\system32\Hpservice.exe [19456] [PID.] [MD5.4041D31508A2A084DFB42C595854090F] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768] [PID.] [MD5.23C3A0680042C0D1DE1F360F8B62BC57] - (.Microsoft Corporation - Infrastructure d'extensibilité pour les ser.) -- C:\Windows\system32\WLANExt.exe [74240] [PID.] [MD5.3B1B2EE9DF189F6BBB080BF393D1B2EE] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824] [PID.] [MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.] [MD5.ABF90FC5A127F481219B873C1B8DFC1C] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.] [MD5.0D362785BEF9BDF5A6E1F4628D06716D] - (.Pas de propriétaire - STServices.) -- C:\Program Files\SMINST\BLService.exe [365952] [PID.] [MD5.805AE1F90C64758D19AAA001CF8CBA12] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734] [PID.] [MD5.BB313AE85EC95B7CB87FC5ED53F3A22B] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320] [PID.] [MD5.0C66E48654AFD8A6BCFBCE22E7FAB251] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116096] [PID.] [MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368] [PID.] [MD5.89F9E1984C1CD9E5F4FE39642D886E11] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.] [MD5.1665C7121A026DF10C903DB9BC5E9D43] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [165192] [PID.] [MD5.7795F8CEBC284A426B53F541E538695F] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840] [PID.] [MD5.57EDB35EA2FECA88F8B17C0C095C9A56] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.] [MD5.C7FBDD1ED42F82BFA35167A5C9803EA3] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904] [PID.] ~ Scan Processes Running in 00mn 02s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [user Data\Default] None ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_31 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.1.10329.0.) -- c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3555.0308] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\bleuris\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\bleuris\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\bleuris\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.4.2f3.) -- C:\Users\bleuris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP Jumpstation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Jumpstation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Bing R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Pando Networks - Pando Web Plugin.) (No version) -- (.not file.) ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 04s ~ Nombre de lignes (Lines number): 15001 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [DVDAgent] . (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe O4 - HKLM\..\Run: [TSMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe O4 - HKLM\..\Run: [TVAgent] . (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe O4 - HKLM\..\Run: [uCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [smartMenu] . (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe O4 - HKLM\..\Run: [updateLBPShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [updatePSTShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [updateP2GoShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [updatePDIRShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Run: [sysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\iTunes\iTunesHelper.exe O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKCU\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKCU\..\Run: [uTorrent] C:\Users\bleuris\Desktop\uTorrent.exe (.not file.) O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [uTorrent] C:\Users\bleuris\Desktop\uTorrent.exe (.not file.) ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\spotify.exe (.not file.) O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\bleuris\Desktop\Corbeille - Raccourci.lnk - Clé orpheline O4 - Global Startup: C:\Users\bleuris\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\bleuris\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\bleuris\Desktop\Spotify.lnk . (.Spotify Ltd.) -- C:\Users\bleuris\Desktop\PIERRE\Spotify\spotify.exe O4 - Global Startup: C:\Users\bleuris\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\bleuris\Desktop\UltraMixer.lnk . (.UltraMixer Digital Audio Solutions.) -- C:\Program Files\UltraMixer\UltraMixer.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PokerStars.fr.lnk . (.PokerStars.) -- C:\Program Files\PokerStars.FR\PokerStarsUpdate.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\UltraMixer.lnk . (.UltraMixer Digital Audio Solutions.) -- C:\Program Files\UltraMixer\UltraMixer.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) ~ Scan Global Startup in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: &Envoyer à OneNote - {90EAE591-7E7E-434a-8E28-ECFD00071806} -- C:\Program Files\PokerStars.FR\main.ico (.not file.) O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ~ Scan Objets ActiveX in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS3\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- O18 - Handler: dvd - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: its - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: mhtml - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll ~ Scan STS/SSO in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Corporation - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.1.) - C:\Windows\System32\nvvsvc.exe O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - STServices.) - C:\Program Files\SMINST\BLService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe O23 - Service: TV Task Scheduler (TVTS) (TVSched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe O23 - Service: {55662437-DA8C-40c0-AADA-2C816A897A49} ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.Cyberlink Corp. - Pas de description.) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl ~ Scan Services in 00mn 00s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA.job [MD5.FCC7C432FBF465C38FD5D940580EF9B7] [APT] [FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core] (.Facebook Inc..) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.FCC7C432FBF465C38FD5D940580EF9B7] [APT] [FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA] (.Facebook Inc..) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core] (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA] (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.523D786AB9BFC3C228B8C851D402F502] [APT] [HP Health Check] (.Hewlett-Packard.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe ~ Scan Scheduled Task in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\system32\iedkcs32.dll O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001} O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11b Network Adapter O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} O42 - Logiciel: Everest Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- Everest Poker.fr O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E} O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {5DAA9C36-8F8B-462F-8CCA-E205BC3751F5} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {57A5AEC1-97FC-474D-92C4-908FCC2253D4} O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F} O42 - Logiciel: HP Help and Support - (.Hewlett-Packard Company.) [HKLM] -- {0054A0F6-00C9-4498-B821-B5C9578F433E} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E} O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E} O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM] -- {EFC5939F-470F-454E-B3DA-F51FDD83F6CE} O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15} O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- {67626E09-5366-4480-8F1E-93FADF50CA15} O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: HP Quick Launch Buttons 6.40 H2 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {154A4184-1A3D-4BF9-A5AE-4FA1660445F3} O42 - Logiciel: HP Total Care Setup - (.Hewlett-Packard Company.) [HKLM] -- {38058455-8C21-4C2F-B2F6-14ED166039CB} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F} O42 - Logiciel: HP User Guides 0126 - (.Hewlett-Packard.) [HKLM] -- {BE78F458-88D3-4894-87E9-54B96D1FFAB6} O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {9ADABDDE-9644-461B-9E73-83FA3EFCAB50} O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4} O42 - Logiciel: Hewlett-Packard Active Check for Health Check - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} O42 - Logiciel: Hewlett-Packard Asset Agent for Health Check - (.HP.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: JMicron JMB38X Flash Media Controller - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C} O42 - Logiciel: Java 6 Update 31 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF} O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LightScribe System Software 1.14.17.1 - (.LightScribe.) [HKLM] -- {0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Malwarebytes Anti-Malware version 1.61.0.1400 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6} O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8} O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93} O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262} O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC} O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 - (.Microsoft Corporation.) [HKLM] -- {3C3D696B-0DB7-3C6D-A356-3DB8CE541918} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710} O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall O42 - Logiciel: My Photo Creations (Carteland Edition) - (.Digilabs.) [HKLM] -- {08C82239-17DE-402E-9BD9-8C1352C1176D} O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C} O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: PCFriendly - (.Pas de propriétaire.) [HKLM] -- PCFriendly O42 - Logiciel: PKR - (.PKR Ltd.) [HKLM] -- PKR O42 - Logiciel: Package de pilotes Windows - ENE (enecir) HIDClass (09/04/2008 2.6.0.0) - (.ENE.) [HKLM] -- 7DE39862CC26DCE2446838AAF7CD5C163F835A57 O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM] -- PokerStars.fr O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: ProtectSmart Hard Drive Protection - (.Hewlett-Packard.) [HKLM] -- {9D615069-AA8F-4E89-AE9D-77AAE90F529F} O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {7BE15435-2D3E-4B58-867F-9C75BED0208C} O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: SPORE Creature Creator Trial Edition - (.Electronic Arts.) [HKLM] -- {ECEE0279-785F-4CB3-9F28-E69813234BF8} O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2604111 O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2604121 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2633870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368v2 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656405 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2686827 O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5DD3FF90-B302-45B2-A188-C5EA7ACD5D46} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E34960DB-2A93-45DB-A208-02650F7AB09C} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{293FB6BE-D3EB-4162-B522-F9108040B9FE} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{31C0F635-15AD-4AA3-A3C6-B542B403D0EE} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3069CE04-082C-4669-9BA1-E6AA66330C1F} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{2B3C041A-A7F2-4A24-968D-4BEB6A123D15} O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{ABB5F56F-FC55-4C7E-9622-B8A1E670BAFC} O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B4C12F08-B0EF-4CC4-AD5F-381DD62BF640} O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edi - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{AEA16A27-0B97-4670-818F-A98D06EC0A6F} O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edi - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0EF0D4FB-BB23-4515-AAEA-1240AC2DA525} O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{075C2272-0881-46D3-B3A5-1D83D6940270} O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870 O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} O42 - Logiciel: Skype™ 5.8 - (.Skype Technologies S.A..) [HKLM] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8} O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU] -- Spotify O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey O42 - Logiciel: UltraMixer 2.4.3 - (.UltraMixer Digital Audio Solutions.) [HKLM] -- {32E2F180-247C-4077-B06A-20F9868568E0}_is1 O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D} O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217 O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM] -- VLC media player O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM] -- wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1 O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM] -- {0D3C01F2-3A39-0248-42A0-4F52DAE2302B} O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066} O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA} O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {C6150D8A-86ED-41D3-87BB-F3BB51B0B77F} O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917} O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11} O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3} O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38} O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F} O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3} O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70} O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1} O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4} O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F} O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2} O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF} O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194} O42 - Logiciel: avast! Free Antivirus v7.0.1426.0 - (.AVAST Software.) [HKLM] -- avast O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {23B8A91D-680B-462B-87AD-3D70F7341731} O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM] -- {DD35C328-F115-BEDA-6EEE-E00C5AACCCBC} ---\\ HKCU & HKLM Software Keys [HKCU\Software\AVAST Software] [HKCU\Software\Adobe] [HKCU\Software\AhnLab] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Google] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\Unity] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\BitTorrent] [HKCU\Software\Bugsplat] [HKCU\Software\Caphyon] [HKCU\Software\ClassesB] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Conduit] [HKCU\Software\CyberLink] [HKCU\Software\DVDPlayr] [HKCU\Software\EasyBits] [HKCU\Software\Facebook] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\HookNetwork] [HKCU\Software\IDT] [HKCU\Software\IGA] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\LightScribe] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept (Muvee)] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\O.2.C. Marketing] [HKCU\Software\ODBC] [HKCU\Software\PC SOFT] [HKCU\Software\Pando Networks] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Safer Networking Limited] [HKCU\Software\ShotOnline] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\Synaptics] [HKCU\Software\Trolltech] [HKCU\Software\Unity] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\ej-technologies] [HKLM\Software\AVAST Software] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\BcmSetup] [HKLM\Software\Broadcom] [HKLM\Software\BrowserChoice] [HKLM\Software\Bunndle] [HKLM\Software\Caphyon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\Debug] [HKLM\Software\EasyBits] [HKLM\Software\Electronic Arts] [HKLM\Software\GEAR Software] [HKLM\Software\Google] [HKLM\Software\HPQ] [HKLM\Software\HP] [HKLM\Software\Hewlett-Packard Company] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDT] [HKLM\Software\InstallShield] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\InterActual Technologies] [HKLM\Software\JMicron Technology Corp.] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\LabelPrint_Upgrade] [HKLM\Software\LightScribe] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\McAfee.com] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\ODBC] [HKLM\Software\P2G_Upgrade] [HKLM\Software\PDR_Upgrade] [HKLM\Software\Pando Networks] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Product_Upgrade] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Riot Games] [HKLM\Software\SRS Labs] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Sagem] [HKLM\Software\SecureDigitalServices] [HKLM\Software\Skype] [HKLM\Software\Sonic] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\VideoLAN] [HKLM\Software\WOW6432Node] [HKLM\Software\WildTangent] [HKLM\Software\Windows] [HKLM\Software\ej-technologies] [HKLM\Software\mcafeeupdater] [HKLM\Software\mozilla.org] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 15/11/2008 - 01:34:22 - [12,096] ----D C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites O43 - CFD: 26/03/2011 - 18:17:28 - [225,474] ----D C:\Program Files\Adobe O43 - CFD: 14/08/2011 - 14:02:38 - [2,316] ----D C:\Program Files\Apple Software Update O43 - CFD: 04/03/2011 - 21:11:19 - [314,449] ----D C:\Program Files\AVAST Software O43 - CFD: 19/11/2011 - 18:27:22 - [0,585] ----D C:\Program Files\Bonjour O43 - CFD: 16/12/2008 - 03:50:00 - [9,821] ----D C:\Program Files\Broadcom O43 - CFD: 04/03/2011 - 21:39:38 - [3,484] ----D C:\Program Files\CCleaner O43 - CFD: 06/04/2012 - 09:16:54 - [830,211] ----D C:\Program Files\Common Files O43 - CFD: 15/11/2008 - 01:48:43 - [895,319] ----D C:\Program Files\CyberLink O43 - CFD: 16/12/2008 - 03:47:23 - [0,758] ----D C:\Program Files\DIFX O43 - CFD: 24/04/2009 - 14:12:44 - [72,538] ----D C:\Program Files\EasyBits For Kids O43 - CFD: 20/06/2012 - 00:32:14 - [36,818] ----D C:\Program Files\Everest Poker.fr O43 - CFD: 23/04/2009 - 19:41:09 - [0] ----D C:\Program Files\Fichiers communs O43 - CFD: 09/02/2010 - 21:35:11 - [20,135] ----D C:\Program Files\Google O43 - CFD: 16/12/2008 - 04:29:34 - [640,115] ----D C:\Program Files\Hewlett-Packard O43 - CFD: 15/11/2008 - 00:43:51 - [0] ----D C:\Program Files\Hewlett-Packard Company O43 - CFD: 15/11/2008 - 02:00:14 - [20,047] ----D C:\Program Files\HP O43 - CFD: 15/11/2008 - 01:35:57 - [416,148] ----D C:\Program Files\HP Games O43 - CFD: 16/12/2008 - 03:49:06 - [33,551] ----D C:\Program Files\IDT O43 - CFD: 28/03/2012 - 11:03:49 - [162,845] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 16/12/2008 - 03:50:59 - [0,062] ----D C:\Program Files\Intel O43 - CFD: 15/06/2012 - 13:03:19 - [6,917] ----D C:\Program Files\Internet Explorer O43 - CFD: 05/04/2012 - 18:05:15 - [1,926] ----D C:\Program Files\iPod O43 - CFD: 18/09/2011 - 11:25:07 - [166,206] ----D C:\Program Files\Java O43 - CFD: 05/07/2012 - 14:22:52 - [11,540] ----D C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 26/01/2012 - 09:24:13 - [9,440] ----D C:\Program Files\McAfee Security Scan O43 - CFD: 01/05/2012 - 01:30:21 - [3,043] ----D C:\Program Files\Microsoft O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games O43 - CFD: 18/09/2011 - 11:22:06 - [362,629] ----D C:\Program Files\Microsoft Office O43 - CFD: 13/05/2012 - 14:44:26 - [36,641] ----D C:\Program Files\Microsoft Silverlight O43 - CFD: 28/11/2009 - 20:10:07 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 17/12/2010 - 04:04:36 - [138,685] ----D C:\Program Files\Microsoft Works O43 - CFD: 29/06/2010 - 20:01:13 - [7,789] ----D C:\Program Files\Microsoft.NET O43 - CFD: 23/04/2011 - 22:40:27 - [94,740] ----D C:\Program Files\Movie Maker O43 - CFD: 02/11/2006 - 14:37:34 - [0,025] ----D C:\Program Files\MSBuild O43 - CFD: 25/04/2009 - 03:01:53 - [0] ----D C:\Program Files\MSXML 4.0 O43 - CFD: 16/12/2008 - 04:32:48 - [56,025] ----D C:\Program Files\muvee Technologies O43 - CFD: 28/08/2011 - 10:49:05 - [133,600] ----D C:\Program Files\My Photo Creations (Carteland Edition) O43 - CFD: 23/04/2009 - 19:44:07 - [17,895] R---D C:\Program Files\Online Services O43 - CFD: 09/09/2010 - 20:04:32 - [7,178] ----D C:\Program Files\Pando Networks O43 - CFD: 26/11/2009 - 21:15:54 - [9,611] ----D C:\Program Files\PCFriendly O43 - CFD: 03/09/2011 - 12:51:31 - [3,385] ----D C:\Program Files\PhotoFiltre O43 - CFD: 16/04/2012 - 16:46:35 - [133,657] ----D C:\Program Files\PokerStars.FR O43 - CFD: 05/04/2012 - 17:56:31 - [72,431] ----D C:\Program Files\QuickTime O43 - CFD: 16/12/2008 - 03:49:12 - [1,579] ----D C:\Program Files\Realtek O43 - CFD: 02/11/2006 - 14:37:34 - [36,906] ----D C:\Program Files\Reference Assemblies O43 - CFD: 06/04/2012 - 09:16:54 - [16,513] R---D C:\Program Files\Skype O43 - CFD: 23/04/2009 - 19:51:24 - [27,072] ----D C:\Program Files\SMINST O43 - CFD: 24/05/2011 - 23:18:09 - [52,326] ----D C:\Program Files\Spybot - Search & Destroy O43 - CFD: 16/12/2008 - 03:46:23 - [14,383] ----D C:\Program Files\Synaptics O43 - CFD: 24/08/2011 - 23:04:24 - [124,492] ----D C:\Program Files\UltraMixer O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 25/04/2009 - 12:04:45 - [61,889] ----D C:\Program Files\VideoLAN O43 - CFD: 25/06/2012 - 19:00:02 - [7,125] ----D C:\Program Files\Winamax Poker O43 - CFD: 23/04/2011 - 22:40:27 - [0,970] ----D C:\Program Files\Windows Calendar O43 - CFD: 23/04/2011 - 22:40:26 - [2,610] ----D C:\Program Files\Windows Collaboration O43 - CFD: 23/04/2011 - 22:40:25 - [4,283] ----D C:\Program Files\Windows Defender O43 - CFD: 14/05/2012 - 09:14:45 - [6,757] ----D C:\Program Files\Windows Journal O43 - CFD: 01/05/2012 - 11:27:33 - [141,083] ----D C:\Program Files\Windows Live O43 - CFD: 14/04/2012 - 10:58:49 - [8,694] ----D C:\Program Files\Windows Mail O43 - CFD: 23/04/2011 - 22:40:26 - [4,290] ----D C:\Program Files\Windows Media Player O43 - CFD: 23/04/2009 - 19:41:09 - [7,589] ----D C:\Program Files\Windows NT O43 - CFD: 23/04/2011 - 22:40:26 - [12,902] ----D C:\Program Files\Windows Photo Gallery O43 - CFD: 25/04/2011 - 03:21:36 - [0,128] ----D C:\Program Files\Windows Portable Devices O43 - CFD: 23/04/2011 - 22:40:26 - [10,111] ----D C:\Program Files\Windows Sidebar O43 - CFD: 05/07/2012 - 20:51:37 - [13,258] ----D C:\Program Files\ZHPDiag O43 - CFD: 15/11/2008 - 01:37:47 - [4,382] ----D C:\Program Files\Common Files\Adobe O43 - CFD: 24/06/2012 - 19:51:05 - [39,318] ----D C:\Program Files\Common Files\Adobe AIR O43 - CFD: 05/04/2012 - 18:05:13 - [110,941] ----D C:\Program Files\Common Files\Apple O43 - CFD: 15/11/2008 - 01:33:14 - [0,089] ----D C:\Program Files\Common Files\DESIGNER O43 - CFD: 15/11/2008 - 01:54:39 - [6,668] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 16/03/2012 - 20:53:34 - [37,320] ----D C:\Program Files\Common Files\Java O43 - CFD: 16/12/2008 - 04:21:58 - [27,847] ----D C:\Program Files\Common Files\LightScribe O43 - CFD: 01/05/2012 - 11:26:34 - [429,340] ----D C:\Program Files\Common Files\microsoft shared O43 - CFD: 16/12/2008 - 04:32:52 - [92,269] ----D C:\Program Files\Common Files\muvee Technologies O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services O43 - CFD: 06/04/2012 - 09:16:54 - [2,056] ----D C:\Program Files\Common Files\Skype O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 11/11/2011 - 04:01:28 - [40,772] ----D C:\Program Files\Common Files\System O43 - CFD: 24/04/2009 - 16:11:22 - [0] ----D C:\Program Files\Common Files\Windows Live O43 - CFD: 24/04/2009 - 16:08:41 - [0,008] -SH-D C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD: 26/03/2011 - 18:17:34 - [0,001] ----D C:\ProgramData\Adobe O43 - CFD: 28/03/2011 - 18:01:57 - [164,915] ----D C:\ProgramData\Apple O43 - CFD: 23/05/2009 - 14:14:29 - [72,390] ----D C:\ProgramData\Apple Computer O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 04/03/2011 - 21:11:19 - [106,415] ----D C:\ProgramData\AVAST Software O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Bureau O43 - CFD: 16/12/2008 - 04:29:45 - [0,118] ----D C:\ProgramData\CyberLink O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 01/06/2011 - 20:02:54 - [0] ----D C:\ProgramData\eMule O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 26/06/2009 - 20:53:29 - [0,514] ----D C:\ProgramData\Google O43 - CFD: 16/12/2008 - 04:33:08 - [38,601] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 24/04/2009 - 14:41:01 - [0,001] ----D C:\ProgramData\LightScribe O43 - CFD: 28/05/2011 - 21:17:56 - [16,673] ----D C:\ProgramData\Malwarebytes O43 - CFD: 22/11/2010 - 19:02:10 - [0,287] ----D C:\ProgramData\McAfee O43 - CFD: 19/01/2012 - 22:05:13 - [0,001] ----D C:\ProgramData\McAfee Security Scan O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Menu Démarrer O43 - CFD: 28/05/2011 - 22:47:27 - [382,151] -S--D C:\ProgramData\Microsoft O43 - CFD: 13/05/2012 - 15:10:23 - [0,054] ----D C:\ProgramData\Microsoft Help O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Modèles O43 - CFD: 04/03/2011 - 21:20:52 - [0,015] ----D C:\ProgramData\Norton O43 - CFD: 15/11/2008 - 00:45:32 - [9,556] ----D C:\ProgramData\NortonInstaller O43 - CFD: 23/04/2011 - 22:48:51 - [0,191] ----D C:\ProgramData\NVIDIA O43 - CFD: 28/03/2011 - 10:14:21 - [0,274] ----D C:\ProgramData\O.2.C. Marketing O43 - CFD: 28/03/2011 - 10:14:21 - [0,002] ----D C:\ProgramData\PlanningTeam O43 - CFD: 28/03/2012 - 10:26:17 - [0,001] ----D C:\ProgramData\PMB Files O43 - CFD: 06/04/2012 - 09:16:47 - [18,537] ----D C:\ProgramData\Skype O43 - CFD: 12/06/2012 - 00:13:43 - [1,413] ----D C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 04/03/2011 - 21:34:22 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 23/04/2009 - 20:33:02 - [0,000] ----D C:\ProgramData\Symantec O43 - CFD: 16/12/2008 - 04:32:11 - [0,571] ----D C:\ProgramData\Temp O43 - CFD: 02/11/2006 - 15:02:04 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 17/08/2011 - 18:41:58 - [1941,110] ----D C:\ProgramData\WildTangent O43 - CFD: 24/04/2009 - 16:08:07 - [0,208] ----D C:\ProgramData\WLInstaller O43 - CFD: 15/11/2008 - 01:34:23 - [6,585] ----D C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} O43 - CFD: 28/03/2011 - 18:04:09 - [0,516] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 23/05/2009 - 14:14:46 - [0,003] ----D C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} O43 - CFD: 26/03/2011 - 18:17:32 - [9,107] ----D C:\Users\bleuris\AppData\Roaming\Adobe O43 - CFD: 19/11/2011 - 18:36:41 - [1287,494] ----D C:\Users\bleuris\AppData\Roaming\Apple Computer O43 - CFD: 23/04/2009 - 20:15:34 - [0,092] ----D C:\Users\bleuris\AppData\Roaming\CyberLink O43 - CFD: 23/08/2011 - 20:12:08 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\Digilabs O43 - CFD: 17/03/2012 - 01:39:09 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\dvdcss O43 - CFD: 27/06/2009 - 16:29:22 - [0,016] ----D C:\Users\bleuris\AppData\Roaming\Google O43 - CFD: 23/04/2009 - 19:52:03 - [0,289] ----D C:\Users\bleuris\AppData\Roaming\Hewlett-Packard O43 - CFD: 23/04/2009 - 19:44:09 - [0,041] ----D C:\Users\bleuris\AppData\Roaming\HP TCS O43 - CFD: 29/12/2010 - 15:05:24 - [0,004] ----D C:\Users\bleuris\AppData\Roaming\Icones O43 - CFD: 23/04/2009 - 19:51:26 - [0] ----D C:\Users\bleuris\AppData\Roaming\Identities O43 - CFD: 10/01/2012 - 22:16:44 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\LolClient O43 - CFD: 24/04/2009 - 14:12:33 - [1,929] ----D C:\Users\bleuris\AppData\Roaming\Macromedia O43 - CFD: 04/03/2011 - 22:39:16 - [0,040] ----D C:\Users\bleuris\AppData\Roaming\Malwarebytes O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\bleuris\AppData\Roaming\Media Center Programs O43 - CFD: 31/01/2012 - 11:41:24 - [5,608] -S--D C:\Users\bleuris\AppData\Roaming\Microsoft O43 - CFD: 23/01/2012 - 20:50:37 - [1,831] ----D C:\Users\bleuris\AppData\Roaming\Mozilla O43 - CFD: 21/05/2012 - 19:27:59 - [0,407] ----D C:\Users\bleuris\AppData\Roaming\Notepad++ O43 - CFD: 05/07/2012 - 14:34:14 - [3,049] ----D C:\Users\bleuris\AppData\Roaming\Skype O43 - CFD: 05/07/2012 - 12:46:09 - [1,969] ----D C:\Users\bleuris\AppData\Roaming\Spotify O43 - CFD: 16/03/2012 - 00:42:56 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\Unity O43 - CFD: 19/06/2012 - 01:12:22 - [2,568] ----D C:\Users\bleuris\AppData\Roaming\uTorrent O43 - CFD: 25/04/2009 - 12:06:38 - [0,429] ----D C:\Users\bleuris\AppData\Roaming\vlc O43 - CFD: 26/03/2011 - 18:17:36 - [4,051] ----D C:\Users\bleuris\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1 O43 - CFD: 24/04/2009 - 16:31:45 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\WildTangent O43 - CFD: 26/03/2011 - 18:16:31 - [3,072] ----D C:\Users\bleuris\AppData\Local\Adobe O43 - CFD: 23/05/2009 - 14:04:28 - [0] ----D C:\Users\bleuris\AppData\Local\Apple O43 - CFD: 28/08/2010 - 09:33:26 - [14,433] ----D C:\Users\bleuris\AppData\Local\Apple Computer O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Application Data O43 - CFD: 18/06/2012 - 16:04:43 - [0,872] ----D C:\Users\bleuris\AppData\Local\CRE O43 - CFD: 17/03/2012 - 20:10:07 - [0] ----D C:\Users\bleuris\AppData\Local\eMule O43 - CFD: 06/11/2011 - 21:48:06 - [7,334] ----D C:\Users\bleuris\AppData\Local\Facebook O43 - CFD: 22/03/2012 - 21:24:18 - [609,822] ----D C:\Users\bleuris\AppData\Local\Google O43 - CFD: 13/08/2011 - 18:10:10 - [56,980] ----D C:\Users\bleuris\AppData\Local\Hewlett-Packard O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Historique O43 - CFD: 06/02/2012 - 11:23:14 - [1559,408] ----D C:\Users\bleuris\AppData\Local\Microsoft O43 - CFD: 06/08/2011 - 10:35:34 - [0,648] ----D C:\Users\bleuris\AppData\Local\Microsoft Games O43 - CFD: 25/04/2011 - 14:43:29 - [0,287] ----D C:\Users\bleuris\AppData\Local\Microsoft Help O43 - CFD: 29/09/2011 - 13:50:33 - [0] ----D C:\Users\bleuris\AppData\Local\PackageAware O43 - CFD: 28/03/2012 - 13:08:31 - [0,242] ----D C:\Users\bleuris\AppData\Local\PMB Files O43 - CFD: 04/06/2012 - 18:17:21 - [2,683] ----D C:\Users\bleuris\AppData\Local\PokerStars.FR O43 - CFD: 05/07/2012 - 12:12:49 - [-1957,429] ----D C:\Users\bleuris\AppData\Local\Spotify O43 - CFD: 05/07/2012 - 20:47:20 - [12,746] ----D C:\Users\bleuris\AppData\Local\Temp O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Temporary Internet Files O43 - CFD: 04/02/2012 - 21:52:37 - [0,200] ----D C:\Users\bleuris\AppData\Local\Unity O43 - CFD: 14/06/2011 - 18:02:48 - [0,027] ----D C:\Users\bleuris\AppData\Local\VirtualStore O43 - CFD: 28/03/2011 - 10:13:32 - [0,000] ----D C:\Users\bleuris\AppData\Local\WDSetup O43 - CFD: 05/07/2012 - 09:35:43 - [0,043] ----D C:\Users\bleuris\AppData\Local\Windows Live O43 - CFD: 19/01/2012 - 13:52:25 - [0] ----D C:\Users\bleuris\AppData\Local\{005D711B-33AC-4A5B-8663-0FB67D6D35DA} O43 - CFD: 12/06/2012 - 09:39:04 - [0] ----D C:\Users\bleuris\AppData\Local\{0061AD53-8D61-457F-A2B6-EAC4E2A9A409} O43 - CFD: 20/07/2011 - 20:25:18 - [0] ----D C:\Users\bleuris\AppData\Local\{018828B3-D553-41A2-9211-E35546756468} O43 - CFD: 01/04/2012 - 18:55:32 - [0] ----D C:\Users\bleuris\AppData\Local\{0201EFCB-F6E1-499E-9B07-D4036D21EC9B} O43 - CFD: 24/12/2011 - 09:14:23 - [0] ----D C:\Users\bleuris\AppData\Local\{025B01F4-25DB-4141-A4F4-6090160EEF1F} O43 - CFD: 30/12/2011 - 21:29:12 - [0] ----D C:\Users\bleuris\AppData\Local\{026D43AB-4141-4026-803F-E5159806744F} O43 - CFD: 20/04/2012 - 08:42:20 - [0] ----D C:\Users\bleuris\AppData\Local\{02B8262F-50D0-4B43-918E-7AB6938C023F} O43 - CFD: 26/06/2012 - 07:50:22 - [0] ----D C:\Users\bleuris\AppData\Local\{02BEF8D1-75A7-4AB6-B3E5-0E9D242A651B} O43 - CFD: 01/05/2012 - 01:28:51 - [0] ----D C:\Users\bleuris\AppData\Local\{02C8580A-F379-48BE-AE12-211954BB23DA} O43 - CFD: 18/11/2011 - 09:08:26 - [0] ----D C:\Users\bleuris\AppData\Local\{0410B83F-50BB-4028-9D63-2CDC54AEE76C} O43 - CFD: 27/03/2012 - 20:46:36 - [0] ----D C:\Users\bleuris\AppData\Local\{04B7AF9C-EE0F-4184-8D82-A0EB8105EE2C} O43 - CFD: 10/01/2012 - 09:14:51 - [0] ----D C:\Users\bleuris\AppData\Local\{0518E6E1-3C72-4657-8B81-7F15BCC4A4C8} O43 - CFD: 15/03/2012 - 15:25:02 - [0] ----D C:\Users\bleuris\AppData\Local\{063A014E-A7F7-47B7-ADF9-3D028E715F4E} O43 - CFD: 08/01/2012 - 18:33:14 - [0] ----D C:\Users\bleuris\AppData\Local\{06BCC2B9-08DF-4903-8EF2-00AC9619DEED} O43 - CFD: 09/12/2011 - 02:01:19 - [0] ----D C:\Users\bleuris\AppData\Local\{076E2668-1F93-49E9-8FBA-8047B3ED26FA} O43 - CFD: 04/07/2012 - 08:39:15 - [0] ----D C:\Users\bleuris\AppData\Local\{07F6827A-0695-4B7B-BD00-02C4F579FFE9} O43 - CFD: 12/03/2012 - 10:30:33 - [0] ----D C:\Users\bleuris\AppData\Local\{07F9CEAF-2213-4CA9-8510-AA46DEFA1E37} O43 - CFD: 01/05/2012 - 11:17:13 - [0] ----D C:\Users\bleuris\AppData\Local\{08AC15BE-02E6-40BD-BD72-FE7DD7864029} O43 - CFD: 24/04/2012 - 17:28:16 - [0] ----D C:\Users\bleuris\AppData\Local\{09B91676-AC61-483A-A2AC-E49602D6AD36} O43 - CFD: 21/03/2012 - 21:10:38 - [0] ----D C:\Users\bleuris\AppData\Local\{09C7042C-81C5-4535-B7CE-84B8ACC273D0} O43 - CFD: 14/05/2012 - 09:20:47 - [0] ----D C:\Users\bleuris\AppData\Local\{0ACCBA72-223C-40C8-BE12-42ED0F12C205} O43 - CFD: 27/11/2011 - 21:58:21 - [0] ----D C:\Users\bleuris\AppData\Local\{0DD1FFF9-4AC8-4E95-87BE-F02E45CBF268} O43 - CFD: 02/05/2012 - 22:03:06 - [0] ----D C:\Users\bleuris\AppData\Local\{0DE1456A-6F01-4735-B33D-7D360BCD4AA7} O43 - CFD: 18/12/2011 - 14:06:52 - [0] ----D C:\Users\bleuris\AppData\Local\{0EFC316B-27EC-4D94-A639-7B9352E642DF} O43 - CFD: 27/06/2012 - 08:10:27 - [0] ----D C:\Users\bleuris\AppData\Local\{0FD43B6E-580C-4D52-9FD5-EA0CECC83411} O43 - CFD: 06/05/2012 - 11:46:01 - [0] ----D C:\Users\bleuris\AppData\Local\{0FF02141-B386-4410-8A7B-FDC987E5B24C} O43 - CFD: 16/04/2012 - 09:22:36 - [0] ----D C:\Users\bleuris\AppData\Local\{1108828E-CE60-4FA4-9B4F-4070B507C9DA} O43 - CFD: 20/09/2011 - 22:43:13 - [0] ----D C:\Users\bleuris\AppData\Local\{11523F53-2305-41A4-8541-F7EE1ACAC326} O43 - CFD: 14/06/2012 - 09:00:25 - [0] ----D C:\Users\bleuris\AppData\Local\{11AC861D-9572-4630-981A-DC09DCB59F69} O43 - CFD: 29/06/2012 - 17:20:20 - [0] ----D C:\Users\bleuris\AppData\Local\{11CF53B7-81DD-4FD9-90FE-A31D25A14CB3} O43 - CFD: 17/03/2012 - 20:06:03 - [0] ----D C:\Users\bleuris\AppData\Local\{11E7A565-E0C0-42D0-BF37-4C24BF288BB6} O43 - CFD: 24/07/2011 - 10:37:37 - [0] ----D C:\Users\bleuris\AppData\Local\{12278E5A-4155-438B-B1C8-63EB03B93B58} O43 - CFD: 30/12/2011 - 21:29:00 - [0] ----D C:\Users\bleuris\AppData\Local\{12613264-8946-4328-913E-6E51A3164202} O43 - CFD: 25/05/2012 - 09:23:24 - [0] ----D C:\Users\bleuris\AppData\Local\{1269DCAE-B7B0-4824-ACEF-08EABB92BC2D} O43 - CFD: 27/05/2012 - 17:56:42 - [0] ----D C:\Users\bleuris\AppData\Local\{127612AF-BBD0-428A-9DB5-1BD06FF66F32} O43 - CFD: 02/01/2012 - 11:55:14 - [0] ----D C:\Users\bleuris\AppData\Local\{12CB6A42-72ED-40F6-85C1-CFC5F32F218F} O43 - CFD: 27/05/2012 - 01:05:38 - [0] ----D C:\Users\bleuris\AppData\Local\{1396FDBE-7C9A-419C-AEEA-8AF6C5D0345B} O43 - CFD: 03/07/2011 - 20:57:38 - [0] ----D C:\Users\bleuris\AppData\Local\{143333D2-0BBD-4FE7-B928-02DA6CE39BB7} O43 - CFD: 11/11/2011 - 08:57:16 - [0] ----D C:\Users\bleuris\AppData\Local\{143B66E7-8741-4E92-95AD-DFF1C557C397} O43 - CFD: 03/07/2012 - 20:54:39 - [0] ----D C:\Users\bleuris\AppData\Local\{14B41466-5ABE-492E-B495-2B78159DDE1E} O43 - CFD: 08/05/2012 - 12:18:52 - [0] ----D C:\Users\bleuris\AppData\Local\{15727D48-BC7F-4146-9F3D-80C73BCAE6C0} O43 - CFD: 09/01/2012 - 10:39:48 - [0] ----D C:\Users\bleuris\AppData\Local\{162BF3C3-F76C-4D55-9982-325AFE8D7257} O43 - CFD: 30/05/2012 - 09:41:39 - [0] ----D C:\Users\bleuris\AppData\Local\{172C3082-CAF5-4C04-9213-12ACE20D6C89} O43 - CFD: 05/05/2012 - 10:14:08 - [0] ----D C:\Users\bleuris\AppData\Local\{172E637E-7AC7-4C35-807E-7BA977EC34AA} O43 - CFD: 13/06/2012 - 10:20:21 - [0] ----D C:\Users\bleuris\AppData\Local\{17788AE2-8542-4F2E-9061-1124F3F79B78} O43 - CFD: 04/01/2012 - 02:12:07 - [0] ----D C:\Users\bleuris\AppData\Local\{183E0B53-8122-418C-AE98-9F843553D469} O43 - CFD: 28/05/2012 - 06:49:30 - [0] ----D C:\Users\bleuris\AppData\Local\{191E7058-E6C9-466E-996F-3F199C62386A} O43 - CFD: 24/04/2012 - 17:28:06 - [0] ----D C:\Users\bleuris\AppData\Local\{193C0D91-09B3-4841-985D-B1234574867E} O43 - CFD: 14/09/2011 - 12:54:02 - [0] ----D C:\Users\bleuris\AppData\Local\{19B69B4C-C09D-4A00-B934-F11BC89C7DF1} O43 - CFD: 21/12/2011 - 22:04:58 - [0] ----D C:\Users\bleuris\AppData\Local\{1A9608A9-AD94-432C-8FD6-101FEF6CCE8E} O43 - CFD: 16/03/2012 - 20:11:43 - [0] ----D C:\Users\bleuris\AppData\Local\{1AC16BAB-17FA-451E-A75C-76A5DE541096} O43 - CFD: 20/01/2012 - 15:37:21 - [0] ----D C:\Users\bleuris\AppData\Local\{1B208691-C2CA-45CA-BF37-62E566C9F266} O43 - CFD: 04/06/2011 - 13:51:44 - [0] ----D C:\Users\bleuris\AppData\Local\{1B4073E4-13DF-49F3-A995-174B2C7EF2FD} O43 - CFD: 10/12/2011 - 19:19:53 - [0] ----D C:\Users\bleuris\AppData\Local\{1B9510B5-AB21-4F50-B296-4A5FB20045A4} O43 - CFD: 05/05/2012 - 10:13:58 - [0] ----D C:\Users\bleuris\AppData\Local\{1CE12F97-DA9E-4428-89FA-A41BF31CDB57} O43 - CFD: 13/05/2012 - 14:36:38 - [0] ----D C:\Users\bleuris\AppData\Local\{1D992CAA-EA50-46E8-A046-1DD379E65EC7} O43 - CFD: 01/08/2011 - 20:58:26 - [0] ----D C:\Users\bleuris\AppData\Local\{1E009D28-A35A-442C-9218-135B52F3A25C} O43 - CFD: 01/12/2011 - 09:13:52 - [0] ----D C:\Users\bleuris\AppData\Local\{1E1FCF57-C38A-4FBA-B4F2-D99A50BB155C} O43 - CFD: 12/12/2011 - 14:25:17 - [0] ----D C:\Users\bleuris\AppData\Local\{1E77011B-5309-40EA-B2EF-C6D479627DBE} O43 - CFD: 15/11/2011 - 09:12:06 - [0] ----D C:\Users\bleuris\AppData\Local\{1EBEA262-AAA8-4C38-B305-DB4102356D44} O43 - CFD: 01/07/2012 - 10:25:09 - [0] ----D C:\Users\bleuris\AppData\Local\{1ED309C0-ABB3-4367-A277-10739FFEA9E5} O43 - CFD: 10/09/2011 - 16:43:22 - [0] ----D C:\Users\bleuris\AppData\Local\{1FC6F566-ACC3-419E-BB43-B23AAACAD1BB} O43 - CFD: 31/05/2012 - 09:34:47 - [0] ----D C:\Users\bleuris\AppData\Local\{1FEA8D4D-58B7-4E09-A643-1D033A1B42FD} O43 - CFD: 21/06/2011 - 11:24:43 - [0] ----D C:\Users\bleuris\AppData\Local\{208521F1-D1DC-42C9-984D-9EA3BAEEFAF8} O43 - CFD: 08/08/2011 - 08:08:16 - [0] ----D C:\Users\bleuris\AppData\Local\{20DDBE0A-D6D0-4155-A455-59C485FD2F7F} O43 - CFD: 06/11/2011 - 21:17:00 - [0] ----D C:\Users\bleuris\AppData\Local\{2112F279-9BAE-4A3C-8807-C17B12A9F1B4} O43 - CFD: 22/05/2012 - 08:30:41 - [0] ----D C:\Users\bleuris\AppData\Local\{21151A0A-D1CB-4C0E-ABF3-C142414205FB} O43 - CFD: 18/03/2012 - 02:47:32 - [0] ----D C:\Users\bleuris\AppData\Local\{211F6959-F44D-4724-8EE8-1CEC2235E6C5} O43 - CFD: 21/08/2011 - 16:54:11 - [0] ----D C:\Users\bleuris\AppData\Local\{21BE547C-B213-467D-9A25-F1C292626B45} O43 - CFD: 12/01/2012 - 11:58:01 - [0] ----D C:\Users\bleuris\AppData\Local\{21CB8D57-8C8F-4BD7-800F-B7617681080A} O43 - CFD: 08/06/2011 - 20:59:02 - [0] ----D C:\Users\bleuris\AppData\Local\{228C3D8D-9A4F-4EF7-A37B-79E738375681} O43 - CFD: 20/01/2012 - 12:12:37 - [0] ----D C:\Users\bleuris\AppData\Local\{22947C73-F9D5-4560-84C0-0185BDBA2642} O43 - CFD: 09/01/2012 - 23:24:13 - [0] ----D C:\Users\bleuris\AppData\Local\{231648EB-3B0B-4963-90C7-955A46CF9BDD} O43 - CFD: 19/03/2012 - 11:21:35 - [0] ----D C:\Users\bleuris\AppData\Local\{2388D935-0B34-4F4A-BA52-D2506CC1C51C} O43 - CFD: 02/07/2011 - 14:16:34 - [0] ----D C:\Users\bleuris\AppData\Local\{23F61EE8-6C1D-4FF0-9300-3EA51C0CC78A} O43 - CFD: 21/07/2011 - 21:39:14 - [0] ----D C:\Users\bleuris\AppData\Local\{23FA6B14-EC35-4C41-B248-8A46968F30B3} O43 - CFD: 16/06/2012 - 21:58:59 - [0] ----D C:\Users\bleuris\AppData\Local\{24DBE15E-EFDD-439B-A57D-1DE7D47722F1} O43 - CFD: 21/06/2012 - 20:28:49 - [0] ----D C:\Users\bleuris\AppData\Local\{24F1F88B-5BF8-4FC4-AFB3-1DC04099C5AE} O43 - CFD: 01/05/2012 - 12:49:09 - [0] ----D C:\Users\bleuris\AppData\Local\{257027DB-FAB8-4A4F-871D-67B3B1E9C319} O43 - CFD: 07/12/2011 - 13:03:36 - [0] ----D C:\Users\bleuris\AppData\Local\{25938465-DD11-4B79-8BEF-5795FB60D609} O43 - CFD: 26/03/2012 - 09:01:38 - [0] ----D C:\Users\bleuris\AppData\Local\{25C7D69F-5D63-4D14-A7B0-A33FFCE824DA} O43 - CFD: 21/08/2011 - 08:53:38 - [0] ----D C:\Users\bleuris\AppData\Local\{2676206F-75A1-4C0E-A4EC-B9FA2D79559E} O43 - CFD: 30/05/2012 - 09:41:23 - [0] ----D C:\Users\bleuris\AppData\Local\{2678E8D6-EB59-491D-B736-EF23C6475935} O43 - CFD: 14/12/2011 - 09:13:26 - [0] ----D C:\Users\bleuris\AppData\Local\{26A8F36D-EAD3-484E-8010-4347A8DBBD61} O43 - CFD: 29/02/2012 - 11:55:16 - [0] ----D C:\Users\bleuris\AppData\Local\{26FB7FE6-5634-48D3-A490-169B46CE1547} O43 - CFD: 05/01/2012 - 17:39:40 - [0] ----D C:\Users\bleuris\AppData\Local\{27072E20-2A82-424F-9721-ED95E79D6E9F} O43 - CFD: 29/04/2012 - 08:15:58 - [0] ----D C:\Users\bleuris\AppData\Local\{281FC174-4ED3-420C-BF92-9BF293E5B2D2} O43 - CFD: 05/01/2012 - 09:16:22 - [0] ----D C:\Users\bleuris\AppData\Local\{286A96BA-5154-4D0A-82DF-1565028BF8CA} O43 - CFD: 22/12/2011 - 17:53:53 - [0] ----D C:\Users\bleuris\AppData\Local\{2897B6CF-A856-4E5B-A64D-FC57E3A12020} O43 - CFD: 29/03/2012 - 08:43:38 - [0] ----D C:\Users\bleuris\AppData\Local\{2A720C80-5F0E-40AB-B8F9-2137BDE15FC4} O43 - CFD: 01/03/2012 - 00:25:51 - [0] ----D C:\Users\bleuris\AppData\Local\{2ACE9645-BB74-409A-A910-19718DAD52C7} O43 - CFD: 03/02/2012 - 10:06:01 - [0] ----D C:\Users\bleuris\AppData\Local\{2B2204A7-1E90-4675-A897-003E7CE5896B} O43 - CFD: 25/04/2012 - 11:51:57 - [0] ----D C:\Users\bleuris\AppData\Local\{2B251120-1191-43CF-9FB7-BDE3CD2CD586} O43 - CFD: 25/06/2012 - 09:37:42 - [0] ----D C:\Users\bleuris\AppData\Local\{2B73F030-280C-4729-B44F-24D4BAFAFE8C} O43 - CFD: 18/11/2011 - 09:08:37 - [0] ----D C:\Users\bleuris\AppData\Local\{2BAB3AF7-5554-40CC-955C-C428FEDE83A1} O43 - CFD: 20/11/2011 - 11:17:49 - [0] ----D C:\Users\bleuris\AppData\Local\{2C87E748-62A1-4212-8FA3-FCBDE3EAB7D6} O43 - CFD: 20/01/2012 - 15:37:31 - [0] ----D C:\Users\bleuris\AppData\Local\{2CC57B80-3AC9-4012-BCE0-54FC27D495CA} O43 - CFD: 10/03/2012 - 10:58:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2D0BE0D0-5453-4AFB-A5E9-590580840A02} O43 - CFD: 18/06/2011 - 09:50:51 - [0] ----D C:\Users\bleuris\AppData\Local\{2D0D382B-8834-4B41-A40D-FF5A41DE441A} O43 - CFD: 19/04/2012 - 20:59:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2D12D428-0E94-4250-BBB8-D6F930A0B3EF} O43 - CFD: 07/07/2011 - 12:18:17 - [0] ----D C:\Users\bleuris\AppData\Local\{2F51DAA3-3B9B-44B1-A7DC-E8EE454D0357} O43 - CFD: 22/05/2012 - 22:19:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2F8FC865-10C7-4681-80FD-C46FACB8ED8B} O43 - CFD: 15/04/2012 - 20:43:19 - [0] ----D C:\Users\bleuris\AppData\Local\{2FA0CC62-A3C4-4D54-AFD6-CEF629413333} O43 - CFD: 22/12/2011 - 17:53:42 - [0] ----D C:\Users\bleuris\AppData\Local\{2FFA58AD-AB7F-443A-9AFC-43AE60404CAD} O43 - CFD: 15/06/2012 - 13:13:32 - [0] ----D C:\Users\bleuris\AppData\Local\{2FFC312B-BEA1-450B-B495-6FE34441940E} O43 - CFD: 06/01/2012 - 13:27:45 - [0] ----D C:\Users\bleuris\AppData\Local\{30323606-3238-4051-8D1A-3602FBA27DB8} O43 - CFD: 28/06/2012 - 08:54:07 - [0] ----D C:\Users\bleuris\AppData\Local\{308AE375-5EC6-4C5E-BF2C-22DD14256E99} O43 - CFD: 24/09/2011 - 19:22:19 - [0] ----D C:\Users\bleuris\AppData\Local\{30984892-FDEA-4AC8-AC0E-2F6E64C8DF28} O43 - CFD: 27/04/2012 - 23:53:58 - [0] ----D C:\Users\bleuris\AppData\Local\{337DA2AD-A0E4-4D6F-80E8-B96ED2E5EDAC} O43 - CFD: 21/06/2012 - 00:14:47 - [0] ----D C:\Users\bleuris\AppData\Local\{33F15593-36BA-4851-ADFF-BE8564B7615A} O43 - CFD: 25/06/2011 - 10:05:51 - [0] ----D C:\Users\bleuris\AppData\Local\{348F2BE9-8E69-4F85-BBDF-70FFE041F631} O43 - CFD: 21/04/2012 - 16:47:47 - [0] ----D C:\Users\bleuris\AppData\Local\{355C4025-495F-4827-8997-D4E8A616D68B} O43 - CFD: 12/12/2011 - 14:25:07 - [0] ----D C:\Users\bleuris\AppData\Local\{358979BE-AFA9-4481-A66E-EB6DF66A52AF} O43 - CFD: 30/06/2011 - 09:43:53 - [0] ----D C:\Users\bleuris\AppData\Local\{362C47AE-5E44-47DF-B92C-9868C253F54B} O43 - CFD: 05/06/2012 - 20:50:25 - [0] ----D C:\Users\bleuris\AppData\Local\{3693C348-5EE9-4DDD-ABA3-FEE325BEE425} O43 - CFD: 20/12/2011 - 17:38:51 - [0] ----D C:\Users\bleuris\AppData\Local\{37F97D0B-8F7C-4238-93BC-258BBA3BADB3} O43 - CFD: 28/05/2012 - 06:49:20 - [0] ----D C:\Users\bleuris\AppData\Local\{37F97D96-02D7-4D36-95BC-82C8E19A7415} O43 - CFD: 29/05/2012 - 08:23:44 - [0] ----D C:\Users\bleuris\AppData\Local\{37FAE100-B492-4B82-9E07-4DF3D015C060} O43 - CFD: 09/12/2011 - 10:30:19 - [0] ----D C:\Users\bleuris\AppData\Local\{3865AB43-1D67-4BD0-98B5-20CFE908AECC} O43 - CFD: 11/11/2011 - 17:23:39 - [0] ----D C:\Users\bleuris\AppData\Local\{3924EE6A-E049-40CB-B75D-9861D6F113D2} O43 - CFD: 14/03/2012 - 21:52:51 - [0] ----D C:\Users\bleuris\AppData\Local\{39460D1C-8BC9-4973-91F5-2244FFA57A5B} O43 - CFD: 25/04/2012 - 20:50:12 - [0] ----D C:\Users\bleuris\AppData\Local\{39A7751D-98E0-42DD-9F71-49F4C6C85A57} O43 - CFD: 09/12/2011 - 02:01:29 - [0] ----D C:\Users\bleuris\AppData\Local\{39B82BF8-5D6C-43E3-936C-A3945B07CC3C} O43 - CFD: 08/11/2011 - 09:09:32 - [0] ----D C:\Users\bleuris\AppData\Local\{39DE214C-9F7D-4685-8C6A-97DAED05F12C} O43 - CFD: 10/04/2012 - 22:33:45 - [0] ----D C:\Users\bleuris\AppData\Local\{3A0255A2-2872-4C7C-A293-0C355A970860} O43 - CFD: 27/03/2012 - 08:42:00 - [0] ----D C:\Users\bleuris\AppData\Local\{3A722EB2-186F-40F4-B9E9-68A395336000} O43 - CFD: 14/09/2011 - 12:54:13 - [0] ----D C:\Users\bleuris\AppData\Local\{3A96EA60-179A-4525-9BC4-55C5A009E8A4} O43 - CFD: 10/06/2011 - 17:27:49 - [0] ----D C:\Users\bleuris\AppData\Local\{3B56035C-F1FC-409F-B053-8DDCF724FA50} O43 - CFD: 26/06/2012 - 07:50:32 - [0] ----D C:\Users\bleuris\AppData\Local\{3B960E7F-358E-48C6-8BE2-6E4AD22EB5DA} O43 - CFD: 08/11/2011 - 09:09:43 - [0] ----D C:\Users\bleuris\AppData\Local\{3BC9F475-A114-4F8F-98C0-AFD5A4BE24E6} O43 - CFD: 01/05/2012 - 11:17:26 - [0] ----D C:\Users\bleuris\AppData\Local\{3C089E7C-EB9B-466C-BCF9-DDD8D1472977} O43 - CFD: 04/02/2012 - 11:04:21 - [0] ----D C:\Users\bleuris\AppData\Local\{3D23305D-88E4-4F00-89FE-1D52363B5C19} O43 - CFD: 05/09/2011 - 08:19:30 - [0] ----D C:\Users\bleuris\AppData\Local\{3D2FF79F-97BA-4922-A2FA-5A43D5845D33} O43 - CFD: 05/06/2012 - 08:40:09 - [0] ----D C:\Users\bleuris\AppData\Local\{3D6CF5AE-4E1D-4173-84A3-5F188F7BE26B} O43 - CFD: 11/07/2011 - 09:40:54 - [0] ----D C:\Users\bleuris\AppData\Local\{3D7B694D-213A-47FB-BAC4-52D453E8E65A} O43 - CFD: 13/01/2012 - 12:57:09 - [0] ----D C:\Users\bleuris\AppData\Local\{3DA22AED-3795-4B45-A194-A329FEF90D5C} O43 - CFD: 16/07/2011 - 00:21:57 - [0] ----D C:\Users\bleuris\AppData\Local\{3E48BF35-B37C-4440-8979-30B0517750D0} O43 - CFD: 05/05/2012 - 22:50:17 - [0] ----D C:\Users\bleuris\AppData\Local\{3E7A7B35-CB25-4E95-968C-BE55B84808AB} O43 - CFD: 08/04/2012 - 11:32:50 - [0] ----D C:\Users\bleuris\AppData\Local\{3EB85464-534D-430C-A4E6-8487F2AB2B79} O43 - CFD: 01/07/2012 - 10:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{3FED56B3-7EC8-452D-BD85-3675F2CBB981} O43 - CFD: 22/05/2012 - 08:30:30 - [0] ----D C:\Users\bleuris\AppData\Local\{404D5FD2-61B6-4AEA-807B-DC18519C4E80} O43 - CFD: 01/03/2012 - 00:25:54 - [0] ----D C:\Users\bleuris\AppData\Local\{4090F468-9764-49E9-9C89-397D503740C7} O43 - CFD: 25/04/2012 - 11:51:45 - [0] ----D C:\Users\bleuris\AppData\Local\{40C17DE5-A96D-4F49-8035-D95A94BF9765} O43 - CFD: 05/04/2012 - 18:19:46 - [0] ----D C:\Users\bleuris\AppData\Local\{40DCA71C-2226-4B8C-A1FA-9A5E8D25D565} O43 - CFD: 08/08/2011 - 08:08:31 - [0] ----D C:\Users\bleuris\AppData\Local\{4229152C-9E7A-45B7-B886-7D1CAD920B54} O43 - CFD: 19/11/2011 - 10:33:22 - [0] ----D C:\Users\bleuris\AppData\Local\{430B1F5A-E58F-4263-B5ED-9371B9F2DD7C} O43 - CFD: 09/11/2011 - 09:28:47 - [0] ----D C:\Users\bleuris\AppData\Local\{431BAB67-C60C-4A21-A8EB-964457FEB7D5} O43 - CFD: 23/03/2012 - 14:12:27 - [0] ----D C:\Users\bleuris\AppData\Local\{43AAAC4D-7B93-4A76-9667-D3FC2E8F10FC} O43 - CFD: 27/04/2012 - 17:12:56 - [0] ----D C:\Users\bleuris\AppData\Local\{43E1B722-4745-4B28-9572-6474F4645C2E} O43 - CFD: 19/01/2012 - 16:33:06 - [0] ----D C:\Users\bleuris\AppData\Local\{44C8C880-3816-4C3D-B29D-3DCA186A9EC6} O43 - CFD: 12/04/2012 - 18:49:07 - [0] ----D C:\Users\bleuris\AppData\Local\{44DC82B1-1460-4B41-8E98-2A2C6EDFDF58} O43 - CFD: 18/12/2011 - 00:37:27 - [0] ----D C:\Users\bleuris\AppData\Local\{4571D622-2394-4984-835B-590D33800996} O43 - CFD: 27/06/2011 - 11:25:10 - [0] ----D C:\Users\bleuris\AppData\Local\{45B397C8-AAF9-4687-8DC4-195C2CE5D0F1} O43 - CFD: 15/05/2012 - 09:38:09 - [0] ----D C:\Users\bleuris\AppData\Local\{45D74DA9-1E51-4E81-B1CC-B1CBD7C86B4A} O43 - CFD: 19/01/2012 - 13:52:35 - [0] ----D C:\Users\bleuris\AppData\Local\{46233FAE-CFA5-4E1A-B7FF-8BA0637C7ECD} O43 - CFD: 01/03/2012 - 23:00:51 - [0] ----D C:\Users\bleuris\AppData\Local\{4664C892-5BEF-499E-BF88-2E196693A365} O43 - CFD: 15/11/2011 - 09:11:53 - [0] ----D C:\Users\bleuris\AppData\Local\{466705B4-4704-4650-82F8-BDFA05533C41} O43 - CFD: 06/01/2012 - 13:27:55 - [0] ----D C:\Users\bleuris\AppData\Local\{46D8FBA7-9340-4070-9D99-16D7B11C1C74} O43 - CFD: 27/05/2012 - 17:56:34 - [0] ----D C:\Users\bleuris\AppData\Local\{46DA9AF3-A24D-4F86-9673-ED2B938D2936} O43 - CFD: 25/02/2012 - 19:41:05 - [0] ----D C:\Users\bleuris\AppData\Local\{4795D780-0BE5-4ABD-B189-7ACA5B244F18} O43 - CFD: 19/04/2012 - 20:59:00 - [0] ----D C:\Users\bleuris\AppData\Local\{47F0E47D-3505-4A28-AAC7-4EDDB6D3B62E} O43 - CFD: 07/12/2011 - 09:12:27 - [0] ----D C:\Users\bleuris\AppData\Local\{4845A33D-6295-4B80-A852-18DEB485FC3D} O43 - CFD: 12/04/2012 - 18:48:56 - [0] ----D C:\Users\bleuris\AppData\Local\{48F42B30-1006-49EC-BE3A-DB5D19D9DC89} O43 - CFD: 28/12/2011 - 09:13:28 - [0] ----D C:\Users\bleuris\AppData\Local\{4914907F-5B75-401E-8067-2C9BB7EE30DF} O43 - CFD: 26/02/2012 - 19:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{49150D75-C131-4A29-84EB-49822DCC5ADE} O43 - CFD: 22/11/2011 - 10:13:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4985D83D-A7A1-4D94-8C23-1AEB8324217F} O43 - CFD: 29/01/2012 - 11:30:26 - [0] ----D C:\Users\bleuris\AppData\Local\{4AC28FAA-2041-4CFC-A224-5BC37B8BC38C} O43 - CFD: 24/12/2011 - 09:14:11 - [0] ----D C:\Users\bleuris\AppData\Local\{4B09CED5-474C-455E-944A-5945BA2C29D6} O43 - CFD: 07/12/2011 - 13:03:38 - [0] ----D C:\Users\bleuris\AppData\Local\{4B23A1E7-5225-4E09-B256-D25AA02749A7} O43 - CFD: 24/11/2011 - 09:24:20 - [0] ----D C:\Users\bleuris\AppData\Local\{4BE1DD3F-66AB-4D85-86AA-F18E35A6E9D2} O43 - CFD: 21/01/2012 - 15:22:57 - [0] ----D C:\Users\bleuris\AppData\Local\{4CE93F2F-6DD5-43E2-9B44-66D9DCA94855} O43 - CFD: 17/06/2011 - 08:35:53 - [0] ----D C:\Users\bleuris\AppData\Local\{4CEB3152-9FF2-47BE-B860-2BEAB4CEC2BE} O43 - CFD: 29/02/2012 - 11:55:26 - [0] ----D C:\Users\bleuris\AppData\Local\{4CEB7191-D72B-4DC7-8E94-B46908A4824B} O43 - CFD: 29/01/2012 - 11:30:15 - [0] ----D C:\Users\bleuris\AppData\Local\{4DC29DDC-E054-41FF-AB56-B2FDF73DAC64} O43 - CFD: 28/01/2012 - 18:45:44 - [0] ----D C:\Users\bleuris\AppData\Local\{4E6F36E2-F8EE-46E0-95D3-329A85687FFA} O43 - CFD: 23/11/2011 - 13:05:47 - [0] ----D C:\Users\bleuris\AppData\Local\{4E8EFFC1-BB1E-4F7D-B41A-A05FD0DAE783} O43 - CFD: 14/04/2012 - 10:54:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4EC2A7D6-B27F-4EEC-AA73-1B0AAF6C0FFD} O43 - CFD: 18/12/2011 - 00:37:39 - [0] ----D C:\Users\bleuris\AppData\Local\{4F86E644-9ABC-4590-A055-4ADBCDF5AD70} O43 - CFD: 21/06/2012 - 00:15:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4FB6F87C-66E1-4340-AB57-F36A62D46C76} O43 - CFD: 07/08/2011 - 22:36:10 - [0] ----D C:\Users\bleuris\AppData\Local\{4FC070A1-81D1-4741-B2FA-1B1AE1449932} O43 - CFD: 26/03/2012 - 09:01:48 - [0] ----D C:\Users\bleuris\AppData\Local\{4FE2BFAC-D170-4B69-AEC8-D61CDF6CFCF8} O43 - CFD: 23/05/2012 - 12:18:22 - [0] ----D C:\Users\bleuris\AppData\Local\{503F6226-4FAA-460D-AC81-E53767457669} O43 - CFD: 19/01/2012 - 16:33:09 - [0] ----D C:\Users\bleuris\AppData\Local\{506B3FFA-554D-41ED-95DA-9E0609EB3E53} O43 - CFD: 17/03/2012 - 00:34:30 - [0] ----D C:\Users\bleuris\AppData\Local\{50F76FA1-B0C2-4E4A-9604-CA61D33405C7} O43 - CFD: 03/01/2012 - 11:46:40 - [0] ----D C:\Users\bleuris\AppData\Local\{5135A1FB-197C-4891-B50B-8A38B8AD51A3} O43 - CFD: 17/06/2012 - 18:59:18 - [0] ----D C:\Users\bleuris\AppData\Local\{515C6963-E057-4EA3-9D5F-FFE292654422} O43 - CFD: 06/12/2011 - 17:43:29 - [0] ----D C:\Users\bleuris\AppData\Local\{51E0EB8A-D323-4B49-8CA9-22566046E15F} O43 - CFD: 29/04/2012 - 08:15:47 - [0] ----D C:\Users\bleuris\AppData\Local\{52D04BE2-F06E-40ED-B6ED-06EB33193EC7} O43 - CFD: 21/06/2012 - 20:28:38 - [0] ----D C:\Users\bleuris\AppData\Local\{52FF56E7-F533-43A9-9A6A-F100169857BE} O43 - CFD: 09/11/2011 - 09:28:37 - [0] ----D C:\Users\bleuris\AppData\Local\{54928AA1-1385-403C-850C-F3092593E267} O43 - CFD: 10/03/2012 - 10:57:59 - [0] ----D C:\Users\bleuris\AppData\Local\{55637A22-4061-413A-9265-1D2127D8BC1D} O43 - CFD: 16/04/2012 - 09:22:51 - [0] ----D C:\Users\bleuris\AppData\Local\{55C9DE1B-DE13-49D2-8AF2-942C2AC1C7DC} O43 - CFD: 25/06/2012 - 09:37:41 - [0] ----D C:\Users\bleuris\AppData\Local\{572B54E1-5CD3-4F66-BCBC-E4893B3C92A9} O43 - CFD: 23/01/2012 - 19:54:37 - [0] ----D C:\Users\bleuris\AppData\Local\{579C769B-9548-4E56-9C1D-54373F909EB3} O43 - CFD: 28/03/2012 - 13:16:46 - [0] ----D C:\Users\bleuris\AppData\Local\{587DC06D-2155-43FD-B919-1EF394ECE7DB} O43 - CFD: 04/12/2011 - 22:08:03 - [0] ----D C:\Users\bleuris\AppData\Local\{5893C2FA-8E5D-4517-8F48-346A224D7C55} O43 - CFD: 17/04/2012 - 10:13:28 - [0] ----D C:\Users\bleuris\AppData\Local\{58D27096-A86E-4DA5-B3CB-A375DC5EBDD0} O43 - CFD: 01/03/2012 - 23:01:03 - [0] ----D C:\Users\bleuris\AppData\Local\{58F6E09B-682F-4C13-A55A-A00B68B446B7} O43 - CFD: 08/03/2012 - 22:16:50 - [0] ----D C:\Users\bleuris\AppData\Local\{59352D35-C470-43E8-B90B-577EB22060FE} O43 - CFD: 23/04/2012 - 08:50:20 - [0] ----D C:\Users\bleuris\AppData\Local\{593DE651-DBBA-4400-904E-BD5D54B0A847} O43 - CFD: 11/04/2012 - 20:47:09 - [0] ----D C:\Users\bleuris\AppData\Local\{59F9821F-6811-4F94-91F0-591AAF40A61F} O43 - CFD: 13/03/2012 - 10:02:47 - [0] ----D C:\Users\bleuris\AppData\Local\{5B3CBE1C-57B3-413B-95FB-BBA509FEE0BA} O43 - CFD: 23/04/2012 - 22:26:30 - [0] ----D C:\Users\bleuris\AppData\Local\{5B487B4A-6AA9-47DF-ACBD-D102B5062DC2} O43 - CFD: 16/03/2012 - 20:11:32 - [0] ----D C:\Users\bleuris\AppData\Local\{5B53C9D9-1E5B-4B6F-AE22-44BA0CE2AD84} O43 - CFD: 08/03/2012 - 10:22:04 - [0] ----D C:\Users\bleuris\AppData\Local\{5B8C7D6E-6081-4F5A-A344-6FC3DD8C62BD} O43 - CFD: 24/09/2011 - 19:22:30 - [0] ----D C:\Users\bleuris\AppData\Local\{5D377755-3773-492D-936F-2DEE8AD650DF} O43 - CFD: 05/01/2012 - 09:16:32 - [0] ----D C:\Users\bleuris\AppData\Local\{5D7B13D6-14F3-4674-832D-8F9B56F499BC} O43 - CFD: 19/07/2011 - 20:53:11 - [0] ----D C:\Users\bleuris\AppData\Local\{5DC0BE99-1A26-42E9-804C-8EAEFDE44398} O43 - CFD: 06/05/2012 - 11:45:51 - [0] ----D C:\Users\bleuris\AppData\Local\{5E01016A-F688-4734-9623-4A8A9EAB4E11} O43 - CFD: 24/06/2012 - 11:18:16 - [0] ----D C:\Users\bleuris\AppData\Local\{5E1E2918-7F45-4786-A279-74BFB860C4C9} O43 - CFD: 19/08/2011 - 12:10:13 - [0] ----D C:\Users\bleuris\AppData\Local\{5F720497-E586-400F-8062-EA09A192FEB4} O43 - CFD: 23/03/2012 - 23:37:16 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF2A7EB-35A5-41E6-9241-4576E5BBF20F} O43 - CFD: 28/12/2011 - 09:13:17 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF34146-8E91-4377-9AC0-CCBAE2F8C88F} O43 - CFD: 25/07/2011 - 17:51:44 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF95208-0D89-443F-9550-AC4D1B1905D3} O43 - CFD: 24/04/2012 - 09:16:07 - [0] ----D C:\Users\bleuris\AppData\Local\{61871D4B-7635-4E32-93F5-FA0AB87B1AC1} O43 - CFD: 14/03/2012 - 21:52:40 - [0] ----D C:\Users\bleuris\AppData\Local\{63D13972-A741-4871-88F7-9242DD38F2B1} O43 - CFD: 23/01/2012 - 19:54:47 - [0] ----D C:\Users\bleuris\AppData\Local\{63D9A2CA-AD70-4B63-B0DD-86A45B416B52} O43 - CFD: 28/06/2012 - 08:53:56 - [0] ----D C:\Users\bleuris\AppData\Local\{6434DE2E-8DCB-468C-84F8-0B2107425C4A} O43 - CFD: 28/11/2011 - 09:16:13 - [0] ----D C:\Users\bleuris\AppData\Local\{656A6592-7BE6-4AAB-973B-C347262C859F} O43 - CFD: 25/02/2012 - 19:40:47 - [0] ----D C:\Users\bleuris\AppData\Local\{65ED38D7-802A-40EF-B182-0206169E7BCE} O43 - CFD: 28/11/2011 - 09:16:25 - [0] ----D C:\Users\bleuris\AppData\Local\{6692D8B2-61DE-4BF3-9EBC-FF60A6CE66F5} O43 - CFD: 26/05/2012 - 00:31:31 - [0] ----D C:\Users\bleuris\AppData\Local\{6734A2A4-73C1-4798-ACB0-400AF8E39DFE} O43 - CFD: 26/04/2012 - 09:41:20 - [0] ----D C:\Users\bleuris\AppData\Local\{67F75A66-7D64-40EC-A94C-5C87149408AA} O43 - CFD: 02/10/2011 - 16:12:18 - [0] ----D C:\Users\bleuris\AppData\Local\{6813B55E-3821-4F00-B98D-3596BDCCC007} O43 - CFD: 21/04/2012 - 08:42:35 - [0] ----D C:\Users\bleuris\AppData\Local\{68AE4EAE-E27B-49A6-B565-D036DB8E3794} O43 - CFD: 03/06/2012 - 11:15:59 - [0] ----D C:\Users\bleuris\AppData\Local\{68CA9EA2-9971-4B89-B3A4-08DC9390D335} O43 - CFD: 13/11/2011 - 13:43:45 - [0] ----D C:\Users\bleuris\AppData\Local\{6958682A-AF1F-4B6E-878B-465AADE868E2} O43 - CFD: 01/12/2011 - 09:13:57 - [0] ----D C:\Users\bleuris\AppData\Local\{69650C0A-E2EF-4F06-B434-A82F1A602683} O43 - CFD: 10/05/2012 - 19:28:21 - [0] ----D C:\Users\bleuris\AppData\Local\{6A701AFA-68E4-46F1-9680-4A4F540F1F43} O43 - CFD: 30/03/2012 - 09:29:04 - [0] ----D C:\Users\bleuris\AppData\Local\{6BD6F3DD-754D-4854-A662-D684EC0DD780} O43 - CFD: 18/04/2012 - 20:33:51 - [0] ----D C:\Users\bleuris\AppData\Local\{6C49211E-A352-4E95-9F2B-885617C4CEE6} O43 - CFD: 05/04/2012 - 18:19:36 - [0] ----D C:\Users\bleuris\AppData\Local\{6C4E386B-D891-459E-8EA0-D41296836752} O43 - CFD: 28/01/2012 - 18:45:33 - [0] ----D C:\Users\bleuris\AppData\Local\{6CCDA93A-67F6-4527-BFE3-121BC1C0B6F5} O43 - CFD: 26/07/2011 - 20:49:30 - [0] ----D C:\Users\bleuris\AppData\Local\{6CF5AD6B-1579-4641-AEED-8792543CF886} O43 - CFD: 07/07/2011 - 19:06:49 - [0] ----D C:\Users\bleuris\AppData\Local\{6CFBB534-A36F-48A9-A3E4-FB03974C8031} O43 - CFD: 01/05/2012 - 12:48:43 - [0] ----D C:\Users\bleuris\AppData\Local\{6F4C7642-7060-401A-BAE9-E4D8CF48201D} O43 - CFD: 13/07/2011 - 21:04:42 - [0] ----D C:\Users\bleuris\AppData\Local\{6FFE75C5-2CD3-443C-BF89-6438FAF2C754} O43 - CFD: 31/03/2012 - 12:03:13 - [0] ----D C:\Users\bleuris\AppData\Local\{7019ED0C-14B6-4312-AA80-68491AFFF1EA} O43 - CFD: 19/08/2011 - 12:10:10 - [0] ----D C:\Users\bleuris\AppData\Local\{70352DDA-1D3D-4740-B79E-892743C6372C} O43 - CFD: 05/04/2012 - 16:27:36 - [0] ----D C:\Users\bleuris\AppData\Local\{70613F18-BA36-417F-9D50-AB81014859DD} O43 - CFD: 18/03/2012 - 16:02:47 - [0] ----D C:\Users\bleuris\AppData\Local\{7138083E-F241-4C85-B59A-664B405033C4} O43 - CFD: 14/11/2011 - 14:54:57 - [0] ----D C:\Users\bleuris\AppData\Local\{71E4B8E2-681A-4B06-B1E5-90D52D8DB8B6} O43 - CFD: 21/12/2011 - 22:04:48 - [0] ----D C:\Users\bleuris\AppData\Local\{726708C2-CEAA-426B-9349-ED2C75082EFF} O43 - CFD: 03/02/2012 - 17:09:18 - [0] ----D C:\Users\bleuris\AppData\Local\{72840428-091E-44CA-A283-C3574840AAAF} O43 - CFD: 20/06/2011 - 09:12:17 - [0] ----D C:\Users\bleuris\AppData\Local\{72869EFA-25F0-4F9B-BB7F-D1C6C8BB2383} O43 - CFD: 07/11/2011 - 21:19:28 - [0] ----D C:\Users\bleuris\AppData\Local\{72BF44D7-D771-4738-84D7-329FE4717782} O43 - CFD: 02/05/2012 - 22:03:21 - [0] ----D C:\Users\bleuris\AppData\Local\{72CC3784-885F-4E20-A4EC-930D94B66F67} O43 - CFD: 11/11/2011 - 08:57:03 - [0] ----D C:\Users\bleuris\AppData\Local\{73095D17-7AF7-4491-89CA-88B65D1ABBAA} O43 - CFD: 10/05/2012 - 19:28:10 - [0] ----D C:\Users\bleuris\AppData\Local\{739EE1C3-E484-4701-874D-EA964FAB190C} O43 - CFD: 06/12/2011 - 10:49:41 - [0] ----D C:\Users\bleuris\AppData\Local\{73FA20B2-6363-4F2E-834B-113EB6A46C6E} O43 - CFD: 05/02/2012 - 10:42:15 - [0] ----D C:\Users\bleuris\AppData\Local\{74432A7C-5A12-48A3-A700-99DEF6B5D060} O43 - CFD: 03/06/2012 - 11:16:10 - [0] ----D C:\Users\bleuris\AppData\Local\{74F37BD2-7AB5-46FB-A6D1-EAB687ECC22D} O43 - CFD: 22/05/2012 - 22:19:43 - [0] ----D C:\Users\bleuris\AppData\Local\{74F4842B-0B42-44AF-915B-5F059CE9AA98} O43 - CFD: 16/08/2011 - 11:15:12 - [0] ----D C:\Users\bleuris\AppData\Local\{760A25FB-09E6-4354-93FB-34DD35FF9756} O43 - CFD: 03/03/2012 - 18:44:25 - [0] ----D C:\Users\bleuris\AppData\Local\{77A784CD-7205-4710-88AC-FCF5986CB21C} O43 - CFD: 26/06/2012 - 20:40:35 - [0] ----D C:\Users\bleuris\AppData\Local\{7916FB1A-3B53-44CB-A349-3FEDC61959E1} O43 - CFD: 14/12/2011 - 09:13:37 - [0] ----D C:\Users\bleuris\AppData\Local\{791B8779-07E7-48B1-808E-AB5FD1114011} O43 - CFD: 18/01/2012 - 10:08:24 - [0] ----D C:\Users\bleuris\AppData\Local\{7953DBB4-F844-436C-A704-240E964BAA14} O43 - CFD: 12/08/2011 - 12:17:55 - [0] ----D C:\Users\bleuris\AppData\Local\{795AE224-4310-4EA6-A69A-0FAEB758B00D} O43 - CFD: 11/06/2012 - 11:16:38 - [0] ----D C:\Users\bleuris\AppData\Local\{79C7FA57-C28D-4815-9E53-96462B60653B} O43 - CFD: 30/04/2012 - 09:53:13 - [0] ----D C:\Users\bleuris\AppData\Local\{7A01F51B-C07E-4BBF-948F-775A33AB2BBC} O43 - CFD: 14/08/2011 - 14:11:47 - [0] ----D C:\Users\bleuris\AppData\Local\{7A12CDBF-687F-4F8B-B742-6D3666737D2E} O43 - CFD: 26/11/2011 - 11:30:56 - [0] ----D C:\Users\bleuris\AppData\Local\{7A7CFBD8-6825-40CA-AB7F-7D1B00306C04} O43 - CFD: 25/03/2012 - 08:12:16 - [0] ----D C:\Users\bleuris\AppData\Local\{7A908354-6226-464E-91CE-EDE4CEEDF8A9} O43 - CFD: 25/04/2012 - 08:56:44 - [0] ----D C:\Users\bleuris\AppData\Local\{7AB3A608-1ACB-4FB1-A634-29B2DC709CF0} O43 - CFD: 16/04/2012 - 14:30:51 - [0] ----D C:\Users\bleuris\AppData\Local\{7AC95D44-2F57-42C0-8728-6C61897D8047} O43 - CFD: 20/11/2011 - 11:18:02 - [0] ----D C:\Users\bleuris\AppData\Local\{7BAE2E10-C588-4021-B35B-7F4B4AA75F1F} O43 - CFD: 21/08/2011 - 16:54:24 - [0] ----D C:\Users\bleuris\AppData\Local\{7C0260D8-FEE0-41C4-9E0B-FA39EF0E0D4A} O43 - CFD: 12/04/2012 - 08:23:05 - [0] ----D C:\Users\bleuris\AppData\Local\{7C1D8331-377C-41CB-B7B4-0FA22879B8CB} O43 - CFD: 16/06/2012 - 01:16:42 - [0] ----D C:\Users\bleuris\AppData\Local\{7C82040B-32F7-42DE-9FD9-927B2C409585} O43 - CFD: 05/01/2012 - 17:39:29 - [0] ----D C:\Users\bleuris\AppData\Local\{7F521AF3-DD13-47A9-9217-0EBABFD60C6C} O43 - CFD: 12/03/2012 - 10:30:44 - [0] ----D C:\Users\bleuris\AppData\Local\{7FC84CDF-20E7-4A36-863C-A130DA8C128E} O43 - CFD: 08/09/2011 - 10:46:41 - [0] ----D C:\Users\bleuris\AppData\Local\{8041C33A-D089-4AD5-8C9E-56DE7AE25716} O43 - CFD: 25/11/2011 - 14:05:26 - [0] ----D C:\Users\bleuris\AppData\Local\{80CE0285-4842-4ED0-8FD2-5AF177667351} O43 - CFD: 12/06/2012 - 09:39:06 - [0] ----D C:\Users\bleuris\AppData\Local\{810C6C0A-6420-429F-93C5-02BBF9B02481} O43 - CFD: 28/03/2012 - 21:00:18 - [0] ----D C:\Users\bleuris\AppData\Local\{815C6A7F-6CEF-4FDE-8B6C-31820C5E7707} O43 - CFD: 02/06/2011 - 13:20:36 - [0] ----D C:\Users\bleuris\AppData\Local\{8174CA33-6145-4409-A36E-6CC4E1FA798B} O43 - CFD: 14/12/2011 - 13:03:46 - [0] ----D C:\Users\bleuris\AppData\Local\{81916C97-6846-46CB-9F01-0AA10D33F1F5} O43 - CFD: 07/12/2011 - 09:12:38 - [0] ----D C:\Users\bleuris\AppData\Local\{82A539D4-54B5-4708-918A-DCA6D2D7F01E} O43 - CFD: 15/04/2012 - 20:43:04 - [0] ----D C:\Users\bleuris\AppData\Local\{82A9589F-14A1-49B0-92BF-2C04104BFB9A} O43 - CFD: 30/06/2012 - 08:47:33 - [0] ----D C:\Users\bleuris\AppData\Local\{837B501A-FC31-4A92-B6FE-871956148A9E} O43 - CFD: 27/04/2012 - 10:52:22 - [0] ----D C:\Users\bleuris\AppData\Local\{85F398F0-3C0D-4162-8BB4-048A51F8F847} O43 - CFD: 20/04/2012 - 08:42:10 - [0] ----D C:\Users\bleuris\AppData\Local\{8647B20A-F9E1-47DA-AB70-0827C2EFCF0E} O43 - CFD: 19/06/2012 - 09:58:26 - [0] ----D C:\Users\bleuris\AppData\Local\{8728C53A-8585-4FD5-A4C1-F71FCBCC0E9A} O43 - CFD: 19/04/2012 - 09:05:28 - [0] ----D C:\Users\bleuris\AppData\Local\{876C665A-8D1B-4025-9262-8447D13AEECA} O43 - CFD: 07/03/2012 - 22:59:44 - [0] ----D C:\Users\bleuris\AppData\Local\{88C1F1AB-053C-496D-BC60-DB3413BD5195} O43 - CFD: 08/01/2012 - 18:32:51 - [0] ----D C:\Users\bleuris\AppData\Local\{890F7BCD-6F6B-411B-B076-7C103659315C} O43 - CFD: 04/05/2012 - 08:20:15 - [0] ----D C:\Users\bleuris\AppData\Local\{8A1D4585-57E4-47E2-9E69-700D0D9F039B} O43 - CFD: 08/03/2012 - 10:21:52 - [0] ----D C:\Users\bleuris\AppData\Local\{8B7A789A-4F37-4D8C-A6CF-94C972CAFE34} O43 - CFD: 05/06/2012 - 08:39:57 - [0] ----D C:\Users\bleuris\AppData\Local\{8BD49411-F9D4-44E1-A89A-1D18FD2F6EA4} O43 - CFD: 01/07/2012 - 23:28:52 - [0] ----D C:\Users\bleuris\AppData\Local\{8BE01B88-8D2D-4586-8FDA-5BAE56F27DC1} O43 - CFD: 29/04/2012 - 14:16:45 - [0] ----D C:\Users\bleuris\AppData\Local\{8C41113E-3A07-40E3-A2DE-4F5DB5C225A8} O43 - CFD: 03/04/2012 - 20:23:21 - [0] ----D C:\Users\bleuris\AppData\Local\{8D809C37-E62F-4411-82E4-CFFBBB076F67} O43 - CFD: 04/04/2012 - 23:16:42 - [0] ----D C:\Users\bleuris\AppData\Local\{8DB20C13-57EC-4F67-92CD-B13DBA858AE8} O43 - CFD: 14/08/2011 - 14:11:20 - [0] ----D C:\Users\bleuris\AppData\Local\{8E39D014-A236-4A1D-A494-EB5272D7DFA0} O43 - CFD: 24/07/2011 - 17:48:49 - [0] ----D C:\Users\bleuris\AppData\Local\{8EA16E24-87F5-4445-BA60-7B941F2AD455} O43 - CFD: 31/05/2012 - 22:56:04 - [0] ----D C:\Users\bleuris\AppData\Local\{8EC39B7C-4C71-49C1-ABA7-348D7EFBA926} O43 - CFD: 15/05/2012 - 09:38:22 - [0] ----D C:\Users\bleuris\AppData\Local\{8EF6A6EA-60CE-4410-A3D4-7C4FFD35C9A3} O43 - CFD: 18/07/2011 - 19:00:18 - [0] ----D C:\Users\bleuris\AppData\Local\{8FFDF2A8-97CF-4E9E-A5CA-4B6D08D807AF} O43 - CFD: 01/12/2011 - 21:37:21 - [0] ----D C:\Users\bleuris\AppData\Local\{901BB7F5-7F17-46CF-80DD-74D86722CC13} O43 - CFD: 28/05/2012 - 19:04:08 - [0] ----D C:\Users\bleuris\AppData\Local\{9056D54F-40D2-4495-A526-8355CF8D6953} O43 - CFD: 04/07/2012 - 08:39:25 - [0] ----D C:\Users\bleuris\AppData\Local\{91595303-2298-4A07-9335-C54AD236E354} O43 - CFD: 28/02/2012 - 00:16:13 - [0] ----D C:\Users\bleuris\AppData\Local\{91C4901F-6B9B-4925-A5E7-511064340759} O43 - CFD: 11/06/2012 - 11:16:28 - [0] ----D C:\Users\bleuris\AppData\Local\{91E6A233-D026-4FE1-AC7D-2653A9EDE533} O43 - CFD: 03/06/2011 - 11:15:35 - [0] ----D C:\Users\bleuris\AppData\Local\{91F18416-7348-4ED6-AC27-1B67D425A7F9} O43 - CFD: 05/04/2012 - 08:46:39 - [0] ----D C:\Users\bleuris\AppData\Local\{9228DD16-E0CB-4AFF-BE20-4DCFAE0FAD88} O43 - CFD: 11/12/2011 - 01:27:01 - [0] ----D C:\Users\bleuris\AppData\Local\{947DECEE-0A08-4533-A4DB-69FB47467492} O43 - CFD: 24/04/2012 - 09:16:17 - [0] ----D C:\Users\bleuris\AppData\Local\{9485816A-AD49-4E4B-B56F-55477C1E2CB2} O43 - CFD: 09/06/2012 - 09:13:30 - [0] ----D C:\Users\bleuris\AppData\Local\{950120DE-1094-4588-9E4C-2792F7A65E34} O43 - CFD: 24/06/2012 - 11:18:35 - [0] ----D C:\Users\bleuris\AppData\Local\{95779295-50AD-40DD-BE0E-8FB6CDA0E13A} O43 - CFD: 20/03/2012 - 21:45:39 - [0] ----D C:\Users\bleuris\AppData\Local\{960809B3-3859-4C5F-85F1-C35D7803BA83} O43 - CFD: 09/06/2011 - 16:15:47 - [0] ----D C:\Users\bleuris\AppData\Local\{96515F80-B7B2-44CA-961A-D3DE0B43E304} O43 - CFD: 02/01/2012 - 11:55:02 - [0] ----D C:\Users\bleuris\AppData\Local\{975D4ED4-54EF-42D7-A454-294FBE204A04} O43 - CFD: 05/07/2012 - 09:35:22 - [0] ----D C:\Users\bleuris\AppData\Local\{97EECFF3-F95E-4E05-A573-83D2E47D53DC} O43 - CFD: 18/12/2011 - 14:06:41 - [0] ----D C:\Users\bleuris\AppData\Local\{9891DF01-693C-4F09-9387-461728DB0ABB} O43 - CFD: 21/04/2012 - 08:42:34 - [0] ----D C:\Users\bleuris\AppData\Local\{98B3494A-A02E-46CC-958E-93205CC10A48} O43 - CFD: 27/05/2012 - 11:37:47 - [0] ----D C:\Users\bleuris\AppData\Local\{98BCFFD8-2763-4122-863B-437BBD34DADA} O43 - CFD: 28/04/2012 - 11:08:42 - [0] ----D C:\Users\bleuris\AppData\Local\{9A68119A-8B24-4BF3-A9B3-43868FEFF588} O43 - CFD: 09/06/2012 - 00:42:30 - [0] ----D C:\Users\bleuris\AppData\Local\{9A74A656-E90D-467B-9A16-B0DEE0CDC429} O43 - CFD: 30/04/2012 - 09:53:28 - [0] ----D C:\Users\bleuris\AppData\Local\{9A99857F-14BD-4458-974E-CC48F4D48D91} O43 - CFD: 24/03/2012 - 13:38:43 - [0] ----D C:\Users\bleuris\AppData\Local\{9B381DCA-9EEF-4AA6-AF82-D03E3F435BC2} O43 - CFD: 28/04/2012 - 11:08:37 - [0] ----D C:\Users\bleuris\AppData\Local\{9C1321EB-3EB4-463E-A92C-AFEA4A84E95D} O43 - CFD: 16/08/2011 - 11:15:22 - [0] ----D C:\Users\bleuris\AppData\Local\{9CA280EF-3090-46F0-A968-C6C0370BADA2} O43 - CFD: 28/01/2012 - 13:06:24 - [0] ----D C:\Users\bleuris\AppData\Local\{9CC0B005-8B36-443D-BD18-47595803D93D} O43 - CFD: 17/07/2011 - 09:53:59 - [0] ----D C:\Users\bleuris\AppData\Local\{9D9745D4-DE74-478C-948C-3E9429C558BB} O43 - CFD: 01/04/2012 - 11:26:42 - [0] ----D C:\Users\bleuris\AppData\Local\{9DD1E5D2-7387-4599-BA24-BB06FFAB4E52} O43 - CFD: 28/05/2012 - 19:04:19 - [0] ----D C:\Users\bleuris\AppData\Local\{9E7F5B79-EF91-47B2-83BC-AB09CB6FE89F} O43 - CFD: 25/11/2011 - 14:05:13 - [0] ----D C:\Users\bleuris\AppData\Local\{9EBDF897-4096-4411-9673-FE7FCBFDED0E} O43 - CFD: 09/06/2012 - 00:42:29 - [0] ----D C:\Users\bleuris\AppData\Local\{9F89328F-F206-46F1-8138-1B8525FA8EAF} O43 - CFD: 27/03/2012 - 13:50:10 - [0] ----D C:\Users\bleuris\AppData\Local\{A0439CAD-FF99-452E-A958-7FE80E6D72BC} O43 - CFD: 13/03/2012 - 10:02:58 - [0] ----D C:\Users\bleuris\AppData\Local\{A066F925-A3AE-4EBB-8962-22171CEA8707} O43 - CFD: 31/03/2012 - 12:03:53 - [0] ----D C:\Users\bleuris\AppData\Local\{A0C3AAFF-230C-4327-BE90-D4CA9794F2BB} O43 - CFD: 12/05/2012 - 10:41:37 - [0] ----D C:\Users\bleuris\AppData\Local\{A2646F4C-AC15-4E4E-86CD-8742974E2B54} O43 - CFD: 11/03/2012 - 20:41:22 - [0] ----D C:\Users\bleuris\AppData\Local\{A3BEF35C-24FD-438D-A077-E00DDEB0A660} O43 - CFD: 23/04/2012 - 08:50:08 - [0] ----D C:\Users\bleuris\AppData\Local\{A5BD7667-28A5-40FC-9DD2-3C98A9F3CF6D} O43 - CFD: 09/01/2012 - 10:39:47 - [0] ----D C:\Users\bleuris\AppData\Local\{A5BDFE6A-1814-4B3F-99AB-57776BD64CDD} O43 - CFD: 11/05/2012 - 08:37:42 - [0] ----D C:\Users\bleuris\AppData\Local\{A5EDE0DE-2259-4145-AD0E-A9173F17D287} O43 - CFD: 04/04/2012 - 08:41:47 - [0] ----D C:\Users\bleuris\AppData\Local\{A6B0899D-642B-4502-AD3D-9DD634B0F281} O43 - CFD: 19/03/2012 - 20:58:11 - [0] ----D C:\Users\bleuris\AppData\Local\{A704AFC0-5DA0-497E-89C0-6F4467800BE4} O43 - CFD: 07/01/2012 - 14:17:45 - [0] ----D C:\Users\bleuris\AppData\Local\{A745A8F9-AD81-4D2C-B32B-52F3423FCB61} O43 - CFD: 04/01/2012 - 02:12:18 - [0] ----D C:\Users\bleuris\AppData\Local\{A7859484-D2DB-45F4-A265-BC66F9B5848B} O43 - CFD: 03/03/2012 - 00:33:52 - [0] ----D C:\Users\bleuris\AppData\Local\{A8511934-3F4A-466F-B3B5-4F1DB0D7D34E} O43 - CFD: 27/04/2012 - 10:52:20 - [0] ----D C:\Users\bleuris\AppData\Local\{A85C31D6-A80D-4412-A4A3-819401FCAF5F} O43 - CFD: 10/04/2012 - 16:46:55 - [0] ----D C:\Users\bleuris\AppData\Local\{A888F596-E949-48EF-8B29-5D73950CE8D5} O43 - CFD: 13/06/2012 - 22:03:37 - [0] ----D C:\Users\bleuris\AppData\Local\{ABA99E2D-8BFF-4E9B-82C9-C9C475606370} O43 - CFD: 03/08/2011 - 21:22:19 - [0] ----D C:\Users\bleuris\AppData\Local\{ACE6F39D-6C43-4B03-86F0-8778FFE9139B} O43 - CFD: 21/04/2012 - 16:47:36 - [0] ----D C:\Users\bleuris\AppData\Local\{AD3AC593-AA39-4324-A02A-DBB832E0B1EC} O43 - CFD: 26/06/2011 - 17:57:29 - [0] ----D C:\Users\bleuris\AppData\Local\{AD6E2E7A-52C8-4C35-AA70-E08DA4EEC052} O43 - CFD: 09/05/2012 - 20:59:04 - [0] ----D C:\Users\bleuris\AppData\Local\{ADAB44FB-B47C-4627-9888-A75601264DCC} O43 - CFD: 06/02/2012 - 21:23:17 - [0] ----D C:\Users\bleuris\AppData\Local\{ADDD4F36-C541-4FFE-91AF-0625F94E249F} O43 - CFD: 06/06/2012 - 08:51:20 - [0] ----D C:\Users\bleuris\AppData\Local\{AE76AB29-4C8C-468F-B0DA-7D58D010BB54} O43 - CFD: 30/07/2011 - 16:24:20 - [0] ----D C:\Users\bleuris\AppData\Local\{AF5F7BFF-F257-4999-8325-20425036F131} O43 - CFD: 31/05/2012 - 09:34:57 - [0] ----D C:\Users\bleuris\AppData\Local\{AF7A784B-4C74-4D87-AA0E-69BDCEA7570B} O43 - CFD: 12/12/2011 - 12:19:48 - [0] ----D C:\Users\bleuris\AppData\Local\{B04F6409-26A6-4009-943D-BDD9507D5BDB} O43 - CFD: 01/05/2012 - 01:28:41 - [0] ----D C:\Users\bleuris\AppData\Local\{B1BC3608-7868-4014-A2F5-11FAC5C45AB5} O43 - CFD: 16/07/2011 - 10:50:40 - [0] ----D C:\Users\bleuris\AppData\Local\{B239130A-3A05-4653-A210-4AD9B365AE47} O43 - CFD: 09/05/2012 - 20:59:19 - [0] ----D C:\Users\bleuris\AppData\Local\{B25B8025-AE7A-4290-8B95-40BD5C38EF53} O43 - CFD: 21/03/2012 - 15:51:41 - [0] ----D C:\Users\bleuris\AppData\Local\{B2883F4A-288F-45A9-9834-C04019960ECD} O43 - CFD: 10/01/2012 - 09:14:39 - [0] ----D C:\Users\bleuris\AppData\Local\{B2DA2DB9-F7DB-4E53-98FD-6E6A05A33594} O43 - CFD: 08/09/2011 - 10:46:52 - [0] ----D C:\Users\bleuris\AppData\Local\{B31F8BB0-0AD3-4ED7-8404-5FE598797090} O43 - CFD: 19/05/2012 - 12:16:56 - [0] ----D C:\Users\bleuris\AppData\Local\{B44E5F97-FC5D-46CD-8F3C-8273E3C30EA0} O43 - CFD: 28/03/2012 - 13:16:36 - [0] ----D C:\Users\bleuris\AppData\Local\{B4A821EC-FCE8-427A-A040-5763A0A2456A} O43 - CFD: 06/04/2012 - 08:19:29 - [0] ----D C:\Users\bleuris\AppData\Local\{B628D948-AC6A-4771-B214-A9EB896C3E41} O43 - CFD: 13/01/2012 - 12:57:07 - [0] ----D C:\Users\bleuris\AppData\Local\{B640536C-C7BA-4624-AA15-06F907501490} O43 - CFD: 03/07/2011 - 10:45:52 - [0] ----D C:\Users\bleuris\AppData\Local\{B6CC5027-A5F8-4AC0-97CE-90CDDCBDC6B4} O43 - CFD: 29/04/2012 - 14:16:32 - [0] ----D C:\Users\bleuris\AppData\Local\{B8CA740B-C416-45EF-86F4-6F10B037535F} O43 - CFD: 07/03/2012 - 10:53:27 - [0] ----D C:\Users\bleuris\AppData\Local\{B8CD17D6-2DCE-40E5-942E-4A58C7D32C26} O43 - CFD: 09/12/2011 - 10:30:09 - [0] ----D C:\Users\bleuris\AppData\Local\{BA0D5CE8-5C00-46C6-94DE-C0E6E16CF213} O43 - CFD: 19/04/2012 - 09:05:39 - [0] ----D C:\Users\bleuris\AppData\Local\{BA481004-200B-47D6-93F2-4DAC87424555} O43 - CFD: 15/03/2012 - 09:44:31 - [0] ----D C:\Users\bleuris\AppData\Local\{BAB01BFE-6A6E-476C-97AB-A721753BD8C0} O43 - CFD: 18/01/2012 - 10:08:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BAC4D456-8A80-415A-82E5-BC06008CBBDA} O43 - CFD: 24/05/2012 - 22:34:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BB572CC2-DB5E-4AF8-94B6-9D65E02ADF22} O43 - CFD: 02/03/2012 - 10:35:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BB747DE5-0F5D-4BAF-B17E-D26D9E976F85} O43 - CFD: 27/03/2012 - 08:41:59 - [0] ----D C:\Users\bleuris\AppData\Local\{BC98DF1E-EED1-4B6D-90D6-FA12F6522419} O43 - CFD: 26/05/2012 - 00:31:43 - [0] ----D C:\Users\bleuris\AppData\Local\{BD22ED5B-EB2E-4C6F-8E14-6054EB1375CE} O43 - CFD: 27/04/2012 - 17:12:54 - [0] ----D C:\Users\bleuris\AppData\Local\{BD6745F3-5436-4C7D-8B95-B9DAA15A75CD} O43 - CFD: 31/01/2012 - 16:05:12 - [0] ----D C:\Users\bleuris\AppData\Local\{BDE45623-1B73-4165-BBB9-D1D3BA08F9B3} O43 - CFD: 06/02/2012 - 21:23:27 - [0] ----D C:\Users\bleuris\AppData\Local\{BE2FB112-B3BF-434F-AA65-CF022F071151} O43 - CFD: 19/11/2011 - 18:42:09 - [0] ----D C:\Users\bleuris\AppData\Local\{BE7BF89E-5B4B-4D4B-8A44-E8894069FBB7} O43 - CFD: 03/03/2012 - 18:44:15 - [0] ----D C:\Users\bleuris\AppData\Local\{BEBC8BC8-F868-4C9E-B429-0F1F417D3D2D} O43 - CFD: 22/03/2012 - 21:22:05 - [0] ----D C:\Users\bleuris\AppData\Local\{BF66FED5-0959-42A7-ABBA-C9D78BADFF8A} O43 - CFD: 02/10/2011 - 16:12:29 - [0] ----D C:\Users\bleuris\AppData\Local\{C02E52BF-0021-42A2-A9F2-54A7242C4EF7} O43 - CFD: 14/11/2011 - 08:19:39 - [0] ----D C:\Users\bleuris\AppData\Local\{C1125177-ECB8-4CAB-AD5E-317AB38B6643} O43 - CFD: 16/03/2012 - 09:38:16 - [0] ----D C:\Users\bleuris\AppData\Local\{C14BA153-7D6B-4815-924F-A7698AF89A0F} O43 - CFD: 23/06/2012 - 06:38:20 - [0] ----D C:\Users\bleuris\AppData\Local\{C16C5500-D80A-498D-B03A-0C331B48ECAE} O43 - CFD: 06/06/2012 - 20:32:12 - [0] ----D C:\Users\bleuris\AppData\Local\{C2065027-9066-47BF-89BE-3AD800131EF0} O43 - CFD: 15/03/2012 - 12:45:01 - [0] ----D C:\Users\bleuris\AppData\Local\{C20D3A8A-02BF-47E7-A92F-FF7A89711BAE} O43 - CFD: 23/11/2011 - 13:05:49 - [0] ----D C:\Users\bleuris\AppData\Local\{C2417D03-5663-4FA0-A0AB-6BF56B26A8C0} O43 - CFD: 22/03/2012 - 09:26:11 - [0] ----D C:\Users\bleuris\AppData\Local\{C4D5481B-0F71-4DD4-ACF6-7EAFC343D07B} O43 - CFD: 17/01/2012 - 13:14:54 - [0] ----D C:\Users\bleuris\AppData\Local\{C4F8C542-E0BF-4559-874B-8BDCBFEDB3B6} O43 - CFD: 11/11/2011 - 17:23:26 - [0] ----D C:\Users\bleuris\AppData\Local\{C7569A31-9247-40A9-97DA-BC24F188FEFC} O43 - CFD: 24/06/2011 - 13:27:23 - [0] ----D C:\Users\bleuris\AppData\Local\{C75DFDFF-508C-4794-BEEB-7EA0E15B974E} O43 - CFD: 11/05/2012 - 08:37:31 - [0] ----D C:\Users\bleuris\AppData\Local\{C7CC3B80-2C94-4C13-93A7-78ECC3E3932D} O43 - CFD: 14/03/2012 - 09:28:29 - [0] ----D C:\Users\bleuris\AppData\Local\{C7EE4EB2-44BA-4EED-86BB-5531FE43C59A} O43 - CFD: 26/04/2012 - 09:41:31 - [0] ----D C:\Users\bleuris\AppData\Local\{C8A78F0A-DAD1-437F-9E4D-A9CB738E9F9A} O43 - CFD: 18/03/2012 - 16:02:36 - [0] ----D C:\Users\bleuris\AppData\Local\{C8CFAE73-04E1-4CBB-8437-A23E9D4F5DA2} O43 - CFD: 15/03/2012 - 12:44:50 - [0] ----D C:\Users\bleuris\AppData\Local\{CB03439B-EB42-4871-8E2E-9E546172536B} O43 - CFD: 02/05/2012 - 09:46:56 - [0] ----D C:\Users\bleuris\AppData\Local\{CB277401-9403-437B-90B2-4C5181BA4DBF} O43 - CFD: 22/01/2012 - 12:01:35 - [0] ----D C:\Users\bleuris\AppData\Local\{CB4E5E01-763A-4BA9-B986-8FD44BABC38F} O43 - CFD: 25/08/2011 - 08:14:05 - [0] ----D C:\Users\bleuris\AppData\Local\{CB5FB235-2C60-4AA8-AEC8-D9E2464557EC} O43 - CFD: 15/03/2012 - 12:17:13 - [0] ----D C:\Users\bleuris\AppData\Local\{CB9D3A7E-30ED-4BBD-B709-DC9F4793D624} O43 - CFD: 26/11/2011 - 11:30:32 - [0] ----D C:\Users\bleuris\AppData\Local\{CBCE36E2-E99D-433C-9772-B217D301587A} O43 - CFD: 14/04/2012 - 15:13:26 - [0] ----D C:\Users\bleuris\AppData\Local\{CC1BC857-FA87-4D27-A1B2-75339524237A} O43 - CFD: 09/03/2012 - 19:40:40 - [0] ----D C:\Users\bleuris\AppData\Local\{CC208854-23AF-4D13-9FCA-735496646F50} O43 - CFD: 14/06/2012 - 09:00:37 - [0] ----D C:\Users\bleuris\AppData\Local\{CC482974-4EDA-4E53-9F5E-5883A42EB614} O43 - CFD: 28/03/2012 - 21:00:08 - [0] ----D C:\Users\bleuris\AppData\Local\{CCD6BCC1-AFAA-4966-8C5A-76388C059E7A} O43 - CFD: 10/04/2012 - 16:47:08 - [0] ----D C:\Users\bleuris\AppData\Local\{CD0AC2A0-60A1-4E0A-B26A-F362E5B5EA34} O43 - CFD: 07/11/2011 - 21:19:14 - [0] ----D C:\Users\bleuris\AppData\Local\{CD9E6482-EA63-44F2-9D80-F5BC048C37D1} O43 - CFD: 05/06/2012 - 20:50:14 - [0] ----D C:\Users\bleuris\AppData\Local\{CDA2B7FF-3203-4B71-A69A-E87390D12289} O43 - CFD: 20/01/2012 - 12:12:48 - [0] ----D C:\Users\bleuris\AppData\Local\{CDB01DFD-22F7-4D76-9E1C-05B302D6A56B} O43 - CFD: 28/02/2012 - 00:16:12 - [0] ----D C:\Users\bleuris\AppData\Local\{CE662300-655F-402E-B03B-28D00A4DF27D} O43 - CFD: 12/04/2012 - 08:23:17 - [0] ----D C:\Users\bleuris\AppData\Local\{CE7CA78E-18C7-48F3-9574-0DE4219C57F3} O43 - CFD: 22/01/2012 - 12:01:24 - [0] ----D C:\Users\bleuris\AppData\Local\{CF25518B-D35B-49A3-BFC2-0F9DDE503FE6} O43 - CFD: 04/12/2011 - 18:03:29 - [0] ----D C:\Users\bleuris\AppData\Local\{CF5BE615-BD9B-48CD-B116-7E6DD5885A4F} O43 - CFD: 01/02/2012 - 16:58:24 - [0] ----D C:\Users\bleuris\AppData\Local\{CFD0642F-AB2B-4CC2-95F9-83A2EEE6E350} O43 - CFD: 15/11/2011 - 12:32:46 - [0] ----D C:\Users\bleuris\AppData\Local\{D0157417-93D2-4BE1-8C31-0C4DACD66708} O43 - CFD: 21/08/2011 - 08:53:49 - [0] ----D C:\Users\bleuris\AppData\Local\{D01D1AB2-0130-4F9D-95E7-A32CF959D925} O43 - CFD: 22/03/2012 - 09:26:21 - [0] ----D C:\Users\bleuris\AppData\Local\{D040D0A7-1629-4E95-A853-6E2F1FECDA9A} O43 - CFD: 23/03/2012 - 14:12:37 - [0] ----D C:\Users\bleuris\AppData\Local\{D08B665F-1B86-4ED7-B9BF-BF76151D5597} O43 - CFD: 19/11/2011 - 10:33:11 - [0] ----D C:\Users\bleuris\AppData\Local\{D2394624-3868-41BE-8EB5-C0EA250B0E7F} O43 - CFD: 13/11/2011 - 13:43:47 - [0] ----D C:\Users\bleuris\AppData\Local\{D2BE510C-31F9-4BA9-B260-69BF650296DE} O43 - CFD: 03/01/2012 - 11:46:29 - [0] ----D C:\Users\bleuris\AppData\Local\{D3D02F40-29D9-48B7-838E-951DC1138731} O43 - CFD: 04/12/2011 - 22:08:02 - [0] ----D C:\Users\bleuris\AppData\Local\{D497C45C-5CDE-4440-96AC-F53962B9D954} O43 - CFD: 14/11/2011 - 08:19:50 - [0] ----D C:\Users\bleuris\AppData\Local\{D520DC85-B4C5-4157-9B52-8E46AF272611} O43 - CFD: 14/04/2012 - 10:53:28 - [0] ----D C:\Users\bleuris\AppData\Local\{D617CC7B-8773-4EFC-BBDA-7B9A548A8A25} O43 - CFD: 13/05/2012 - 14:36:54 - [0] ----D C:\Users\bleuris\AppData\Local\{D62518DE-1C6F-4AAF-BBDD-73E17D488933} O43 - CFD: 20/12/2011 - 11:54:52 - [0] ----D C:\Users\bleuris\AppData\Local\{D642F5B4-4D0E-4BB9-A1B6-016C471F7480} O43 - CFD: 27/03/2012 - 20:46:34 - [0] ----D C:\Users\bleuris\AppData\Local\{D6F1424B-E95F-4E26-8939-90F443890F7E} O43 - CFD: 15/03/2012 - 09:44:20 - [0] ----D C:\Users\bleuris\AppData\Local\{D718AADF-04DF-4F5E-AD40-5ACB9B28EDC0} O43 - CFD: 27/11/2011 - 21:58:19 - [0] ----D C:\Users\bleuris\AppData\Local\{D7625215-2220-4D52-A3F2-D3BC7C1D4BF9} O43 - CFD: 21/03/2012 - 15:51:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D79AFE83-A978-4573-B94A-3ADEE41F50CD} O43 - CFD: 12/03/2012 - 17:19:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D7CB7265-EE9C-4333-9ABB-A66FDCB8A61C} O43 - CFD: 30/01/2012 - 09:17:33 - [0] ----D C:\Users\bleuris\AppData\Local\{D825A4D2-7E9B-4D62-A170-50DD3BA7A124} O43 - CFD: 23/04/2012 - 22:26:41 - [0] ----D C:\Users\bleuris\AppData\Local\{D85486A5-9CE8-4310-BD1B-F400B2FCBC39} O43 - CFD: 23/06/2012 - 06:38:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D8A4F820-B44C-4C3B-AED0-18BEEFD9A1EC} O43 - CFD: 06/11/2011 - 21:16:48 - [0] ----D C:\Users\bleuris\AppData\Local\{D8B373B5-0CEE-4775-A0DC-A2399269D195} O43 - CFD: 16/03/2012 - 09:38:05 - [0] ----D C:\Users\bleuris\AppData\Local\{D8C91B15-7983-4349-A723-E0E328B0ED03} O43 - CFD: 01/04/2012 - 11:26:32 - [0] ----D C:\Users\bleuris\AppData\Local\{D984142F-153C-43B4-A048-42D36C9CE226} O43 - CFD: 27/06/2012 - 08:10:41 - [0] ----D C:\Users\bleuris\AppData\Local\{D99C5E44-A486-4E6E-93FE-3213EF88CE7E} O43 - CFD: 06/12/2011 - 17:43:19 - [0] ----D C:\Users\bleuris\AppData\Local\{DA8B1C4F-CD46-44A1-82AB-D37295A0B4CE} O43 - CFD: 23/05/2012 - 12:18:19 - [0] ----D C:\Users\bleuris\AppData\Local\{DB4CC702-AE83-404A-89D7-53360727EE4E} O43 - CFD: 11/03/2012 - 20:41:12 - [0] ----D C:\Users\bleuris\AppData\Local\{DB78CE9E-A0A4-4719-832E-2EBF87A40C2D} O43 - CFD: 02/04/2012 - 08:42:05 - [0] ----D C:\Users\bleuris\AppData\Local\{DC4F3A9D-10CE-4412-95AB-47958044369C} O43 - CFD: 05/07/2012 - 09:35:34 - [0] ----D C:\Users\bleuris\AppData\Local\{DD04630A-C6D3-45C1-AA36-152EE54B45C9} O43 - CFD: 20/08/2011 - 00:00:15 - [0] ----D C:\Users\bleuris\AppData\Local\{DD1AFFFF-F422-4774-80A5-E63F7AF1FB62} O43 - CFD: 15/03/2012 - 15:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{DD3B4DEF-6AC7-4245-AA49-19657239C747} O43 - CFD: 08/04/2012 - 11:32:39 - [0] ----D C:\Users\bleuris\AppData\Local\{DD6A87FD-0B9B-4061-A942-0FD208CDFA47} O43 - CFD: 10/09/2011 - 16:43:11 - [0] ----D C:\Users\bleuris\AppData\Local\{DDA6B43B-E84E-4F6C-9831-48E0E7BAA179} O43 - CFD: 09/06/2012 - 09:13:41 - [0] ----D C:\Users\bleuris\AppData\Local\{DDA84C08-07EA-4D1E-938A-C4BEBCCDED18} O43 - CFD: 06/08/2011 - 08:59:04 - [0] ----D C:\Users\bleuris\AppData\Local\{DDCC5F4B-147C-4840-BB8B-3B43CEDEB245} O43 - CFD: 02/05/2012 - 09:46:44 - [0] ----D C:\Users\bleuris\AppData\Local\{DFE47495-7C42-438F-AEBD-017C9A3041EB} O43 - CFD: 03/12/2011 - 12:17:10 - [0] ----D C:\Users\bleuris\AppData\Local\{E110228C-EF24-4482-97E6-07002FF83E58} O43 - CFD: 25/04/2012 - 20:50:22 - [0] ----D C:\Users\bleuris\AppData\Local\{E1B34F5C-02F6-4F8D-BB74-A44DAF8976BE} O43 - CFD: 14/05/2012 - 09:21:00 - [0] ----D C:\Users\bleuris\AppData\Local\{E26C60E3-53BD-4FB4-BC98-B69634DBD3FE} O43 - CFD: 06/04/2012 - 08:20:04 - [0] ----D C:\Users\bleuris\AppData\Local\{E270A44F-14E5-4FC8-BD0B-444D1E69545E} O43 - CFD: 02/06/2012 - 20:59:51 - [0] ----D C:\Users\bleuris\AppData\Local\{E2D5455A-5F75-406A-8BC5-01B5310BD059} O43 - CFD: 08/03/2012 - 22:17:02 - [0] ----D C:\Users\bleuris\AppData\Local\{E370550F-8498-4165-BC46-366869A30EBB} O43 - CFD: 27/05/2012 - 11:38:11 - [0] ----D C:\Users\bleuris\AppData\Local\{E386B4BA-1B47-4400-9345-C7B21AD15B25} O43 - CFD: 29/05/2012 - 08:23:33 - [0] ----D C:\Users\bleuris\AppData\Local\{E3926720-1331-40F6-892E-51D131DB06CC} O43 - CFD: 27/05/2012 - 01:10:23 - [0] ----D C:\Users\bleuris\AppData\Local\{E39C7456-CD90-44F4-8EF9-B7CA665407F0} O43 - CFD: 29/06/2011 - 12:26:35 - [0] ----D C:\Users\bleuris\AppData\Local\{E39FF1E7-23E3-4127-90C4-26DB6DECD953} O43 - CFD: 24/05/2012 - 22:34:21 - [0] ----D C:\Users\bleuris\AppData\Local\{E4585079-1278-4184-B5AF-E77E9D4A3E44} O43 - CFD: 14/11/2011 - 14:54:58 - [0] ----D C:\Users\bleuris\AppData\Local\{E49C9E81-F812-42AD-9C73-AE349A934B05} O43 - CFD: 03/02/2012 - 10:06:12 - [0] ----D C:\Users\bleuris\AppData\Local\{E4C94BBB-6DB6-4E8E-B9FE-47896B5E1F57} O43 - CFD: 21/01/2012 - 15:22:45 - [0] ----D C:\Users\bleuris\AppData\Local\{E52014FF-1799-4C31-8879-DFAB83BA0286} O43 - CFD: 03/12/2011 - 12:17:22 - [0] ----D C:\Users\bleuris\AppData\Local\{E535CBF6-247A-4C58-B0A0-C57837DCAD2C} O43 - CFD: 20/03/2012 - 21:45:50 - [0] ----D C:\Users\bleuris\AppData\Local\{E5487380-0B11-471E-8E63-C71A39D9C2B3} O43 - CFD: 23/11/2011 - 22:19:16 - [0] ----D C:\Users\bleuris\AppData\Local\{E74DF2BB-4C66-4D93-8F7D-36F5E9B50A94} O43 - CFD: 16/04/2012 - 14:31:05 - [0] ----D C:\Users\bleuris\AppData\Local\{E80119C4-A07A-4301-BD1E-E6F083C9F7CE} O43 - CFD: 14/06/2012 - 22:15:42 - [0] ----D C:\Users\bleuris\AppData\Local\{E9458D21-2041-46C6-A6D8-7723CF499A44} O43 - CFD: 03/03/2012 - 12:19:18 - [0] ----D C:\Users\bleuris\AppData\Local\{E9E111F3-AFBB-4DBA-AB0B-216666359AB6} O43 - CFD: 27/05/2012 - 18:05:11 - [0] ----D C:\Users\bleuris\AppData\Local\{EAD42735-0E6B-4B98-98ED-F6D210336EA4} O43 - CFD: 19/11/2011 - 18:42:10 - [0] ----D C:\Users\bleuris\AppData\Local\{EADB4D20-40FC-40F0-AAC3-43E10EB27126} O43 - CFD: 23/03/2012 - 23:37:05 - [0] ----D C:\Users\bleuris\AppData\Local\{EBFD7CD0-6B6B-4632-991F-1B40230ED049} O43 - CFD: 27/05/2012 - 18:05:27 - [0] ----D C:\Users\bleuris\AppData\Local\{EC21D907-BEB0-4F82-9F10-9EE0E3AEDE1D} O43 - CFD: 04/12/2011 - 18:03:44 - [0] ----D C:\Users\bleuris\AppData\Local\{EC8C79BB-848D-49DF-B035-1792FB2029DD} O43 - CFD: 12/05/2012 - 10:41:23 - [0] ----D C:\Users\bleuris\AppData\Local\{ECB51626-B640-474E-BBF4-BFA9898F9AEE} O43 - CFD: 25/03/2012 - 08:12:06 - [0] ----D C:\Users\bleuris\AppData\Local\{ED1EDC6A-F117-4505-9D75-3A0103044070} O43 - CFD: 06/06/2012 - 20:32:02 - [0] ----D C:\Users\bleuris\AppData\Local\{EDC3C31F-EDBC-4BA7-ADB0-4A8FC5A3DAD9} O43 - CFD: 01/04/2012 - 18:55:22 - [0] ----D C:\Users\bleuris\AppData\Local\{EDFDC76F-76FD-41DF-827E-113E1E3BBAC9} O43 - CFD: 15/03/2012 - 12:17:23 - [0] ----D C:\Users\bleuris\AppData\Local\{EE6DB88E-A560-4561-BCA1-E8F4FD00ECC8} O43 - CFD: 01/02/2012 - 16:58:35 - [0] ----D C:\Users\bleuris\AppData\Local\{EEC417F2-B4D5-4447-B767-DF619E4D1D8F} O43 - CFD: 29/06/2012 - 17:20:19 - [0] ----D C:\Users\bleuris\AppData\Local\{EF2E48A8-5EC4-433B-BFB1-A7F42F465F9F} O43 - CFD: 27/03/2012 - 13:50:15 - [0] ----D C:\Users\bleuris\AppData\Local\{EF5098BD-6476-43B3-A9BF-174271B6404E} O43 - CFD: 24/03/2012 - 13:39:03 - [0] ----D C:\Users\bleuris\AppData\Local\{EFEC1E81-29B5-4C80-87D2-377020B3484D} O43 - CFD: 05/02/2012 - 10:42:05 - [0] ----D C:\Users\bleuris\AppData\Local\{F02B12DB-4775-4E1E-9182-9336C176183D} O43 - CFD: 17/01/2012 - 13:15:04 - [0] ----D C:\Users\bleuris\AppData\Local\{F104CC09-582D-4E1E-98B2-40D54E7A5603} O43 - CFD: 28/01/2012 - 13:06:36 - [0] ----D C:\Users\bleuris\AppData\Local\{F19AB24B-2E67-409D-8069-3C3ECEB55077} O43 - CFD: 18/01/2012 - 13:31:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F1D56D54-A493-420A-AC6B-B758DD1844CF} O43 - CFD: 28/12/2011 - 17:31:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F21D6E29-7AD3-4F61-A937-3AA717DC8B1F} O43 - CFD: 19/05/2012 - 12:16:45 - [0] ----D C:\Users\bleuris\AppData\Local\{F2309EA4-CB4F-4076-A0E1-9C5E1C28ACAB} O43 - CFD: 20/09/2011 - 22:43:24 - [0] ----D C:\Users\bleuris\AppData\Local\{F2722A01-4ADE-4BEA-94D1-64CEA9F0F162} O43 - CFD: 11/09/2011 - 12:43:53 - [0] ----D C:\Users\bleuris\AppData\Local\{F275D48D-4F41-4D1D-9535-9B3825AB2785} O43 - CFD: 03/02/2012 - 17:09:08 - [0] ----D C:\Users\bleuris\AppData\Local\{F32CBBB7-811C-4841-A4BD-BBDE308DEB2D} O43 - CFD: 18/03/2012 - 02:47:44 - [0] ----D C:\Users\bleuris\AppData\Local\{F43179BA-3580-46D2-B2CB-AFD1882A617E} O43 - CFD: 14/04/2012 - 15:13:36 - [0] ----D C:\Users\bleuris\AppData\Local\{F4D71E6A-645D-4C77-806A-098FD60F34E7} O43 - CFD: 25/08/2011 - 08:14:15 - [0] ----D C:\Users\bleuris\AppData\Local\{F503EE09-A127-4FA1-96B7-B52096313709} O43 - CFD: 24/11/2011 - 09:24:21 - [0] ----D C:\Users\bleuris\AppData\Local\{F55A3F09-DF4E-4570-9573-738780492716} O43 - CFD: 11/12/2011 - 01:27:14 - [0] ----D C:\Users\bleuris\AppData\Local\{F5DC9EC9-205F-40FA-98A5-0087C38C24D9} O43 - CFD: 07/08/2011 - 22:36:41 - [0] ----D C:\Users\bleuris\AppData\Local\{F5FA1162-B87E-4E82-B69A-57D59DDB5E6E} O43 - CFD: 25/04/2012 - 08:56:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F61A369F-8D2E-4D07-8195-9079A0A82B51} O43 - CFD: 23/11/2011 - 22:19:05 - [0] ----D C:\Users\bleuris\AppData\Local\{F6905213-78CA-4832-ADAB-6493EA9D67F4} O43 - CFD: 31/05/2012 - 22:56:18 - [0] ----D C:\Users\bleuris\AppData\Local\{F6BECE02-A83F-4CBB-94C8-0D3BE05A3762} O43 - CFD: 18/12/2011 - 15:44:48 - [0] ----D C:\Users\bleuris\AppData\Local\{F7256758-24DA-44C4-8F33-088E0BB6E92A} O43 - CFD: 19/03/2012 - 11:21:25 - [0] ----D C:\Users\bleuris\AppData\Local\{F7522341-E37F-4131-A837-DEB699641819} O43 - CFD: 18/12/2011 - 15:44:28 - [0] ----D C:\Users\bleuris\AppData\Local\{F7B01B87-18CE-47B0-A73B-4183EEC760AC} O43 - CFD: 30/01/2012 - 09:17:22 - [0] ----D C:\Users\bleuris\AppData\Local\{F8603736-F5A0-4D5F-83C9-4BB2151023C0} O43 - CFD: 02/04/2012 - 08:41:55 - [0] ----D C:\Users\bleuris\AppData\Local\{F8A2E707-9BDC-432D-B4EB-7ACD991873D6} O43 - CFD: 17/04/2012 - 10:13:38 - [0] ----D C:\Users\bleuris\AppData\Local\{F8A42CAB-4676-4B9F-8F4B-C4BE2E98018A} O43 - CFD: 12/03/2012 - 17:19:28 - [0] ----D C:\Users\bleuris\AppData\Local\{F998F08C-3F84-4909-9496-0A91682374F3} O43 - CFD: 14/03/2012 - 09:28:27 - [0] ----D C:\Users\bleuris\AppData\Local\{FB5F6C93-6BC4-4000-AB5B-8696DADF9C8C} O43 - CFD: 21/03/2012 - 21:10:28 - [0] ----D C:\Users\bleuris\AppData\Local\{FC143F78-E032-4033-8CD4-098632B9B300} O43 - CFD: 30/07/2011 - 16:23:22 - [0] ----D C:\Users\bleuris\AppData\Local\{FC2BBD43-592C-45F8-B34C-9B173505A784} O43 - CFD: 22/03/2012 - 09:38:39 - [0] ----D C:\Users\bleuris\AppData\Local\{FCD783D3-7700-4619-864F-09F85015618D} O43 - CFD: 05/09/2011 - 08:19:42 - [0] ----D C:\Users\bleuris\AppData\Local\{FDAB4FCE-BCB3-418C-B117-E41DB956D53C} O43 - CFD: 06/07/2011 - 12:51:28 - [0] ----D C:\Users\bleuris\AppData\Local\{FE1864A2-4D1E-40FE-997C-D6F6E4081019} O43 - CFD: 18/01/2012 - 13:31:47 - [0] ----D C:\Users\bleuris\AppData\Local\{FE4ACFF2-3AAC-4B95-A44A-1FFFCFDE73DB} O43 - CFD: 04/02/2012 - 11:04:32 - [0] ----D C:\Users\bleuris\AppData\Local\{FE82AEAC-E4DE-42F1-B9DC-0CB9AFBE54B4} O43 - CFD: 14/06/2012 - 22:15:31 - [0] ----D C:\Users\bleuris\AppData\Local\{FEA3159D-397E-4D1B-A3D4-4F3E174EC3C8} O43 - CFD: 17/11/2011 - 09:09:09 - [0] ----D C:\Users\bleuris\AppData\Local\{FEA68995-D19E-4215-A0D3-60B8BC81C478} O43 - CFD: 01/03/2012 - 10:12:43 - [0] ----D C:\Users\bleuris\AppData\Local\{FEF96A9C-9484-4520-AE98-C4264AB7A6CE} O43 - CFD: 12/01/2012 - 11:58:11 - [0] ----D C:\Users\bleuris\AppData\Local\{FF03A961-5D7A-4A23-AD82-83E70E9600AA} O43 - CFD: 07/03/2012 - 22:59:41 - [0] ----D C:\Users\bleuris\AppData\Local\{FF0BB314-496C-4ECE-A9DE-115A004AED34} O43 - CFD: 23/03/2012 - 21:39:04 - [0] ----D C:\Users\bleuris\AppData\Local\{FF4F0D98-D865-42F3-B2B5-F2D3CC8551CB} O43 - CFD: 17/03/2012 - 00:34:53 - [0] ----D C:\Users\bleuris\AppData\Local\{FF6962F0-A416-4F20-872A-B3BB239E3E87} O43 - CFD: 11/07/2011 - 21:41:29 - [0] ----D C:\Users\bleuris\AppData\Local\{FF75D9F0-C6A5-454D-A1ED-79D75F165233} O43 - CFD: 22/11/2011 - 10:13:08 - [0] ----D C:\Users\bleuris\AppData\Local\{FFAE1ADB-9182-43CA-B8F1-E93716C19F2A} O43 - CFD: 21/01/2008 - 04:42:46 - [0,014] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 23/04/2009 - 19:51:32 - [0,000] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 16/12/2008 - 04:32:00 - [0,005] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite O43 - CFD: 20/09/2011 - 19:43:57 - [0,004] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 16/12/2008 - 04:29:08 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 21/01/2008 - 04:42:46 - [0,001] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 21/05/2012 - 19:20:19 - [0] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 15/03/2012 - 14:42:13 - [0,000] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Scan Program Folder in 00mn 20s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.2668B255F2F8C4FCAAA8B821C64B02C2] - 05/07/2012 - 16:13:47 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1960348] O44 - LFC:[MD5.CCFA9DF2A0B8CEFBEC2587439F73DD5D] - 05/07/2012 - 13:30:00 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.2D2D8D404B5CC2C009594884521C4543] - 05/07/2012 - 13:28:29 ---A- . (...) -- C:\AdwCleaner[s2].txt [4180] O44 - LFC:[MD5.4AF648A30D0783800F3B8BBC475003B6] - 05/07/2012 - 13:27:30 ---A- . (...) -- C:\AdwCleaner[s1].txt [320] O44 - LFC:[MD5.FB097BBC1A18F044BD17BD2FCCF97865] - 05/07/2012 - 13:22:50 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [22344] O44 - LFC:[MD5.276C574AEAD0C128362D67C317712CEA] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1495948] O44 - LFC:[MD5.25237E05A6D36DDD6C2DB1E2E881A0A7] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfc009.dat [104070] O44 - LFC:[MD5.BAC1CD6AE7F70E7175ADE1611394DB10] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [126626] O44 - LFC:[MD5.6A3E40BF95E492F3581710B75DE6466A] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfh009.dat [595996] O44 - LFC:[MD5.7913923AE020DD97B7C82367FBAA817E] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [679042] O44 - LFC:[MD5.508320B4C1B13758E09F2CB5A44E6B53] - 05/07/2012 - 12:19:15 ---A- . (...) -- C:\AdwCleaner[R1].txt [3982] O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 29/06/2012 - 11:47:24 ---A- . (...) -- C:\Windows\System32\DOErrors.log [52] O44 - LFC:[MD5.03E273E090F10D32B31BAF4DF9F210F1] - 19/06/2012 - 08:18:21 ---A- . (...) -- C:\Windows\PFRO.log [1128] O44 - LFC:[MD5.214295FDCFFF6F975D86B8F1E67C8866] - 17/06/2012 - 21:40:12 ---A- . (...) -- C:\Windows\setupact.log [1390] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/06/2012 - 21:40:06 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 16/06/2012 - 13:46:58 ---A- . (...) -- C:\Windows\System32\config.nt [2577] O44 - LFC:[MD5.A924A1D1CA5421DC182493678931AA9D] - 15/06/2012 - 12:05:56 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [314200] ~ Scan Files in 00mn 02s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\System32\Drivers\Wdf01000.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\System32\Drivers\Wdf01000.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{f632a008-6691-11df-bc57-00238b624b8d}\AutoRun\command. (...) -- F:\wdsync.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.3B10711AD8656C097E0D16A41B29C54C] - 27/03/2008 - 12:11:34 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [34664] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des fichiers non signés (O65) (None) ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {2E4C7146-FEAE-4CC5-8C65-ED909144EE36} - (AOL Recherche) - http://slirsredirect.search.aol.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {93B8115B-FF23-40BC-BDED-33B52D5A517C} - (Yahoo!) - Yahoo! Search - Recherche Web O69 - SBI: SearchScopes [HKCU] {B33C3C31-4204-4379-9256-9E2A04E04426} - (Kelkoo) - Voitures Et Motos | Comparer Prix & Acheter Voiture Et Moto - Kelkoo France O69 - SBI: SearchScopes [HKCU] {DCA91FA0-A1B3-4797-89B7-DDDB4673C63D} - (Bing) - Bing ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [438784] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [315392] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [47104] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [242688] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449024] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [45056] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\System32\sessenv.dll [84992] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.9BA23B16251CA66448C303186C0A6E4A] [sPRF][05/07/2012] (...) -- C:\ProgramData\nvModes.dat [32061] [MD5.BB25DB52E12766B7832C8AC45BF569F8] [sPRF][26/06/2012] (...) -- C:\Users\bleuris\AppData\Local\d3d9caps.dat [7592] [MD5.3D45F0ADF444C9239497923162027417] [sPRF][15/05/2012] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Users\bleuris\AppData\Local\Temp\tbuTor.dll [4401448] [MD5.9DE5085E5FE8212FB74002C885E80D25] [sPRF][05/07/2012] (...) -- C:\Users\bleuris\AppData\Local\Temp\Uninst.bat [635] [MD5.A5443DB021817409099D0CFA9ACA230D] [sPRF][18/06/2012] (...) -- C:\Users\bleuris\AppData\Local\Temp\utt40A2.tmp.exe [5086208] [MD5.9A2347903D6EDB84C10F288BC0578C1C] [sPRF][26/06/2012] (.Trend Micro Inc. - HijackThis.) -- C:\Users\bleuris\Desktop\HiJackThis.exe [388608] [MD5.BDD54AE70A53CD886F494291E63E4679] [sPRF][18/03/2010] (.Total Immersion - D'Fusion @Home Web Plug-In Installer.) -- C:\Windows\Downloaded Program Files\DFusionHomeWebPlugIn.Installer.exe [814000] ~ Scan Files in 00mn 01s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{1AACF1F5-DEBC-4670-A07F-664B19CD4658}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\CyberLink\PowerDirector\PDR.exe O87 - FAEL: "{90027874-0075-4319-8831-D8EADDCFDA1A}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.) O87 - FAEL: "{F27B3AB5-D0BC-4187-A023-8A2DAD079C08}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.) O87 - FAEL: "{C413E2DE-C2BF-4CC1-9765-0649E3059066}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.) O87 - FAEL: "{7D76C76A-D4B8-4DEA-AF9A-8FB961926B69}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.) O87 - FAEL: "{1476217F-7D4F-49F2-8045-4A8CB4A7F446}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.) O87 - FAEL: "{F5E920F2-6768-42ED-8F55-60FA56ED6A0A}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{2D90A3D7-F41A-4063-9BD1-B2D01F4931F1}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe O87 - FAEL: "{0397877D-CC1F-4682-A9D7-B5ACD5DDCD73}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe O87 - FAEL: "{E38FD63E-30A3-42F4-BB70-B75B8D3A608C}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Video Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe O87 - FAEL: "{E7ED528E-6536-4A6F-BAE9-89198FC2F4AE}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe O87 - FAEL: "{0E79778C-0201-45D5-A25F-51362D07FD8A}" | In - None - P17 - TRUE | .(.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe O87 - FAEL: "{973DCE61-7CC5-46E0-AE20-E228D95EE69C}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QP.exe (.not file.) O87 - FAEL: "{B58AC441-5A6C-4681-A781-4BCEA12253B3}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QPService.exe (.not file.) O87 - FAEL: "{A2E475C0-D6FD-42FA-972E-F02C4FE1C671}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{F22659CE-88DF-405F-95A9-706EDD339282}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{1D76344B-B646-417C-BE68-2DB97A63DC19}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\iTunes\iTunes.exe (.not file.) O87 - FAEL: "{49AC377A-8A05-486F-9C52-2026AF2B7A33}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\iTunes\iTunes.exe (.not file.) O87 - FAEL: "{7385BD0C-BB52-4771-9733-FC11BC765AA6}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "{F122A6C6-3785-4C80-8547-642B816B57E2}" | In - Private - P6 - TRUE | .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe O87 - FAEL: "{BC08C69D-C696-45E8-A60C-4DE24FB3A72B}" | In - Private - P17 - TRUE | .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe O87 - FAEL: "TCP Query User{C3F192A2-826B-4728-99B8-D66316E7E7E2}C:\program files\itunes\itunes.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\itunes\itunes.exe (.not file.) O87 - FAEL: "TCP Query User{F52BCBB9-B60F-45FE-8BBD-110F4ED00061}C:\program files\emule\emule.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{3FC8FDEE-2A1C-48F1-A7E7-4E1F2CE63BA6}C:\program files\emule\emule.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{B2C99B71-987C-4580-9501-030578D14D4E}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Private - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe O87 - FAEL: "UDP Query User{573EA3AF-B28A-4B66-A44E-7E67BBBA736B}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Private - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe O87 - FAEL: "TCP Query User{52D4BF40-CDD5-4211-AE1D-F8AD58174C97}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Public - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe O87 - FAEL: "UDP Query User{088F634A-A8C5-4FF6-B5DF-E22CEDD00F33}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Public - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe O87 - FAEL: "TCP Query User{0FE99848-61AF-4188-9DB2-106AF35B58AF}C:\itunes\itunes.exe" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe O87 - FAEL: "UDP Query User{1BD0DD3D-9683-47C0-8785-D35C87E15CB2}C:\itunes\itunes.exe" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe O87 - FAEL: "TCP Query User{D06F0A2D-61EE-49BE-8AE6-38C28125BA62}C:\program files\ultramixer\jre\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\ultramixer\jre\bin\javaw.exe O87 - FAEL: "UDP Query User{0A1C8EBD-72F5-4664-8F78-D4F1C6D35A8C}C:\program files\ultramixer\jre\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\ultramixer\jre\bin\javaw.exe O87 - FAEL: "TCP Query User{643D2104-D7CD-4D14-AA4E-01FCBD00FFED}C:\program files\freetvradio\freetvradio.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.) O87 - FAEL: "UDP Query User{5BEBE02B-CD74-4975-9C5C-60985508D007}C:\program files\freetvradio\freetvradio.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.) O87 - FAEL: "{8CA26E17-AF92-49B0-9501-FE72356C5A8C}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{C119B398-0B3E-4810-9347-14AE4EB8F768}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{31A7D37C-EF4D-40DF-BEFA-968D28DDEFAA}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{D35FDF53-DCCE-47FA-8F9C-45C189772680}" | In - Domain - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "{774E0908-B722-4D90-A75F-1F60FD197983}" | In - Domain - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "{D4DF06A6-5A40-4A1D-8434-1DAF11EFF820}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "{51CE100D-9310-433B-9E23-BC5DFB3F16BC}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "{A0BC9CF0-91D5-40A6-9EC5-1C5BA4995B7A}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe O87 - FAEL: "TCP Query User{B5E7C9AC-8BA4-413C-92D5-83402CBAF514}C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3. O87 - FAEL: "UDP Query User{548620B6-F550-46B5-8DD3-D428284AFC7C}C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3 O87 - FAEL: "TCP Query User{7D13D3DE-596F-41C2-ADF3-726DE9313A88}C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torren O87 - FAEL: "UDP Query User{8163815E-EDFD-4AFF-9089-6D6D11DED952}C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torre O87 - FAEL: "TCP Query User{9FCA6C13-5938-4812-A564-6540F3C3A62C}C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe O87 - FAEL: "UDP Query User{4400BF42-775F-4C81-A752-D4BF5971A737}C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe O87 - FAEL: "{DCA547B0-96F5-4D18-9B05-A208D9066DB7}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\bleuris\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe O87 - FAEL: "TCP Query User{5146FC1B-A1FA-46D2-9A17-C4F550E88605}C:\itunes\itunes.exe" | In - Private - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe O87 - FAEL: "UDP Query User{F2A39F20-59D2-4354-8B6C-4A3CEA9CA5F2}C:\itunes\itunes.exe" | In - Private - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe O87 - FAEL: "{89FC8644-3BEF-48D2-8F9A-5BDDB2E3D94E}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O87 - FAEL: "{A51F85BF-F860-4CF0-80C2-DD652500518D}" |In - None - P6 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) O87 - FAEL: "{3A5B8B1A-BFBA-4454-9626-A5BC8131FBD3}" |In - None - P17 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) O87 - FAEL: "TCP Query User{3B8F9A16-AA68-48A6-B2DE-5E074549C2B5}C:\users\bleuris\desktop\utorrent.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\utorrent.exe (.not file.) O87 - FAEL: "UDP Query User{4BC90B64-F932-4600-9C2E-F0617E6CC807}C:\users\bleuris\desktop\utorrent.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\utorrent.exe (.not file.) ~ Scan Firewall in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 9170 - (25/06/2012) Clés trouvées (Keys found) : 9 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoRezo_is1] =>PUP.Eorezo [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{38470B46-9BF1-40AE-A588-F6AD6D1C2D42}] =>Adware.SPointer [HKLM\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}] =>PUP.Eorezo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Mozilla\Firefox\Extensions]:SpiderMessengerHelper@spidermessenger.com =>Spyware.AgenceExclusive ~ Scan Additionnel in 00mn 07s ---\\ Recherche détournement de DNS routeur (O89) (None) ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 27/06/2008 77824 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe SR - | Auto 27/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 07/03/2012 44768 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SS - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe SR - | Auto 31/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Demand 03/04/2008 193840 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SR - | Auto 21/01/2008 21504 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\System32\svchost.exe SS - | Demand 24/03/2010 246520 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe SS - | Auto 09/02/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 09/02/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 27/06/2009 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 16/06/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe SR - | Demand 01/05/2008 165192 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SR - | Auto 18/03/2008 19456 | (hpsrv) . (.Hewlett-Packard Corporation.) - C:\Windows\System32\Hpservice.exe SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe SR - | Demand 27/03/2012 821608 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 09/06/2008 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SS - | Demand 15/01/2010 227232 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe SR - | Auto 19/09/2008 196608 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe SR - | Auto 365952 | (Recovery Service for Windows) . (...) - C:\Program Files\SMINST\BLService.exe SR - | Auto 241734 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared files\RichVideo.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe SS - | Auto 29/02/2012 158856 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe SR - | Auto 26/10/2008 237657 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe SR - | Auto 296320 | (TVCapSvc) . (...) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe SR - | Auto 116096 | (TVSched) . (...) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe SS - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 26/09/2008 59376 | ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.Cyberlink Corp..) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl ~ Scan Services in 00mn 04s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover Run by bleuris at 05/07/2012 20:54:37 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll acpi.sys ataport.SYS PCIIDEX.SYS msahci.sys C:\Windows\system32\DRIVERS\hpdskflt.sys Hewlett-Packard Corporation Hewlett-Packard Corporation Mobile Data Protection System 1 ntkrnlpa!IofCallDriver[0x82C44936] -> \Device\Harddisk0\DR0[0x870E5AC8] 3 CLASSPNP[0x832148B3] -> ntkrnlpa!IofCallDriver[0x82C44936] -> [0x86FE2900] 5 hpdskflt[0x8BFACF05] -> ntkrnlpa!IofCallDriver[0x82C44936] -> [0x86775C10] 7 acpi[0x806976BC] -> ntkrnlpa!IofCallDriver[0x82C44936] -> \Device\Ide\IdeDeviceP0T0L0-0[0x867572C8] kernel: MBR read successfully user & kernel MBR OK ~ Scan MBR in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by bleuris at 05/07/2012 20:54:39 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 04s End of the scan (1901 lines in 03mn 25s)(0) Voila ! A présent je reste attentif et aux aguets sur vos réponses pour pouvoir continuer à suivre vos indications et manip' à effectuer. D'avance merci !
  18. Re bonjour ! Voici le rapport suite à l'étape 4: Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Version de la base de données: v2012.07.05.03 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 bleuris :: PC-DE-BLEURIS [administrateur] 05/07/2012 16:51:38 mbam-log-2012-07-05 (16-51-38).txt Type d'examen: Examen complet Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 426994 Temps écoulé: 1 heure(s), 27 minute(s), 30 seconde(s) Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 0 (Aucun élément nuisible détecté) (fin) Je continue en ce moment même avec Zhpdiag.
  19. Bonjour ! Pear, tout d'abord merci pour ta réponse et désolé d'avoir mis du temps à répondre à mon tour. Voici donc le premier rapport (étape 1) AdwCleaner: # AdwCleaner v1.701 - Rapport créé le 05/07/2012 à 13:19:11 # Mis à jour le 02/07/2012 par Xplode # Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits) # Nom d'utilisateur : bleuris - PC-DE-BLEURIS # Exécuté depuis : C:\Users\bleuris\Downloads\adwcleaner.exe # Option [Recherche] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Présent : C:\Users\bleuris\AppData\Local\Conduit Dossier Présent : C:\Users\bleuris\AppData\Local\freetvradio Air Dossier Présent : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib Dossier Présent : C:\Users\bleuris\AppData\LocalLow\Conduit Dossier Présent : C:\Users\bleuris\AppData\LocalLow\PriceGong Dossier Présent : C:\Users\bleuris\AppData\LocalLow\ShoppingReport2 Dossier Présent : C:\Users\bleuris\AppData\Roaming\freeTVRadio Dossier Présent : C:\Program Files\Conduit Dossier Présent : C:\Program Files\freeTVRadio Dossier Présent : C:\Program Files\SpiderMessenger Fichier Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk ***** [Registre] ***** [*] Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT2851639 Clé Présente : HKCU\Software\AppDataLow\Software\Conduit Clé Présente : HKCU\Software\AppDataLow\Software\PriceGong Clé Présente : HKCU\Software\AppDataLow\Software\ShoppingReport2 Clé Présente : HKCU\Software\AppDataLow\Software\SmartBar Clé Présente : HKCU\Software\Conduit Clé Présente : HKCU\Software\freeTVRadio Clé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon Clé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2 Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1 Clé Présente : HKCU\Software\Softonic Clé Présente : HKCU\Software\SpiderMessenger Clé Présente : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL Clé Présente : HKLM\SOFTWARE\Conduit Clé Présente : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 ***** [Registre - GUID] ***** Clé Présente : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400} Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16421 [HKCU\Software\Microsoft\Internet Explorer\Main - First Home Page] = hxxp://y.lo.st -\\ Google Chrome v20.0.1132.47 Fichier : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences Présente : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...] Présente : "default_title": "uTorrentBar_FR Community Toolbar", Présente : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...] Présente : "name": "uTorrentBar_FR", Présente : "path": "plugins/ConduitChromeApiPlugin.dll", Présente : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT285163[...] Présente : "path": "C:\\Users\\bleuris\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll", ************************* AdwCleaner[R1].txt - [3853 octets] - [05/07/2012 13:19:11] ########## EOF - C:\AdwCleaner[R1].txt - [3981 octets] ########## Et le deuxième (donc étape 2) toujours de AdwCleaner: # AdwCleaner v1.701 - Rapport créé le 05/07/2012 à 14:28:13 # Mis à jour le 02/07/2012 par Xplode # Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits) # Nom d'utilisateur : bleuris - PC-DE-BLEURIS # Exécuté depuis : C:\Users\bleuris\Downloads\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\Users\bleuris\AppData\Local\Conduit Dossier Supprimé : C:\Users\bleuris\AppData\Local\freetvradio Air Dossier Supprimé : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\Conduit Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\PriceGong Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\ShoppingReport2 Dossier Supprimé : C:\Users\bleuris\AppData\Roaming\freeTVRadio Dossier Supprimé : C:\Program Files\Conduit Dossier Supprimé : C:\Program Files\freeTVRadio Dossier Supprimé : C:\Program Files\SpiderMessenger Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk ***** [Registre] ***** [*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639 Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong Clé Supprimée : HKCU\Software\AppDataLow\Software\ShoppingReport2 Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar Clé Supprimée : HKCU\Software\Conduit Clé Supprimée : HKCU\Software\freeTVRadio Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2 Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1 Clé Supprimée : HKCU\Software\Softonic Clé Supprimée : HKCU\Software\SpiderMessenger Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL Clé Supprimée : HKLM\SOFTWARE\Conduit Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 ***** [Registre - GUID] ***** Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16421 Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - First Home Page] = hxxp://y.lo.st --> hxxp://www.google.com -\\ Google Chrome v20.0.1132.47 Fichier : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences Supprimée : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...] Supprimée : "default_title": "uTorrentBar_FR Community Toolbar", Supprimée : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...] Supprimée : "name": "uTorrentBar_FR", Supprimée : "path": "plugins/ConduitChromeApiPlugin.dll", Supprimée : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT285163[...] Supprimée : "path": "C:\\Users\\bleuris\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll", ************************* AdwCleaner[R1].txt - [3982 octets] - [05/07/2012 13:19:11] AdwCleaner[s1].txt - [320 octets] - [05/07/2012 14:27:30] AdwCleaner[s2].txt - [4051 octets] - [05/07/2012 14:28:13] ########## EOF - C:\AdwCleaner[s2].txt - [4179 octets] ########## Je viens de lancer MBAM (étape 3) pour le premier examen complet. Je posterai le rapport dès qu'il sera terminé.
  20. Bonjour tout le monde ! Alors voilà, ça fait déjà un bail que j'ai ce put... de EO.ST en page de démarrage pour I.E 9 ! Et je n'en peux plus ! J'ai pourtant traîné sur pas mal de forums pour trouver une solution, en vain ! Je m'en remets donc à vous, ô grand(e)s sauveteurs/euses ! Sachez que j'ai déjà installé HiJackThis. D'avance je vous remercie et j'attends vos instructions.
×
×
  • Créer...