Rapport pour analyse

[ocinatas]

Bonjour

 

les performances de ma machines me laissent penser qu'elle est infectée, et j'ai un *.exe que CCleaner ne parvient pas à supprimer. Voici donc mon rapport: merci beaucoup à vous de vous pencher sur mon cas

 

Rapport de ZHPDiag v1.28.2131 par Nicolas Coolman, Update du 18/10/2011

Run by Nicolas at 19/10/2011 08:49:00

Web site : ZHPDiag Outil de diagnostic

State : Version à jour.

 

 

---\\ Web Browser

MSIE: Internet Explorer v9.0.8112.16421

GCIE: Google Chrome v14.0.835.202 (Defaut)

 

---\\ Windows Product Information

Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

Windows Server License Manager Script : OK

~ Vista, OEM_SLP channel

System Locked Preinstallation (OEM_SLP) : OK

Windows ID Activation : OK

~ Windows Partial Key : 6CJ97

Windows License : OK

Windows Automatic Updates : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 2045 MB (40% free)

System Restore: Activé (Enable)

System drive C: has 8 GB (10%) free of 70 GB

 

---\\ Logged in mode

~ Computer Name: PC-DE-NICOLAS

~ User Name: Nicolas

~ All Users Names: Nicolas, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Users\Nicolas\AppData\Roaming\

~ %Desktop% : C:\Users\Nicolas\Desktop\

~ %Favorites% : C:\Users\Nicolas\Favorites\

~ %LocalAppData% : C:\Users\Nicolas\AppData\Local\

~ %StartMenu% : C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 70 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 70 Go)

E:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.17/09/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]

[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]

[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/06/2008 - 08:33:37.) -- C:\Windows\system32\Wininit.exe [96768]

[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]

[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.17/09/2009 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]

[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.14/06/2008 - 08:34:10.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]

[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.19/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408] *1916

[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.17/09/2009 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944] *1836

[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/06/2008 - 06:28:02.) -- C:\Windows\system32\drivers\Cdfs.sys [70144] *1844

[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.17/09/2009 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072] *1812

[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.19/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264] *1884

[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.17/09/2009 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152] *1916

[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.14/06/2008 - 06:49:18.) -- C:\Windows\system32\drivers\i8042prt.sys [54784] *1900

[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.14/06/2008 - 06:56:28.) -- C:\Windows\system32\drivers\IpNat.sys [100864] *1868

[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.19/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496] *1852

[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.17/09/2009 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856] *1820

[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.17/09/2009 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880] *1916

[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360] *1900

[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/06/2008 - 06:56:34.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288] #1908,1916

[MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\drivers\rdpdr.sys [242688] #1868,1860

[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.17/09/2009 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560] #26,1804

[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.17/09/2009 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192] *1812

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes musiques (My Musics) : 0/0

~ Mes Videos (My Videos) : 4/9

Mes Favoris (My Favorites) : 26/26 (Modified)

~ Mes Documents (My Documents) : 528/591

~ Mon Bureau (My Desktop) : 48/60

~ Menu demarrer (Programs) : 8/32

~ Scan Hidden Files in 00mn 01s

 

 

 

---\\ Processus lancés

[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.3868]

[MD5.A659F31AC25418738351E5BDF4C85780] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4669440] [PID.960]

[MD5.E090EE780714E376062198C6625D5B51] - (.HiTRUST - eDataSecurity System Loader( Load and prepa.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe [457216] [PID.3364]

[MD5.FB1EEAB5A76A943060DEFA4CCC45143B] - (.sonix - DefaultSettingEXE.) -- C:\Windows\PLFSetL.exe [94208] [PID.508]

[MD5.4297C3FC97F9FD96CC5BDC471A045882] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files\Launch Manager\LManager.exe [752136] [PID.2484]

[MD5.F79723565C57374BB8F057E03FC33B50] - (.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [206952] [PID.2296]

[MD5.F371C6DF9A810EF2E6E4FA60ACBB5C33] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [174872] [PID.1292]

[MD5.B150D1BCB625600479EEBA51811E33CB] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe [159744] [PID.1304]

[MD5.F514CD896583E6C18D011116E3725074] - (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe [1286144] [PID.2440]

[MD5.B93AF0AC3E93256A49638F99651013DF] - (.Nokia - NOKIAMediaBar_VistaFileManager.) -- C:\Program Files\Nokia\Nokia Media Bar\NOKIAMediaBar_VistaFileManager.exe [34064] [PID.3888]

[MD5.4B555106290BD117334E9A08761C035A] - (...) -- C:\Windows\System32\rundll32.exe [44544] [PID.1188]

[MD5.2D1389E05A807D956829F44BD4B60389] - (.Symantec Corporation - LiveUpdate Notice Service.) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [583048] [PID.]

[MD5.D5D5EA09EE061AFE1857B8EE2BD451DC] - (.Nokia - Nokia M Platform.) -- C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe [1540096] [PID.1516]

[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153] [PID.4100]

[MD5.7636713B4F0944045AB4AF7CED5245AB] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1230704] [PID.4108]

[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.4160]

[MD5.3347965C4893BF8A85E20C53A27296F3] - (.Nokia - Nokia Ovi Suite.) -- C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [966712] [PID.4168]

[MD5.79197AB8FC20E781BA141E291866A909] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17351304] [PID.4264]

[MD5.F74EB03B9EC03C9E71064713F9001B42] - (.WDC - WD Drive Manager.) -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2057536] [PID.4348]

[MD5.AAD176E52745443AA7BE60279333AA97] - (.Western Digital - WD SmartWare.) -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe [9117504] [PID.4356]

[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.4588]

[MD5.453BFAA8A4F682924AA0A5070D881504] - (.Acer Inc. - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE [450560] [PID.4768]

[MD5.39CBE2E778299F468BBD5B45CFB90A70] - (.Acer Inc. - Acer Empowering Techonology Framework Launc.) -- C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE [323584] [PID.4852]

[MD5.4F779AD993A2975D945EE6985CAC0FEA] - (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE [397312] [PID.5008]

[MD5.42370C1DE2B83844B253478DB8A907D5] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\Apoint2K\ApMsgFwd.exe [50736] [PID.5068]

[MD5.5EF87457AB8A58694EBE35E55D093D04] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Nicolas\AppData\Local\Temp\RtkBtMnt.exe [208896] [PID.5160]

[MD5.8D78BE3690DB07A2FD03D2A6B61E3DCD] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\Apoint2K\Apntex.exe [49152] [PID.5172]

[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.5036]

[MD5.64C307F6DE2F601F1D3B589911924CE6] - (.Nokia - Microsoft Bluetooth Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe [141824] [PID.4876]

[MD5.B3495A2B54E28B11A3E1DFA56974144C] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe [247968] [PID.6068]

[MD5.904E13BA41AF2E353A32CF351CA53639] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [748336] [PID.7176]

[MD5.1BCF3DD5C66A2F9909BCB133987B6B69] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696832] [PID.6080]

[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]

[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [108289] [PID.]

[MD5.3845B6555DE995F6C0C07AE2ABCC0532] - (.Pas de propriétaire - ALaunchSvc Image.) -- C:\Acer\ALaunch\ALaunchSvc.exe [50688] [PID.]

[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [185089] [PID.]

[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [238888] [PID.]

[MD5.F54907AA07F60AFF81E1E09E97AF98B0] - (.HiTRSUT - eDataSecurity Service.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512] [PID.]

[MD5.FB5383BFD4DEC6792AAEF76C9343ECFF] - (.Acer Inc. - Acer eLock Management.) -- C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576] [PID.]

[MD5.9316C26F089CF2CEA2BD1496AC9F38A4] - (.Acer Inc. - acer eNet Management Service.) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe [135168] [PID.]

[MD5.AE38A12F79A4980DDB88F36514F8A1DA] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [355096] [PID.]

[MD5.793FF718477345CD5D232C50BED1E452] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.]

[MD5.842684E0DF20A59E293DA1C6F0DFE261] - (...) -- C:\Acer\Mobility Center\MobilityService.exe [107008] [PID.]

[MD5.B5D974C1FD078A68C7536C561B031D39] - (.Symantec Corporation - Automatic LiveUpdate Scheduler Service.) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [554352] [PID.]

[MD5.0A468612A19FEB657D127E7C4810F6FC] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [266343] [PID.]

[MD5.7D1E301E2EEAF6D3730887DE933413E6] - (.WDC - WD Drive Manager Service.) -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [110592] [PID.]

[MD5.138AB06ADBBF300AA804D7974A5AEC82] - (.Memeo - WDSmartWareBackgroundService.) -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480] [PID.]

[MD5.E8781CF1A4262881897444D22921A3A6] - (.acer - WMIServi Application.) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936] [PID.]

[MD5.F82FC2C30A19442B95AE554215837C46] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe [386560] [PID.]

[MD5.3D184410EF5EE017E186AC96181B3FF8] - (.Acer Inc. - eRecoveryService.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248] [PID.]

[MD5.CF2584CDF90DA24D3044021AAAD5DBAB] - (.Pas de propriétaire - Service.) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576] [PID.]

[MD5.8C1F87F5FDD92229D1754B98F073913F] - (.Nokia - ServiceLayer Module.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [633856] [PID.]

[MD5.2CDEC0582F250EB642A2699BAF22D33A] - (.Nokia - USB Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe [159744] [PID.]

[MD5.97D9D6A04E3AD9B6C626B9931DB78DBA] - (.Microsoft Corporation - Programme d’installation de modules Windows.) -- C:\Windows\servicing\TrustedInstaller.exe [39424] [PID.]

~ Scan Processes Running in 00mn 04s

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Preferences

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G2 - GCE: Preference [user Data\Default] [lncjcfkpannmofmpgdfoonkniofdnaba] Shockwave Flash v.11,0,1,152 (Désactivé)

~ Scan Google Browser in 00mn 00s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.2.40.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (...) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)

P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3538.0513] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@pandasecurity.com/activescan] - (.Panda Security - Panda ActiveScan 2.0 Plugin for Firefox.) -- C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@viewpoint.com/VMP] - (.Pas de propriétaire - MetaStream 3 Plugin r4.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Yahoo! France

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Bing

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (...) (No version) -- (.not file.)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} Clé orpheline

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe

O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] . (.HiTRUST - eDataSecurity System Loader( Load and prepa.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [Acer Tour] Clé orpheline

O4 - HKLM\..\Run: [PLFSetL] . (.sonix - DefaultSettingEXE.) -- C:\Windows\PLFSetL.exe

O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [PlayMovie] . (.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe

O4 - HKLM\..\Run: [iAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [eRecoveryService] Clé orpheline

O4 - HKLM\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Inc. - WR_PopUp.) -- C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [eAudio] . (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe

O4 - HKLM\..\Run: [MediaBarFileManager] . (.Nokia - NOKIAMediaBar_VistaFileManager.) -- C:\Program Files\Nokia\Nokia Media Bar\NOKIAMediaBar_VistaFileManager.exe

O4 - HKLM\..\Run: [skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe

O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 156.1.) -- C:\Windows\system32\nvsvc.dll

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll

O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll

O4 - HKLM\..\Run: [symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exetEng.dll (.not file.)

O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [NokiaMServer] Clé orpheline

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe

O4 - HKLM\..\RunOnce: [*WerKernelReporting] . (.Microsoft Corporation - Rapports de problèmes Windows.) -- C:\Windows\SYSTEM32\WerFault.exe

O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] Clé orpheline

O4 - HKLM\..\RunOnce: [*Restore] . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\System32\rstrui.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKCU\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - HKCU\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe

O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [NokiaOviSuite2] . (.Nokia - Nokia Ovi Suite.) -- C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [NokiaOviSuite2] . (.Nokia - Nokia Ovi Suite.) -- C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\Nicolas\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe

O4 - Global Startup: C:\Users\Nicolas\Desktop\DivX Movies.lnk . (...) -- C:\Users\Nicolas\Videos\DivX Movies

O4 - Global Startup: C:\Users\Nicolas\Desktop\Documents - Raccourci.lnk . (...) -- C:\Users\Nicolas\Documents

O4 - Global Startup: C:\Users\Nicolas\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico

O9 - Extra button: Skype Click to Call - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Site dans la Zone de confiance d'Internet Explorer (O15)

O15 - Trusted Zone: [HKCU\...\Domains] http.mappy.com

O15 - Trusted Zone: [HKCU\...\Domains\www] http.mappy.com

O15 - Trusted Zone: [HKCU\...\Domains] http.orange.fr

O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr

~ Scan IE Zone Confiance in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://www.ma-config.com/activex/MaConfig_3_1_2_1.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{4412BA70-B328-447F-B0E2-12621A7433BD}: DhcpNameServer = 212.27.40.241 212.27.40.242

O17 - HKLM\System\CS1\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{4412BA70-B328-447F-B0E2-12621A7433BD}: DhcpNameServer = 212.27.40.241 212.27.40.242

O17 - HKLM\System\CS3\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{4412BA70-B328-447F-B0E2-12621A7433BD}: DhcpNameServer = 212.27.40.241 212.27.40.242

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (...) -- igfxdev.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (.acer - eNMSwWatcher Dynamic Link Library.) - C:\Windows\system32\eNetHook.dll

~ Scan AppInit DLL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ALaunch Service (ALaunchService) . (.Pas de propriétaire - ALaunchSvc Image.) - C:\Acer\ALaunch\ALaunchSvc.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) . (...) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (.not file.)

O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) . (.Acer Inc. - Acer eLock Management.) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service (eNet Service) . (.Acer Inc. - acer eNet Management Service.) - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) . (.Pas de propriétaire - Service.) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) . (...) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (.not file.)

O23 - Service: LiveUpdate Notice Service (LiveUpdate Notice Service) . (.Symantec Corporation - LiveUpdate Notice Service.) - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: MobilityService (MobilityService) . (...) - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: Planificateur LiveUpdate automatique (Planificateur LiveUpdate automatique) . (.Symantec Corporation - Automatic LiveUpdate Scheduler Service.) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: WD SmartWare Drive Manager (WDDMService) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe

O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) . (.Memeo - WDSmartWareBackgroundService.) - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe

O23 - Service: ePower Service (WMIService) . (.acer - WMIServi Application.) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe

O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

~ Scan Keys in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.79197AB8FC20E781BA141E291866A909] [APT] [{32399BB0-442D-4751-83B2-32D6C2991BD9}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

~ Scan Scheduled Task in 00mn 05s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys

O41 - Driver: (DritekPortIO) . (.Dritek System Inc. - General Port I/O.) - C:\PROGRA~1\LAUNCH~1\DPortIO.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys

~ Scan Drivers in 00mn 01s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ALPS Touch Pad Driver - (.Alps Electric.) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}

O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corporation.) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}

O42 - Logiciel: Acer Crystal Eye Webcam Video Class Camera - (.Suyin.) [HKLM] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F}

O42 - Logiciel: Acer Crystal Eye webcam - (.SUYIN.) [HKLM] -- {AA047D7C-5E7C-4878-B75C-77589151B563}

O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}

O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM] -- GridVista

O42 - Logiciel: Acer Mobility Center Plug-In - (.Acer Inc..) [HKLM] -- {11316260-6666-467B-AC34-183FCB5D4335}

O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35}

O42 - Logiciel: Acer eAudio Management - (.Pas de propriétaire.) [HKLM] -- {57265292-228A-41FA-9AEC-4620CBCC2739}

O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36}

O42 - Logiciel: Acer eLock Management - (.Acer Inc..) [HKLM] -- {116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}

O42 - Logiciel: Acer eNet Management - (.Acer Inc..) [HKLM] -- {C06554A1-2C1E-4D20-B613-EE62C79927CC}

O42 - Logiciel: Acer ePower Management - (.Acer Inc..) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F}

O42 - Logiciel: Acer ePresentation Management - (.Acer Inc..) [HKLM] -- {BF839132-BD43-4056-ACBF-4377F4A88E2A}

O42 - Logiciel: Acer eSettings Management - (.Acer Inc..) [HKLM] -- {CE65A9A0-9686-45C6-9098-3C9543A412F0}

O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites

O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader 8.1.4 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A81300000003}

O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: Big Kahuna Reef 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111310630}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {07287123-B8AC-41CE-8346-3D777245C35B}

O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CDex extraction audio - (.Pas de propriétaire.) [HKLM] -- CDex

O42 - Logiciel: Cake Mania - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}

O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com

O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}

O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}

O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters

O42 - Logiciel: Dynasty - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111473353}

O42 - Logiciel: FLAC 1.2.1b (remove only) - (.Xiph.org.) [HKLM] -- FLAC

O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: IBoot - (.Pas de propriétaire.) [HKLM] -- {61ACEE8D-4E0D-49BE-962E-9CA26EC0F921}

O42 - Logiciel: Intel® Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}

O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM] -- LManager

O42 - Logiciel: LiveUpdate 3.2 (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- LiveUpdate

O42 - Logiciel: LiveUpdate Notice (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- {DBA4DB9D-EE51-4944-A419-98AB1F1249C8}

O42 - Logiciel: Luxor 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11170417}

O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}

O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}

O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {96EB95A2-5245-4EA2-B6EA-B8BA2FBF64C4}

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}

O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mystery Case Files - Prime Suspects - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111271497}

O42 - Logiciel: Mystery Case Files Ravenhearst - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112179547}

O42 - Logiciel: NTI Backup NOW! 4.7 - (.NewTech Infosystems.) [HKLM] -- {67ADE9AF-5CD9-4089-8825-55DE4B366799}

O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}

O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {2D99A593-C841-43A7-B7C9-D6F3AE70B756}

O42 - Logiciel: Nokia Media Bar - (.Nokia.) [HKLM] -- {C45B1500-7B63-47C2-AB25-C28CB46AFDEE}

O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- Nokia Ovi Suite

O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- {07D77970-B205-460C-84E4-263F30455597}

O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM] -- {A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}

O42 - Logiciel: Nokia_Multimedia_Common_Components_2_5 - (.Nokia.) [HKLM] -- {3762698E-E9DF-4DD8-99F1-8192D0F8EE06}

O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM] -- {2CC53A53-44F4-4667-8584-2FFC9ACB2242}

O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM] -- {12451AF7-EFF8-4B5B-8255-282D7CC7CAEE}

O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {C373F7C4-05D2-4047-96D1-6AF30661C6AA}

O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693

O42 - Logiciel: Panda ActiveScan 2.0 - (.Panda Security.) [HKLM] -- ActiveScan 2.0

O42 - Logiciel: Panneau de configuration MobileMe - (.Apple Inc..) [HKLM] -- {6DA9102E-199F-43A0-A36B-6EF48081A658}

O42 - Logiciel: PowerProducer 3.72 - (.CyberLink Corporation.) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C78EAC6F-7A73-452E-8134-DBB2165C5A68}

O42 - Logiciel: RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 - (.Pas de propriétaire.) [HKLM] -- {59F6A514-9813-47A3-948C-8A155460CC2A}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Revo Uninstaller 1.60 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5729F1AE-5895-468F-9165-BAD161C9E982}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{65EA4836-B5A3-4C1D-8883-0C35E471003A}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}

O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}

O42 - Logiciel: Skype™ 5.5 - (.Skype Technologies S.A..) [HKLM] -- {AA59DDE4-B672-4621-A016-4C248204957A}

O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 8 - (.Adobe Systems.) [HKLM] -- {AC76BA86-7AD7-5464-3428-800000000003}

O42 - Logiciel: Star Defender 3 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111730193}

O42 - Logiciel: Treasures of the Deep - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111263673}

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523

O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}

O42 - Logiciel: Viewpoint Media Player - (.Pas de propriétaire.) [HKLM] -- ViewpointMediaPlayer

O42 - Logiciel: WD SmartWare - (.Western Digital.) [HKLM] -- {232DB76D-4751-41A9-9EC2-CDC0DAC1FAB6}

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}

O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}

O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}

O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}

O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}

O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}

O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}

O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}

O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}

O42 - Logiciel: Zuma Deluxe - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\Acer]

[HKCU\Software\Adobe]

[HKCU\Software\Alps]

[HKCU\Software\America Online]

[HKCU\Software\AppDataLow\Software\DivX]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Yahoo]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Avira]

[HKCU\Software\CDDB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Compal]

[HKCU\Software\Cyberlink]

[HKCU\Software\DivXNetworks]

[HKCU\Software\DivX]

[HKCU\Software\Google]

[HKCU\Software\IM Providers]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\Memeo]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\NewTech Infosystems]

[HKCU\Software\Nokia]

[HKCU\Software\ODBC]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Realtek]

[HKCU\Software\SOFTWARE]

[HKCU\Software\Skype]

[HKCU\Software\Symantec]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VSRevoGroup]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\Winamp]

[HKCU\Software\Windows Live Writer]

[HKCU\Software\Yahoo]

[HKCU\Software\cybelsoft]

[HKLM\Software\Acer Inc.]

[HKLM\Software\Adaptec]

[HKLM\Software\Adobe]

[HKLM\Software\Alps]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Avira]

[HKLM\Software\BrowserChoice]

[HKLM\Software\CA561B]

[HKLM\Software\CXT]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Compal]

[HKLM\Software\Conexant Systems Inc ]

[HKLM\Software\Conexant]

[HKLM\Software\CyberLink]

[HKLM\Software\DivXNetworks]

[HKLM\Software\DivX]

[HKLM\Software\FRANCE TELECOM]

[HKLM\Software\Forge of Games]

[HKLM\Software\Global IP Sound]

[HKLM\Software\Google]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\LightScribe]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\MetaStream]

[HKLM\Software\MimarSinan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\Nokia Mobile Phones]

[HKLM\Software\Nokia]

[HKLM\Software\ODBC]

[HKLM\Software\OMSI]

[HKLM\Software\Oberon Media]

[HKLM\Software\On Demand Distribution]

[HKLM\Software\PC Connectivity Solution]

[HKLM\Software\PCSuite]

[HKLM\Software\Panda Software]

[HKLM\Software\Policies]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\Reflexive Entertainment]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\SOFTWARE]

[HKLM\Software\SONIX]

[HKLM\Software\SRS Labs]

[HKLM\Software\Skype]

[HKLM\Software\Sonic]

[HKLM\Software\Suyin]

[HKLM\Software\SymDebug]

[HKLM\Software\Symantec]

[HKLM\Software\Viewpoint]

[HKLM\Software\Volatile]

[HKLM\Software\Waves Audio]

[HKLM\Software\Western Digital]

[HKLM\Software\WholeSecurity]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Yahoo]

[HKLM\Software\acer]

[HKLM\Software\cybelsoft]

[HKLM\Software\muvee Technologies]

[HKLM\Software\nSplitter]

~ Scan Softwares in 00mn 01s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 08/09/2007 - 23:30:54 - [547041647] ----D- C:\Program Files\Acer Arcade Deluxe

O43 - CFD: 08/09/2007 - 23:23:36 - [1316014] ----D- C:\Program Files\ACER Crystal Eye webcam

O43 - CFD: 10/08/2007 - 10:05:36 - [369872856] ----D- C:\Program Files\Acer GameZone

O43 - CFD: 08/09/2007 - 23:35:14 - [1360873] ----D- C:\Program Files\Acer Inc

O43 - CFD: 10/08/2007 - 09:59:44 - [12683094] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

O43 - CFD: 07/12/2008 - 21:03:52 - [161580938] ----D- C:\Program Files\Adobe

O43 - CFD: 08/09/2007 - 23:33:54 - [11413487] ----D- C:\Program Files\Apoint2K

O43 - CFD: 21/07/2009 - 08:52:50 - [187935376] ----D- C:\Program Files\Avira

O43 - CFD: 24/12/2008 - 19:23:22 - [392881] ----D- C:\Program Files\Bonjour

O43 - CFD: 15/06/2009 - 13:11:04 - [2581677] ----D- C:\Program Files\CCleaner

O43 - CFD: 21/10/2008 - 21:56:18 - [3120999] ----D- C:\Program Files\CDex_150

O43 - CFD: 29/07/2011 - 12:52:40 - [946518977] ----D- C:\Program Files\Common Files

O43 - CFD: 10/08/2007 - 08:40:30 - [1065440] ----D- C:\Program Files\CONEXANT

O43 - CFD: 10/08/2007 - 09:43:52 - [172409416] ----D- C:\Program Files\CyberLink

O43 - CFD: 21/08/2009 - 19:42:16 - [1595928] ----D- C:\Program Files\DIFX

O43 - CFD: 27/06/2011 - 08:47:48 - [136060153] ----D- C:\Program Files\DivX

O43 - CFD: 07/06/2008 - 14:13:34 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 21/03/2010 - 14:42:06 - [987320] ----D- C:\Program Files\FLAC

O43 - CFD: 27/06/2011 - 08:47:44 - [307563560] ----D- C:\Program Files\Google

O43 - CFD: 04/08/2008 - 20:44:46 - [18720806] ----D- C:\Program Files\IBoot

O43 - CFD: 04/08/2008 - 20:44:52 - [97620284] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 08/09/2007 - 23:22:42 - [8167472] ----D- C:\Program Files\Intel

O43 - CFD: 18/10/2011 - 04:06:16 - [6271257] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 08/09/2007 - 23:29:28 - [2272070] ----D- C:\Program Files\Launch Manager

O43 - CFD: 19/10/2011 - 07:52:50 - [5364227] ----D- C:\Program Files\ma-config.com

O43 - CFD: 08/06/2010 - 08:15:12 - [3098312] ----D- C:\Program Files\Microsoft

O43 - CFD: 02/11/2006 - 14:37:36 - [93446071] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 30/06/2011 - 08:47:32 - [379278597] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 18/10/2011 - 04:08:18 - [38412395] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 31/01/2009 - 08:36:46 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 16/10/2009 - 03:02:30 - [151889282] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 25/11/2010 - 04:02:16 - [8167779] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 15/08/2010 - 03:52:54 - [99342446] ----D- C:\Program Files\Movie Maker

O43 - CFD: 02/11/2006 - 14:37:36 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 11/06/2008 - 08:02:26 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 10/08/2007 - 09:19:00 - [49022275] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 14/09/2011 - 09:44:42 - [91509007] ----D- C:\Program Files\Nokia

O43 - CFD: 25/03/2009 - 20:10:44 - [21663757] ----D- C:\Program Files\OrangeHSS

O43 - CFD: 01/09/2008 - 23:12:28 - [70971889] ----D- C:\Program Files\Panda Security

O43 - CFD: 14/09/2011 - 09:48:36 - [13591630] ----D- C:\Program Files\PC Connectivity Solution

O43 - CFD: 10/06/2009 - 18:27:34 - [77503796] ----D- C:\Program Files\QuickTime

O43 - CFD: 10/08/2007 - 08:31:22 - [15921159] ----D- C:\Program Files\Realtek

O43 - CFD: 02/11/2006 - 14:37:36 - [38694657] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 25/03/2009 - 20:05:56 - [31013246] ----D- C:\Program Files\Securitoo

O43 - CFD: 18/10/2011 - 07:41:20 - [34455133] R---D- C:\Program Files\Skype

O43 - CFD: 08/09/2007 - 23:23:36 - [0] ----D- C:\Program Files\SUYIN

O43 - CFD: 07/09/2008 - 20:56:14 - [20249751] ----D- C:\Program Files\Symantec

O43 - CFD: 02/11/2006 - 15:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 30/11/2008 - 03:38:58 - [7558675] ----D- C:\Program Files\Viewpoint

O43 - CFD: 15/06/2008 - 16:55:12 - [4275566] ----D- C:\Program Files\VS Revo Group

O43 - CFD: 26/01/2011 - 00:23:54 - [39298564] ----D- C:\Program Files\Western Digital

O43 - CFD: 20/09/2009 - 23:50:32 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 20/09/2009 - 23:50:28 - [2737152] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 20/09/2009 - 23:50:18 - [4490624] ----D- C:\Program Files\Windows Defender

O43 - CFD: 20/09/2009 - 23:50:28 - [7084664] ----D- C:\Program Files\Windows Journal

O43 - CFD: 04/08/2011 - 14:09:20 - [147948504] ----D- C:\Program Files\Windows Live

O43 - CFD: 18/10/2011 - 04:06:16 - [9116344] ----D- C:\Program Files\Windows Mail

O43 - CFD: 14/10/2010 - 03:31:32 - [4498121] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 07/06/2008 - 14:13:34 - [7957544] ----D- C:\Program Files\Windows NT

O43 - CFD: 20/09/2009 - 23:50:24 - [13528738] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 19/11/2009 - 04:20:08 - [134144] ----D- C:\Program Files\Windows Portable Devices

O43 - CFD: 20/09/2009 - 23:50:28 - [6527558] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 15/06/2008 - 16:35:04 - [3451643] ----D- C:\Program Files\WinRAR

O43 - CFD: 03/02/2011 - 22:04:42 - [4234323] ----D- C:\Program Files\Yahoo!

O43 - CFD: 19/10/2011 - 08:49:34 - [4198886] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 07/12/2008 - 21:04:06 - [7532263] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 11/04/2009 - 16:03:48 - [5219647] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 10/08/2007 - 09:55:58 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 13/06/2010 - 07:49:48 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared

O43 - CFD: 25/03/2009 - 20:03:12 - [35840] ----D- C:\Program Files\Common Files\France Telecom

O43 - CFD: 10/08/2007 - 09:30:54 - [10045976] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 10/08/2007 - 09:18:38 - [7178034] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 04/08/2011 - 14:08:28 - [437754143] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 10/08/2007 - 09:18:14 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 10/08/2007 - 09:19:02 - [2290478] ----D- C:\Program Files\Common Files\NewTech Infosystems

O43 - CFD: 03/06/2011 - 11:03:06 - [81688720] ----D- C:\Program Files\Common Files\Nokia

O43 - CFD: 10/08/2007 - 10:01:54 - [114688] ----D- C:\Program Files\Common Files\Oberon Media

O43 - CFD: 27/05/2010 - 08:33:26 - [4673856] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 02/11/2006 - 13:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 08/09/2007 - 23:22:58 - [4820842] ----D- C:\Program Files\Common Files\snp2uvc

O43 - CFD: 02/11/2006 - 13:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 16/06/2010 - 20:51:30 - [12706463] ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD: 20/09/2009 - 23:50:24 - [42750094] ----D- C:\Program Files\Common Files\System

O43 - CFD: 31/01/2009 - 08:32:50 - [230191999] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 10/06/2008 - 19:34:18 - [19064312] -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller

O43 - CFD: 07/12/2008 - 21:04:00 - [752] --H-D- C:\ProgramData\Adobe

O43 - CFD: 30/01/2009 - 21:19:18 - [0] --H-D- C:\ProgramData\AOL

O43 - CFD: 07/05/2011 - 14:29:24 - [13607986] ----D- C:\ProgramData\AOL Downloads

O43 - CFD: 30/11/2008 - 03:39:06 - [351946] --H-D- C:\ProgramData\AOL OCP

O43 - CFD: 07/05/2011 - 14:29:24 - [58981888] ----D- C:\ProgramData\Apple

O43 - CFD: 05/10/2008 - 00:28:28 - [98587077] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 21/07/2009 - 08:52:50 - [118569390] ----D- C:\ProgramData\Avira

O43 - CFD: 07/06/2008 - 14:13:34 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 07/05/2011 - 14:29:22 - [3680] ----D- C:\ProgramData\CyberLink

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 27/06/2011 - 08:47:48 - [5371394] ----D- C:\ProgramData\DivX

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 07/06/2008 - 14:13:34 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 14/04/2009 - 20:01:02 - [5437] ----D- C:\ProgramData\Forge of Games

O43 - CFD: 07/05/2011 - 14:29:24 - [523440] ----D- C:\ProgramData\Google

O43 - CFD: 19/10/2011 - 07:52:48 - [1221658] --H-D- C:\ProgramData\ma-config.com

O43 - CFD: 07/06/2008 - 14:13:34 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 23/10/2010 - 13:06:28 - [272263566] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 18/10/2011 - 03:46:56 - [57040] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 07/06/2008 - 14:13:34 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 28/01/2010 - 08:42:40 - [777922593] ----D- C:\ProgramData\Nokia

O43 - CFD: 03/06/2011 - 11:39:42 - [1292] ----D- C:\ProgramData\NokiaAccount

O43 - CFD: 07/05/2011 - 14:29:24 - [536247019] ----D- C:\ProgramData\NokiaInstallerCache

O43 - CFD: 07/05/2011 - 14:29:22 - [104139264] ----D- C:\ProgramData\NokiaMusic

O43 - CFD: 16/06/2010 - 22:03:02 - [155] --H-D- C:\ProgramData\Norton

O43 - CFD: 13/06/2010 - 10:48:12 - [172321] --H-D- C:\ProgramData\NortonInstaller

O43 - CFD: 08/09/2007 - 23:28:56 - [126601] --H-D- C:\ProgramData\NVIDIA

O43 - CFD: 27/01/2010 - 20:59:12 - [177373426] ----D- C:\ProgramData\OviInstallerCache

O43 - CFD: 07/05/2011 - 14:29:24 - [324517] ----D- C:\ProgramData\PC Suite

O43 - CFD: 18/10/2011 - 07:41:10 - [90077235] ----D- C:\ProgramData\Skype

O43 - CFD: 28/07/2011 - 21:55:40 - [5491046] ----D- C:\ProgramData\Skype Extras

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 13/06/2010 - 10:48:14 - [121733746] --H-D- C:\ProgramData\Symantec

O43 - CFD: 02/11/2006 - 15:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 07/05/2011 - 14:29:24 - [3991] ----D- C:\ProgramData\Viewpoint

O43 - CFD: 26/01/2011 - 00:26:10 - [0] --H-D- C:\ProgramData\Western Digital

O43 - CFD: 03/05/2009 - 11:19:02 - [0] --H-D- C:\ProgramData\WindowsSearch

O43 - CFD: 10/06/2008 - 19:27:00 - [218232] --H-D- C:\ProgramData\WLInstaller

O43 - CFD: 07/05/2011 - 14:29:24 - [1571] ----D- C:\ProgramData\Yahoo!

O43 - CFD: 10/08/2007 - 09:59:46 - [6904815] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

O43 - CFD: 16/06/2008 - 22:03:30 - [6983164] ----D- C:\Users\Nicolas\AppData\Roaming\Adobe

O43 - CFD: 25/10/2008 - 14:19:18 - [421996] --H-D- C:\Users\Nicolas\AppData\Roaming\Apple Computer

O43 - CFD: 08/03/2011 - 09:22:42 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\CyberLink

O43 - CFD: 02/05/2010 - 10:23:20 - [165888] --H-D- C:\Users\Nicolas\AppData\Roaming\DivX

O43 - CFD: 07/06/2008 - 14:18:42 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\Identities

O43 - CFD: 13/06/2008 - 07:28:14 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\InstallShield

O43 - CFD: 07/06/2008 - 14:17:22 - [10049] --H-D- C:\Users\Nicolas\AppData\Roaming\Macromedia

O43 - CFD: 02/11/2006 - 14:37:36 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\Media Center Programs

O43 - CFD: 27/02/2011 - 13:50:28 - [19806441] -S--D- C:\Users\Nicolas\AppData\Roaming\Microsoft

O43 - CFD: 28/01/2010 - 08:44:34 - [82510720] ----D- C:\Users\Nicolas\AppData\Roaming\Nokia

O43 - CFD: 28/01/2010 - 08:42:58 - [114806] ----D- C:\Users\Nicolas\AppData\Roaming\Nokia Ovi Suite

O43 - CFD: 23/10/2010 - 15:20:00 - [282711962] --H-D- C:\Users\Nicolas\AppData\Roaming\PC Suite

O43 - CFD: 19/10/2011 - 08:48:28 - [13622003] ----D- C:\Users\Nicolas\AppData\Roaming\Skype

O43 - CFD: 29/07/2011 - 12:51:02 - [13984] --H-D- C:\Users\Nicolas\AppData\Roaming\skypePM

O43 - CFD: 05/07/2008 - 02:44:30 - [8704] --H-D- C:\Users\Nicolas\AppData\Roaming\Template

O43 - CFD: 26/01/2011 - 00:26:38 - [28040] ----D- C:\Users\Nicolas\AppData\Roaming\Western Digital

O43 - CFD: 20/01/2011 - 02:23:36 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\Windows Live Writer

O43 - CFD: 15/06/2008 - 16:35:20 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\WinRAR

O43 - CFD: 15/06/2008 - 17:28:50 - [0] --H-D- C:\Users\Nicolas\AppData\Roaming\Yahoo!

O43 - CFD: 07/05/2011 - 14:30:18 - [7323] ----D- C:\Users\Nicolas\AppData\Local\Acer Arcade Deluxe

O43 - CFD: 07/01/2009 - 00:58:32 - [12016] --H-D- C:\Users\Nicolas\AppData\Local\acer eNM

O43 - CFD: 16/06/2008 - 22:03:38 - [2586893] ----D- C:\Users\Nicolas\AppData\Local\Adobe

O43 - CFD: 22/06/2008 - 14:51:48 - [28016128] ----D- C:\Users\Nicolas\AppData\Local\Apple

O43 - CFD: 25/10/2008 - 14:19:18 - [2874013] --H-D- C:\Users\Nicolas\AppData\Local\Apple Computer

O43 - CFD: 07/06/2008 - 14:17:20 - [0] -SH-D- C:\Users\Nicolas\AppData\Local\Application Data

O43 - CFD: 03/02/2011 - 22:02:50 - [10708766] --H-D- C:\Users\Nicolas\AppData\Local\Google

O43 - CFD: 07/06/2008 - 14:17:20 - [0] -SH-D- C:\Users\Nicolas\AppData\Local\Historique

O43 - CFD: 23/02/2009 - 13:11:18 - [2930] --H-D- C:\Users\Nicolas\AppData\Local\IsolatedStorage

O43 - CFD: 03/02/2011 - 22:01:12 - [427350290] ----D- C:\Users\Nicolas\AppData\Local\Microsoft

O43 - CFD: 07/06/2008 - 17:25:12 - [194739] ----D- C:\Users\Nicolas\AppData\Local\Microsoft Games

O43 - CFD: 26/06/2009 - 11:21:04 - [0] --H-D- C:\Users\Nicolas\AppData\Local\Microsoft Help

O43 - CFD: 23/10/2010 - 14:31:24 - [147628171] --H-D- C:\Users\Nicolas\AppData\Local\Nokia

O43 - CFD: 14/09/2011 - 10:21:38 - [1249] --H-D- C:\Users\Nicolas\AppData\Local\NokiaAccount

O43 - CFD: 15/06/2008 - 13:53:02 - [14772] --H-D- C:\Users\Nicolas\AppData\Local\OD2

O43 - CFD: 07/05/2011 - 14:30:20 - [6746] ----D- C:\Users\Nicolas\AppData\Local\PlayMovie

O43 - CFD: 15/06/2008 - 11:41:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\PowerCinema

O43 - CFD: 19/10/2011 - 08:47:42 - [40358567] ----D- C:\Users\Nicolas\AppData\Local\Temp

O43 - CFD: 07/06/2008 - 14:17:20 - [0] -SH-D- C:\Users\Nicolas\AppData\Local\Temporary Internet Files

O43 - CFD: 10/06/2008 - 19:36:42 - [2061370] ----D- C:\Users\Nicolas\AppData\Local\VirtualStore

O43 - CFD: 26/01/2011 - 00:23:12 - [103741] --H-D- C:\Users\Nicolas\AppData\Local\Western Digital

O43 - CFD: 26/01/2011 - 00:29:06 - [716] ----D- C:\Users\Nicolas\AppData\Local\Western_Digital

O43 - CFD: 19/10/2011 - 06:49:46 - [36864] --H-D- C:\Users\Nicolas\AppData\Local\Windows Live

O43 - CFD: 20/01/2011 - 02:23:42 - [373743] --H-D- C:\Users\Nicolas\AppData\Local\Windows Live Writer

O43 - CFD: 23/08/2011 - 08:06:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{01D1B829-AE1C-4B8B-B31B-E6BEB0CAC951}

O43 - CFD: 13/09/2011 - 07:53:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{01DBF450-D1FB-4A47-8052-ED4C96361AD2}

O43 - CFD: 23/08/2011 - 08:06:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{02B57558-6A74-4B68-B54E-B9C75642CB61}

O43 - CFD: 07/08/2011 - 04:54:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{02E313A1-2C5D-4143-A4C2-ECB1B922E293}

O43 - CFD: 22/04/2011 - 13:13:16 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{051AA332-DAF1-408A-98DB-6B8FFBC0F864}

O43 - CFD: 30/05/2011 - 08:04:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{05767B2C-0E26-4865-A7F3-A4917EBF98EF}

O43 - CFD: 12/04/2011 - 20:39:08 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{05D2CB9C-D8A7-4409-A869-C2111C94C8F9}

O43 - CFD: 26/05/2011 - 20:03:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{064E77F9-D2A6-4D2B-990B-6E5E786A17E8}

O43 - CFD: 19/07/2011 - 13:05:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{068BF775-CACA-4EDE-AEDC-DA4B31E95FD2}

O43 - CFD: 17/10/2011 - 16:01:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0696FC65-4AA9-4884-B356-5C12E0564DBC}

O43 - CFD: 09/08/2011 - 21:47:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{07C94F89-2004-4A17-A8C6-60AC2E85B782}

O43 - CFD: 07/08/2011 - 16:56:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{082136D1-53D9-434B-9D24-54F23AD19502}

O43 - CFD: 04/05/2011 - 12:50:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{0A4514B8-44A4-4FE0-8E07-5C50937245D0}

O43 - CFD: 29/06/2011 - 08:06:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D0410F9-E7BB-4976-91B5-CB7C284FD012}

O43 - CFD: 18/08/2011 - 08:45:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D450231-A79F-49B0-A6B6-0439433C9B5D}

O43 - CFD: 05/08/2011 - 16:46:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D9C69EC-2FD6-4D8E-8033-2FD8E77FB8E5}

O43 - CFD: 28/05/2011 - 00:27:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0E2F32D5-9E19-4ED1-A220-566F46FB0360}

O43 - CFD: 02/08/2011 - 08:31:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{104B1719-CD4F-45F8-AD57-9D0EC36DDE94}

O43 - CFD: 01/08/2011 - 20:25:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{14C1579A-8725-43E9-98FC-3DCE3FD1E30B}

O43 - CFD: 08/09/2011 - 14:46:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{15688BF6-94B5-4F4A-A28C-E71C0A022B01}

O43 - CFD: 08/09/2011 - 02:45:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{157AFD27-0B86-4EF0-B38F-5E30C2FF2957}

O43 - CFD: 27/04/2011 - 14:07:10 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{1716E368-88C9-48F0-B842-929E5893FE20}

O43 - CFD: 22/06/2011 - 12:58:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{176AE202-58F4-4F40-B710-FC9390B6C6D9}

O43 - CFD: 10/04/2011 - 02:33:58 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{1823FBD3-B518-4D72-8825-F056DC3E9B85}

O43 - CFD: 08/09/2011 - 02:45:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{195FE989-C99A-4978-9D08-120670AD2BCE}

O43 - CFD: 10/05/2011 - 04:58:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{1CF21946-19FB-4B20-B569-72DED2CA7407}

O43 - CFD: 07/09/2011 - 12:19:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{1FA9BC70-533A-43A3-8081-7F5B270D3D43}

O43 - CFD: 18/08/2011 - 08:45:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{201BA797-27EB-4909-B78E-E92AB1F9E09B}

O43 - CFD: 14/04/2011 - 00:46:14 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{201CAAE6-9F58-42EA-9A96-560A46BEE2DB}

O43 - CFD: 24/08/2011 - 08:20:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2185FF2F-BBCD-44AE-BE56-B6D514183C9B}

O43 - CFD: 17/08/2011 - 01:33:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{219B3F82-748F-4672-AAB9-9D1910BE0B6B}

O43 - CFD: 09/05/2011 - 14:24:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{21A3AD7B-54CE-41E1-A40D-3DC88E51C94D}

O43 - CFD: 04/05/2011 - 00:39:00 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{21BE2FDB-419D-4B75-B555-6F16E0C4235F}

O43 - CFD: 12/09/2011 - 14:21:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{21CF5F49-D9E2-4915-B1F6-1085A6DB25AA}

O43 - CFD: 04/07/2011 - 20:34:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{22622FB6-7061-40BF-ACED-358AFD854D8A}

O43 - CFD: 26/08/2011 - 21:39:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{23724180-525F-428E-9E6B-A3586A05EB63}

O43 - CFD: 02/04/2011 - 12:34:12 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{237CBA0B-29F8-4BE2-A1C4-64722BB79BFD}

O43 - CFD: 25/08/2011 - 01:21:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2419A4B3-FC11-4C99-993A-A8810A4E75AC}

O43 - CFD: 23/06/2011 - 00:58:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{258004B9-9031-453D-9D02-CCEF9E16F018}

O43 - CFD: 18/10/2011 - 16:03:00 - [0] ----D- C:\Users\Nicolas\AppData\Local\{25D63651-06B4-4B18-97DF-8FF53F5D8657}

O43 - CFD: 13/05/2011 - 13:06:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{26BF282E-5E56-4F41-BD07-8940D52ABA9D}

O43 - CFD: 01/07/2011 - 00:47:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{272DCB9A-1417-4030-ACC4-BCDC2A69BB8C}

O43 - CFD: 02/09/2011 - 11:29:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{27AC9313-9AC6-4638-B106-270CD7576CFD}

O43 - CFD: 09/04/2011 - 02:32:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2824018A-00F5-49BC-B991-3D88790EC3DF}

O43 - CFD: 19/10/2011 - 06:49:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2826701F-0EB6-4852-95AA-A08D5B360515}

O43 - CFD: 03/09/2011 - 05:01:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{292000B0-76F8-4D27-99A9-3D9731FE3651}

O43 - CFD: 17/08/2011 - 13:41:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{29365CE0-9E82-4615-B7B3-F33D2B114EF8}

O43 - CFD: 25/06/2011 - 06:27:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2A807C4D-C915-49F3-840F-104B0D281BD0}

O43 - CFD: 07/04/2011 - 08:57:24 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2B0DF9BB-ED77-4005-BF66-5736C74A049C}

O43 - CFD: 20/05/2011 - 01:00:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2E2953AD-ED97-407E-843F-28F669074F03}

O43 - CFD: 27/04/2011 - 02:06:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2E485999-D106-4512-BCD6-E69F50A718E3}

O43 - CFD: 07/09/2011 - 12:19:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{325F78B7-DE39-4A04-88F1-0CEFE944AEFD}

O43 - CFD: 09/09/2011 - 20:01:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{34AAEE24-C9BE-44E1-9DCE-C4804023D067}

O43 - CFD: 05/04/2011 - 07:53:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{35C61AD4-65A3-41AD-B812-646A7B620802}

O43 - CFD: 12/09/2011 - 02:20:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3614C3EC-E4BC-49D8-81E9-60F4585B28C7}

O43 - CFD: 02/06/2011 - 23:42:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{361C65C8-227F-48C9-A109-D7057771BD4D}

O43 - CFD: 17/04/2011 - 01:17:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{377F7944-0D4A-4CE1-A09A-8B7ED72686BB}

O43 - CFD: 29/08/2011 - 12:45:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{38CB4F6A-C242-4104-9C8D-EC0D835833DF}

O43 - CFD: 15/04/2011 - 00:47:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{396C85C5-1DDE-4050-8305-525931C12EEE}

O43 - CFD: 29/08/2011 - 12:45:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{39A2B857-F73F-47B7-900A-3B06ED10EF24}

O43 - CFD: 21/06/2011 - 08:35:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3A70E8F9-84AD-49E1-B2BE-1586ECF72A93}

O43 - CFD: 12/09/2011 - 14:21:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3AAF5882-D858-4BEE-A709-680DD6ABD1BD}

O43 - CFD: 11/08/2011 - 08:33:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4038975C-5084-42B1-A46A-0225E88DEE87}

O43 - CFD: 05/05/2011 - 22:39:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{40B8E773-12EA-4D22-BC49-F03D53769161}

O43 - CFD: 12/07/2011 - 12:58:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{40EF6C29-12BC-4D2F-91A7-2EB06D499C8E}

O43 - CFD: 26/05/2011 - 08:03:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{410D8A1E-469B-4745-818D-745551EB386C}

O43 - CFD: 30/07/2011 - 07:14:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{41892E61-47C5-4860-B412-8B43C0CE6FA3}

O43 - CFD: 29/04/2011 - 07:49:36 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{42A09904-C713-4CCA-B5CE-EDD03269B67D}

O43 - CFD: 17/08/2011 - 01:33:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4310D54E-A726-4B29-B162-9EFF83ADEC97}

O43 - CFD: 03/09/2011 - 05:01:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{43F69615-ECB1-451C-97B0-10BB17F4F81F}

O43 - CFD: 18/08/2011 - 20:46:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{457D6975-6AC2-44C7-881A-1712DD182058}

O43 - CFD: 10/08/2011 - 12:33:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{459C639B-9FC1-47D5-9783-FFEE2C2BCBAA}

O43 - CFD: 05/05/2011 - 08:14:32 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{47864E3E-2858-4040-B01B-351D5FE99F82}

O43 - CFD: 18/10/2011 - 16:03:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{487865AC-CD40-4D04-83A9-7D4261A85A88}

O43 - CFD: 04/08/2011 - 08:52:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{48999661-0E25-46B3-83E9-E41B9AB59878}

O43 - CFD: 04/08/2011 - 14:15:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4B6DE74C-2D2D-4607-A3FD-2CE9F26037C6}

O43 - CFD: 13/05/2011 - 01:56:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4B96A6C9-BF50-4B8C-9818-C3BCF3DC240F}

O43 - CFD: 30/04/2011 - 13:30:32 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{4C6C2C66-EC02-461C-98F3-B520F57258A3}

O43 - CFD: 06/07/2011 - 08:36:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4D299E4E-0D01-4BF3-9F21-E9494EB148AC}

O43 - CFD: 10/07/2011 - 08:49:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4D941161-D630-4DF1-8309-4B31BC3EDF72}

O43 - CFD: 01/08/2011 - 01:32:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{524DA923-598A-4EF2-A608-85D244624556}

O43 - CFD: 02/05/2011 - 08:04:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{5262DB8E-195A-47FF-BA8C-14DEFC7007AD}

O43 - CFD: 31/08/2011 - 07:46:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{52A0A4DA-B076-4B21-AFB4-B55F877AA0A4}

O43 - CFD: 26/08/2011 - 07:47:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{544B84B2-3EDC-4A51-9B98-D0385A5559FC}

O43 - CFD: 14/09/2011 - 00:26:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{549442FB-77F1-4B4D-B278-B2E3736FB052}

O43 - CFD: 02/05/2011 - 21:10:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{54E9599E-2C0F-4C24-904F-A44776BA1B44}

O43 - CFD: 20/06/2011 - 16:32:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5582CB3E-4404-40AE-B2CF-01BD459FF255}

O43 - CFD: 18/05/2011 - 20:33:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{56285D08-06C7-4459-A6E7-AD97F1AABCBF}

O43 - CFD: 07/07/2011 - 13:13:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{57513790-7C71-41C2-A0FB-136E93ED561C}

O43 - CFD: 21/08/2011 - 23:24:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{59F17280-71CB-4292-BC7C-56C081655481}

O43 - CFD: 14/09/2011 - 10:18:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5A0F04EF-D949-4F29-A4E4-0B170D8E5FBD}

O43 - CFD: 10/09/2011 - 08:12:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5A64E02F-DC35-48A6-90ED-B5BCF8994161}

O43 - CFD: 11/07/2011 - 12:48:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5E479F61-0089-4AEF-836E-6A99FE673380}

O43 - CFD: 12/09/2011 - 02:20:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5EDA39BF-1D3C-47B9-84AE-06C9892CF1F1}

O43 - CFD: 04/07/2011 - 08:34:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5F0477EF-728B-4EAB-A9A0-ECB21443E747}

O43 - CFD: 18/08/2011 - 20:46:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{605CA3FF-D6C4-495C-89AD-51E6444E8B8E}

O43 - CFD: 19/10/2011 - 06:49:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{61FCBC5E-5CC8-4DEC-9782-F96866F13C63}

O43 - CFD: 02/07/2011 - 00:43:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{62E5F373-2A3B-44D1-8815-E41F45474CA8}

O43 - CFD: 08/08/2011 - 09:02:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{630CB75A-4E5D-45F9-B911-612EA6D6269E}

O43 - CFD: 16/04/2011 - 10:25:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{644D46BB-B898-494F-A731-CA73F04D9547}

O43 - CFD: 26/08/2011 - 07:47:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6458E485-3DE0-4013-8581-68A59ECB269D}

O43 - CFD: 27/06/2011 - 13:47:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{64746393-813A-45A5-A7F3-4EF631CE711C}

O43 - CFD: 30/08/2011 - 13:48:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{649F2A17-E03C-4D66-A6BC-D577F37241EB}

O43 - CFD: 01/04/2011 - 13:16:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{69B9AF37-BCD4-4A4E-B727-1C9C40D5E117}

O43 - CFD: 07/07/2011 - 00:28:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{69C1C18D-926F-42DA-9D8F-BA7A4CAB1C31}

O43 - CFD: 02/08/2011 - 22:34:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6AE754C4-EF4A-43AA-B9A8-865B7FBE6EC9}

O43 - CFD: 08/04/2011 - 01:26:06 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{6C828397-BF5B-4B04-9E8C-E64A6841C90A}

O43 - CFD: 30/08/2011 - 13:48:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6CD4AE68-D6C1-4D30-B70F-DF4104042F17}

O43 - CFD: 13/09/2011 - 07:54:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6D89AB7F-E389-4579-9934-7BC3526347CE}

O43 - CFD: 18/10/2011 - 04:02:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6E5E3BF9-F60F-4DB3-86B7-7D445E3C0147}

O43 - CFD: 28/04/2011 - 02:07:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{6F877B13-A0DE-412F-B43F-1FFBF0A708EE}

O43 - CFD: 10/05/2011 - 22:35:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{70551B93-4EAF-4599-891B-DE296004BCA1}

O43 - CFD: 25/08/2011 - 01:21:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7055CA60-F6D2-459E-B52B-7B960688BDB4}

O43 - CFD: 22/08/2011 - 12:44:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7245F472-8AA5-4057-A11A-06488303B5F3}

O43 - CFD: 08/07/2011 - 13:15:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{72609C22-1585-4DF9-B4FA-06D433852E9C}

O43 - CFD: 08/05/2011 - 01:57:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{742087F6-F931-4803-93A0-B2F167E915E2}

O43 - CFD: 21/04/2011 - 13:11:52 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{743D6339-5F5C-468A-8919-75560AB5172A}

O43 - CFD: 16/08/2011 - 12:54:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{769ED67F-02E1-404B-B9D5-979256CC5B89}

O43 - CFD: 16/08/2011 - 12:54:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{76D695DF-F845-48C2-A29B-54D20FF1A53D}

O43 - CFD: 09/08/2011 - 21:48:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{77A96170-94AC-45CC-9340-A7DCDD15FDE6}

O43 - CFD: 28/06/2011 - 20:05:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{791565C6-CD01-4A1D-BF0C-C264CD20CCBE}

O43 - CFD: 08/04/2011 - 13:26:40 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{79606420-9CBE-481E-BCAE-FD892B230D5B}

O43 - CFD: 19/06/2011 - 08:26:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{79B8DE52-100E-424E-AC04-64DEB37D2443}

O43 - CFD: 29/05/2011 - 18:05:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7D1AAB87-E3D5-4D5D-B701-DC0E056226B8}

O43 - CFD: 23/06/2011 - 20:36:00 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7FA608BB-763E-45CC-922E-3AD47C6563D1}

O43 - CFD: 06/04/2011 - 07:54:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{7FE0E0AB-CD76-40DE-AC37-C71E74C93132}

O43 - CFD: 23/08/2011 - 20:19:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{80D2BE9D-FD3E-4994-A2E1-E9D5533EB765}

O43 - CFD: 18/07/2011 - 13:04:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{81255011-12A4-4199-8BEF-360C17D45E85}

O43 - CFD: 30/05/2011 - 22:54:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{830335B7-786B-4345-B74F-E63186D09F9A}

O43 - CFD: 25/08/2011 - 13:22:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8427068E-1B35-431D-9CDE-BF73C1F6523D}

O43 - CFD: 04/04/2011 - 07:42:26 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{845AC4B9-7662-4F36-91A9-1DED62E8618A}

O43 - CFD: 17/10/2011 - 16:01:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{854191BD-ED90-4B5E-BADF-5F76EFAD3241}

O43 - CFD: 26/04/2011 - 12:57:56 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{85EA2B74-BE3A-4F33-A2C5-8F12A2BC7A65}

O43 - CFD: 11/09/2011 - 02:19:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{87215D52-AB18-46F7-A68C-E66F56D9E6E0}

O43 - CFD: 15/08/2011 - 23:04:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{887B92D5-6794-4807-A539-918E9EC1F58A}

O43 - CFD: 11/04/2011 - 20:38:00 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{89E8074B-A30B-434D-A87D-0CEA735EF5EB}

O43 - CFD: 25/04/2011 - 23:03:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{8AC82D7B-F712-45DF-BFF3-20BE4BC073EC}

O43 - CFD: 09/09/2011 - 20:01:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8B0043B6-684A-488B-A93A-33E5F811721E}

O43 - CFD: 31/05/2011 - 12:51:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8B6CB7B8-22EA-4536-AB23-DA704DE40DC0}

O43 - CFD: 15/08/2011 - 23:04:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8BA56544-9828-4AE9-B2DD-40161AB6F9F4}

O43 - CFD: 03/07/2011 - 20:33:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8BE7D5AA-7706-4323-94E9-504F51231519}

O43 - CFD: 13/07/2011 - 07:49:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8C314C3C-89B5-4361-860A-219154E7BD01}

O43 - CFD: 08/09/2011 - 14:46:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8D21E410-DFEE-4E35-A75D-80505DAFA59F}

O43 - CFD: 23/05/2011 - 12:42:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8D7F0506-733B-45A4-B9B8-75FA3656528E}

O43 - CFD: 11/05/2011 - 12:50:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8E48BC47-49DF-49EF-B948-22E09B3B39CA}

O43 - CFD: 07/08/2011 - 04:55:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{902B38F2-1D65-4FF1-B723-779883423701}

O43 - CFD: 15/04/2011 - 19:31:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{90618998-4DE2-40F1-BAF2-75B476ECA575}

O43 - CFD: 18/04/2011 - 13:19:56 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9273450B-6688-4BE3-9560-EF8176D6AF73}

O43 - CFD: 20/04/2011 - 01:17:10 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9479B4D0-D3A5-43F4-9C44-48463CDB9397}

O43 - CFD: 14/09/2011 - 00:26:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{962A2C7B-5FEF-41F6-9E5C-CEAA949031C1}

O43 - CFD: 11/09/2011 - 14:19:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{97BD85D4-D0A2-454A-BC93-4026ABFB4F2A}

O43 - CFD: 16/05/2011 - 02:10:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{984ECDA3-33B7-4F35-9E2D-CA04515FEDDD}

O43 - CFD: 18/04/2011 - 01:19:08 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9959A74E-505C-449B-B666-D1C2D41036E2}

O43 - CFD: 03/05/2011 - 09:10:36 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9B91D20D-A7CF-4DA6-AF49-30A3AE7F39D2}

O43 - CFD: 01/06/2011 - 23:41:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9E2FA494-09F2-4138-B6CC-0C04BD208A7D}

O43 - CFD: 31/03/2011 - 23:44:52 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9E7AA2F7-FD26-49FC-8F6C-48827D5853D4}

O43 - CFD: 07/08/2011 - 16:55:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9FB16455-4739-4B4B-A444-EC12AD37321B}

O43 - CFD: 11/07/2011 - 00:19:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9FC55679-0834-430B-962F-2B24A3250B05}

O43 - CFD: 19/07/2011 - 01:04:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A07158B9-EBC8-4C00-A121-879F82965B69}

O43 - CFD: 05/08/2011 - 16:46:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A1103AF7-5DAA-47E0-8E11-83C3F69320E9}

O43 - CFD: 14/07/2011 - 03:01:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A24546AC-D0E2-4391-8FB1-48E494FD4D70}

O43 - CFD: 24/05/2011 - 00:43:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A2482C8A-7A0C-4FF8-8C01-FFD9D230A00F}

O43 - CFD: 09/07/2011 - 17:20:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A2E4F0D7-505F-4668-B7F3-294E0F123658}

O43 - CFD: 22/04/2011 - 01:12:26 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{A2F4BA69-9650-414B-BFF5-C78F9942BDEB}

O43 - CFD: 06/08/2011 - 10:16:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A4C865CC-649D-4F52-8D4A-850ECA40D35E}

O43 - CFD: 17/05/2011 - 08:31:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A4EE3B5C-D90A-4E8C-B5BF-74604A184F1D}

O43 - CFD: 13/04/2011 - 08:39:42 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{A520DFCB-0EA7-463D-BB70-CEE7AA36BFFF}

O43 - CFD: 14/09/2011 - 00:19:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A53E80DE-443E-4D00-9C13-11AEF5DF1C92}

O43 - CFD: 04/08/2011 - 14:15:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A57FDE44-1AB7-4474-A83F-9439201D444B}

O43 - CFD: 11/09/2011 - 14:20:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AA3C0258-5CD0-4376-AE3C-8E9959AAC61F}

O43 - CFD: 30/06/2011 - 12:47:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AB785249-157C-421D-B1B0-B18A0F0570F8}

O43 - CFD: 30/08/2011 - 01:47:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AC7A3FD4-A3D5-49A0-A5E3-5EDA6B45D933}

O43 - CFD: 01/06/2011 - 08:10:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{ACE872E2-CD3C-49FD-9BE8-21614B7B650A}

O43 - CFD: 21/08/2011 - 23:24:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{ADA64A16-A585-4FBF-AA0F-C8D0127AA0EF}

O43 - CFD: 28/06/2011 - 08:05:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AF2A8CB5-0462-4408-B988-60CB86610DCA}

O43 - CFD: 01/05/2011 - 14:51:54 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B013E732-6F88-4E4A-9779-007DFD474585}

O43 - CFD: 27/06/2011 - 00:13:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B418CE0E-BE62-4209-ABF3-06D910034F7D}

O43 - CFD: 23/08/2011 - 20:19:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B47CA81C-1B18-4D45-9047-AE3055C8DBB1}

O43 - CFD: 24/07/2011 - 10:50:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B561148B-AB3E-4029-8174-14DC80187A7D}

O43 - CFD: 09/05/2011 - 02:24:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B6AABE19-CADC-4FA1-9F15-E39D08955FE6}

O43 - CFD: 24/05/2011 - 12:54:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B72B1C69-D239-4F8D-BFED-63650048D5DA}

O43 - CFD: 28/08/2011 - 22:02:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B7304482-FA22-4644-BA75-29A932322C7C}

O43 - CFD: 28/04/2011 - 19:49:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B76599A2-57A1-4460-B09C-4FCDD64A2613}

O43 - CFD: 12/08/2011 - 02:06:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B835DE3B-1FDA-4539-A89E-AFEE8E99F7B2}

O43 - CFD: 11/08/2011 - 08:33:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B8BAE3BD-D735-4E4A-8EB7-62F53934B4FD}

O43 - CFD: 12/04/2011 - 08:38:34 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B983CF4B-2C42-4AF5-947F-A6F298E2B0ED}

O43 - CFD: 10/08/2011 - 12:33:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BB1F2D38-7AED-401F-9CE1-7CEEF0F92966}

O43 - CFD: 04/04/2011 - 19:42:40 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{BBBD1705-F5FB-4A3B-AE58-6980E300DBF3}

O43 - CFD: 20/07/2011 - 08:26:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BE7E1664-77EC-4C16-8DE4-E91F348454EF}

O43 - CFD: 09/08/2011 - 02:08:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BEB14A87-012B-4CF8-A9F1-6066DAA60B6B}

O43 - CFD: 14/09/2011 - 10:17:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BF67FD75-5C01-433C-8397-B06322E01FB8}

O43 - CFD: 11/09/2011 - 02:19:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C0115B2F-150D-4F58-8EAD-88AD9358CBA2}

O43 - CFD: 25/05/2011 - 08:03:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C1018744-6F37-4688-B6EE-B8A9FBF7EED0}

O43 - CFD: 02/06/2011 - 11:42:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C123FC98-5FCB-4167-8D50-E0C1E6EF0D40}

O43 - CFD: 24/08/2011 - 08:20:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C1419BF5-8BCE-441C-B80D-58746B011151}

O43 - CFD: 31/08/2011 - 22:02:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C18D7093-034E-45E6-9C20-2343AB8080B9}

O43 - CFD: 18/05/2011 - 08:32:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C70C332B-56EA-4438-97BD-2AC87C0BFBFA}

O43 - CFD: 09/09/2011 - 08:01:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C798069C-4F59-4EDD-8CA4-16F7423EB025}

O43 - CFD: 19/04/2011 - 01:20:30 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{CA3BF34A-CA64-42D7-8619-38B2425E3806}

O43 - CFD: 03/08/2011 - 12:37:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CEA72EB6-B05A-4ECD-8ACF-C1FD094D1CE2}

O43 - CFD: 17/07/2011 - 23:46:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CEC2081B-B2BA-41EB-AFAE-BAD258A6F29C}

O43 - CFD: 16/05/2011 - 19:12:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CFCECDA9-EAD8-4F7D-8ED7-27FB4893CD1C}

O43 - CFD: 09/08/2011 - 02:09:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D04429B9-CB01-408F-BE3F-7C91FF7EB4A4}

O43 - CFD: 31/03/2011 - 11:44:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{D11B46F1-CE0C-4E90-94A7-6A8A86E3E592}

O43 - CFD: 21/05/2011 - 17:44:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D29F63FB-4646-4553-BFCB-C339963780D4}

O43 - CFD: 29/07/2011 - 12:51:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D2A6C16B-32CE-4944-996C-F4E63DF373BD}

O43 - CFD: 19/05/2011 - 08:34:00 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D3DF147C-733A-4C00-B41B-675C4BA7FDD9}

O43 - CFD: 06/08/2011 - 10:16:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D4414345-E418-40F0-BFD3-583799956A01}

O43 - CFD: 25/08/2011 - 13:21:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D5F33E74-8FA8-4B44-AD33-E3E5A18D0307}

O43 - CFD: 20/05/2011 - 13:00:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D78AEDD6-FA08-4D0F-8BB5-A11CF80B74C7}

O43 - CFD: 18/10/2011 - 04:01:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D8123550-40F2-4C48-9E0B-FBF70B16261E}

O43 - CFD: 05/04/2011 - 19:53:54 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{D89A89F5-767C-485F-A6D9-D76823E60858}

O43 - CFD: 22/05/2011 - 10:31:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{D93501C6-43F6-427D-91BB-119B03581D69}

O43 - CFD: 12/08/2011 - 02:07:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DA05961A-D6BF-4067-BD5D-09F2B82F314B}

O43 - CFD: 10/09/2011 - 08:12:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DA60A73D-DD24-4C2E-8D66-A46661059DAE}

O43 - CFD: 21/07/2011 - 13:10:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DAD456EC-FD1D-461F-B47C-AE18469E281B}

O43 - CFD: 08/07/2011 - 01:14:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DAF0A32D-23EE-4B1C-B7F6-6EA660F121AF}

O43 - CFD: 05/07/2011 - 08:35:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DB193874-650E-4A64-9031-ED12EF205258}

O43 - CFD: 22/08/2011 - 12:44:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DBE6F83C-1B2E-425C-96BD-63852E3CA8CE}

O43 - CFD: 27/05/2011 - 08:04:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DC016826-B871-4B3C-9C47-E996B2A81472}

O43 - CFD: 12/07/2011 - 00:49:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DC2D1BDA-BA08-410B-B593-B6290AF9CBE7}

O43 - CFD: 12/05/2011 - 00:50:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DC2D4210-7DA5-4C49-88B9-C932A838E3FD}

O43 - CFD: 10/04/2011 - 14:34:46 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{DDC2DD11-72DA-4034-9489-DAD1354002E5}

O43 - CFD: 08/05/2011 - 13:57:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DF41C67D-855B-4981-9B04-22D5364DD78E}

O43 - CFD: 31/08/2011 - 07:46:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{DF44D0E0-D5EC-4C23-AEEB-5A64471B44A0}

O43 - CFD: 11/04/2011 - 08:37:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{E28055F9-C6F5-4E27-BFDE-3A8ABC180356}

O43 - CFD: 21/04/2011 - 00:28:12 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{E412D781-17E0-48F0-BAE0-B6EEA2F6BBCE}

O43 - CFD: 19/08/2011 - 08:47:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{E5580153-C008-4B4B-9CFC-EE140684B757}

O43 - CFD: 26/08/2011 - 21:39:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{E62375CC-687D-471D-8AAD-1482E0AE2362}

O43 - CFD: 17/05/2011 - 20:32:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{E67CCA3F-C487-4BE3-BC8C-56AED2CC8CDB}

O43 - CFD: 28/08/2011 - 22:02:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{E7DFA091-B116-4516-8363-3A0B56E56BC4}

O43 - CFD: 05/07/2011 - 20:35:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{E8AB5486-C9D5-48F3-9A1A-DD53F2755692}

O43 - CFD: 08/08/2011 - 09:02:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{EA44323A-EF9E-4FBF-9D91-F0088A65EA9D}

O43 - CFD: 02/09/2011 - 11:29:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{EA6B063F-BD0C-4C0D-8D57-1B473815DD9C}

O43 - CFD: 03/04/2011 - 10:17:14 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{EA9E8835-A598-47BE-A737-37A1CF4CEB17}

O43 - CFD: 13/06/2011 - 21:06:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{EB904880-711D-49AD-BA4E-BFA2634C1B53}

O43 - CFD: 30/08/2011 - 01:47:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F15B0FF8-498B-4B67-9D8E-B4A6BF8C4A6C}

O43 - CFD: 22/07/2011 - 07:31:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F1615B47-943E-4B6B-B369-637DDAC5C3B3}

O43 - CFD: 19/08/2011 - 08:47:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F1C35799-8627-4F91-A295-968CBBF2DC40}

O43 - CFD: 14/04/2011 - 12:46:48 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{F4374DE9-8C10-486E-86E3-E20962A3CFFA}

O43 - CFD: 12/05/2011 - 12:56:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F5C8E802-7B12-4CC7-B183-8E0D2D68EEB9}

O43 - CFD: 22/06/2011 - 00:43:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F648147D-F396-443A-A300-76E6170E80E4}

O43 - CFD: 17/08/2011 - 13:41:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F869800C-88CB-416C-BE10-D6FBA71A2BA3}

O43 - CFD: 28/05/2011 - 12:28:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{F9142B4B-402B-41E7-A06D-107FE5EC9474}

O43 - CFD: 17/04/2011 - 13:18:36 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{F9D0F011-B8C7-43C9-868F-469B796C9E47}

O43 - CFD: 24/06/2011 - 18:26:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FA2741B5-6383-43F8-9883-990A18D5745F}

O43 - CFD: 31/08/2011 - 22:02:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FB4D3735-6C27-44DB-A092-2A13439FBC1B}

O43 - CFD: 20/06/2011 - 03:00:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FB8ABD2A-7BE2-4BC1-A10F-ACE2A606EED0}

O43 - CFD: 07/05/2011 - 09:49:24 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{FBE80F17-E91F-4106-9B45-2A49BEB887C0}

O43 - CFD: 09/09/2011 - 08:01:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FD277054-C60D-486C-8994-83226CE83CE1}

O43 - CFD: 30/06/2011 - 00:38:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FE3E4032-514B-480F-90BB-A3B7C6239C56}

O43 - CFD: 09/04/2011 - 14:33:24 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{FECED04B-064A-4A46-ADFF-718872E09A05}

O43 - CFD: 23/05/2011 - 00:40:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{FF138ED9-EE41-42DB-BE04-42011FF9999B}

~ Scan Program Folder in 00mn 15s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.004A8956FDDA1BA7AD21BC200D2B6D40] - 19/10/2011 - 05:47:08 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.2C536D41DCE213E1D449F18B3D41EA55] - 18/10/2011 - 06:40:33 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\system32\FlashPlayerCPLApp.cpl [414368]

O44 - LFC:[MD5.F9B6F4FB05319B132E1C7D5808861794] - 18/10/2011 - 03:10:34 ---A- . (...) -- C:\Windows\system32\FNTCACHE.DAT [297560]

O44 - LFC:[MD5.B7564E373C6C99D533B0C6D4FB91231B] - 18/10/2011 - 02:22:18 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1543872]

O44 - LFC:[MD5.8CF340D92C7E0A7166B5D0BA5965EAF4] - 18/10/2011 - 02:22:18 ---A- . (...) -- C:\Windows\system32\perfc009.dat [107462]

O44 - LFC:[MD5.59559F6882CB0F86BF12C2F604BE104A] - 18/10/2011 - 02:22:18 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [130018]

O44 - LFC:[MD5.51C2837A1D5D23D56A781F88A2808683] - 18/10/2011 - 02:22:18 ---A- . (...) -- C:\Windows\system32\perfh009.dat [604322]

O44 - LFC:[MD5.329F29BA2EF391A66FAA356B19B65219] - 18/10/2011 - 02:22:18 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [687368]

~ Scan Files in 00mn 04s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.97BD290F723BD49B0524A1A2307F5506] - 05/08/2011 - 09:23:42 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf

O45 - LFCP:[MD5.D77CBE53F5BF380F88B04F7D34F07E37] - 05/08/2011 - 10:14:21 ---A- - C:\Windows\Prefetch\BUBBLES.SCR-7B603539.pf

O45 - LFCP:[MD5.ED03448620939DB583E2E028F55B42B5] - 05/08/2011 - 11:23:28 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf

O45 - LFCP:[MD5.D9852C55967B41B463F860FF19556A6F] - 06/08/2011 - 00:27:32 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf

O45 - LFCP:[MD5.6BF687FB0D88663562FEAE6254B66D07] - 06/08/2011 - 00:35:06 ---A- - C:\Windows\Prefetch\LOGON.SCR-30601369.pf

O45 - LFCP:[MD5.435C78503991A008BB9F7692C8690195] - 06/08/2011 - 02:01:57 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-F401FBB4.pf

O45 - LFCP:[MD5.3BC7D68BE7C43C3A4FBD3C3A4BEA35EE] - 06/08/2011 - 06:00:31 ---A- - C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf

O45 - LFCP:[MD5.ACA161E05C7C64AFA40D7537D5D77B68] - 07/06/2008 - 00:02:07 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-739506178-3101694859-2749750591-1000.db

O45 - LFCP:[MD5.E22A033D70C6B2451A8FB66672E6CA1A] - 07/06/2008 - 00:02:07 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-739506178-3101694859-2749750591-1000.db

O45 - LFCP:[MD5.A9891078FF8F56C20263DB3C402972C1] - 07/06/2008 - 00:26:35 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.020BB79EE76C3AC742463C86D7915C70] - 07/06/2008 - 05:47:17 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx

O45 - LFCP:[MD5.04BA72C6A48F45832E7EC030D7B596A6] - 07/06/2008 - 05:48:17 ---A- - C:\Windows\Prefetch\AgCx_SC1.db

O45 - LFCP:[MD5.A19AC8706A53A4597FD0AD90CE38BC03] - 07/06/2008 - 05:52:22 ---A- - C:\Windows\Prefetch\AUPDATE.EXE-F14A3D51.pf

O45 - LFCP:[MD5.5C842286038B213FB747369412D3A2F4] - 07/06/2008 - 06:00:32 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf

O45 - LFCP:[MD5.66B68CB1D5888677643A465914B18586] - 07/06/2008 - 06:52:13 ---A- - C:\Windows\Prefetch\AgRobust.db

O45 - LFCP:[MD5.8A010463B0AE10C4DD0A3AF531F086C6] - 07/06/2008 - 06:52:32 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db

O45 - LFCP:[MD5.478D62BAA21ADCBA1CCE2777E02486E4] - 07/06/2008 - 06:52:41 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db

O45 - LFCP:[MD5.2F106EFE60D86CEEA995082F11E045FB] - 07/06/2008 - 06:52:50 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db

O45 - LFCP:[MD5.3E66B788F7CE8D98F7E0E307B7A58C34] - 07/06/2008 - 07:41:19 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf

O45 - LFCP:[MD5.B3152E5B9A61395E998E779792D07443] - 07/06/2008 - 07:47:40 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf

O45 - LFCP:[MD5.0A99A04AC5F4887C3FF0A8D170953E34] - 07/08/2011 - 05:47:31 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf

O45 - LFCP:[MD5.29FE5EF3908A1976C1C3B6CAFDDEAF4B] - 07/08/2011 - 05:47:41 ---A- - C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf

O45 - LFCP:[MD5.C5DEAADE21F9B3F84BA78A2FC9D9DD56] - 07/08/2011 - 05:47:41 ---A- - C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf

O45 - LFCP:[MD5.BE7C40B1AAB079E3BEC442C1A65C4590] - 07/08/2011 - 05:48:03 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

O45 - LFCP:[MD5.A62BA9678D25D58559DB9AEA08285048] - 07/08/2011 - 05:49:05 ---A- - C:\Windows\Prefetch\SERVICELAYER.EXE-5436186F.pf

O45 - LFCP:[MD5.6B370C528FBCAAD80FC3786C7C83B7ED] - 07/08/2011 - 05:49:23 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf

O45 - LFCP:[MD5.D8D152890D9D9023129BD8393995E1F1] - 07/08/2011 - 05:49:23 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf

O45 - LFCP:[MD5.04FC295703C488BEDD5511D199ACFE5B] - 07/08/2011 - 05:49:33 ---A- - C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf

O45 - LFCP:[MD5.9DBC1073356F9B15CC1C3AD310E68D1C] - 07/08/2011 - 05:51:29 ---A- - C:\Windows\Prefetch\NCLMSBTSRVEX.EXE-5A462B44.pf

O45 - LFCP:[MD5.F98CEE35A55AF396DA7AD51050DE5C88] - 07/08/2011 - 05:59:06 ---A- - C:\Windows\Prefetch\WLCOMM.EXE-272FF9F7.pf

O45 - LFCP:[MD5.246DD1A9C66F28136C5E60F24B88495E] - 07/08/2011 - 06:00:33 ---A- - C:\Windows\Prefetch\WERCON.EXE-E36BD04E.pf

O45 - LFCP:[MD5.9EAD82289F6EFEBE4AD4B8865CB00366] - 07/08/2011 - 06:53:04 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf

O45 - LFCP:[MD5.5F1DA578E61600D44A9C2D7F0B972BCE] - 07/08/2011 - 07:02:41 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-CF2B07FC.pf

O45 - LFCP:[MD5.4B9DFEE1F5A696A144718A53F9495CBF] - 07/08/2011 - 07:47:10 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf

O45 - LFCP:[MD5.7E006C66645E096722836E7EE6E0233F] - 07/08/2011 - 07:47:15 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf

O45 - LFCP:[MD5.5A1B5180A83714B139952A4AA0B7258F] - 07/08/2011 - 14:19:39 ---A- - C:\Windows\Prefetch\EAUDIO.EXE-EE0A24DD.pf

O45 - LFCP:[MD5.DCF601F2A7D3243C2E1222499AB6EC9B] - 07/08/2011 - 14:59:08 ---A- - C:\Windows\Prefetch\EHMSAS.EXE-2D3B2F21.pf

O45 - LFCP:[MD5.AA7123F149ACE5C5EAAF0FD046F77587] - 07/08/2011 - 15:43:12 ---A- - C:\Windows\Prefetch\CHROME.EXE-5A1054AF.pf

O45 - LFCP:[MD5.504E318061BB08CDEDB8089B711FA5B9] - 08/08/2011 - 14:59:47 ---A- - C:\Windows\Prefetch\UPDATE.EXE-026DCA13.pf

O45 - LFCP:[MD5.8038D4346ED9704FB0E937909F27DD07] - 09/06/2008 - 00:23:14 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin

O45 - LFCP:[MD5.C5DBDAA7F5DAEC48FCE9579A4081B228] - 09/08/2011 - 00:09:48 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf

O45 - LFCP:[MD5.AEEE3C606008CF6BB059515709E70D5B] - 09/08/2011 - 06:38:05 ---A- - C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-2F4708C9.pf

O45 - LFCP:[MD5.FC9653A54CAA170EEB5EB2D703D5ED10] - 10/01/2009 - 00:22:27 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf

O45 - LFCP:[MD5.B1113C432F9BE1EF89154F3F50793288] - 10/05/2011 - 13:33:07 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf

O45 - LFCP:[MD5.F80C40209528B7C87BFE7A3BDD6E319F] - 11/08/2011 - 02:12:05 ---A- - C:\Windows\Prefetch\MICROSOFTFIXIT50735.EXE-F62E9256.pf

O45 - LFCP:[MD5.4603BF78CFA4BECD37802925FBB883A2] - 11/08/2011 - 02:21:20 ---A- - C:\Windows\Prefetch\UNLODCTR.EXE-531FACC7.pf

O45 - LFCP:[MD5.C0F1380E9D5960D51AD114A18636CF6D] - 11/08/2011 - 02:22:09 ---A- - C:\Windows\Prefetch\NGEN.EXE-EC3F9239.pf

O45 - LFCP:[MD5.68424B7583E5800BB9F888D43E8D4EF5] - 11/08/2011 - 02:22:18 ---A- - C:\Windows\Prefetch\REGTLIBV12.EXE-B7C4F383.pf

O45 - LFCP:[MD5.38D7D0A80EA394AF9169838748A4B056] - 11/08/2011 - 02:22:23 ---A- - C:\Windows\Prefetch\MOFCOMP.EXE-8FE3D558.pf

O45 - LFCP:[MD5.B9B497FD3B7AC69D8D61E30110E53279] - 11/08/2011 - 02:26:31 ---A- - C:\Windows\Prefetch\LODCTR.EXE-72CD50D0.pf

O45 - LFCP:[MD5.ACB4554C0CE7C040CED7C719ADBA1A6A] - 11/08/2011 - 02:29:02 ---A- - C:\Windows\Prefetch\MRT.EXE-851529F7.pf

O45 - LFCP:[MD5.86BE4BD5EB7C5432519DC5262F9F9A96] - 11/08/2011 - 03:11:37 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf

O45 - LFCP:[MD5.ED390618C64A1227821AA7F941CFCE0C] - 11/08/2011 - 06:38:10 ---A- - C:\Windows\Prefetch\LMANAGER.EXE-9D025777.pf

O45 - LFCP:[MD5.D7857CFE9DE441E3A8A2F24431041B03] - 11/08/2011 - 09:10:50 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf

O45 - LFCP:[MD5.FA3CDC5F70C2806981161DFC12978F17] - 11/08/2011 - 09:10:58 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-6D2968F1.pf

O45 - LFCP:[MD5.6DA46E07587C65E513EA230D2EE8BAD9] - 11/08/2011 - 11:23:31 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf

O45 - LFCP:[MD5.F7E0C490D4C078AF5E0382D65C0C9E27] - 11/12/2009 - 06:50:05 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf

O45 - LFCP:[MD5.5491BD5A9E7B19289EA1B29493DF47B6] - 11/12/2009 - 06:50:45 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf

O45 - LFCP:[MD5.DC12392C9D14975E9F61626FEA2E71AA] - 12/08/2011 - 09:24:00 ---A- - C:\Windows\Prefetch\WPDSHEXTAUTOPLAY.EXE-BD31DDCE.pf

O45 - LFCP:[MD5.736F07A12B906696D648C5877B807EAD] - 12/11/2008 - 07:47:19 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf

O45 - LFCP:[MD5.11CA280A9CF4A9E6A4B99CA09557B829] - 14/06/2010 - 07:29:30 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf

O45 - LFCP:[MD5.881DE80A990DD7446C92DAE8ABDD9EF4] - 14/09/2008 - 07:46:30 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf

O45 - LFCP:[MD5.FB14CD442DD4CBEEFA7C1279EA06C4D7] - 14/09/2008 - 07:47:48 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf

O45 - LFCP:[MD5.E6548FEBCED32CB10C45B9052AEC40A3] - 15/08/2011 - 06:38:15 ---A- - C:\Windows\Prefetch\MSASCUI.EXE-07E0123F.pf

O45 - LFCP:[MD5.FF3D81045486419F0B07F5E37D44DD32] - 15/12/2009 - 06:54:19 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf

O45 - LFCP:[MD5.8702EEA9350F741E02EE71DA87B41B50] - 16/03/2011 - 00:27:22 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf

O45 - LFCP:[MD5.D3C3093154B019FB92D976810CA72F56] - 16/03/2011 - 00:29:11 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf

O45 - LFCP:[MD5.DA7F0D1375BD102160D89C763BBCA93B] - 16/04/2011 - 05:48:55 ---A- - C:\Windows\Prefetch\NCLINSTALLER.EXE-6C3DC8E0.pf

O45 - LFCP:[MD5.BF5B10998846100D231876E3503A475F] - 18/08/2011 - 15:14:52 ---A- - C:\Windows\Prefetch\MPAS-FE_BD.EXE-BB62FD5E.pf

O45 - LFCP:[MD5.4B1D69DA962452C9F46680F453A22C39] - 20/07/2011 - 13:33:07 ---A- - C:\Windows\Prefetch\MPAS-D_BD1.EXE-97E29C40.pf

O45 - LFCP:[MD5.0AFF6F188850220966E607245C2AEF5F] - 20/07/2011 - 13:33:07 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf

O45 - LFCP:[MD5.5EDB41F40478189DC568A90FCDE5CFEE] - 20/07/2011 - 15:00:17 ---A- - C:\Windows\Prefetch\AVNOTIFY.EXE-FEC2FEC4.pf

O45 - LFCP:[MD5.72410A1D080BD249FAF5FB245D7272CF] - 21/07/2009 - 07:48:12 ---A- - C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf

O45 - LFCP:[MD5.92558DB9240522C62E56A5735141D962] - 23/02/2010 - 00:04:47 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1304AE86.pf

O45 - LFCP:[MD5.8FFF78532391A9B7BB515518076A55FA] - 24/09/2009 - 05:52:21 ---A- - C:\Windows\Prefetch\LUCOMS~1.EXE-F2E330F7.pf

O45 - LFCP:[MD5.1BD3468BC3BB395F727FB9981F49B4F2] - 27/06/2011 - 07:03:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf

O45 - LFCP:[MD5.BE94EDA19A22761BEFCDF34B08F03B2A] - 28/01/2010 - 05:49:05 ---A- - C:\Windows\Prefetch\NCLUSBSRV.EXE-EC4FC96F.pf

O45 - LFCP:[MD5.D7B2AF1FB69BB071D933B177B0085366] - 28/01/2010 - 11:40:23 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf

O45 - LFCP:[MD5.1B8C8B31A373CDBD7179170C3C1B50D9] - 29/06/2011 - 06:38:19 ---A- - C:\Windows\Prefetch\FLASHUTIL10T_ACTIVEX.EXE-5855A902.pf

~ Scan Prefetcher in 00mn 01s

 

 

 

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\system32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\system32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\system32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\system32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\system32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\system32\wdigest.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\system32\tspkg.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\system32\Drivers\Wdf01000.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\system32\Drivers\Wdf01000.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{8165d533-dea0-11df-9c06-001b384d6aec}\AutoRun\command. (...) -- F:\NokiaPCIA_Autorun.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\system32\lvcodec2.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\system32\iccvid.dll

O52 - TDSD: \Drivers32\"msacm.mkdmp3enc"="C:\PROGRA~1\ACERAR~1\DVWIZA~1\Kernel\Burner\MKDMP3Enc.ACM" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\DivX.dll

O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\DivX.dll

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\PROGRA~1\ACERAR~1\VIDEOM~1\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\PROGRA~1\ACERAR~1\DVWIZA~1\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]

O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 02/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]

O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 02/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]

O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 02/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]

O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 02/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]

O58 - SDL:[MD5.DB8EA68E5864ADF61B73516788659E71] - 09/09/2007 - 03:33:26 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\system32\drivers\Apfiltr.sys [154624]

O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 02/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]

O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 02/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]

O58 - SDL:[MD5.DCDFC3A5A8B239055AAB6BD975ADA889] - 07/05/2008 - 09:55:22 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys [767488]

O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 21/07/2009 - 19:01:00 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [56816]

O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 21/07/2009 - 09:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys [96104]

O58 - SDL:[MD5.C7EA0E3E37FF1CD2BB65636448322572] - 10/08/2007 - 09:57:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.0 Driver..) -- C:\Windows\system32\drivers\b57nd60x.sys [179712]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.CFE3462A9E94A57DCD9676F6B7FE7F67] - 14/09/2011 - 09:12:28 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\system32\drivers\ccdcmb.sys [18176]

O58 - SDL:[MD5.8F2A94F991F8C73CEC26B4B5620D1EDC] - 14/09/2011 - 09:12:32 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\system32\drivers\ccdcmbo.sys [23168]

O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 02/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.73BAF270D24FE726B9CD7F80BB17A23D] - 10/08/2007 - 14:29:38 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\system32\drivers\DKbFltr.sys [21264]

O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 02/11/2006 - 08:30:54 ---A- . (.Intel Corporation - Intel® PRO/1000 Adapter NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]

O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]

O58 - SDL:[MD5.29DCAEB81DDE6F154AA4D36B18ECBB1F] - 10/08/2007 - 09:26:50 ---A- . (.ENE TECHNOLOGY INC. - ENE Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\enecir.sys [32256]

O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 02/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]

O58 - SDL:[MD5.194BC52FC0F53E540FAF9DE8A9C05255] - 10/08/2007 - 10:18:04 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\HSXHWAZL.sys [208384]

O58 - SDL:[MD5.C9C63410D8CF98F621B9CC62243FB877] - 10/08/2007 - 10:17:54 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\HSX_CNXT.sys [660480]

O58 - SDL:[MD5.3F53B4AF98F8FD83B7F0B8B65D2D90A7] - 10/08/2007 - 10:19:26 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\HSX_DPV.sys [984064]

O58 - SDL:[MD5.997E8F5939F2D12CD9F2E6B395724C16] - 08/09/2007 - 11:58:56 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStor.sys [304920]

O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 02/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.9D64201C9E5AC8D1F088762BA00FF3AB] - 10/08/2007 - 17:19:34 ---A- . (...) -- C:\Windows\system32\drivers\int15.sys [76584]

O58 - SDL:[MD5.91B61589BB2915E81D436EFE07548507] - 10/08/2007 - 17:19:34 ---A- . (...) -- C:\Windows\system32\drivers\int15_64.sys [15656]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 02/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]

O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]

O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 02/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]

O58 - SDL:[MD5.5BD2C6D982481D548107C602E7CCFBBC] - 31/01/2005 - 09:20:04 ---A- . (.Logitech Inc. - Logitech Elch 2 Video Driver.) -- C:\Windows\system32\drivers\LV561AV.SYS [211712]

O58 - SDL:[MD5.A730FC8671A60666D6E877C544DD7CD4] - 31/01/2005 - 09:12:46 ---A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\Windows\system32\drivers\LVUSBSta.sys [22016]

O58 - SDL:[MD5.0CEA2D0D3FA284B85ED5B68365114F76] - 10/08/2007 - 07:26:58 ---A- . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\system32\drivers\mdmxsdk.sys [12672]

O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 02/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.A15F219208843A5A210C8CB391384453] - 02/11/2006 - 08:30:54 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\Windows\system32\drivers\NETw3v32.sys [1781760]

O58 - SDL:[MD5.CB3AF516A6797B27725E3F1E73F3496C] - 10/08/2007 - 23:45:18 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw4v32.sys [2219520]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.99145C5D4B6C4D6F5CE83EE6ABFFE294] - 14/09/2011 - 09:09:48 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\system32\drivers\nmwcdnsu.sys [137600]

O58 - SDL:[MD5.FAEE7B61C6885B091CEC1FF06DA2E1AB] - 14/09/2011 - 09:09:48 ---A- . (.Nokia - Nokia USB Phone Generic Client.) -- C:\Windows\system32\drivers\nmwcdnsuc.sys [8576]

O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 10/08/2007 - 08:17:50 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.AB984EF434213522FC125CBC23299369] - 10/08/2007 - 16:39:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 156.) -- C:\Windows\system32\drivers\nvlddmkm.sys [7604256]

O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 02/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]

O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 02/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]

O58 - SDL:[MD5.210A628A0D7B3F45257850EFBFF27538] - 01/09/2008 - 16:24:30 ---A- . (.Panda Security, S.L. - Panda Boot Driver.) -- C:\Windows\system32\drivers\pavboot.sys [28544]

O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 14/09/2011 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\Windows\system32\drivers\pccsmcfd.sys [18816]

O58 - SDL:[MD5.E801D5CC24E1CF18FA87D24D7074B876] - 10/08/2007 - 15:34:38 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20776]

O58 - SDL:[MD5.24B5E3429F7F0E779FC2E6E36A0A5F73] - 10/08/2007 - 15:34:44 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]

O58 - SDL:[MD5.01CBFD08C0E8A6106BB26FCDA297154E] - 10/08/2007 - 15:34:40 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]

O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 02/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.355AAC141B214BEF1DBC1483AFD9BD50] - 10/08/2007 - 13:42:22 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\system32\drivers\rimmptsk.sys [39936]

O58 - SDL:[MD5.A4216C71DD4F60B26418CCFD99CD0815] - 10/08/2007 - 15:40:20 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\system32\drivers\rimsptsk.sys [42496]

O58 - SDL:[MD5.D231B577024AA324AF13A42F3A807D10] - 10/08/2007 - 21:02:04 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\drivers\rixdptsk.sys [37376]

O58 - SDL:[MD5.90A10B39896040B3154613C11C932AEB] - 10/08/2007 - 02:59:00 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1792792]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 02/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]

O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 02/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]

O58 - SDL:[MD5.A10AB556379FE56A37BAA43C3E7DF23E] - 08/09/2007 - 13:04:38 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys [28032]

O58 - SDL:[MD5.EF1F141A83C61503333569D2862F3999] - 08/09/2007 - 14:17:26 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys [1749376]

O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 21/07/2009 - 07:32:04 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 10/08/2007 - 17:19:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort.sys [14544]

O58 - SDL:[MD5.4E104EBC164231D2272CC9BDD1EF5C40] - 10/08/2007 - 17:19:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort64.sys [8704]

O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.EC01DA44B090D2651FC032C8B9257232] - 14/09/2011 - 09:12:36 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\Windows\system32\drivers\usbser_lowerflt.sys [8192]

O58 - SDL:[MD5.4ABD37CFBD710E64F01F9DA8710C73F7] - 14/09/2011 - 09:12:38 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\Windows\system32\drivers\usbser_lowerfltj.sys [8192]

O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 02/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]

O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 02/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]

O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 02/11/2006 - 08:41:49 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [200704]

O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 02/11/2006 - 08:41:48 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [654336]

O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 02/11/2006 - 08:41:50 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [987648]

O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 26/01/2011 - 11:02:52 ---A- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\Windows\system32\drivers\wdcsam.sys [11520]

O58 - SDL:[MD5.2E579520E114A9CA309F13BF40AD8292] - 10/08/2007 - 06:23:30 ---A- . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\system32\drivers\XAudio.sys [8704]

O58 - SDL:[MD5.40AC8590CC9006DBB99FFCB37879D4C6] - 10/08/2007 - 17:19:34 ---A- . (.Zeal SoftStudio - zntport.) -- C:\Windows\system32\drivers\zntport.sys [6080]

O58 - SDL:[MD5.C32ACB6D3FB23EBF528B676F7B8197B7] - 10/08/2007 - 15:30:12 ---A- . (.Zeal SoftStudio - NTPort Library kernel driver.) -- C:\Windows\system32\drivers\zntport64.sys [13096]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

O58 - SDL:[MD5.A10AB556379FE56A37BAA43C3E7DF23E] - 08/09/2007 - 13:04:38 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\sncduvc.sys [28032]

O58 - SDL:[MD5.EF1F141A83C61503333569D2862F3999] - 08/09/2007 - 14:17:26 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\snp2uvc.sys [1749376]

~ Scan Drivers in 00mn 06s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 01/04/2009 - 07:36:58 --HA- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\History [126976]

O61 - LFC:Last File Created 01/04/2009 - 15:44:43 --HA- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Cookies [23552]

O61 - LFC:Last File Created 03/07/2011 - 06:09:55 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\9F67B1C289A5B5DB7B32844AF679E758541D101B.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:56 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\8F903698240FE799F61EEDA8595181137B996156.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:56 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\B63185FCA5D2BDBB568593F2BF232E87E5A20A7E.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:57 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\49280E749D7318EA369BC7E61369C34AD2D22859.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:57 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\76C30565F803F2587F156A8344E4091992D31B27.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:57 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\9A7DEE2B537712BEF484CBD9E4DDBF88C78F436C.heu [149]

O61 - LFC:Last File Created 03/07/2011 - 06:09:57 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\D1680A46DD686B3B0CC9EC01D8C584666A78E145.heu [149]

O61 - LFC:Last File Created 04/05/2009 - 07:03:35 --HA- C:\Users\All Users\ma-config.com\Logs\maconfservice.txt [2216]

O61 - LFC:Last File Created 07/06/2008 - 05:52:13 R---- C:\Users\All Users\Symantec\LiveUpdate\Product.Inventory.LastGood.LiveUpdate [1408]

O61 - LFC:Last File Created 07/08/2011 - 15:43:27 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [0]

O61 - LFC:Last File Created 08/09/2011 - 10:19:01 ---A- C:\Users\Nicolas\Documents\Mes fichiers reçus\nicpoulos4100085523\Historique\vip7re1475243251.xml [95214]

O61 - LFC:Last File Created 09/06/2008 - 00:22:16 --HA- C:\Users\Nicolas\AppData\Local\IconCache.db [1972813]

O61 - LFC:Last File Created 10/07/2011 - 06:17:20 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\381814F6F5270FFBB27E244D6138BC023AF911D5.heu [149]

O61 - LFC:Last File Created 10/07/2011 - 06:17:21 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\6344DCC80A9A6A3676DCEA0C92C8C45EFD2F3220.heu [149]

O61 - LFC:Last File Created 10/07/2011 - 06:17:21 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\871F12AF0853C06E4EB80A1CCAB295CEADBB817A.heu [149]

O61 - LFC:Last File Created 10/07/2011 - 06:17:22 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\440AE73B017A477382DEFF7C0DBE4896FED21079.heu [149]

O61 - LFC:Last File Created 10/07/2011 - 06:17:22 ---A- C:\Users\Nicolas\AppData\Roaming\Adobe\Flash Player\AssetCache\ULA43NYU\6DDB94AE3365798230849FA0F931AC132FE417D1.heu [149]

O61 - LFC:Last File Created 10/08/2007 - 05:52:36 ---A- C:\Users\All Users\Symantec\LiveUpdate\Log.LiveUpdate [2917787]

O61 - LFC:Last File Created 13/06/2010 - 15:43:02 --HA- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Web Data [71680]

O61 - LFC:Last File Created 14/09/2011 - 05:50:05 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\Messages\Database\msg_db.sqlite [14336]

O61 - LFC:Last File Created 17/10/2011 - 03:05:25 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-zYWKftpOfc1YxKedzmtFXkN8 [7168]

O61 - LFC:Last File Created 17/10/2011 - 15:00:16 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-yvCgRRbyUhiVoTiSVqM0iOx2 [1544]

O61 - LFC:Last File Created 17/10/2011 - 15:00:54 ---A- C:\Users\Nicolas\AppData\Local\Temp\SkypeSetup.exe [23803016]

O61 - LFC:Last File Created 17/10/2011 - 15:07:24 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\ConnectToInternet\operators.xml [15274]

O61 - LFC:Last File Created 17/10/2011 - 15:13:10 -SHA- C:\Users\Invité\ntuser.dat [1835008]

O61 - LFC:Last File Created 17/10/2011 - 17:03:45 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\rKvrsFYlqHMhBZV5vBYDUAQG4gE= [3319]

O61 - LFC:Last File Created 17/10/2011 - 17:39:13 ---A- C:\Users\Nicolas\AppData\Local\Temp\7E07.dir\InstallFlashPlayer.exe [3797152]

O61 - LFC:Last File Created 17/10/2011 - 17:39:28 ---A- C:\Users\Nicolas\AppData\Local\Temp\B9B0.dir\InstallFlashPlayer.exe [3797152]

O61 - LFC:Last File Created 17/10/2011 - 18:21:51 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\ocinatasindustries\chatsync\cf\cfadf1f854137ea3.dat [10971]

O61 - LFC:Last File Created 17/10/2011 - 20:16:48 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\NPFCJuvEMRACuyIJm6qyRjrPKbI= [4260]

O61 - LFC:Last File Created 17/10/2011 - 21:40:20 ---A- C:\Users\Nicolas\Documents\Mes fichiers reçus\nicpoulos4100085523\Historique\vegavirgile1383288416.xml [8270]

O61 - LFC:Last File Created 17/10/2011 - 23:04:40 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-10-17_Log.ALUSchedulerSvc.LiveUpdate [3132]

O61 - LFC:Last File Created 18/10/2011 - 00:22:39 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-dTgkhiWOUVKxxXqb4wYd6RIi [7168]

O61 - LFC:Last File Created 18/10/2011 - 03:05:11 ---A- C:\Users\Nicolas\AppData\Local\d3d9caps.dat [7592]

O61 - LFC:Last File Created 18/10/2011 - 05:59:05 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\ErrorResponse.xml [2747]

O61 - LFC:Last File Created 18/10/2011 - 06:39:35 ---A- C:\Users\Nicolas\AppData\Local\Temp\B2B0.dir\InstallFlashPlayer.exe [3797152]

O61 - LFC:Last File Created 18/10/2011 - 06:40:16 ---A- C:\Users\All Users\Skype\{AA59DDE4-B672-4621-A016-4C248204957A}\Skype.msi [18452480]

O61 - LFC:Last File Created 18/10/2011 - 06:41:22 ---A- C:\Users\All Users\Skype\{AA59DDE4-B672-4621-A016-4C248204957A}\SkypeToolbars.msi [6561792]

O61 - LFC:Last File Created 18/10/2011 - 06:41:38 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\tfHfxig1d5brSijN0SCLS+Qvlw8= [5997]

O61 - LFC:Last File Created 18/10/2011 - 06:41:48 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-gRNQbdHPqFFL6h3zVvQ7v698 [1544]

O61 - LFC:Last File Created 18/10/2011 - 06:51:29 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\bDUNtZs0DHpqi+VdHedTnWsXiNE= [12071]

O61 - LFC:Last File Created 18/10/2011 - 06:53:03 ---A- C:\Users\Nicolas\AppData\Local\Temp\Nicolas.bmp [31832]

O61 - LFC:Last File Created 18/10/2011 - 07:38:25 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\GUssR0cf5ZPZNBMU6l5kyLF7AQk= [25100]

O61 - LFC:Last File Created 18/10/2011 - 07:38:27 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\P5HTLASl8yZCeqlqi0CzqtSR3B8= [102985]

O61 - LFC:Last File Created 18/10/2011 - 08:42:55 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\kRggF5LHvw8fG+upXO71J2Fjsu0c= [4455]

O61 - LFC:Last File Created 18/10/2011 - 09:02:23 ---A- C:\Users\Nicolas\AppData\Local\Temp\wmplog00.sqm [1536]

O61 - LFC:Last File Created 18/10/2011 - 09:24:25 ---A- C:\Users\Nicolas\AppData\Local\Temp\wmplog01.sqm [1364]

O61 - LFC:Last File Created 18/10/2011 - 09:43:28 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\hyJ53a8B5fbcOBcr2FonjVVJF+gk= [2577]

O61 - LFC:Last File Created 18/10/2011 - 10:33:20 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\h2cE4SyywfrNBlK4krIne7No8lY= [3703]

O61 - LFC:Last File Created 18/10/2011 - 10:38:31 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\U+KgkySIY6s2F4M96dnwzGJZ97no= [3545]

O61 - LFC:Last File Created 18/10/2011 - 11:05:57 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\aN7Zn8wU2FMpmKGrruyMnNaEi1D8= [4168]

O61 - LFC:Last File Created 18/10/2011 - 11:12:40 ---A- C:\Users\Nicolas\AppData\Local\Temp\wmplog02.sqm [1352]

O61 - LFC:Last File Created 18/10/2011 - 11:23:30 ---A- C:\Users\Nicolas\AppData\Local\Temp\qtsingleapp-NokiaO-b889-1-lockfile [0]

O61 - LFC:Last File Created 18/10/2011 - 11:23:32 ---A- C:\Users\Nicolas\AppData\Local\Temp\NOSEventMessages.dll [1536]

O61 - LFC:Last File Created 18/10/2011 - 11:26:04 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-HzDkZF5h14eQEzzbfyCRI38i [7168]

O61 - LFC:Last File Created 18/10/2011 - 11:39:44 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\SSO.sis [377652]

O61 - LFC:Last File Created 18/10/2011 - 11:39:45 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\SSOUsernameWidget.sis [257780]

O61 - LFC:Last File Created 18/10/2011 - 11:39:45 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\ServiceProviders.sis [619156]

O61 - LFC:Last File Created 18/10/2011 - 11:39:46 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\ssoui-IAD.sisx [399708]

O61 - LFC:Last File Created 18/10/2011 - 11:39:47 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\ovi-IAD.sisx [561140]

O61 - LFC:Last File Created 18/10/2011 - 11:39:48 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\Ovi_Notifications_Support_Package_iad.sis [1434976]

O61 - LFC:Last File Created 18/10/2011 - 11:39:49 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\CP_Services.sis [218224]

O61 - LFC:Last File Created 18/10/2011 - 11:39:49 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\scp.sis [1552]

O61 - LFC:Last File Created 18/10/2011 - 11:39:50 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\lkm.sis [13892]

O61 - LFC:Last File Created 18/10/2011 - 11:39:50 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\qtmobility.sis [1898280]

O61 - LFC:Last File Created 18/10/2011 - 11:39:51 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\CwrtCore.sis [828820]

O61 - LFC:Last File Created 18/10/2011 - 11:39:55 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\amr100_NOC.sis [2740700]

O61 - LFC:Last File Created 18/10/2011 - 11:39:58 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\qt_pu.sis [7829968]

O61 - LFC:Last File Created 18/10/2011 - 11:39:59 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\qtwebkit.sisx [4497824]

O61 - LFC:Last File Created 18/10/2011 - 11:40:01 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\Quick_Office.sis [7337568]

O61 - LFC:Last File Created 18/10/2011 - 11:40:02 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\S60SOA_IAD_92.2.0.sisx [856996]

O61 - LFC:Last File Created 18/10/2011 - 11:40:02 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\issearch_iad_3_0_8.sis [868612]

O61 - LFC:Last File Created 18/10/2011 - 11:40:03 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\shazam.sis [1076672]

O61 - LFC:Last File Created 18/10/2011 - 11:40:05 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\NokiaAnalyticsCollector_Symbian3_NOCSsigned.sis [149996]

O61 - LFC:Last File Created 18/10/2011 - 11:40:05 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\ODML_0x20029C47_v3.06_SA_s60.52.sis [218160]

O61 - LFC:Last File Created 18/10/2011 - 11:40:05 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\communicator_s60_9.2ps2_Express_Signed.sis [1838664]

O61 - LFC:Last File Created 18/10/2011 - 11:40:06 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\HereAndNow_IAD_2_0_3_signed.sis [70116]

O61 - LFC:Last File Created 18/10/2011 - 11:40:06 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\internetradio_v3.3_public_sign_urel.sis [622704]

O61 - LFC:Last File Created 18/10/2011 - 11:40:07 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\VideoPlayer_0x200159B2_v9.23.62_SA_S60.92.sisx [748160]

O61 - LFC:Last File Created 18/10/2011 - 11:40:10 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\Maps_0x20001F63_v3.06_SA_s60.52.sis [9206188]

O61 - LFC:Last File Created 18/10/2011 - 11:40:11 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\searchwidget_iad_2_0_5.sis [254912]

O61 - LFC:Last File Created 18/10/2011 - 11:40:13 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\352684040105210\OviMusic_0x101FFB51_v13.2.24_SA_S60.52_Euro1.sis [445708]

O61 - LFC:Last File Created 18/10/2011 - 11:40:14 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\IAD\Download\index.xml [4110]

O61 - LFC:Last File Created 18/10/2011 - 14:20:18 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\temp-EM257BVQ6WRbcSP12K82it18 [1544]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\background.html [4580]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\change_sink.js [6629]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\contentscript.js [12288]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\document_iterator.js [13660]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\dropdown_menu_icon_set.png [5122]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\find_proxy.js [10968]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\flags.gif [33313]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\get_html_text.js [4223]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\global_constants.js [2865]

O61 - LFC:Last File Created 18/10/2011 - 15:11:37 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\name_injection_builder.js [1984]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\manifest.json [834]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll [3975840]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\number_injection_builder.js [10099]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\numbers_common_active_icon_set.gif [1024]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\numbers_common_inactive_icon_set.gif [977]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\numbers_free_icon_set.gif [1134]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\skype.png [831]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\skype_name_icon_set.gif [1876]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\space.gif [134]

O61 - LFC:Last File Created 18/10/2011 - 15:11:38 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\string_finder.js [9935]

O61 - LFC:Last File Created 18/10/2011 - 15:11:41 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lifbcibllhkdhoafpjfnlhfpfgnpldfl_0.localstorage [3072]

O61 - LFC:Last File Created 18/10/2011 - 15:15:44 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Last Session [147577]

O61 - LFC:Last File Created 18/10/2011 - 15:25:12 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\YN2Fly3j0DP9UdsxkWhHCT2kvjso= [2841]

O61 - LFC:Last File Created 18/10/2011 - 15:26:50 ---A- C:\Users\Nicolas\Documents\Mes fichiers reçus\nicpoulos4100085523\Historique\rvkohler49741376.xml [7256]

O61 - LFC:Last File Created 18/10/2011 - 15:42:55 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\hA2ITij82FNqrdApmRHBz2PGq8hA= [3389]

O61 - LFC:Last File Created 18/10/2011 - 15:43:27 --HA- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Local State [27188]

O61 - LFC:Last File Created 18/10/2011 - 15:43:28 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Current Session [6852]

O61 - LFC:Last File Created 18/10/2011 - 15:43:28 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [4]

O61 - LFC:Last File Created 18/10/2011 - 15:43:28 --HA- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Preferences [30665]

O61 - LFC:Last File Created 18/10/2011 - 15:49:40 ---A- C:\Users\Nicolas\Documents\cc_20111018_164726.reg [21946]

O61 - LFC:Last File Created 18/10/2011 - 16:20:44 ---A- C:\Users\Nicolas\AppData\Local\Temp\MessengerCache\6nUnvdRdJLDfgxp6B2PkfU3U2dw= [2745]

O61 - LFC:Last File Created 18/10/2011 - 23:57:11 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-10-18_Log.ALUSchedulerSvc.LiveUpdate [9052]

O61 - LFC:Last File Created 18/10/2011 - 23:57:50 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\ocinatasindustries\chatsync\6e\6eacd2ab70a8a722.dat [18652]

O61 - LFC:Last File Created 19/10/2011 - 00:09:52 ---A- C:\Users\Nicolas\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog.bak [0]

O61 - LFC:Last File Created 19/10/2011 - 00:16:56 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\ocinatasindustries\chatsync\2d\2d1aeb0622087de9.dat [2964]

O61 - LFC:Last File Created 19/10/2011 - 05:47:09 ---A- C:\Users\All Users\Symantec\LiveUpdate\3.Product.Inventory.LiveUpdate [1408]

O61 - LFC:Last File Created 19/10/2011 - 05:48:21 ---A- C:\Users\Nicolas\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog [0]

O61 - LFC:Last File Created 19/10/2011 - 05:49:48 ---A- C:\Users\Nicolas\AppData\Local\Western_Digital\WDSmartWare.exe_Url_10kuurbuhrqrvmhjz1g2jtv2xvucjqyw\1.2.0.8\user.config [716]

O61 - LFC:Last File Created 19/10/2011 - 05:51:19 ---A- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\CDC\statistics.dat [27426]

O61 - LFC:Last File Created 19/10/2011 - 05:52:11 ---A- C:\Users\All Users\Symantec\LiveUpdate\2.Product.Inventory.LiveUpdate [1408]

O61 - LFC:Last File Created 19/10/2011 - 05:52:12 ---A- C:\Users\All Users\Symantec\LiveUpdate\1.Product.Inventory.LiveUpdate [1408]

O61 - LFC:Last File Created 19/10/2011 - 05:52:24 ---A- C:\Users\All Users\Symantec\LiveUpdate\Product.Inventory.LiveUpdate [1408]

O61 - LFC:Last File Created 19/10/2011 - 05:52:24 R---- C:\Users\All Users\Symantec\LiveUpdate\Settings.LiveUpdate [62994]

O61 - LFC:Last File Created 19/10/2011 - 05:52:32 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-10-19_Log.ALUSchedulerSvc.LiveUpdate [5123]

O61 - LFC:Last File Created 19/10/2011 - 06:52:12 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\ocinatasindustries\config.xml [17178]

O61 - LFC:Last File Created 19/10/2011 - 06:52:51 ---A- C:\Users\All Users\ma-config.com\Logs\activex.txt [356]

O61 - LFC:Last File Created 19/10/2011 - 06:53:55 ---A- C:\Users\All Users\ma-config.com\mcbase.db [1155232]

O61 - LFC:Last File Created 19/10/2011 - 07:40:37 ---A- C:\Users\Nicolas\Downloads\ZHPDiag2.exe [2804338]

O61 - LFC:Last File Created 19/10/2011 - 07:48:27 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\shared.xml [64206]

O61 - LFC:Last File Created 19/10/2011 - 23:57:11 ---A- C:\Users\Nicolas\AppData\Roaming\Skype\ocinatasindustries\chatsync\3f\3ffad3261d14e689.dat [1993]

O61 - LFC:Last File Created 23/02/2009 - 05:49:52 --HA- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Data Store\DataBase\MDataStore.db3 [43036672]

O61 - LFC:Last File Created 23/10/2010 - 09:23:48 ---A- C:\Users\All Users\PC Suite\ConfServer\Nokia;SuiteConf;RM-596;352684040105210.xml [3862]

O61 - LFC:Last File Created 23/10/2010 - 11:24:54 --HA- C:\Users\Nicolas\AppData\Roaming\PC Suite\352684040105210\PCCS_FilesSync1.dat [288]

O61 - LFC:Last File Created 23/10/2010 - 11:26:49 --HA- C:\Users\Nicolas\AppData\Roaming\PC Suite\352684040105210\PCCSFilesSync1.db [73319424]

O61 - LFC:Last File Created 23/10/2010 - 11:39:26 --HA- C:\Users\Nicolas\AppData\Roaming\PC Suite\352684040105210\PCCS_sms.dat [288]

O61 - LFC:Last File Created 23/10/2010 - 11:39:27 --HA- C:\Users\Nicolas\AppData\Roaming\PC Suite\352684040105210\PCCSSMS.db [2048000]

O61 - LFC:Last File Created 23/10/2010 - 11:39:34 --HA- C:\Users\Nicolas\AppData\Roaming\PC Suite\352684040105210\PCCS_Groups.dat [288]

O61 - LFC:Last File Created 23/10/2010 - 11:39:41 ---A- C:\Users\All Users\PC Suite\ConfServer\Conf_CO352684040105210.xml [7506]

O61 - LFC:Last File Created 25/06/2008 - 15:13:10 --HA- C:\Users\Invité\ntuser.dat.LOG1 [262144]

O61 - LFC:Last File Created 26/01/2011 - 05:48:36 --HA- C:\Users\Nicolas\AppData\Local\Western Digital\WD SmartWare\FrontParlorLog.txt [102762]

O61 - LFC:Last File Created 26/01/2011 - 05:49:02 -S-A- C:\Users\Nicolas\AppData\Roaming\Western Digital\WD SmartWare\sourceq.db3 [6144]

O61 - LFC:Last File Created 27/01/2011 - 15:12:00 --HA- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Ovi Suite\Cache\recentContactsModel.dat [7277]

O61 - LFC:Last File Created 28/01/2010 - 05:49:14 --HA- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Data Store\Deleted\DataBase\MDataStore.db3 [303104]

O61 - LFC:Last File Created 28/01/2010 - 05:49:53 --HA- C:\Users\Nicolas\AppData\Local\Nokia\Nokia Data Store\Thumbnail\DataBase\MDataStore.db3 [45729792]

O61 - LFC:Last File Created 29/06/2011 - 15:12:01 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Top Sites [20480]

O61 - LFC:Last File Created 29/06/2011 - 15:43:14 ---A- C:\Users\Nicolas\AppData\Local\Google\Chrome\User Data\Default\Favicons [57344]

~ Scan Files in 02mn 35s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 13/02/2009 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO

O64 - Services: CurCS - 15/12/2009 - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 30/03/2009 - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB

O64 - Services: CurCS - 02/11/2006 - C:\PROGRA~1\LAUNCH~1\DPortIO.sys - Dritek General Port I/O(DritekPortIO) .(.Dritek System Inc. - General Port I/O.) - LEGACY_DRITEKPORTIO

O64 - Services: CurCS - 30/08/2010 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2(driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\iastorv.sys - Intel RAID Controller Vista(iaStorV) .(.Intel Corporation - Intel Matrix Storage Manager driver (base).) - LEGACY_IASTORV

O64 - Services: CurCS - 07/12/2006 - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15

O64 - Services: CurCS - 19/06/2008 - C:\Windows\system32\drivers\pavboot.sys - pavboot(pavboot) .(.Panda Security, S.L. - Panda Boot Driver.) - LEGACY_PAVBOOT

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\DRIVERS\psdfilter.sys - PSDFilter(PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\drivers\PSDNServ.sys - PSDNSERVER(PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\drivers\psdvdisk.sys - psdvdisk(psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK

O64 - Services: CurCS - 22/07/2009 - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 30/01/2007 - C:\Windows\system32\DRIVERS\xaudio.sys - XAudio(XAudio) .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO

O64 - Services: CurCS - 02/11/2006 - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl - {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) .(.Cyberlink Corp. - FCL Driver.) - LEGACY_{49DE1C67-83F8-4102-99E0-C16DCC7EEC

~ Scan Services in 00mn 03s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:09/12/2005 (. - .) (1.0.2169.16560) - c:\windows\system32\ClearEvent.exe

O65 - LUF:14/04/2007 (. - Assembly imported from type library 'Shell32'..) (1.0.0.0) - c:\windows\system32\Interop.Shell32.dll

~ Scan Sigcheck in 06mn 03s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {6FD10E7B-A139-4AD6-A5EF-A01630276A1E} [DefaultScope] - (Bing) - Bing

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.BCB0728F4B117855765CE8FE883B5E9B] [sPRF][18/10/2011] (...) -- C:\Users\Nicolas\AppData\Local\Temp\NOSEventMessages.dll [1536]

[MD5.5EF87457AB8A58694EBE35E55D093D04] [sPRF][07/06/2008] (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Nicolas\AppData\Local\Temp\RtkBtMnt.exe [208896]

[MD5.61FBC6C9BE728206CD74CEBBCC328847] [sPRF][17/10/2011] (.Skype Technologies S.A. - Skype.) -- C:\Users\Nicolas\AppData\Local\Temp\SkypeSetup.exe [23803016]

[MD5.04A26ECE4C063CA6BF9D95763701E025] [sPRF][21/03/2010] (...) -- C:\Users\Nicolas\Desktop\flac-1.2.1b.exe [2744087]

[MD5.E1A0FAD6BF019EC9580C773642B9C5A6] [sPRF][19/10/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Nicolas\Desktop\ZHPDiag2.exe [2804338]

[MD5.6F678556A6FCE04FC94F3435F6313705] [sPRF][30/11/2008] (...) -- C:\Windows\Downloaded Program Files\unagiuninst.exe [38428]

~ Scan Files in 00mn 02s

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "{1ACDC690-E812-4BF4-8277-CADB310BB196}" | In - None - P6 - TRUE | .(.Acer Incorporated - Acer Arcade Deluxe.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe

O87 - FAEL: "{975C10A6-89E7-450F-8386-9F6BEC5992B5}" | In - None - P6 - TRUE | .(.Acer Incorporated - VideoMagician.) -- C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe

O87 - FAEL: "{4B2A96AC-90BB-469D-96F2-1E462E2F2103}" | In - None - P6 - TRUE | .(.Acer Incorporated - HomeMedia.) -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe

O87 - FAEL: "{CB0A5015-2744-4511-8C92-B47FF3948EAF}" | In - None - P6 - TRUE | .(.Acer Incorporated - DV Wizard.) -- C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe

O87 - FAEL: "{A668E7EB-2478-4774-BCB5-158A25056A07}" | In - None - P17 - TRUE | .(.Acer Incorporated - DVDivine.) -- C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe

O87 - FAEL: "{A5B39AE8-0811-418C-8585-E02CBCFBF7C3}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PlayMovie.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe

O87 - FAEL: "{A31186C6-4ED2-4CD2-92C5-311BBF8BD553}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe

O87 - FAEL: "{185A9FF0-E3AA-40C2-9322-C753B506FCCB}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{41BB88F6-92B6-4764-B739-0455B2A60701}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (.not file.)

O87 - FAEL: "{E3BBBFEC-03E9-4526-BD5A-0A080E3EED8E}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (.not file.)

O87 - FAEL: "{1FD87E48-5CB4-4F2F-BF64-12C45BA13EB0}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Yahoo!\Messenger\YServer.exe (.not file.)

O87 - FAEL: "{69466E3A-C783-4354-80D9-26188BE20E9A}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Yahoo!\Messenger\YServer.exe (.not file.)

O87 - FAEL: "{E26308BA-1004-4AC2-948F-3933DF3DA435}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{3A21B51A-225F-464E-8DA6-F3DF2F4E07E9}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{2BF87074-885D-43D3-87B7-87DF4D1AE974}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{D1C8A109-9227-4D02-A32E-6CF58A9EBB26}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{42978E73-5A6F-4BF1-82DC-EB8A6008B301}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{275D3F1F-9673-4653-B87D-E6C90527D2E9}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{67A20BFB-47F7-4E07-9A88-2BF10CF7946D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{06826C7B-EE0B-4B66-B79B-04EAF542B28D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{3D1F6B67-5E4B-43B8-99A7-D896003775D4}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{781AEDCC-68F5-445F-B024-769780CA4F42}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{32804D5D-C5B7-468E-A9EE-B800E7770C66}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{CC7CB22B-DBEA-45ED-9CE5-A4447EE5A3EC}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{877F3768-ABB9-4087-86F7-3E5BEB7C3BD6}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{68B53198-68CF-4151-9EAF-019C9A8CCD84}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{7C63A7BF-69D4-4674-BCEE-DB0FBB283688}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{83A3BE09-E3D7-455E-A661-427393E4F943}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{714A41B9-B6A8-42F5-B12F-EDEAE635BCFA}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{30AE6DE1-C0F1-42DA-9ECE-AB5FD0866275}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{ED0BEB48-79D9-46B7-8F6E-8AE4CFB57588}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{167FE02D-62D1-4149-B258-BA5C9CB44690}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{A47275DE-8939-463F-8AF7-11C919625950}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{3CD505CC-DE60-4901-A873-9ECE95107B86}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "TCP Query User{F777EEEC-BF1D-4E27-A492-80FFB5FD0C46}C:\program files\yahoo!\messenger\yahoomessenger.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\yahoo!\messenger\yahoomessenger.exe (.not file.)

O87 - FAEL: "UDP Query User{3C5985A3-7637-4BD2-90E2-FED4568FD516}C:\program files\yahoo!\messenger\yahoomessenger.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\yahoo!\messenger\yahoomessenger.exe (.not file.)

O87 - FAEL: "{C7A8B773-36FE-4628-9A3A-22EC2F811B37}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{820DD3DD-9C3C-46F4-B475-5E7EFFB4F3B4}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{9103D065-B31A-4865-805E-EFDFB38AFD1E}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{B2C9DCE8-0098-4C69-98A6-0D2C4F91079D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{6720510D-5978-4857-99B7-ACD7ED6FE4AE}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{AEDA2470-4476-4FB3-800C-D9D91508E43E}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{8D918B34-B349-457F-8E24-85A7A7F5EC0D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{AA74129B-5A20-4710-815E-DC3798C397FD}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{8AD57B8F-B1AE-47F7-AEFE-BE9B96D32DC0}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{6AEE39F7-7EA6-41FA-A340-53FA75330E63}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{6FF68DD8-DE88-48D4-A97C-3E499820FEA1}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{6F051077-0DD3-427B-BD04-5C714409C5B4}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{667209B3-9ABF-4FFB-828E-0D801FEC9D12}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{10E0F6B2-C1EA-47A9-9A08-AECC1A8B719C}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{7A5D4C5C-5392-4925-BB7C-481B8BD35A8B}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{E36AD727-166B-45D0-BC7D-A9F7130D97A6}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{CA69943D-62F8-45D4-9F58-D2EE1643EFCF}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{AEF3364E-1844-4158-A8F3-B102AFC88CDA}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{CEE838B5-1808-4343-9257-D26206EFA821}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{80EF4E1A-679E-43BA-8522-F7E977F18E3E}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{F27E0194-688F-422A-97BE-DB2A0C2DA3A9}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{EF022D3F-F180-4FDB-9F1F-E0F420D5453A}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{F50346DB-E27D-497D-8384-1F3E6D7CD3D6}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{29E53D11-789E-4D08-9194-881ED2FC1F21}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{660AE7D3-A02A-4C1D-BD8D-A62B2B301DD9}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{5E0A594F-1DB1-4B99-B5FF-E43D1C3D1393}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{333711D7-9E64-40CB-A429-14009A07FB72}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{58DA9A78-8A5F-432D-8EC5-F2F8A35A7BDB}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{5664A364-AB2F-44FE-A640-156F81AE1DE2}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{B625A1A7-E806-4943-8AD8-7A3B1CAE7C8F}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{18B97348-90E8-42AA-B17F-268E77028502}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{23DFE5F0-9F1D-475C-A913-61244C159B74}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{6AD3123A-F711-4C66-A908-EA7B81A4843A}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{3C3AFCCC-A8B9-44CD-893D-FBC46FD49A00}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{61A870AD-921A-4119-A343-78CEF01800C7}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{18C741D4-660F-47DF-AA94-9BAFA96E22BF}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{BA683CC3-BBF3-496B-A82B-40EA6B290DCF}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{74024030-66EA-4D92-8CF5-95517CEB4DAF}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{751F1615-B5C5-4A86-AE49-B0141C02056B}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{94CE67ED-A936-4392-8316-A0E8C4F9C82E}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{B77960E4-5D22-4B46-BBD0-ECD19965798F}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{209121E2-4E92-42DA-8817-FD51D8F8AB93}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{63ED7296-4294-4EF8-AAB7-40591EAD5969}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{5D9C9996-44C5-4FAC-8D54-042341E56262}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{24EE6E03-4FC3-45BA-B351-D083366FB1F6}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{F633BE0B-6DF0-45CA-9F22-194C3E4377DF}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{CCA3FFFD-C954-4966-A3DE-B158CF7D2554}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{70BEB8F5-94CA-4703-9F8A-2D053F455482}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{FE4EF206-9175-41E8-9130-22508A5BB0B0}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{0DC5ABCF-F66C-4ACE-B376-4AF53A9B2F77}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{DDFE0B6A-8FAE-42A1-9D41-2586A2984144}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{3676F805-852C-490C-9D7E-BB8E16BD33AD}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{50AA6773-C0D0-482B-9473-8D19E087BFE4}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{82F432CF-7B73-48C1-AFA5-FCABDAE6628D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{093D79A9-AB5F-4EB9-8F41-416EB50074D0}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{0D43F820-CA6A-41AF-97BD-00524A5D4668}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{73DF0C44-92D0-4C6D-BFAB-5FCFCBDE7160}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{BF85617F-09E7-4341-B589-D4328876A6C0}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{58C17ED5-D397-477F-A8E4-73DAA16FD522}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{EB3CE704-233B-4851-B76E-9932018BC265}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{5CF3D154-7F23-4381-AFCD-DABAC64C0148}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{5DC22446-3F34-4CE2-9EF2-71825C9B8706}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{B2589048-E204-4E55-8A13-30F32DD7773D}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{459F10F3-6DD6-4A0E-B707-00F8B7554A49}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{C5F7CFFF-6D7B-48F4-9964-6E99CBFAD00B}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Common Files\AOL\Loader\aolload.exe (.not file.)

O87 - FAEL: "{2F499969-E0D0-4AD7-B52B-27820CB04EA9}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Common Files\AOL\Loader\aolload.exe (.not file.)

O87 - FAEL: "TCP Query User{04C47C7C-098D-49CB-854D-F566F4CFE599}C:\program files\aim6\aim6.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\aim6\aim6.exe (.not file.)

O87 - FAEL: "UDP Query User{ED9FD096-9501-4E29-B547-6189ED17C905}C:\program files\aim6\aim6.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\aim6\aim6.exe (.not file.)

O87 - FAEL: "{40127567-E110-4EA2-AD97-FF9205FB1D12}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Windows Live\Messenger\livecall.exe (.not file.)

O87 - FAEL: "{2E903566-28D3-436D-9B95-8171B7C8BBA7}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{7A45342E-974C-4F1B-8741-8EB35AAC9D3B}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "TCP Query User{CB313F44-E774-43F4-9C88-6F18CA97EB41}C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe" | In - Public - P6 - TRUE | .(.Nokia - Nokia Ovi Suite.) -- C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe

O87 - FAEL: "UDP Query User{B90CC9B1-BD61-404F-BCF4-79EDB566DEF0}C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe" | In - Public - P17 - TRUE | .(.Nokia - Nokia Ovi Suite.) -- C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe

O87 - FAEL: "TCP Query User{27C5530C-DAB9-4972-A633-40787AF36617}C:\program files\common files\nokia\service layer\a\nsl_host_process.exe" | In - Public - P6 - TRUE | .(.Nokia Corporation.) -- C:\program files\common files\nokia\service layer\a\nsl_host_

O87 - FAEL: "UDP Query User{20276443-1083-44B7-B713-F86071B29684}C:\program files\common files\nokia\service layer\a\nsl_host_process.exe" | In - Public - P17 - TRUE | .(.Nokia Corporation.) -- C:\program files\common files\nokia\service layer\a\nsl_host

O87 - FAEL: "{042F295A-5E2F-4F92-B058-1C22FE9579F5}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{F12FD5CB-BA99-4945-9781-1178E235DDEB}" | In - Public - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{5DAEE85F-CD17-419A-BAD6-95B16EEC0D52}" | In - Public - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

~ Scan Firewall in 00mn 03s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8762 - (18/10/2011)

Clés trouvées (Keys found) : 9

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 2

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\MozillaPlugins\@viewpoint.com/VMP] =>Adware.MetaStream

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer] =>Adware.MetaStream

[HKLM\Software\Classes\axmetastream.metastreamctl] =>Adware.MetaStream

[HKLM\Software\Classes\axmetastream.metastreamctl.1] =>Adware.MetaStream

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary] =>Adware.MetaStream

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1] =>Adware.MetaStream

[HKLM\Software\MetaStream] =>Adware.MetaStream

[HKLM\Software\Viewpoint] =>Adware.MetaStream

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer] =>Adware.MetaStream

C:\Program Files\Viewpoint =>Adware.MetaStream

C:\ProgramData\Viewpoint =>Adware.MetaStream

~ Scan Additionnel in 00mn 35s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : livebox.home

Address: 192.168.1.1

Nom : www.google.fr

Address: 74.125.39.106

~ Scan DNS in 00mn 02s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 50688 | (ALaunchService) . (...) - C:\Acer\ALaunch\ALaunchSvc.exe

SR - | Auto 21/07/2009 108289 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 21/07/2009 185089 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 24/12/2008 238888 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Auto 0 | (CLTNetCnService) . (...) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 10/08/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

SR - | Auto 10/08/2007 24576 | (eLockService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

SR - | Auto 10/08/2007 135168 | (eNet Service) . (.Acer Inc..) - C:\Acer\Empowering Technology\eNet\eNet Service.exe

SR - | Auto 08/09/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

SR - | Auto 24576 | (eSettingsService) . (...) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

SS - | Auto 27/06/2011 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 27/06/2011 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SR - | Auto 08/09/2007 355096 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

SR - | Auto 10/08/2007 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SS - | Demand 10/08/2007 2999664 | (LiveUpdate) . (.Symantec Corporation.) - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe

SS - | Auto 0 | (LiveUpdate Notice Ex) . (...) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 11/08/2008 583048 | (LiveUpdate Notice Service) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

SS - | Demand 19/10/2011 251248 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SR - | Auto 107008 | (MobilityService) . (...) - C:\Acer\Mobility Center\MobilityService.exe

SR - | Auto 10/08/2007 554352 | (Planificateur LiveUpdate automatique) . (.Symantec Corporation.) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

SR - | Auto 266343 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

SR - | Demand 14/09/2011 633856 | (ServiceLayer) . (.Nokia.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

SR - | Auto 26/01/2011 110592 | (WDDMService) . (.WDC.) - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe

SR - | Auto 26/01/2011 20480 | (WDSmartWareBackgroundService) . (.Memeo.) - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe

SR - | Auto 07/06/2008 167936 | (WMIService) . (.acer.) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

SR - | Auto 14/06/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

SR - | Auto 10/08/2007 386560 | (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\system32\DRIVERS\xaudio.exe

SR - | Auto 08/09/2007 13560 | ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp..) - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl

~ Scan Services in 00mn 04s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

~ Scan MBR in 00mn 06s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Nicolas at 19/10/2011 09:01:09

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 08s

 

 

 

End of the scan (1991 lines in 12mn 08s)(0)

[lance_yien]

Bonjour ocinatas,

 

---

Très Important!

 

>>> A faire immédiatement:

- En haut de ce message cliquer sur le bouton "Suivre ce sujet", en choisissant "Notification immédiate" => "Soumettre" tu seras avisé en temps réel pour les réponses apportées à ton sujet et de ce fait, ta machine sera nettoyée dans les meilleurs délais.

Si à la place du bouton "Suivre ce sujet" tu as "Arrêter de suivre ce sujet", c'est que les réglages ont déjà été faits.

- Sauvegarder (en copiant) tous les documents personnels sur un support autre que la partition système: Clé USB, CD/DVD, Disque Dur externe etc.

 

>>> Que faire durant ce nettoyage: Merci de NE PAS utiliser, installer et/ou désinstaller aucun programme à part ceux qui sont proposés à chaque étape ce qui a pour but d'éviter tout problème d'incompatibilité entre les outils.

 

>>> Que faire à la réception de nouvelles instructions:

• Lire la totalité du message.
  
• Certains programmes peuvent créer des problèmes s'ils ne sont pas lancés depuis le Bureau. Aussi, il est demandé de les télécharger et enregistrer DIRECTEMENT sur le Bureau (ou les déplacer avant utilisation par un clic-droit dessus => "Couper" puis clic-droit sur le Bureau => "Coller").
  
• Procéder toujours dans l'ordre donné et demander des clarifications si nécessaire AVANT de commencer.
  
• NE PAS hésiter à commenter et signaler tout changement (en bien ou en mal) dans le comportement de la machine ou par rapport au problème initial.
  

>>> Comment répondre:

- Cliquer sur le bouton (et non sur car je n'ai pas besoin de relire mes messages précédents).

- Coller le contenu des rapports SANS y ajouter AUCUN formatage de texte (en citation, code, couleur etc...), le but étant pour nous faciliter leur interprétation.

 

>>> Ne pas abandonner son sujet avant d'être informé(e) que tout est OK.

---

 

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment.

 

>>> Utiliser ZHPFix: Sélectionner et copier le texte suivant:

 

P2 - FPN: [HKLM] [@viewpoint.com/VMP] - (.Pas de propriétaire - MetaStream 3 Plugin r4.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0

O42 - Logiciel: Viewpoint Media Player - (.Pas de propriétaire.) [HKLM] -- ViewpointMediaPlayer

[HKLM\Software\MetaStream]

[HKLM\Software\Viewpoint]

O43 - CFD: 30/11/2008 - 03:38:58 - [7558675] ----D- C:\Program Files\Viewpoint

O43 - CFD: 07/05/2011 - 14:29:24 - [3991] ----D- C:\ProgramData\Viewpoint

[HKLM\Software\MozillaPlugins\@viewpoint.com/VMP]

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer]

[HKLM\Software\Classes\axmetastream.metastreamctl]

[HKLM\Software\Classes\axmetastream.metastreamctl.1]

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary]

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1]

[HKLM\Software\MetaStream]

[HKLM\Software\Viewpoint]

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer]

C:\Program Files\Viewpoint

C:\ProgramData\Viewpoint

O4 - HKLM\..\Run: [Acer Tour] Clé orpheline

O4 - HKLM\..\Run: [eRecoveryService] Clé orpheline

O4 - HKLM\..\Run: [NokiaMServer] Clé orpheline

O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] Clé orpheline

O4 - HKCU\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - HKUS\S-1-5-21-739506178-3101694859-2749750591-1000\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - Global Startup: C:\Users\Nicolas\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline

O43 - CFD: 23/08/2011 - 08:06:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{01D1B829-AE1C-4B8B-B31B-E6BEB0CAC951}

O43 - CFD: 13/09/2011 - 07:53:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{01DBF450-D1FB-4A47-8052-ED4C96361AD2}

O43 - CFD: 23/08/2011 - 08:06:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{02B57558-6A74-4B68-B54E-B9C75642CB61}

O43 - CFD: 07/08/2011 - 04:54:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{02E313A1-2C5D-4143-A4C2-ECB1B922E293}

O43 - CFD: 22/04/2011 - 13:13:16 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{051AA332-DAF1-408A-98DB-6B8FFBC0F864}

O43 - CFD: 30/05/2011 - 08:04:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{05767B2C-0E26-4865-A7F3-A4917EBF98EF}

O43 - CFD: 12/04/2011 - 20:39:08 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{05D2CB9C-D8A7-4409-A869-C2111C94C8F9}

O43 - CFD: 26/05/2011 - 20:03:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{064E77F9-D2A6-4D2B-990B-6E5E786A17E8}

O43 - CFD: 19/07/2011 - 13:05:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{068BF775-CACA-4EDE-AEDC-DA4B31E95FD2}

O43 - CFD: 17/10/2011 - 16:01:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0696FC65-4AA9-4884-B356-5C12E0564DBC}

O43 - CFD: 09/08/2011 - 21:47:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{07C94F89-2004-4A17-A8C6-60AC2E85B782}

O43 - CFD: 07/08/2011 - 16:56:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{082136D1-53D9-434B-9D24-54F23AD19502}

O43 - CFD: 04/05/2011 - 12:50:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{0A4514B8-44A4-4FE0-8E07-5C50937245D0}

O43 - CFD: 29/06/2011 - 08:06:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D0410F9-E7BB-4976-91B5-CB7C284FD012}

O43 - CFD: 18/08/2011 - 08:45:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D450231-A79F-49B0-A6B6-0439433C9B5D}

O43 - CFD: 05/08/2011 - 16:46:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0D9C69EC-2FD6-4D8E-8033-2FD8E77FB8E5}

O43 - CFD: 28/05/2011 - 00:27:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{0E2F32D5-9E19-4ED1-A220-566F46FB0360}

O43 - CFD: 02/08/2011 - 08:31:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{104B1719-CD4F-45F8-AD57-9D0EC36DDE94}

O43 - CFD: 01/08/2011 - 20:25:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{14C1579A-8725-43E9-98FC-3DCE3FD1E30B}

O43 - CFD: 08/09/2011 - 14:46:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{15688BF6-94B5-4F4A-A28C-E71C0A022B01}

O43 - CFD: 08/09/2011 - 02:45:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{157AFD27-0B86-4EF0-B38F-5E30C2FF2957}

O43 - CFD: 27/04/2011 - 14:07:10 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{1716E368-88C9-48F0-B842-929E5893FE20}

O43 - CFD: 22/06/2011 - 12:58:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{176AE202-58F4-4F40-B710-FC9390B6C6D9}

O43 - CFD: 10/04/2011 - 02:33:58 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{1823FBD3-B518-4D72-8825-F056DC3E9B85}

O43 - CFD: 08/09/2011 - 02:45:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{195FE989-C99A-4978-9D08-120670AD2BCE}

O43 - CFD: 10/05/2011 - 04:58:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{1CF21946-19FB-4B20-B569-72DED2CA7407}

O43 - CFD: 07/09/2011 - 12:19:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{1FA9BC70-533A-43A3-8081-7F5B270D3D43}

O43 - CFD: 18/08/2011 - 08:45:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{201BA797-27EB-4909-B78E-E92AB1F9E09B}

O43 - CFD: 14/04/2011 - 00:46:14 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{201CAAE6-9F58-42EA-9A96-560A46BEE2DB}

O43 - CFD: 24/08/2011 - 08:20:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2185FF2F-BBCD-44AE-BE56-B6D514183C9B}

O43 - CFD: 17/08/2011 - 01:33:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{219B3F82-748F-4672-AAB9-9D1910BE0B6B}

O43 - CFD: 09/05/2011 - 14:24:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{21A3AD7B-54CE-41E1-A40D-3DC88E51C94D}

O43 - CFD: 04/05/2011 - 00:39:00 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{21BE2FDB-419D-4B75-B555-6F16E0C4235F}

O43 - CFD: 12/09/2011 - 14:21:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{21CF5F49-D9E2-4915-B1F6-1085A6DB25AA}

O43 - CFD: 04/07/2011 - 20:34:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{22622FB6-7061-40BF-ACED-358AFD854D8A}

O43 - CFD: 26/08/2011 - 21:39:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{23724180-525F-428E-9E6B-A3586A05EB63}

O43 - CFD: 02/04/2011 - 12:34:12 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{237CBA0B-29F8-4BE2-A1C4-64722BB79BFD}

O43 - CFD: 25/08/2011 - 01:21:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2419A4B3-FC11-4C99-993A-A8810A4E75AC}

O43 - CFD: 23/06/2011 - 00:58:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{258004B9-9031-453D-9D02-CCEF9E16F018}

O43 - CFD: 18/10/2011 - 16:03:00 - [0] ----D- C:\Users\Nicolas\AppData\Local\{25D63651-06B4-4B18-97DF-8FF53F5D8657}

O43 - CFD: 13/05/2011 - 13:06:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{26BF282E-5E56-4F41-BD07-8940D52ABA9D}

O43 - CFD: 01/07/2011 - 00:47:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{272DCB9A-1417-4030-ACC4-BCDC2A69BB8C}

O43 - CFD: 02/09/2011 - 11:29:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{27AC9313-9AC6-4638-B106-270CD7576CFD}

O43 - CFD: 09/04/2011 - 02:32:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2824018A-00F5-49BC-B991-3D88790EC3DF}

O43 - CFD: 19/10/2011 - 06:49:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2826701F-0EB6-4852-95AA-A08D5B360515}

O43 - CFD: 03/09/2011 - 05:01:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{292000B0-76F8-4D27-99A9-3D9731FE3651}

O43 - CFD: 17/08/2011 - 13:41:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{29365CE0-9E82-4615-B7B3-F33D2B114EF8}

O43 - CFD: 25/06/2011 - 06:27:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2A807C4D-C915-49F3-840F-104B0D281BD0}

O43 - CFD: 07/04/2011 - 08:57:24 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2B0DF9BB-ED77-4005-BF66-5736C74A049C}

O43 - CFD: 20/05/2011 - 01:00:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{2E2953AD-ED97-407E-843F-28F669074F03}

O43 - CFD: 27/04/2011 - 02:06:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{2E485999-D106-4512-BCD6-E69F50A718E3}

O43 - CFD: 07/09/2011 - 12:19:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{325F78B7-DE39-4A04-88F1-0CEFE944AEFD}

O43 - CFD: 09/09/2011 - 20:01:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{34AAEE24-C9BE-44E1-9DCE-C4804023D067}

O43 - CFD: 05/04/2011 - 07:53:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{35C61AD4-65A3-41AD-B812-646A7B620802}

O43 - CFD: 12/09/2011 - 02:20:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3614C3EC-E4BC-49D8-81E9-60F4585B28C7}

O43 - CFD: 02/06/2011 - 23:42:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{361C65C8-227F-48C9-A109-D7057771BD4D}

O43 - CFD: 17/04/2011 - 01:17:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{377F7944-0D4A-4CE1-A09A-8B7ED72686BB}

O43 - CFD: 29/08/2011 - 12:45:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{38CB4F6A-C242-4104-9C8D-EC0D835833DF}

O43 - CFD: 15/04/2011 - 00:47:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{396C85C5-1DDE-4050-8305-525931C12EEE}

O43 - CFD: 29/08/2011 - 12:45:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{39A2B857-F73F-47B7-900A-3B06ED10EF24}

O43 - CFD: 21/06/2011 - 08:35:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3A70E8F9-84AD-49E1-B2BE-1586ECF72A93}

O43 - CFD: 12/09/2011 - 14:21:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{3AAF5882-D858-4BEE-A709-680DD6ABD1BD}

O43 - CFD: 11/08/2011 - 08:33:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4038975C-5084-42B1-A46A-0225E88DEE87}

O43 - CFD: 05/05/2011 - 22:39:20 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{40B8E773-12EA-4D22-BC49-F03D53769161}

O43 - CFD: 12/07/2011 - 12:58:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{40EF6C29-12BC-4D2F-91A7-2EB06D499C8E}

O43 - CFD: 26/05/2011 - 08:03:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{410D8A1E-469B-4745-818D-745551EB386C}

O43 - CFD: 30/07/2011 - 07:14:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{41892E61-47C5-4860-B412-8B43C0CE6FA3}

O43 - CFD: 29/04/2011 - 07:49:36 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{42A09904-C713-4CCA-B5CE-EDD03269B67D}

O43 - CFD: 17/08/2011 - 01:33:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4310D54E-A726-4B29-B162-9EFF83ADEC97}

O43 - CFD: 03/09/2011 - 05:01:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{43F69615-ECB1-451C-97B0-10BB17F4F81F}

O43 - CFD: 18/08/2011 - 20:46:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{457D6975-6AC2-44C7-881A-1712DD182058}

O43 - CFD: 10/08/2011 - 12:33:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{459C639B-9FC1-47D5-9783-FFEE2C2BCBAA}

O43 - CFD: 05/05/2011 - 08:14:32 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{47864E3E-2858-4040-B01B-351D5FE99F82}

O43 - CFD: 18/10/2011 - 16:03:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{487865AC-CD40-4D04-83A9-7D4261A85A88}

O43 - CFD: 04/08/2011 - 08:52:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{48999661-0E25-46B3-83E9-E41B9AB59878}

O43 - CFD: 04/08/2011 - 14:15:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4B6DE74C-2D2D-4607-A3FD-2CE9F26037C6}

O43 - CFD: 13/05/2011 - 01:56:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4B96A6C9-BF50-4B8C-9818-C3BCF3DC240F}

O43 - CFD: 30/04/2011 - 13:30:32 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{4C6C2C66-EC02-461C-98F3-B520F57258A3}

O43 - CFD: 06/07/2011 - 08:36:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4D299E4E-0D01-4BF3-9F21-E9494EB148AC}

O43 - CFD: 10/07/2011 - 08:49:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{4D941161-D630-4DF1-8309-4B31BC3EDF72}

O43 - CFD: 01/08/2011 - 01:32:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{524DA923-598A-4EF2-A608-85D244624556}

O43 - CFD: 02/05/2011 - 08:04:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{5262DB8E-195A-47FF-BA8C-14DEFC7007AD}

O43 - CFD: 31/08/2011 - 07:46:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{52A0A4DA-B076-4B21-AFB4-B55F877AA0A4}

O43 - CFD: 26/08/2011 - 07:47:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{544B84B2-3EDC-4A51-9B98-D0385A5559FC}

O43 - CFD: 14/09/2011 - 00:26:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{549442FB-77F1-4B4D-B278-B2E3736FB052}

O43 - CFD: 02/05/2011 - 21:10:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{54E9599E-2C0F-4C24-904F-A44776BA1B44}

O43 - CFD: 20/06/2011 - 16:32:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5582CB3E-4404-40AE-B2CF-01BD459FF255}

O43 - CFD: 18/05/2011 - 20:33:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{56285D08-06C7-4459-A6E7-AD97F1AABCBF}

O43 - CFD: 07/07/2011 - 13:13:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{57513790-7C71-41C2-A0FB-136E93ED561C}

O43 - CFD: 21/08/2011 - 23:24:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{59F17280-71CB-4292-BC7C-56C081655481}

O43 - CFD: 14/09/2011 - 10:18:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5A0F04EF-D949-4F29-A4E4-0B170D8E5FBD}

O43 - CFD: 10/09/2011 - 08:12:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5A64E02F-DC35-48A6-90ED-B5BCF8994161}

O43 - CFD: 11/07/2011 - 12:48:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5E479F61-0089-4AEF-836E-6A99FE673380}

O43 - CFD: 12/09/2011 - 02:20:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5EDA39BF-1D3C-47B9-84AE-06C9892CF1F1}

O43 - CFD: 04/07/2011 - 08:34:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{5F0477EF-728B-4EAB-A9A0-ECB21443E747}

O43 - CFD: 18/08/2011 - 20:46:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{605CA3FF-D6C4-495C-89AD-51E6444E8B8E}

O43 - CFD: 19/10/2011 - 06:49:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{61FCBC5E-5CC8-4DEC-9782-F96866F13C63}

O43 - CFD: 02/07/2011 - 00:43:46 - [0] ----D- C:\Users\Nicolas\AppData\Local\{62E5F373-2A3B-44D1-8815-E41F45474CA8}

O43 - CFD: 08/08/2011 - 09:02:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{630CB75A-4E5D-45F9-B911-612EA6D6269E}

O43 - CFD: 16/04/2011 - 10:25:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{644D46BB-B898-494F-A731-CA73F04D9547}

O43 - CFD: 26/08/2011 - 07:47:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6458E485-3DE0-4013-8581-68A59ECB269D}

O43 - CFD: 27/06/2011 - 13:47:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{64746393-813A-45A5-A7F3-4EF631CE711C}

O43 - CFD: 30/08/2011 - 13:48:10 - [0] ----D- C:\Users\Nicolas\AppData\Local\{649F2A17-E03C-4D66-A6BC-D577F37241EB}

O43 - CFD: 01/04/2011 - 13:16:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{69B9AF37-BCD4-4A4E-B727-1C9C40D5E117}

O43 - CFD: 07/07/2011 - 00:28:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{69C1C18D-926F-42DA-9D8F-BA7A4CAB1C31}

O43 - CFD: 02/08/2011 - 22:34:56 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6AE754C4-EF4A-43AA-B9A8-865B7FBE6EC9}

O43 - CFD: 08/04/2011 - 01:26:06 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{6C828397-BF5B-4B04-9E8C-E64A6841C90A}

O43 - CFD: 30/08/2011 - 13:48:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6CD4AE68-D6C1-4D30-B70F-DF4104042F17}

O43 - CFD: 13/09/2011 - 07:54:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6D89AB7F-E389-4579-9934-7BC3526347CE}

O43 - CFD: 18/10/2011 - 04:02:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{6E5E3BF9-F60F-4DB3-86B7-7D445E3C0147}

O43 - CFD: 28/04/2011 - 02:07:44 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{6F877B13-A0DE-412F-B43F-1FFBF0A708EE}

O43 - CFD: 10/05/2011 - 22:35:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{70551B93-4EAF-4599-891B-DE296004BCA1}

O43 - CFD: 25/08/2011 - 01:21:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7055CA60-F6D2-459E-B52B-7B960688BDB4}

O43 - CFD: 22/08/2011 - 12:44:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7245F472-8AA5-4057-A11A-06488303B5F3}

O43 - CFD: 08/07/2011 - 13:15:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{72609C22-1585-4DF9-B4FA-06D433852E9C}

O43 - CFD: 08/05/2011 - 01:57:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{742087F6-F931-4803-93A0-B2F167E915E2}

O43 - CFD: 21/04/2011 - 13:11:52 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{743D6339-5F5C-468A-8919-75560AB5172A}

O43 - CFD: 16/08/2011 - 12:54:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{769ED67F-02E1-404B-B9D5-979256CC5B89}

O43 - CFD: 16/08/2011 - 12:54:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{76D695DF-F845-48C2-A29B-54D20FF1A53D}

O43 - CFD: 09/08/2011 - 21:48:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{77A96170-94AC-45CC-9340-A7DCDD15FDE6}

O43 - CFD: 28/06/2011 - 20:05:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{791565C6-CD01-4A1D-BF0C-C264CD20CCBE}

O43 - CFD: 08/04/2011 - 13:26:40 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{79606420-9CBE-481E-BCAE-FD892B230D5B}

O43 - CFD: 19/06/2011 - 08:26:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{79B8DE52-100E-424E-AC04-64DEB37D2443}

O43 - CFD: 29/05/2011 - 18:05:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7D1AAB87-E3D5-4D5D-B701-DC0E056226B8}

O43 - CFD: 23/06/2011 - 20:36:00 - [0] ----D- C:\Users\Nicolas\AppData\Local\{7FA608BB-763E-45CC-922E-3AD47C6563D1}

O43 - CFD: 06/04/2011 - 07:54:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{7FE0E0AB-CD76-40DE-AC37-C71E74C93132}

O43 - CFD: 23/08/2011 - 20:19:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{80D2BE9D-FD3E-4994-A2E1-E9D5533EB765}

O43 - CFD: 18/07/2011 - 13:04:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{81255011-12A4-4199-8BEF-360C17D45E85}

O43 - CFD: 30/05/2011 - 22:54:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{830335B7-786B-4345-B74F-E63186D09F9A}

O43 - CFD: 25/08/2011 - 13:22:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8427068E-1B35-431D-9CDE-BF73C1F6523D}

O43 - CFD: 04/04/2011 - 07:42:26 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{845AC4B9-7662-4F36-91A9-1DED62E8618A}

O43 - CFD: 17/10/2011 - 16:01:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{854191BD-ED90-4B5E-BADF-5F76EFAD3241}

O43 - CFD: 26/04/2011 - 12:57:56 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{85EA2B74-BE3A-4F33-A2C5-8F12A2BC7A65}

O43 - CFD: 11/09/2011 - 02:19:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{87215D52-AB18-46F7-A68C-E66F56D9E6E0}

O43 - CFD: 15/08/2011 - 23:04:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{887B92D5-6794-4807-A539-918E9EC1F58A}

O43 - CFD: 11/04/2011 - 20:38:00 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{89E8074B-A30B-434D-A87D-0CEA735EF5EB}

O43 - CFD: 25/04/2011 - 23:03:28 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{8AC82D7B-F712-45DF-BFF3-20BE4BC073EC}

O43 - CFD: 09/09/2011 - 20:01:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8B0043B6-684A-488B-A93A-33E5F811721E}

O43 - CFD: 31/05/2011 - 12:51:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8B6CB7B8-22EA-4536-AB23-DA704DE40DC0}

O43 - CFD: 15/08/2011 - 23:04:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8BA56544-9828-4AE9-B2DD-40161AB6F9F4}

O43 - CFD: 03/07/2011 - 20:33:20 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8BE7D5AA-7706-4323-94E9-504F51231519}

O43 - CFD: 13/07/2011 - 07:49:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8C314C3C-89B5-4361-860A-219154E7BD01}

O43 - CFD: 08/09/2011 - 14:46:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8D21E410-DFEE-4E35-A75D-80505DAFA59F}

O43 - CFD: 23/05/2011 - 12:42:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8D7F0506-733B-45A4-B9B8-75FA3656528E}

O43 - CFD: 11/05/2011 - 12:50:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{8E48BC47-49DF-49EF-B948-22E09B3B39CA}

O43 - CFD: 07/08/2011 - 04:55:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{902B38F2-1D65-4FF1-B723-779883423701}

O43 - CFD: 15/04/2011 - 19:31:38 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{90618998-4DE2-40F1-BAF2-75B476ECA575}

O43 - CFD: 18/04/2011 - 13:19:56 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9273450B-6688-4BE3-9560-EF8176D6AF73}

O43 - CFD: 20/04/2011 - 01:17:10 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9479B4D0-D3A5-43F4-9C44-48463CDB9397}

O43 - CFD: 14/09/2011 - 00:26:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{962A2C7B-5FEF-41F6-9E5C-CEAA949031C1}

O43 - CFD: 11/09/2011 - 14:19:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{97BD85D4-D0A2-454A-BC93-4026ABFB4F2A}

O43 - CFD: 16/05/2011 - 02:10:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{984ECDA3-33B7-4F35-9E2D-CA04515FEDDD}

O43 - CFD: 18/04/2011 - 01:19:08 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9959A74E-505C-449B-B666-D1C2D41036E2}

O43 - CFD: 03/05/2011 - 09:10:36 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9B91D20D-A7CF-4DA6-AF49-30A3AE7F39D2}

O43 - CFD: 01/06/2011 - 23:41:28 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9E2FA494-09F2-4138-B6CC-0C04BD208A7D}

O43 - CFD: 31/03/2011 - 23:44:52 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{9E7AA2F7-FD26-49FC-8F6C-48827D5853D4}

O43 - CFD: 07/08/2011 - 16:55:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9FB16455-4739-4B4B-A444-EC12AD37321B}

O43 - CFD: 11/07/2011 - 00:19:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{9FC55679-0834-430B-962F-2B24A3250B05}

O43 - CFD: 19/07/2011 - 01:04:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A07158B9-EBC8-4C00-A121-879F82965B69}

O43 - CFD: 05/08/2011 - 16:46:06 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A1103AF7-5DAA-47E0-8E11-83C3F69320E9}

O43 - CFD: 14/07/2011 - 03:01:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A24546AC-D0E2-4391-8FB1-48E494FD4D70}

O43 - CFD: 24/05/2011 - 00:43:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A2482C8A-7A0C-4FF8-8C01-FFD9D230A00F}

O43 - CFD: 09/07/2011 - 17:20:32 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A2E4F0D7-505F-4668-B7F3-294E0F123658}

O43 - CFD: 22/04/2011 - 01:12:26 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{A2F4BA69-9650-414B-BFF5-C78F9942BDEB}

O43 - CFD: 06/08/2011 - 10:16:44 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A4C865CC-649D-4F52-8D4A-850ECA40D35E}

O43 - CFD: 17/05/2011 - 08:31:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A4EE3B5C-D90A-4E8C-B5BF-74604A184F1D}

O43 - CFD: 13/04/2011 - 08:39:42 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{A520DFCB-0EA7-463D-BB70-CEE7AA36BFFF}

O43 - CFD: 14/09/2011 - 00:19:36 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A53E80DE-443E-4D00-9C13-11AEF5DF1C92}

O43 - CFD: 04/08/2011 - 14:15:58 - [0] ----D- C:\Users\Nicolas\AppData\Local\{A57FDE44-1AB7-4474-A83F-9439201D444B}

O43 - CFD: 11/09/2011 - 14:20:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AA3C0258-5CD0-4376-AE3C-8E9959AAC61F}

O43 - CFD: 30/06/2011 - 12:47:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AB785249-157C-421D-B1B0-B18A0F0570F8}

O43 - CFD: 30/08/2011 - 01:47:34 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AC7A3FD4-A3D5-49A0-A5E3-5EDA6B45D933}

O43 - CFD: 01/06/2011 - 08:10:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{ACE872E2-CD3C-49FD-9BE8-21614B7B650A}

O43 - CFD: 21/08/2011 - 23:24:26 - [0] ----D- C:\Users\Nicolas\AppData\Local\{ADA64A16-A585-4FBF-AA0F-C8D0127AA0EF}

O43 - CFD: 28/06/2011 - 08:05:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{AF2A8CB5-0462-4408-B988-60CB86610DCA}

O43 - CFD: 01/05/2011 - 14:51:54 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B013E732-6F88-4E4A-9779-007DFD474585}

O43 - CFD: 27/06/2011 - 00:13:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B418CE0E-BE62-4209-ABF3-06D910034F7D}

O43 - CFD: 23/08/2011 - 20:19:24 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B47CA81C-1B18-4D45-9047-AE3055C8DBB1}

O43 - CFD: 24/07/2011 - 10:50:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B561148B-AB3E-4029-8174-14DC80187A7D}

O43 - CFD: 09/05/2011 - 02:24:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B6AABE19-CADC-4FA1-9F15-E39D08955FE6}

O43 - CFD: 24/05/2011 - 12:54:38 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B72B1C69-D239-4F8D-BFED-63650048D5DA}

O43 - CFD: 28/08/2011 - 22:02:16 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B7304482-FA22-4644-BA75-29A932322C7C}

O43 - CFD: 28/04/2011 - 19:49:02 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B76599A2-57A1-4460-B09C-4FCDD64A2613}

O43 - CFD: 12/08/2011 - 02:06:42 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B835DE3B-1FDA-4539-A89E-AFEE8E99F7B2}

O43 - CFD: 11/08/2011 - 08:33:48 - [0] ----D- C:\Users\Nicolas\AppData\Local\{B8BAE3BD-D735-4E4A-8EB7-62F53934B4FD}

O43 - CFD: 12/04/2011 - 08:38:34 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{B983CF4B-2C42-4AF5-947F-A6F298E2B0ED}

O43 - CFD: 10/08/2011 - 12:33:50 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BB1F2D38-7AED-401F-9CE1-7CEEF0F92966}

O43 - CFD: 04/04/2011 - 19:42:40 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{BBBD1705-F5FB-4A3B-AE58-6980E300DBF3}

O43 - CFD: 20/07/2011 - 08:26:18 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BE7E1664-77EC-4C16-8DE4-E91F348454EF}

O43 - CFD: 09/08/2011 - 02:08:52 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BEB14A87-012B-4CF8-A9F1-6066DAA60B6B}

O43 - CFD: 14/09/2011 - 10:17:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{BF67FD75-5C01-433C-8397-B06322E01FB8}

O43 - CFD: 11/09/2011 - 02:19:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C0115B2F-150D-4F58-8EAD-88AD9358CBA2}

O43 - CFD: 25/05/2011 - 08:03:12 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C1018744-6F37-4688-B6EE-B8A9FBF7EED0}

O43 - CFD: 02/06/2011 - 11:42:08 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C123FC98-5FCB-4167-8D50-E0C1E6EF0D40}

O43 - CFD: 24/08/2011 - 08:20:04 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C1419BF5-8BCE-441C-B80D-58746B011151}

O43 - CFD: 31/08/2011 - 22:02:22 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C18D7093-034E-45E6-9C20-2343AB8080B9}

O43 - CFD: 18/05/2011 - 08:32:54 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C70C332B-56EA-4438-97BD-2AC87C0BFBFA}

O43 - CFD: 09/09/2011 - 08:01:14 - [0] ----D- C:\Users\Nicolas\AppData\Local\{C798069C-4F59-4EDD-8CA4-16F7423EB025}

O43 - CFD: 19/04/2011 - 01:20:30 - [0] --H-D- C:\Users\Nicolas\AppData\Local\{CA3BF34A-CA64-42D7-8619-38B2425E3806}

O43 - CFD: 03/08/2011 - 12:37:40 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CEA72EB6-B05A-4ECD-8ACF-C1FD094D1CE2}

O43 - CFD: 17/07/2011 - 23:46:02 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CEC2081B-B2BA-41EB-AFAE-BAD258A6F29C}

O43 - CFD: 16/05/2011 - 19:12:30 - [0] ----D- C:\Users\Nicolas\AppData\Local\{CFCECDA9-EAD8-4F7D-8ED7-27FB4893CD1C}

 

EmptyTemp

EmptyFlash

Lancer ZHPFix (raccourci sur le Bureau ou "Démarrer" => "Tous les programmes" => "ZHP" => "ZHPFix") et cliquer sur le bouton [H].

Vérifier que toutes les lignes copiées (et rien d'autre) apparaissent dans la fenêtre (et disposées exactement de la même façon) et clique sur le bouton [OK] puis sur sur le bouton [Tous].

Fermer toutes les applications et autres fenêtres en cours désactive (y compris Internet) et désactiver tous les programmes de protection (antivirus, pare-feu et antispyware).

Enfin, clique sur le bouton [Nettoyer] et laisser faire. Redémarrer le PC pour finir le nettoyage si demandé.

 

Copier/ coller le contenu du rapport qui s'ouvre dans la prochaine réponse. Ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt.

--

 

Une fois que le rapport et posté, enchainer avec ce qui suit.

 

>>> Programmes de protection: Ton rapport laisse penser que ton antivirus principal est Avira mais des modules de Panda et de Symantec sont aussi visibles.

Comme il te faut UN SEUL antivirus et comme ta partition système (disque) manque de place (10% d'espace libre au lieu des 15% minimum recommandés pour faire tourner correctement tes programmes), je te suggère de désinstaller tout ce qui est de Panda et de Symantec:

• Pour Symantec, cliquer ICI puis sur TÉLÉCHARGER à côté de "J'utilise Windows Vista/XP/2000" pour télécharger leur utilitaire sur le Bureau,
  Fermer toutes les fenêtres ouvertes y compris Internet et cliquer sur le nouveau fichier "Norton_Removal_Tool.exe" (Vista/W7, cliquer-droit sur le fichier et choisir "Exécuter en tant qu'administrateur".
  Redémarrer le PC quand c'est fini.
  
• Pour Panda's ActiveScan, utiliser ceci.
  
• Pour Panda Security, utiliser ceci

 

Aller dans "Ajout/ Suppression de programme et désinstaller tous les programmes qui ne servent pas ou plus et faire du tri dans les documents personnels (il y a toujours des vieilleries qui ne servent plus).

--

 

Une fois que les 15% minimum sont atteints, télécharger sur le Bureau OTL (par OldTimer) depuis ici ou ici.

Brancher et allumer tous les médias amovibles disponibles et susceptibles d'être infectés (DD externe, clés USB etc) et fermer toutes les applications et fenêtres ouvertes.

Cliquer-droit sur OTL.exe => "Exécuter en tant qu'administrateur" et copier/ coller ces lignes (commençant par netsvcs) dans l'espace sous "Personnalisation":

 

netsvcs

drivers32

%SYSTEMDRIVE%\*.* /90

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /90

%systemroot%\Tasks\*.job

%systemroot%\system32\drivers\*.sys /90

CREATERESTOREPOINT

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

SAVEMBR:0

Sans rien changer, cliquer sur le bouton bleu Analyse et laisser faire.

A la fin du scan, 2 rapports seront créés: "OTL.txt" (qui s'ouvre dans le bloc-note) et "Extras.txt" (qui sera minimisé dans la Barre des tâches).

Ne pas les poster directement ici car souvent trop lourd pour les limites du forum.

Aller sur le site : cjoint.com

Cliquer sur Parcourir, chercher le fichier "OTL.txt" et cliquer dessus. Cliquer sur Créer le lien CJoint.

Dans la page suivante --> , une adresse (http//...) sera créée. Ouvre le Bloc-note et copier /coller cette adresse dedans.

Faire de même pour le fichier "Extras.txt".

Copier/ Coller les 2 adresses dans la prochaine réponse.

 

>>> Est-ce mieux? Autres symptômes à vérifier?

[ocinatas]

re,

 

voici le rapport ZHPFixReport:

 

Rapport de ZHPFix 1.12.3365 par Nicolas Coolman, Update du 18/10/2011

Fichier d'export Registre :

Run by Nicolas at 19/10/2011 12:22:33

Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

Web site : ZHPFix Fix de rapport

 

========== Logiciel(s) ==========

SUPPRIME O42 - Logiciel: Viewpoint Media Player - (.Pas de propriétaire.) [HKLM] -- ViewpointMediaPlayer

 

========== Clé(s) du Registre ==========

ABSENT Key: Mozilla Plugin: @viewpoint.com/VMP

ABSENT Key: HKLM\Software\MetaStream

SUPPRIME Key: HKLM\Software\Viewpoint

ABSENT Key: HKLM\Software\MozillaPlugins\@viewpoint.com/VMP

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer

SUPPRIME Key: HKLM\Software\Classes\axmetastream.metastreamctl

SUPPRIME Key: HKLM\Software\Classes\axmetastream.metastreamctl.1

SUPPRIME Key: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary

SUPPRIME Key: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1

ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

 

========== Valeur(s) du Registre ==========

SUPPRIME RunValue: Acer Tour

SUPPRIME RunValue: eRecoveryService

SUPPRIME RunValue: NokiaMServer

SUPPRIME RunValue: NoIE4StubProcessing

SUPPRIME RunValue: Acer Tour Reminder

ABSENT RunValue: Acer Tour Reminder

 

========== Elément(s) de donnée du Registre ==========

SUPPRIME PhishingFilter Value: Enabled = 0

 

========== Dossier(s) ==========

ABSENT C:\Program Files\Viewpoint

ABSENT C:\ProgramData\Viewpoint

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{01D1B829-AE1C-4B8B-B31B-E6BEB0CAC951}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{01DBF450-D1FB-4A47-8052-ED4C96361AD2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{02B57558-6A74-4B68-B54E-B9C75642CB61}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{02E313A1-2C5D-4143-A4C2-ECB1B922E293}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{051AA332-DAF1-408A-98DB-6B8FFBC0F864}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{05767B2C-0E26-4865-A7F3-A4917EBF98EF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{05D2CB9C-D8A7-4409-A869-C2111C94C8F9}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{064E77F9-D2A6-4D2B-990B-6E5E786A17E8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{068BF775-CACA-4EDE-AEDC-DA4B31E95FD2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0696FC65-4AA9-4884-B356-5C12E0564DBC}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{07C94F89-2004-4A17-A8C6-60AC2E85B782}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{082136D1-53D9-434B-9D24-54F23AD19502}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0A4514B8-44A4-4FE0-8E07-5C50937245D0}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0D0410F9-E7BB-4976-91B5-CB7C284FD012}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0D450231-A79F-49B0-A6B6-0439433C9B5D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0D9C69EC-2FD6-4D8E-8033-2FD8E77FB8E5}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{0E2F32D5-9E19-4ED1-A220-566F46FB0360}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{104B1719-CD4F-45F8-AD57-9D0EC36DDE94}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{14C1579A-8725-43E9-98FC-3DCE3FD1E30B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{15688BF6-94B5-4F4A-A28C-E71C0A022B01}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{157AFD27-0B86-4EF0-B38F-5E30C2FF2957}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{1716E368-88C9-48F0-B842-929E5893FE20}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{176AE202-58F4-4F40-B710-FC9390B6C6D9}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{1823FBD3-B518-4D72-8825-F056DC3E9B85}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{195FE989-C99A-4978-9D08-120670AD2BCE}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{1CF21946-19FB-4B20-B569-72DED2CA7407}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{1FA9BC70-533A-43A3-8081-7F5B270D3D43}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{201BA797-27EB-4909-B78E-E92AB1F9E09B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{201CAAE6-9F58-42EA-9A96-560A46BEE2DB}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2185FF2F-BBCD-44AE-BE56-B6D514183C9B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{219B3F82-748F-4672-AAB9-9D1910BE0B6B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{21A3AD7B-54CE-41E1-A40D-3DC88E51C94D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{21BE2FDB-419D-4B75-B555-6F16E0C4235F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{21CF5F49-D9E2-4915-B1F6-1085A6DB25AA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{22622FB6-7061-40BF-ACED-358AFD854D8A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{23724180-525F-428E-9E6B-A3586A05EB63}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{237CBA0B-29F8-4BE2-A1C4-64722BB79BFD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2419A4B3-FC11-4C99-993A-A8810A4E75AC}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{258004B9-9031-453D-9D02-CCEF9E16F018}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{25D63651-06B4-4B18-97DF-8FF53F5D8657}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{26BF282E-5E56-4F41-BD07-8940D52ABA9D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{272DCB9A-1417-4030-ACC4-BCDC2A69BB8C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{27AC9313-9AC6-4638-B106-270CD7576CFD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2824018A-00F5-49BC-B991-3D88790EC3DF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2826701F-0EB6-4852-95AA-A08D5B360515}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{292000B0-76F8-4D27-99A9-3D9731FE3651}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{29365CE0-9E82-4615-B7B3-F33D2B114EF8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2A807C4D-C915-49F3-840F-104B0D281BD0}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2B0DF9BB-ED77-4005-BF66-5736C74A049C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2E2953AD-ED97-407E-843F-28F669074F03}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{2E485999-D106-4512-BCD6-E69F50A718E3}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{325F78B7-DE39-4A04-88F1-0CEFE944AEFD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{34AAEE24-C9BE-44E1-9DCE-C4804023D067}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{35C61AD4-65A3-41AD-B812-646A7B620802}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{3614C3EC-E4BC-49D8-81E9-60F4585B28C7}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{361C65C8-227F-48C9-A109-D7057771BD4D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{377F7944-0D4A-4CE1-A09A-8B7ED72686BB}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{38CB4F6A-C242-4104-9C8D-EC0D835833DF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{396C85C5-1DDE-4050-8305-525931C12EEE}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{39A2B857-F73F-47B7-900A-3B06ED10EF24}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{3A70E8F9-84AD-49E1-B2BE-1586ECF72A93}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{3AAF5882-D858-4BEE-A709-680DD6ABD1BD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4038975C-5084-42B1-A46A-0225E88DEE87}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{40B8E773-12EA-4D22-BC49-F03D53769161}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{40EF6C29-12BC-4D2F-91A7-2EB06D499C8E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{410D8A1E-469B-4745-818D-745551EB386C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{41892E61-47C5-4860-B412-8B43C0CE6FA3}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{42A09904-C713-4CCA-B5CE-EDD03269B67D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4310D54E-A726-4B29-B162-9EFF83ADEC97}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{43F69615-ECB1-451C-97B0-10BB17F4F81F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{457D6975-6AC2-44C7-881A-1712DD182058}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{459C639B-9FC1-47D5-9783-FFEE2C2BCBAA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{47864E3E-2858-4040-B01B-351D5FE99F82}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{487865AC-CD40-4D04-83A9-7D4261A85A88}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{48999661-0E25-46B3-83E9-E41B9AB59878}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4B6DE74C-2D2D-4607-A3FD-2CE9F26037C6}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4B96A6C9-BF50-4B8C-9818-C3BCF3DC240F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4C6C2C66-EC02-461C-98F3-B520F57258A3}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4D299E4E-0D01-4BF3-9F21-E9494EB148AC}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{4D941161-D630-4DF1-8309-4B31BC3EDF72}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{524DA923-598A-4EF2-A608-85D244624556}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5262DB8E-195A-47FF-BA8C-14DEFC7007AD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{52A0A4DA-B076-4B21-AFB4-B55F877AA0A4}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{544B84B2-3EDC-4A51-9B98-D0385A5559FC}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{549442FB-77F1-4B4D-B278-B2E3736FB052}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{54E9599E-2C0F-4C24-904F-A44776BA1B44}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5582CB3E-4404-40AE-B2CF-01BD459FF255}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{56285D08-06C7-4459-A6E7-AD97F1AABCBF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{57513790-7C71-41C2-A0FB-136E93ED561C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{59F17280-71CB-4292-BC7C-56C081655481}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5A0F04EF-D949-4F29-A4E4-0B170D8E5FBD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5A64E02F-DC35-48A6-90ED-B5BCF8994161}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5E479F61-0089-4AEF-836E-6A99FE673380}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5EDA39BF-1D3C-47B9-84AE-06C9892CF1F1}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{5F0477EF-728B-4EAB-A9A0-ECB21443E747}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{605CA3FF-D6C4-495C-89AD-51E6444E8B8E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{61FCBC5E-5CC8-4DEC-9782-F96866F13C63}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{62E5F373-2A3B-44D1-8815-E41F45474CA8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{630CB75A-4E5D-45F9-B911-612EA6D6269E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{644D46BB-B898-494F-A731-CA73F04D9547}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6458E485-3DE0-4013-8581-68A59ECB269D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{64746393-813A-45A5-A7F3-4EF631CE711C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{649F2A17-E03C-4D66-A6BC-D577F37241EB}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{69B9AF37-BCD4-4A4E-B727-1C9C40D5E117}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{69C1C18D-926F-42DA-9D8F-BA7A4CAB1C31}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6AE754C4-EF4A-43AA-B9A8-865B7FBE6EC9}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6C828397-BF5B-4B04-9E8C-E64A6841C90A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6CD4AE68-D6C1-4D30-B70F-DF4104042F17}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6D89AB7F-E389-4579-9934-7BC3526347CE}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6E5E3BF9-F60F-4DB3-86B7-7D445E3C0147}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{6F877B13-A0DE-412F-B43F-1FFBF0A708EE}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{70551B93-4EAF-4599-891B-DE296004BCA1}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{7055CA60-F6D2-459E-B52B-7B960688BDB4}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{7245F472-8AA5-4057-A11A-06488303B5F3}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{72609C22-1585-4DF9-B4FA-06D433852E9C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{742087F6-F931-4803-93A0-B2F167E915E2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{743D6339-5F5C-468A-8919-75560AB5172A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{769ED67F-02E1-404B-B9D5-979256CC5B89}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{76D695DF-F845-48C2-A29B-54D20FF1A53D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{77A96170-94AC-45CC-9340-A7DCDD15FDE6}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{791565C6-CD01-4A1D-BF0C-C264CD20CCBE}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{79606420-9CBE-481E-BCAE-FD892B230D5B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{79B8DE52-100E-424E-AC04-64DEB37D2443}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{7D1AAB87-E3D5-4D5D-B701-DC0E056226B8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{7FA608BB-763E-45CC-922E-3AD47C6563D1}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{7FE0E0AB-CD76-40DE-AC37-C71E74C93132}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{80D2BE9D-FD3E-4994-A2E1-E9D5533EB765}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{81255011-12A4-4199-8BEF-360C17D45E85}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{830335B7-786B-4345-B74F-E63186D09F9A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8427068E-1B35-431D-9CDE-BF73C1F6523D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{845AC4B9-7662-4F36-91A9-1DED62E8618A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{854191BD-ED90-4B5E-BADF-5F76EFAD3241}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{85EA2B74-BE3A-4F33-A2C5-8F12A2BC7A65}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{87215D52-AB18-46F7-A68C-E66F56D9E6E0}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{887B92D5-6794-4807-A539-918E9EC1F58A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{89E8074B-A30B-434D-A87D-0CEA735EF5EB}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8AC82D7B-F712-45DF-BFF3-20BE4BC073EC}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8B0043B6-684A-488B-A93A-33E5F811721E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8B6CB7B8-22EA-4536-AB23-DA704DE40DC0}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8BA56544-9828-4AE9-B2DD-40161AB6F9F4}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8BE7D5AA-7706-4323-94E9-504F51231519}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8C314C3C-89B5-4361-860A-219154E7BD01}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8D21E410-DFEE-4E35-A75D-80505DAFA59F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8D7F0506-733B-45A4-B9B8-75FA3656528E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{8E48BC47-49DF-49EF-B948-22E09B3B39CA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{902B38F2-1D65-4FF1-B723-779883423701}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{90618998-4DE2-40F1-BAF2-75B476ECA575}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9273450B-6688-4BE3-9560-EF8176D6AF73}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9479B4D0-D3A5-43F4-9C44-48463CDB9397}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{962A2C7B-5FEF-41F6-9E5C-CEAA949031C1}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{97BD85D4-D0A2-454A-BC93-4026ABFB4F2A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{984ECDA3-33B7-4F35-9E2D-CA04515FEDDD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9959A74E-505C-449B-B666-D1C2D41036E2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9B91D20D-A7CF-4DA6-AF49-30A3AE7F39D2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9E2FA494-09F2-4138-B6CC-0C04BD208A7D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9E7AA2F7-FD26-49FC-8F6C-48827D5853D4}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9FB16455-4739-4B4B-A444-EC12AD37321B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{9FC55679-0834-430B-962F-2B24A3250B05}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A07158B9-EBC8-4C00-A121-879F82965B69}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A1103AF7-5DAA-47E0-8E11-83C3F69320E9}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A24546AC-D0E2-4391-8FB1-48E494FD4D70}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A2482C8A-7A0C-4FF8-8C01-FFD9D230A00F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A2E4F0D7-505F-4668-B7F3-294E0F123658}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A2F4BA69-9650-414B-BFF5-C78F9942BDEB}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A4C865CC-649D-4F52-8D4A-850ECA40D35E}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A4EE3B5C-D90A-4E8C-B5BF-74604A184F1D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A520DFCB-0EA7-463D-BB70-CEE7AA36BFFF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A53E80DE-443E-4D00-9C13-11AEF5DF1C92}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{A57FDE44-1AB7-4474-A83F-9439201D444B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{AA3C0258-5CD0-4376-AE3C-8E9959AAC61F}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{AB785249-157C-421D-B1B0-B18A0F0570F8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{AC7A3FD4-A3D5-49A0-A5E3-5EDA6B45D933}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{ACE872E2-CD3C-49FD-9BE8-21614B7B650A}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{ADA64A16-A585-4FBF-AA0F-C8D0127AA0EF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{AF2A8CB5-0462-4408-B988-60CB86610DCA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B013E732-6F88-4E4A-9779-007DFD474585}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B418CE0E-BE62-4209-ABF3-06D910034F7D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B47CA81C-1B18-4D45-9047-AE3055C8DBB1}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B561148B-AB3E-4029-8174-14DC80187A7D}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B6AABE19-CADC-4FA1-9F15-E39D08955FE6}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B72B1C69-D239-4F8D-BFED-63650048D5DA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B7304482-FA22-4644-BA75-29A932322C7C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B76599A2-57A1-4460-B09C-4FCDD64A2613}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B835DE3B-1FDA-4539-A89E-AFEE8E99F7B2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B8BAE3BD-D735-4E4A-8EB7-62F53934B4FD}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{B983CF4B-2C42-4AF5-947F-A6F298E2B0ED}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{BB1F2D38-7AED-401F-9CE1-7CEEF0F92966}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{BBBD1705-F5FB-4A3B-AE58-6980E300DBF3}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{BE7E1664-77EC-4C16-8DE4-E91F348454EF}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{BEB14A87-012B-4CF8-A9F1-6066DAA60B6B}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{BF67FD75-5C01-433C-8397-B06322E01FB8}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C0115B2F-150D-4F58-8EAD-88AD9358CBA2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C1018744-6F37-4688-B6EE-B8A9FBF7EED0}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C123FC98-5FCB-4167-8D50-E0C1E6EF0D40}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C1419BF5-8BCE-441C-B80D-58746B011151}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C18D7093-034E-45E6-9C20-2343AB8080B9}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C70C332B-56EA-4438-97BD-2AC87C0BFBFA}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{C798069C-4F59-4EDD-8CA4-16F7423EB025}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{CA3BF34A-CA64-42D7-8619-38B2425E3806}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{CEA72EB6-B05A-4ECD-8ACF-C1FD094D1CE2}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{CEC2081B-B2BA-41EB-AFAE-BAD258A6F29C}

SUPPRIME Folder: C:\Users\Nicolas\AppData\Local\{CFCECDA9-EAD8-4F7D-8ED7-27FB4893CD1C}

SUPPRIME Temporaires Windows: : 13

SUPPRIME Flash Cookies: 3

 

========== Fichier(s) ==========

ABSENT File: c:\program files\viewpoint\viewpoint experience technology\npviewpoint.dll

ABSENT Folder/File: c:\program files\viewpoint

ABSENT Folder/File: c:\programdata\viewpoint

SUPPRIME File: c:\users\nicolas\desktop\ordinateur - raccourci.lnk

SUPPRIME Temporaires Windows: : 48

SUPPRIME Flash Cookies: 2

 

 

========== Récapitulatif ==========

10 : Clé(s) du Registre

6 : Valeur(s) du Registre

1 : Elément(s) de donnée du Registre

206 : Dossier(s)

6 : Fichier(s)

1 : Logiciel(s)

 

 

End of clean in 21mn 42s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 19/10/2011 12:22:33 [20052]

[ocinatas]

Bonjour

 

Je n'arrive pas à retrouver le minimum de 15% d'espace libre sur mon disque C, du coup je suis coincé à cette étape.

 

Par ailleurs, j'ai redémarré mon poste ce matin, et il a mis beaucoup plus de temps que d'habitude à se réouvrir.

 

A sa réouverture, un certain nombre de dossiers et de fichiers sont réapparus sur le bureau en "transparence", dans mes documents (et probablement à d'autres endroits, mais je n'ai pas vérifié).

 

Que se passe-t-il? Je n'ai pas l'impression que les performances de mon portable se soient améliorées, et je suis un peu inquiet quant aux réapparitions quelque peu fantomatiques que j'ai constaté.

 

Merci pour votre réponse.

[lance_yien]

Bonjour,

 

C'est plus facile de t'aider si tu nous indiques des choses précises

 

- Tu es à combien d'espace libre?

- Pour l'apparition de dossiers et de fichiers, c'est probablement une question de paramétrage des "Options des dossiers" => "Affichage" qu'il faut mettre par défaut (cocher "Ne pas afficher les dossiers/ fichiers cachés" et " Masquer les fichiers protégés du système...". Mais avant, il serait intéressant de chercher, pour chacun, à savoir ce que c'est et supprimer les inutiles (si tu ne sais pas et tu ne trouves pas sur Google ou tout autre moteur de recherche, fais une liste et on essayera de t'aider.

- Patience pour les performances de ta machine surtout que tu n'as pas encore assez d'espace et il est possible que ta machine soit bien infectée.

[ocinatas]

merci pour ta réponse!

 

j'ai 7,29go libres sur un total disque C de 69,7go, soit un tout petit peu plus de 10%.

 

pour les dossiers "fantômes", ce sont des dossiers que j'ai supprimés ou déplacés il y a un moment déjà (que j'ai bien souvent mis dans ma partition D "data" pour éviter d'encombrer mon C), et qui sont réapparus en "transparents" sans raison. D'ailleurs, lorsque je les redéplace vers mon D ou mon DD externe, ils restent "transparents".

 

d'autres fichiers sont aussi apparus, j'ai à présent sur mon bureau deux fichiers desktop.ini (transparents eux aussi).

 

merci encore pour le support

[lance_yien]

Si tu es toujours à 10% c'est que tu n'as rien encore désinstallé. Si c'est le cas fais-le pour pouvoir tourner les utilitaire de désinfection et de nettoyage.

Les fichiers desktop.ini sont légitimes et sont normalement cachés. Tu ne les verras plus quand tu auras paramétré les "Options de dossiers" comme indiqué dans mon message précédent.

 

Pour tes dossiers "fantômes" (que tu as reconnus et certain que leur copies existent bien sur une autre partition), clique-droit dessus => "Supprimer". Ne touche pas ceux que tu ne connais pas.

 

Passe OTL dès que tu peux (même si tu n'as pas les 15%) et poste les URLs.

[ocinatas]

bonjour

 

pour l'allègement du C, j'ai supprimé certains programmes dont je ne me servais pas, et déplacé l'intégralité des mes documents sur un DD externe, mais visiblement ça n'a pas suffit pour gagner un espace significatif.

 

j'hésite à supprimer d'autres programmes, car je ne sais pas trop à quoi ils peuvent servir, et j'ai un peu peur de faire une boulette.

 

j'ai modifié les options d'affichage des dossiers/fichiers cachés, ils ne sont plus visibles... j'ai cependant une question: comment se fait-il que les dossiers que j'ai "rangés ailleurs" conservent une trace "cachée" à l'endroit où ils étaient initialement?

 

enfin pour OTL j'ai essayé de le passer, mais ça ramait au point que la phrase "ne répond pas" s'est affichée en haut de la fenêtre du programme, du coup je me suis dis que c'était à cause du manque d'espace sur mon disque, et j'ai arrêté le programme.

 

merci encore pour le temps passé!

[lance_yien]

bonjour

 

Je ne connais pas le pourquoi de la chose.

Est-ce que tu as essayé de supprimer les dossiers "fantômes" que tu connais et est-ce que ça se fait sans problème? Il faut aussi voir dans leur "Propriétés" et décocher la case "Caché" et valider.

 

Pour les programmes que tu ne connais pas (pour désinstaller ou pas), fais une liste et on t'aidera à choisir.

[ocinatas]

re!

 

alors finalement, j'ai déplacé tous les fichiers/dossiers "cachés" de "mes documents" sur mon DD externe, ce qui m'a permis de gagner plein de place! du coup j'ai plus de 15% d'espace libre sur mon disque C (je sais pas pourquoi j'y ai pas pensé avant...)

 

bref, j'en arrive à OTL: lorsque je le lance, au début pas de problème, et au bout d'une minute ou deux, il s'arrête et ça me met (ne répond pas) en haut de la fenêtre (et même lorsque j'attends, le message reste et je suis finalement obligé d'arrêter le programme).

 

merci encore et toujours!