Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] EO.ST sous Vista et IE 9

Pierrot33

Par Pierrot33
dans Analyses et éradication malwares

 Partager

Messages recommandés

Pierrot33 Junior Member

Pierrot33

Posté(e)
Posté(e)

Bonjour tout le monde !

 

Alors voilà, ça fait déjà un bail que j'ai ce put... de EO.ST en page de démarrage pour I.E 9 ! Et je n'en peux plus ! J'ai pourtant traîné sur pas mal de forums pour trouver une solution, en vain !

 

Je m'en remets donc à vous, ô grand(e)s sauveteurs/euses !

Sachez que j'ai déjà installé HiJackThis.

D'avance je vous remercie et j'attends vos instructions.

Lien vers le commentaire
Partager sur d’autres sites

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

1)Télécharger AdwCleaner

Sous Vista et Windows 7-> Exécuter en tant qu'administrateur

 

Cliquez sur Recherche et postez le rapport généré C:\AdwCleaner[R1].txt

110906042614938066.jpg

 

2)Nettoyage

Relancez AdwCleaner avec droits administrateur

Cliquez sur Suppression et postez le rapport C:\AdwCleaner[s1].txt

 

3)

Téléchargez MBAM

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

Cliquer ici

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Exécuter avec droits d'administrateur.

Sous Vista , désactiver l'Uac

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant de mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

mbam.jpg

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Et un fichier Mbam.log apparaitra

 

 

4)Nettoyage

Relancez Mbam(Malewares'Bytes)

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

 

 

Hijackthis ne vaut plus guère!

 

Lancez cet outil de diagnostic:

Zhpdiag 1.31

 

Double-cliquer sur ZHPDiag.exe pour installer l'outil

Sur le bureau ,il y aura 3 icônes

zhp0710.png

 

Sous XP, double clic sur l'icône ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

 

120403104704343592.jpg

 

Cliquez sur le bouton 12040309492645704.jpg en haut, à droite et choisissez Tous

Pour éviter un blocage, décochez 045 et 061

 

Clic sur la Loupe en haut, à gauche pour lancer le scan

Postez le rapport ZhpDiag.txt qui apparait sur le bureau

 

Comment poster les rapports

Cliquez sur ce bouton 120403100123645840.jpg en haut, à droite

Appuyez sur Parcourir et chercher le rapport ,

Cliquer sur Envoyer

>> dans la page suivante -->

Cliquer Pjjoint Uploader ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

Lien vers le commentaire
Partager sur d’autres sites
  • 2 semaines après...
Pierrot33 Junior Member

Pierrot33

Posté(e)
  • Auteur
Posté(e)

Bonjour !

 

 

Pear, tout d'abord merci pour ta réponse et désolé d'avoir mis du temps à répondre à mon tour.

 

Voici donc le premier rapport (étape 1) AdwCleaner:

 

 

# AdwCleaner v1.701 - Rapport créé le 05/07/2012 à 13:19:11

# Mis à jour le 02/07/2012 par Xplode

# Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits)

# Nom d'utilisateur : bleuris - PC-DE-BLEURIS

# Exécuté depuis : C:\Users\bleuris\Downloads\adwcleaner.exe

# Option [Recherche]

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Présent : C:\Users\bleuris\AppData\Local\Conduit

Dossier Présent : C:\Users\bleuris\AppData\Local\freetvradio Air

Dossier Présent : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib

Dossier Présent : C:\Users\bleuris\AppData\LocalLow\Conduit

Dossier Présent : C:\Users\bleuris\AppData\LocalLow\PriceGong

Dossier Présent : C:\Users\bleuris\AppData\LocalLow\ShoppingReport2

Dossier Présent : C:\Users\bleuris\AppData\Roaming\freeTVRadio

Dossier Présent : C:\Program Files\Conduit

Dossier Présent : C:\Program Files\freeTVRadio

Dossier Présent : C:\Program Files\SpiderMessenger

Fichier Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

 

***** [Registre] *****

 

[*] Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT2851639

Clé Présente : HKCU\Software\AppDataLow\Software\Conduit

Clé Présente : HKCU\Software\AppDataLow\Software\PriceGong

Clé Présente : HKCU\Software\AppDataLow\Software\ShoppingReport2

Clé Présente : HKCU\Software\AppDataLow\Software\SmartBar

Clé Présente : HKCU\Software\Conduit

Clé Présente : HKCU\Software\freeTVRadio

Clé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon

Clé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1

Clé Présente : HKCU\Software\Softonic

Clé Présente : HKCU\Software\SpiderMessenger

Clé Présente : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL

Clé Présente : HKLM\SOFTWARE\Conduit

Clé Présente : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

 

***** [Registre - GUID] *****

 

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}

Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

[HKCU\Software\Microsoft\Internet Explorer\Main - First Home Page] = hxxp://y.lo.st

 

-\\ Google Chrome v20.0.1132.47

 

Fichier : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

Présente : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...]

Présente : "default_title": "uTorrentBar_FR Community Toolbar",

Présente : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...]

Présente : "name": "uTorrentBar_FR",

Présente : "path": "plugins/ConduitChromeApiPlugin.dll",

Présente : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT285163[...]

Présente : "path": "C:\\Users\\bleuris\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll",

 

*************************

 

AdwCleaner[R1].txt - [3853 octets] - [05/07/2012 13:19:11]

 

########## EOF - C:\AdwCleaner[R1].txt - [3981 octets] ##########

 

 

Et le deuxième (donc étape 2) toujours de AdwCleaner:

 

 

 

# AdwCleaner v1.701 - Rapport créé le 05/07/2012 à 14:28:13

# Mis à jour le 02/07/2012 par Xplode

# Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits)

# Nom d'utilisateur : bleuris - PC-DE-BLEURIS

# Exécuté depuis : C:\Users\bleuris\Downloads\adwcleaner.exe

# Option [suppression]

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Supprimé : C:\Users\bleuris\AppData\Local\Conduit

Dossier Supprimé : C:\Users\bleuris\AppData\Local\freetvradio Air

Dossier Supprimé : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib

Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\Conduit

Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\PriceGong

Dossier Supprimé : C:\Users\bleuris\AppData\LocalLow\ShoppingReport2

Dossier Supprimé : C:\Users\bleuris\AppData\Roaming\freeTVRadio

Dossier Supprimé : C:\Program Files\Conduit

Dossier Supprimé : C:\Program Files\freeTVRadio

Dossier Supprimé : C:\Program Files\SpiderMessenger

Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

 

***** [Registre] *****

 

[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639

Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit

Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong

Clé Supprimée : HKCU\Software\AppDataLow\Software\ShoppingReport2

Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar

Clé Supprimée : HKCU\Software\Conduit

Clé Supprimée : HKCU\Software\freeTVRadio

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1

Clé Supprimée : HKCU\Software\Softonic

Clé Supprimée : HKCU\Software\SpiderMessenger

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL

Clé Supprimée : HKLM\SOFTWARE\Conduit

Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

 

***** [Registre - GUID] *****

 

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}

Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - First Home Page] = hxxp://y.lo.st --> hxxp://www.google.com

 

-\\ Google Chrome v20.0.1132.47

 

Fichier : C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

Supprimée : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...]

Supprimée : "default_title": "uTorrentBar_FR Community Toolbar",

Supprimée : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...]

Supprimée : "name": "uTorrentBar_FR",

Supprimée : "path": "plugins/ConduitChromeApiPlugin.dll",

Supprimée : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT285163[...]

Supprimée : "path": "C:\\Users\\bleuris\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll",

 

*************************

 

AdwCleaner[R1].txt - [3982 octets] - [05/07/2012 13:19:11]

AdwCleaner[s1].txt - [320 octets] - [05/07/2012 14:27:30]

AdwCleaner[s2].txt - [4051 octets] - [05/07/2012 14:28:13]

 

########## EOF - C:\AdwCleaner[s2].txt - [4179 octets] ##########

 

 

Je viens de lancer MBAM (étape 3) pour le premier examen complet.

Je posterai le rapport dès qu'il sera terminé.

Lien vers le commentaire
Partager sur d’autres sites
Pierrot33 Junior Member

Pierrot33

Posté(e)
  • Auteur
Posté(e)

Re bonjour !

 

Voici le rapport suite à l'étape 4:

 

 

 

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org

 

Version de la base de données: v2012.07.05.03

 

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 9.0.8112.16421

bleuris :: PC-DE-BLEURIS [administrateur]

 

05/07/2012 16:51:38

mbam-log-2012-07-05 (16-51-38).txt

 

Type d'examen: Examen complet

Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM

Options d'examen désactivées: P2P

Elément(s) analysé(s): 426994

Temps écoulé: 1 heure(s), 27 minute(s), 30 seconde(s)

 

Processus mémoire détecté(s): 0

(Aucun élément nuisible détecté)

 

Module(s) mémoire détecté(s): 0

(Aucun élément nuisible détecté)

 

Clé(s) du Registre détectée(s): 0

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre détectée(s): 0

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre détecté(s): 0

(Aucun élément nuisible détecté)

 

Dossier(s) détecté(s): 0

(Aucun élément nuisible détecté)

 

Fichier(s) détecté(s): 0

(Aucun élément nuisible détecté)

 

(fin)

 

 

Je continue en ce moment même avec Zhpdiag.

Lien vers le commentaire
Partager sur d’autres sites
Pierrot33 Junior Member

Pierrot33

Posté(e)
  • Auteur
Posté(e) (modifié)

Bonsoir c'est encore moi !

 

Je viens d'utiliser ZHPDiag, j'ai pas bien compris l'étape pour publier le rapport que tu as décris pear, donc je l'ai enregistré et j'espère qu'en le postant ainsi, cela te conviendra quand même. Si ce n'est pas le cas, je veux bien quelques lumières supplémentaires !

 

Donc voici le rapport ZHPDiag:

 

 

 

Rapport de ZHPDiag v1.31.105 par Nicolas Coolman, Update du 25/06/2012

Run by bleuris at 05/07/2012 20:51:13

Web site : ZHPDiag Outil de diagnostic

Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com

State : Version à jour.

 

 

---\\ Web Browser

MSIE: Internet Explorer v9.0.8112.16421

GCIE: Google Chrome v20.0.1132.47 (Defaut)

 

---\\ Windows Product Information

~ Langage: Français

Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

Windows Server License Manager Script : OK

~ Vista, OEM_SLP channel

System Locked Preinstallation (OEM_SLP) : OK

Windows ID Activation : OK

~ Windows Partial Key : WQD8Q

Windows License : OK

Windows Automatic Updates : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3068 MB (44% free)

System Restore: Activé (Enable)

System drive C: has 120 GB (41%) free of 288 GB

 

---\\ Logged in mode

~ Computer Name: PC-DE-BLEURIS

~ User Name: bleuris

~ All Users Names: bleuris, Administrateur,

~ Unselected Option: O45,O61

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Users\bleuris\AppData\Roaming\

~ %Desktop% : C:\Users\bleuris\Desktop\

~ %Favorites% : C:\Users\bleuris\Favorites\

~ %LocalAppData% : C:\Users\bleuris\AppData\Local\

~ %StartMenu% : C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\System32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 120 Go of 288 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 11 Go)

E:\ CD-ROM drive (Not Inserted)

F:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 7 Go)

G:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 7 Go)

H:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]

[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]

[MD5.1C191A4F0960F21B5D58C8A65BAF5427] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/05/2012 - 23:35:47.) -- C:\Windows\System32\wininet.dll [1129472]

[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]

[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]

[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944]

[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]

[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]

[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]

[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]

[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]

[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]

[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]

[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856]

[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 07:32:49.) -- C:\Windows\system32\Drivers\ntfs.sys [1083880]

[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]

[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]

[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]

[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560]

[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192]

[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 07:32:55.) -- C:\Windows\system32\Drivers\volsnap.sys [226280]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 1/909

~ Mes musiques (My Musics) : 1/290

~ Mes Videos (My Videos) : 1/2

~ Mes Favoris (My Favorites) : 1/34

~ Mes Documents (My Documents) : 1/1053

~ Mon Bureau (My Desktop) : 1/6236

~ Menu demarrer (Programs) : 1/33

~ Scan Hidden Files in 00mn 05s

 

 

 

---\\ Processus lancés

[MD5.4B3E3F63726F1A456F5FD5ECF08A8719] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904] [PID.3696]

[MD5.F7EA1BAED492C634C96D5544AB0D3BB9] - (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200] [PID.956]

[MD5.19FCD84D75DA46F9514046E91FFCF564] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296] [PID.3724]

[MD5.E572B4F595FB0D025F1A74DE86180076] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736] [PID.3856]

[MD5.C18DAD67061885AE0D8BEA58726EA921] - (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688] [PID.2256]

[MD5.F7CF218E5CAA6FC0BB55791AD31E2B3F] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [202032] [PID.3472]

[MD5.21293443961A4E2597453EE7A9347F22] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [54840] [PID.4080]

[MD5.8CB896C573FD15AE8B13180DA53E93D2] - (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752] [PID.3752]

[MD5.782FEF655DBF8653C9F2722BEBF7A8A6] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4241512] [PID.2108]

[MD5.5DBF1E0450D1E8B896D9AD0F8AA6499C] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [450659] [PID.2072]

[MD5.4B555106290BD117334E9A08761C035A] - (...) -- ystem32\rundll32.exe [0] [PID.]

[MD5.98A078F838A70F84E1BD490D7C7675F4] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2688]

[MD5.D9D79F547AE2A70C650DFCFC27AEC0F7] - (.Apple Inc. - iTunesHelper.) -- C:\iTunes\iTunesHelper.exe [421736] [PID.832]

[MD5.4A9295C9BE22739D030AB072E9A0B169] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392] [PID.3124]

[MD5.615F5FD6A019633B7EE6451BFA65A881] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080] [PID.4000]

[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.]

[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3876]

[MD5.B6080F3A1CA495190D1583C2202CAA61] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17148552] [PID.2064]

[MD5.89F7C30A91E5581BDF14C62AB46A2B2D] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe [255536] [PID.3948]

[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.708]

[MD5.8D07F0687318214A3CEF62EA1048D101] - (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.exe [316720] [PID.4252]

[MD5.1EDC4865C8003A0251956835273904B1] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe [685360] [PID.4736]

[MD5.93F95BFF3C560A7D83D78FC9B95DBB7B] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.5768]

[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.5784]

[MD5.E75717A75F2A35130BF7F7AEE09DCB7D] - (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe [1250328] [PID.4688]

[MD5.BE955BAB4EFC2A28BE2692D102FFC85A] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [3838464] [PID.5128]

[MD5.5EC3A0DAC239DB3EBF9DC455EB559BA7] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.1.) -- C:\Windows\system32\nvvsvc.exe [196608] [PID.]

[MD5.3017DF7A43E5FC7E361C7B161DD9C81A] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657] [PID.]

[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]

[MD5.6D0AC28C5BD8D8495F83F5929A45E559] - (.Hewlett-Packard Corporation - HpService.) -- C:\Windows\system32\Hpservice.exe [19456] [PID.]

[MD5.4041D31508A2A084DFB42C595854090F] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768] [PID.]

[MD5.23C3A0680042C0D1DE1F360F8B62BC57] - (.Microsoft Corporation - Infrastructure d'extensibilité pour les ser.) -- C:\Windows\system32\WLANExt.exe [74240] [PID.]

[MD5.3B1B2EE9DF189F6BBB080BF393D1B2EE] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824] [PID.]

[MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.]

[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.]

[MD5.ABF90FC5A127F481219B873C1B8DFC1C] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.]

[MD5.0D362785BEF9BDF5A6E1F4628D06716D] - (.Pas de propriétaire - STServices.) -- C:\Program Files\SMINST\BLService.exe [365952] [PID.]

[MD5.805AE1F90C64758D19AAA001CF8CBA12] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734] [PID.]

[MD5.BB313AE85EC95B7CB87FC5ED53F3A22B] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320] [PID.]

[MD5.0C66E48654AFD8A6BCFBCE22E7FAB251] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116096] [PID.]

[MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368] [PID.]

[MD5.89F9E1984C1CD9E5F4FE39642D886E11] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.]

[MD5.1665C7121A026DF10C903DB9BC5E9D43] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [165192] [PID.]

[MD5.7795F8CEBC284A426B53F541E538695F] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840] [PID.]

[MD5.57EDB35EA2FECA88F8B17C0C095C9A56] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.]

[MD5.C7FBDD1ED42F82BFA35167A5C9803EA3] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904] [PID.]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Users\bleuris\AppData\Local\Google\Chrome\User Data\Default\Preferences

G1 - GCS: Preference [user Data\Default] None

~ Scan Google Browser in 00mn 00s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_31 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.1.10329.0.) -- c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3555.0308] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\bleuris\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\bleuris\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\bleuris\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.4.2f3.) -- C:\Users\bleuris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google/

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP Jumpstation

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Jumpstation

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Bing

R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Pando Networks - Pando Web Plugin.) (No version) -- (.not file.)

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\Windows\explorer.exe

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 04s

~ Nombre de lignes (Lines number): 15001

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [DVDAgent] . (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe

O4 - HKLM\..\Run: [TSMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

O4 - HKLM\..\Run: [TVAgent] . (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe

O4 - HKLM\..\Run: [uCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Run: [smartMenu] . (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

O4 - HKLM\..\Run: [updateLBPShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Run: [updatePSTShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe

O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [updateP2GoShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Run: [updatePDIRShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe

O4 - HKLM\..\Run: [sysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll

O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll

O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\iTunes\iTunesHelper.exe

O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

O4 - HKCU\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe

O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O4 - HKCU\..\Run: [uTorrent] C:\Users\bleuris\Desktop\uTorrent.exe (.not file.)

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O4 - HKUS\S-1-5-21-48527997-1680032524-3682840110-1000\..\Run: [uTorrent] C:\Users\bleuris\Desktop\uTorrent.exe (.not file.)

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\spotify.exe (.not file.)

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\bleuris\Desktop\Corbeille - Raccourci.lnk - Clé orpheline

O4 - Global Startup: C:\Users\bleuris\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\bleuris\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\bleuris\Desktop\Spotify.lnk . (.Spotify Ltd.) -- C:\Users\bleuris\Desktop\PIERRE\Spotify\spotify.exe

O4 - Global Startup: C:\Users\bleuris\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\bleuris\Desktop\UltraMixer.lnk . (.UltraMixer Digital Audio Solutions.) -- C:\Program Files\UltraMixer\UltraMixer.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PokerStars.fr.lnk . (.PokerStars.) -- C:\Program Files\PokerStars.FR\PokerStarsUpdate.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\UltraMixer.lnk . (.UltraMixer Digital Audio Solutions.) -- C:\Program Files\UltraMixer\UltraMixer.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.)

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: &Envoyer à OneNote - {90EAE591-7E7E-434a-8E28-ECFD00071806} -- C:\Program Files\PokerStars.FR\main.ico (.not file.)

O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254

O17 - HKLM\System\CS1\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254

O17 - HKLM\System\CS2\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254

O17 - HKLM\System\CS3\Services\Tcpip\..\{3CE0F8FF-D247-40F6-946D-8115AADF58D4}: DhcpNameServer = 192.168.0.254

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --

O18 - Handler: dvd - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: its - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) --

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --

O18 - Handler: mhtml - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) --

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Corporation - HpService.) - C:\Windows\System32\Hpservice.exe

O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.1.) - C:\Windows\System32\nvvsvc.exe

O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - STServices.) - C:\Program Files\SMINST\BLService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe

O23 - Service: TV Task Scheduler (TVTS) (TVSched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

O23 - Service: {55662437-DA8C-40c0-AADA-2C816A897A49} ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.Cyberlink Corp. - Pas de description.) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

~ Scan Keys in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA.job

[MD5.FCC7C432FBF465C38FD5D940580EF9B7] [APT] [FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core] (.Facebook Inc..) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe

[MD5.FCC7C432FBF465C38FD5D940580EF9B7] [APT] [FacebookUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA] (.Facebook Inc..) -- C:\Users\bleuris\AppData\Local\Facebook\Update\FacebookUpdate.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000Core] (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-48527997-1680032524-3682840110-1000UA] (.Google Inc..) -- C:\Users\bleuris\AppData\Local\Google\Update\GoogleUpdate.exe

[MD5.523D786AB9BFC3C228B8C851D402F502] [APT] [HP Health Check] (.Hewlett-Packard.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

~ Scan Scheduled Task in 00mn 03s

 

 

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe

O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\system32\iedkcs32.dll

O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll

O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe

O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll

O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll

O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll

~ Scan Active Setup in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys

O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites

O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}

O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001}

O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}

O42 - Logiciel: Broadcom 802.11 Wireless LAN Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11b Network Adapter

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}

O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}

O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}

O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}

O42 - Logiciel: Everest Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- Everest Poker.fr

O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {5DAA9C36-8F8B-462F-8CCA-E205BC3751F5}

O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {57A5AEC1-97FC-474D-92C4-908FCC2253D4}

O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F}

O42 - Logiciel: HP Help and Support - (.Hewlett-Packard Company.) [HKLM] -- {0054A0F6-00C9-4498-B821-B5C9578F433E}

O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}

O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A}

O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}

O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E}

O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM] -- {EFC5939F-470F-454E-B3DA-F51FDD83F6CE}

O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}

O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM] -- {67626E09-5366-4480-8F1E-93FADF50CA15}

O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}

O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}

O42 - Logiciel: HP Quick Launch Buttons 6.40 H2 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}

O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {154A4184-1A3D-4BF9-A5AE-4FA1660445F3}

O42 - Logiciel: HP Total Care Setup - (.Hewlett-Packard Company.) [HKLM] -- {38058455-8C21-4C2F-B2F6-14ED166039CB}

O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}

O42 - Logiciel: HP User Guides 0126 - (.Hewlett-Packard.) [HKLM] -- {BE78F458-88D3-4894-87E9-54B96D1FFAB6}

O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {9ADABDDE-9644-461B-9E73-83FA3EFCAB50}

O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4}

O42 - Logiciel: Hewlett-Packard Active Check for Health Check - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}

O42 - Logiciel: Hewlett-Packard Asset Agent for Health Check - (.HP.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}

O42 - Logiciel: JMicron JMB38X Flash Media Controller - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C}

O42 - Logiciel: Java 6 Update 31 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF}

O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}

O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}

O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}

O42 - Logiciel: LightScribe System Software 1.14.17.1 - (.LightScribe.) [HKLM] -- {0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}

O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Malwarebytes Anti-Malware version 1.61.0.1400 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}

O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 - (.Microsoft Corporation.) [HKLM] -- {3C3D696B-0DB7-3C6D-A356-3DB8CE541918}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall

O42 - Logiciel: My Photo Creations (Carteland Edition) - (.Digilabs.) [HKLM] -- {08C82239-17DE-402E-9BD9-8C1352C1176D}

O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C}

O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++

O42 - Logiciel: PCFriendly - (.Pas de propriétaire.) [HKLM] -- PCFriendly

O42 - Logiciel: PKR - (.PKR Ltd.) [HKLM] -- PKR

O42 - Logiciel: Package de pilotes Windows - ENE (enecir) HIDClass (09/04/2008 2.6.0.0) - (.ENE.) [HKLM] -- 7DE39862CC26DCE2446838AAF7CD5C163F835A57

O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre

O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM] -- PokerStars.fr

O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}

O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}

O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}

O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}

O42 - Logiciel: ProtectSmart Hard Drive Protection - (.Hewlett-Packard.) [HKLM] -- {9D615069-AA8F-4E89-AE9D-77AAE90F529F}

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {7BE15435-2D3E-4B58-867F-9C75BED0208C}

O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}

O42 - Logiciel: SPORE Creature Creator Trial Edition - (.Electronic Arts.) [HKLM] -- {ECEE0279-785F-4CB3-9F28-E69813234BF8}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2604111

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2604121

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2633870

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368v2

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656405

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2686827

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E34960DB-2A93-45DB-A208-02650F7AB09C}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{293FB6BE-D3EB-4162-B522-F9108040B9FE}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{31C0F635-15AD-4AA3-A3C6-B542B403D0EE}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3069CE04-082C-4669-9BA1-E6AA66330C1F}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{2B3C041A-A7F2-4A24-968D-4BEB6A123D15}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{ABB5F56F-FC55-4C7E-9622-B8A1E670BAFC}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B4C12F08-B0EF-4CC4-AD5F-381DD62BF640}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edi - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{AEA16A27-0B97-4670-818F-A98D06EC0A6F}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edi - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{075C2272-0881-46D3-B3A5-1D83D6940270}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}

O42 - Logiciel: Skype™ 5.8 - (.Skype Technologies S.A..) [HKLM] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}

O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU] -- Spotify

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: UltraMixer 2.4.3 - (.UltraMixer Digital Audio Solutions.) [HKLM] -- {32E2F180-247C-4077-B06A-20F9868568E0}_is1

O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217

O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}

O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM] -- VLC media player

O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM] -- wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1

O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM] -- {0D3C01F2-3A39-0248-42A0-4F52DAE2302B}

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}

O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}

O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}

O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}

O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}

O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}

O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}

O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}

O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}

O42 - Logiciel: avast! Free Antivirus v7.0.1426.0 - (.AVAST Software.) [HKLM] -- avast

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {23B8A91D-680B-462B-87AD-3D70F7341731}

O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM] -- {DD35C328-F115-BEDA-6EEE-E00C5AACCCBC}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\AVAST Software]

[HKCU\Software\Adobe]

[HKCU\Software\AhnLab]

[HKCU\Software\AppDataLow\Software\Adobe]

[HKCU\Software\AppDataLow\Software\Google]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Unity]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\BitTorrent]

[HKCU\Software\Bugsplat]

[HKCU\Software\Caphyon]

[HKCU\Software\ClassesB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Conduit]

[HKCU\Software\CyberLink]

[HKCU\Software\DVDPlayr]

[HKCU\Software\EasyBits]

[HKCU\Software\Facebook]

[HKCU\Software\Google]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\HookNetwork]

[HKCU\Software\IDT]

[HKCU\Software\IGA]

[HKCU\Software\IM Providers]

[HKCU\Software\JavaSoft]

[HKCU\Software\LightScribe]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept (Muvee)]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\O.2.C. Marketing]

[HKCU\Software\ODBC]

[HKCU\Software\PC SOFT]

[HKCU\Software\Pando Networks]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\ShotOnline]

[HKCU\Software\SkypeRS]

[HKCU\Software\Skype]

[HKCU\Software\Synaptics]

[HKCU\Software\Trolltech]

[HKCU\Software\Unity]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\ej-technologies]

[HKLM\Software\AVAST Software]

[HKLM\Software\Adobe]

[HKLM\Software\AdwCleaner]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\BcmSetup]

[HKLM\Software\Broadcom]

[HKLM\Software\BrowserChoice]

[HKLM\Software\Bunndle]

[HKLM\Software\Caphyon]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Cyberlink]

[HKLM\Software\Debug]

[HKLM\Software\EasyBits]

[HKLM\Software\Electronic Arts]

[HKLM\Software\GEAR Software]

[HKLM\Software\Google]

[HKLM\Software\HPQ]

[HKLM\Software\HP]

[HKLM\Software\Hewlett-Packard Company]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\IDT]

[HKLM\Software\InstallShield]

[HKLM\Software\InstalledOptions]

[HKLM\Software\Intel]

[HKLM\Software\InterActual Technologies]

[HKLM\Software\JMicron Technology Corp.]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\LabelPrint_Upgrade]

[HKLM\Software\LightScribe]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\McAfee.com]

[HKLM\Software\MimarSinan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\ODBC]

[HKLM\Software\P2G_Upgrade]

[HKLM\Software\PDR_Upgrade]

[HKLM\Software\Pando Networks]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Product_Upgrade]

[HKLM\Software\RTLSetup]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Riot Games]

[HKLM\Software\SRS Labs]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Sagem]

[HKLM\Software\SecureDigitalServices]

[HKLM\Software\Skype]

[HKLM\Software\Sonic]

[HKLM\Software\Symantec]

[HKLM\Software\Synaptics]

[HKLM\Software\VideoLAN]

[HKLM\Software\WOW6432Node]

[HKLM\Software\WildTangent]

[HKLM\Software\Windows]

[HKLM\Software\ej-technologies]

[HKLM\Software\mcafeeupdater]

[HKLM\Software\mozilla.org]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 15/11/2008 - 01:34:22 - [12,096] ----D C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

O43 - CFD: 26/03/2011 - 18:17:28 - [225,474] ----D C:\Program Files\Adobe

O43 - CFD: 14/08/2011 - 14:02:38 - [2,316] ----D C:\Program Files\Apple Software Update

O43 - CFD: 04/03/2011 - 21:11:19 - [314,449] ----D C:\Program Files\AVAST Software

O43 - CFD: 19/11/2011 - 18:27:22 - [0,585] ----D C:\Program Files\Bonjour

O43 - CFD: 16/12/2008 - 03:50:00 - [9,821] ----D C:\Program Files\Broadcom

O43 - CFD: 04/03/2011 - 21:39:38 - [3,484] ----D C:\Program Files\CCleaner

O43 - CFD: 06/04/2012 - 09:16:54 - [830,211] ----D C:\Program Files\Common Files

O43 - CFD: 15/11/2008 - 01:48:43 - [895,319] ----D C:\Program Files\CyberLink

O43 - CFD: 16/12/2008 - 03:47:23 - [0,758] ----D C:\Program Files\DIFX

O43 - CFD: 24/04/2009 - 14:12:44 - [72,538] ----D C:\Program Files\EasyBits For Kids

O43 - CFD: 20/06/2012 - 00:32:14 - [36,818] ----D C:\Program Files\Everest Poker.fr

O43 - CFD: 23/04/2009 - 19:41:09 - [0] ----D C:\Program Files\Fichiers communs

O43 - CFD: 09/02/2010 - 21:35:11 - [20,135] ----D C:\Program Files\Google

O43 - CFD: 16/12/2008 - 04:29:34 - [640,115] ----D C:\Program Files\Hewlett-Packard

O43 - CFD: 15/11/2008 - 00:43:51 - [0] ----D C:\Program Files\Hewlett-Packard Company

O43 - CFD: 15/11/2008 - 02:00:14 - [20,047] ----D C:\Program Files\HP

O43 - CFD: 15/11/2008 - 01:35:57 - [416,148] ----D C:\Program Files\HP Games

O43 - CFD: 16/12/2008 - 03:49:06 - [33,551] ----D C:\Program Files\IDT

O43 - CFD: 28/03/2012 - 11:03:49 - [162,845] --H-D C:\Program Files\InstallShield Installation Information

O43 - CFD: 16/12/2008 - 03:50:59 - [0,062] ----D C:\Program Files\Intel

O43 - CFD: 15/06/2012 - 13:03:19 - [6,917] ----D C:\Program Files\Internet Explorer

O43 - CFD: 05/04/2012 - 18:05:15 - [1,926] ----D C:\Program Files\iPod

O43 - CFD: 18/09/2011 - 11:25:07 - [166,206] ----D C:\Program Files\Java

O43 - CFD: 05/07/2012 - 14:22:52 - [11,540] ----D C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 26/01/2012 - 09:24:13 - [9,440] ----D C:\Program Files\McAfee Security Scan

O43 - CFD: 01/05/2012 - 01:30:21 - [3,043] ----D C:\Program Files\Microsoft

O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games

O43 - CFD: 18/09/2011 - 11:22:06 - [362,629] ----D C:\Program Files\Microsoft Office

O43 - CFD: 13/05/2012 - 14:44:26 - [36,641] ----D C:\Program Files\Microsoft Silverlight

O43 - CFD: 28/11/2009 - 20:10:07 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 17/12/2010 - 04:04:36 - [138,685] ----D C:\Program Files\Microsoft Works

O43 - CFD: 29/06/2010 - 20:01:13 - [7,789] ----D C:\Program Files\Microsoft.NET

O43 - CFD: 23/04/2011 - 22:40:27 - [94,740] ----D C:\Program Files\Movie Maker

O43 - CFD: 02/11/2006 - 14:37:34 - [0,025] ----D C:\Program Files\MSBuild

O43 - CFD: 25/04/2009 - 03:01:53 - [0] ----D C:\Program Files\MSXML 4.0

O43 - CFD: 16/12/2008 - 04:32:48 - [56,025] ----D C:\Program Files\muvee Technologies

O43 - CFD: 28/08/2011 - 10:49:05 - [133,600] ----D C:\Program Files\My Photo Creations (Carteland Edition)

O43 - CFD: 23/04/2009 - 19:44:07 - [17,895] R---D C:\Program Files\Online Services

O43 - CFD: 09/09/2010 - 20:04:32 - [7,178] ----D C:\Program Files\Pando Networks

O43 - CFD: 26/11/2009 - 21:15:54 - [9,611] ----D C:\Program Files\PCFriendly

O43 - CFD: 03/09/2011 - 12:51:31 - [3,385] ----D C:\Program Files\PhotoFiltre

O43 - CFD: 16/04/2012 - 16:46:35 - [133,657] ----D C:\Program Files\PokerStars.FR

O43 - CFD: 05/04/2012 - 17:56:31 - [72,431] ----D C:\Program Files\QuickTime

O43 - CFD: 16/12/2008 - 03:49:12 - [1,579] ----D C:\Program Files\Realtek

O43 - CFD: 02/11/2006 - 14:37:34 - [36,906] ----D C:\Program Files\Reference Assemblies

O43 - CFD: 06/04/2012 - 09:16:54 - [16,513] R---D C:\Program Files\Skype

O43 - CFD: 23/04/2009 - 19:51:24 - [27,072] ----D C:\Program Files\SMINST

O43 - CFD: 24/05/2011 - 23:18:09 - [52,326] ----D C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 16/12/2008 - 03:46:23 - [14,383] ----D C:\Program Files\Synaptics

O43 - CFD: 24/08/2011 - 23:04:24 - [124,492] ----D C:\Program Files\UltraMixer

O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information

O43 - CFD: 25/04/2009 - 12:04:45 - [61,889] ----D C:\Program Files\VideoLAN

O43 - CFD: 25/06/2012 - 19:00:02 - [7,125] ----D C:\Program Files\Winamax Poker

O43 - CFD: 23/04/2011 - 22:40:27 - [0,970] ----D C:\Program Files\Windows Calendar

O43 - CFD: 23/04/2011 - 22:40:26 - [2,610] ----D C:\Program Files\Windows Collaboration

O43 - CFD: 23/04/2011 - 22:40:25 - [4,283] ----D C:\Program Files\Windows Defender

O43 - CFD: 14/05/2012 - 09:14:45 - [6,757] ----D C:\Program Files\Windows Journal

O43 - CFD: 01/05/2012 - 11:27:33 - [141,083] ----D C:\Program Files\Windows Live

O43 - CFD: 14/04/2012 - 10:58:49 - [8,694] ----D C:\Program Files\Windows Mail

O43 - CFD: 23/04/2011 - 22:40:26 - [4,290] ----D C:\Program Files\Windows Media Player

O43 - CFD: 23/04/2009 - 19:41:09 - [7,589] ----D C:\Program Files\Windows NT

O43 - CFD: 23/04/2011 - 22:40:26 - [12,902] ----D C:\Program Files\Windows Photo Gallery

O43 - CFD: 25/04/2011 - 03:21:36 - [0,128] ----D C:\Program Files\Windows Portable Devices

O43 - CFD: 23/04/2011 - 22:40:26 - [10,111] ----D C:\Program Files\Windows Sidebar

O43 - CFD: 05/07/2012 - 20:51:37 - [13,258] ----D C:\Program Files\ZHPDiag

O43 - CFD: 15/11/2008 - 01:37:47 - [4,382] ----D C:\Program Files\Common Files\Adobe

O43 - CFD: 24/06/2012 - 19:51:05 - [39,318] ----D C:\Program Files\Common Files\Adobe AIR

O43 - CFD: 05/04/2012 - 18:05:13 - [110,941] ----D C:\Program Files\Common Files\Apple

O43 - CFD: 15/11/2008 - 01:33:14 - [0,089] ----D C:\Program Files\Common Files\DESIGNER

O43 - CFD: 15/11/2008 - 01:54:39 - [6,668] ----D C:\Program Files\Common Files\InstallShield

O43 - CFD: 16/03/2012 - 20:53:34 - [37,320] ----D C:\Program Files\Common Files\Java

O43 - CFD: 16/12/2008 - 04:21:58 - [27,847] ----D C:\Program Files\Common Files\LightScribe

O43 - CFD: 01/05/2012 - 11:26:34 - [429,340] ----D C:\Program Files\Common Files\microsoft shared

O43 - CFD: 16/12/2008 - 04:32:52 - [92,269] ----D C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services

O43 - CFD: 06/04/2012 - 09:16:54 - [2,056] ----D C:\Program Files\Common Files\Skype

O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 11/11/2011 - 04:01:28 - [40,772] ----D C:\Program Files\Common Files\System

O43 - CFD: 24/04/2009 - 16:11:22 - [0] ----D C:\Program Files\Common Files\Windows Live

O43 - CFD: 24/04/2009 - 16:08:41 - [0,008] -SH-D C:\Program Files\Common Files\WindowsLiveInstaller

O43 - CFD: 26/03/2011 - 18:17:34 - [0,001] ----D C:\ProgramData\Adobe

O43 - CFD: 28/03/2011 - 18:01:57 - [164,915] ----D C:\ProgramData\Apple

O43 - CFD: 23/05/2009 - 14:14:29 - [72,390] ----D C:\ProgramData\Apple Computer

O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Application Data

O43 - CFD: 04/03/2011 - 21:11:19 - [106,415] ----D C:\ProgramData\AVAST Software

O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Bureau

O43 - CFD: 16/12/2008 - 04:29:45 - [0,118] ----D C:\ProgramData\CyberLink

O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Desktop

O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Documents

O43 - CFD: 01/06/2011 - 20:02:54 - [0] ----D C:\ProgramData\eMule

O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Favoris

O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Favorites

O43 - CFD: 26/06/2009 - 20:53:29 - [0,514] ----D C:\ProgramData\Google

O43 - CFD: 16/12/2008 - 04:33:08 - [38,601] ----D C:\ProgramData\Hewlett-Packard

O43 - CFD: 24/04/2009 - 14:41:01 - [0,001] ----D C:\ProgramData\LightScribe

O43 - CFD: 28/05/2011 - 21:17:56 - [16,673] ----D C:\ProgramData\Malwarebytes

O43 - CFD: 22/11/2010 - 19:02:10 - [0,287] ----D C:\ProgramData\McAfee

O43 - CFD: 19/01/2012 - 22:05:13 - [0,001] ----D C:\ProgramData\McAfee Security Scan

O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Menu Démarrer

O43 - CFD: 28/05/2011 - 22:47:27 - [382,151] -S--D C:\ProgramData\Microsoft

O43 - CFD: 13/05/2012 - 15:10:23 - [0,054] ----D C:\ProgramData\Microsoft Help

O43 - CFD: 23/04/2009 - 19:41:09 - [0] --H-D C:\ProgramData\Modèles

O43 - CFD: 04/03/2011 - 21:20:52 - [0,015] ----D C:\ProgramData\Norton

O43 - CFD: 15/11/2008 - 00:45:32 - [9,556] ----D C:\ProgramData\NortonInstaller

O43 - CFD: 23/04/2011 - 22:48:51 - [0,191] ----D C:\ProgramData\NVIDIA

O43 - CFD: 28/03/2011 - 10:14:21 - [0,274] ----D C:\ProgramData\O.2.C. Marketing

O43 - CFD: 28/03/2011 - 10:14:21 - [0,002] ----D C:\ProgramData\PlanningTeam

O43 - CFD: 28/03/2012 - 10:26:17 - [0,001] ----D C:\ProgramData\PMB Files

O43 - CFD: 06/04/2012 - 09:16:47 - [18,537] ----D C:\ProgramData\Skype

O43 - CFD: 12/06/2012 - 00:13:43 - [1,413] ----D C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Start Menu

O43 - CFD: 04/03/2011 - 21:34:22 - [0,000] ----D C:\ProgramData\Sun

O43 - CFD: 23/04/2009 - 20:33:02 - [0,000] ----D C:\ProgramData\Symantec

O43 - CFD: 16/12/2008 - 04:32:11 - [0,571] ----D C:\ProgramData\Temp

O43 - CFD: 02/11/2006 - 15:02:04 - [0] --H-D C:\ProgramData\Templates

O43 - CFD: 17/08/2011 - 18:41:58 - [1941,110] ----D C:\ProgramData\WildTangent

O43 - CFD: 24/04/2009 - 16:08:07 - [0,208] ----D C:\ProgramData\WLInstaller

O43 - CFD: 15/11/2008 - 01:34:23 - [6,585] ----D C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

O43 - CFD: 28/03/2011 - 18:04:09 - [0,516] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

O43 - CFD: 23/05/2009 - 14:14:46 - [0,003] ----D C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

O43 - CFD: 26/03/2011 - 18:17:32 - [9,107] ----D C:\Users\bleuris\AppData\Roaming\Adobe

O43 - CFD: 19/11/2011 - 18:36:41 - [1287,494] ----D C:\Users\bleuris\AppData\Roaming\Apple Computer

O43 - CFD: 23/04/2009 - 20:15:34 - [0,092] ----D C:\Users\bleuris\AppData\Roaming\CyberLink

O43 - CFD: 23/08/2011 - 20:12:08 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\Digilabs

O43 - CFD: 17/03/2012 - 01:39:09 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\dvdcss

O43 - CFD: 27/06/2009 - 16:29:22 - [0,016] ----D C:\Users\bleuris\AppData\Roaming\Google

O43 - CFD: 23/04/2009 - 19:52:03 - [0,289] ----D C:\Users\bleuris\AppData\Roaming\Hewlett-Packard

O43 - CFD: 23/04/2009 - 19:44:09 - [0,041] ----D C:\Users\bleuris\AppData\Roaming\HP TCS

O43 - CFD: 29/12/2010 - 15:05:24 - [0,004] ----D C:\Users\bleuris\AppData\Roaming\Icones

O43 - CFD: 23/04/2009 - 19:51:26 - [0] ----D C:\Users\bleuris\AppData\Roaming\Identities

O43 - CFD: 10/01/2012 - 22:16:44 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\LolClient

O43 - CFD: 24/04/2009 - 14:12:33 - [1,929] ----D C:\Users\bleuris\AppData\Roaming\Macromedia

O43 - CFD: 04/03/2011 - 22:39:16 - [0,040] ----D C:\Users\bleuris\AppData\Roaming\Malwarebytes

O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\bleuris\AppData\Roaming\Media Center Programs

O43 - CFD: 31/01/2012 - 11:41:24 - [5,608] -S--D C:\Users\bleuris\AppData\Roaming\Microsoft

O43 - CFD: 23/01/2012 - 20:50:37 - [1,831] ----D C:\Users\bleuris\AppData\Roaming\Mozilla

O43 - CFD: 21/05/2012 - 19:27:59 - [0,407] ----D C:\Users\bleuris\AppData\Roaming\Notepad++

O43 - CFD: 05/07/2012 - 14:34:14 - [3,049] ----D C:\Users\bleuris\AppData\Roaming\Skype

O43 - CFD: 05/07/2012 - 12:46:09 - [1,969] ----D C:\Users\bleuris\AppData\Roaming\Spotify

O43 - CFD: 16/03/2012 - 00:42:56 - [0,000] ----D C:\Users\bleuris\AppData\Roaming\Unity

O43 - CFD: 19/06/2012 - 01:12:22 - [2,568] ----D C:\Users\bleuris\AppData\Roaming\uTorrent

O43 - CFD: 25/04/2009 - 12:06:38 - [0,429] ----D C:\Users\bleuris\AppData\Roaming\vlc

O43 - CFD: 26/03/2011 - 18:17:36 - [4,051] ----D C:\Users\bleuris\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1

O43 - CFD: 24/04/2009 - 16:31:45 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\WildTangent

O43 - CFD: 26/03/2011 - 18:16:31 - [3,072] ----D C:\Users\bleuris\AppData\Local\Adobe

O43 - CFD: 23/05/2009 - 14:04:28 - [0] ----D C:\Users\bleuris\AppData\Local\Apple

O43 - CFD: 28/08/2010 - 09:33:26 - [14,433] ----D C:\Users\bleuris\AppData\Local\Apple Computer

O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Application Data

O43 - CFD: 18/06/2012 - 16:04:43 - [0,872] ----D C:\Users\bleuris\AppData\Local\CRE

O43 - CFD: 17/03/2012 - 20:10:07 - [0] ----D C:\Users\bleuris\AppData\Local\eMule

O43 - CFD: 06/11/2011 - 21:48:06 - [7,334] ----D C:\Users\bleuris\AppData\Local\Facebook

O43 - CFD: 22/03/2012 - 21:24:18 - [609,822] ----D C:\Users\bleuris\AppData\Local\Google

O43 - CFD: 13/08/2011 - 18:10:10 - [56,980] ----D C:\Users\bleuris\AppData\Local\Hewlett-Packard

O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Historique

O43 - CFD: 06/02/2012 - 11:23:14 - [1559,408] ----D C:\Users\bleuris\AppData\Local\Microsoft

O43 - CFD: 06/08/2011 - 10:35:34 - [0,648] ----D C:\Users\bleuris\AppData\Local\Microsoft Games

O43 - CFD: 25/04/2011 - 14:43:29 - [0,287] ----D C:\Users\bleuris\AppData\Local\Microsoft Help

O43 - CFD: 29/09/2011 - 13:50:33 - [0] ----D C:\Users\bleuris\AppData\Local\PackageAware

O43 - CFD: 28/03/2012 - 13:08:31 - [0,242] ----D C:\Users\bleuris\AppData\Local\PMB Files

O43 - CFD: 04/06/2012 - 18:17:21 - [2,683] ----D C:\Users\bleuris\AppData\Local\PokerStars.FR

O43 - CFD: 05/07/2012 - 12:12:49 - [-1957,429] ----D C:\Users\bleuris\AppData\Local\Spotify

O43 - CFD: 05/07/2012 - 20:47:20 - [12,746] ----D C:\Users\bleuris\AppData\Local\Temp

O43 - CFD: 23/04/2009 - 19:41:35 - [0] ----D C:\Users\bleuris\AppData\Local\Temporary Internet Files

O43 - CFD: 04/02/2012 - 21:52:37 - [0,200] ----D C:\Users\bleuris\AppData\Local\Unity

O43 - CFD: 14/06/2011 - 18:02:48 - [0,027] ----D C:\Users\bleuris\AppData\Local\VirtualStore

O43 - CFD: 28/03/2011 - 10:13:32 - [0,000] ----D C:\Users\bleuris\AppData\Local\WDSetup

O43 - CFD: 05/07/2012 - 09:35:43 - [0,043] ----D C:\Users\bleuris\AppData\Local\Windows Live

O43 - CFD: 19/01/2012 - 13:52:25 - [0] ----D C:\Users\bleuris\AppData\Local\{005D711B-33AC-4A5B-8663-0FB67D6D35DA}

O43 - CFD: 12/06/2012 - 09:39:04 - [0] ----D C:\Users\bleuris\AppData\Local\{0061AD53-8D61-457F-A2B6-EAC4E2A9A409}

O43 - CFD: 20/07/2011 - 20:25:18 - [0] ----D C:\Users\bleuris\AppData\Local\{018828B3-D553-41A2-9211-E35546756468}

O43 - CFD: 01/04/2012 - 18:55:32 - [0] ----D C:\Users\bleuris\AppData\Local\{0201EFCB-F6E1-499E-9B07-D4036D21EC9B}

O43 - CFD: 24/12/2011 - 09:14:23 - [0] ----D C:\Users\bleuris\AppData\Local\{025B01F4-25DB-4141-A4F4-6090160EEF1F}

O43 - CFD: 30/12/2011 - 21:29:12 - [0] ----D C:\Users\bleuris\AppData\Local\{026D43AB-4141-4026-803F-E5159806744F}

O43 - CFD: 20/04/2012 - 08:42:20 - [0] ----D C:\Users\bleuris\AppData\Local\{02B8262F-50D0-4B43-918E-7AB6938C023F}

O43 - CFD: 26/06/2012 - 07:50:22 - [0] ----D C:\Users\bleuris\AppData\Local\{02BEF8D1-75A7-4AB6-B3E5-0E9D242A651B}

O43 - CFD: 01/05/2012 - 01:28:51 - [0] ----D C:\Users\bleuris\AppData\Local\{02C8580A-F379-48BE-AE12-211954BB23DA}

O43 - CFD: 18/11/2011 - 09:08:26 - [0] ----D C:\Users\bleuris\AppData\Local\{0410B83F-50BB-4028-9D63-2CDC54AEE76C}

O43 - CFD: 27/03/2012 - 20:46:36 - [0] ----D C:\Users\bleuris\AppData\Local\{04B7AF9C-EE0F-4184-8D82-A0EB8105EE2C}

O43 - CFD: 10/01/2012 - 09:14:51 - [0] ----D C:\Users\bleuris\AppData\Local\{0518E6E1-3C72-4657-8B81-7F15BCC4A4C8}

O43 - CFD: 15/03/2012 - 15:25:02 - [0] ----D C:\Users\bleuris\AppData\Local\{063A014E-A7F7-47B7-ADF9-3D028E715F4E}

O43 - CFD: 08/01/2012 - 18:33:14 - [0] ----D C:\Users\bleuris\AppData\Local\{06BCC2B9-08DF-4903-8EF2-00AC9619DEED}

O43 - CFD: 09/12/2011 - 02:01:19 - [0] ----D C:\Users\bleuris\AppData\Local\{076E2668-1F93-49E9-8FBA-8047B3ED26FA}

O43 - CFD: 04/07/2012 - 08:39:15 - [0] ----D C:\Users\bleuris\AppData\Local\{07F6827A-0695-4B7B-BD00-02C4F579FFE9}

O43 - CFD: 12/03/2012 - 10:30:33 - [0] ----D C:\Users\bleuris\AppData\Local\{07F9CEAF-2213-4CA9-8510-AA46DEFA1E37}

O43 - CFD: 01/05/2012 - 11:17:13 - [0] ----D C:\Users\bleuris\AppData\Local\{08AC15BE-02E6-40BD-BD72-FE7DD7864029}

O43 - CFD: 24/04/2012 - 17:28:16 - [0] ----D C:\Users\bleuris\AppData\Local\{09B91676-AC61-483A-A2AC-E49602D6AD36}

O43 - CFD: 21/03/2012 - 21:10:38 - [0] ----D C:\Users\bleuris\AppData\Local\{09C7042C-81C5-4535-B7CE-84B8ACC273D0}

O43 - CFD: 14/05/2012 - 09:20:47 - [0] ----D C:\Users\bleuris\AppData\Local\{0ACCBA72-223C-40C8-BE12-42ED0F12C205}

O43 - CFD: 27/11/2011 - 21:58:21 - [0] ----D C:\Users\bleuris\AppData\Local\{0DD1FFF9-4AC8-4E95-87BE-F02E45CBF268}

O43 - CFD: 02/05/2012 - 22:03:06 - [0] ----D C:\Users\bleuris\AppData\Local\{0DE1456A-6F01-4735-B33D-7D360BCD4AA7}

O43 - CFD: 18/12/2011 - 14:06:52 - [0] ----D C:\Users\bleuris\AppData\Local\{0EFC316B-27EC-4D94-A639-7B9352E642DF}

O43 - CFD: 27/06/2012 - 08:10:27 - [0] ----D C:\Users\bleuris\AppData\Local\{0FD43B6E-580C-4D52-9FD5-EA0CECC83411}

O43 - CFD: 06/05/2012 - 11:46:01 - [0] ----D C:\Users\bleuris\AppData\Local\{0FF02141-B386-4410-8A7B-FDC987E5B24C}

O43 - CFD: 16/04/2012 - 09:22:36 - [0] ----D C:\Users\bleuris\AppData\Local\{1108828E-CE60-4FA4-9B4F-4070B507C9DA}

O43 - CFD: 20/09/2011 - 22:43:13 - [0] ----D C:\Users\bleuris\AppData\Local\{11523F53-2305-41A4-8541-F7EE1ACAC326}

O43 - CFD: 14/06/2012 - 09:00:25 - [0] ----D C:\Users\bleuris\AppData\Local\{11AC861D-9572-4630-981A-DC09DCB59F69}

O43 - CFD: 29/06/2012 - 17:20:20 - [0] ----D C:\Users\bleuris\AppData\Local\{11CF53B7-81DD-4FD9-90FE-A31D25A14CB3}

O43 - CFD: 17/03/2012 - 20:06:03 - [0] ----D C:\Users\bleuris\AppData\Local\{11E7A565-E0C0-42D0-BF37-4C24BF288BB6}

O43 - CFD: 24/07/2011 - 10:37:37 - [0] ----D C:\Users\bleuris\AppData\Local\{12278E5A-4155-438B-B1C8-63EB03B93B58}

O43 - CFD: 30/12/2011 - 21:29:00 - [0] ----D C:\Users\bleuris\AppData\Local\{12613264-8946-4328-913E-6E51A3164202}

O43 - CFD: 25/05/2012 - 09:23:24 - [0] ----D C:\Users\bleuris\AppData\Local\{1269DCAE-B7B0-4824-ACEF-08EABB92BC2D}

O43 - CFD: 27/05/2012 - 17:56:42 - [0] ----D C:\Users\bleuris\AppData\Local\{127612AF-BBD0-428A-9DB5-1BD06FF66F32}

O43 - CFD: 02/01/2012 - 11:55:14 - [0] ----D C:\Users\bleuris\AppData\Local\{12CB6A42-72ED-40F6-85C1-CFC5F32F218F}

O43 - CFD: 27/05/2012 - 01:05:38 - [0] ----D C:\Users\bleuris\AppData\Local\{1396FDBE-7C9A-419C-AEEA-8AF6C5D0345B}

O43 - CFD: 03/07/2011 - 20:57:38 - [0] ----D C:\Users\bleuris\AppData\Local\{143333D2-0BBD-4FE7-B928-02DA6CE39BB7}

O43 - CFD: 11/11/2011 - 08:57:16 - [0] ----D C:\Users\bleuris\AppData\Local\{143B66E7-8741-4E92-95AD-DFF1C557C397}

O43 - CFD: 03/07/2012 - 20:54:39 - [0] ----D C:\Users\bleuris\AppData\Local\{14B41466-5ABE-492E-B495-2B78159DDE1E}

O43 - CFD: 08/05/2012 - 12:18:52 - [0] ----D C:\Users\bleuris\AppData\Local\{15727D48-BC7F-4146-9F3D-80C73BCAE6C0}

O43 - CFD: 09/01/2012 - 10:39:48 - [0] ----D C:\Users\bleuris\AppData\Local\{162BF3C3-F76C-4D55-9982-325AFE8D7257}

O43 - CFD: 30/05/2012 - 09:41:39 - [0] ----D C:\Users\bleuris\AppData\Local\{172C3082-CAF5-4C04-9213-12ACE20D6C89}

O43 - CFD: 05/05/2012 - 10:14:08 - [0] ----D C:\Users\bleuris\AppData\Local\{172E637E-7AC7-4C35-807E-7BA977EC34AA}

O43 - CFD: 13/06/2012 - 10:20:21 - [0] ----D C:\Users\bleuris\AppData\Local\{17788AE2-8542-4F2E-9061-1124F3F79B78}

O43 - CFD: 04/01/2012 - 02:12:07 - [0] ----D C:\Users\bleuris\AppData\Local\{183E0B53-8122-418C-AE98-9F843553D469}

O43 - CFD: 28/05/2012 - 06:49:30 - [0] ----D C:\Users\bleuris\AppData\Local\{191E7058-E6C9-466E-996F-3F199C62386A}

O43 - CFD: 24/04/2012 - 17:28:06 - [0] ----D C:\Users\bleuris\AppData\Local\{193C0D91-09B3-4841-985D-B1234574867E}

O43 - CFD: 14/09/2011 - 12:54:02 - [0] ----D C:\Users\bleuris\AppData\Local\{19B69B4C-C09D-4A00-B934-F11BC89C7DF1}

O43 - CFD: 21/12/2011 - 22:04:58 - [0] ----D C:\Users\bleuris\AppData\Local\{1A9608A9-AD94-432C-8FD6-101FEF6CCE8E}

O43 - CFD: 16/03/2012 - 20:11:43 - [0] ----D C:\Users\bleuris\AppData\Local\{1AC16BAB-17FA-451E-A75C-76A5DE541096}

O43 - CFD: 20/01/2012 - 15:37:21 - [0] ----D C:\Users\bleuris\AppData\Local\{1B208691-C2CA-45CA-BF37-62E566C9F266}

O43 - CFD: 04/06/2011 - 13:51:44 - [0] ----D C:\Users\bleuris\AppData\Local\{1B4073E4-13DF-49F3-A995-174B2C7EF2FD}

O43 - CFD: 10/12/2011 - 19:19:53 - [0] ----D C:\Users\bleuris\AppData\Local\{1B9510B5-AB21-4F50-B296-4A5FB20045A4}

O43 - CFD: 05/05/2012 - 10:13:58 - [0] ----D C:\Users\bleuris\AppData\Local\{1CE12F97-DA9E-4428-89FA-A41BF31CDB57}

O43 - CFD: 13/05/2012 - 14:36:38 - [0] ----D C:\Users\bleuris\AppData\Local\{1D992CAA-EA50-46E8-A046-1DD379E65EC7}

O43 - CFD: 01/08/2011 - 20:58:26 - [0] ----D C:\Users\bleuris\AppData\Local\{1E009D28-A35A-442C-9218-135B52F3A25C}

O43 - CFD: 01/12/2011 - 09:13:52 - [0] ----D C:\Users\bleuris\AppData\Local\{1E1FCF57-C38A-4FBA-B4F2-D99A50BB155C}

O43 - CFD: 12/12/2011 - 14:25:17 - [0] ----D C:\Users\bleuris\AppData\Local\{1E77011B-5309-40EA-B2EF-C6D479627DBE}

O43 - CFD: 15/11/2011 - 09:12:06 - [0] ----D C:\Users\bleuris\AppData\Local\{1EBEA262-AAA8-4C38-B305-DB4102356D44}

O43 - CFD: 01/07/2012 - 10:25:09 - [0] ----D C:\Users\bleuris\AppData\Local\{1ED309C0-ABB3-4367-A277-10739FFEA9E5}

O43 - CFD: 10/09/2011 - 16:43:22 - [0] ----D C:\Users\bleuris\AppData\Local\{1FC6F566-ACC3-419E-BB43-B23AAACAD1BB}

O43 - CFD: 31/05/2012 - 09:34:47 - [0] ----D C:\Users\bleuris\AppData\Local\{1FEA8D4D-58B7-4E09-A643-1D033A1B42FD}

O43 - CFD: 21/06/2011 - 11:24:43 - [0] ----D C:\Users\bleuris\AppData\Local\{208521F1-D1DC-42C9-984D-9EA3BAEEFAF8}

O43 - CFD: 08/08/2011 - 08:08:16 - [0] ----D C:\Users\bleuris\AppData\Local\{20DDBE0A-D6D0-4155-A455-59C485FD2F7F}

O43 - CFD: 06/11/2011 - 21:17:00 - [0] ----D C:\Users\bleuris\AppData\Local\{2112F279-9BAE-4A3C-8807-C17B12A9F1B4}

O43 - CFD: 22/05/2012 - 08:30:41 - [0] ----D C:\Users\bleuris\AppData\Local\{21151A0A-D1CB-4C0E-ABF3-C142414205FB}

O43 - CFD: 18/03/2012 - 02:47:32 - [0] ----D C:\Users\bleuris\AppData\Local\{211F6959-F44D-4724-8EE8-1CEC2235E6C5}

O43 - CFD: 21/08/2011 - 16:54:11 - [0] ----D C:\Users\bleuris\AppData\Local\{21BE547C-B213-467D-9A25-F1C292626B45}

O43 - CFD: 12/01/2012 - 11:58:01 - [0] ----D C:\Users\bleuris\AppData\Local\{21CB8D57-8C8F-4BD7-800F-B7617681080A}

O43 - CFD: 08/06/2011 - 20:59:02 - [0] ----D C:\Users\bleuris\AppData\Local\{228C3D8D-9A4F-4EF7-A37B-79E738375681}

O43 - CFD: 20/01/2012 - 12:12:37 - [0] ----D C:\Users\bleuris\AppData\Local\{22947C73-F9D5-4560-84C0-0185BDBA2642}

O43 - CFD: 09/01/2012 - 23:24:13 - [0] ----D C:\Users\bleuris\AppData\Local\{231648EB-3B0B-4963-90C7-955A46CF9BDD}

O43 - CFD: 19/03/2012 - 11:21:35 - [0] ----D C:\Users\bleuris\AppData\Local\{2388D935-0B34-4F4A-BA52-D2506CC1C51C}

O43 - CFD: 02/07/2011 - 14:16:34 - [0] ----D C:\Users\bleuris\AppData\Local\{23F61EE8-6C1D-4FF0-9300-3EA51C0CC78A}

O43 - CFD: 21/07/2011 - 21:39:14 - [0] ----D C:\Users\bleuris\AppData\Local\{23FA6B14-EC35-4C41-B248-8A46968F30B3}

O43 - CFD: 16/06/2012 - 21:58:59 - [0] ----D C:\Users\bleuris\AppData\Local\{24DBE15E-EFDD-439B-A57D-1DE7D47722F1}

O43 - CFD: 21/06/2012 - 20:28:49 - [0] ----D C:\Users\bleuris\AppData\Local\{24F1F88B-5BF8-4FC4-AFB3-1DC04099C5AE}

O43 - CFD: 01/05/2012 - 12:49:09 - [0] ----D C:\Users\bleuris\AppData\Local\{257027DB-FAB8-4A4F-871D-67B3B1E9C319}

O43 - CFD: 07/12/2011 - 13:03:36 - [0] ----D C:\Users\bleuris\AppData\Local\{25938465-DD11-4B79-8BEF-5795FB60D609}

O43 - CFD: 26/03/2012 - 09:01:38 - [0] ----D C:\Users\bleuris\AppData\Local\{25C7D69F-5D63-4D14-A7B0-A33FFCE824DA}

O43 - CFD: 21/08/2011 - 08:53:38 - [0] ----D C:\Users\bleuris\AppData\Local\{2676206F-75A1-4C0E-A4EC-B9FA2D79559E}

O43 - CFD: 30/05/2012 - 09:41:23 - [0] ----D C:\Users\bleuris\AppData\Local\{2678E8D6-EB59-491D-B736-EF23C6475935}

O43 - CFD: 14/12/2011 - 09:13:26 - [0] ----D C:\Users\bleuris\AppData\Local\{26A8F36D-EAD3-484E-8010-4347A8DBBD61}

O43 - CFD: 29/02/2012 - 11:55:16 - [0] ----D C:\Users\bleuris\AppData\Local\{26FB7FE6-5634-48D3-A490-169B46CE1547}

O43 - CFD: 05/01/2012 - 17:39:40 - [0] ----D C:\Users\bleuris\AppData\Local\{27072E20-2A82-424F-9721-ED95E79D6E9F}

O43 - CFD: 29/04/2012 - 08:15:58 - [0] ----D C:\Users\bleuris\AppData\Local\{281FC174-4ED3-420C-BF92-9BF293E5B2D2}

O43 - CFD: 05/01/2012 - 09:16:22 - [0] ----D C:\Users\bleuris\AppData\Local\{286A96BA-5154-4D0A-82DF-1565028BF8CA}

O43 - CFD: 22/12/2011 - 17:53:53 - [0] ----D C:\Users\bleuris\AppData\Local\{2897B6CF-A856-4E5B-A64D-FC57E3A12020}

O43 - CFD: 29/03/2012 - 08:43:38 - [0] ----D C:\Users\bleuris\AppData\Local\{2A720C80-5F0E-40AB-B8F9-2137BDE15FC4}

O43 - CFD: 01/03/2012 - 00:25:51 - [0] ----D C:\Users\bleuris\AppData\Local\{2ACE9645-BB74-409A-A910-19718DAD52C7}

O43 - CFD: 03/02/2012 - 10:06:01 - [0] ----D C:\Users\bleuris\AppData\Local\{2B2204A7-1E90-4675-A897-003E7CE5896B}

O43 - CFD: 25/04/2012 - 11:51:57 - [0] ----D C:\Users\bleuris\AppData\Local\{2B251120-1191-43CF-9FB7-BDE3CD2CD586}

O43 - CFD: 25/06/2012 - 09:37:42 - [0] ----D C:\Users\bleuris\AppData\Local\{2B73F030-280C-4729-B44F-24D4BAFAFE8C}

O43 - CFD: 18/11/2011 - 09:08:37 - [0] ----D C:\Users\bleuris\AppData\Local\{2BAB3AF7-5554-40CC-955C-C428FEDE83A1}

O43 - CFD: 20/11/2011 - 11:17:49 - [0] ----D C:\Users\bleuris\AppData\Local\{2C87E748-62A1-4212-8FA3-FCBDE3EAB7D6}

O43 - CFD: 20/01/2012 - 15:37:31 - [0] ----D C:\Users\bleuris\AppData\Local\{2CC57B80-3AC9-4012-BCE0-54FC27D495CA}

O43 - CFD: 10/03/2012 - 10:58:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2D0BE0D0-5453-4AFB-A5E9-590580840A02}

O43 - CFD: 18/06/2011 - 09:50:51 - [0] ----D C:\Users\bleuris\AppData\Local\{2D0D382B-8834-4B41-A40D-FF5A41DE441A}

O43 - CFD: 19/04/2012 - 20:59:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2D12D428-0E94-4250-BBB8-D6F930A0B3EF}

O43 - CFD: 07/07/2011 - 12:18:17 - [0] ----D C:\Users\bleuris\AppData\Local\{2F51DAA3-3B9B-44B1-A7DC-E8EE454D0357}

O43 - CFD: 22/05/2012 - 22:19:10 - [0] ----D C:\Users\bleuris\AppData\Local\{2F8FC865-10C7-4681-80FD-C46FACB8ED8B}

O43 - CFD: 15/04/2012 - 20:43:19 - [0] ----D C:\Users\bleuris\AppData\Local\{2FA0CC62-A3C4-4D54-AFD6-CEF629413333}

O43 - CFD: 22/12/2011 - 17:53:42 - [0] ----D C:\Users\bleuris\AppData\Local\{2FFA58AD-AB7F-443A-9AFC-43AE60404CAD}

O43 - CFD: 15/06/2012 - 13:13:32 - [0] ----D C:\Users\bleuris\AppData\Local\{2FFC312B-BEA1-450B-B495-6FE34441940E}

O43 - CFD: 06/01/2012 - 13:27:45 - [0] ----D C:\Users\bleuris\AppData\Local\{30323606-3238-4051-8D1A-3602FBA27DB8}

O43 - CFD: 28/06/2012 - 08:54:07 - [0] ----D C:\Users\bleuris\AppData\Local\{308AE375-5EC6-4C5E-BF2C-22DD14256E99}

O43 - CFD: 24/09/2011 - 19:22:19 - [0] ----D C:\Users\bleuris\AppData\Local\{30984892-FDEA-4AC8-AC0E-2F6E64C8DF28}

O43 - CFD: 27/04/2012 - 23:53:58 - [0] ----D C:\Users\bleuris\AppData\Local\{337DA2AD-A0E4-4D6F-80E8-B96ED2E5EDAC}

O43 - CFD: 21/06/2012 - 00:14:47 - [0] ----D C:\Users\bleuris\AppData\Local\{33F15593-36BA-4851-ADFF-BE8564B7615A}

O43 - CFD: 25/06/2011 - 10:05:51 - [0] ----D C:\Users\bleuris\AppData\Local\{348F2BE9-8E69-4F85-BBDF-70FFE041F631}

O43 - CFD: 21/04/2012 - 16:47:47 - [0] ----D C:\Users\bleuris\AppData\Local\{355C4025-495F-4827-8997-D4E8A616D68B}

O43 - CFD: 12/12/2011 - 14:25:07 - [0] ----D C:\Users\bleuris\AppData\Local\{358979BE-AFA9-4481-A66E-EB6DF66A52AF}

O43 - CFD: 30/06/2011 - 09:43:53 - [0] ----D C:\Users\bleuris\AppData\Local\{362C47AE-5E44-47DF-B92C-9868C253F54B}

O43 - CFD: 05/06/2012 - 20:50:25 - [0] ----D C:\Users\bleuris\AppData\Local\{3693C348-5EE9-4DDD-ABA3-FEE325BEE425}

O43 - CFD: 20/12/2011 - 17:38:51 - [0] ----D C:\Users\bleuris\AppData\Local\{37F97D0B-8F7C-4238-93BC-258BBA3BADB3}

O43 - CFD: 28/05/2012 - 06:49:20 - [0] ----D C:\Users\bleuris\AppData\Local\{37F97D96-02D7-4D36-95BC-82C8E19A7415}

O43 - CFD: 29/05/2012 - 08:23:44 - [0] ----D C:\Users\bleuris\AppData\Local\{37FAE100-B492-4B82-9E07-4DF3D015C060}

O43 - CFD: 09/12/2011 - 10:30:19 - [0] ----D C:\Users\bleuris\AppData\Local\{3865AB43-1D67-4BD0-98B5-20CFE908AECC}

O43 - CFD: 11/11/2011 - 17:23:39 - [0] ----D C:\Users\bleuris\AppData\Local\{3924EE6A-E049-40CB-B75D-9861D6F113D2}

O43 - CFD: 14/03/2012 - 21:52:51 - [0] ----D C:\Users\bleuris\AppData\Local\{39460D1C-8BC9-4973-91F5-2244FFA57A5B}

O43 - CFD: 25/04/2012 - 20:50:12 - [0] ----D C:\Users\bleuris\AppData\Local\{39A7751D-98E0-42DD-9F71-49F4C6C85A57}

O43 - CFD: 09/12/2011 - 02:01:29 - [0] ----D C:\Users\bleuris\AppData\Local\{39B82BF8-5D6C-43E3-936C-A3945B07CC3C}

O43 - CFD: 08/11/2011 - 09:09:32 - [0] ----D C:\Users\bleuris\AppData\Local\{39DE214C-9F7D-4685-8C6A-97DAED05F12C}

O43 - CFD: 10/04/2012 - 22:33:45 - [0] ----D C:\Users\bleuris\AppData\Local\{3A0255A2-2872-4C7C-A293-0C355A970860}

O43 - CFD: 27/03/2012 - 08:42:00 - [0] ----D C:\Users\bleuris\AppData\Local\{3A722EB2-186F-40F4-B9E9-68A395336000}

O43 - CFD: 14/09/2011 - 12:54:13 - [0] ----D C:\Users\bleuris\AppData\Local\{3A96EA60-179A-4525-9BC4-55C5A009E8A4}

O43 - CFD: 10/06/2011 - 17:27:49 - [0] ----D C:\Users\bleuris\AppData\Local\{3B56035C-F1FC-409F-B053-8DDCF724FA50}

O43 - CFD: 26/06/2012 - 07:50:32 - [0] ----D C:\Users\bleuris\AppData\Local\{3B960E7F-358E-48C6-8BE2-6E4AD22EB5DA}

O43 - CFD: 08/11/2011 - 09:09:43 - [0] ----D C:\Users\bleuris\AppData\Local\{3BC9F475-A114-4F8F-98C0-AFD5A4BE24E6}

O43 - CFD: 01/05/2012 - 11:17:26 - [0] ----D C:\Users\bleuris\AppData\Local\{3C089E7C-EB9B-466C-BCF9-DDD8D1472977}

O43 - CFD: 04/02/2012 - 11:04:21 - [0] ----D C:\Users\bleuris\AppData\Local\{3D23305D-88E4-4F00-89FE-1D52363B5C19}

O43 - CFD: 05/09/2011 - 08:19:30 - [0] ----D C:\Users\bleuris\AppData\Local\{3D2FF79F-97BA-4922-A2FA-5A43D5845D33}

O43 - CFD: 05/06/2012 - 08:40:09 - [0] ----D C:\Users\bleuris\AppData\Local\{3D6CF5AE-4E1D-4173-84A3-5F188F7BE26B}

O43 - CFD: 11/07/2011 - 09:40:54 - [0] ----D C:\Users\bleuris\AppData\Local\{3D7B694D-213A-47FB-BAC4-52D453E8E65A}

O43 - CFD: 13/01/2012 - 12:57:09 - [0] ----D C:\Users\bleuris\AppData\Local\{3DA22AED-3795-4B45-A194-A329FEF90D5C}

O43 - CFD: 16/07/2011 - 00:21:57 - [0] ----D C:\Users\bleuris\AppData\Local\{3E48BF35-B37C-4440-8979-30B0517750D0}

O43 - CFD: 05/05/2012 - 22:50:17 - [0] ----D C:\Users\bleuris\AppData\Local\{3E7A7B35-CB25-4E95-968C-BE55B84808AB}

O43 - CFD: 08/04/2012 - 11:32:50 - [0] ----D C:\Users\bleuris\AppData\Local\{3EB85464-534D-430C-A4E6-8487F2AB2B79}

O43 - CFD: 01/07/2012 - 10:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{3FED56B3-7EC8-452D-BD85-3675F2CBB981}

O43 - CFD: 22/05/2012 - 08:30:30 - [0] ----D C:\Users\bleuris\AppData\Local\{404D5FD2-61B6-4AEA-807B-DC18519C4E80}

O43 - CFD: 01/03/2012 - 00:25:54 - [0] ----D C:\Users\bleuris\AppData\Local\{4090F468-9764-49E9-9C89-397D503740C7}

O43 - CFD: 25/04/2012 - 11:51:45 - [0] ----D C:\Users\bleuris\AppData\Local\{40C17DE5-A96D-4F49-8035-D95A94BF9765}

O43 - CFD: 05/04/2012 - 18:19:46 - [0] ----D C:\Users\bleuris\AppData\Local\{40DCA71C-2226-4B8C-A1FA-9A5E8D25D565}

O43 - CFD: 08/08/2011 - 08:08:31 - [0] ----D C:\Users\bleuris\AppData\Local\{4229152C-9E7A-45B7-B886-7D1CAD920B54}

O43 - CFD: 19/11/2011 - 10:33:22 - [0] ----D C:\Users\bleuris\AppData\Local\{430B1F5A-E58F-4263-B5ED-9371B9F2DD7C}

O43 - CFD: 09/11/2011 - 09:28:47 - [0] ----D C:\Users\bleuris\AppData\Local\{431BAB67-C60C-4A21-A8EB-964457FEB7D5}

O43 - CFD: 23/03/2012 - 14:12:27 - [0] ----D C:\Users\bleuris\AppData\Local\{43AAAC4D-7B93-4A76-9667-D3FC2E8F10FC}

O43 - CFD: 27/04/2012 - 17:12:56 - [0] ----D C:\Users\bleuris\AppData\Local\{43E1B722-4745-4B28-9572-6474F4645C2E}

O43 - CFD: 19/01/2012 - 16:33:06 - [0] ----D C:\Users\bleuris\AppData\Local\{44C8C880-3816-4C3D-B29D-3DCA186A9EC6}

O43 - CFD: 12/04/2012 - 18:49:07 - [0] ----D C:\Users\bleuris\AppData\Local\{44DC82B1-1460-4B41-8E98-2A2C6EDFDF58}

O43 - CFD: 18/12/2011 - 00:37:27 - [0] ----D C:\Users\bleuris\AppData\Local\{4571D622-2394-4984-835B-590D33800996}

O43 - CFD: 27/06/2011 - 11:25:10 - [0] ----D C:\Users\bleuris\AppData\Local\{45B397C8-AAF9-4687-8DC4-195C2CE5D0F1}

O43 - CFD: 15/05/2012 - 09:38:09 - [0] ----D C:\Users\bleuris\AppData\Local\{45D74DA9-1E51-4E81-B1CC-B1CBD7C86B4A}

O43 - CFD: 19/01/2012 - 13:52:35 - [0] ----D C:\Users\bleuris\AppData\Local\{46233FAE-CFA5-4E1A-B7FF-8BA0637C7ECD}

O43 - CFD: 01/03/2012 - 23:00:51 - [0] ----D C:\Users\bleuris\AppData\Local\{4664C892-5BEF-499E-BF88-2E196693A365}

O43 - CFD: 15/11/2011 - 09:11:53 - [0] ----D C:\Users\bleuris\AppData\Local\{466705B4-4704-4650-82F8-BDFA05533C41}

O43 - CFD: 06/01/2012 - 13:27:55 - [0] ----D C:\Users\bleuris\AppData\Local\{46D8FBA7-9340-4070-9D99-16D7B11C1C74}

O43 - CFD: 27/05/2012 - 17:56:34 - [0] ----D C:\Users\bleuris\AppData\Local\{46DA9AF3-A24D-4F86-9673-ED2B938D2936}

O43 - CFD: 25/02/2012 - 19:41:05 - [0] ----D C:\Users\bleuris\AppData\Local\{4795D780-0BE5-4ABD-B189-7ACA5B244F18}

O43 - CFD: 19/04/2012 - 20:59:00 - [0] ----D C:\Users\bleuris\AppData\Local\{47F0E47D-3505-4A28-AAC7-4EDDB6D3B62E}

O43 - CFD: 07/12/2011 - 09:12:27 - [0] ----D C:\Users\bleuris\AppData\Local\{4845A33D-6295-4B80-A852-18DEB485FC3D}

O43 - CFD: 12/04/2012 - 18:48:56 - [0] ----D C:\Users\bleuris\AppData\Local\{48F42B30-1006-49EC-BE3A-DB5D19D9DC89}

O43 - CFD: 28/12/2011 - 09:13:28 - [0] ----D C:\Users\bleuris\AppData\Local\{4914907F-5B75-401E-8067-2C9BB7EE30DF}

O43 - CFD: 26/02/2012 - 19:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{49150D75-C131-4A29-84EB-49822DCC5ADE}

O43 - CFD: 22/11/2011 - 10:13:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4985D83D-A7A1-4D94-8C23-1AEB8324217F}

O43 - CFD: 29/01/2012 - 11:30:26 - [0] ----D C:\Users\bleuris\AppData\Local\{4AC28FAA-2041-4CFC-A224-5BC37B8BC38C}

O43 - CFD: 24/12/2011 - 09:14:11 - [0] ----D C:\Users\bleuris\AppData\Local\{4B09CED5-474C-455E-944A-5945BA2C29D6}

O43 - CFD: 07/12/2011 - 13:03:38 - [0] ----D C:\Users\bleuris\AppData\Local\{4B23A1E7-5225-4E09-B256-D25AA02749A7}

O43 - CFD: 24/11/2011 - 09:24:20 - [0] ----D C:\Users\bleuris\AppData\Local\{4BE1DD3F-66AB-4D85-86AA-F18E35A6E9D2}

O43 - CFD: 21/01/2012 - 15:22:57 - [0] ----D C:\Users\bleuris\AppData\Local\{4CE93F2F-6DD5-43E2-9B44-66D9DCA94855}

O43 - CFD: 17/06/2011 - 08:35:53 - [0] ----D C:\Users\bleuris\AppData\Local\{4CEB3152-9FF2-47BE-B860-2BEAB4CEC2BE}

O43 - CFD: 29/02/2012 - 11:55:26 - [0] ----D C:\Users\bleuris\AppData\Local\{4CEB7191-D72B-4DC7-8E94-B46908A4824B}

O43 - CFD: 29/01/2012 - 11:30:15 - [0] ----D C:\Users\bleuris\AppData\Local\{4DC29DDC-E054-41FF-AB56-B2FDF73DAC64}

O43 - CFD: 28/01/2012 - 18:45:44 - [0] ----D C:\Users\bleuris\AppData\Local\{4E6F36E2-F8EE-46E0-95D3-329A85687FFA}

O43 - CFD: 23/11/2011 - 13:05:47 - [0] ----D C:\Users\bleuris\AppData\Local\{4E8EFFC1-BB1E-4F7D-B41A-A05FD0DAE783}

O43 - CFD: 14/04/2012 - 10:54:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4EC2A7D6-B27F-4EEC-AA73-1B0AAF6C0FFD}

O43 - CFD: 18/12/2011 - 00:37:39 - [0] ----D C:\Users\bleuris\AppData\Local\{4F86E644-9ABC-4590-A055-4ADBCDF5AD70}

O43 - CFD: 21/06/2012 - 00:15:18 - [0] ----D C:\Users\bleuris\AppData\Local\{4FB6F87C-66E1-4340-AB57-F36A62D46C76}

O43 - CFD: 07/08/2011 - 22:36:10 - [0] ----D C:\Users\bleuris\AppData\Local\{4FC070A1-81D1-4741-B2FA-1B1AE1449932}

O43 - CFD: 26/03/2012 - 09:01:48 - [0] ----D C:\Users\bleuris\AppData\Local\{4FE2BFAC-D170-4B69-AEC8-D61CDF6CFCF8}

O43 - CFD: 23/05/2012 - 12:18:22 - [0] ----D C:\Users\bleuris\AppData\Local\{503F6226-4FAA-460D-AC81-E53767457669}

O43 - CFD: 19/01/2012 - 16:33:09 - [0] ----D C:\Users\bleuris\AppData\Local\{506B3FFA-554D-41ED-95DA-9E0609EB3E53}

O43 - CFD: 17/03/2012 - 00:34:30 - [0] ----D C:\Users\bleuris\AppData\Local\{50F76FA1-B0C2-4E4A-9604-CA61D33405C7}

O43 - CFD: 03/01/2012 - 11:46:40 - [0] ----D C:\Users\bleuris\AppData\Local\{5135A1FB-197C-4891-B50B-8A38B8AD51A3}

O43 - CFD: 17/06/2012 - 18:59:18 - [0] ----D C:\Users\bleuris\AppData\Local\{515C6963-E057-4EA3-9D5F-FFE292654422}

O43 - CFD: 06/12/2011 - 17:43:29 - [0] ----D C:\Users\bleuris\AppData\Local\{51E0EB8A-D323-4B49-8CA9-22566046E15F}

O43 - CFD: 29/04/2012 - 08:15:47 - [0] ----D C:\Users\bleuris\AppData\Local\{52D04BE2-F06E-40ED-B6ED-06EB33193EC7}

O43 - CFD: 21/06/2012 - 20:28:38 - [0] ----D C:\Users\bleuris\AppData\Local\{52FF56E7-F533-43A9-9A6A-F100169857BE}

O43 - CFD: 09/11/2011 - 09:28:37 - [0] ----D C:\Users\bleuris\AppData\Local\{54928AA1-1385-403C-850C-F3092593E267}

O43 - CFD: 10/03/2012 - 10:57:59 - [0] ----D C:\Users\bleuris\AppData\Local\{55637A22-4061-413A-9265-1D2127D8BC1D}

O43 - CFD: 16/04/2012 - 09:22:51 - [0] ----D C:\Users\bleuris\AppData\Local\{55C9DE1B-DE13-49D2-8AF2-942C2AC1C7DC}

O43 - CFD: 25/06/2012 - 09:37:41 - [0] ----D C:\Users\bleuris\AppData\Local\{572B54E1-5CD3-4F66-BCBC-E4893B3C92A9}

O43 - CFD: 23/01/2012 - 19:54:37 - [0] ----D C:\Users\bleuris\AppData\Local\{579C769B-9548-4E56-9C1D-54373F909EB3}

O43 - CFD: 28/03/2012 - 13:16:46 - [0] ----D C:\Users\bleuris\AppData\Local\{587DC06D-2155-43FD-B919-1EF394ECE7DB}

O43 - CFD: 04/12/2011 - 22:08:03 - [0] ----D C:\Users\bleuris\AppData\Local\{5893C2FA-8E5D-4517-8F48-346A224D7C55}

O43 - CFD: 17/04/2012 - 10:13:28 - [0] ----D C:\Users\bleuris\AppData\Local\{58D27096-A86E-4DA5-B3CB-A375DC5EBDD0}

O43 - CFD: 01/03/2012 - 23:01:03 - [0] ----D C:\Users\bleuris\AppData\Local\{58F6E09B-682F-4C13-A55A-A00B68B446B7}

O43 - CFD: 08/03/2012 - 22:16:50 - [0] ----D C:\Users\bleuris\AppData\Local\{59352D35-C470-43E8-B90B-577EB22060FE}

O43 - CFD: 23/04/2012 - 08:50:20 - [0] ----D C:\Users\bleuris\AppData\Local\{593DE651-DBBA-4400-904E-BD5D54B0A847}

O43 - CFD: 11/04/2012 - 20:47:09 - [0] ----D C:\Users\bleuris\AppData\Local\{59F9821F-6811-4F94-91F0-591AAF40A61F}

O43 - CFD: 13/03/2012 - 10:02:47 - [0] ----D C:\Users\bleuris\AppData\Local\{5B3CBE1C-57B3-413B-95FB-BBA509FEE0BA}

O43 - CFD: 23/04/2012 - 22:26:30 - [0] ----D C:\Users\bleuris\AppData\Local\{5B487B4A-6AA9-47DF-ACBD-D102B5062DC2}

O43 - CFD: 16/03/2012 - 20:11:32 - [0] ----D C:\Users\bleuris\AppData\Local\{5B53C9D9-1E5B-4B6F-AE22-44BA0CE2AD84}

O43 - CFD: 08/03/2012 - 10:22:04 - [0] ----D C:\Users\bleuris\AppData\Local\{5B8C7D6E-6081-4F5A-A344-6FC3DD8C62BD}

O43 - CFD: 24/09/2011 - 19:22:30 - [0] ----D C:\Users\bleuris\AppData\Local\{5D377755-3773-492D-936F-2DEE8AD650DF}

O43 - CFD: 05/01/2012 - 09:16:32 - [0] ----D C:\Users\bleuris\AppData\Local\{5D7B13D6-14F3-4674-832D-8F9B56F499BC}

O43 - CFD: 19/07/2011 - 20:53:11 - [0] ----D C:\Users\bleuris\AppData\Local\{5DC0BE99-1A26-42E9-804C-8EAEFDE44398}

O43 - CFD: 06/05/2012 - 11:45:51 - [0] ----D C:\Users\bleuris\AppData\Local\{5E01016A-F688-4734-9623-4A8A9EAB4E11}

O43 - CFD: 24/06/2012 - 11:18:16 - [0] ----D C:\Users\bleuris\AppData\Local\{5E1E2918-7F45-4786-A279-74BFB860C4C9}

O43 - CFD: 19/08/2011 - 12:10:13 - [0] ----D C:\Users\bleuris\AppData\Local\{5F720497-E586-400F-8062-EA09A192FEB4}

O43 - CFD: 23/03/2012 - 23:37:16 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF2A7EB-35A5-41E6-9241-4576E5BBF20F}

O43 - CFD: 28/12/2011 - 09:13:17 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF34146-8E91-4377-9AC0-CCBAE2F8C88F}

O43 - CFD: 25/07/2011 - 17:51:44 - [0] ----D C:\Users\bleuris\AppData\Local\{5FF95208-0D89-443F-9550-AC4D1B1905D3}

O43 - CFD: 24/04/2012 - 09:16:07 - [0] ----D C:\Users\bleuris\AppData\Local\{61871D4B-7635-4E32-93F5-FA0AB87B1AC1}

O43 - CFD: 14/03/2012 - 21:52:40 - [0] ----D C:\Users\bleuris\AppData\Local\{63D13972-A741-4871-88F7-9242DD38F2B1}

O43 - CFD: 23/01/2012 - 19:54:47 - [0] ----D C:\Users\bleuris\AppData\Local\{63D9A2CA-AD70-4B63-B0DD-86A45B416B52}

O43 - CFD: 28/06/2012 - 08:53:56 - [0] ----D C:\Users\bleuris\AppData\Local\{6434DE2E-8DCB-468C-84F8-0B2107425C4A}

O43 - CFD: 28/11/2011 - 09:16:13 - [0] ----D C:\Users\bleuris\AppData\Local\{656A6592-7BE6-4AAB-973B-C347262C859F}

O43 - CFD: 25/02/2012 - 19:40:47 - [0] ----D C:\Users\bleuris\AppData\Local\{65ED38D7-802A-40EF-B182-0206169E7BCE}

O43 - CFD: 28/11/2011 - 09:16:25 - [0] ----D C:\Users\bleuris\AppData\Local\{6692D8B2-61DE-4BF3-9EBC-FF60A6CE66F5}

O43 - CFD: 26/05/2012 - 00:31:31 - [0] ----D C:\Users\bleuris\AppData\Local\{6734A2A4-73C1-4798-ACB0-400AF8E39DFE}

O43 - CFD: 26/04/2012 - 09:41:20 - [0] ----D C:\Users\bleuris\AppData\Local\{67F75A66-7D64-40EC-A94C-5C87149408AA}

O43 - CFD: 02/10/2011 - 16:12:18 - [0] ----D C:\Users\bleuris\AppData\Local\{6813B55E-3821-4F00-B98D-3596BDCCC007}

O43 - CFD: 21/04/2012 - 08:42:35 - [0] ----D C:\Users\bleuris\AppData\Local\{68AE4EAE-E27B-49A6-B565-D036DB8E3794}

O43 - CFD: 03/06/2012 - 11:15:59 - [0] ----D C:\Users\bleuris\AppData\Local\{68CA9EA2-9971-4B89-B3A4-08DC9390D335}

O43 - CFD: 13/11/2011 - 13:43:45 - [0] ----D C:\Users\bleuris\AppData\Local\{6958682A-AF1F-4B6E-878B-465AADE868E2}

O43 - CFD: 01/12/2011 - 09:13:57 - [0] ----D C:\Users\bleuris\AppData\Local\{69650C0A-E2EF-4F06-B434-A82F1A602683}

O43 - CFD: 10/05/2012 - 19:28:21 - [0] ----D C:\Users\bleuris\AppData\Local\{6A701AFA-68E4-46F1-9680-4A4F540F1F43}

O43 - CFD: 30/03/2012 - 09:29:04 - [0] ----D C:\Users\bleuris\AppData\Local\{6BD6F3DD-754D-4854-A662-D684EC0DD780}

O43 - CFD: 18/04/2012 - 20:33:51 - [0] ----D C:\Users\bleuris\AppData\Local\{6C49211E-A352-4E95-9F2B-885617C4CEE6}

O43 - CFD: 05/04/2012 - 18:19:36 - [0] ----D C:\Users\bleuris\AppData\Local\{6C4E386B-D891-459E-8EA0-D41296836752}

O43 - CFD: 28/01/2012 - 18:45:33 - [0] ----D C:\Users\bleuris\AppData\Local\{6CCDA93A-67F6-4527-BFE3-121BC1C0B6F5}

O43 - CFD: 26/07/2011 - 20:49:30 - [0] ----D C:\Users\bleuris\AppData\Local\{6CF5AD6B-1579-4641-AEED-8792543CF886}

O43 - CFD: 07/07/2011 - 19:06:49 - [0] ----D C:\Users\bleuris\AppData\Local\{6CFBB534-A36F-48A9-A3E4-FB03974C8031}

O43 - CFD: 01/05/2012 - 12:48:43 - [0] ----D C:\Users\bleuris\AppData\Local\{6F4C7642-7060-401A-BAE9-E4D8CF48201D}

O43 - CFD: 13/07/2011 - 21:04:42 - [0] ----D C:\Users\bleuris\AppData\Local\{6FFE75C5-2CD3-443C-BF89-6438FAF2C754}

O43 - CFD: 31/03/2012 - 12:03:13 - [0] ----D C:\Users\bleuris\AppData\Local\{7019ED0C-14B6-4312-AA80-68491AFFF1EA}

O43 - CFD: 19/08/2011 - 12:10:10 - [0] ----D C:\Users\bleuris\AppData\Local\{70352DDA-1D3D-4740-B79E-892743C6372C}

O43 - CFD: 05/04/2012 - 16:27:36 - [0] ----D C:\Users\bleuris\AppData\Local\{70613F18-BA36-417F-9D50-AB81014859DD}

O43 - CFD: 18/03/2012 - 16:02:47 - [0] ----D C:\Users\bleuris\AppData\Local\{7138083E-F241-4C85-B59A-664B405033C4}

O43 - CFD: 14/11/2011 - 14:54:57 - [0] ----D C:\Users\bleuris\AppData\Local\{71E4B8E2-681A-4B06-B1E5-90D52D8DB8B6}

O43 - CFD: 21/12/2011 - 22:04:48 - [0] ----D C:\Users\bleuris\AppData\Local\{726708C2-CEAA-426B-9349-ED2C75082EFF}

O43 - CFD: 03/02/2012 - 17:09:18 - [0] ----D C:\Users\bleuris\AppData\Local\{72840428-091E-44CA-A283-C3574840AAAF}

O43 - CFD: 20/06/2011 - 09:12:17 - [0] ----D C:\Users\bleuris\AppData\Local\{72869EFA-25F0-4F9B-BB7F-D1C6C8BB2383}

O43 - CFD: 07/11/2011 - 21:19:28 - [0] ----D C:\Users\bleuris\AppData\Local\{72BF44D7-D771-4738-84D7-329FE4717782}

O43 - CFD: 02/05/2012 - 22:03:21 - [0] ----D C:\Users\bleuris\AppData\Local\{72CC3784-885F-4E20-A4EC-930D94B66F67}

O43 - CFD: 11/11/2011 - 08:57:03 - [0] ----D C:\Users\bleuris\AppData\Local\{73095D17-7AF7-4491-89CA-88B65D1ABBAA}

O43 - CFD: 10/05/2012 - 19:28:10 - [0] ----D C:\Users\bleuris\AppData\Local\{739EE1C3-E484-4701-874D-EA964FAB190C}

O43 - CFD: 06/12/2011 - 10:49:41 - [0] ----D C:\Users\bleuris\AppData\Local\{73FA20B2-6363-4F2E-834B-113EB6A46C6E}

O43 - CFD: 05/02/2012 - 10:42:15 - [0] ----D C:\Users\bleuris\AppData\Local\{74432A7C-5A12-48A3-A700-99DEF6B5D060}

O43 - CFD: 03/06/2012 - 11:16:10 - [0] ----D C:\Users\bleuris\AppData\Local\{74F37BD2-7AB5-46FB-A6D1-EAB687ECC22D}

O43 - CFD: 22/05/2012 - 22:19:43 - [0] ----D C:\Users\bleuris\AppData\Local\{74F4842B-0B42-44AF-915B-5F059CE9AA98}

O43 - CFD: 16/08/2011 - 11:15:12 - [0] ----D C:\Users\bleuris\AppData\Local\{760A25FB-09E6-4354-93FB-34DD35FF9756}

O43 - CFD: 03/03/2012 - 18:44:25 - [0] ----D C:\Users\bleuris\AppData\Local\{77A784CD-7205-4710-88AC-FCF5986CB21C}

O43 - CFD: 26/06/2012 - 20:40:35 - [0] ----D C:\Users\bleuris\AppData\Local\{7916FB1A-3B53-44CB-A349-3FEDC61959E1}

O43 - CFD: 14/12/2011 - 09:13:37 - [0] ----D C:\Users\bleuris\AppData\Local\{791B8779-07E7-48B1-808E-AB5FD1114011}

O43 - CFD: 18/01/2012 - 10:08:24 - [0] ----D C:\Users\bleuris\AppData\Local\{7953DBB4-F844-436C-A704-240E964BAA14}

O43 - CFD: 12/08/2011 - 12:17:55 - [0] ----D C:\Users\bleuris\AppData\Local\{795AE224-4310-4EA6-A69A-0FAEB758B00D}

O43 - CFD: 11/06/2012 - 11:16:38 - [0] ----D C:\Users\bleuris\AppData\Local\{79C7FA57-C28D-4815-9E53-96462B60653B}

O43 - CFD: 30/04/2012 - 09:53:13 - [0] ----D C:\Users\bleuris\AppData\Local\{7A01F51B-C07E-4BBF-948F-775A33AB2BBC}

O43 - CFD: 14/08/2011 - 14:11:47 - [0] ----D C:\Users\bleuris\AppData\Local\{7A12CDBF-687F-4F8B-B742-6D3666737D2E}

O43 - CFD: 26/11/2011 - 11:30:56 - [0] ----D C:\Users\bleuris\AppData\Local\{7A7CFBD8-6825-40CA-AB7F-7D1B00306C04}

O43 - CFD: 25/03/2012 - 08:12:16 - [0] ----D C:\Users\bleuris\AppData\Local\{7A908354-6226-464E-91CE-EDE4CEEDF8A9}

O43 - CFD: 25/04/2012 - 08:56:44 - [0] ----D C:\Users\bleuris\AppData\Local\{7AB3A608-1ACB-4FB1-A634-29B2DC709CF0}

O43 - CFD: 16/04/2012 - 14:30:51 - [0] ----D C:\Users\bleuris\AppData\Local\{7AC95D44-2F57-42C0-8728-6C61897D8047}

O43 - CFD: 20/11/2011 - 11:18:02 - [0] ----D C:\Users\bleuris\AppData\Local\{7BAE2E10-C588-4021-B35B-7F4B4AA75F1F}

O43 - CFD: 21/08/2011 - 16:54:24 - [0] ----D C:\Users\bleuris\AppData\Local\{7C0260D8-FEE0-41C4-9E0B-FA39EF0E0D4A}

O43 - CFD: 12/04/2012 - 08:23:05 - [0] ----D C:\Users\bleuris\AppData\Local\{7C1D8331-377C-41CB-B7B4-0FA22879B8CB}

O43 - CFD: 16/06/2012 - 01:16:42 - [0] ----D C:\Users\bleuris\AppData\Local\{7C82040B-32F7-42DE-9FD9-927B2C409585}

O43 - CFD: 05/01/2012 - 17:39:29 - [0] ----D C:\Users\bleuris\AppData\Local\{7F521AF3-DD13-47A9-9217-0EBABFD60C6C}

O43 - CFD: 12/03/2012 - 10:30:44 - [0] ----D C:\Users\bleuris\AppData\Local\{7FC84CDF-20E7-4A36-863C-A130DA8C128E}

O43 - CFD: 08/09/2011 - 10:46:41 - [0] ----D C:\Users\bleuris\AppData\Local\{8041C33A-D089-4AD5-8C9E-56DE7AE25716}

O43 - CFD: 25/11/2011 - 14:05:26 - [0] ----D C:\Users\bleuris\AppData\Local\{80CE0285-4842-4ED0-8FD2-5AF177667351}

O43 - CFD: 12/06/2012 - 09:39:06 - [0] ----D C:\Users\bleuris\AppData\Local\{810C6C0A-6420-429F-93C5-02BBF9B02481}

O43 - CFD: 28/03/2012 - 21:00:18 - [0] ----D C:\Users\bleuris\AppData\Local\{815C6A7F-6CEF-4FDE-8B6C-31820C5E7707}

O43 - CFD: 02/06/2011 - 13:20:36 - [0] ----D C:\Users\bleuris\AppData\Local\{8174CA33-6145-4409-A36E-6CC4E1FA798B}

O43 - CFD: 14/12/2011 - 13:03:46 - [0] ----D C:\Users\bleuris\AppData\Local\{81916C97-6846-46CB-9F01-0AA10D33F1F5}

O43 - CFD: 07/12/2011 - 09:12:38 - [0] ----D C:\Users\bleuris\AppData\Local\{82A539D4-54B5-4708-918A-DCA6D2D7F01E}

O43 - CFD: 15/04/2012 - 20:43:04 - [0] ----D C:\Users\bleuris\AppData\Local\{82A9589F-14A1-49B0-92BF-2C04104BFB9A}

O43 - CFD: 30/06/2012 - 08:47:33 - [0] ----D C:\Users\bleuris\AppData\Local\{837B501A-FC31-4A92-B6FE-871956148A9E}

O43 - CFD: 27/04/2012 - 10:52:22 - [0] ----D C:\Users\bleuris\AppData\Local\{85F398F0-3C0D-4162-8BB4-048A51F8F847}

O43 - CFD: 20/04/2012 - 08:42:10 - [0] ----D C:\Users\bleuris\AppData\Local\{8647B20A-F9E1-47DA-AB70-0827C2EFCF0E}

O43 - CFD: 19/06/2012 - 09:58:26 - [0] ----D C:\Users\bleuris\AppData\Local\{8728C53A-8585-4FD5-A4C1-F71FCBCC0E9A}

O43 - CFD: 19/04/2012 - 09:05:28 - [0] ----D C:\Users\bleuris\AppData\Local\{876C665A-8D1B-4025-9262-8447D13AEECA}

O43 - CFD: 07/03/2012 - 22:59:44 - [0] ----D C:\Users\bleuris\AppData\Local\{88C1F1AB-053C-496D-BC60-DB3413BD5195}

O43 - CFD: 08/01/2012 - 18:32:51 - [0] ----D C:\Users\bleuris\AppData\Local\{890F7BCD-6F6B-411B-B076-7C103659315C}

O43 - CFD: 04/05/2012 - 08:20:15 - [0] ----D C:\Users\bleuris\AppData\Local\{8A1D4585-57E4-47E2-9E69-700D0D9F039B}

O43 - CFD: 08/03/2012 - 10:21:52 - [0] ----D C:\Users\bleuris\AppData\Local\{8B7A789A-4F37-4D8C-A6CF-94C972CAFE34}

O43 - CFD: 05/06/2012 - 08:39:57 - [0] ----D C:\Users\bleuris\AppData\Local\{8BD49411-F9D4-44E1-A89A-1D18FD2F6EA4}

O43 - CFD: 01/07/2012 - 23:28:52 - [0] ----D C:\Users\bleuris\AppData\Local\{8BE01B88-8D2D-4586-8FDA-5BAE56F27DC1}

O43 - CFD: 29/04/2012 - 14:16:45 - [0] ----D C:\Users\bleuris\AppData\Local\{8C41113E-3A07-40E3-A2DE-4F5DB5C225A8}

O43 - CFD: 03/04/2012 - 20:23:21 - [0] ----D C:\Users\bleuris\AppData\Local\{8D809C37-E62F-4411-82E4-CFFBBB076F67}

O43 - CFD: 04/04/2012 - 23:16:42 - [0] ----D C:\Users\bleuris\AppData\Local\{8DB20C13-57EC-4F67-92CD-B13DBA858AE8}

O43 - CFD: 14/08/2011 - 14:11:20 - [0] ----D C:\Users\bleuris\AppData\Local\{8E39D014-A236-4A1D-A494-EB5272D7DFA0}

O43 - CFD: 24/07/2011 - 17:48:49 - [0] ----D C:\Users\bleuris\AppData\Local\{8EA16E24-87F5-4445-BA60-7B941F2AD455}

O43 - CFD: 31/05/2012 - 22:56:04 - [0] ----D C:\Users\bleuris\AppData\Local\{8EC39B7C-4C71-49C1-ABA7-348D7EFBA926}

O43 - CFD: 15/05/2012 - 09:38:22 - [0] ----D C:\Users\bleuris\AppData\Local\{8EF6A6EA-60CE-4410-A3D4-7C4FFD35C9A3}

O43 - CFD: 18/07/2011 - 19:00:18 - [0] ----D C:\Users\bleuris\AppData\Local\{8FFDF2A8-97CF-4E9E-A5CA-4B6D08D807AF}

O43 - CFD: 01/12/2011 - 21:37:21 - [0] ----D C:\Users\bleuris\AppData\Local\{901BB7F5-7F17-46CF-80DD-74D86722CC13}

O43 - CFD: 28/05/2012 - 19:04:08 - [0] ----D C:\Users\bleuris\AppData\Local\{9056D54F-40D2-4495-A526-8355CF8D6953}

O43 - CFD: 04/07/2012 - 08:39:25 - [0] ----D C:\Users\bleuris\AppData\Local\{91595303-2298-4A07-9335-C54AD236E354}

O43 - CFD: 28/02/2012 - 00:16:13 - [0] ----D C:\Users\bleuris\AppData\Local\{91C4901F-6B9B-4925-A5E7-511064340759}

O43 - CFD: 11/06/2012 - 11:16:28 - [0] ----D C:\Users\bleuris\AppData\Local\{91E6A233-D026-4FE1-AC7D-2653A9EDE533}

O43 - CFD: 03/06/2011 - 11:15:35 - [0] ----D C:\Users\bleuris\AppData\Local\{91F18416-7348-4ED6-AC27-1B67D425A7F9}

O43 - CFD: 05/04/2012 - 08:46:39 - [0] ----D C:\Users\bleuris\AppData\Local\{9228DD16-E0CB-4AFF-BE20-4DCFAE0FAD88}

O43 - CFD: 11/12/2011 - 01:27:01 - [0] ----D C:\Users\bleuris\AppData\Local\{947DECEE-0A08-4533-A4DB-69FB47467492}

O43 - CFD: 24/04/2012 - 09:16:17 - [0] ----D C:\Users\bleuris\AppData\Local\{9485816A-AD49-4E4B-B56F-55477C1E2CB2}

O43 - CFD: 09/06/2012 - 09:13:30 - [0] ----D C:\Users\bleuris\AppData\Local\{950120DE-1094-4588-9E4C-2792F7A65E34}

O43 - CFD: 24/06/2012 - 11:18:35 - [0] ----D C:\Users\bleuris\AppData\Local\{95779295-50AD-40DD-BE0E-8FB6CDA0E13A}

O43 - CFD: 20/03/2012 - 21:45:39 - [0] ----D C:\Users\bleuris\AppData\Local\{960809B3-3859-4C5F-85F1-C35D7803BA83}

O43 - CFD: 09/06/2011 - 16:15:47 - [0] ----D C:\Users\bleuris\AppData\Local\{96515F80-B7B2-44CA-961A-D3DE0B43E304}

O43 - CFD: 02/01/2012 - 11:55:02 - [0] ----D C:\Users\bleuris\AppData\Local\{975D4ED4-54EF-42D7-A454-294FBE204A04}

O43 - CFD: 05/07/2012 - 09:35:22 - [0] ----D C:\Users\bleuris\AppData\Local\{97EECFF3-F95E-4E05-A573-83D2E47D53DC}

O43 - CFD: 18/12/2011 - 14:06:41 - [0] ----D C:\Users\bleuris\AppData\Local\{9891DF01-693C-4F09-9387-461728DB0ABB}

O43 - CFD: 21/04/2012 - 08:42:34 - [0] ----D C:\Users\bleuris\AppData\Local\{98B3494A-A02E-46CC-958E-93205CC10A48}

O43 - CFD: 27/05/2012 - 11:37:47 - [0] ----D C:\Users\bleuris\AppData\Local\{98BCFFD8-2763-4122-863B-437BBD34DADA}

O43 - CFD: 28/04/2012 - 11:08:42 - [0] ----D C:\Users\bleuris\AppData\Local\{9A68119A-8B24-4BF3-A9B3-43868FEFF588}

O43 - CFD: 09/06/2012 - 00:42:30 - [0] ----D C:\Users\bleuris\AppData\Local\{9A74A656-E90D-467B-9A16-B0DEE0CDC429}

O43 - CFD: 30/04/2012 - 09:53:28 - [0] ----D C:\Users\bleuris\AppData\Local\{9A99857F-14BD-4458-974E-CC48F4D48D91}

O43 - CFD: 24/03/2012 - 13:38:43 - [0] ----D C:\Users\bleuris\AppData\Local\{9B381DCA-9EEF-4AA6-AF82-D03E3F435BC2}

O43 - CFD: 28/04/2012 - 11:08:37 - [0] ----D C:\Users\bleuris\AppData\Local\{9C1321EB-3EB4-463E-A92C-AFEA4A84E95D}

O43 - CFD: 16/08/2011 - 11:15:22 - [0] ----D C:\Users\bleuris\AppData\Local\{9CA280EF-3090-46F0-A968-C6C0370BADA2}

O43 - CFD: 28/01/2012 - 13:06:24 - [0] ----D C:\Users\bleuris\AppData\Local\{9CC0B005-8B36-443D-BD18-47595803D93D}

O43 - CFD: 17/07/2011 - 09:53:59 - [0] ----D C:\Users\bleuris\AppData\Local\{9D9745D4-DE74-478C-948C-3E9429C558BB}

O43 - CFD: 01/04/2012 - 11:26:42 - [0] ----D C:\Users\bleuris\AppData\Local\{9DD1E5D2-7387-4599-BA24-BB06FFAB4E52}

O43 - CFD: 28/05/2012 - 19:04:19 - [0] ----D C:\Users\bleuris\AppData\Local\{9E7F5B79-EF91-47B2-83BC-AB09CB6FE89F}

O43 - CFD: 25/11/2011 - 14:05:13 - [0] ----D C:\Users\bleuris\AppData\Local\{9EBDF897-4096-4411-9673-FE7FCBFDED0E}

O43 - CFD: 09/06/2012 - 00:42:29 - [0] ----D C:\Users\bleuris\AppData\Local\{9F89328F-F206-46F1-8138-1B8525FA8EAF}

O43 - CFD: 27/03/2012 - 13:50:10 - [0] ----D C:\Users\bleuris\AppData\Local\{A0439CAD-FF99-452E-A958-7FE80E6D72BC}

O43 - CFD: 13/03/2012 - 10:02:58 - [0] ----D C:\Users\bleuris\AppData\Local\{A066F925-A3AE-4EBB-8962-22171CEA8707}

O43 - CFD: 31/03/2012 - 12:03:53 - [0] ----D C:\Users\bleuris\AppData\Local\{A0C3AAFF-230C-4327-BE90-D4CA9794F2BB}

O43 - CFD: 12/05/2012 - 10:41:37 - [0] ----D C:\Users\bleuris\AppData\Local\{A2646F4C-AC15-4E4E-86CD-8742974E2B54}

O43 - CFD: 11/03/2012 - 20:41:22 - [0] ----D C:\Users\bleuris\AppData\Local\{A3BEF35C-24FD-438D-A077-E00DDEB0A660}

O43 - CFD: 23/04/2012 - 08:50:08 - [0] ----D C:\Users\bleuris\AppData\Local\{A5BD7667-28A5-40FC-9DD2-3C98A9F3CF6D}

O43 - CFD: 09/01/2012 - 10:39:47 - [0] ----D C:\Users\bleuris\AppData\Local\{A5BDFE6A-1814-4B3F-99AB-57776BD64CDD}

O43 - CFD: 11/05/2012 - 08:37:42 - [0] ----D C:\Users\bleuris\AppData\Local\{A5EDE0DE-2259-4145-AD0E-A9173F17D287}

O43 - CFD: 04/04/2012 - 08:41:47 - [0] ----D C:\Users\bleuris\AppData\Local\{A6B0899D-642B-4502-AD3D-9DD634B0F281}

O43 - CFD: 19/03/2012 - 20:58:11 - [0] ----D C:\Users\bleuris\AppData\Local\{A704AFC0-5DA0-497E-89C0-6F4467800BE4}

O43 - CFD: 07/01/2012 - 14:17:45 - [0] ----D C:\Users\bleuris\AppData\Local\{A745A8F9-AD81-4D2C-B32B-52F3423FCB61}

O43 - CFD: 04/01/2012 - 02:12:18 - [0] ----D C:\Users\bleuris\AppData\Local\{A7859484-D2DB-45F4-A265-BC66F9B5848B}

O43 - CFD: 03/03/2012 - 00:33:52 - [0] ----D C:\Users\bleuris\AppData\Local\{A8511934-3F4A-466F-B3B5-4F1DB0D7D34E}

O43 - CFD: 27/04/2012 - 10:52:20 - [0] ----D C:\Users\bleuris\AppData\Local\{A85C31D6-A80D-4412-A4A3-819401FCAF5F}

O43 - CFD: 10/04/2012 - 16:46:55 - [0] ----D C:\Users\bleuris\AppData\Local\{A888F596-E949-48EF-8B29-5D73950CE8D5}

O43 - CFD: 13/06/2012 - 22:03:37 - [0] ----D C:\Users\bleuris\AppData\Local\{ABA99E2D-8BFF-4E9B-82C9-C9C475606370}

O43 - CFD: 03/08/2011 - 21:22:19 - [0] ----D C:\Users\bleuris\AppData\Local\{ACE6F39D-6C43-4B03-86F0-8778FFE9139B}

O43 - CFD: 21/04/2012 - 16:47:36 - [0] ----D C:\Users\bleuris\AppData\Local\{AD3AC593-AA39-4324-A02A-DBB832E0B1EC}

O43 - CFD: 26/06/2011 - 17:57:29 - [0] ----D C:\Users\bleuris\AppData\Local\{AD6E2E7A-52C8-4C35-AA70-E08DA4EEC052}

O43 - CFD: 09/05/2012 - 20:59:04 - [0] ----D C:\Users\bleuris\AppData\Local\{ADAB44FB-B47C-4627-9888-A75601264DCC}

O43 - CFD: 06/02/2012 - 21:23:17 - [0] ----D C:\Users\bleuris\AppData\Local\{ADDD4F36-C541-4FFE-91AF-0625F94E249F}

O43 - CFD: 06/06/2012 - 08:51:20 - [0] ----D C:\Users\bleuris\AppData\Local\{AE76AB29-4C8C-468F-B0DA-7D58D010BB54}

O43 - CFD: 30/07/2011 - 16:24:20 - [0] ----D C:\Users\bleuris\AppData\Local\{AF5F7BFF-F257-4999-8325-20425036F131}

O43 - CFD: 31/05/2012 - 09:34:57 - [0] ----D C:\Users\bleuris\AppData\Local\{AF7A784B-4C74-4D87-AA0E-69BDCEA7570B}

O43 - CFD: 12/12/2011 - 12:19:48 - [0] ----D C:\Users\bleuris\AppData\Local\{B04F6409-26A6-4009-943D-BDD9507D5BDB}

O43 - CFD: 01/05/2012 - 01:28:41 - [0] ----D C:\Users\bleuris\AppData\Local\{B1BC3608-7868-4014-A2F5-11FAC5C45AB5}

O43 - CFD: 16/07/2011 - 10:50:40 - [0] ----D C:\Users\bleuris\AppData\Local\{B239130A-3A05-4653-A210-4AD9B365AE47}

O43 - CFD: 09/05/2012 - 20:59:19 - [0] ----D C:\Users\bleuris\AppData\Local\{B25B8025-AE7A-4290-8B95-40BD5C38EF53}

O43 - CFD: 21/03/2012 - 15:51:41 - [0] ----D C:\Users\bleuris\AppData\Local\{B2883F4A-288F-45A9-9834-C04019960ECD}

O43 - CFD: 10/01/2012 - 09:14:39 - [0] ----D C:\Users\bleuris\AppData\Local\{B2DA2DB9-F7DB-4E53-98FD-6E6A05A33594}

O43 - CFD: 08/09/2011 - 10:46:52 - [0] ----D C:\Users\bleuris\AppData\Local\{B31F8BB0-0AD3-4ED7-8404-5FE598797090}

O43 - CFD: 19/05/2012 - 12:16:56 - [0] ----D C:\Users\bleuris\AppData\Local\{B44E5F97-FC5D-46CD-8F3C-8273E3C30EA0}

O43 - CFD: 28/03/2012 - 13:16:36 - [0] ----D C:\Users\bleuris\AppData\Local\{B4A821EC-FCE8-427A-A040-5763A0A2456A}

O43 - CFD: 06/04/2012 - 08:19:29 - [0] ----D C:\Users\bleuris\AppData\Local\{B628D948-AC6A-4771-B214-A9EB896C3E41}

O43 - CFD: 13/01/2012 - 12:57:07 - [0] ----D C:\Users\bleuris\AppData\Local\{B640536C-C7BA-4624-AA15-06F907501490}

O43 - CFD: 03/07/2011 - 10:45:52 - [0] ----D C:\Users\bleuris\AppData\Local\{B6CC5027-A5F8-4AC0-97CE-90CDDCBDC6B4}

O43 - CFD: 29/04/2012 - 14:16:32 - [0] ----D C:\Users\bleuris\AppData\Local\{B8CA740B-C416-45EF-86F4-6F10B037535F}

O43 - CFD: 07/03/2012 - 10:53:27 - [0] ----D C:\Users\bleuris\AppData\Local\{B8CD17D6-2DCE-40E5-942E-4A58C7D32C26}

O43 - CFD: 09/12/2011 - 10:30:09 - [0] ----D C:\Users\bleuris\AppData\Local\{BA0D5CE8-5C00-46C6-94DE-C0E6E16CF213}

O43 - CFD: 19/04/2012 - 09:05:39 - [0] ----D C:\Users\bleuris\AppData\Local\{BA481004-200B-47D6-93F2-4DAC87424555}

O43 - CFD: 15/03/2012 - 09:44:31 - [0] ----D C:\Users\bleuris\AppData\Local\{BAB01BFE-6A6E-476C-97AB-A721753BD8C0}

O43 - CFD: 18/01/2012 - 10:08:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BAC4D456-8A80-415A-82E5-BC06008CBBDA}

O43 - CFD: 24/05/2012 - 22:34:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BB572CC2-DB5E-4AF8-94B6-9D65E02ADF22}

O43 - CFD: 02/03/2012 - 10:35:22 - [0] ----D C:\Users\bleuris\AppData\Local\{BB747DE5-0F5D-4BAF-B17E-D26D9E976F85}

O43 - CFD: 27/03/2012 - 08:41:59 - [0] ----D C:\Users\bleuris\AppData\Local\{BC98DF1E-EED1-4B6D-90D6-FA12F6522419}

O43 - CFD: 26/05/2012 - 00:31:43 - [0] ----D C:\Users\bleuris\AppData\Local\{BD22ED5B-EB2E-4C6F-8E14-6054EB1375CE}

O43 - CFD: 27/04/2012 - 17:12:54 - [0] ----D C:\Users\bleuris\AppData\Local\{BD6745F3-5436-4C7D-8B95-B9DAA15A75CD}

O43 - CFD: 31/01/2012 - 16:05:12 - [0] ----D C:\Users\bleuris\AppData\Local\{BDE45623-1B73-4165-BBB9-D1D3BA08F9B3}

O43 - CFD: 06/02/2012 - 21:23:27 - [0] ----D C:\Users\bleuris\AppData\Local\{BE2FB112-B3BF-434F-AA65-CF022F071151}

O43 - CFD: 19/11/2011 - 18:42:09 - [0] ----D C:\Users\bleuris\AppData\Local\{BE7BF89E-5B4B-4D4B-8A44-E8894069FBB7}

O43 - CFD: 03/03/2012 - 18:44:15 - [0] ----D C:\Users\bleuris\AppData\Local\{BEBC8BC8-F868-4C9E-B429-0F1F417D3D2D}

O43 - CFD: 22/03/2012 - 21:22:05 - [0] ----D C:\Users\bleuris\AppData\Local\{BF66FED5-0959-42A7-ABBA-C9D78BADFF8A}

O43 - CFD: 02/10/2011 - 16:12:29 - [0] ----D C:\Users\bleuris\AppData\Local\{C02E52BF-0021-42A2-A9F2-54A7242C4EF7}

O43 - CFD: 14/11/2011 - 08:19:39 - [0] ----D C:\Users\bleuris\AppData\Local\{C1125177-ECB8-4CAB-AD5E-317AB38B6643}

O43 - CFD: 16/03/2012 - 09:38:16 - [0] ----D C:\Users\bleuris\AppData\Local\{C14BA153-7D6B-4815-924F-A7698AF89A0F}

O43 - CFD: 23/06/2012 - 06:38:20 - [0] ----D C:\Users\bleuris\AppData\Local\{C16C5500-D80A-498D-B03A-0C331B48ECAE}

O43 - CFD: 06/06/2012 - 20:32:12 - [0] ----D C:\Users\bleuris\AppData\Local\{C2065027-9066-47BF-89BE-3AD800131EF0}

O43 - CFD: 15/03/2012 - 12:45:01 - [0] ----D C:\Users\bleuris\AppData\Local\{C20D3A8A-02BF-47E7-A92F-FF7A89711BAE}

O43 - CFD: 23/11/2011 - 13:05:49 - [0] ----D C:\Users\bleuris\AppData\Local\{C2417D03-5663-4FA0-A0AB-6BF56B26A8C0}

O43 - CFD: 22/03/2012 - 09:26:11 - [0] ----D C:\Users\bleuris\AppData\Local\{C4D5481B-0F71-4DD4-ACF6-7EAFC343D07B}

O43 - CFD: 17/01/2012 - 13:14:54 - [0] ----D C:\Users\bleuris\AppData\Local\{C4F8C542-E0BF-4559-874B-8BDCBFEDB3B6}

O43 - CFD: 11/11/2011 - 17:23:26 - [0] ----D C:\Users\bleuris\AppData\Local\{C7569A31-9247-40A9-97DA-BC24F188FEFC}

O43 - CFD: 24/06/2011 - 13:27:23 - [0] ----D C:\Users\bleuris\AppData\Local\{C75DFDFF-508C-4794-BEEB-7EA0E15B974E}

O43 - CFD: 11/05/2012 - 08:37:31 - [0] ----D C:\Users\bleuris\AppData\Local\{C7CC3B80-2C94-4C13-93A7-78ECC3E3932D}

O43 - CFD: 14/03/2012 - 09:28:29 - [0] ----D C:\Users\bleuris\AppData\Local\{C7EE4EB2-44BA-4EED-86BB-5531FE43C59A}

O43 - CFD: 26/04/2012 - 09:41:31 - [0] ----D C:\Users\bleuris\AppData\Local\{C8A78F0A-DAD1-437F-9E4D-A9CB738E9F9A}

O43 - CFD: 18/03/2012 - 16:02:36 - [0] ----D C:\Users\bleuris\AppData\Local\{C8CFAE73-04E1-4CBB-8437-A23E9D4F5DA2}

O43 - CFD: 15/03/2012 - 12:44:50 - [0] ----D C:\Users\bleuris\AppData\Local\{CB03439B-EB42-4871-8E2E-9E546172536B}

O43 - CFD: 02/05/2012 - 09:46:56 - [0] ----D C:\Users\bleuris\AppData\Local\{CB277401-9403-437B-90B2-4C5181BA4DBF}

O43 - CFD: 22/01/2012 - 12:01:35 - [0] ----D C:\Users\bleuris\AppData\Local\{CB4E5E01-763A-4BA9-B986-8FD44BABC38F}

O43 - CFD: 25/08/2011 - 08:14:05 - [0] ----D C:\Users\bleuris\AppData\Local\{CB5FB235-2C60-4AA8-AEC8-D9E2464557EC}

O43 - CFD: 15/03/2012 - 12:17:13 - [0] ----D C:\Users\bleuris\AppData\Local\{CB9D3A7E-30ED-4BBD-B709-DC9F4793D624}

O43 - CFD: 26/11/2011 - 11:30:32 - [0] ----D C:\Users\bleuris\AppData\Local\{CBCE36E2-E99D-433C-9772-B217D301587A}

O43 - CFD: 14/04/2012 - 15:13:26 - [0] ----D C:\Users\bleuris\AppData\Local\{CC1BC857-FA87-4D27-A1B2-75339524237A}

O43 - CFD: 09/03/2012 - 19:40:40 - [0] ----D C:\Users\bleuris\AppData\Local\{CC208854-23AF-4D13-9FCA-735496646F50}

O43 - CFD: 14/06/2012 - 09:00:37 - [0] ----D C:\Users\bleuris\AppData\Local\{CC482974-4EDA-4E53-9F5E-5883A42EB614}

O43 - CFD: 28/03/2012 - 21:00:08 - [0] ----D C:\Users\bleuris\AppData\Local\{CCD6BCC1-AFAA-4966-8C5A-76388C059E7A}

O43 - CFD: 10/04/2012 - 16:47:08 - [0] ----D C:\Users\bleuris\AppData\Local\{CD0AC2A0-60A1-4E0A-B26A-F362E5B5EA34}

O43 - CFD: 07/11/2011 - 21:19:14 - [0] ----D C:\Users\bleuris\AppData\Local\{CD9E6482-EA63-44F2-9D80-F5BC048C37D1}

O43 - CFD: 05/06/2012 - 20:50:14 - [0] ----D C:\Users\bleuris\AppData\Local\{CDA2B7FF-3203-4B71-A69A-E87390D12289}

O43 - CFD: 20/01/2012 - 12:12:48 - [0] ----D C:\Users\bleuris\AppData\Local\{CDB01DFD-22F7-4D76-9E1C-05B302D6A56B}

O43 - CFD: 28/02/2012 - 00:16:12 - [0] ----D C:\Users\bleuris\AppData\Local\{CE662300-655F-402E-B03B-28D00A4DF27D}

O43 - CFD: 12/04/2012 - 08:23:17 - [0] ----D C:\Users\bleuris\AppData\Local\{CE7CA78E-18C7-48F3-9574-0DE4219C57F3}

O43 - CFD: 22/01/2012 - 12:01:24 - [0] ----D C:\Users\bleuris\AppData\Local\{CF25518B-D35B-49A3-BFC2-0F9DDE503FE6}

O43 - CFD: 04/12/2011 - 18:03:29 - [0] ----D C:\Users\bleuris\AppData\Local\{CF5BE615-BD9B-48CD-B116-7E6DD5885A4F}

O43 - CFD: 01/02/2012 - 16:58:24 - [0] ----D C:\Users\bleuris\AppData\Local\{CFD0642F-AB2B-4CC2-95F9-83A2EEE6E350}

O43 - CFD: 15/11/2011 - 12:32:46 - [0] ----D C:\Users\bleuris\AppData\Local\{D0157417-93D2-4BE1-8C31-0C4DACD66708}

O43 - CFD: 21/08/2011 - 08:53:49 - [0] ----D C:\Users\bleuris\AppData\Local\{D01D1AB2-0130-4F9D-95E7-A32CF959D925}

O43 - CFD: 22/03/2012 - 09:26:21 - [0] ----D C:\Users\bleuris\AppData\Local\{D040D0A7-1629-4E95-A853-6E2F1FECDA9A}

O43 - CFD: 23/03/2012 - 14:12:37 - [0] ----D C:\Users\bleuris\AppData\Local\{D08B665F-1B86-4ED7-B9BF-BF76151D5597}

O43 - CFD: 19/11/2011 - 10:33:11 - [0] ----D C:\Users\bleuris\AppData\Local\{D2394624-3868-41BE-8EB5-C0EA250B0E7F}

O43 - CFD: 13/11/2011 - 13:43:47 - [0] ----D C:\Users\bleuris\AppData\Local\{D2BE510C-31F9-4BA9-B260-69BF650296DE}

O43 - CFD: 03/01/2012 - 11:46:29 - [0] ----D C:\Users\bleuris\AppData\Local\{D3D02F40-29D9-48B7-838E-951DC1138731}

O43 - CFD: 04/12/2011 - 22:08:02 - [0] ----D C:\Users\bleuris\AppData\Local\{D497C45C-5CDE-4440-96AC-F53962B9D954}

O43 - CFD: 14/11/2011 - 08:19:50 - [0] ----D C:\Users\bleuris\AppData\Local\{D520DC85-B4C5-4157-9B52-8E46AF272611}

O43 - CFD: 14/04/2012 - 10:53:28 - [0] ----D C:\Users\bleuris\AppData\Local\{D617CC7B-8773-4EFC-BBDA-7B9A548A8A25}

O43 - CFD: 13/05/2012 - 14:36:54 - [0] ----D C:\Users\bleuris\AppData\Local\{D62518DE-1C6F-4AAF-BBDD-73E17D488933}

O43 - CFD: 20/12/2011 - 11:54:52 - [0] ----D C:\Users\bleuris\AppData\Local\{D642F5B4-4D0E-4BB9-A1B6-016C471F7480}

O43 - CFD: 27/03/2012 - 20:46:34 - [0] ----D C:\Users\bleuris\AppData\Local\{D6F1424B-E95F-4E26-8939-90F443890F7E}

O43 - CFD: 15/03/2012 - 09:44:20 - [0] ----D C:\Users\bleuris\AppData\Local\{D718AADF-04DF-4F5E-AD40-5ACB9B28EDC0}

O43 - CFD: 27/11/2011 - 21:58:19 - [0] ----D C:\Users\bleuris\AppData\Local\{D7625215-2220-4D52-A3F2-D3BC7C1D4BF9}

O43 - CFD: 21/03/2012 - 15:51:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D79AFE83-A978-4573-B94A-3ADEE41F50CD}

O43 - CFD: 12/03/2012 - 17:19:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D7CB7265-EE9C-4333-9ABB-A66FDCB8A61C}

O43 - CFD: 30/01/2012 - 09:17:33 - [0] ----D C:\Users\bleuris\AppData\Local\{D825A4D2-7E9B-4D62-A170-50DD3BA7A124}

O43 - CFD: 23/04/2012 - 22:26:41 - [0] ----D C:\Users\bleuris\AppData\Local\{D85486A5-9CE8-4310-BD1B-F400B2FCBC39}

O43 - CFD: 23/06/2012 - 06:38:31 - [0] ----D C:\Users\bleuris\AppData\Local\{D8A4F820-B44C-4C3B-AED0-18BEEFD9A1EC}

O43 - CFD: 06/11/2011 - 21:16:48 - [0] ----D C:\Users\bleuris\AppData\Local\{D8B373B5-0CEE-4775-A0DC-A2399269D195}

O43 - CFD: 16/03/2012 - 09:38:05 - [0] ----D C:\Users\bleuris\AppData\Local\{D8C91B15-7983-4349-A723-E0E328B0ED03}

O43 - CFD: 01/04/2012 - 11:26:32 - [0] ----D C:\Users\bleuris\AppData\Local\{D984142F-153C-43B4-A048-42D36C9CE226}

O43 - CFD: 27/06/2012 - 08:10:41 - [0] ----D C:\Users\bleuris\AppData\Local\{D99C5E44-A486-4E6E-93FE-3213EF88CE7E}

O43 - CFD: 06/12/2011 - 17:43:19 - [0] ----D C:\Users\bleuris\AppData\Local\{DA8B1C4F-CD46-44A1-82AB-D37295A0B4CE}

O43 - CFD: 23/05/2012 - 12:18:19 - [0] ----D C:\Users\bleuris\AppData\Local\{DB4CC702-AE83-404A-89D7-53360727EE4E}

O43 - CFD: 11/03/2012 - 20:41:12 - [0] ----D C:\Users\bleuris\AppData\Local\{DB78CE9E-A0A4-4719-832E-2EBF87A40C2D}

O43 - CFD: 02/04/2012 - 08:42:05 - [0] ----D C:\Users\bleuris\AppData\Local\{DC4F3A9D-10CE-4412-95AB-47958044369C}

O43 - CFD: 05/07/2012 - 09:35:34 - [0] ----D C:\Users\bleuris\AppData\Local\{DD04630A-C6D3-45C1-AA36-152EE54B45C9}

O43 - CFD: 20/08/2011 - 00:00:15 - [0] ----D C:\Users\bleuris\AppData\Local\{DD1AFFFF-F422-4774-80A5-E63F7AF1FB62}

O43 - CFD: 15/03/2012 - 15:25:22 - [0] ----D C:\Users\bleuris\AppData\Local\{DD3B4DEF-6AC7-4245-AA49-19657239C747}

O43 - CFD: 08/04/2012 - 11:32:39 - [0] ----D C:\Users\bleuris\AppData\Local\{DD6A87FD-0B9B-4061-A942-0FD208CDFA47}

O43 - CFD: 10/09/2011 - 16:43:11 - [0] ----D C:\Users\bleuris\AppData\Local\{DDA6B43B-E84E-4F6C-9831-48E0E7BAA179}

O43 - CFD: 09/06/2012 - 09:13:41 - [0] ----D C:\Users\bleuris\AppData\Local\{DDA84C08-07EA-4D1E-938A-C4BEBCCDED18}

O43 - CFD: 06/08/2011 - 08:59:04 - [0] ----D C:\Users\bleuris\AppData\Local\{DDCC5F4B-147C-4840-BB8B-3B43CEDEB245}

O43 - CFD: 02/05/2012 - 09:46:44 - [0] ----D C:\Users\bleuris\AppData\Local\{DFE47495-7C42-438F-AEBD-017C9A3041EB}

O43 - CFD: 03/12/2011 - 12:17:10 - [0] ----D C:\Users\bleuris\AppData\Local\{E110228C-EF24-4482-97E6-07002FF83E58}

O43 - CFD: 25/04/2012 - 20:50:22 - [0] ----D C:\Users\bleuris\AppData\Local\{E1B34F5C-02F6-4F8D-BB74-A44DAF8976BE}

O43 - CFD: 14/05/2012 - 09:21:00 - [0] ----D C:\Users\bleuris\AppData\Local\{E26C60E3-53BD-4FB4-BC98-B69634DBD3FE}

O43 - CFD: 06/04/2012 - 08:20:04 - [0] ----D C:\Users\bleuris\AppData\Local\{E270A44F-14E5-4FC8-BD0B-444D1E69545E}

O43 - CFD: 02/06/2012 - 20:59:51 - [0] ----D C:\Users\bleuris\AppData\Local\{E2D5455A-5F75-406A-8BC5-01B5310BD059}

O43 - CFD: 08/03/2012 - 22:17:02 - [0] ----D C:\Users\bleuris\AppData\Local\{E370550F-8498-4165-BC46-366869A30EBB}

O43 - CFD: 27/05/2012 - 11:38:11 - [0] ----D C:\Users\bleuris\AppData\Local\{E386B4BA-1B47-4400-9345-C7B21AD15B25}

O43 - CFD: 29/05/2012 - 08:23:33 - [0] ----D C:\Users\bleuris\AppData\Local\{E3926720-1331-40F6-892E-51D131DB06CC}

O43 - CFD: 27/05/2012 - 01:10:23 - [0] ----D C:\Users\bleuris\AppData\Local\{E39C7456-CD90-44F4-8EF9-B7CA665407F0}

O43 - CFD: 29/06/2011 - 12:26:35 - [0] ----D C:\Users\bleuris\AppData\Local\{E39FF1E7-23E3-4127-90C4-26DB6DECD953}

O43 - CFD: 24/05/2012 - 22:34:21 - [0] ----D C:\Users\bleuris\AppData\Local\{E4585079-1278-4184-B5AF-E77E9D4A3E44}

O43 - CFD: 14/11/2011 - 14:54:58 - [0] ----D C:\Users\bleuris\AppData\Local\{E49C9E81-F812-42AD-9C73-AE349A934B05}

O43 - CFD: 03/02/2012 - 10:06:12 - [0] ----D C:\Users\bleuris\AppData\Local\{E4C94BBB-6DB6-4E8E-B9FE-47896B5E1F57}

O43 - CFD: 21/01/2012 - 15:22:45 - [0] ----D C:\Users\bleuris\AppData\Local\{E52014FF-1799-4C31-8879-DFAB83BA0286}

O43 - CFD: 03/12/2011 - 12:17:22 - [0] ----D C:\Users\bleuris\AppData\Local\{E535CBF6-247A-4C58-B0A0-C57837DCAD2C}

O43 - CFD: 20/03/2012 - 21:45:50 - [0] ----D C:\Users\bleuris\AppData\Local\{E5487380-0B11-471E-8E63-C71A39D9C2B3}

O43 - CFD: 23/11/2011 - 22:19:16 - [0] ----D C:\Users\bleuris\AppData\Local\{E74DF2BB-4C66-4D93-8F7D-36F5E9B50A94}

O43 - CFD: 16/04/2012 - 14:31:05 - [0] ----D C:\Users\bleuris\AppData\Local\{E80119C4-A07A-4301-BD1E-E6F083C9F7CE}

O43 - CFD: 14/06/2012 - 22:15:42 - [0] ----D C:\Users\bleuris\AppData\Local\{E9458D21-2041-46C6-A6D8-7723CF499A44}

O43 - CFD: 03/03/2012 - 12:19:18 - [0] ----D C:\Users\bleuris\AppData\Local\{E9E111F3-AFBB-4DBA-AB0B-216666359AB6}

O43 - CFD: 27/05/2012 - 18:05:11 - [0] ----D C:\Users\bleuris\AppData\Local\{EAD42735-0E6B-4B98-98ED-F6D210336EA4}

O43 - CFD: 19/11/2011 - 18:42:10 - [0] ----D C:\Users\bleuris\AppData\Local\{EADB4D20-40FC-40F0-AAC3-43E10EB27126}

O43 - CFD: 23/03/2012 - 23:37:05 - [0] ----D C:\Users\bleuris\AppData\Local\{EBFD7CD0-6B6B-4632-991F-1B40230ED049}

O43 - CFD: 27/05/2012 - 18:05:27 - [0] ----D C:\Users\bleuris\AppData\Local\{EC21D907-BEB0-4F82-9F10-9EE0E3AEDE1D}

O43 - CFD: 04/12/2011 - 18:03:44 - [0] ----D C:\Users\bleuris\AppData\Local\{EC8C79BB-848D-49DF-B035-1792FB2029DD}

O43 - CFD: 12/05/2012 - 10:41:23 - [0] ----D C:\Users\bleuris\AppData\Local\{ECB51626-B640-474E-BBF4-BFA9898F9AEE}

O43 - CFD: 25/03/2012 - 08:12:06 - [0] ----D C:\Users\bleuris\AppData\Local\{ED1EDC6A-F117-4505-9D75-3A0103044070}

O43 - CFD: 06/06/2012 - 20:32:02 - [0] ----D C:\Users\bleuris\AppData\Local\{EDC3C31F-EDBC-4BA7-ADB0-4A8FC5A3DAD9}

O43 - CFD: 01/04/2012 - 18:55:22 - [0] ----D C:\Users\bleuris\AppData\Local\{EDFDC76F-76FD-41DF-827E-113E1E3BBAC9}

O43 - CFD: 15/03/2012 - 12:17:23 - [0] ----D C:\Users\bleuris\AppData\Local\{EE6DB88E-A560-4561-BCA1-E8F4FD00ECC8}

O43 - CFD: 01/02/2012 - 16:58:35 - [0] ----D C:\Users\bleuris\AppData\Local\{EEC417F2-B4D5-4447-B767-DF619E4D1D8F}

O43 - CFD: 29/06/2012 - 17:20:19 - [0] ----D C:\Users\bleuris\AppData\Local\{EF2E48A8-5EC4-433B-BFB1-A7F42F465F9F}

O43 - CFD: 27/03/2012 - 13:50:15 - [0] ----D C:\Users\bleuris\AppData\Local\{EF5098BD-6476-43B3-A9BF-174271B6404E}

O43 - CFD: 24/03/2012 - 13:39:03 - [0] ----D C:\Users\bleuris\AppData\Local\{EFEC1E81-29B5-4C80-87D2-377020B3484D}

O43 - CFD: 05/02/2012 - 10:42:05 - [0] ----D C:\Users\bleuris\AppData\Local\{F02B12DB-4775-4E1E-9182-9336C176183D}

O43 - CFD: 17/01/2012 - 13:15:04 - [0] ----D C:\Users\bleuris\AppData\Local\{F104CC09-582D-4E1E-98B2-40D54E7A5603}

O43 - CFD: 28/01/2012 - 13:06:36 - [0] ----D C:\Users\bleuris\AppData\Local\{F19AB24B-2E67-409D-8069-3C3ECEB55077}

O43 - CFD: 18/01/2012 - 13:31:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F1D56D54-A493-420A-AC6B-B758DD1844CF}

O43 - CFD: 28/12/2011 - 17:31:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F21D6E29-7AD3-4F61-A937-3AA717DC8B1F}

O43 - CFD: 19/05/2012 - 12:16:45 - [0] ----D C:\Users\bleuris\AppData\Local\{F2309EA4-CB4F-4076-A0E1-9C5E1C28ACAB}

O43 - CFD: 20/09/2011 - 22:43:24 - [0] ----D C:\Users\bleuris\AppData\Local\{F2722A01-4ADE-4BEA-94D1-64CEA9F0F162}

O43 - CFD: 11/09/2011 - 12:43:53 - [0] ----D C:\Users\bleuris\AppData\Local\{F275D48D-4F41-4D1D-9535-9B3825AB2785}

O43 - CFD: 03/02/2012 - 17:09:08 - [0] ----D C:\Users\bleuris\AppData\Local\{F32CBBB7-811C-4841-A4BD-BBDE308DEB2D}

O43 - CFD: 18/03/2012 - 02:47:44 - [0] ----D C:\Users\bleuris\AppData\Local\{F43179BA-3580-46D2-B2CB-AFD1882A617E}

O43 - CFD: 14/04/2012 - 15:13:36 - [0] ----D C:\Users\bleuris\AppData\Local\{F4D71E6A-645D-4C77-806A-098FD60F34E7}

O43 - CFD: 25/08/2011 - 08:14:15 - [0] ----D C:\Users\bleuris\AppData\Local\{F503EE09-A127-4FA1-96B7-B52096313709}

O43 - CFD: 24/11/2011 - 09:24:21 - [0] ----D C:\Users\bleuris\AppData\Local\{F55A3F09-DF4E-4570-9573-738780492716}

O43 - CFD: 11/12/2011 - 01:27:14 - [0] ----D C:\Users\bleuris\AppData\Local\{F5DC9EC9-205F-40FA-98A5-0087C38C24D9}

O43 - CFD: 07/08/2011 - 22:36:41 - [0] ----D C:\Users\bleuris\AppData\Local\{F5FA1162-B87E-4E82-B69A-57D59DDB5E6E}

O43 - CFD: 25/04/2012 - 08:56:33 - [0] ----D C:\Users\bleuris\AppData\Local\{F61A369F-8D2E-4D07-8195-9079A0A82B51}

O43 - CFD: 23/11/2011 - 22:19:05 - [0] ----D C:\Users\bleuris\AppData\Local\{F6905213-78CA-4832-ADAB-6493EA9D67F4}

O43 - CFD: 31/05/2012 - 22:56:18 - [0] ----D C:\Users\bleuris\AppData\Local\{F6BECE02-A83F-4CBB-94C8-0D3BE05A3762}

O43 - CFD: 18/12/2011 - 15:44:48 - [0] ----D C:\Users\bleuris\AppData\Local\{F7256758-24DA-44C4-8F33-088E0BB6E92A}

O43 - CFD: 19/03/2012 - 11:21:25 - [0] ----D C:\Users\bleuris\AppData\Local\{F7522341-E37F-4131-A837-DEB699641819}

O43 - CFD: 18/12/2011 - 15:44:28 - [0] ----D C:\Users\bleuris\AppData\Local\{F7B01B87-18CE-47B0-A73B-4183EEC760AC}

O43 - CFD: 30/01/2012 - 09:17:22 - [0] ----D C:\Users\bleuris\AppData\Local\{F8603736-F5A0-4D5F-83C9-4BB2151023C0}

O43 - CFD: 02/04/2012 - 08:41:55 - [0] ----D C:\Users\bleuris\AppData\Local\{F8A2E707-9BDC-432D-B4EB-7ACD991873D6}

O43 - CFD: 17/04/2012 - 10:13:38 - [0] ----D C:\Users\bleuris\AppData\Local\{F8A42CAB-4676-4B9F-8F4B-C4BE2E98018A}

O43 - CFD: 12/03/2012 - 17:19:28 - [0] ----D C:\Users\bleuris\AppData\Local\{F998F08C-3F84-4909-9496-0A91682374F3}

O43 - CFD: 14/03/2012 - 09:28:27 - [0] ----D C:\Users\bleuris\AppData\Local\{FB5F6C93-6BC4-4000-AB5B-8696DADF9C8C}

O43 - CFD: 21/03/2012 - 21:10:28 - [0] ----D C:\Users\bleuris\AppData\Local\{FC143F78-E032-4033-8CD4-098632B9B300}

O43 - CFD: 30/07/2011 - 16:23:22 - [0] ----D C:\Users\bleuris\AppData\Local\{FC2BBD43-592C-45F8-B34C-9B173505A784}

O43 - CFD: 22/03/2012 - 09:38:39 - [0] ----D C:\Users\bleuris\AppData\Local\{FCD783D3-7700-4619-864F-09F85015618D}

O43 - CFD: 05/09/2011 - 08:19:42 - [0] ----D C:\Users\bleuris\AppData\Local\{FDAB4FCE-BCB3-418C-B117-E41DB956D53C}

O43 - CFD: 06/07/2011 - 12:51:28 - [0] ----D C:\Users\bleuris\AppData\Local\{FE1864A2-4D1E-40FE-997C-D6F6E4081019}

O43 - CFD: 18/01/2012 - 13:31:47 - [0] ----D C:\Users\bleuris\AppData\Local\{FE4ACFF2-3AAC-4B95-A44A-1FFFCFDE73DB}

O43 - CFD: 04/02/2012 - 11:04:32 - [0] ----D C:\Users\bleuris\AppData\Local\{FE82AEAC-E4DE-42F1-B9DC-0CB9AFBE54B4}

O43 - CFD: 14/06/2012 - 22:15:31 - [0] ----D C:\Users\bleuris\AppData\Local\{FEA3159D-397E-4D1B-A3D4-4F3E174EC3C8}

O43 - CFD: 17/11/2011 - 09:09:09 - [0] ----D C:\Users\bleuris\AppData\Local\{FEA68995-D19E-4215-A0D3-60B8BC81C478}

O43 - CFD: 01/03/2012 - 10:12:43 - [0] ----D C:\Users\bleuris\AppData\Local\{FEF96A9C-9484-4520-AE98-C4264AB7A6CE}

O43 - CFD: 12/01/2012 - 11:58:11 - [0] ----D C:\Users\bleuris\AppData\Local\{FF03A961-5D7A-4A23-AD82-83E70E9600AA}

O43 - CFD: 07/03/2012 - 22:59:41 - [0] ----D C:\Users\bleuris\AppData\Local\{FF0BB314-496C-4ECE-A9DE-115A004AED34}

O43 - CFD: 23/03/2012 - 21:39:04 - [0] ----D C:\Users\bleuris\AppData\Local\{FF4F0D98-D865-42F3-B2B5-F2D3CC8551CB}

O43 - CFD: 17/03/2012 - 00:34:53 - [0] ----D C:\Users\bleuris\AppData\Local\{FF6962F0-A416-4F20-872A-B3BB239E3E87}

O43 - CFD: 11/07/2011 - 21:41:29 - [0] ----D C:\Users\bleuris\AppData\Local\{FF75D9F0-C6A5-454D-A1ED-79D75F165233}

O43 - CFD: 22/11/2011 - 10:13:08 - [0] ----D C:\Users\bleuris\AppData\Local\{FFAE1ADB-9182-43CA-B8F1-E93716C19F2A}

O43 - CFD: 21/01/2008 - 04:42:46 - [0,014] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

O43 - CFD: 23/04/2009 - 19:51:32 - [0,000] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

O43 - CFD: 16/12/2008 - 04:32:00 - [0,005] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite

O43 - CFD: 20/09/2011 - 19:43:57 - [0,004] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

O43 - CFD: 16/12/2008 - 04:29:08 - [0,001] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP

O43 - CFD: 21/01/2008 - 04:42:46 - [0,001] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

O43 - CFD: 21/05/2012 - 19:20:19 - [0] ----D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++

O43 - CFD: 15/03/2012 - 14:42:13 - [0,000] R---D C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

~ Scan Program Folder in 00mn 20s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.2668B255F2F8C4FCAAA8B821C64B02C2] - 05/07/2012 - 16:13:47 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1960348]

O44 - LFC:[MD5.CCFA9DF2A0B8CEFBEC2587439F73DD5D] - 05/07/2012 - 13:30:00 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.2D2D8D404B5CC2C009594884521C4543] - 05/07/2012 - 13:28:29 ---A- . (...) -- C:\AdwCleaner[s2].txt [4180]

O44 - LFC:[MD5.4AF648A30D0783800F3B8BBC475003B6] - 05/07/2012 - 13:27:30 ---A- . (...) -- C:\AdwCleaner[s1].txt [320]

O44 - LFC:[MD5.FB097BBC1A18F044BD17BD2FCCF97865] - 05/07/2012 - 13:22:50 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [22344]

O44 - LFC:[MD5.276C574AEAD0C128362D67C317712CEA] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1495948]

O44 - LFC:[MD5.25237E05A6D36DDD6C2DB1E2E881A0A7] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfc009.dat [104070]

O44 - LFC:[MD5.BAC1CD6AE7F70E7175ADE1611394DB10] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [126626]

O44 - LFC:[MD5.6A3E40BF95E492F3581710B75DE6466A] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfh009.dat [595996]

O44 - LFC:[MD5.7913923AE020DD97B7C82367FBAA817E] - 05/07/2012 - 13:15:42 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [679042]

O44 - LFC:[MD5.508320B4C1B13758E09F2CB5A44E6B53] - 05/07/2012 - 12:19:15 ---A- . (...) -- C:\AdwCleaner[R1].txt [3982]

O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 29/06/2012 - 11:47:24 ---A- . (...) -- C:\Windows\System32\DOErrors.log [52]

O44 - LFC:[MD5.03E273E090F10D32B31BAF4DF9F210F1] - 19/06/2012 - 08:18:21 ---A- . (...) -- C:\Windows\PFRO.log [1128]

O44 - LFC:[MD5.214295FDCFFF6F975D86B8F1E67C8866] - 17/06/2012 - 21:40:12 ---A- . (...) -- C:\Windows\setupact.log [1390]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/06/2012 - 21:40:06 ---A- . (...) -- C:\Windows\setuperr.log [0]

O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 16/06/2012 - 13:46:58 ---A- . (...) -- C:\Windows\System32\config.nt [2577]

O44 - LFC:[MD5.A924A1D1CA5421DC182493678931AA9D] - 15/06/2012 - 12:05:56 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [314200]

~ Scan Files in 00mn 02s

 

 

 

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\System32\Drivers\Wdf01000.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\System32\Drivers\Wdf01000.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{f632a008-6691-11df-bc57-00238b624b8d}\AutoRun\command. (...) -- F:\wdsync.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

~ Scan SMSR Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.3B10711AD8656C097E0D16A41B29C54C] - 27/03/2008 - 12:11:34 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [34664]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des fichiers non signés (O65) (None)

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\bleuris\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {2E4C7146-FEAE-4CC5-8C65-ED909144EE36} - (AOL Recherche) - http://slirsredirect.search.aol.com

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {93B8115B-FF23-40BC-BDED-33B52D5A517C} - (Yahoo!) - Yahoo! Search - Recherche Web

O69 - SBI: SearchScopes [HKCU] {B33C3C31-4204-4379-9256-9E2A04E04426} - (Kelkoo) - Voitures Et Motos | Comparer Prix & Acheter Voiture Et Moto - Kelkoo France

O69 - SBI: SearchScopes [HKCU] {DCA91FA0-A1B3-4797-89B7-DDDB4673C63D} - (Bing) - Bing

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche des services démarrés par Svchost (O83)

O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576]

O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976]

O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808]

O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]

O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]

O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952]

O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952]

O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [438784]

O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [315392]

O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624]

O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144]

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608]

O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [47104]

O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256]

O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [242688]

O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449024]

O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848]

O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848]

O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808]

O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704]

O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968]

O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280]

O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616]

O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [45056]

O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088]

O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088]

O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304]

O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600]

O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\System32\sessenv.dll [84992]

O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920]

O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920]

O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992]

~ Scan Services in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.9BA23B16251CA66448C303186C0A6E4A] [sPRF][05/07/2012] (...) -- C:\ProgramData\nvModes.dat [32061]

[MD5.BB25DB52E12766B7832C8AC45BF569F8] [sPRF][26/06/2012] (...) -- C:\Users\bleuris\AppData\Local\d3d9caps.dat [7592]

[MD5.3D45F0ADF444C9239497923162027417] [sPRF][15/05/2012] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Users\bleuris\AppData\Local\Temp\tbuTor.dll [4401448]

[MD5.9DE5085E5FE8212FB74002C885E80D25] [sPRF][05/07/2012] (...) -- C:\Users\bleuris\AppData\Local\Temp\Uninst.bat [635]

[MD5.A5443DB021817409099D0CFA9ACA230D] [sPRF][18/06/2012] (...) -- C:\Users\bleuris\AppData\Local\Temp\utt40A2.tmp.exe [5086208]

[MD5.9A2347903D6EDB84C10F288BC0578C1C] [sPRF][26/06/2012] (.Trend Micro Inc. - HijackThis.) -- C:\Users\bleuris\Desktop\HiJackThis.exe [388608]

[MD5.BDD54AE70A53CD886F494291E63E4679] [sPRF][18/03/2010] (.Total Immersion - D'Fusion @Home Web Plug-In Installer.) -- C:\Windows\Downloaded Program Files\DFusionHomeWebPlugIn.Installer.exe [814000]

~ Scan Files in 00mn 01s

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "{1AACF1F5-DEBC-4670-A07F-664B19CD4658}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\CyberLink\PowerDirector\PDR.exe

O87 - FAEL: "{90027874-0075-4319-8831-D8EADDCFDA1A}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)

O87 - FAEL: "{F27B3AB5-D0BC-4187-A023-8A2DAD079C08}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)

O87 - FAEL: "{C413E2DE-C2BF-4CC1-9765-0649E3059066}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)

O87 - FAEL: "{7D76C76A-D4B8-4DEA-AF9A-8FB961926B69}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)

O87 - FAEL: "{1476217F-7D4F-49F2-8045-4A8CB4A7F446}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)

O87 - FAEL: "{F5E920F2-6768-42ED-8F55-60FA56ED6A0A}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files\Hewlett-Packard\Media\DVD\HPDVDSmart.exe

O87 - FAEL: "{2D90A3D7-F41A-4063-9BD1-B2D01F4931F1}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe

O87 - FAEL: "{0397877D-CC1F-4682-A9D7-B5ACD5DDCD73}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe

O87 - FAEL: "{E38FD63E-30A3-42F4-BB70-B75B8D3A608C}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP MediaSmart Video Main Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe

O87 - FAEL: "{E7ED528E-6536-4A6F-BAE9-89198FC2F4AE}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

O87 - FAEL: "{0E79778C-0201-45D5-A25F-51362D07FD8A}" | In - None - P17 - TRUE | .(.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

O87 - FAEL: "{973DCE61-7CC5-46E0-AE20-E228D95EE69C}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QP.exe (.not file.)

O87 - FAEL: "{B58AC441-5A6C-4681-A781-4BCEA12253B3}" |In - None - P17 - TRUE | .(...) -- C:\Program Files\Hewlett-Packard\Media\TV\QPService.exe (.not file.)

O87 - FAEL: "{A2E475C0-D6FD-42FA-972E-F02C4FE1C671}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{F22659CE-88DF-405F-95A9-706EDD339282}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{1D76344B-B646-417C-BE68-2DB97A63DC19}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\iTunes\iTunes.exe (.not file.)

O87 - FAEL: "{49AC377A-8A05-486F-9C52-2026AF2B7A33}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\iTunes\iTunes.exe (.not file.)

O87 - FAEL: "{7385BD0C-BB52-4771-9733-FC11BC765AA6}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{F122A6C6-3785-4C80-8547-642B816B57E2}" | In - Private - P6 - TRUE | .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

O87 - FAEL: "{BC08C69D-C696-45E8-A60C-4DE24FB3A72B}" | In - Private - P17 - TRUE | .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

O87 - FAEL: "TCP Query User{C3F192A2-826B-4728-99B8-D66316E7E7E2}C:\program files\itunes\itunes.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\itunes\itunes.exe (.not file.)

O87 - FAEL: "TCP Query User{F52BCBB9-B60F-45FE-8BBD-110F4ED00061}C:\program files\emule\emule.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.)

O87 - FAEL: "UDP Query User{3FC8FDEE-2A1C-48F1-A7E7-4E1F2CE63BA6}C:\program files\emule\emule.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.)

O87 - FAEL: "TCP Query User{B2C99B71-987C-4580-9501-030578D14D4E}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Private - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe

O87 - FAEL: "UDP Query User{573EA3AF-B28A-4B66-A44E-7E67BBBA736B}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Private - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe

O87 - FAEL: "TCP Query User{52D4BF40-CDD5-4211-AE1D-F8AD58174C97}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Public - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe

O87 - FAEL: "UDP Query User{088F634A-A8C5-4FF6-B5DF-E22CEDD00F33}C:\users\bleuris\desktop\pierre\spotify\spotify.exe" | In - Public - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\bleuris\desktop\pierre\spotify\spotify.exe

O87 - FAEL: "TCP Query User{0FE99848-61AF-4188-9DB2-106AF35B58AF}C:\itunes\itunes.exe" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe

O87 - FAEL: "UDP Query User{1BD0DD3D-9683-47C0-8785-D35C87E15CB2}C:\itunes\itunes.exe" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe

O87 - FAEL: "TCP Query User{D06F0A2D-61EE-49BE-8AE6-38C28125BA62}C:\program files\ultramixer\jre\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\ultramixer\jre\bin\javaw.exe

O87 - FAEL: "UDP Query User{0A1C8EBD-72F5-4664-8F78-D4F1C6D35A8C}C:\program files\ultramixer\jre\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\ultramixer\jre\bin\javaw.exe

O87 - FAEL: "TCP Query User{643D2104-D7CD-4D14-AA4E-01FCBD00FFED}C:\program files\freetvradio\freetvradio.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.)

O87 - FAEL: "UDP Query User{5BEBE02B-CD74-4975-9C5C-60985508D007}C:\program files\freetvradio\freetvradio.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.)

O87 - FAEL: "{8CA26E17-AF92-49B0-9501-FE72356C5A8C}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

O87 - FAEL: "{C119B398-0B3E-4810-9347-14AE4EB8F768}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{31A7D37C-EF4D-40DF-BEFA-968D28DDEFAA}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{D35FDF53-DCCE-47FA-8F9C-45C189772680}" | In - Domain - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{774E0908-B722-4D90-A75F-1F60FD197983}" | In - Domain - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{D4DF06A6-5A40-4A1D-8434-1DAF11EFF820}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{51CE100D-9310-433B-9E23-BC5DFB3F16BC}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{A0BC9CF0-91D5-40A6-9EC5-1C5BA4995B7A}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "TCP Query User{B5E7C9AC-8BA4-413C-92D5-83402CBAF514}C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3.

O87 - FAEL: "UDP Query User{548620B6-F550-46B5-8DD3-D428284AFC7C}C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\autres\microtorrent_torrent_3

O87 - FAEL: "TCP Query User{7D13D3DE-596F-41C2-ADF3-726DE9313A88}C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torren

O87 - FAEL: "UDP Query User{8163815E-EDFD-4AFF-9089-6D6D11DED952}C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torrent_3.1.26616_anglais_18245.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\pierre\utorrent\microtorrent_torre

O87 - FAEL: "TCP Query User{9FCA6C13-5938-4812-A564-6540F3C3A62C}C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe

O87 - FAEL: "UDP Query User{4400BF42-775F-4C81-A752-D4BF5971A737}C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\bleuris\desktop\pierre\utorrent\utorrent.exe

O87 - FAEL: "{DCA547B0-96F5-4D18-9B05-A208D9066DB7}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\bleuris\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe

O87 - FAEL: "TCP Query User{5146FC1B-A1FA-46D2-9A17-C4F550E88605}C:\itunes\itunes.exe" | In - Private - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe

O87 - FAEL: "UDP Query User{F2A39F20-59D2-4354-8B6C-4A3CEA9CA5F2}C:\itunes\itunes.exe" | In - Private - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\itunes\itunes.exe

O87 - FAEL: "{89FC8644-3BEF-48D2-8F9A-5BDDB2E3D94E}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{A51F85BF-F860-4CF0-80C2-DD652500518D}" |In - None - P6 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.)

O87 - FAEL: "{3A5B8B1A-BFBA-4454-9626-A5BC8131FBD3}" |In - None - P17 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.)

O87 - FAEL: "TCP Query User{3B8F9A16-AA68-48A6-B2DE-5E074549C2B5}C:\users\bleuris\desktop\utorrent.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\bleuris\desktop\utorrent.exe (.not file.)

O87 - FAEL: "UDP Query User{4BC90B64-F932-4600-9C2E-F0617E6CC807}C:\users\bleuris\desktop\utorrent.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\bleuris\desktop\utorrent.exe (.not file.)

~ Scan Firewall in 00mn 02s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 9170 - (25/06/2012)

Clés trouvées (Keys found) : 9

Valeurs trouvées (Values found) : 1

Dossiers trouvés (Folders found) : 0

Fichiers trouvés (Files found) : 0

 

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoRezo_is1] =>PUP.Eorezo

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{38470B46-9BF1-40AE-A588-F6AD6D1C2D42}] =>Adware.SPointer

[HKLM\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}] =>PUP.Eorezo

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap

[HKLM\Software\Mozilla\Firefox\Extensions]:[email protected] =>Spyware.AgenceExclusive

~ Scan Additionnel in 00mn 07s

 

 

 

---\\ Recherche détournement de DNS routeur (O89) (None)

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 27/06/2008 77824 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

SR - | Auto 27/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 07/03/2012 44768 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

SS - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe

SR - | Auto 31/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SR - | Demand 03/04/2008 193840 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

SR - | Auto 21/01/2008 21504 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\System32\svchost.exe

SS - | Demand 24/03/2010 246520 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

SS - | Auto 09/02/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 09/02/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 27/06/2009 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SR - | Auto 16/06/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

SR - | Demand 01/05/2008 165192 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

SR - | Auto 18/03/2008 19456 | (hpsrv) . (.Hewlett-Packard Corporation.) - C:\Windows\System32\Hpservice.exe

SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

SR - | Demand 27/03/2012 821608 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 09/06/2008 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SS - | Demand 15/01/2010 227232 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe

SR - | Auto 19/09/2008 196608 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe

SR - | Auto 365952 | (Recovery Service for Windows) . (...) - C:\Program Files\SMINST\BLService.exe

SR - | Auto 241734 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared files\RichVideo.exe

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

SS - | Auto 29/02/2012 158856 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe

SR - | Auto 26/10/2008 237657 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

SR - | Auto 296320 | (TVCapSvc) . (...) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe

SR - | Auto 116096 | (TVSched) . (...) - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

SS - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 26/09/2008 59376 | ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.Cyberlink Corp..) - C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl

~ Scan Services in 00mn 04s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by bleuris at 05/07/2012 20:54:37

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll acpi.sys ataport.SYS PCIIDEX.SYS msahci.sys

C:\Windows\system32\DRIVERS\hpdskflt.sys Hewlett-Packard Corporation Hewlett-Packard Corporation Mobile Data Protection System

1 ntkrnlpa!IofCallDriver[0x82C44936] -> \Device\Harddisk0\DR0[0x870E5AC8]

3 CLASSPNP[0x832148B3] -> ntkrnlpa!IofCallDriver[0x82C44936] -> [0x86FE2900]

5 hpdskflt[0x8BFACF05] -> ntkrnlpa!IofCallDriver[0x82C44936] -> [0x86775C10]

7 acpi[0x806976BC] -> ntkrnlpa!IofCallDriver[0x82C44936] -> \Device\Ide\IdeDeviceP0T0L0-0[0x867572C8]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 02s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by bleuris at 05/07/2012 20:54:39

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 04s

 

 

 

End of the scan (1901 lines in 03mn 25s)(0)

 

 

 

Voila !

 

A présent je reste attentif et aux aguets sur vos réponses pour pouvoir continuer à suivre vos indications et manip' à effectuer.

 

D'avance merci !

Modifié par Pierrot33
Lien vers le commentaire
Partager sur d’autres sites
pear Devil Member !

pear

Posté(e)
Posté(e)

Spybot, totalement obsolète doit être désinstallé.

Vous pourriez utiliser Mbam (Malewares Bytes)pour le remplacer.

Téléchargez MBAM

ICI

ou LA

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Sous Vista, exécuter avec privilèges Administrateur

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Effacer le contenu du dossier Snapshots(le contenu de snapshots, pas le fichier snapshots) , sous XP :

C:\Documents and Settings\All Users\Application Data\Spybot - Search &Destroy\Snapshots

Et sous Vista :

C:\ProgramData\Spybot - Search & Destroy\Snapshots

Si vous ne trouvez pas Snapshots, poursuivez la procédure sans vous en préoccuper

 

 

Vous devez trouver sur le bureau ou ,sinon, dans le dossier où vous avez installé Zhpdiag ces 3 icônes .

zhp0710.png

Cliquer sur l'icône Zhpfix

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Copiez/Collez les lignes vertes dans le cadre ci dessous:

pour cela;

Clic gauche maintenu enfoncé, Balayer l'ensemble du texte à copier avec la souris pour le mettre en surbrillance ,de gauche à droite et de haut en bas

Ctrl+c mettre le tout en mémoire

Ctrl+v pour inscrire le texte dans le Document

Vous ne verrez rien avant d'avoir Cliqué sur le H- PanelHelper.jpg

 

O87 - FAEL: "TCP Query User{643D2104-D7CD-4D14-AA4E-01FCBD00FFED}C:\program files\freetvradio\freetvradio.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.) => Infection BT (Adware.SPointer)

O87 - FAEL: "UDP Query User{5BEBE02B-CD74-4975-9C5C-60985508D007}C:\program files\freetvradio\freetvradio.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\freetvradio\freetvradio.exe (.not file.) => Infection BT (Adware.SPointer)

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoRezo_is1] => Infection PUP (PUP.Eorezo)

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{38470B46-9BF1-40AE-A588-F6AD6D1C2D42}] => Infection BT (Adware.SPointer)

[HKLM\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}] => Infection PUP (PUP.Eorezo)

[HKLM\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}] => Infection PUP (PUP.Eorezo)

[HKLM\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}] => Infection PUP (PUP.Eorezo)

[HKLM\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}] => Infection PUP (PUP.Eorezo)

[HKLM\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}] => Infection PUP (PUP.Eorezo)

[HKLM\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}] => Infection PUP (PUP.Eorezo)

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] => Infection BT (Adware.PopCap)

[HKLM\Software\Mozilla\Firefox\Extensions]:SpiderMessengerHelper@spidermessenger.com => Infection BT (Spyware.AgenceExclusive)

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\spotify.exe (.not file.) => Fichier absent

O4 - Global Startup: C:\Users\bleuris\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe => Safer Net Working%Spybot S&D

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PokerStars.fr.lnk . (.PokerStars.) -- C:\Program Files\PokerStars.FR\PokerStarsUpdate.exe

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe => Safer Net Working%Spybot S&D

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline => Orphean Key not necessary

O4 - Global Startup: C:\Users\bleuris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) => Fichier absent

O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe => Spybot%Search & Destroy

O42 - Logiciel: Everest Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- Everest Poker.fr => Everest Poker.net

O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM] -- PokerStars.fr => PartyGaming PokerStars

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 => Safer Networking Limited Spybot - S&D

O43 - CFD: 20/06/2012 - 00:32:14 - [36,818] ----D C:\Program Files\Everest Poker.fr => Online Game

O43 - CFD: 16/04/2012 - 16:46:35 - [133,657] ----D C:\Program Files\PokerStars.FR => PartyGaming PokerStars

O43 - CFD: 24/05/2011 - 23:18:09 - [52,326] ----D C:\Program Files\Spybot - Search & Destroy => Spybot - Search & Destroy

O43 - CFD: 12/06/2012 - 00:13:43 - [1,413] ----D C:\ProgramData\Spybot - Search & Destroy => Spybot - Search & Destroy

O43 - CFD: 04/06/2012 - 18:17:21 - [2,683] ----D C:\Users\bleuris\AppData\Local\PokerStars.FR => PartyGaming PokerStars

O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm

O87 - FAEL: "{A51F85BF-F860-4CF0-80C2-DD652500518D}" |In - None - P6 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) => Fichier absent

O87 - FAEL: "{3A5B8B1A-BFBA-4454-9626-A5BC8131FBD3}" |In - None - P17 - TRUE | .(...) -- C:\Users\bleuris\Desktop\PIERRE\uTorrent.exe (.not file.) => Fichier absent

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe => Spybot%Search & Destroy

[MD5.3D45F0ADF444C9239497923162027417] [sPRF][15/05/2012] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Users\bleuris\AppData\Local\Temp\tbuTor.dll [4401448]

O87 - FAEL: "{A2E475C0-D6FD-42FA-972E-F02C4FE1C671}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{F22659CE-88DF-405F-95A9-706EDD339282}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{C119B398-0B3E-4810-9347-14AE4EB8F768}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{31A7D37C-EF4D-40DF-BEFA-968D28DDEFAA}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

SysRestore

EmptyFlash

EmptyTemp

FirewallRaz

110926125340285987.jpg

 

 

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

110515101159971677.jpg

Cliquer sur "Tous" puis sur "Nettoyer" .

Redémarrer pour achever le nettoyage.

Un rapport apparait:

Capture1Rapport.JPG

Si le rapport n'apparait pas,cliquer surPanelRapport.jpg

Copier-coller le rapport de suppression dans la prochaine réponse.

Lien vers le commentaire
Partager sur d’autres sites
Pierrot33 Junior Member

Pierrot33

Posté(e)
  • Auteur
Posté(e)

Bonjour pear !

 

Pour MBAM, je l'ai réinstallé hier en désactivant TeaTimer.

Pour Snapshots, j'ai deux dossiers: le premier, intitulé "Snapshots", est un dossier vide. Le second, intitulé "Snapshots2", est un dossier comprenant plein de fichiers commençant par "RegD...". Dois-je les supprimer ?

 

J'attends votre réponse pour poursuivre avec ZHP.

 

Merci.

Lien vers le commentaire
Partager sur d’autres sites
pear Devil Member !

pear

Posté(e)
Posté(e)

Effacer le contenu du dossier Snapshots(le contenu de snapshots, pas le fichier snapshots) ,

sous XP :

C:\Documents and Settings\All Users\Application Data\Spybot - Search &Destroy\Snapshots

Et sous Vista :

C:\ProgramData\Spybot - Search & Destroy\Snapshots

Lien vers le commentaire
Partager sur d’autres sites

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...