Virus rundll

Fermé
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012 - 22 mai 2012 à 17:51
 Utilisateur anonyme - 15 juin 2012 à 22:04
Bonjour,

Bonjour,

Cela fait 2 jours que j ai installé norton 360 et depuis hier j ai un virus qui m empeche d acceder a norton, msn etc ... que faire svp merci



65 réponses

Utilisateur anonyme
8 juin 2012 à 20:50
fais un clique droit dessus, lance le en tant qu'administrateur !


0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
8 juin 2012 à 20:51
c'est bon voici le rapport :

20:41:20.0370 3540 TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
20:41:20.0448 3540 ============================================================
20:41:20.0448 3540 Current date / time: 2012/06/08 20:41:20.0448
20:41:20.0448 3540 SystemInfo:
20:41:20.0448 3540
20:41:20.0448 3540 OS Version: 6.0.6002 ServicePack: 2.0
20:41:20.0448 3540 Product type: Workstation
20:41:20.0448 3540 ComputerName: PC-DE-ISAAC
20:41:20.0448 3540 UserName: ISSAC
20:41:20.0448 3540 Windows directory: C:\Windows
20:41:20.0448 3540 System windows directory: C:\Windows
20:41:20.0448 3540 Running under WOW64
20:41:20.0448 3540 Processor architecture: Intel x64
20:41:20.0448 3540 Number of processors: 2
20:41:20.0448 3540 Page size: 0x1000
20:41:20.0448 3540 Boot type: Normal boot
20:41:20.0448 3540 ============================================================
20:41:20.0963 3540 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:41:20.0979 3540 ============================================================
20:41:20.0979 3540 \Device\Harddisk0\DR0:
20:41:20.0979 3540 MBR partitions:
20:41:20.0979 3540 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x72B17923
20:41:20.0979 3540 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x72B17962, BlocksNum 0x1BEE05F
20:41:20.0979 3540 ============================================================
20:41:21.0072 3540 C: <-> \Device\Harddisk0\DR0\Partition0
20:41:21.0275 3540 D: <-> \Device\Harddisk0\DR0\Partition1
20:41:21.0275 3540 ============================================================
20:41:21.0275 3540 Initialize success
20:41:21.0275 3540 ============================================================
20:41:25.0128 4028 ============================================================
20:41:25.0128 4028 Scan started
20:41:25.0128 4028 Mode: Manual;
20:41:25.0128 4028 ============================================================
20:41:25.0830 4028 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
20:41:25.0846 4028 ACPI - ok
20:41:25.0908 4028 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:41:25.0908 4028 AdobeARMservice - ok
20:41:26.0033 4028 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:41:26.0033 4028 AdobeFlashPlayerUpdateSvc - ok
20:41:26.0111 4028 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
20:41:26.0127 4028 adp94xx - ok
20:41:26.0205 4028 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
20:41:26.0236 4028 adpahci - ok
20:41:26.0283 4028 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
20:41:26.0283 4028 adpu160m - ok
20:41:26.0314 4028 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
20:41:26.0329 4028 adpu320 - ok
20:41:26.0361 4028 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll
20:41:26.0361 4028 AeLookupSvc - ok
20:41:26.0423 4028 AFD (c4f6ce6087760ad70960c9eb130e7943) C:\Windows\system32\drivers\afd.sys
20:41:26.0423 4028 AFD - ok
20:41:26.0454 4028 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
20:41:26.0454 4028 agp440 - ok
20:41:26.0485 4028 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
20:41:26.0485 4028 aic78xx - ok
20:41:26.0517 4028 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe
20:41:26.0517 4028 ALG - ok
20:41:26.0548 4028 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
20:41:26.0548 4028 aliide - ok
20:41:26.0563 4028 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
20:41:26.0563 4028 amdide - ok
20:41:26.0595 4028 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\DRIVERS\amdk8.sys
20:41:26.0595 4028 AmdK8 - ok
20:41:26.0610 4028 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll
20:41:26.0626 4028 Appinfo - ok
20:41:26.0719 4028 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:41:26.0719 4028 Apple Mobile Device - ok
20:41:26.0735 4028 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
20:41:26.0751 4028 arc - ok
20:41:26.0782 4028 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
20:41:26.0782 4028 arcsas - ok
20:41:26.0797 4028 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
20:41:26.0813 4028 AsyncMac - ok
20:41:26.0829 4028 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
20:41:26.0829 4028 atapi - ok
20:41:26.0875 4028 AudioEndpointBuilder (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
20:41:26.0875 4028 AudioEndpointBuilder - ok
20:41:26.0891 4028 AudioSrv (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
20:41:26.0891 4028 AudioSrv - ok
20:41:26.0969 4028 BBSvc (37bfed63841e56f465e1a0cd32f1bcc9) C:\Program Files (x86)\Microsoft\BingBar\7.1.364.0\BBSvc.exe
20:41:26.0969 4028 BBSvc - ok
20:41:27.0016 4028 BBUpdate (b47230df549e171449b5d25cfcee9f57) C:\Program Files (x86)\Microsoft\BingBar\7.1.364.0\SeaPort.exe
20:41:27.0031 4028 BBUpdate - ok
20:41:27.0125 4028 BFE (ffb96c2589ffa60473ead78b39fbde29) C:\Windows\System32\bfe.dll
20:41:27.0141 4028 BFE - ok
20:41:27.0297 4028 BHDrvx64 (5b1fe9d351c284701c8051da2aa81df6) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20120531.001\BHDrvx64.sys
20:41:27.0312 4028 BHDrvx64 - ok
20:41:27.0484 4028 BITS (6d316f4859634071cc25c4fd4589ad2c) C:\Windows\System32\qmgr.dll
20:41:27.0515 4028 BITS - ok
20:41:27.0577 4028 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
20:41:27.0577 4028 blbdrive - ok
20:41:27.0671 4028 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
20:41:27.0687 4028 Bonjour Service - ok
20:41:27.0702 4028 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
20:41:27.0702 4028 bowser - ok
20:41:27.0765 4028 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
20:41:27.0765 4028 BrFiltLo - ok
20:41:27.0796 4028 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
20:41:27.0796 4028 BrFiltUp - ok
20:41:27.0843 4028 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll
20:41:27.0843 4028 Browser - ok
20:41:27.0889 4028 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
20:41:27.0889 4028 Brserid - ok
20:41:27.0905 4028 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
20:41:27.0905 4028 BrSerWdm - ok
20:41:27.0936 4028 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
20:41:27.0936 4028 BrUsbMdm - ok
20:41:27.0967 4028 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
20:41:27.0967 4028 BrUsbSer - ok
20:41:27.0999 4028 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
20:41:27.0999 4028 BTHMODEM - ok
20:41:28.0045 4028 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
20:41:28.0045 4028 cdfs - ok
20:41:28.0092 4028 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
20:41:28.0092 4028 cdrom - ok
20:41:28.0123 4028 CertPropSvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
20:41:28.0123 4028 CertPropSvc - ok
20:41:28.0155 4028 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
20:41:28.0155 4028 circlass - ok
20:41:28.0217 4028 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
20:41:28.0233 4028 CLFS - ok
20:41:28.0311 4028 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:41:28.0311 4028 clr_optimization_v2.0.50727_32 - ok
20:41:28.0357 4028 clr_optimization_v2.0.50727_64 (ce07a466201096f021cd09d631b21540) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:41:28.0357 4028 clr_optimization_v2.0.50727_64 - ok
20:41:28.0420 4028 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:41:28.0420 4028 clr_optimization_v4.0.30319_32 - ok
20:41:28.0451 4028 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:41:28.0451 4028 clr_optimization_v4.0.30319_64 - ok
20:41:28.0467 4028 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
20:41:28.0482 4028 cmdide - ok
20:41:28.0498 4028 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
20:41:28.0498 4028 Compbatt - ok
20:41:28.0513 4028 COMSysApp - ok
20:41:28.0513 4028 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
20:41:28.0513 4028 crcdisk - ok
20:41:28.0560 4028 CryptSvc (18918613e63f387cde4d95ca7d49dcf7) C:\Windows\system32\cryptsvc.dll
20:41:28.0560 4028 CryptSvc - ok
20:41:28.0623 4028 DcomLaunch (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll
20:41:28.0638 4028 DcomLaunch - ok
20:41:28.0669 4028 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
20:41:28.0669 4028 DfsC - ok
20:41:28.0872 4028 DFSR (c647f468f7de343df8c143655c5557d4) C:\Windows\system32\DFSR.exe
20:41:28.0997 4028 DFSR - ok
20:41:29.0137 4028 Dhcp (3ed0321127ce70acdaabbf77e157c2a7) C:\Windows\System32\dhcpcsvc.dll
20:41:29.0153 4028 Dhcp - ok
20:41:29.0200 4028 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
20:41:29.0200 4028 disk - ok
20:41:29.0262 4028 Dnscache (06230f1b721494a6df8d47fd395bb1b0) C:\Windows\System32\dnsrslvr.dll
20:41:29.0262 4028 Dnscache - ok
20:41:29.0293 4028 dot3svc (1a7156dd1e850e9914e5e991e3225b94) C:\Windows\System32\dot3svc.dll
20:41:29.0293 4028 dot3svc - ok
20:41:29.0340 4028 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll
20:41:29.0340 4028 DPS - ok
20:41:29.0449 4028 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
20:41:29.0449 4028 drmkaud - ok
20:41:29.0527 4028 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
20:41:29.0543 4028 DXGKrnl - ok
20:41:29.0621 4028 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
20:41:29.0621 4028 E1G60 - ok
20:41:29.0652 4028 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll
20:41:29.0652 4028 EapHost - ok
20:41:29.0699 4028 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
20:41:29.0715 4028 Ecache - ok
20:41:29.0871 4028 eeCtrl (ba6420c1f7070ed8f1ba372844f3e1ec) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
20:41:29.0886 4028 eeCtrl - ok
20:41:29.0964 4028 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe
20:41:29.0964 4028 ehRecvr - ok
20:41:30.0027 4028 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe
20:41:30.0027 4028 ehSched - ok
20:41:30.0089 4028 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll
20:41:30.0089 4028 ehstart - ok
20:41:30.0136 4028 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
20:41:30.0167 4028 elxstor - ok
20:41:30.0276 4028 EMDMgmt (a9b18b63a4fd6baab83326706d857fab) C:\Windows\system32\emdmgmt.dll
20:41:30.0292 4028 EMDMgmt - ok
20:41:30.0339 4028 EraserUtilDrvI10 - ok
20:41:30.0448 4028 EraserUtilRebootDrv (1343df3451bc0c442dc69837c6fba21b) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
20:41:30.0448 4028 EraserUtilRebootDrv - ok
20:41:30.0479 4028 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
20:41:30.0479 4028 ErrDev - ok
20:41:30.0541 4028 EventSystem (e12f22b73f153dece721cd45ec05b4af) C:\Windows\system32\es.dll
20:41:30.0557 4028 EventSystem - ok
20:41:30.0604 4028 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
20:41:30.0619 4028 exfat - ok
20:41:30.0619 4028 ezSharedSvc - ok
20:41:30.0666 4028 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
20:41:30.0682 4028 fastfat - ok
20:41:30.0713 4028 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
20:41:30.0713 4028 fdc - ok
20:41:30.0729 4028 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll
20:41:30.0744 4028 fdPHost - ok
20:41:30.0760 4028 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll
20:41:30.0760 4028 FDResPub - ok
20:41:30.0791 4028 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
20:41:30.0791 4028 FileInfo - ok
20:41:30.0838 4028 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
20:41:30.0838 4028 Filetrace - ok
20:41:30.0869 4028 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
20:41:30.0869 4028 flpydisk - ok
20:41:30.0900 4028 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
20:41:30.0900 4028 FltMgr - ok
20:41:31.0009 4028 FontCache (be1c5bd1ca7ed015bc6fa1ae67e592c8) C:\Windows\system32\FntCache.dll
20:41:31.0025 4028 FontCache - ok
20:41:31.0072 4028 FontCache3.0.0.0 (bc5b0be5af3510b0fd8c140ee42c6d3e) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:41:31.0072 4028 FontCache3.0.0.0 - ok
20:41:31.0134 4028 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
20:41:31.0134 4028 fssfltr - ok
20:41:31.0290 4028 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
20:41:31.0306 4028 fsssvc - ok
20:41:31.0384 4028 Fs_Rec (5779b86cd8b32519fbecb136394d946a) C:\Windows\system32\drivers\Fs_Rec.sys
20:41:31.0384 4028 Fs_Rec - ok
20:41:31.0415 4028 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
20:41:31.0431 4028 gagp30kx - ok
20:41:31.0477 4028 GameConsoleService (cc1c8068b05283d63ec5fe782d2d3946) C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
20:41:31.0493 4028 GameConsoleService - ok
20:41:31.0524 4028 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:41:31.0540 4028 GEARAspiWDM - ok
20:41:31.0587 4028 gpsvc (a0e1b575ba8f504968cd40c0faeb2384) C:\Windows\System32\gpsvc.dll
20:41:31.0602 4028 gpsvc - ok
20:41:31.0649 4028 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:41:31.0649 4028 gupdate - ok
20:41:31.0649 4028 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:41:31.0649 4028 gupdatem - ok
20:41:31.0696 4028 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
20:41:31.0696 4028 gusvc - ok
20:41:31.0758 4028 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:41:31.0774 4028 HDAudBus - ok
20:41:31.0852 4028 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
20:41:31.0852 4028 HidBth - ok
20:41:31.0883 4028 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
20:41:31.0883 4028 HidIr - ok
20:41:31.0930 4028 hidserv (59361d38a297755d46a540e450202b2a) C:\Windows\system32\hidserv.dll
20:41:31.0930 4028 hidserv - ok
20:41:31.0945 4028 HidUsb (d02c82cb3a20f391c8aeff94e8e0baa1) C:\Windows\system32\DRIVERS\hidusb.sys
20:41:31.0945 4028 HidUsb - ok
20:41:31.0977 4028 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll
20:41:31.0977 4028 hkmsvc - ok
20:41:32.0023 4028 HP Health Check Service (a3a30438c48d2d71556e120c9c7ba7a0) c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
20:41:32.0023 4028 HP Health Check Service - ok
20:41:32.0055 4028 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
20:41:32.0055 4028 HpCISSs - ok
20:41:32.0117 4028 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
20:41:32.0133 4028 HTTP - ok
20:41:32.0148 4028 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
20:41:32.0148 4028 i2omp - ok
20:41:32.0179 4028 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
20:41:32.0179 4028 i8042prt - ok
20:41:32.0195 4028 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
20:41:32.0211 4028 iaStorV - ok
20:41:32.0320 4028 idsvc (749f5f8cedca70f2a512945325fc489d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:41:32.0320 4028 idsvc - ok
20:41:32.0460 4028 IDSVia64 (4e9e0e5a3b0efeb27491c26be1d97fda) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20120607.001\IDSvia64.sys
20:41:32.0476 4028 IDSVia64 - ok
20:41:32.0523 4028 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
20:41:32.0523 4028 iirsp - ok
20:41:32.0569 4028 IKEEXT (0c9ea6e654e7b0471741e343a6c671af) C:\Windows\System32\ikeext.dll
20:41:32.0569 4028 IKEEXT - ok
20:41:32.0741 4028 IntcAzAudAddService (46cb3abe8150e7b181e86d4906de17e8) C:\Windows\system32\drivers\RTKVHD64.sys
20:41:32.0788 4028 IntcAzAudAddService - ok
20:41:32.0897 4028 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
20:41:32.0913 4028 intelide - ok
20:41:32.0928 4028 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
20:41:32.0944 4028 intelppm - ok
20:41:32.0975 4028 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll
20:41:32.0975 4028 IPBusEnum - ok
20:41:33.0006 4028 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:41:33.0006 4028 IpFilterDriver - ok
20:41:33.0053 4028 iphlpsvc (bf0dbfa9792c5c14fa00f61c75116c1b) C:\Windows\System32\iphlpsvc.dll
20:41:33.0053 4028 iphlpsvc - ok
20:41:33.0053 4028 IpInIp - ok
20:41:33.0115 4028 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
20:41:33.0115 4028 IPMIDRV - ok
20:41:33.0147 4028 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
20:41:33.0147 4028 IPNAT - ok
20:41:33.0256 4028 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe
20:41:33.0287 4028 iPod Service - ok
20:41:33.0303 4028 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
20:41:33.0303 4028 IRENUM - ok
20:41:33.0334 4028 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
20:41:33.0334 4028 isapnp - ok
20:41:33.0396 4028 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
20:41:33.0396 4028 iScsiPrt - ok
20:41:33.0427 4028 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
20:41:33.0427 4028 iteatapi - ok
20:41:33.0474 4028 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
20:41:33.0474 4028 iteraid - ok
20:41:33.0505 4028 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
20:41:33.0505 4028 kbdclass - ok
20:41:33.0521 4028 kbdhid (bf8783a5066cfecf45095459e8010fa7) C:\Windows\system32\DRIVERS\kbdhid.sys
20:41:33.0521 4028 kbdhid - ok
20:41:33.0552 4028 KeyIso (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:41:33.0552 4028 KeyIso - ok
20:41:33.0630 4028 KSecDD (2758d174604f597bbc8a217ff667913d) C:\Windows\system32\Drivers\ksecdd.sys
20:41:33.0646 4028 KSecDD - ok
20:41:33.0646 4028 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
20:41:33.0646 4028 ksthunk - ok
20:41:33.0708 4028 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll
20:41:33.0708 4028 KtmRm - ok
20:41:33.0739 4028 LanmanServer (50c7a3cb427e9bb5ed0708a669956ab5) C:\Windows\system32\srvsvc.dll
20:41:33.0755 4028 LanmanServer - ok
20:41:33.0786 4028 LanmanWorkstation (caf86fc1388be1e470f1a7b43e348adb) C:\Windows\System32\wkssvc.dll
20:41:33.0786 4028 LanmanWorkstation - ok
20:41:33.0849 4028 LightScribeService (e75adcfafdef3f4c3af3332928d59926) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
20:41:33.0849 4028 LightScribeService - ok
20:41:33.0864 4028 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
20:41:33.0864 4028 lltdio - ok
20:41:33.0911 4028 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll
20:41:33.0942 4028 lltdsvc - ok
20:41:33.0989 4028 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll
20:41:33.0989 4028 lmhosts - ok
20:41:34.0005 4028 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
20:41:34.0005 4028 LSI_FC - ok
20:41:34.0036 4028 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
20:41:34.0036 4028 LSI_SAS - ok
20:41:34.0067 4028 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
20:41:34.0067 4028 LSI_SCSI - ok
20:41:34.0098 4028 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
20:41:34.0098 4028 luafv - ok
20:41:34.0176 4028 MatSvc (ec470d91ef06a59397edc18d48899cc5) C:\Program Files\Microsoft Fix it Center\Matsvc.exe
20:41:34.0192 4028 MatSvc - ok
20:41:34.0207 4028 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll
20:41:34.0207 4028 Mcx2Svc - ok
20:41:34.0239 4028 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
20:41:34.0239 4028 megasas - ok
20:41:34.0270 4028 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
20:41:34.0285 4028 MegaSR - ok
20:41:34.0317 4028 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
20:41:34.0317 4028 MMCSS - ok
20:41:34.0317 4028 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
20:41:34.0317 4028 Modem - ok
20:41:34.0363 4028 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
20:41:34.0363 4028 monitor - ok
20:41:34.0363 4028 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
20:41:34.0363 4028 mouclass - ok
20:41:34.0395 4028 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
20:41:34.0395 4028 mouhid - ok
20:41:34.0410 4028 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
20:41:34.0426 4028 MountMgr - ok
20:41:34.0473 4028 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
20:41:34.0473 4028 mpio - ok
20:41:34.0504 4028 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
20:41:34.0504 4028 mpsdrv - ok
20:41:34.0551 4028 MpsSvc (897e3baf68ba406a61682ae39c83900c) C:\Windows\system32\mpssvc.dll
20:41:34.0566 4028 MpsSvc - ok
20:41:34.0582 4028 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
20:41:34.0582 4028 Mraid35x - ok
20:41:34.0597 4028 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
20:41:34.0613 4028 MRxDAV - ok
20:41:34.0644 4028 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:41:34.0644 4028 mrxsmb - ok
20:41:34.0675 4028 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:41:34.0675 4028 mrxsmb10 - ok
20:41:34.0691 4028 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:41:34.0691 4028 mrxsmb20 - ok
20:41:34.0707 4028 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys
20:41:34.0707 4028 msahci - ok
20:41:34.0753 4028 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
20:41:34.0753 4028 msdsm - ok
20:41:34.0785 4028 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe
20:41:34.0785 4028 MSDTC - ok
20:41:34.0816 4028 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
20:41:34.0816 4028 Msfs - ok
20:41:34.0831 4028 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
20:41:34.0831 4028 msisadrv - ok
20:41:34.0863 4028 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll
20:41:34.0878 4028 MSiSCSI - ok
20:41:34.0878 4028 msiserver - ok
20:41:34.0925 4028 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
20:41:34.0941 4028 MSKSSRV - ok
20:41:34.0972 4028 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
20:41:34.0987 4028 MSPCLOCK - ok
20:41:34.0987 4028 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
20:41:35.0003 4028 MSPQM - ok
20:41:35.0034 4028 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
20:41:35.0050 4028 MsRPC - ok
20:41:35.0050 4028 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
20:41:35.0050 4028 mssmbios - ok
20:41:35.0081 4028 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
20:41:35.0081 4028 MSTEE - ok
20:41:35.0112 4028 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
20:41:35.0112 4028 Mup - ok
20:41:35.0190 4028 N360 (e78a365cc3e0fbfc018a33dce01909f8) C:\Program Files (x86)\Norton 360\Engine\5.2.1.3\ccSvcHst.exe
20:41:35.0190 4028 N360 - ok
20:41:35.0253 4028 napagent (a5b10c845e7538c60c0f5d87a57cb3f5) C:\Windows\system32\qagentRT.dll
20:41:35.0253 4028 napagent - ok
20:41:35.0315 4028 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
20:41:35.0362 4028 NativeWifiP - ok
20:41:35.0455 4028 NAVENG (8043d41f881d6ace40b854ad6e32217f) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120607.034\ENG64.SYS
20:41:35.0455 4028 NAVENG - ok
20:41:35.0596 4028 NAVEX15 (9a9ab2fc45d701daed465d14980f1305) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120607.034\EX64.SYS
20:41:35.0627 4028 NAVEX15 - ok
20:41:35.0783 4028 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
20:41:35.0799 4028 NDIS - ok
20:41:35.0814 4028 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
20:41:35.0814 4028 NdisTapi - ok
20:41:35.0830 4028 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
20:41:35.0830 4028 Ndisuio - ok
20:41:35.0861 4028 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
20:41:35.0861 4028 NdisWan - ok
20:41:35.0908 4028 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
20:41:35.0908 4028 NDProxy - ok
20:41:35.0923 4028 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
20:41:35.0923 4028 NetBIOS - ok
20:41:35.0955 4028 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
20:41:35.0970 4028 netbt - ok
20:41:35.0986 4028 Netlogon (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:41:35.0986 4028 Netlogon - ok
20:41:36.0033 4028 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll
20:41:36.0033 4028 Netman - ok
20:41:36.0064 4028 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll
20:41:36.0064 4028 netprofm - ok
20:41:36.0095 4028 NetTcpPortSharing (74751dda198165947fd7454d83f49825) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:41:36.0095 4028 NetTcpPortSharing - ok
20:41:36.0142 4028 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
20:41:36.0142 4028 nfrd960 - ok
20:41:36.0173 4028 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll
20:41:36.0189 4028 NlaSvc - ok
20:41:36.0204 4028 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
20:41:36.0220 4028 Npfs - ok
20:41:36.0220 4028 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll
20:41:36.0220 4028 nsi - ok
20:41:36.0235 4028 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
20:41:36.0235 4028 nsiproxy - ok
20:41:36.0345 4028 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
20:41:36.0376 4028 Ntfs - ok
20:41:36.0454 4028 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
20:41:36.0454 4028 Null - ok
20:41:36.0579 4028 NVENETFD (13ec5b8a4b82b6deb739fc577b4217a7) C:\Windows\system32\DRIVERS\nvmfdx64.sys
20:41:36.0610 4028 NVENETFD - ok
20:41:37.0218 4028 nvlddmkm (e280aa1750074dade61c93bb60e7f6b6) C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:41:37.0421 4028 nvlddmkm - ok
20:41:37.0546 4028 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
20:41:37.0546 4028 nvraid - ok
20:41:37.0608 4028 nvrd64 (a4b9af8d1793f67ce894bf051342110f) C:\Windows\system32\drivers\nvrd64.sys
20:41:37.0624 4028 nvrd64 - ok
20:41:37.0671 4028 nvsmu (16d36074b84da72d160233c8d132dc89) C:\Windows\system32\drivers\nvsmu.sys
20:41:37.0671 4028 nvsmu - ok
20:41:37.0686 4028 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
20:41:37.0686 4028 nvstor - ok
20:41:37.0702 4028 nvstor64 (7919ee9458b6d84517bc5a598d795931) C:\Windows\system32\drivers\nvstor64.sys
20:41:37.0702 4028 nvstor64 - ok
20:41:37.0749 4028 nvsvc (14429affe34a6ae21d9570107bb852fe) C:\Windows\system32\nvvsvc.exe
20:41:37.0780 4028 nvsvc - ok
20:41:37.0795 4028 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
20:41:37.0795 4028 nv_agp - ok
20:41:37.0811 4028 NwlnkFlt - ok
20:41:37.0811 4028 NwlnkFwd - ok
20:41:37.0842 4028 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
20:41:37.0842 4028 ohci1394 - ok
20:41:37.0889 4028 p2pimsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:41:37.0905 4028 p2pimsvc - ok
20:41:37.0920 4028 p2psvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:41:37.0936 4028 p2psvc - ok
20:41:37.0951 4028 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
20:41:37.0967 4028 Parport - ok
20:41:38.0014 4028 partmgr (b43751085e2abe389da466bc62a4b987) C:\Windows\system32\drivers\partmgr.sys
20:41:38.0014 4028 partmgr - ok
20:41:38.0029 4028 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll
20:41:38.0029 4028 PcaSvc - ok
20:41:38.0061 4028 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
20:41:38.0061 4028 pci - ok
20:41:38.0076 4028 pciide (2657f6c0b78c36d95034be109336e382) C:\Windows\system32\drivers\pciide.sys
20:41:38.0076 4028 pciide - ok
20:41:38.0123 4028 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
20:41:38.0123 4028 pcmcia - ok
20:41:38.0185 4028 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
20:41:38.0201 4028 PEAUTH - ok
20:41:38.0279 4028 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe
20:41:38.0279 4028 PerfHost - ok
20:41:38.0373 4028 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll
20:41:38.0388 4028 pla - ok
20:41:38.0435 4028 PlugPlay (fe6b0f59215c9fd9f9d26539c58c8b82) C:\Windows\system32\umpnpmgr.dll
20:41:38.0435 4028 PlugPlay - ok
20:41:38.0497 4028 PNRPAutoReg (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:41:38.0497 4028 PNRPAutoReg - ok
20:41:38.0513 4028 PNRPsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:41:38.0513 4028 PNRPsvc - ok
20:41:38.0560 4028 PolicyAgent (89a5560671c2d8b4a4b51f3e1aa069d8) C:\Windows\System32\ipsecsvc.dll
20:41:38.0560 4028 PolicyAgent - ok
20:41:38.0622 4028 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
20:41:38.0638 4028 PptpMiniport - ok
20:41:38.0653 4028 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
20:41:38.0653 4028 Processor - ok
20:41:38.0685 4028 ProfSvc (e058ce4fc2449d8bfa14739c83b7ff2a) C:\Windows\system32\profsvc.dll
20:41:38.0685 4028 ProfSvc - ok
20:41:38.0716 4028 ProtectedStorage (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:41:38.0716 4028 ProtectedStorage - ok
20:41:38.0747 4028 Ps2 (1d0a3f565397d08707f3d75b88586645) C:\Windows\system32\DRIVERS\PS2.sys
20:41:38.0747 4028 Ps2 - ok
20:41:38.0763 4028 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
20:41:38.0778 4028 PSched - ok
20:41:38.0856 4028 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
20:41:38.0872 4028 ql2300 - ok
20:41:38.0950 4028 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
20:41:38.0950 4028 ql40xx - ok
20:41:38.0997 4028 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll
20:41:39.0028 4028 QWAVE - ok
20:41:39.0059 4028 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
20:41:39.0059 4028 QWAVEdrv - ok
20:41:39.0059 4028 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
20:41:39.0059 4028 RasAcd - ok
20:41:39.0090 4028 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll
20:41:39.0090 4028 RasAuto - ok
20:41:39.0121 4028 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:41:39.0137 4028 Rasl2tp - ok
20:41:39.0168 4028 RasMan (3ad83e4046c43be510de681588acb8af) C:\Windows\System32\rasmans.dll
20:41:39.0168 4028 RasMan - ok
20:41:39.0199 4028 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
20:41:39.0199 4028 RasPppoe - ok
20:41:39.0215 4028 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
20:41:39.0215 4028 RasSstp - ok
20:41:39.0262 4028 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
20:41:39.0277 4028 rdbss - ok
20:41:39.0324 4028 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:41:39.0324 4028 RDPCDD - ok
20:41:39.0355 4028 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
20:41:39.0371 4028 rdpdr - ok
20:41:39.0371 4028 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
20:41:39.0371 4028 RDPENCDD - ok
20:41:39.0418 4028 RDPWD (5c141fc457f1ac833664789235aca673) C:\Windows\system32\drivers\RDPWD.sys
20:41:39.0449 4028 RDPWD - ok
20:41:39.0496 4028 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll
20:41:39.0496 4028 RemoteAccess - ok
20:41:39.0543 4028 RemoteRegistry (44b9d8ec2f3ef3a0efb00857af70d861) C:\Windows\system32\regsvc.dll
20:41:39.0558 4028 RemoteRegistry - ok
20:41:39.0621 4028 RimUsb (ad42432d22940b4215177be113e4919c) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
20:41:39.0621 4028 RimUsb - ok
20:41:39.0683 4028 RimVSerPort (4aafffa67ac4dfa3d9985d78573887e2) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
20:41:39.0683 4028 RimVSerPort - ok
20:41:39.0745 4028 ROOTMODEM (6a0cf73b019cbc9255e23c9192ec3702) C:\Windows\system32\Drivers\RootMdm.sys
20:41:39.0745 4028 ROOTMODEM - ok
20:41:39.0777 4028 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe
20:41:39.0777 4028 RpcLocator - ok
20:41:39.0855 4028 RpcSs (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll
20:41:39.0870 4028 RpcSs - ok
20:41:39.0901 4028 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
20:41:39.0901 4028 rspndr - ok
20:41:40.0026 4028 RTL8192su (1ba22cd4c677fbb23a068a22cc632d39) C:\Windows\system32\DRIVERS\RTL8192su.sys
20:41:40.0042 4028 RTL8192su - ok
20:41:40.0073 4028 SamSs (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:41:40.0073 4028 SamSs - ok
20:41:40.0104 4028 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
20:41:40.0120 4028 sbp2port - ok
20:41:40.0167 4028 SCardSvr (fd1cdcf108d5ef3366f00d18b70fb89b) C:\Windows\System32\SCardSvr.dll
20:41:40.0182 4028 SCardSvr - ok
20:41:40.0276 4028 Schedule (0f838c811ad295d2a4489b9993096c63) C:\Windows\system32\schedsvc.dll
20:41:40.0291 4028 Schedule - ok
20:41:40.0369 4028 SCPolicySvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
20:41:40.0369 4028 SCPolicySvc - ok
20:41:40.0463 4028 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll
20:41:40.0463 4028 SDRSVC - ok
20:41:40.0525 4028 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
20:41:40.0525 4028 secdrv - ok
20:41:40.0603 4028 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll
20:41:40.0603 4028 seclogon - ok
20:41:40.0650 4028 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\System32\sens.dll
20:41:40.0666 4028 SENS - ok
20:41:40.0697 4028 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
20:41:40.0697 4028 Serenum - ok
20:41:40.0728 4028 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
20:41:40.0744 4028 Serial - ok
20:41:40.0759 4028 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
20:41:40.0775 4028 sermouse - ok
20:41:40.0837 4028 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll
20:41:40.0837 4028 SessionEnv - ok
20:41:40.0853 4028 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
20:41:40.0853 4028 sffdisk - ok
20:41:40.0884 4028 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
20:41:40.0884 4028 sffp_mmc - ok
20:41:40.0900 4028 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
20:41:40.0900 4028 sffp_sd - ok
20:41:40.0915 4028 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
20:41:40.0915 4028 sfloppy - ok
20:41:40.0962 4028 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll
20:41:40.0978 4028 SharedAccess - ok
20:41:41.0040 4028 ShellHWDetection (56793271ecdedd350c5add305603e963) C:\Windows\System32\shsvcs.dll
20:41:41.0087 4028 ShellHWDetection - ok
20:41:41.0134 4028 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
20:41:41.0134 4028 SiSRaid2 - ok
20:41:41.0149 4028 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
20:41:41.0149 4028 SiSRaid4 - ok
20:41:41.0352 4028 slsvc (a9a27a8e257b45a604fdad4f26fe7241) C:\Windows\system32\SLsvc.exe
20:41:41.0415 4028 slsvc - ok
20:41:41.0524 4028 SLUINotify (fd74b4b7c2088e390a30c85a896fc3af) C:\Windows\system32\SLUINotify.dll
20:41:41.0524 4028 SLUINotify - ok
20:41:41.0571 4028 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
20:41:41.0571 4028 Smb - ok
20:41:41.0617 4028 SMR250 (27f71f20e87fbf177c82ae924f9317f7) C:\Windows\system32\drivers\SMR250.SYS
20:41:41.0617 4028 SMR250 - ok
20:41:41.0664 4028 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe
20:41:41.0664 4028 SNMPTRAP - ok
20:41:41.0695 4028 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
20:41:41.0695 4028 spldr - ok
20:41:41.0727 4028 Spooler (f66ff751e7efc816d266977939ef5dc3) C:\Windows\System32\spoolsv.exe
20:41:41.0742 4028 Spooler - ok
20:41:41.0820 4028 SRTSP (90ef30c3867bcde4579c01a6d6e75a7a) C:\Windows\System32\Drivers\N360x64\0502010.003\SRTSP64.SYS
20:41:41.0851 4028 SRTSP - ok
20:41:41.0867 4028 SRTSPX (c513e8a5e7978da49077f5484344ee1b) C:\Windows\system32\drivers\N360x64\0502010.003\SRTSPX64.SYS
20:41:41.0867 4028 SRTSPX - ok
20:41:41.0914 4028 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
20:41:41.0961 4028 srv - ok
20:41:41.0992 4028 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
20:41:42.0007 4028 srv2 - ok
20:41:42.0023 4028 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
20:41:42.0023 4028 srvnet - ok
20:41:42.0039 4028 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll
20:41:42.0039 4028 SSDPSRV - ok
20:41:42.0070 4028 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll
20:41:42.0070 4028 SstpSvc - ok
20:41:42.0117 4028 stisvc (15825c1fbfb8779992cb65087f316af5) C:\Windows\System32\wiaservc.dll
20:41:42.0132 4028 stisvc - ok
20:41:42.0148 4028 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
20:41:42.0163 4028 swenum - ok
20:41:42.0195 4028 swprv (6de37f4de19d4efd9c48c43addbc949a) C:\Windows\System32\swprv.dll
20:41:42.0210 4028 swprv - ok
20:41:42.0226 4028 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
20:41:42.0226 4028 Symc8xx - ok
20:41:42.0304 4028 SymDS (6160145c7a87fc7672e8e3b886888176) C:\Windows\system32\drivers\N360x64\0502010.003\SYMDS64.SYS
20:41:42.0319 4028 SymDS - ok
20:41:42.0382 4028 SymEFA (96aeed40d4d3521568b42027687e69e0) C:\Windows\system32\drivers\N360x64\0502010.003\SYMEFA64.SYS
20:41:42.0397 4028 SymEFA - ok
20:41:42.0429 4028 SymEvent (21a1c2d694c3cf962d31f5e873ab3d6f) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
20:41:42.0444 4028 SymEvent - ok
20:41:42.0475 4028 SymIRON (bd0d711d8cbfcaa19ca123306eaf53a5) C:\Windows\system32\drivers\N360x64\0502010.003\Ironx64.SYS
20:41:42.0491 4028 SymIRON - ok
20:41:42.0538 4028 SYMTDIv (61d06be74fa23ebb7d816e4468edd19e) C:\Windows\System32\Drivers\N360x64\0502010.003\SYMTDIV.SYS
20:41:42.0538 4028 SYMTDIv - ok
20:41:42.0585 4028 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
20:41:42.0585 4028 Sym_hi - ok
20:41:42.0600 4028 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
20:41:42.0600 4028 Sym_u3 - ok
20:41:42.0694 4028 SysMain (92d7a8b0f87b036f17d25885937897a6) C:\Windows\system32\sysmain.dll
20:41:42.0709 4028 SysMain - ok
20:41:42.0741 4028 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll
20:41:42.0756 4028 TabletInputService - ok
20:41:42.0787 4028 TapiSrv (cc2562b4d55e0b6a4758c65407f63b79) C:\Windows\System32\tapisrv.dll
20:41:42.0803 4028 TapiSrv - ok
20:41:42.0819 4028 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll
20:41:42.0819 4028 TBS - ok
20:41:42.0912 4028 Tcpip (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\drivers\tcpip.sys
20:41:42.0943 4028 Tcpip - ok
20:41:42.0959 4028 Tcpip6 (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\DRIVERS\tcpip.sys
20:41:42.0959 4028 Tcpip6 - ok
20:41:43.0021 4028 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
20:41:43.0021 4028 tcpipreg - ok
20:41:43.0037 4028 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
20:41:43.0037 4028 TDPIPE - ok
20:41:43.0068 4028 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
20:41:43.0068 4028 TDTCP - ok
20:41:43.0099 4028 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
20:41:43.0099 4028 tdx - ok
20:41:43.0131 4028 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
20:41:43.0131 4028 TermDD - ok
20:41:43.0162 4028 TermService (5cdd30bc217082dac71a9878d9bfd566) C:\Windows\System32\termsrv.dll
20:41:43.0193 4028 TermService - ok
20:41:43.0224 4028 Themes (56793271ecdedd350c5add305603e963) C:\Windows\system32\shsvcs.dll
20:41:43.0224 4028 Themes - ok
20:41:43.0255 4028 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
20:41:43.0255 4028 THREADORDER - ok
20:41:43.0271 4028 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll
20:41:43.0271 4028 TrkWks - ok
20:41:43.0349 4028 TrustedInstaller (66328b08ef5a9305d8ede36b93930369) C:\Windows\servicing\TrustedInstaller.exe
20:41:43.0349 4028 TrustedInstaller - ok
20:41:43.0365 4028 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:41:43.0365 4028 tssecsrv - ok
20:41:43.0380 4028 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
20:41:43.0380 4028 tunmp - ok
20:41:43.0411 4028 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
20:41:43.0411 4028 tunnel - ok
20:41:43.0443 4028 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
20:41:43.0458 4028 uagp35 - ok
20:41:43.0489 4028 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
20:41:43.0505 4028 udfs - ok
20:41:43.0521 4028 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe
20:41:43.0521 4028 UI0Detect - ok
20:41:43.0536 4028 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
20:41:43.0552 4028 uliagpkx - ok
20:41:43.0583 4028 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
20:41:43.0599 4028 uliahci - ok
20:41:43.0630 4028 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
20:41:43.0630 4028 UlSata - ok
20:41:43.0677 4028 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
20:41:43.0677 4028 ulsata2 - ok
20:41:43.0723 4028 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
20:41:43.0723 4028 umbus - ok
20:41:43.0739 4028 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll
20:41:43.0755 4028 upnphost - ok
20:41:43.0801 4028 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys
20:41:43.0801 4028 USBAAPL64 - ok
20:41:43.0848 4028 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
20:41:43.0848 4028 usbccgp - ok
20:41:43.0879 4028 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
20:41:43.0879 4028 usbcir - ok
20:41:43.0911 4028 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
20:41:43.0911 4028 usbehci - ok
20:41:43.0942 4028 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
20:41:43.0973 4028 usbhub - ok
20:41:44.0035 4028 usbohci (e406b003a354776d317762694956b0fc) C:\Windows\system32\DRIVERS\usbohci.sys
20:41:44.0035 4028 usbohci - ok
20:41:44.0051 4028 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
20:41:44.0051 4028 usbprint - ok
20:41:44.0067 4028 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
20:41:44.0067 4028 usbscan - ok
20:41:44.0082 4028 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:41:44.0082 4028 USBSTOR - ok
20:41:44.0129 4028 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
20:41:44.0129 4028 usbuhci - ok
20:41:44.0160 4028 UxSms (d76e231e4850bb3f88a3d9a78df191e3) C:\Windows\System32\uxsms.dll
20:41:44.0160 4028 UxSms - ok
20:41:44.0207 4028 vds (294945381dfa7ce58cecf0a9896af327) C:\Windows\System32\vds.exe
20:41:44.0223 4028 vds - ok
20:41:44.0238 4028 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
20:41:44.0238 4028 vga - ok
20:41:44.0238 4028 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
20:41:44.0238 4028 VgaSave - ok
20:41:44.0269 4028 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
20:41:44.0269 4028 viaide - ok
20:41:44.0285 4028 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
20:41:44.0285 4028 volmgr - ok
20:41:44.0316 4028 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
20:41:44.0332 4028 volmgrx - ok
20:41:44.0363 4028 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
20:41:44.0379 4028 volsnap - ok
20:41:44.0410 4028 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
20:41:44.0410 4028 vsmraid - ok
20:41:44.0519 4028 VSS (b75232dad33bfd95bf6f0a3e6bff51e1) C:\Windows\system32\vssvc.exe
20:41:44.0535 4028 VSS - ok
20:41:44.0581 4028 W32Time (f14a7de2ea41883e250892e1e5230a9a) C:\Windows\system32\w32time.dll
20:41:44.0581 4028 W32Time - ok
20:41:44.0628 4028 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
20:41:44.0628 4028 WacomPen - ok
20:41:44.0659 4028 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
20:41:44.0659 4028 Wanarp - ok
20:41:44.0659 4028 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
20:41:44.0659 4028 Wanarpv6 - ok
20:41:44.0706 4028 wcncsvc (b4e4c37d0aa6100090a53213ee2bf1c1) C:\Windows\System32\wcncsvc.dll
20:41:44.0722 4028 wcncsvc - ok
20:41:44.0753 4028 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll
20:41:44.0753 4028 WcsPlugInService - ok
20:41:44.0784 4028 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
20:41:44.0784 4028 Wd - ok
20:41:44.0862 4028 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
20:41:44.0878 4028 Wdf01000 - ok
20:41:44.0878 4028 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
20:41:44.0878 4028 WdiServiceHost - ok
20:41:44.0893 4028 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
20:41:44.0893 4028 WdiSystemHost - ok
20:41:44.0909 4028 WebClient (3e6d05381cf35f75ebb055544a8ed9ac) C:\Windows\System32\webclnt.dll
20:41:44.0925 4028 WebClient - ok
20:41:44.0971 4028 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll
20:41:44.0987 4028 Wecsvc - ok
20:41:45.0049 4028 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll
20:41:45.0049 4028 wercplsupport - ok
20:41:45.0065 4028 WerSvc (66b9ecebc46683f47edc06333c075fef) C:\Windows\System32\WerSvc.dll
20:41:45.0065 4028 WerSvc - ok
20:41:45.0112 4028 WinDefend - ok
20:41:45.0127 4028 WinHttpAutoProxySvc - ok
20:41:45.0174 4028 Winmgmt (d2e7296ed1bd26d8db2799770c077a02) C:\Windows\system32\wbem\WMIsvc.dll
20:41:45.0174 4028 Winmgmt - ok
20:41:45.0299 4028 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll
20:41:45.0330 4028 WinRM - ok
20:41:45.0424 4028 Wlansvc (ec339c8115e91baed835957e9a677f16) C:\Windows\System32\wlansvc.dll
20:41:45.0455 4028 Wlansvc - ok
20:41:45.0502 4028 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
20:41:45.0502 4028 wlcrasvc - ok
20:41:45.0627 4028 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:41:45.0658 4028 wlidsvc - ok
20:41:45.0736 4028 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys
20:41:45.0736 4028 WmiAcpi - ok
20:41:45.0798 4028 wmiApSrv (21fa389e65a852698b6a1341f36ee02d) C:\Windows\system32\wbem\WmiApSrv.exe
20:41:45.0814 4028 wmiApSrv - ok
20:41:45.0845 4028 WMPNetworkSvc - ok
20:41:45.0876 4028 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll
20:41:45.0907 4028 WPCSvc - ok
20:41:45.0939 4028 WPDBusEnum (490a18b4e4d53dc10879deaa8e8b70d9) C:\Windows\system32\wpdbusenum.dll
20:41:45.0939 4028 WPDBusEnum - ok
20:41:45.0985 4028 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
20:41:45.0985 4028 WpdUsb - ok
20:41:46.0188 4028 WPFFontCache_v0400 (991e2c2cf3bc204c2bb2ee1476149e4e) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
20:41:46.0251 4028 WPFFontCache_v0400 - ok
20:41:46.0297 4028 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
20:41:46.0297 4028 ws2ifsl - ok
20:41:46.0344 4028 wscsvc (9ea3e6d0ef7a5c2b9181961052a4b01a) C:\Windows\System32\wscsvc.dll
20:41:46.0344 4028 wscsvc - ok
20:41:46.0360 4028 WSearch - ok
20:41:46.0531 4028 wuauserv (fb3796754fe00f0bdc87a36f164a5f4d) C:\Windows\system32\wuaueng.dll
20:41:46.0594 4028 wuauserv - ok
20:41:46.0734 4028 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:41:46.0734 4028 WUDFRd - ok
20:41:46.0765 4028 wudfsvc (6cbd51ff913c851d56ed9dc7f2a27dde) C:\Windows\System32\WUDFSvc.dll
20:41:46.0781 4028 wudfsvc - ok
20:41:46.0812 4028 MBR (0x1B8) (81cd5ec01db0ce57edd853f82462ef27) \Device\Harddisk0\DR0
20:41:47.0327 4028 \Device\Harddisk0\DR0 - ok
20:41:47.0327 4028 Boot (0x1200) (90ed8dab2badaf77207b4db430eec8bd) \Device\Harddisk0\DR0\Partition0
20:41:47.0343 4028 \Device\Harddisk0\DR0\Partition0 - ok
20:41:47.0343 4028 Boot (0x1200) (474efc8f52af479445903170891037eb) \Device\Harddisk0\DR0\Partition1
20:41:47.0343 4028 \Device\Harddisk0\DR0\Partition1 - ok
20:41:47.0343 4028 ============================================================
20:41:47.0343 4028 Scan finished
20:41:47.0343 4028 ============================================================
20:41:47.0358 4884 Detected object count: 0
20:41:47.0358 4884 Actual detected object count: 0
20:42:00.0977 1224 Deinitialize success
0
Utilisateur anonyme
8 juin 2012 à 20:52
bon, il n'a rien trouvé !


* /!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié.
Ne pas utiliser en dehors de ce cas de figure : dangereux!



/!\ Utilisateur de Vista : Ne pas oublier de désactiver l'UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

► Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
A lire
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Avant d'utiliser ComboFix :

► ferme les fenêtres de tous les programmes en cours.

► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
Une fois fait, sur ton bureau double-clic sur Combofix.exe.

/!\Utilisateur de Vista : Clique droit sur le logo de Combofix, « exécuter en tant qu'Administrateur »

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- il se peut que Combofix ait besoin de se connecter à internet pour trouver les mises à jour, donc il faut l'autoriser.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.


- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\ComboFix\ComboFix.txt)
► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.



0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
10 juin 2012 à 17:06
bonjour,

voici le rapport de combofix

ComboFix 12-06-09.02 - ISSAC 10/06/2012 16:29:22.1.2 - x64
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.4093.2404 [GMT 2:00]
Lancé depuis: c:\users\ISSAC\Desktop\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\jucheck.exe
c:\windows\SysWow64\jusched.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-05-10 au 2012-06-10 ))))))))))))))))))))))))))))))))))))
.
.
2012-06-10 14:46 . 2012-06-10 14:46 -------- d-----w- c:\users\Invité\AppData\Local\temp
2012-06-10 14:46 . 2012-06-10 14:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-05 15:11 . 2012-06-05 15:11 96376 ----a-w- c:\windows\system32\drivers\SMR250.SYS
2012-06-05 15:10 . 2012-06-05 15:15 -------- d-----w- c:\users\ISSAC\AppData\Local\NPE
2012-06-03 15:25 . 2012-06-03 15:25 174200 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-06-03 15:25 . 2012-06-03 15:25 -------- d-----w- c:\program files\Symantec
2012-06-03 15:24 . 2012-06-05 14:34 -------- d-----w- c:\windows\system32\drivers\N360x64
2012-06-03 15:24 . 2012-06-03 15:24 -------- d-----w- c:\program files (x86)\Norton 360
2012-06-03 15:23 . 2012-06-03 15:23 -------- d-----w- c:\program files (x86)\NortonInstaller
2012-05-31 23:53 . 2012-06-01 00:43 -------- d-----w- c:\program files\CCleaner
2012-05-31 15:40 . 2012-05-31 15:40 -------- d-----w- c:\programdata\WindowsSearch
2012-05-28 23:20 . 2012-05-28 23:20 -------- d-----w- c:\users\ISSAC\AppData\Roaming\Tific
2012-05-28 23:20 . 2012-05-28 23:20 -------- d-----w- c:\users\ISSAC\AppData\Local\Symantec
2012-05-25 17:59 . 2012-05-25 17:59 -------- d-----w- c:\program files (x86)\Oracle
2012-05-25 17:57 . 2012-05-25 17:56 772552 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-05-22 15:52 . 2012-05-22 21:44 -------- d-----w- c:\users\ISSAC\AppData\Roaming\GetRightToGo
2012-05-22 15:17 . 2012-05-22 15:17 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2012-05-22 01:32 . 2012-05-22 01:32 -------- d-----w- c:\users\ISSAC\AppData\Roaming\DriverCure
2012-05-22 01:32 . 2012-05-22 01:32 -------- d-----w- c:\users\ISSAC\AppData\Roaming\SpeedMaxPc
2012-05-22 01:32 . 2012-05-22 01:32 -------- d-----w- c:\program files (x86)\Common Files\SpeedMaxPc
2012-05-22 01:32 . 2012-05-22 01:32 -------- d-----w- c:\programdata\SpeedMaxPc
2012-05-22 01:32 . 2012-05-22 01:32 -------- d-----w- c:\program files (x86)\SpeedMaxPc
2012-05-22 01:25 . 2012-05-22 01:25 -------- d-----w- C:\NVIDIA
2012-05-21 16:15 . 2012-05-21 16:15 -------- d-----w- C:\found.000
2012-05-20 14:10 . 2012-05-20 14:10 -------- d-----w- c:\program files (x86)\Winamax Poker
2012-05-20 14:02 . 2010-08-21 03:59 34152 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-05-12 10:32 . 2012-03-30 12:45 1423744 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-12 10:30 . 2012-04-03 08:22 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-12 10:30 . 2012-04-02 13:59 2766848 ----a-w- c:\windows\system32\win32k.sys
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-10 14:10 . 2012-04-09 08:02 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-10 14:10 . 2011-06-27 13:38 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-25 17:56 . 2011-03-22 22:56 687560 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-05 21:01 . 2012-04-14 07:25 8769696 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-04-11 16:41 . 2012-04-11 16:41 53248 ----a-r- c:\users\YONI\AppData\Roaming\Microsoft\Installer\{12BAA98C-F8DD-4BC9-BBE6-1C8463114197}\ARPPRODUCTICON.exe
2012-04-04 13:56 . 2012-02-13 03:12 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:\windows\SysWow64\GPhotos.scr
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"MobileDocuments"="c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 59240]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-11-25 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2008-06-24 46416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-10 257224]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
Contenu du dossier 'Tâches planifiées'
.
2012-06-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-09 14:10]
.
2012-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-17 11:52]
.
2012-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-17 11:52]
.
2012-06-08 c:\windows\Tasks\HPCeeScheduleForISSAC.job
- c:\program files (x86)\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2008-11-03 19:03]
.
2012-05-22 c:\windows\Tasks\SpeedMaxPc Update3.job
- c:\program files (x86)\Common Files\SpeedMaxPc\UUS3\Update3.exe [2012-05-03 18:32]
.
2012-06-06 c:\windows\Tasks\SpeedMaxPc.job
- c:\program files (x86)\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe [2012-05-16 21:03]
.
2012-06-10 c:\windows\Tasks\User_Feed_Synchronization-{A93B2DD3-18B4-42FC-9F50-25951E79521D}.job
- c:\windows\system32\msfeedssync.exe [2012-04-11 08:09]
.
2012-06-10 c:\windows\Tasks\User_Feed_Synchronization-{ED158AB0-5A8C-48E5-AA26-D69C3E5E08D9}.job
- c:\windows\system32\msfeedssync.exe [2012-04-11 08:09]
.
2012-06-10 c:\windows\Tasks\User_Feed_Synchronization-{F93003A3-F032-4450-8B43-E4DEB505B211}.job
- c:\windows\system32\msfeedssync.exe [2012-04-11 08:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: &Recherche AOL Toolbar - c:\programdata\AOL\ieToolbar\resources\fr-FR\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Rechercher sur le Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
Trusted Zone: video-futur.com
TCP: DhcpNameServer = 192.168.0.254
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-{41B62AD3-5D43-40D1-9D43-F3539C1DB452} - (no file)
WebBrowser-{41B62AD3-5D43-40D1-9D43-F3539C1DB452} - (no file)
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\5.2.1.3\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\5.2.1.3\diMaster.dll\" /prefetch:1"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Autres processus actifs ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Microsoft\BingBar\7.1.364.0\BBSvc.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Norton 360\Engine\5.2.1.3\ccSvcHst.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Norton 360\Engine\5.2.1.3\ccSvcHst.exe
c:\program files (x86)\Microsoft\BingBar\7.1.364.0\SeaPort.exe
.
**************************************************************************
.
Heure de fin: 2012-06-10 16:59:51 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-06-10 14:59
.
Avant-CF: 581 772 361 728 octets libres
Après-CF: 581 609 349 120 octets libres
.
- - End Of File - - 94D3802FC4791A82D3B2B53F1DE72150
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Utilisateur anonyme
10 juin 2012 à 17:20
désinstalle SpeedMaxPc !

tente de réinstaller Norton !

on verra bien ce qu'il en est :D



0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
10 juin 2012 à 18:30
je n arrivais pas a le desinstaller car je n etais pas administrateur mais c bon speedmax est desinstaller et je me suis mis en administrateur

pour info pas de beug au redemarrage je pense sans trop m avancer soit qu on a fini soit qu on est sur la bonne voie lol
0
Utilisateur anonyme
11 juin 2012 à 07:11
bonjour,

ok,

as tu accès à Norton 360 ?


si oui, repassé un coup de Delfix pour désinstaller Combofix !

https://forums.commentcamarche.net/forum/affich-25229268-virus-rundll?full#20

puis passe directement à la mise à jour de norton, puis lance un scan :D





0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
12 juin 2012 à 17:33
bonjour,

j ai bien effectué le delfix qui m'a supprimé combofix.


j ai lancé la mise a jour norton et lancé un scan aussi tout se passe bien mais le probleme d'ouverture d'une autre session invité est toujours le même. dois je mettre toutes les sessions en tant qu'administrateur ? car il me marque :

ie4uinit.exe - erreur d'application

l'application n'a pas réussi à s'initialisé correctement ( 0xc0000022). cliquer sur ok pour arreter l'application...
0
Utilisateur anonyme
12 juin 2012 à 17:42
bonsoir,

aide toi de cette page pour corriger le truc :

http://www.microsoftsafetyscanner.com/fr-be/reparer-erreurs-gratuit-telecharge/ie4uinit.exe.html
0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
13 juin 2012 à 01:06
c'est surement efficace mais il n'existe pas une solution gratuite... c'est 40 €
0
Utilisateur anonyme
13 juin 2012 à 07:08
oupsss !

j'avais pas vu que c'était payant !



en gros, il y a un confli entre deux verrsions de IE sur ton pc !

il faut voir dans la liste des programmes sur ton pc, combien de versions d'internet explorer existe sur ton pc !

quit à les désinstaller, puis les réinstaller depuis le site de Microsoft car tu en auras besoin pour les mises à jour de windows !

pour info, il n'y a que IE qui te donne accès aux mises à jour de windows !


autrement, essaie ceci (je n'ai pas télécharer pour voir si gratuit ou pas ) :

http://www.iobit.com/exedll/ie4uinit-exe.html


0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
13 juin 2012 à 20:23
bonsoir,

desolé de te dire ça mais mon pc a encore une fois les symptomes du nvcpl et plus aucuns logiciels ne fonctionne j'ai meme essayé de faire 2 restauration de systeme a la date ou tu me l avais demandé mais elles ont echouées pourquoi et comment je ne sais pas du tout pourtant j ai juste suivi les directives...

je crois bien que je vais aller m'acheter un disque dur externe pour tout sauvegarder et formater mon disque dur... je crois que c'est la meilleur solution
0
Utilisateur anonyme
13 juin 2012 à 20:55
tu as du lire en haut de ce message :
https://forums.commentcamarche.net/forum/affich-25229268-virus-rundll#8

je te l'ai bien expliqué pourtant !

le point retours est très difficiel,

maintenant, il fat voir si ton pc est un pc de marque et éventuellement lancer une répartion de système, ou lancer une répartion avec un DVD de windows !




0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
14 juin 2012 à 01:42
bonsoir,

voici le "nouveau" zhpdiag...

Rapport de ZHPDiag v1.31.095 par Nicolas Coolman, Update du 24/05/2012
Run by YONI at 14/06/2012 01:37:56
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.


---\\ Web Browser
MSIE: Internet Explorer v

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 64-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: AMD64 Family 15 Model 107 Stepping 2, AuthenticAMD
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4093 MB (67% free)
System Restore: Inconnu (Unknown)
System drive C: has 545 GB (59%) free of 918 GB

---\\ Logged in mode
~ Computer Name: PC-DE-ISAAC
~ User Name: YONI
~ All Users Names: YONI, ISSAC, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\YONI\AppData\Roaming\
~ %Desktop% : C:\Users\YONI\Desktop\
~ %Favorites% : C:\Users\YONI\Favorites\
~ %LocalAppData% : C:\Users\YONI\AppData\Local\
~ %StartMenu% : C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 545 Go of 918 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 14 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.6B08E54A451B3F95E4109DBA7E594270] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 08:10:17.) -- C:\WINDOWS\Explorer.exe [3079168]
[MD5.117EA87DF785CA1B9D821F6F213DCE07] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:50:23.) -- C:\WINDOWS\System32\Wininit.exe [123904]
[MD5.96070413E0F9620565BB06A0C4CC976E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/02/2012 - 07:34:19.) -- C:\WINDOWS\System32\wininet.dll [1147392]
[MD5.6D0773A3A65D28B663F334C90441D01A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 08:11:08.) -- C:\WINDOWS\System32\Winlogon.exe [405504]
[MD5.C4F6CE6087760AD70960C9EB130E7943] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.03/01/2012 - 15:25:21.) -- C:\WINDOWS\system32\Drivers\AFD.sys [404992]
[MD5.E68D9B3A3905619732F7FE039466A623] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 08:15:00.) -- C:\WINDOWS\system32\Drivers\atapi.sys [20952]
[MD5.B4D787DB8D30793A4D4DF9FEED18F136] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:50:39.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [90624]
[MD5.C025AA69BE3D0D25C7A2E746EF6F94FC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 06:34:39.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [79872]
[MD5.8B722BA35205C71E7951CDC4CDBADE19] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 16:14:19.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [97792]
[MD5.F942C5820205F2FB453243EDFEC82A3D] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 06:39:41.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [948736]
[MD5.CBB597659A2713CE0C9CC20C88C7591F] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:46:59.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [64000]
[MD5.B7E6212F581EA5F6AB0C3A6CEEEB89BE] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:48:45.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [115712]
[MD5.1485811B320FF8C7EDAD1CAEBB1C6C2B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:39:34.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [135680]
[MD5.FC2C792EBDDC8E28DF939D6A92C83D61] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 06:42:33.) -- C:\WINDOWS\system32\Drivers\netBT.sys [248320]
[MD5.BAC869DFB98E499BA4D9BB1FB43270E1] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 08:15:34.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [1515496]
[MD5.AECD57F94C887F58919F307C35498EA0] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 10:37:57.) -- C:\WINDOWS\system32\Drivers\Parport.sys [96768]
[MD5.AC7BC4D42A7E558718DFDEC599BBFC2C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.11/04/2009 - 06:43:38.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [124928]
[MD5.C045D1FB111C28DF0D1BE8D4BDA22C06] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:46:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [314368]
[MD5.290B6F6A0EC4FCDFC90F5CB6D7020473] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 06:42:19.) -- C:\WINDOWS\system32\Drivers\smb.sys [88064]
[MD5.458919C8C42E398DC4802178D5FFEE27] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 06:43:00.) -- C:\WINDOWS\system32\Drivers\tdx.sys [94720]
[MD5.5280AADA24AB36B01A84A6424C475C8D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 08:15:45.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [269288]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/151
~ Mes musiques (My Musics) : 1/668
~ Mes Videos (My Videos) : 1/14
~ Mes Favoris (My Favorites) : 1/20
~ Mes Documents (My Documents) : 1/620
~ Mon Bureau (My Desktop) : 0/1914
~ Menu demarrer (Programs) : 0/28
~ Scan Hidden Files in 00mn 02s



---\\ Processus lancés
[MD5.9A4322EE420D6FACD4D4B1FF6CB856B1] - (.Hewlett-Packard Company - hpsysdrv.) -- C:\hp\support\hpsysdrv.exe [65536] [PID.2612]
[MD5.7088B136BB58A5F95CF0DE8386CA6C0F] - (...) -- C:\hp\KBD\KbdStub.exe [65536] [PID.2620]
[MD5.00A346CE3D3701EA085E87EEF746A74A] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [638240] [PID.2948]
[MD5.CC926B0811C3FA2363C98711410FEF24] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [4540928] [PID.3888]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\SysWOW64\conime.exe [69120] [PID.3148]
~ Scan Processes Running in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Interpréteur de commandes Windows.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk . (.CyberLink.) -- C:\Program Files (x86)\CyberLink\DVD Suite Deluxe\PowerStarter.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\YONI\Desktop\Fichiers d'installation Norton.lnk . (...) -- C:\Users\Public\Downloads\Norton\{N360621005-SHPD-FSD25037}
O4 - Global Startup: C:\Users\YONI\Desktop\FREEBOX - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\YONI\Desktop\Winamax Poker.lnk . (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe
O4 - Global Startup: C:\Users\YONI\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk - Clé orpheline
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk . (.CyberLink.) -- C:\Program Files (x86)\CyberLink\DVD Suite Deluxe\PowerStarter.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Fichiers d'installation Norton.lnk . (...) -- C:\Users\Public\Downloads\Norton\{NIS1950145-SHPD-FSD25037}
O4 - Global Startup: C:\Users\ISSAC\Desktop\FILMS DE FAMILLE - Raccourci.lnk . (...) -- C:\FILMS DE FAMILLE
O4 - Global Startup: C:\Users\ISSAC\Desktop\Launch Internet Explorer Browser (2).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Microsoft Excel.lnk . (...) -- C:\Windows\Installer\{0002040C-78E1-11D2-B60F-006097C998E7}\xlicons.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Microsoft Word.lnk . (...) -- C:\Windows\Installer\{0002040C-78E1-11D2-B60F-006097C998E7}\wordicon.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{6D172D0A-B9F1-4046-AFAB-8599288545BF}\SafariIco.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: &Recherche AOL Toolbar . (...) -- C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - (.not file.) - C:\Windows\system32\GPhotos.scr
O8 - Extra context menu item: Search the Web - (.not file.) - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\img24.jpg
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\img24.jpg
~ Scan Desktop Component in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HPCeeScheduleForISSAC.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{A93B2DD3-18B4-42FC-9F50-25951E79521D}.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{ED158AB0-5A8C-48E5-AA26-D69C3E5E08D9}.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{F93003A3-F032-4450-8B43-E4DEB505B211}.job
[MD5.00000000000000000000000000000000] [APT] [Norton Error Analyzer] (...) -- C:\Program Files (x86)\Norton Management\Engine\2.1.2.13\SymErr.exe (.not file.)
~ Scan Scheduled Task in 00mn 01s



---\\ Composants installés (ActiveSetup Installed Components) (O40) (None)

---\\ Logiciels installés (O42)
O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU] -- {79A765E1-C399-405B-85AF-466F52E918B0}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AOL]
[HKCU\Software\APN]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\AppDataLow\Software\I Want This]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Binary Noise]
[HKCU\Software\CanonBJ]
[HKCU\Software\CheckPrixaXPSToPDF]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallCore]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OfferBox]
[HKCU\Software\Perfect Software]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Research In Motion]
[HKCU\Software\SweetIM]
[HKCU\Software\Symantec]
[HKCU\Software\SysInternals]
[HKCU\Software\WinRAR]
[HKCU\Software\WinZip Computing]
[HKCU\Software\Wow6432Node]
[HKCU\Software\muvee Technologies]
[HKCU\Software\videofutur]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 02/04/2012 - 13:28:18 - [113,566] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 03/11/2008 - 22:34:17 - [2,821] ----D C:\Program Files (x86)\AOL
O43 - CFD: 21/07/2011 - 16:55:26 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 05/01/2012 - 01:40:01 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 02/04/2012 - 13:33:55 - [0,708] ----D C:\Program Files (x86)\CheckPrixaXPSToPDF
O43 - CFD: 21/04/2011 - 11:10:28 - [47,660] ----D C:\Program Files (x86)\ClickImpots plus SCI 2005
O43 - CFD: 10/06/2012 - 17:36:51 - [800,232] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 03/11/2008 - 22:21:57 - [700,953] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 16/02/2012 - 17:19:21 - [379,021] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/05/2012 - 17:57:34 - [22,539] ----D C:\Program Files (x86)\Grisbi 0.6.0 release
O43 - CFD: 03/11/2008 - 22:33:55 - [117,668] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 03/11/2008 - 22:24:38 - [58,142] ----D C:\Program Files (x86)\HP
O43 - CFD: 03/11/2008 - 22:33:06 - [294,652] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 21/04/2011 - 11:10:19 - [59,325] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 13/04/2012 - 04:06:59 - [5,586] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 10/04/2012 - 18:08:42 - [120,831] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 25/05/2012 - 19:56:40 - [210,684] ----D C:\Program Files (x86)\Java
O43 - CFD: 13/06/2012 - 02:28:54 - [11,563] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 13/06/2012 - 02:28:54 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 06/04/2011 - 17:41:37 - [139,549] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 13/05/2012 - 14:15:53 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 03/04/2011 - 18:29:12 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 23/03/2011 - 01:20:22 - [137,975] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 22/03/2011 - 04:01:42 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 02/11/2006 - 17:07:27 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 03/11/2008 - 22:22:36 - [148,175] ----D C:\Program Files (x86)\muvee Technologies
O43 - CFD: 07/11/2011 - 19:11:55 - [5,972] ----D C:\Program Files (x86)\MyTorrentClient
O43 - CFD: 17/03/2011 - 13:15:36 - [3,183] R--AD C:\Program Files (x86)\Online Services
O43 - CFD: 25/05/2012 - 19:59:04 - [33,186] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 03/11/2008 - 22:28:20 - [90,664] ----D C:\Program Files (x86)\PC-Doctor for Windows
O43 - CFD: 05/01/2012 - 01:43:32 - [72,431] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 03/11/2008 - 22:09:20 - [56,411] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 02/11/2006 - 17:07:27 - [36,902] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 11/04/2012 - 18:35:28 - [99,831] ----D C:\Program Files (x86)\Research In Motion
O43 - CFD: 10/04/2012 - 18:11:34 - [102,601] ----D C:\Program Files (x86)\Safari
O43 - CFD: 05/11/2011 - 21:41:12 - [10,338] ----D C:\Program Files (x86)\Sling Media
O43 - CFD: 02/11/2006 - 17:36:07 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 12/06/2012 - 17:54:36 - [9,019] ----D C:\Program Files (x86)\UniOptimizer
O43 - CFD: 20/11/2011 - 16:53:41 - [88,799] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 13/05/2011 - 20:21:46 - [1,074] ----D C:\Program Files (x86)\Vidéo Futur
O43 - CFD: 20/05/2012 - 16:10:27 - [7,053] ----D C:\Program Files (x86)\Winamax Poker
O43 - CFD: 03/04/2011 - 17:22:46 - [0,970] ----D C:\Program Files (x86)\Windows Calendar
O43 - CFD: 21/01/2008 - 05:09:47 - [0,051] ----D C:\Program Files (x86)\Windows Collaboration
O43 - CFD: 04/11/2008 - 06:10:45 - [0,481] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 13/06/2012 - 03:01:05 - [178,078] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 13/04/2012 - 04:06:59 - [8,522] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 03/04/2011 - 17:22:46 - [2,874] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 02/11/2006 - 17:07:27 - [7,589] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 03/04/2011 - 17:22:45 - [12,902] ----D C:\Program Files (x86)\Windows Photo Gallery
O43 - CFD: 03/04/2011 - 18:08:37 - [0,128] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 03/04/2011 - 17:22:46 - [6,618] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 07/02/2012 - 02:38:30 - [4,008] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 11/11/2011 - 02:47:58 - [35,939] ----D C:\Program Files (x86)\WinZip
O43 - CFD: 14/06/2012 - 01:35:52 - [13,541] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 02/04/2012 - 13:28:22 - [3,652] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 30/03/2012 - 01:02:23 - [38,049] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 10/04/2012 - 18:08:03 - [142,033] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 06/04/2011 - 17:43:33 - [0,082] ----D C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 13/05/2011 - 20:21:46 - [0,086] ----D C:\Program Files (x86)\Common Files\Glowria
O43 - CFD: 03/11/2008 - 22:23:40 - [3,752] ----D C:\Program Files (x86)\Common Files\HP
O43 - CFD: 03/11/2008 - 22:12:23 - [4,903] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 13/06/2012 - 02:28:51 - [33,515] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 03/11/2008 - 22:22:19 - [28,726] ---AD C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 03/11/2008 - 22:22:06 - [0,054] ---AD C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 28/08/2011 - 16:37:07 - [273,943] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 03/11/2008 - 22:22:36 - [48,020] ----D C:\Program Files (x86)\Common Files\muvee Technologies
O43 - CFD: 11/04/2012 - 00:38:21 - [161,162] ----D C:\Program Files (x86)\Common Files\Research In Motion
O43 - CFD: 02/11/2006 - 15:33:53 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 02/11/2006 - 15:33:53 - [39,198] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 13/06/2012 - 03:21:12 - [4,315] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 09/11/2011 - 04:03:38 - [18,740] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 17/03/2011 - 18:17:11 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 05/04/2012 - 14:38:04 - [152,593] ----D C:\ProgramData\Adobe
O43 - CFD: 03/11/2008 - 22:34:17 - [13,001] ----D C:\ProgramData\AOL
O43 - CFD: 21/07/2011 - 16:55:04 - [141,357] ----D C:\ProgramData\Apple
O43 - CFD: 21/07/2011 - 16:58:20 - [145,093] ----D C:\ProgramData\Apple Computer
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Application Data
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Bureau
O43 - CFD: 20/03/2011 - 13:49:20 - [0,152] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 16/02/2012 - 11:01:55 - [0,009] ----D C:\ProgramData\CyberLink
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Documents
O43 - CFD: 23/11/2011 - 22:13:19 - [2,520] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Favoris
O43 - CFD: 25/11/2011 - 15:43:11 - [0,514] ----D C:\ProgramData\Google
O43 - CFD: 17/03/2011 - 13:08:05 - [61,969] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 03/11/2008 - 22:23:40 - [0,051] ----D C:\ProgramData\HP
O43 - CFD: 13/02/2012 - 05:12:18 - [7,875] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Menu Démarrer
O43 - CFD: 12/06/2012 - 18:23:57 - [17,059] -S--D C:\ProgramData\Microsoft
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Modèles
O43 - CFD: 03/11/2008 - 22:22:33 - [0] ----D C:\ProgramData\muvee Technologies
O43 - CFD: 13/06/2012 - 03:48:50 - [29,286] ----D C:\ProgramData\Norton
O43 - CFD: 03/06/2012 - 17:24:00 - [105,983] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 03/04/2011 - 17:42:54 - [0,179] ----D C:\ProgramData\NVIDIA
O43 - CFD: 03/11/2008 - 22:28:19 - [0,001] ----D C:\ProgramData\PC-Doctor
O43 - CFD: 03/11/2008 - 22:28:19 - [1,911] ----D C:\ProgramData\PC-Doctor for Windows
O43 - CFD: 20/02/2012 - 01:56:29 - [0,000] ----D C:\ProgramData\PCSettings
O43 - CFD: 11/04/2012 - 18:35:50 - [0,054] ----D C:\ProgramData\Research In Motion
O43 - CFD: 10/06/2012 - 17:36:51 - [0] ----D C:\ProgramData\SpeedMaxPc
O43 - CFD: 23/03/2011 - 00:56:48 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 20/02/2012 - 02:02:40 - [0] ----D C:\ProgramData\Symantec
O43 - CFD: 07/05/2012 - 22:22:19 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 26/09/2011 - 04:41:06 - [1342,379] ----D C:\ProgramData\WildTangent
O43 - CFD: 31/05/2012 - 17:40:47 - [0] ----D C:\ProgramData\WindowsSearch
O43 - CFD: 11/11/2011 - 02:49:47 - [0,000] ----D C:\ProgramData\WinZip
O43 - CFD: 21/07/2011 - 16:59:00 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 09/04/2012 - 13:43:24 - [22,374] ----D C:\Users\YONI\AppData\Roaming\Adobe
O43 - CFD: 05/01/2012 - 02:44:51 - [1,351] ----D C:\Users\YONI\AppData\Roaming\Apple Computer
O43 - CFD: 11/04/2012 - 19:13:35 - [0] ----D C:\Users\YONI\AppData\Roaming\Blackberry Desktop
O43 - CFD: 22/03/2012 - 23:13:49 - [0] ----D C:\Users\YONI\AppData\Roaming\CyberLink
O43 - CFD: 02/02/2012 - 21:19:28 - [0] ----D C:\Users\YONI\AppData\Roaming\Google
O43 - CFD: 09/05/2012 - 18:46:50 - [0,004] ----D C:\Users\YONI\AppData\Roaming\Grisbi
O43 - CFD: 09/05/2012 - 18:06:54 - [0,000] ----D C:\Users\YONI\AppData\Roaming\gtk-2.0
O43 - CFD: 23/03/2011 - 00:49:33 - [0,415] ----D C:\Users\YONI\AppData\Roaming\Hewlett-Packard
O43 - CFD: 23/03/2011 - 00:47:41 - [0] ----D C:\Users\YONI\AppData\Roaming\Identities
O43 - CFD: 23/03/2011 - 00:55:18 - [0,054] ----D C:\Users\YONI\AppData\Roaming\Macromedia
O43 - CFD: 09/03/2012 - 10:28:10 - [1,070] ----D C:\Users\YONI\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 17:07:25 - [0] ----D C:\Users\YONI\AppData\Roaming\Media Center Programs
O43 - CFD: 12/06/2012 - 18:23:45 - [16,919] -S--D C:\Users\YONI\AppData\Roaming\Microsoft
O43 - CFD: 20/04/2012 - 18:38:38 - [0,005] ----D C:\Users\YONI\AppData\Roaming\muvee Technologies
O43 - CFD: 09/05/2012 - 17:48:22 - [0,000] ----D C:\Users\YONI\AppData\Roaming\PlayerPlug
O43 - CFD: 09/05/2012 - 17:48:22 - [0,011] ----D C:\Users\YONI\AppData\Roaming\PropMgrAsync
O43 - CFD: 11/04/2012 - 18:38:07 - [4,745] ----D C:\Users\YONI\AppData\Roaming\Research In Motion
O43 - CFD: 23/03/2011 - 00:48:34 - [0] ----D C:\Users\YONI\AppData\Roaming\Symantec
O43 - CFD: 13/06/2012 - 02:28:48 - [0,077] ----D C:\Users\YONI\AppData\Roaming\vlc
O43 - CFD: 24/05/2011 - 18:09:07 - [3,581] ----D C:\Users\YONI\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 22/03/2012 - 22:38:21 - [0,001] ----D C:\Users\YONI\AppData\Roaming\WildTangent
O43 - CFD: 07/02/2012 - 02:38:49 - [0,000] ----D C:\Users\YONI\AppData\Roaming\WinRAR
O43 - CFD: 24/05/2011 - 18:08:22 - [15,541] ----D C:\Users\YONI\AppData\Local\Adobe
O43 - CFD: 23/03/2011 - 00:49:08 - [0,014] ----D C:\Users\YONI\AppData\Local\AOL
O43 - CFD: 27/07/2011 - 01:28:44 - [0] ----D C:\Users\YONI\AppData\Local\Apple
O43 - CFD: 15/02/2012 - 02:10:52 - [17,678] ----D C:\Users\YONI\AppData\Local\Apple Computer
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Application Data
O43 - CFD: 11/04/2012 - 18:39:59 - [24,622] ----D C:\Users\YONI\AppData\Local\Downloaded Installations
O43 - CFD: 13/05/2011 - 20:22:07 - [0,001] ----D C:\Users\YONI\AppData\Local\Glowria
O43 - CFD: 20/04/2012 - 18:40:40 - [384,971] ----D C:\Users\YONI\AppData\Local\Google
O43 - CFD: 23/03/2011 - 00:49:36 - [0,001] ----D C:\Users\YONI\AppData\Local\Hewlett-Packard
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Historique
O43 - CFD: 20/04/2012 - 18:40:04 - [0,433] ----D C:\Users\YONI\AppData\Local\HP
O43 - CFD: 12/06/2012 - 18:23:56 - [224,359] ----D C:\Users\YONI\AppData\Local\Microsoft
O43 - CFD: 14/03/2012 - 16:24:51 - [0,159] ----D C:\Users\YONI\AppData\Local\Microsoft Games
O43 - CFD: 11/04/2012 - 18:28:58 - [1,452] ----D C:\Users\YONI\AppData\Local\Research In Motion
O43 - CFD: 14/06/2012 - 01:37:41 - [0,327] ----D C:\Users\YONI\AppData\Local\temp
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Temporary Internet Files
O43 - CFD: 20/04/2012 - 18:52:13 - [0,117] ----D C:\Users\YONI\AppData\Local\VirtualStore
O43 - CFD: 12/06/2012 - 18:06:14 - [0,109] ----D C:\Users\YONI\AppData\Local\Windows Live
O43 - CFD: 30/07/2011 - 08:54:26 - [0] ----D C:\Users\YONI\AppData\Local\{002F388D-39A9-42CC-9B8A-7461C6CC7027}
O43 - CFD: 04/10/2011 - 18:06:30 - [0] ----D C:\Users\YONI\AppData\Local\{005C8A22-423F-48D4-BF22-1F477A118EA5}
O43 - CFD: 14/04/2012 - 22:17:41 - [0] ----D C:\Users\YONI\AppData\Local\{0076639F-6215-4BEA-AF3D-A30ACCE08377}
O43 - CFD: 08/12/2011 - 18:23:38 - [0] ----D C:\Users\YONI\AppData\Local\{008493D3-2F3E-479C-A6CB-0CABE762AB3B}
O43 - CFD: 05/01/2012 - 01:17:27 - [0] ----D C:\Users\YONI\AppData\Local\{00E91E28-6B98-4BA0-AE71-67C90440F259}
O43 - CFD: 16/02/2012 - 01:42:32 - [0] ----D C:\Users\YONI\AppData\Local\{0281C663-2C11-422F-A8BF-1DCBBB2870A0}
O43 - CFD: 21/04/2011 - 14:17:30 - [0] ----D C:\Users\YONI\AppData\Local\{0298C48E-14B4-4BCF-84A1-FF9F33AA7C30}
O43 - CFD: 06/09/2011 - 00:22:52 - [0] ----D C:\Users\YONI\AppData\Local\{02D23D1C-DB59-4B25-8C51-D4EE3F6B2FF1}
O43 - CFD: 10/05/2011 - 01:30:19 - [0] ----D C:\Users\YONI\AppData\Local\{037A77ED-F1D4-4DE6-B8CE-051E8ADF6263}
O43 - CFD: 10/05/2012 - 17:28:56 - [0] ----D C:\Users\YONI\AppData\Local\{0399B061-DFCB-49C1-AFF4-AF5EB0527DDF}
O43 - CFD: 30/01/2012 - 02:19:59 - [0] ----D C:\Users\YONI\AppData\Local\{03C6199B-4051-478A-8394-601B52969F3D}
O43 - CFD: 19/09/2011 - 11:19:57 - [0] ----D C:\Users\YONI\AppData\Local\{03DE8561-1723-4809-8FDA-1AD1E77D88CC}
O43 - CFD: 13/09/2011 - 01:06:26 - [0] ----D C:\Users\YONI\AppData\Local\{03EFA421-CA88-4DC7-B562-BF3FC9A51F5F}
O43 - CFD: 24/04/2011 - 20:07:09 - [0] ----D C:\Users\YONI\AppData\Local\{0466C412-2192-49E7-B0C1-2ACB84196CA1}
O43 - CFD: 15/06/2011 - 08:46:59 - [0] ----D C:\Users\YONI\AppData\Local\{04DE7713-9B0A-4931-9134-5F32F530E119}
O43 - CFD: 22/03/2012 - 08:27:14 - [0] ----D C:\Users\YONI\AppData\Local\{05E4E891-9BC3-4ADC-A66D-CCB66DB393D9}
O43 - CFD: 19/07/2011 - 09:42:20 - [0] ----D C:\Users\YONI\AppData\Local\{06773933-4DB1-4CA8-95EB-67885FE35F10}
O43 - CFD: 11/11/2011 - 02:59:25 - [0] ----D C:\Users\YONI\AppData\Local\{06E38B9A-FA36-46D9-99CA-CF6C7CA4588E}
O43 - CFD: 25/08/2011 - 15:50:53 - [0] ----D C:\Users\YONI\AppData\Local\{07F5D4D4-F506-418F-95C3-FD3BDFBC538E}
O43 - CFD: 15/05/2012 - 16:30:11 - [0] ----D C:\Users\YONI\AppData\Local\{08007AB0-0D65-43CF-AB2D-769969215DD5}
O43 - CFD: 20/04/2011 - 23:02:15 - [0] ----D C:\Users\YONI\AppData\Local\{0B0E28DC-6573-49C3-8867-A492F4EB06A1}
O43 - CFD: 06/10/2011 - 09:51:35 - [0] ----D C:\Users\YONI\AppData\Local\{0B1CC075-9EB1-45C1-BE69-DCA2EAC88D53}
O43 - CFD: 18/11/2011 - 02:44:21 - [0] ----D C:\Users\YONI\AppData\Local\{0CED1E75-23F6-464B-A378-CAB1EC889EF0}
O43 - CFD: 28/03/2012 - 23:52:04 - [0] ----D C:\Users\YONI\AppData\Local\{0F3B5192-91FD-4E5F-9ABD-E5FFDA2324C4}
O43 - CFD: 19/04/2012 - 15:40:09 - [0] ----D C:\Users\YONI\AppData\Local\{0FE88635-2641-45BF-AD88-CDF1102A07E3}
O43 - CFD: 13/06/2011 - 17:01:53 - [0] ----D C:\Users\YONI\AppData\Local\{105E33B3-B4DA-4A71-B13E-6F1F6566CEBF}
O43 - CFD: 23/01/2012 - 17:22:48 - [0] ----D C:\Users\YONI\AppData\Local\{112F27F3-8D62-4496-AEB4-765507FFBE96}
O43 - CFD: 03/01/2012 - 01:41:56 - [0] ----D C:\Users\YONI\AppData\Local\{11EDACDB-CB09-4FE0-9F6D-59CC8CC7E6D9}
O43 - CFD: 13/02/2012 - 18:37:27 - [0] ----D C:\Users\YONI\AppData\Local\{12657991-F60F-41C8-BDC9-620836523950}
O43 - CFD: 31/07/2011 - 03:24:38 - [0] ----D C:\Users\YONI\AppData\Local\{126C2C6A-CD07-4800-A60F-1B048BA53594}
O43 - CFD: 07/04/2011 - 17:14:22 - [0] ----D C:\Users\YONI\AppData\Local\{1544AD41-2B81-4D2F-AE75-86ED2A02DACF}
O43 - CFD: 17/11/2011 - 14:44:07 - [0] ----D C:\Users\YONI\AppData\Local\{15B8A955-C974-48F6-8427-42F3E7DF53EC}
O43 - CFD: 27/05/2011 - 19:54:58 - [0] ----D C:\Users\YONI\AppData\Local\{16DCFAE0-CB85-416F-B270-8F58D0D34A13}
O43 - CFD: 21/03/2012 - 17:16:00 - [0] ----D C:\Users\YONI\AppData\Local\{1789BB84-071A-4F23-ABB1-04524DFB481B}
O43 - CFD: 29/05/2011 - 17:14:25 - [0] ----D C:\Users\YONI\AppData\Local\{1A1FC443-706C-4721-8FF9-460D949267DF}
O43 - CFD: 16/01/2012 - 18:00:25 - [0] ----D C:\Users\YONI\AppData\Local\{1A807703-0E44-4F5A-8CC9-F6F0F50DFBCF}
O43 - CFD: 11/01/2012 - 10:17:53 - [0] ----D C:\Users\YONI\AppData\Local\{1AAB919C-7BC6-45A3-B458-F2E1E56F1BD3}
O43 - CFD: 15/01/2012 - 17:09:34 - [0] ----D C:\Users\YONI\AppData\Local\{1C23E195-9532-47D8-9D10-7BD2984B5051}
O43 - CFD: 18/10/2011 - 02:53:07 - [0] ----D C:\Users\YONI\AppData\Local\{1DFDFD46-EE06-49A1-87A6-CC7D5CD49925}
O43 - CFD: 23/11/2011 - 20:21:15 - [0] ----D C:\Users\YONI\AppData\Local\{1F49C9A2-28D5-4AFB-9FFE-D62FD354D315}
O43 - CFD: 15/10/2011 - 21:38:19 - [0] ----D C:\Users\YONI\AppData\Local\{1F711170-265D-4DB7-BE8D-6CB0A696A1D7}
O43 - CFD: 05/01/2012 - 01:17:17 - [0] ----D C:\Users\YONI\AppData\Local\{200B689B-032D-43A2-8AE0-3A208D13A3C4}
O43 - CFD: 09/01/2012 - 02:17:36 - [0] ----D C:\Users\YONI\AppData\Local\{20824267-4191-4A7D-8E14-737154AAC293}
O43 - CFD: 13/09/2011 - 18:00:14 - [0] ----D C:\Users\YONI\AppData\Local\{217DB7CD-9B65-4030-8F43-4223B818E272}
O43 - CFD: 19/12/2011 - 01:57:39 - [0] ----D C:\Users\YONI\AppData\Local\{23988438-8241-4480-8E0D-1C6D1469D394}
O43 - CFD: 28/11/2011 - 01:30:31 - [0] ----D C:\Users\YONI\AppData\Local\{24D99163-C151-40E9-9769-03BC3166FC55}
O43 - CFD: 18/09/2011 - 19:31:39 - [0] ----D C:\Users\YONI\AppData\Local\{24FCAC58-01F3-4774-A1A9-31BE779FD2E8}
O43 - CFD: 19/03/2012 - 18:58:08 - [0] ----D C:\Users\YONI\AppData\Local\{2572881C-4734-45E2-B405-0617D553CC03}
O43 - CFD: 09/06/2011 - 23:38:34 - [0] ----D C:\Users\YONI\AppData\Local\{25BD4377-2D7F-499D-BE11-BBD3EF5C577F}
O43 - CFD: 20/12/2011 - 17:06:21 - [0] ----D C:\Users\YONI\AppData\Local\{266CB74F-A245-4B23-AC54-B08506D6888F}
O43 - CFD: 14/11/2011 - 17:55:09 - [0] ----D C:\Users\YONI\AppData\Local\{26F0A36D-01B0-464D-8615-F86E2ECB011D}
O43 - CFD: 22/06/2011 - 18:00:06 - [0] ----D C:\Users\YONI\AppData\Local\{2741C136-47A1-4C63-8282-D21DACD661D1}
O43 - CFD: 01/05/2011 - 17:19:15 - [0] ----D C:\Users\YONI\AppData\Local\{280FDA4B-950F-498E-90A8-1FD9D88D8CE0}
O43 - CFD: 30/04/2011 - 22:26:18 - [0] ----D C:\Users\YONI\AppData\Local\{287F5096-641F-4B52-987C-A4F2F8A4849F}
O43 - CFD: 05/02/2012 - 19:05:29 - [0] ----D C:\Users\YONI\AppData\Local\{28BCF7D1-0D79-4EC8-8EB8-3EB2B7859184}
O43 - CFD: 10/09/2011 - 21:25:15 - [0] ----D C:\Users\YONI\AppData\Local\{29FB1B1D-45EB-4973-A778-8104D80D351B}
O43 - CFD: 26/06/2011 - 16:18:06 - [0] ----D C:\Users\YONI\AppData\Local\{2B35AC2A-1122-4819-9BB5-2EC105E1E587}
O43 - CFD: 11/01/2012 - 10:17:42 - [0] ----D C:\Users\YONI\AppData\Local\{2C7FFF09-0942-4699-A52C-F9A2631B7435}
O43 - CFD: 10/05/2012 - 17:29:07 - [0] ----D C:\Users\YONI\AppData\Local\{2D9C995B-756F-4C67-BBD5-4CF553E8BF76}
O43 - CFD: 02/12/2011 - 17:23:17 - [0] ----D C:\Users\YONI\AppData\Local\{312E882B-1AB5-487B-AE1B-3D4851A11D8E}
O43 - CFD: 24/04/2012 - 16:31:52 - [0] ----D C:\Users\YONI\AppData\Local\{3174483E-C469-458E-9F8D-C2C3EF259092}
O43 - CFD: 25/11/2011 - 02:19:57 - [0] ----D C:\Users\YONI\AppData\Local\{322CF943-E2B3-4192-BD1D-05A0C52051BE}
O43 - CFD: 03/10/2011 - 01:58:47 - [0] ----D C:\Users\YONI\AppData\Local\{33B5DC5D-BC19-4213-A052-C52324717197}
O43 - CFD: 30/12/2011 - 01:49:27 - [0] ----D C:\Users\YONI\AppData\Local\{341F5019-96EE-453C-AB26-6C49D9CB796D}
O43 - CFD: 03/02/2012 - 18:01:14 - [0] ----D C:\Users\YONI\AppData\Local\{3467AE56-C94F-4D27-AEDE-28E092C71454}
O43 - CFD: 21/07/2011 - 16:38:32 - [0] ----D C:\Users\YONI\AppData\Local\{348A7965-6791-4C11-BEC2-DF3915D42F0D}
O43 - CFD: 25/11/2011 - 02:20:07 - [0] ----D C:\Users\YONI\AppData\Local\{37973C09-AD48-427C-872E-CADC559A539C}
O43 - CFD: 18/11/2011 - 14:43:56 - [0] ----D C:\Users\YONI\AppData\Local\{37C87687-11AF-4305-9406-3554BE7CFDED}
O43 - CFD: 10/07/2011 - 16:12:56 - [0] ----D C:\Users\YONI\AppData\Local\{3A3C3BBB-CC82-426D-8A29-2F2A536E294D}
O43 - CFD: 14/11/2011 - 17:55:19 - [0] ----D C:\Users\YONI\AppData\Local\{3AB5053C-3D24-4022-948F-DE27112F418A}
O43 - CFD: 24/10/2011 - 16:04:53 - [0] ----D C:\Users\YONI\AppData\Local\{3AF40082-F6AF-4CA9-A652-74D088D5B2A4}
O43 - CFD: 13/02/2012 - 18:37:17 - [0] ----D C:\Users\YONI\AppData\Local\{3C906B76-C609-4F54-A5B7-843F3547CF19}
O43 - CFD: 08/11/2011 - 16:52:32 - [0] ----D C:\Users\YONI\AppData\Local\{3CC05162-6CF9-4711-A6FA-7A0F52352B69}
O43 - CFD: 13/07/2011 - 19:20:53 - [0] ----D C:\Users\YONI\AppData\Local\{3DD86559-B226-41E6-8D78-78C472D892C9}
O43 - CFD: 31/01/2012 - 00:34:35 - [0] ----D C:\Users\YONI\AppData\Local\{41335F4A-EB22-46FD-99C9-D6671D396363}
O43 - CFD: 12/02/2012 - 19:12:48 - [0] ----D C:\Users\YONI\AppData\Local\{41405D68-5416-4A3B-96E1-C2401CE5C766}
O43 - CFD: 28/03/2012 - 23:52:14 - [0] ----D C:\Users\YONI\AppData\Local\{41BA2E2C-2FAD-441C-85A7-F0CC8D888DA1}
O43 - CFD: 20/06/2011 - 23:51:11 - [0] ----D C:\Users\YONI\AppData\Local\{41E0E94E-8D15-4ED0-880A-0149F0044373}
O43 - CFD: 02/04/2012 - 01:08:35 - [0] ----D C:\Users\YONI\AppData\Local\{42B5A999-116C-411F-9F05-58CD8D2C3D92}
O43 - CFD: 09/11/2011 - 17:51:23 - [0] ----D C:\Users\YONI\AppData\Local\{42CA7F99-AD1E-46E8-9638-C12BED756524}
O43 - CFD: 12/01/2012 - 01:53:53 - [0] ----D C:\Users\YONI\AppData\Local\{434AFF2E-3FAE-41EA-B0C3-ED1E5CB0A3BB}
O43 - CFD: 12/06/2012 - 16:46:13 - [0] ----D C:\Users\YONI\AppData\Local\{441AEBC6-5768-4DD3-B9B2-6299441E9EB1}
O43 - CFD: 13/05/2012 - 16:57:57 - [0] ----D C:\Users\YONI\AppData\Local\{46BE29F2-F937-4E64-BE2D-E8BECBBBD9F2}
O43 - CFD: 13/12/2011 - 01:27:47 - [0] ----D C:\Users\YONI\AppData\Local\{481B6E35-45D7-4F3D-BAE0-5B828A0C6099}
O43 - CFD: 22/10/2011 - 20:28:02 - [0] ----D C:\Users\YONI\AppData\Local\{49C67A21-D327-47E8-AE07-E29BF55F3D55}
O43 - CFD: 18/10/2011 - 02:52:44 - [0] ----D C:\Users\YONI\AppData\Local\{49DC5BD9-5BC9-4802-92C5-806AB96AE44E}
O43 - CFD: 28/06/2011 - 06:55:54 - [0] ----D C:\Users\YONI\AppData\Local\{4A05DBFC-DC22-445D-BD8E-7666A68EEE6F}
O43 - CFD: 09/04/2012 - 14:09:03 - [0] ----D C:\Users\YONI\AppData\Local\{4B7C15CF-5F39-4B0E-BBE5-0E39FE2EC0B4}
O43 - CFD: 19/02/2012 - 18:10:56 - [0] ----D C:\Users\YONI\AppData\Local\{4BD3E6DD-F982-4A12-A3FE-3F7EDC356C95}
O43 - CFD: 06/02/2012 - 19:01:11 - [0] ----D C:\Users\YONI\AppData\Local\{50665330-F526-4DC2-8FD8-8E0EE8D34522}
O43 - CFD: 17/07/2011 - 00:18:36 - [0] ----D C:\Users\YONI\AppData\Local\{5182B3D3-3600-42C4-B0C3-9B3BA4C65DFF}
O43 - CFD: 26/04/2012 - 16:34:30 - [0] ----D C:\Users\YONI\AppData\Local\{535CD92D-1A76-4675-9A24-3AED26679BE7}
O43 - CFD: 05/10/2011 - 17:27:52 - [0] ----D C:\Users\YONI\AppData\Local\{5395763F-1FD9-41C1-A45C-43CA96BDB657}
O43 - CFD: 15/12/2011 - 17:06:41 - [0] ----D C:\Users\YONI\AppData\Local\{54207258-0FB7-4484-B497-85F3E7FD6CA6}
O43 - CFD: 18/05/2012 - 18:01:53 - [0] ----D C:\Users\YONI\AppData\Local\{54A72F84-CE38-40F4-ACBF-19AFA2C9CCAC}
O43 - CFD: 30/08/2011 - 15:39:47 - [0] ----D C:\Users\YONI\AppData\Local\{54B4FE48-7966-4C00-9ED9-46E10209364D}
O43 - CFD: 05/10/2011 - 17:27:42 - [0] ----D C:\Users\YONI\AppData\Local\{55E8A88A-A89F-45BB-9756-7C0FCE676BF2}
O43 - CFD: 03/12/2011 - 18:57:30 - [0] ----D C:\Users\YONI\AppData\Local\{57CB335B-4CE4-42C8-AFAA-B77735D6BE71}
O43 - CFD: 03/06/2011 - 20:13:07 - [0] ----D C:\Users\YONI\AppData\Local\{58B009A5-A90F-4682-B594-FBF910330DB9}
O43 - CFD: 03/07/2011 - 17:44:43 - [0] ----D C:\Users\YONI\AppData\Local\{58FDEE3E-C79C-4C73-AD33-D364EB3BF1F8}
O43 - CFD: 28/10/2011 - 01:12:24 - [0] ----D C:\Users\YONI\AppData\Local\{591384E0-11A5-4886-BA44-F5024DAA13C3}
O43 - CFD: 17/10/2011 - 04:01:13 - [0] ----D C:\Users\YONI\AppData\Local\{59375CF9-03A4-404D-B43A-292A66B256E6}
O43 - CFD: 10/02/2012 - 01:43:47 - [0] ----D C:\Users\YONI\AppData\Local\{594D69F0-0CBD-4928-B7AB-8D54FEE36544}
O43 - CFD: 03/02/2012 - 02:24:27 - [0] ----D C:\Users\YONI\AppData\Local\{595951D2-2159-4C17-9C64-401152FDAA88}
O43 - CFD: 03/10/2011 - 01:58:35 - [0] ----D C:\Users\YONI\AppData\Local\{5B21C1B2-A51E-4A72-9E5E-C819AC478165}
O43 - CFD: 29/04/2011 - 20:24:03 - [0] ----D C:\Users\YONI\AppData\Local\{5B78CE36-01C3-443B-BBA8-F9C36367AC72}
O43 - CFD: 22/10/2011 - 20:16:22 - [0] ----D C:\Users\YONI\AppData\Local\{5C147FDD-4ECA-4FF5-9602-D42EC5095E57}
O43 - CFD: 30/12/2011 - 01:49:17 - [0] ----D C:\Users\YONI\AppData\Local\{5C206E91-F624-4266-8FD8-EEBFAABFD730}
O43 - CFD: 03/01/2012 - 17:06:22 - [0] ----D C:\Users\YONI\AppData\Local\{5F214CE1-8FF5-4BD6-95CD-B110B9ABA369}
O43 - CFD: 13/05/2011 - 19:55:07 - [0] ----D C:\Users\YONI\AppData\Local\{60183221-692C-4EC7-8993-581C48E207E4}
O43 - CFD: 09/04/2011 - 21:44:49 - [0] ----D C:\Users\YONI\AppData\Local\{601A3F2C-1CFA-409E-8B71-C30CA5BF9D3A}
O43 - CFD: 14/12/2011 - 02:09:01 - [0] ----D C:\Users\YONI\AppData\Local\{615851D5-739E-43B6-BAFF-F24DDCDE2801}
O43 - CFD: 04/09/2011 - 16:50:37 - [0] ----D C:\Users\YONI\AppData\Local\{617D24E5-A0D8-433A-9097-89A12F0D1B52}
O43 - CFD: 04/06/2011 - 23:08:13 - [0] ----D C:\Users\YONI\AppData\Local\{6197A10B-54EF-406A-AC83-25229DCB47D8}
O43 - CFD: 08/05/2012 - 18:01:45 - [0] ----D C:\Users\YONI\AppData\Local\{61A9FCA4-0985-4601-823A-EE9F330E5C6B}
O43 - CFD: 18/04/2011 - 15:54:07 - [0] ----D C:\Users\YONI\AppData\Local\{624646AA-54DE-4A47-A83D-AAB27F9C5AFE}
O43 - CFD: 01/02/2012 - 01:26:36 - [0] ----D C:\Users\YONI\AppData\Local\{62DFAC11-6532-4F4E-8E92-51970C813C98}
O43 - CFD: 08/02/2012 - 19:05:05 - [0] ----D C:\Users\YONI\AppData\Local\{6455EB5D-C0DD-45AB-8ACF-473F513D522E}
O43 - CFD: 22/04/2011 - 13:12:46 - [0] ----D C:\Users\YONI\AppData\Local\{66F592E0-5FAD-4A5E-B3F2-EBA1AAA84CE9}
O43 - CFD: 22/11/2011 - 19:03:57 - [0] ----D C:\Users\YONI\AppData\Local\{67E87D10-746B-4504-9B80-2AA8615DE330}
O43 - CFD: 02/06/2011 - 17:43:41 - [0] ----D C:\Users\YONI\AppData\Local\{6967DBAC-6218-465F-A20C-405C248B4DF6}
O43 - CFD: 14/12/2011 - 02:08:50 - [0] ----D C:\Users\YONI\AppData\Local\{6C7E2786-9977-4506-A0D1-B55E141ECBDE}
O43 - CFD: 12/01/2012 - 19:06:00 - [0] ----D C:\Users\YONI\AppData\Local\{6DF4C0AA-F11C-42C6-A098-DCC58C5DF1F3}
O43 - CFD: 19/06/2011 - 17:58:44 - [0] ----D C:\Users\YONI\AppData\Local\{6E63B8AB-502D-4EF8-B599-27AE00C1E650}
O43 - CFD: 18/09/2011 - 19:31:29 - [0] ----D C:\Users\YONI\AppData\Local\{6EB82166-78AC-4FF7-B5BC-240E53469C65}
O43 - CFD: 12/05/2012 - 22:36:09 - [0] ----D C:\Users\YONI\AppData\Local\{6EDD495E-8D99-49BB-BE3E-64F1D5AC8EC0}
O43 - CFD: 04/02/2012 - 19:50:58 - [0] ----D C:\Users\YONI\AppData\Local\{6EFDBD27-EEAF-44C3-A237-7423BD399EB0}
O43 - CFD: 23/11/2011 - 07:04:43 - [0] ----D C:\Users\YONI\AppData\Local\{6F225745-48C3-46D0-8C14-1A97FA3E8861}
O43 - CFD: 21/11/2011 - 00:38:59 - [0] ----D C:\Users\YONI\AppData\Local\{6FC0FAA0-551D-4F37-9401-BB2E50D32CAF}
O43 - CFD: 28/07/2011 - 01:05:46 - [0] ----D C:\Users\YONI\AppData\Local\{6FCBD553-893F-48B2-A14B-A3ADD44AF7A9}
O43 - CFD: 03/09/2011 - 21:31:05 - [0] ----D C:\Users\YONI\AppData\Local\{6FED07AC-A0F9-47CD-948C-61EE382CBCE2}
O43 - CFD: 20/11/2011 - 12:38:16 - [0] ----D C:\Users\YONI\AppData\Local\{702DE35B-BF3D-4A41-B4AD-D3BEE494AE09}
O43 - CFD: 24/06/2011 - 20:00:52 - [0] ----D C:\Users\YONI\AppData\Local\{7047D3D0-357D-494C-B668-484800AD8D6B}
O43 - CFD: 22/11/2011 - 19:04:07 - [0] ----D C:\Users\YONI\AppData\Local\{7097BD6A-137A-4BCD-85DD-9F072CE7C9E4}
O43 - CFD: 16/05/2011 - 18:07:29 - [0] ----D C:\Users\YONI\AppData\Local\{7103FD1F-E8B2-4992-8A88-3C7E1A3A4742}
O43 - CFD: 02/02/2012 - 15:57:07 - [0] ----D C:\Users\YONI\AppData\Local\{717B9824-D946-4BC5-B21D-B0E6EFD1DCC9}
O43 - CFD: 18/10/2011 - 15:50:08 - [0] ----D C:\Users\YONI\AppData\Local\{7214A942-F0E6-4A51-AAA3-29BFFEAFDAC5}
O43 - CFD: 23/08/2011 - 17:48:31 - [0] ----D C:\Users\YONI\AppData\Local\{72F90F85-F387-420D-835A-37F889B69533}
O43 - CFD: 11/04/2012 - 12:51:47 - [0] ----D C:\Users\YONI\AppData\Local\{7406EFC1-1B44-4FBE-9FF2-0DF1D63C90F6}
O43 - CFD: 12/06/2012 - 16:46:01 - [0] ----D C:\Users\YONI\AppData\Local\{742626E8-3050-463D-AFB6-7A2FA3F1F849}
O43 - CFD: 20/12/2011 - 02:15:02 - [0] ----D C:\Users\YONI\AppData\Local\{74FF935A-2616-4E6A-A5BF-75C2381C7CF3}
O43 - CFD: 11/12/2011 - 17:45:02 - [0] ----D C:\Users\YONI\AppData\Local\{75B51161-C824-4947-907B-BE281B452070}
O43 - CFD: 19/02/2012 - 18:11:05 - [0] ----D C:\Users\YONI\AppData\Local\{76BB2323-896E-4683-A673-1CE85EBCA2A2}
O43 - CFD: 10/10/2011 - 17:07:25 - [0] ----D C:\Users\YONI\AppData\Local\{76BB7973-504B-41AC-9322-7635558E104E}
O43 - CFD: 16/04/2011 - 21:53:04 - [0] ----D C:\Users\YONI\AppData\Local\{76C86B6B-0663-4740-967A-144C0B6A088E}
O43 - CFD: 28/08/2011 - 16:29:09 - [0] ----D C:\Users\YONI\AppData\Local\{7BA3B71E-1EFB-41A7-BE51-EB5651A311B1}
O43 - CFD: 28/11/2011 - 01:30:15 - [0] ----D C:\Users\YONI\AppData\Local\{7CE061BB-2B0F-4BFD-9490-13C643108906}
O43 - CFD: 05/05/2012 - 22:29:19 - [0] ----D C:\Users\YONI\AppData\Local\{7DCDF011-4ADC-4C96-AD72-2D2E01BACA3D}
O43 - CFD: 22/08/2011 - 23:58:09 - [0] ----D C:\Users\YONI\AppData\Local\{7EABBD7C-DB67-4A44-A86E-CDC01A1050E0}
O43 - CFD: 10/09/2011 - 21:25:05 - [0] ----D C:\Users\YONI\AppData\Local\{7EE4B71E-8FC0-4B9D-A2A3-06F96CC5C11C}
O43 - CFD: 13/05/2012 - 16:58:08 - [0] ----D C:\Users\YONI\AppData\Local\{7EF23F27-FEC2-40EE-9B9F-E6BAFF68FE22}
O43 - CFD: 10/01/2012 - 00:53:04 - [0] ----D C:\Users\YONI\AppData\Local\{7F9C2031-322C-43DD-B90D-06D184AD2A73}
O43 - CFD: 09/09/2011 - 19:16:44 - [0] ----D C:\Users\YONI\AppData\Local\{7FADD53E-73D1-4C4B-B389-FF20E20B2242}
O43 - CFD: 06/09/2011 - 18:01:08 - [0] ----D C:\Users\YONI\AppData\Local\{804D3E9D-9C84-428E-951E-FA2494EDC1FA}
O43 - CFD: 06/09/2011 - 18:00:52 - [0] ----D C:\Users\YONI\AppData\Local\{80EDF870-9A09-48D7-AA9E-68209FB1C5EB}
O43 - CFD: 05/05/2012 - 22:29:30 - [0] ----D C:\Users\YONI\AppData\Local\{81A86DAB-C3BF-48AE-BA25-E8BD439C51EA}
O43 - CFD: 28/06/2011 - 23:58:22 - [0] ----D C:\Users\YONI\AppData\Local\{81E16459-1688-4BC0-93AB-6328BF482A75}
O43 - CFD: 24/05/2011 - 16:49:10 - [0] ----D C:\Users\YONI\AppData\Local\{820E5807-8949-4BF4-A50B-B7AE95C2B0E1}
O43 - CFD: 10/04/2011 - 17:20:46 - [0] ----D C:\Users\YONI\AppData\Local\{822074BF-7973-448F-BEB3-A60384000B62}
O43 - CFD: 19/12/2011 - 01:57:29 - [0] ----D C:\Users\YONI\AppData\Local\{84380128-173D-4F03-A5ED-5A0852A95FF6}
O43 - CFD: 15/05/2011 - 16:45:28 - [0] ----D C:\Users\YONI\AppData\Local\{84712B40-5304-40BD-B013-A9D484FE7999}
O43 - CFD: 07/02/2012 - 17:45:06 - [0] ----D C:\Users\YONI\AppData\Local\{861A9F6B-4F3A-427A-95A5-8388C495AB0C}
O43 - CFD: 16/06/2011 - 00:08:31 - [0] ----D C:\Users\YONI\AppData\Local\{867FD9D6-81A7-4BDC-868E-E819E1606928}
O43 - CFD: 27/07/2011 - 01:18:40 - [0] ----D C:\Users\YONI\AppData\Local\{89503BDC-043A-4904-9E04-860A6D0FE969}
O43 - CFD: 30/05/2011 - 23:55:31 - [0] ----D C:\Users\YONI\AppData\Local\{895954E7-B482-43E4-A58C-72DD3CAAC5F9}
O43 - CFD: 03/09/2011 - 21:30:54 - [0] ----D C:\Users\YONI\AppData\Local\{89FFA786-9A09-4E7F-8778-F5008828E10B}
O43 - CFD: 18/05/2012 - 18:01:34 - [0] ----D C:\Users\YONI\AppData\Local\{8AA24C07-7730-44E4-89FB-9958AB161F35}
O43 - CFD: 06/02/2012 - 19:01:01 - [0] ----D C:\Users\YONI\AppData\Local\{8B2CD068-F731-4A35-902A-3C2666B2F542}
O43 - CFD: 03/01/2012 - 01:42:06 - [0] ----D C:\Users\YONI\AppData\Local\{8C5A3428-79A2-45E4-81D9-2889F656EB22}
O43 - CFD: 01/07/2011 - 19:36:13 - [0] ----D C:\Users\YONI\AppData\Local\{8CA78003-60AC-42D0-963E-AE88273A6481}
O43 - CFD: 22/09/2011 - 00:43:08 - [0] ----D C:\Users\YONI\AppData\Local\{8CFA145D-C1F1-4027-9BA7-014523EBAFE6}
O43 - CFD: 24/07/2011 - 13:55:26 - [0] ----D C:\Users\YONI\AppData\Local\{8D73D527-3029-4076-BC4A-C03E1910EC4D}
O43 - CFD: 21/11/2011 - 00:38:49 - [0] ----D C:\Users\YONI\AppData\Local\{90AF2B51-FA66-4A0D-9756-CA683BE2B2BD}
O43 - CFD: 17/11/2011 - 14:44:17 - [0] ----D C:\Users\YONI\AppData\Local\{92DB1B7C-855F-4163-BD63-8D67CC9D909C}
O43 - CFD: 23/11/2011 - 07:04:33 - [0] ----D C:\Users\YONI\AppData\Local\{9401AA8F-20B8-4C23-B725-2DF85BD94D49}
O43 - CFD: 19/04/2012 - 15:40:20 - [0] ----D C:\Users\YONI\AppData\Local\{941A08EF-3FBD-4EF1-97F2-7C6573FF1DB0}
O43 - CFD: 08/07/2011 - 20:09:15 - [0] ----D C:\Users\YONI\AppData\Local\{948246C3-208C-46B6-8F30-50C1DD938710}
O43 - CFD: 27/08/2011 - 21:45:50 - [0] ----D C:\Users\YONI\AppData\Local\{952A45C2-9F99-4A11-B3CA-4E012D9C774F}
O43 - CFD: 12/01/2012 - 01:54:03 - [0] ----D C:\Users\YONI\AppData\Local\{9532E533-9227-4C00-BA09-9089A5AC09B5}
O43 - CFD: 09/12/2011 - 06:24:33 - [0] ----D C:\Users\YONI\AppData\Local\{97215967-267D-49A6-B1DD-9178E511364A}
O43 - CFD: 11/11/2011 - 02:59:15 - [0] ----D C:\Users\YONI\AppData\Local\{974A5235-0C61-421C-9020-105DF5BBE093}
O43 - CFD: 26/04/2012 - 16:34:43 - [0] ----D C:\Users\YONI\AppData\Local\{978F5D67-6697-4EE8-B2A2-C4996DA26A32}
O43 - CFD: 06/02/2012 - 07:00:34 - [0] ----D C:\Users\YONI\AppData\Local\{97B0C3A6-6706-469E-82DE-FEF6CA1CDA37}
O43 - CFD: 07/11/2011 - 17:32:05 - [0] ----D C:\Users\YONI\AppData\Local\{9916D9A8-A61D-4B00-A567-CC999B782567}
O43 - CFD: 23/11/2011 - 20:21:05 - [0] ----D C:\Users\YONI\AppData\Local\{9A1BC184-EA4E-495A-BDAF-36CAC0842144}
O43 - CFD: 19/05/2011 - 16:28:57 - [0] ----D C:\Users\YONI\AppData\Local\{9A38F199-676B-4D66-8406-9F4E6CCA0D9B}
O43 - CFD: 28/05/2011 - 22:54:08 - [0] ----D C:\Users\YONI\AppData\Local\{9A48DB11-B52E-44C7-AA4E-984477E51450}
O43 - CFD: 26/08/2011 - 16:19:14 - [0] ----D C:\Users\YONI\AppData\Local\{9ABC067A-8CD7-49C3-B7DE-0CC305499E50}
O43 - CFD: 19/10/2011 - 11:07:30 - [0] ----D C:\Users\YONI\AppData\Local\{9B364896-7987-44BE-9E8B-047CDF5296C7}
O43 - CFD: 10/11/2011 - 14:58:51 - [0] ----D C:\Users\YONI\AppData\Local\{9D198BEE-794E-43AB-B113-CE8F860B94D0}
O43 - CFD: 20/05/2011 - 20:31:23 - [0] ----D C:\Users\YONI\AppData\Local\{9D56DCD6-4A93-41AE-A571-472D68D801C0}
O43 - CFD: 31/07/2011 - 16:40:17 - [0] ----D C:\Users\YONI\AppData\Local\{9DCF4635-52D6-44AD-9652-BC360B57B13C}
O43 - CFD: 13/11/2011 - 17:47:52 - [0] ----D C:\Users\YONI\AppData\Local\{9E00790B-AC5C-4264-BB79-89F31A4CFC11}
O43 - CFD: 08/05/2012 - 18:01:56 - [0] ----D C:\Users\YONI\AppData\Local\{9E47CE53-A20C-48CE-85A2-BD96CA09562E}
O43 - CFD: 31/10/2011 - 02:03:15 - [0] ----D C:\Users\YONI\AppData\Local\{9ED221C4-B156-426E-847F-082E2BBE0248}
O43 - CFD: 13/12/2011 - 01:27:56 - [0] ----D C:\Users\YONI\AppData\Local\{9F18DBA7-74B3-417E-BC09-752ECE5A04FA}
O43 - CFD: 09/09/2011 - 19:17:14 - [0] ----D C:\Users\YONI\AppData\Local\{9FCF413E-3B6F-4091-AD3A-FC5C57AE4CF4}
O43 - CFD: 25/11/2011 - 15:15:19 - [0] ----D C:\Users\YONI\AppData\Local\{A0145137-98CC-4409-AEA9-A66761C9286B}
O43 - CFD: 13/11/2011 - 17:47:42 - [0] ----D C:\Users\YONI\AppData\Local\{A366BBC3-66B0-432F-AA33-ABC058BE3184}
O43 - CFD: 06/01/2012 - 03:18:24 - [0] ----D C:\Users\YONI\AppData\Local\{A3747C41-0CB7-4205-9E2A-23C84701C791}
O43 - CFD: 20/01/2012 - 02:09:22 - [0] ----D C:\Users\YONI\AppData\Local\{A3C194C6-199C-4541-8C86-529016E6FD03}
O43 - CFD: 15/02/2012 - 01:36:19 - [0] ----D C:\Users\YONI\AppData\Local\{A41D34B8-B0C8-46F9-A303-E2D1691A9F04}
O43 - CFD: 24/04/2012 - 16:32:11 - [0] ----D C:\Users\YONI\AppData\Local\{A58D4067-A921-41F8-90DA-7BE228CBC21E}
O43 - CFD: 01/08/2011 - 21:34:31 - [0] ----D C:\Users\YONI\AppData\Local\{A5BDAF5D-98EC-43A9-9171-D0B6DF001453}
O43 - CFD: 18/11/2011 - 14:44:06 - [0] ----D C:\Users\YONI\AppData\Local\{A6EDA0AF-F012-483A-8102-91236344B3BE}
O43 - CFD: 28/04/2011 - 16:11:21 - [0] ----D C:\Users\YONI\AppData\Local\{A6F651C1-9AE7-4494-A71A-C7AEA0A30ECA}
O43 - CFD: 01/01/2012 - 03:18:44 - [0] ----D C:\Users\YONI\AppData\Local\{A77BC844-9F86-40E5-BB04-708ADE1BFF34}
O43 - CFD: 04/05/2011 - 18:30:13 - [0] ----D C:\Users\YONI\AppData\Local\{A868FFC2-7894-4994-9E5F-4193BC39FA58}
O43 - CFD: 04/10/2011 - 18:06:17 - [0] ----D C:\Users\YONI\AppData\Local\{A8CA346D-5E01-4CB5-BBBF-AC122765529A}
O43 - CFD: 05/11/2011 - 21:33:11 - [0] ----D C:\Users\YONI\AppData\Local\{AB909921-1024-451F-A335-A06E151190DA}
O43 - CFD: 16/02/2012 - 01:42:42 - [0] ----D C:\Users\YONI\AppData\Local\{ABCF681B-2B1B-497D-B7F9-D681651307A0}
O43 - CFD: 07/12/2011 - 01:08:34 - [0] ----D C:\Users\YONI\AppData\Local\{AC7D3B71-DF29-45DA-AAA0-DD2822B708D6}
O43 - CFD: 23/06/2011 - 17:42:37 - [0] ----D C:\Users\YONI\AppData\Local\{AC918DBC-F821-483D-8D23-8C2DBAE07772}
O43 - CFD: 04/09/2011 - 16:50:46 - [0] ----D C:\Users\YONI\AppData\Local\{ACA926EA-9533-47A0-BA98-6DFF34DB2595}
O43 - CFD: 13/04/2011 - 19:20:22 - [0] ----D C:\Users\YONI\AppData\Local\{ACF61056-4CE1-4926-AF5B-F0615A460E79}
O43 - CFD: 28/07/2011 - 16:20:07 - [0] ----D C:\Users\YONI\AppData\Local\{AD90023B-B341-4AD4-905E-695E4D466BE2}
O43 - CFD: 17/10/2011 - 04:01:12 - [0] ----D C:\Users\YONI\AppData\Local\{AEC49BE8-E3C1-4C15-9143-DB86557E72D2}
O43 - CFD: 06/09/2011 - 00:22:36 - [0] ----D C:\Users\YONI\AppData\Local\{AFF8C736-7CBE-4833-8651-89419789B3B0}
O43 - CFD: 20/12/2011 - 17:06:11 - [0] ----D C:\Users\YONI\AppData\Local\{B14E2047-EB4D-4E2E-9363-96A52E45A4F5}
O43 - CFD: 24/08/2011 - 17:30:01 - [0] ----D C:\Users\YONI\AppData\Local\{B24E1A22-6D34-4F47-B3DB-DEEE9B80225D}
O43 - CFD: 13/11/2011 - 04:38:17 - [0] ----D C:\Users\YONI\AppData\Local\{B3822E7F-2359-4C7E-992B-F4AC6FF5E354}
O43 - CFD: 10/11/2011 - 14:59:01 - [0] ----D C:\Users\YONI\AppData\Local\{B441DE96-EEA3-4450-B1CC-3ED1D321939D}
O43 - CFD: 20/12/2011 - 02:14:52 - [0] ----D C:\Users\YONI\AppData\Local\{B6C5F37A-1D7A-4149-801C-071CE7515C3B}
O43 - CFD: 08/02/2012 - 19:04:49 - [0] ----D C:\Users\YONI\AppData\Local\{B6C85545-3047-4070-8030-10A28211C39B}
O43 - CFD: 28/08/2011 - 16:28:55 - [0] ----D C:\Users\YONI\AppData\Local\{B6D491F0-6A37-4AB5-A9C8-F0AA4BDFE6FC}
O43 - CFD: 15/10/2011 - 21:38:06 - [0] ----D C:\Users\YONI\AppData\Local\{B9188186-3E12-4F35-BA16-4E30F1EB60C0}
O43 - CFD: 23/01/2012 - 17:22:58 - [0] ----D C:\Users\YONI\AppData\Local\{B976D14E-7E24-4779-8009-4BFBBD524574}
O43 - CFD: 24/10/2011 - 16:05:12 - [0] ----D C:\Users\YONI\AppData\Local\{BBB17C44-A9C0-4063-9243-8481F68A56E6}
O43 - CFD: 18/07/2011 - 21:42:09 - [0] ----D C:\Users\YONI\AppData\Local\{BC74DCA6-E407-4B0F-823A-25AB9F3CE874}
O43 - CFD: 15/07/2011 - 01:09:53 - [0] ----D C:\Users\YONI\AppData\Local\{BC9D7F43-9ABC-4B9E-BFDB-C1CD0AFE5955}
O43 - CFD: 26/01/2012 - 19:06:31 - [0] ----D C:\Users\YONI\AppData\Local\{BFDBDAE0-9322-4F69-8755-6EBBC4EA4B24}
O43 - CFD: 22/03/2012 - 22:14:18 - [0] ----D C:\Users\YONI\AppData\Local\{C011932F-295C-42C4-B10B-7873BAF4A232}
O43 - CFD: 12/02/2012 - 19:12:37 - [0] ----D C:\Users\YONI\AppData\Local\{C09E8CD7-B310-4577-931A-341B78231BDA}
O43 - CFD: 25/12/2011 - 17:55:36 - [0] ----D C:\Users\YONI\AppData\Local\{C09EC5F3-C526-4E14-92D6-CB4604D285A2}
O43 - CFD: 05/08/2011 - 16:47:39 - [0] ----D C:\Users\YONI\AppData\Local\{C4808907-9210-41DB-ABF0-9C1BC272B450}
O43 - CFD: 13/09/2011 - 01:06:35 - [0] ----D C:\Users\YONI\AppData\Local\{C4D1B672-5888-4DBF-8B12-FDBCC73699BC}
O43 - CFD: 08/12/2011 - 18:23:48 - [0] ----D C:\Users\YONI\AppData\Local\{C528E0C5-0238-4AC6-94D8-B7C6880559F1}
O43 - CFD: 20/11/2011 - 12:38:03 - [0] ----D C:\Users\YONI\AppData\Local\{C7800A5F-7A98-40ED-BD99-779A0683E4CC}
O43 - CFD: 19/03/2012 - 18:58:18 - [0] ----D C:\Users\YONI\AppData\Local\{C7951B0F-14C3-449D-971F-5E5652EE66E2}
O43 - CFD: 15/05/2012 - 16:30:22 - [0] ----D C:\Users\YONI\AppData\Local\{C830E31C-9B55-459D-A3FF-A16C1CE5D18A}
O43 - CFD: 07/06/2011 - 20:08:25 - [0] ----D C:\Users\YONI\AppData\Local\{C8F5B9F4-13AF-4962-BA78-D2C209907EE0}
O43 - CFD: 31/10/2011 - 02:03:28 - [0] ----D C:\Users\YONI\AppData\Local\{C9401205-5B9C-49AD-BF47-2109B70A6EB7}
O43 - CFD: 12/06/2012 - 17:24:12 - [0] ----D C:\Users\YONI\AppData\Local\{C955D77A-D639-4935-8696-BF6ACF9A7082}
O43 - CFD: 18/10/2011 - 15:49:56 - [0] ----D C:\Users\YONI\AppData\Local\{CB9D21B5-DEF5-43B3-9DCD-1500820AB9DA}
O43 - CFD: 07/11/2011 - 17:31:55 - [0] ----D C:\Users\YONI\AppData\Local\{CC6F6919-1784-4DFD-AFD6-FA4AE34268EA}
O43 - CFD: 05/12/2011 - 02:21:26 - [0] ----D C:\Users\YONI\AppData\Local\{CCFC7633-9A0F-4A29-A040-140CF3522F5B}
O43 - CFD: 19/09/2011 - 11:19:47 - [0] ----D C:\Users\YONI\AppData\Local\{CD104032-EE00-4848-A354-891524F83824}
O43 - CFD: 17/02/2012 - 01:20:53 - [0] ----D C:\Users\YONI\AppData\Local\{CE5E2471-61A2-43A3-BEFC-5CC872AF97BE}
O43 - CFD: 01/08/2011 - 09:33:38 - [0] ----D C:\Users\YONI\AppData\Local\{CEE61169-E749-4722-84FF-79E2104861D6}
O43 - CFD: 25/11/2011 - 15:15:09 - [0] ----D C:\Users\YONI\AppData\Local\{D1696B6D-911F-49FE-8FA6-E593E1654EB5}
O43 - CFD: 22/08/2011 - 12:34:35 - [0] ----D C:\Users\YONI\AppData\Local\{D18393E8-1BE6-4F4C-9B9C-A131B1888352}
O43 - CFD: 14/05/2011 - 22:30:19 - [0] ----D C:\Users\YONI\AppData\Local\{D379793C-D721-4EDA-A890-03088362FDAE}
O43 - CFD: 20/07/2011 - 00:42:24 - [0] ----D C:\Users\YONI\AppData\Local\{D4812DAA-6506-4B4F-AEB9-24B98327B9AC}
O43 - CFD: 16/11/2011 - 03:08:20 - [0] ----D C:\Users\YONI\AppData\Local\{D52EF452-224E-43DC-A713-558006E515B2}
O43 - CFD: 27/12/2011 - 17:29:16 - [0] ----D C:\Users\YONI\AppData\Local\{D589508F-0568-454B-B703-48B8C3F3A1F9}
O43 - CFD: 29/03/2012 - 11:52:28 - [0] ----D C:\Users\YONI\AppData\Local\{D7137D1A-ACF8-4C3A-BB6E-28664874EBC5}
O43 - CFD: 20/09/2011 - 23:51:48 - [0] ----D C:\Users\YONI\AppData\Local\{D716AF0E-BCDC-4C97-BCB5-F253C7BDEE1B}
O43 - CFD: 18/07/2011 - 09:41:57 - [0] ----D C:\Users\YONI\AppData\Local\{D7329824-0D92-45C7-85EE-70F388932C2D}
O43 - CFD: 30/01/2012 - 02:20:09 - [0] ----D C:\Users\YONI\AppData\Local\{D81586B4-8A80-4A17-B33E-3A3C6338AF6E}
O43 - CFD: 10/10/2011 - 17:07:13 - [0] ----D C:\Users\YONI\AppData\Local\{D98376EA-7141-488C-B5C3-D36356C196BC}
O43 - CFD: 22/08/2011 - 23:58:20 - [0] ----D C:\Users\YONI\AppData\Local\{D9E0A902-EEF2-4AC4-9842-26051F515DCC}
O43 - CFD: 13/11/2011 - 04:38:28 - [0] ----D C:\Users\YONI\AppData\Local\{DA2B5D71-EAE2-4CD3-BA01-11D95D974C6F}
O43 - CFD: 12/06/2012 - 17:24:23 - [0] ----D C:\Users\YONI\AppData\Local\{DC7F1997-812A-4A88-9FC3-19424C78708B}
O43 - CFD: 23/04/2012 - 15:32:13 - [0] ----D C:\Users\YONI\AppData\Local\{DE8B89A4-6843-49C4-9985-63D343E02BB6}
O43 - CFD: 21/03/2012 - 17:15:51 - [0] ----D C:\Users\YONI\AppData\Local\{DF550B04-F5C0-429E-AA01-F4F2E430A74D}
O43 - CFD: 15/02/2012 - 01:36:29 - [0] ----D C:\Users\YONI\AppData\Local\{E0DF914F-EA11-4A1A-B3A9-42058886F8CF}
O43 - CFD: 24/08/2011 - 17:29:52 - [0] ----D C:\Users\YONI\AppData\Local\{E15EC753-816B-4D2F-8805-6FEF93E15A8F}
O43 - CFD: 09/12/2011 - 06:24:49 - [0] ----D C:\Users\YONI\AppData\Local\{E1A5E936-3427-47E6-ABF4-48C2232C6B7C}
O43 - CFD: 26/01/2012 - 19:06:44 - [0] ----D C:\Users\YONI\AppData\Local\{E30ACBC2-176E-438C-9C46-22B181AE181A}
O43 - CFD: 12/05/2012 - 22:35:58 - [0] ----D C:\Users\YONI\AppData\Local\{E37A8AF5-0F46-45CE-BC91-432D85DE1535}
O43 - CFD: 03/01/2012 - 17:06:33 - [0] ----D C:\Users\YONI\AppData\Local\{E3DDC194-1CBA-4B87-9CC2-2FF2AE6FC447}
O43 - CFD: 27/08/2011 - 21:45:38 - [0] ----D C:\Users\YONI\AppData\Local\{E402924D-53DB-456A-A686-A5DE6134A61A}
O43 - CFD: 22/04/2012 - 16:30:55 - [0] ----D C:\Users\YONI\AppData\Local\{E480ED3B-26F5-4F74-9C2F-169E48E06795}
O43 - CFD: 10/04/2011 - 17:20:48 - [0] ----D C:\Users\YONI\AppData\Local\{E6DE4DE6-3057-419C-84B5-5553E7A71CC7}
O43 - CFD: 18/10/2011 - 00:54:29 - [0] ----D C:\Users\YONI\AppData\Local\{E6E1589F-7973-468D-A4B0-FE5D6960F45A}
O43 - CFD: 25/08/2011 - 15:50:43 - [0] ----D C:\Users\YONI\AppData\Local\{E93F47FC-104C-4754-9475-2A14EE879F6F}
O43 - CFD: 20/09/2011 - 23:51:29 - [0] ----D C:\Users\YONI\AppData\Local\{EA3A8D20-D668-4A3B-9751-
0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
14 juin 2012 à 01:47
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.7E2857E07059618C1D85F7F66C8494B3] - 14/06/2012 - 00:38:30 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1869955]
O44 - LFC:[MD5.75A7A06BB55A1400DB0E361A4BD989B5] - 14/06/2012 - 00:28:58 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [67584]
O44 - LFC:[MD5.FF97C78E831477FA5FDFDFEE0A320A27] - 13/06/2012 - 02:48:50 ---A- . (...) -- C:\WINDOWS\PFRO.log [1168796]
O44 - LFC:[MD5.E6EC42A8AC73D4E4F539E6C4600ECBD8] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\PerfStringBackup.INI [1519804]
O44 - LFC:[MD5.A31ABA482DE342703D6F54B324979044] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfc009.dat [104110]
O44 - LFC:[MD5.61838A83577409EC722DDB7F0E0611F7] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfc00C.dat [126658]
O44 - LFC:[MD5.26234902C1C0A1D4D1F377712EB445A4] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfh009.dat [596036]
O44 - LFC:[MD5.607C9BA12869828E11F18A2F8E6AFF40] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfh00C.dat [679042]
O44 - LFC:[MD5.CDB254ACBF89210269C4B0551E88B1B6] - 12/06/2012 - 15:54:31 ---A- . (...) -- C:\DelFix[S1].txt [1382]
O44 - LFC:[MD5.372DC4FA8CF78756A635EE2861CC93A0] - 12/06/2012 - 15:53:36 ---A- . (...) -- C:\DelFix[R1].txt [1288]
O44 - LFC:[MD5.5FC4A8E040F723073C15F217A597EAA6] - 12/06/2012 - 15:49:31 ---A- . (...) -- C:\WINDOWS\DirectX.log [359]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 10/06/2012 - 15:56:39 ---A- . (...) -- C:\WINDOWS\system.ini [215]
O44 - LFC:[MD5.8D8296ECC82030A95C1DBD8A40DB778B] - 05/06/2012 - 22:25:49 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [65842]
O44 - LFC:[MD5.6B79FE61FA8F5E126132190B4D031855] - 01/06/2012 - 01:56:39 . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT []
O44 - LFC:[MD5.6B79FE61FA8F5E126132190B4D031855] - 01/06/2012 - 01:56:39 ---A- . (...) -- C:\WINDOWS\SysNative\FNTCACHE.DAT [319440]
O44 - LFC:[MD5.F173E6DEC12C9849A658E508261B2558] - 29/05/2012 - 18:11:20 ----- . (...) -- C:\{8BE6F825-B05D-4497-A169-81192B081AFE} [2504]
O44 - LFC:[MD5.C7B2659EA9F98C09710253721712A6CE] - 22/05/2012 - 12:44:41 ---A- . (...) -- C:\WINDOWS\ODBC.INI [376]
~ Scan Files in 00mn 02s



---\\ Contrôle du Safe Boot (CSB) (O49) (None)

---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{1c59f55a-5086-11e0-9432-806e6f6e6963}\AutoRun\command. (...) -- E:\Start.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.F14215E37CF124104575073F782111D2] - 21/01/2008 - 03:46:53 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\WINDOWS\System32\Drivers\adp94xx.sys [486456]
~ Scan Drivers in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68) (None)

---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
O69 - SBI: SearchScopes [HKCU] {D87682BB-389A-4BE1-9F47-50B5EC54AD1D} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83) (None)

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.DF1236ED28C3C25A01036325D757B25F] [SPRF][30/01/2012] (...) -- C:\Users\YONI\AppData\Local\d3d9caps.dat [680]
[MD5.1A54E9230C500C5F49FD89AF4B827900] [SPRF][08/06/2012] (.NVIDIA Corporation - NVIDIA Windows Display Driver Installer.) -- C:\Users\YONI\Desktop\301.42-desktop-win7-winvista-64bit-international-whql.exe [211927944]
[MD5.CFBAA5DC7F01D2D2D530BF9C9DDFBB16] [SPRF][01/06/2012] (.Piriform Ltd - CCleaner Installer.) -- C:\Users\YONI\Desktop\ccsetup319.exe [3862112]
[MD5.3FFA88644CA0F4247689E3FC754637D0] [SPRF][12/06/2012] (...) -- C:\Users\YONI\Desktop\delfix.exe [386559]
[MD5.469824312579B17F9B0DA852DD07F4E2] [SPRF][11/04/2012] (.Driver Utilities - This installer database contains the logic and data required t.) -- C:\Users\YONI\Desktop\DriverUtilities.exe [1190040]
[MD5.5AEC5B936DC77EF1B20A5F08AF9F5F2B] [SPRF][25/05/2012] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\YONI\Desktop\JavaSetup7u4.exe [892360]
[MD5.250B9F87DDAF7AFC624BB5E61C4BD6E3] [SPRF][25/05/2012] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\YONI\Desktop\mbam-setup-1.61.0.1400.exe [10063000]
[MD5.A0ACCA7FF2F880EC3502DCAD188FC85A] [SPRF][14/06/2012] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\YONI\Desktop\ZHPDiag2.exe [4678331]
[MD5.FB30D948346F9367A83DFE5BAB2668F8] [SPRF][22/08/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.3 r183.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [3126944]
~ Scan Files in 00mn 03s



---\\ Scan Additionnel (O88)
Database Version : 9170 - (24/05/2012)
Clés trouvées (Keys found) : 18
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{eee6c35b-6118-11dc-9c72-001320c79847}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{eee6c35b-6118-11dc-9c72-001320c79847}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}] =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}] =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz
[HKCU\Software\APN] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\I Want This] =>PUP.RewardsArcade
[HKCU\Software\OfferBox] =>PUP.OfferBox
[HKCU\Software\SweetIM] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Toolbar.AskBar
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
~ Scan Additionnel in 00mn 11s



End of the scan (895 lines in 01mn 07s)(0)
0
bonjour,

super !!!

ce pc, on l'a nettoyé, je vois encore Ask et Cie (Adwares) là dessus !!!

que fais tu avec ce pc ?



O.o°*??? Membre, Contributeur sécurité CCM o°.Oø¤º°'°º¤ø

O.o°* ??? Réspire à fond, Rédige ton message en bon français et de manière claire.Ca va bien se passer, tu verras, enfin on essaie !!! o°.Oø¤º°'°º¤ø
0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
14 juin 2012 à 10:02
Bonjour ,

Je ne fais rien de spécial y a 80% d internet et 20 % de logiciels du style Microsoft office etc...
0
Utilisateur anonyme
14 juin 2012 à 12:30
? Télécharger et enregistre ADWcleaner sur ton bureau (Merci à Xplode) :

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner


Lance le,
clique sur rechercher et poste son rapport.


0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
14 juin 2012 à 17:52
bonjour,

voici le rapport ADWcleaner :


# AdwCleaner v1.609 - Rapport créé le 14/06/2012 à 17:51:11
# Mis à jour le 10/06/2012 par Xplode
# Système d'exploitation : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Nom d'utilisateur : YONI - PC-DE-ISAAC
# Exécuté depuis : C:\Users\YONI\Desktop\adwcleaner.exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****


***** [Registre] *****

Clé Présente : HKCU\Software\APN
Clé Présente : HKCU\Software\Offerbox
Clé Présente : HKCU\Software\SweetIm
Clé Présente : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Présente : HKCU\Software\AppDataLow\Software\I Want This
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
[x64] Clé Présente : HKCU\Software\APN
[x64] Clé Présente : HKCU\Software\Offerbox
[x64] Clé Présente : HKCU\Software\SweetIm
[x64] Clé Présente : HKCU\Software\AppDataLow\Software\AskToolbar
[x64] Clé Présente : HKCU\Software\AppDataLow\Software\I Want This
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}

***** [Registre - GUID] *****

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[x64] Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[x64] Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.19272

[OK] Le registre ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [4833 octets] - [14/06/2012 17:51:11]

########## EOF - C:\AdwCleaner[R1].txt - [4961 octets] ##########
0
ion95200 Messages postés 34 Date d'inscription mardi 22 mai 2012 Statut Membre Dernière intervention 15 juin 2012
14 juin 2012 à 17:52
par contre je ne fais rien sur ZHPfix ?
0