Supprimer un virus

skum -  
Fish66 Messages postés 18337 Statut Contributeur sécurité -
Bonjour,

j ai chopper un virus que je ne peut supprimer pourrier vous m aider

5 réponses

  1. daarkos Messages postés 182 Statut Membre 25
     
    Bonjour,

    Fais un scan avec ton antivirus.
    Quand il l'aura détecté, tu pourra sois le mettre en quarantaine, sois tenter de réparer le fichier corrompu ou le supprimer.
    0
    1. skum
       
      lol je suis pas doué en pc mais il i a des limite quand meme mais merci quand meme.
      0
  2. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Salut,
    Est ce que tu peux nous donner le nom et le chemin du virus ?

    =================
    * Télécharge puis enregistre sur le bureau de ton PC ZHPDiag
    (de Nicolas Coolman) à partir l'un des deux liens : Lien 1 ou Lien 2
    * Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7)
    * Clique sur l'icône en forme de loupe pour lancer le diagnostique
    * Héberge le rapport ZHPDiag.txt de ton bureau sur : malekal.com ou cjoint.com
    * Fais copier/coller le lien fourni dans ta prochaine réponse
    * Aide ZHPDiag : <<< ICI >>>

    @+
    0
  3. skum
     
    Rapport de ZHPDiag v1.31.105 par Nicolas Coolman, Update du 25/06/2012
    Run by Admin at 05/07/2012 17:09:29
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    Web site : http://nicolascoolman.skyrock.com/
    State : Version à jour.

    ---\\ Web Browser
    MSIE: Internet Explorer v

    ---\\ Windows Product Information
    ~ Langage: Français
    Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    ~ Windows(R) 7, OEM_SLP channel
    System Locked Preinstallation (OEM_SLP) : OK
    Windows ID Activation : OK
    ~ Windows Partial Key : 9YQTR
    Windows License : OK
    ~ Windows Remaining Initializations Number : 3
    Software Protection Service (Protection logicielle) : KO
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ System Information
    ~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD
    ~ Operating System: 64 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 4095 MB (49% free)
    System Restore: Inconnu (Unknown)
    System drive C: has 39 GB (33%) free of 116 GB

    ---\\ Logged in mode
    ~ Computer Name: ADMIN-PC
    ~ User Name: Admin
    ~ All Users Names: Mcx1-ADMIN-PC, HomeGroupUser$, Administrateur, Admin,
    ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
    Logged in as Administrator

    ---\\ Environnement Variables
    ~ System Unit : C:\
    ~ %AppData% : C:\Users\Admin\AppData\Roaming\
    ~ %Desktop% : C:\Users\Admin\Desktop\
    ~ %Favorites% : C:\Users\Admin\Favorites\
    ~ %LocalAppData% : C:\Users\Admin\AppData\Local\
    ~ %StartMenu% : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 39 Go of 116 Go)
    D:\ Hard drive, Flash drive, Thumb drive (Free 17 Go of 330 Go)
    E:\ CD-ROM drive (Not Inserted)
    F:\ CD-ROM drive (Not Inserted)
    H:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 1 Go)
    Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)

    ---\\ Security Center & Tools Informations
    ~ Scan Security Center in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
    [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
    [MD5.870ECFEBD41C7B8F9C6777748368D51F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/05/2012 - 02:59:14.) -- C:\Windows\System32\wininet.dll [1392128]
    [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
    [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
    [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
    [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
    [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
    [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
    [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
    [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
    [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
    [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
    [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
    [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
    [MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
    [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
    [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
    [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
    [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
    [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
    ~ Scan Generic Processes in 00mn 00s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 2/296
    ~ Mes musiques (My Musics) : 12/13
    ~ Mes Videos (My Videos) : 2/24
    ~ Mes Favoris (My Favorites) : 1/220
    ~ Mes Documents (My Documents) : 2/297
    ~ Mon Bureau (My Desktop) : 3/1872
    ~ Menu demarrer (Programs) : 0/54
    ~ Scan Hidden Files in 00mn 04s

    ---\\ Processus lancés
    [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.2528]
    [MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720] [PID.2608]
    [MD5.D36DA0A5C531353C5FF5E29242649257] - (.Boingo Wireless, Inc. - Boingo Wi-Fi.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe [365936] [PID.3620]
    [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016] [PID.4004]
    [MD5.4D141320B1713EB329E1603190D4B182] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [7109248] [PID.4056]
    [MD5.6FCA49B4085C32D1CC738C16142C0CDD] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624] [PID.4084]
    [MD5.4EB0C6C3EF4D8885CF2B5D0062F31E44] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376] [PID.1324]
    [MD5.92DCCD7AD8FB9FB475A4F48086938838] - (.SweetIM Technologies Ltd. - SweetIM Instant Messenger Enhancer.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [114992] [PID.996]
    [MD5.8E53B67FA3816E854B07C5DC66E10730] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [296056] [PID.3520]
    [MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296] [PID.3908]
    [MD5.52A025AEDE99BFFF745A4CC0DBA5816F] - (.Boxore OU - Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe [598320] [PID.2688]
    [MD5.52F4719BF4A62567043D19D6FAB756B4] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.exe [686280] [PID.5324]
    [MD5.0129BB16161C2FD9A6B19111AB047198] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [748664] [PID.1000]
    [MD5.D2FD8AF200D4C402532C08F8070B64F1] - (.Microsoft Corporation. - Bing Client Application Process.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.364.0\BingApp.exe [268056] [PID.6536]
    [MD5.1DAC4ABDD489EF891A924F4954C13172] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [277104] [PID.3220]
    [MD5.DE662A3BE3F6483292D360158426EABD] - (.Microsoft Corporation. - Bing Client Runtime.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.364.0\BingBar.exe [425240] [PID.6424]
    [MD5.8C2CAC1AF2B9BAC0AFFA9F5D93D3817E] - (.Microsoft Corporation. - Hôte d'extension natif du runtime du client.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.364.0\BingSurrogate.exe [142104] [PID.1860]
    [MD5.BE955BAB4EFC2A28BE2692D102FFC85A] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3838464] [PID.6000]
    ~ Scan Processes Running in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
    R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Interpréteur de commandes Windows.) (No version) -- (.not file.)
    ~ Scan IE Browser in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Scan Proxy management in 00mn 00s

    ---\\ Redirection du fichier Hosts (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Scan Hosts File in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
    O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe
    O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\\KiesTrayAgent.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
    ~ Scan Application in 00mn 00s

    ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\Admin\Desktop\DATA (D) - Raccourci.lnk . (...) -- D:\
    O4 - Global Startup: C:\Users\Admin\Desktop\FFOutput - Raccourci.lnk . (...) -- C:\Users\Admin\Documents\FFOutput
    O4 - Global Startup: C:\Users\Admin\Desktop\Images - Raccourci.lnk . (...) -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
    O4 - Global Startup: C:\Users\Admin\Desktop\Mes téléchargements - Raccourci.lnk . (...) -- C:\Users\Admin\Documents\Mes téléchargements
    O4 - Global Startup: C:\Users\Admin\Desktop\Musique - Raccourci.lnk . (...) -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
    O4 - Global Startup: C:\Users\Admin\Desktop\My Downloads - Raccourci.lnk . (...) -- C:\Users\Admin\Documents\My Downloads
    O4 - Global Startup: C:\Users\Admin\Desktop\Téléchargements RealPlayer - Raccourci.lnk . (...) -- C:\Users\Admin\Videos\Téléchargements RealPlayer
    O4 - Global Startup: C:\Users\Admin\Desktop\Verbatim (G) - Raccourci.lnk . (...) -- G:\ (.not file.)
    O4 - Global Startup: C:\Users\Admin\Desktop\Vuze Downloads - Raccourci.lnk . (...) -- C:\Users\Admin\Documents\Vuze Downloads
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\D-Jix Media LE.lnk . (.D-Jix.) -- C:\Users\Admin\AppData\Roaming\D-Jix\D-Jix Media LE\D-Jix Media LE.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Light Image Resizer 4.lnk . (.ObviousIdea SARL.) -- C:\Program Files (x86)\ObviousIdea\Image Resizer 4\Resize.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk . (.Uniblue Systems Limited.) -- C:\Program Files (x86)\Uniblue\RegistryBooster\Launcher.exe
    O4 - Global Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files (x86)\Vuze\Azureus.exe
    ~ Scan Global Startup in 00mn 03s

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: Translate this web page with Babylon - (.not file.) - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
    O8 - Extra context menu item: Translate with Babylon - (.not file.) - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
    ~ Scan IE Menu Contextuel in 00mn 00s

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)
    ~ Scan Desktop Component in 00mn 00s

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Norton Security Scan for Admin.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\RegistryBooster.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
    [MD5.343E9EFB16136611B0322A1E94353C41] [APT] [Norton Security Scan for Admin] (.Symantec Corporation.) -- C:\Program Files (x86)\NORTON~2\Engine\353~1.1\Nss.exe
    [MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-2851942021-1280945436-3480403584-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
    [MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-2851942021-1280945436-3480403584-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
    [MD5.C2B5C7B5ECE593EB059FF1099F3DCC28] [APT] [RegistryBooster] (.Uniblue Systems Limited.) -- C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe
    [MD5.02C76B60936B64F9450414473C81F054] [APT] [{5FA2F1D9-57C7-401C-B9F4-97A4C13EEF91}] (...) -- C:\Program Files (x86)\COMMON~1\ADOBEA~1\Versions\1.0\ADOBEA~1.exe
    [MD5.00000000000000000000000000000000] [APT] [{71EDF636-D927-4529-915B-A08020C86104}] (...) -- C:\Users\Admin\Desktop\Ysil-Morna-V2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{874000B8-13D9-4DCE-984C-9B394AD95A7B}] (...) -- C:\ProgramData\Microsoft\XLive\InstallerPath\Extract\cabB96F.tmp\content\VCR\install.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{8B77B1AF-6BDE-4893-99E9-277C06032741}] (...) -- C:\Users\Admin\Desktop\Ysil-Morna-V2.exe (.not file.)
    ~ Scan Scheduled Task in 00mn 04s

    ---\\ Composants installés (ActiveSetup Installed Components) (O40) (None)

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 17/07/2010 - 20:39:05 - [656,923] ----D C:\Program Files (x86)\Adobe
    O43 - CFD: 13/03/2012 - 07:18:06 - [0,002] ----D C:\Program Files (x86)\adslTV
    O43 - CFD: 27/01/2012 - 23:40:50 - [0,000] ----D C:\Program Files (x86)\AIMP2
    O43 - CFD: 17/07/2010 - 20:47:08 - [0,071] ----D C:\Program Files (x86)\AMD
    O43 - CFD: 17/07/2010 - 20:51:20 - [2,873] ----D C:\Program Files (x86)\AmIcoSingLun
    O43 - CFD: 12/01/2011 - 05:37:53 - [19,659] ----D C:\Program Files (x86)\AoA Audio Extractor
    O43 - CFD: 25/05/2011 - 11:44:51 - [286,999] ----D C:\Program Files (x86)\ASUS
    O43 - CFD: 17/07/2010 - 20:41:35 - [81,085] ----D C:\Program Files (x86)\ATI Technologies
    O43 - CFD: 20/02/2011 - 15:47:09 - [3,778] ----D C:\Program Files (x86)\Avira
    O43 - CFD: 29/04/2012 - 19:56:51 - [20,269] ----D C:\Program Files (x86)\AVS4YOU
    O43 - CFD: 29/06/2012 - 08:56:19 - [0] ----D C:\Program Files (x86)\Babylon
    O43 - CFD: 17/07/2010 - 20:30:35 - [4,157] ----D C:\Program Files (x86)\Boingo
    O43 - CFD: 04/07/2012 - 19:22:46 - [1,179] ----D C:\Program Files (x86)\Boxore
    O43 - CFD: 04/07/2012 - 20:09:32 - [4,384] ----D C:\Program Files (x86)\ChatZum Toolbar
    O43 - CFD: 30/06/2012 - 00:22:36 - [227,514] ----D C:\Program Files (x86)\Common Files
    O43 - CFD: 13/09/2011 - 04:31:06 - [4,429] ----D C:\Program Files (x86)\completebartb
    O43 - CFD: 13/09/2011 - 04:30:52 - [0,749] ----D C:\Program Files (x86)\ComplitlyEngine
    O43 - CFD: 21/12/2010 - 01:23:45 - [0,507] ----D C:\Program Files (x86)\Conduit
    O43 - CFD: 21/12/2010 - 01:23:43 - [3,803] ----D C:\Program Files (x86)\ConduitEngine
    O43 - CFD: 17/07/2010 - 20:26:19 - [254,583] ----D C:\Program Files (x86)\CyberLink
    O43 - CFD: 30/01/2012 - 01:01:54 - [22,986] ----D C:\Program Files (x86)\DAEMON Tools Lite
    O43 - CFD: 14/03/2012 - 06:03:06 - [100,258] ----D C:\Program Files (x86)\DivX
    O43 - CFD: 29/04/2012 - 19:46:16 - [0] ----D C:\Program Files (x86)\DsNET Corp
    O43 - CFD: 12/01/2011 - 05:24:39 - [6,183] ----D C:\Program Files (x86)\DVDVIDEOSOFT
    O43 - CFD: 09/06/2012 - 00:19:44 - [60,397] ----D C:\Program Files (x86)\eMule
    O43 - CFD: 29/06/2012 - 20:59:22 - [3,023] ----D C:\Program Files (x86)\Eurotraductor
    O43 - CFD: 06/02/2012 - 10:52:29 - [114,229] ----D C:\Program Files (x86)\FreeTime
    O43 - CFD: 06/02/2012 - 20:58:35 - [11,061] ----D C:\Program Files (x86)\GameTop.com
    O43 - CFD: 10/07/2011 - 21:52:02 - [327,504] ----D C:\Program Files (x86)\Google
    O43 - CFD: 16/10/2011 - 14:07:40 - [1,818] ----D C:\Program Files (x86)\Iminent
    O43 - CFD: 27/01/2012 - 23:47:06 - [32,155] --H-D C:\Program Files (x86)\InstallShield Installation Information
    O43 - CFD: 05/07/2012 - 16:55:31 - [4,941] ----D C:\Program Files (x86)\Internet Explorer
    O43 - CFD: 22/06/2012 - 23:33:57 - [177,460] ----D C:\Program Files (x86)\Java
    O43 - CFD: 04/09/2011 - 03:47:06 - [2,414] ----D C:\Program Files (x86)\MarkAny
    O43 - CFD: 14/02/2012 - 03:05:23 - [6,770] ----D C:\Program Files (x86)\MediaInfo
    O43 - CFD: 23/03/2011 - 04:01:04 - [31,679] ----D C:\Program Files (x86)\Microsoft
    O43 - CFD: 17/02/2012 - 04:04:11 - [12,399] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client
    O43 - CFD: 30/11/2010 - 02:20:55 - [12,354] ----D C:\Program Files (x86)\Microsoft Digital Experience
    O43 - CFD: 29/06/2012 - 20:35:19 - [268,038] ----D C:\Program Files (x86)\Microsoft Games
    O43 - CFD: 04/10/2011 - 21:38:57 - [8,929] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
    O43 - CFD: 01/12/2010 - 22:09:11 - [6,425] ----D C:\Program Files (x86)\Microsoft Office
    O43 - CFD: 02/07/2012 - 12:40:10 - [2,341] ----D C:\Program Files (x86)\Microsoft SDKs
    O43 - CFD: 05/07/2012 - 16:26:38 - [1,126] ----D C:\Program Files (x86)\Microsoft Security Client
    O43 - CFD: 09/05/2012 - 19:23:40 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
    O43 - CFD: 02/07/2012 - 12:44:43 - [5,728] ----D C:\Program Files (x86)\Microsoft SQL Server
    O43 - CFD: 02/07/2012 - 12:44:28 - [6,568] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
    O43 - CFD: 02/07/2012 - 12:44:28 - [0,621] ----D C:\Program Files (x86)\Microsoft Synchronization Services
    O43 - CFD: 02/07/2012 - 23:04:20 - [4,002] ----D C:\Program Files (x86)\Microsoft Visual Studio 9.0
    O43 - CFD: 02/07/2012 - 23:03:56 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
    O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
    O43 - CFD: 17/07/2010 - 20:35:07 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
    O43 - CFD: 27/06/2011 - 18:46:37 - [0] ----D C:\Program Files (x86)\Nero
    O43 - CFD: 09/06/2012 - 01:53:39 - [0,129] ----D C:\Program Files (x86)\NirSoft
    O43 - CFD: 29/05/2012 - 09:32:30 - [13,701] ----D C:\Program Files (x86)\Norton Security Scan
    O43 - CFD: 29/05/2012 - 09:32:28 - [8,278] ----D C:\Program Files (x86)\NortonInstaller
    O43 - CFD: 15/11/2011 - 00:58:52 - [35,683] ----D C:\Program Files (x86)\ObviousIdea
    O43 - CFD: 29/06/2012 - 20:59:17 - [6,213] ----D C:\Program Files (x86)\OfferBox
    O43 - CFD: 01/07/2012 - 21:45:26 - [79,498] ----D C:\Program Files (x86)\OfficialVideoConverter
    O43 - CFD: 22/06/2012 - 23:35:27 - [33,205] ----D C:\Program Files (x86)\Oracle
    O43 - CFD: 04/09/2011 - 03:52:38 - [17,635] ----D C:\Program Files (x86)\PC Connectivity Solution
    O43 - CFD: 17/02/2011 - 03:53:16 - [7,526] ----D C:\Program Files (x86)\PC Drivers HeadQuarters
    O43 - CFD: 06/02/2012 - 20:41:02 - [1,551] ----D C:\Program Files (x86)\PriceGong
    O43 - CFD: 29/05/2012 - 07:36:14 - [94,838] ----D C:\Program Files (x86)\Real
    O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
    O43 - CFD: 29/06/2012 - 20:36:11 - [0,083] ----D C:\Program Files (x86)\Registry Mechanic
    O43 - CFD: 04/09/2011 - 04:12:04 - [253,697] ----D C:\Program Files (x86)\Samsung
    O43 - CFD: 04/07/2012 - 19:22:12 - [2,993] ----D C:\Program Files (x86)\Software
    O43 - CFD: 23/01/2011 - 06:09:50 - [3,596] ----D C:\Program Files (x86)\SoulseekNS
    O43 - CFD: 06/02/2012 - 20:40:57 - [8,487] ----D C:\Program Files (x86)\SweetIM
    O43 - CFD: 17/07/2010 - 20:33:00 - [161,462] ----D C:\Program Files (x86)\syncables
    O43 - CFD: 19/08/2011 - 03:44:20 - [0,662] ----D C:\Program Files (x86)\TengScribe
    O43 - CFD: 30/06/2012 - 13:40:25 - [10,283] ----D C:\Program Files (x86)\TubeMaster++
    O43 - CFD: 16/10/2011 - 14:12:40 - [18,018] ----D C:\Program Files (x86)\Uniblue
    O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
    O43 - CFD: 17/07/2010 - 20:49:20 - [73,732] ----D C:\Program Files (x86)\VIA
    O43 - CFD: 18/12/2010 - 00:31:24 - [80,793] ----D C:\Program Files (x86)\VideoLAN
    O43 - CFD: 16/01/2012 - 16:48:46 - [103,524] ----D C:\Program Files (x86)\Vuze
    O43 - CFD: 21/12/2010 - 01:23:46 - [3,938] ----D C:\Program Files (x86)\Vuze_Remote
    O43 - CFD: 02/12/2010 - 16:13:58 - [0,500] ----D C:\Program Files (x86)\Windows Defender
    O43 - CFD: 18/04/2012 - 02:52:53 - [177,421] ----D C:\Program Files (x86)\Windows Live
    O43 - CFD: 22/06/2011 - 04:01:03 - [5,895] ----D C:\Program Files (x86)\Windows Mail
    O43 - CFD: 22/06/2011 - 04:01:02 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
    O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
    O43 - CFD: 22/06/2011 - 04:01:01 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
    O43 - CFD: 22/06/2011 - 04:01:02 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
    O43 - CFD: 22/06/2011 - 04:01:03 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
    O43 - CFD: 10/06/2012 - 13:47:44 - [0,227] ----D C:\Program Files (x86)\WinPcap
    O43 - CFD: 19/12/2010 - 23:42:21 - [3,555] ----D C:\Program Files (x86)\WinRAR
    O43 - CFD: 15/11/2011 - 02:18:11 - [0,186] ----D C:\Program Files (x86)\Yontoo Layers Runtime
    O43 - CFD: 05/07/2012 - 17:09:59 - [12,845] ----D C:\Program Files (x86)\ZHPDiag
    O43 - CFD: 01/03/2011 - 23:02:55 - [15,886] ----D C:\Program Files (x86)\Common Files\Adobe
    O43 - CFD: 17/07/2010 - 20:38:53 - [30,315] ----D C:\Program Files (x86)\Common Files\Adobe AIR
    O43 - CFD: 29/04/2012 - 19:56:53 - [0,171] ----D C:\Program Files (x86)\Common Files\AVSMedia
    O43 - CFD: 17/07/2010 - 20:53:51 - [0,051] ----D C:\Program Files (x86)\Common Files\ControlDeck
    O43 - CFD: 01/12/2010 - 22:09:11 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER
    O43 - CFD: 14/03/2012 - 06:02:11 - [23,581] ----D C:\Program Files (x86)\Common Files\DivX Shared
    O43 - CFD: 12/01/2011 - 05:24:41 - [4,458] ----D C:\Program Files (x86)\Common Files\DVDVIDEOSOFT
    O43 - CFD: 17/07/2010 - 20:54:07 - [2,730] ----D C:\Program Files (x86)\Common Files\InstallShield
    O43 - CFD: 10/06/2012 - 13:54:47 - [1,181] ----D C:\Program Files (x86)\Common Files\Java
    O43 - CFD: 02/07/2012 - 23:03:57 - [37,337] ----D C:\Program Files (x86)\Common Files\microsoft shared
    O43 - CFD: 17/07/2010 - 20:31:07 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
    O43 - CFD: 18/12/2010 - 02:29:55 - [4,521] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
    O43 - CFD: 04/09/2011 - 03:47:21 - [57,541] ----D C:\Program Files (x86)\Common Files\Samsung
    O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
    O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
    O43 - CFD: 04/07/2012 - 00:01:49 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
    O43 - CFD: 10/11/2011 - 06:13:54 - [9,771] ----D C:\Program Files (x86)\Common Files\System
    O43 - CFD: 27/11/2010 - 22:30:38 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
    O43 - CFD: 29/05/2012 - 07:36:06 - [0,336] ----D C:\Program Files (x86)\Common Files\xing shared
    O43 - CFD: 04/03/2011 - 13:40:04 - [31,425] ----D C:\ProgramData\Adobe
    O43 - CFD: 04/07/2012 - 19:21:56 - [0,000] ----D C:\ProgramData\AMMYY
    O43 - CFD: 17/07/2010 - 20:51:20 - [0,000] ----D C:\ProgramData\AmUStor
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
    O43 - CFD: 11/10/2011 - 00:01:12 - [0,006] ----D C:\ProgramData\ArcSoft
    O43 - CFD: 02/12/2010 - 00:58:14 - [0,310] ----D C:\ProgramData\ASUS
    O43 - CFD: 09/10/2011 - 21:02:42 - [0,002] ----D C:\ProgramData\ASUS WebStorage
    O43 - CFD: 17/07/2010 - 20:41:56 - [0,000] ----D C:\ProgramData\ATI
    O43 - CFD: 05/03/2011 - 21:21:18 - [0] ----D C:\ProgramData\AVS4YOU
    O43 - CFD: 29/03/2011 - 04:20:55 - [0,043] ----D C:\ProgramData\CyberLink
    O43 - CFD: 30/01/2012 - 01:00:16 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
    O43 - CFD: 14/03/2012 - 06:03:06 - [5,265] ----D C:\ProgramData\DivX
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
    O43 - CFD: 09/06/2012 - 00:21:01 - [0] ----D C:\ProgramData\eMule
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
    O43 - CFD: 17/07/2010 - 20:30:35 - [21,401] ----D C:\ProgramData\GoBoingo
    O43 - CFD: 17/07/2010 - 20:30:11 - [0,012] ----D C:\ProgramData\Google
    O43 - CFD: 05/07/2012 - 16:26:38 - [-2026,307] -S--D C:\ProgramData\Microsoft
    O43 - CFD: 30/11/2010 - 02:19:21 - [187,201] ----D C:\ProgramData\Microsoft Digital Experience
    O43 - CFD: 02/07/2012 - 23:03:57 - [0,049] ----D C:\ProgramData\Microsoft Help
    O43 - CFD: 29/03/2011 - 05:38:03 - [0,028] ----D C:\ProgramData\Nero
    O43 - CFD: 24/12/2010 - 02:27:03 - [0] ----D C:\ProgramData\Nexon
    O43 - CFD: 24/12/2010 - 02:27:04 - [1,316] ----D C:\ProgramData\NexonEU
    O43 - CFD: 29/05/2012 - 09:32:30 - [0,004] ----D C:\ProgramData\Norton
    O43 - CFD: 11/04/2011 - 01:49:14 - [0,674] ----D C:\ProgramData\NortonInstaller
    O43 - CFD: 17/07/2010 - 20:32:30 - [16,903] ----D C:\ProgramData\OberonGameConsole
    O43 - CFD: 17/07/2010 - 20:51:56 - [0,002] ----D C:\ProgramData\P4G
    O43 - CFD: 25/12/2010 - 19:19:19 - [0,001] ----D C:\ProgramData\Partner
    O43 - CFD: 17/02/2011 - 03:54:06 - [0,001] ----D C:\ProgramData\PC Drivers HeadQuarters
    O43 - CFD: 04/09/2011 - 04:01:19 - [0] ----D C:\ProgramData\PC Suite
    O43 - CFD: 22/06/2011 - 00:51:17 - [1,588] ----D C:\ProgramData\Real
    O43 - CFD: 04/09/2011 - 03:52:23 - [6,631] ----D C:\ProgramData\Samsung
    O43 - CFD: 27/01/2012 - 23:48:35 - [23,303] ----D C:\ProgramData\Skype
    O43 - CFD: 02/01/2012 - 16:23:38 - [0,723] ----D C:\ProgramData\Soulseek
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
    O43 - CFD: 13/09/2011 - 04:37:08 - [0,000] ----D C:\ProgramData\Sun
    O43 - CFD: 06/02/2012 - 20:40:43 - [7,222] ----D C:\ProgramData\SweetIM
    O43 - CFD: 29/05/2012 - 09:32:37 - [370,719] ----D C:\ProgramData\Symantec
    O43 - CFD: 15/11/2011 - 02:18:11 - [3,334] ----D C:\ProgramData\Tarma Installer
    O43 - CFD: 03/07/2012 - 03:26:07 - [0,137] ---AD C:\ProgramData\Temp
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
    O43 - CFD: 05/07/2012 - 16:23:15 - [0,070] ----D C:\ProgramData\Trend Micro
    O43 - CFD: 17/02/2011 - 03:54:23 - [0] ----D C:\ProgramData\UAB
    O43 - CFD: 10/10/2011 - 02:43:51 - [0] ----D C:\ProgramData\Uniblue
    O43 - CFD: 19/08/2011 - 11:25:56 - [0] ----D C:\ProgramData\VirtualizedApplications
    O43 - CFD: 17/02/2011 - 02:17:35 - [7,599] --H-D C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
    O43 - CFD: 14/11/2011 - 23:10:30 - [19,136] ----D C:\Users\Admin\AppData\Roaming\Adobe
    O43 - CFD: 27/01/2012 - 23:40:42 - [0,032] ----D C:\Users\Admin\AppData\Roaming\AIMP
    O43 - CFD: 27/01/2012 - 23:45:03 - [0] ----D C:\Users\Admin\AppData\Roaming\ArcSoft
    O43 - CFD: 14/10/2011 - 12:29:51 - [45,285] ----D C:\Users\Admin\AppData\Roaming\Asus WebStorage
    O43 - CFD: 27/11/2010 - 22:42:12 - [0] ----D C:\Users\Admin\AppData\Roaming\ATI
    O43 - CFD: 05/03/2011 - 21:21:24 - [0] ----D C:\Users\Admin\AppData\Roaming\AVS4YOU
    O43 - CFD: 02/07/2012 - 12:20:14 - [39,383] ----D C:\Users\Admin\AppData\Roaming\Azureus
    O43 - CFD: 13/09/2011 - 04:30:52 - [0,467] ----D C:\Users\Admin\AppData\Roaming\ComplitlyEngine
    O43 - CFD: 16/01/2012 - 19:13:19 - [0,002] ----D C:\Users\Admin\AppData\Roaming\CyberLink
    O43 - CFD: 13/09/2011 - 21:40:49 - [96,077] ----D C:\Users\Admin\AppData\Roaming\D-Jix
    O43 - CFD: 13/09/2011 - 22:23:22 - [0,184] ----D C:\Users\Admin\AppData\Roaming\D-Jix Media LE
    O43 - CFD: 30/01/2012 - 01:10:47 - [0,787] ----D C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
    O43 - CFD: 05/03/2011 - 21:21:24 - [0,271] ----D C:\Users\Admin\AppData\Roaming\DivX
    O43 - CFD: 27/02/2011 - 12:33:46 - [0,000] ----D C:\Users\Admin\AppData\Roaming\dvdcss
    O43 - CFD: 06/06/2011 - 18:34:33 - [0] ----D C:\Users\Admin\AppData\Roaming\EeeStorageUploader
    O43 - CFD: 12/01/2011 - 05:28:16 - [0,002] ----D C:\Users\Admin\AppData\Roaming\FreeVideoConverter
    O43 - CFD: 27/06/2011 - 18:21:17 - [0,097] ----D C:\Users\Admin\AppData\Roaming\GameRanger
    O43 - CFD: 27/11/2010 - 22:40:27 - [0] ----D C:\Users\Admin\AppData\Roaming\Identities
    O43 - CFD: 21/01/2012 - 14:37:17 - [0] ----D C:\Users\Admin\AppData\Roaming\LocalLow
    O43 - CFD: 09/12/2010 - 18:47:36 - [0,043] ----D C:\Users\Admin\AppData\Roaming\Macromedia
    O43 - CFD: 14/07/2009 - 09:44:38 - [0] ----D C:\Users\Admin\AppData\Roaming\Media Center Programs
    O43 - CFD: 07/01/2012 - 03:22:34 - [0,547] ----D C:\Users\Admin\AppData\Roaming\Megaupload
    O43 - CFD: 02/07/2012 - 12:42:31 - [18,495] -S--D C:\Users\Admin\AppData\Roaming\Microsoft
    O43 - CFD: 19/01/2011 - 01:37:33 - [0,001] ----D C:\Users\Admin\AppData\Roaming\MP-Manager
    O43 - CFD: 19/01/2011 - 01:32:40 - [0] ----D C:\Users\Admin\AppData\Roaming\MPMAN
    O43 - CFD: 29/03/2011 - 05:58:39 - [0,098] ----D C:\Users\Admin\AppData\Roaming\Nero
    O43 - CFD: 27/04/2012 - 04:03:56 - [0,011] ----D C:\Users\Admin\AppData\Roaming\ObviousIdea
    O43 - CFD: 29/06/2012 - 20:59:24 - [0,378] ----D C:\Users\Admin\AppData\Roaming\OfferBox
    O43 - CFD: 10/10/2011 - 02:41:15 - [6,033] ----D C:\Users\Admin\AppData\Roaming\OpenCandy
    O43 - CFD: 04/09/2011 - 04:01:18 - [0,000] ----D C:\Users\Admin\AppData\Roaming\PC Suite
    O43 - CFD: 29/05/2012 - 07:36:33 - [66,713] ----D C:\Users\Admin\AppData\Roaming\Real
    O43 - CFD: 10/10/2011 - 16:27:22 - [0,000] ----D C:\Users\Admin\AppData\Roaming\Registry Mechanic
    O43 - CFD: 04/09/2011 - 03:48:07 - [74,180] ----D C:\Users\Admin\AppData\Roaming\Samsung
    O43 - CFD: 14/06/2011 - 22:45:11 - [8,571] ----D C:\Users\Admin\AppData\Roaming\Skype
    O43 - CFD: 14/06/2011 - 18:53:08 - [0,044] ----D C:\Users\Admin\AppData\Roaming\skypePM
    O43 - CFD: 29/04/2012 - 06:50:53 - [4,819] ----D C:\Users\Admin\AppData\Roaming\SoftGrid Client
    O43 - CFD: 01/12/2010 - 22:19:40 - [0] ----D C:\Users\Admin\AppData\Roaming\TP
    O43 - CFD: 16/10/2011 - 14:12:45 - [0,157] ----D C:\Users\Admin\AppData\Roaming\Uniblue
    O43 - CFD: 19/11/2011 - 03:55:23 - [1,245] ----D C:\Users\Admin\AppData\Roaming\vlc
    O43 - CFD: 25/11/2011 - 12:39:02 - [0,000] ----D C:\Users\Admin\AppData\Roaming\Windows Live Writer
    O43 - CFD: 19/12/2010 - 23:42:41 - [0,000] ----D C:\Users\Admin\AppData\Roaming\WinRAR
    O43 - CFD: 15/01/2012 - 21:01:46 - [0,000] ----D C:\Users\Admin\AppData\Roaming\Youtube Downloader HD
    O43 - CFD: 01/03/2011 - 17:29:53 - [0,384] ----D C:\Users\Admin\AppData\Local\Adobe
    O43 - CFD: 27/11/2010 - 22:29:58 - [0] ----D C:\Users\Admin\AppData\Local\Application Data
    O43 - CFD: 02/12/2010 - 00:58:11 - [1,400] ----D C:\Users\Admin\AppData\Local\ASUS
    O43 - CFD: 27/11/2010 - 22:42:12 - [0,089] ----D C:\Users\Admin\AppData\Local\ATI
    O43 - CFD: 01/07/2012 - 19:53:30 - [0,000] ----D C:\Users\Admin\AppData\Local\DDMSettings
    O43 - CFD: 05/07/2012 - 06:30:39 - [3,760] ----D C:\Users\Admin\AppData\Local\Diagnostics
    O43 - CFD: 10/10/2011 - 22:52:56 - [59,581] ----D C:\Users\Admin\AppData\Local\Downloaded Installations
    O43 - CFD: 05/07/2012 - 16:59:25 - [0] ----D C:\Users\Admin\AppData\Local\ElevatedDiagnostics
    O43 - CFD: 09/06/2012 - 00:19:44 - [1,016] ----D C:\Users\Admin\AppData\Local\eMule
    O43 - CFD: 10/07/2011 - 21:05:36 - [0] ----D C:\Users\Admin\AppData\Local\Google
    O43 - CFD: 27/11/2010 - 22:29:58 - [0] ----D C:\Users\Admin\AppData\Local\Historique
    O43 - CFD: 02/07/2012 - 12:42:33 - [1246,974] ----D C:\Users\Admin\AppData\Local\Microsoft
    O43 - CFD: 19/01/2011 - 20:19:38 - [0,985] ----D C:\Users\Admin\AppData\Local\Microsoft Games
    O43 - CFD: 02/07/2012 - 12:41:58 - [0] ----D C:\Users\Admin\AppData\Local\Microsoft Help
    O43 - CFD: 31/03/2011 - 00:37:12 - [0] ----D C:\Users\Admin\AppData\Local\Nero
    O43 - CFD: 31/03/2011 - 00:37:14 - [0,001] ----D C:\Users\Admin\AppData\Local\Nero_AG
    O43 - CFD: 10/10/2011 - 13:10:46 - [0] ----D C:\Users\Admin\AppData\Local\OpenCandy
    O43 - CFD: 17/02/2011 - 02:17:18 - [0] ----D C:\Users\Admin\AppData\Local\PackageAware
    O43 - CFD: 17/02/2011 - 03:54:19 - [0,003] ----D C:\Users\Admin\AppData\Local\PC_Drivers_Headquarters
    O43 - CFD: 27/11/2010 - 22:30:13 - [0,488] ----D C:\Users\Admin\AppData\Local\Power2Go
    O43 - CFD: 29/05/2012 - 07:32:27 - [0] ----D C:\Users\Admin\AppData\Local\Real
    O43 - CFD: 01/12/2010 - 22:14:35 - [4,129] ----D C:\Users\Admin\AppData\Local\SoftGrid Client
    O43 - CFD: 04/07/2012 - 19:22:12 - [0] ----D C:\Users\Admin\AppData\Local\Software
    O43 - CFD: 27/11/2010 - 22:41:02 - [0,007] ----D C:\Users\Admin\AppData\Local\SRS Labs
    O43 - CFD: 05/07/2012 - 17:08:31 - [30,628] ----D C:\Users\Admin\AppData\Local\Temp
    O43 - CFD: 27/11/2010 - 22:29:58 - [0] ----D C:\Users\Admin\AppData\Local\Temporary Internet Files
    O43 - CFD: 12/01/2011 - 05:39:30 - [0,683] ----D C:\Users\Admin\AppData\Local\VirtualStore
    O43 - CFD: 05/07/2012 - 16:12:36 - [0,141] ----D C:\Users\Admin\AppData\Local\Windows Live
    O43 - CFD: 02/05/2011 - 01:44:45 - [0,618] ----D C:\Users\Admin\AppData\Local\Windows Live Writer
    O43 - CFD: 17/06/2012 - 22:26:06 - [0] ----D C:\Users\Admin\AppData\Local\{006CD6F4-F94D-4763-972C-A10C733C9793}
    O43 - CFD: 11/10/2011 - 15:36:11 - [0] ----D C:\Users\Admin\AppData\Local\{00BACCD4-FF60-4946-B2F2-B6B911862358}
    O43 - CFD: 13/04/2011 - 22:32:25 - [0] ----D C:\Users\Admin\AppData\Local\{00DD52BD-B2E0-49E1-BCE6-6C52757BB07A}
    O43 - CFD: 18/02/2011 - 13:32:23 - [0] ----D C:\Users\Admin\AppData\Local\{012CB317-03DB-482F-AA01-0DEA5674712B}
    O43 - CFD: 05/11/2011 - 01:19:07 - [0] ----D C:\Users\Admin\AppData\Local\{0167DAA4-0D39-4F5F-96A4-D18366EE1388}
    O43 - CFD: 23/05/2012 - 05:59:00 - [0] ----D C:\Users\Admin\AppData\Local\{0193E05C-B4C3-489D-8C38-1FDE29E316EF}
    O43 - CFD: 29/06/2012 - 08:42:22 - [0] ----D C:\Users\Admin\AppData\Local\{01960B57-4E31-434C-BC69-D36C080EC831}
    O43 - CFD: 10/03/2012 - 01:04:04 - [0] ----D C:\Users\Admin\AppData\Local\{01C27FA8-D149-4B79-BCB4-71B50ABE2B4B}
    O43 - CFD: 06/03/2012 - 00:23:12 - [0] ----D C:\Users\Admin\AppData\Local\{01D16EAC-1239-4472-8070-AD636E5D757E}
    O43 - CFD: 03/05/2011 - 22:45:10 - [0] ----D C:\Users\Admin\AppData\Local\{026C0C7D-F05B-4979-ABDD-1A816A0A51B4}
    O43 - CFD: 30/04/2011 - 22:42:58 - [0] ----D C:\Users\Admin\AppData\Local\{02874654-0D93-4AD4-B367-16E58C8FD4ED}
    O43 - CFD: 29/09/2011 - 01:10:26 - [0] ----D C:\Users\Admin\AppData\Local\{02B95A28-87E7-4F23-B6CE-F9D0EB98CDEB}
    O43 - CFD: 02/12/2011 - 02:28:35 - [0] ----D C:\Users\Admin\AppData\Local\{02DF5A9D-63FE-4D27-9963-42C7D89A6344}
    O43 - CFD: 26/08/2011 - 23:21:11 - [0] ----D C:\Users\Admin\AppData\Local\{02EF1293-C000-4C4B-A90C-8EBDA126F6A0}
    O43 - CFD: 06/02/2011 - 02:48:53 - [0] ----D C:\Users\Admin\AppData\Local\{034008C8-9E9A-4D70-B9FD-FC239C276129}
    O43 - CFD: 12/07/2011 - 00:28:58 - [0] ----D C:\Users\Admin\AppData\Local\{03617C3E-9F3D-4BEF-BDE7-067E223948D5}
    O43 - CFD: 12/09/2011 - 00:04:26 - [0] ----D C:\Users\Admin\AppData\Local\{038877EF-0EA9-4D07-A254-978DDA52A990}
    O43 - CFD: 11/11/2011 - 03:45:27 - [0] ----D C:\Users\Admin\AppData\Local\{03B0D7D5-AF7A-4C82-B810-5095F3EBC2FC}
    O43 - CFD: 23/11/2011 - 02:46:38 - [0] ----D C:\Users\Admin\AppData\Local\{0444FA97-A069-4B7A-9405-56FB480F9A41}
    O43 - CFD: 11/10/2011 - 03:35:06 - [0] ----D C:\Users\Admin\AppData\Local\{04A931AC-4F87-48DB-B420-71990B212EA2}
    O43 - CFD: 17/03/2011 - 02:53:52 - [0] ----D C:\Users\Admin\AppData\Local\{04BC3B25-ED18-4D3B-B0F8-461500201408}
    O43 - CFD: 26/07/2011 - 00:08:05 - [0] ----D C:\Users\Admin\AppData\Local\{04DBB7A5-B1BA-4B90-A91C-AEDFA2802D24}
    O43 - CFD: 10/09/2011 - 23:51:41 - [0] ----D C:\Users\Admin\AppData\Local\{04F27324-DD63-4C5A-8C7B-2DC65174D88F}
    O43 - CFD: 23/06/2012 - 04:25:06 - [0] ----D C:\Users\Admin\AppData\Local\{050AD28C-844F-4596-9D4F-24F92A5609DC}
    O43 - CFD: 15/09/2011 - 13:36:26 - [0] ----D C:\Users\Admin\AppData\Local\{054189E5-B7EF-44EC-BB92-F580B1460A0A}
    O43 - CFD: 15/03/2012 - 10:26:03 - [0] ----D C:\Users\Admin\AppData\Local\{054DF6CF-1B70-420D-992C-91B46D587340}
    O43 - CFD: 03/09/2011 - 22:47:46 - [0] ----D C:\Users\Admin\AppData\Local\{05FBCEE0-4FB9-4427-986B-8B6ACE65FCE3}
    O43 - CFD: 26/01/2012 - 04:34:36 - [0] ----D C:\Users\Admin\AppData\Local\{06BE608E-4681-4B8D-BB36-57A0CC00F111}
    O43 - CFD: 04/02/2011 - 02:47:49 - [0] ----D C:\Users\Admin\AppData\Local\{06D5959A-26E5-4B88-9E74-98878529CEEA}
    O43 - CFD: 21/06/2011 - 00:08:07 - [0] ----D C:\Users\Admin\AppData\Local\{076FB81F-0CE9-4CC9-B80E-D704F57E7F8D}
    O43 - CFD: 18/08/2011 - 11:20:42 - [0] ----D C:\Users\Admin\AppData\Local\{077A9262-ACF9-49E4-8502-8FC389820EC5}
    O43 - CFD: 11/04/2011 - 10:31:07 - [0] ----D C:\Users\Admin\AppData\Local\{07C37931-1118-4537-85FA-8696E34F107A}
    O43 - CFD: 30/01/2012 - 01:28:46 - [0] ----D C:\Users\Admin\AppData\Local\{0801FE5C-5FF1-4BB2-8C91-504D218FEB11}
    O43 - CFD: 22/02/2011 - 01:00:51 - [0] ----D C:\Users\Admin\AppData\Local\{080203FD-D373-4544-A16C-6FFA768BE7CF}
    O43 - CFD: 19/06/2011 - 22:50:57 - [0] ----D C:\Users\Admin\AppData\Local\{0808EA18-8F32-46EB-9F95-9314EBB340EF}
    O43 - CFD: 16/11/2011 - 14:12:05 - [0] ----D C:\Users\Admin\AppData\Local\{0829F7E9-1007-4418-B3F4-766ACFF66B3E}
    O43 - CFD: 13/03/2011 - 01:47:23 - [0] ----D C:\Users\Admin\AppData\Local\{08321DC2-3B56-4114-A4DD-8FA8B533F1A3}
    O43 - CFD: 22/01/2012 - 00:12:21 - [0] ----D C:\Users\Admin\AppData\Local\{087D18D1-0870-420D-8DD6-C0D0E0274EA8}
    O43 - CFD: 30/08/2011 - 22:37:28 - [0] ----D C:\Users\Admin\AppData\Local\{08D2FD97-8F5F-4844-AE4D-02BD2C7AD0D4}
    O43 - CFD: 10/01/2012 - 14:14:08 - [0] ----D C:\Users\Admin\AppData\Local\{08E2E095-BCE2-410A-A0E4-D0F06624944E}
    O43 - CFD: 26/02/2011 - 13:04:01 - [0] ----D C:\Users\Admin\AppData\Local\{08EA37D4-F06F-4F86-91D2-871F0FE23D2C}
    O43 - CFD: 23/06/2012 - 22:53:33 - [0] ----D C:\Users\Admin\AppData\Local\{091023BA-179C-4282-8463-85AE2A1BCB34}
    O43 - CFD: 02/07/2012 - 15:57:18 - [0] ----D C:\Users\Admin\AppData\Local\{092198D6-6B54-4F94-8827-376E74DFD7B7}
    O43 - CFD: 08/12/2011 - 01:58:02 - [0] ----D C:\Users\Admin\AppData\Local\{09416085-2F34-4245-81A3-B6932433A766}
    O43 - CFD: 11/03/2012 - 19:10:21 - [0] ----D C:\Users\Admin\AppData\Local\{09779B2A-E1CD-4D57-B4DE-AB3802DEA622}
    O43 - CFD: 04/06/2011 - 00:21:57 - [0] ----D C:\Users\Admin\AppData\Local\{09A2E4D7-3843-4F31-A8AF-26DBDF090EB4}
    O43 - CFD: 01/06/2011 - 12:19:53 - [0] ----D C:\Users\Admin\AppData\Local\{09C515B6-9118-4D4E-A982-E64EAF46AE74}
    O43 - CFD: 23/09/2011 - 04:31:30 - [0] ----D C:\Users\Admin\AppData\Local\{09E80E93-0D9F-4C1C-ABF5-7A9B952EDECA}
    O43 - CFD: 15/10/2011 - 21:24:08 - [0] ----D C:\Users\Admin\AppData\Local\{0A5A71C0-A754-41DE-B19C-2326B3A3501E}
    O43 - CFD: 08/04/2011 - 10:29:13 - [0] ----D C:\Users\Admin\AppData\Local\{0A5D7F32-27DC-4F2C-A5F1-F6C9AD9143AF}
    O43 - CFD: 30/05/2012 - 10:43:43 - [0] ----D C:\Users\Admin\AppData\Local\{0A65EDBD-AF33-4D74-88FF-C24DE5E9B33A}
    O43 - CFD: 19/02/2011 - 01:32:36 - [0] ----D C:\Users\Admin\AppData\Local\{0AC09C56-8FDA-4B2E-B331-C10BF4170242}
    O43 - CFD: 11/01/2012 - 13:35:15 - [0] ----D C:\Users\Admin\AppData\Local\{0AC6A8AA-C492-4E7F-B367-C6CE55114651}
    O43 - CFD: 30/10/2011 - 00:08:58 - [0] ----D C:\Users\Admin\AppData\Local\{0B0C692B-6D7F-4156-843C-619DD4610B9D}
    O43 - CFD: 17/02/2011 - 14:40:58 - [0] ----D C:\Users\Admin\AppData\Local\{0B4B836E-3FCE-4792-A204-61801DF687C2}
    O43 - CFD: 29/04/2011 - 10:41:52 - [0] ----D C:\Users\Admin\AppData\Local\{0B7F54C5-8269-41C9-9238-EA2C36D4FD95}
    O43 - CFD: 22/12/2011 - 00:36:18 - [0] ----D C:\Users\Admin\AppData\Local\{0BC3D6A3-703A-45B9-A7F4-359B4E24E248}
    O43 - CFD: 17/02/2012 - 19:26:42 - [0] ----D C:\Users\Admin\AppData\Local\{0C194FF6-FCB0-4C4C-9D07-DF53F9847359}
    O43 - CFD: 04/10/2011 - 15:24:50 - [0] ----D C:\Users\Admin\AppData\Local\{0C4A88DA-9801-4421-B1B0-8C44CF41C6DB}
    O43 - CFD: 20/12/2011 - 15:20:40 - [0] ----D C:\Users\Admin\AppData\Local\{0C54F563-7FFF-4B3E-9D8B-0D8609FCA547}
    O43 - CFD: 06/05/2012 - 14:40:51 - [0] ----D C:\Users\Admin\AppData\Local\{0D24D611-B996-4085-BE90-1C9C73D37104}
    O43 - CFD: 01/11/2011 - 18:57:25 - [0] ----D C:\Users\Admin\AppData\Local\{0D5E1402-C2F8-4E6A-9EF8-8A9DB63AACCA}
    O43 - CFD: 01/11/2011 - 02:10:21 - [0] ----D C:\Users\Admin\AppData\Local\{0EEB1A95-6ACA-4EEF-AB3E-34B5EE29EA58}
    O43 - CFD: 30/09/2011 - 13:13:20 - [0] ----D C:\Users\Admin\AppData\Local\{0EF64A49-59FB-4C62-8DB1-3F365BCC8B63}
    O43 - CFD: 02/06/2012 - 21:03:36 - [0] ----D C:\Users\Admin\AppData\Local\{0F5645E0-5188-4A07-935C-0E2DECDE3324}
    O43 - CFD: 23/10/2011 - 17:49:12 - [0] ----D C:\Users\Admin\AppData\Local\{0FCB7BF0-E027-451D-8E64-9B287863C0B1}
    O43 - CFD: 19/07/2011 - 11:34:13 - [0] ----D C:\Users\Admin\AppData\Local\{0FD68A1F-61E4-45B2-8E97-9FCD9171914D}
    O43 - CFD: 22/05/2012 - 17:57:43 - [0] ----D C:\Users\Admin\AppData\Local\{100A72C2-3C98-4CF8-B3CB-572762CDC6A1}
    O43 - CFD: 04/02/2012 - 00:57:04 - [0] ----D C:\Users\Admin\AppData\Local\{10458AB8-DAB1-4099-AE73-A49C48CCDBD0}
    O43 - CFD: 09/05/2011 - 21:15:02 - [0] ----D C:\Users\Admin\AppData\Local\{10FE1E48-7B6E-4902-849F-D2607EFA6F8F}
    O43 - CFD: 20/01/2012 - 15:02:25 - [0] ----D C:\Users\Admin\AppData\Local\{114C56E9-E690-4A93-AC93-842EA07F7102}
    O43 - CFD: 10/03/2011 - 01:24:46 - [0] ----D C:\Users\Admin\AppData\Local\{1186B0F8-ADC2-4BD7-B3A8-AC87331AE129}
    O43 - CFD: 12/09/2011 - 12:05:29 - [0] ----D C:\Users\Admin\AppData\Local\{11A86B3D-32AA-4004-B3C2-960B7314B082}
    O43 - CFD: 24/05/2011 - 11:43:24 - [0] ----D C:\Users\Admin\AppData\Local\{11AC964D-A7A0-4879-805C-000B64482FF2}
    O43 - CFD: 26/06/2012 - 11:53:34 - [0] ----D C:\Users\Admin\AppData\Local\{11CACB84-074E-49E3-9DE6-4FE26F6381B3}
    O43 - CFD: 24/06/2012 - 22:00:51 - [0] ----D C:\Users\Admin\AppData\Local\{11FE04F7-2A89-4E4D-9486-EECB256411E3}
    O43 - CFD: 09/07/2011 - 00:26:34 - [0] ----D C:\Users\Admin\AppData\Local\{11FEF18B-0CB6-4FED-B493-36009B9E86CF}
    O43 - CFD: 05/06/2012 - 11:34:04 - [0] ----D C:\Users\Admin\AppData\Local\{123F1140-B884-4F3A-A1E6-827F5EC72DEC}
    O43 - CFD: 14/03/2012 - 23:20:58 - [0] ----D C:\Users\Admin\AppData\Local\{1331CFEC-DFB6-411B-A215-FD8FCB649B6C}
    O43 - CFD: 03/04/2012 - 03:53:15 - [0] ----D C:\Users\Admin\AppData\Local\{1393C08F-C40D-4092-9CA1-AF9C00151E47}
    O43 - CFD: 17/06/2012 - 10:25:32 - [0] ----D C:\Users\Admin\AppData\Local\{1423BE17-232F-40E1-867F-4CF15CD7F41E}
    O43 - CFD: 20/10/2011 - 02:03:55 - [0] ----D C:\Users\Admin\AppData\Local\{142BF36B-0E22-4D83-98F7-C5DD3460E502}
    O43 - CFD: 22/01/2012 - 00:12:32 - [0] ----D C:\Users\Admin\AppData\Local\{143EDD12-5D63-418A-9FBF-EAA4891EF643}
    O43 - CFD: 31/05/2012 - 14:20:36 - [0] ----D C:\Users\Admin\AppData\Local\{14957B86-C610-4B26-9C13-7EC50EE104AF}
    O43 - CFD: 27/06/2011 - 10:54:20 - [0] ----D C:\Users\Admin\AppData\Local\{14ED7C45-D370-4651-BA48-3601CF97A660}
    O43 - CFD: 09/06/2012 - 08:43:59 - [0] ----D C:\Users\Admin\AppData\Local\{154FAB49-D66E-40E6-BD4C-1A351F9F00DF}
    O43 - CFD: 15/08/2011 - 11:23:19 - [0] ----D C:\Users\Admin\AppData\Local\{1569DB9F-A172-47A9-B0D8-EEEE3B9DFCC3}
    O43 - CFD: 17/09/2011 - 01:38:32 - [0] ----D C:\Users\Admin\AppData\Local\{15E1A460-F68D-42BA-B874-1A967F64DB51}
    O43 - CFD: 06/09/2011 - 00:56:32 - [0] ----D C:\Users\Admin\AppData\Local\{161FE487-FC95-4D8B-8030-79155698BCB0}
    O43 - CFD: 19/05/2011 - 11:23:01 - [0] ----D C:\Users\Admin\AppData\Local\{162AC7DA-0155-44E6-AFC5-F89E98E972C0}
    O43 - CFD: 20/03/2012 - 02:33:25 - [0] ----D C:\Users\Admin\AppData\Local\{16A3235A-ACB5-4514-A3B6-8C5105C4589C}
    O43 - CFD: 30/03/2012 - 12:31:58 - [0] ----D C:\Users\Admin\AppData\Local\{16DC8C35-8675-4F2E-8C25-251DD855E489}
    O43 - CFD: 30/07/2011 - 01:06:54 - [0] ----D C:\Users\Admin\AppData\Local\{16F74642-53CF-4095-AB74-1794970A8E55}
    O43 - CFD: 26/04/2012 - 02:58:15 - [0] ----D C:\Users\Admin\AppData\Local\{172093AF-D6C1-4BF6-B8B8-DA67240E38EF}
    O43 - CFD: 22/08/2011 - 23:33:20 - [0] ----D C:\Users\Admin\AppData\Local\{1729368D-42E4-4D91-B777-1569B069542D}
    O43 - CFD: 31/07/2011 - 01:07:36 - [0] ----D C:\Users\Admin\AppData\Local\{1792713F-79D7-4432-97A6-BC1E5A721CF0}
    O43 - CFD: 28/04/2012 - 02:12:16 - [0] ----D C:\Users\Admin\AppData\Local\{17B01898-4169-432A-AD79-EEDD28383127}
    O43 - CFD: 18/08/2011 - 11:20:23 - [0] ----D C:\Users\Admin\AppData\Local\{181EBBE2-A75D-4B89-A900-145E38F0E6A8}
    O43 - CFD: 27/01/2012 - 18:18:37 - [0] ----D C:\Users\Admin\AppData\Local\{1882F0C2-3838-49D4-9137-86453906B1E8}
    O43 - CFD: 30/09/2011 - 01:12:26 - [0] ----D C:\Users\Admin\AppData\Local\{18832917-BA5E-48A1-9EFE-69259A4AA555}
    O43 - CFD: 10/06/2011 - 13:57:42 - [0] ----D C:\Users\Admin\AppData\Local\{1898DEE5-F3A8-495A-ADD4-2B0C40C91D00}
    O43 - CFD: 05/12/2011 - 02:32:03 - [0] ----D C:\Users\Admin\AppData\Local\{18B5AB0E-0BCD-45FE-A09B-E7A3BE8B81EE}
    O43 - CFD: 08/09/2011 - 02:10:39 - [0] ----D C:\Users\Admin\AppData\Local\{18C0A4D6-4376-4BE0-A730-B978927BE9EC}
    O43 - CFD: 30/04/2012 - 10:06:09 - [0] ----D C:\Users\Admin\AppData\Local\{18DACE07-CEEB-48BC-A79E-DFF11AC1E70D}
    O43 - CFD: 20/11/2011 - 16:08:59 - [0] ----D C:\Users\Admin\AppData\Local\{1916D09B-D862-4348-BE68-88BE72FB63D6}
    O43 - CFD: 09/03/2011 - 00:03:56 - [0] ----D C:\Users\Admin\AppData\Local\{1919CA5A-794D-4742-BDD0-1C080DEDF560}
    O43 - CFD: 06/06/2012 - 12:18:12 - [0] ----D C:\Users\Admin\AppData\Local\{19AB0C7B-9321-4A97-B01C-8FE138B23A23}
    O43 - CFD: 04/02/2012 - 00:57:23 - [0] ----D C:\Users\Admin\AppData\Local\{19F83320-7872-4E45-91B7-4265CD62B8F0}
    O43 - CFD: 18/08/2011 - 23:22:35 - [0] ----D C:\Users\Admin\AppData\Local\{1A25573B-5ADE-43E8-8C32-A662B35E42E4}
    O43 - CFD: 29/09/2011 - 13:11:42 - [0] ----D C:\Users\Admin\AppData\Local\{1A3B58BD-A69D-4421-8E8F-0E83E5CD81F0}
    O43 - CFD: 24/03/2011 - 10:30:19 - [0] ----D C:\Users\Admin\AppData\Local\{1A6A8381-D1D3-4836-9686-B6801A4CCBB7}
    O43 - CFD: 05/11/2011 - 13:23:54 - [0] ----D C:\Users\Admin\AppData\Local\{1A956430-BBCB-469F-A1EA-12E9A47442FF}
    O43 - CFD: 24/05/2012 - 09:45:16 - [0] ----D C:\Users\Admin\AppData\Local\{1B1442CD-7F24-4448-9838-14FBE39A6830}
    O43 - CFD: 16/09/2011 - 01:36:58 - [0] ----D C:\Users\Admin\AppData\Local\{1B2034FB-3B5B-4F57-944C-693CC974B337}
    O43 - CFD: 30/06/2012 - 12:24:59 - [0] ----D C:\Users\Admin\AppData\Local\{1B39413E-6B67-48CC-BD5E-91408F6940FB}
    O43 - CFD: 21/01/2012 - 07:34:34 - [0] ----D C:\Users\Admin\AppData\Local\{1B77C7B0-CFE7-403B-A8D6-C31D6E08D306}
    O43 - CFD: 05/10/2011 - 15:26:31 - [0] ----D C:\Users\Admin\AppData\Local\{1BA8DE4E-70DD-4AAC-A8E9-33D4AD17B982}
    O43 - CFD: 23/10/2011 - 00:31:49 - [0] ----D C:\Users\Admin\AppData\Local\{1BB9A9D6-6E86-4195-9D45-238862088860}
    O43 - CFD: 17/09/2011 - 13:39:10 - [0] ----D C:\Users\Admin\AppData\Local\{1C1D9146-7869-4094-928B-87F86AF37114}
    O43 - CFD: 23/01/2012 - 21:48:14 - [0] ----D C:\Users\Admin\AppData\Local\{1C3A8719-9E16-4E82-9CD9-7650CD7C484B}
    O43 - CFD: 05/03/2011 - 01:40:52 - [0] ----D C:\Users\Admin\AppData\Local\{1C4358E8-E620-46F9-9A0B-D23A79D2A8C5}
    O43 - CFD: 04/05/2012 - 02:54:19 - [0] ----D C:\Users\Admin\AppData\Local\{1C929313-32B3-4E30-9E7C-C6F660484EE6}
    O43 - CFD: 07/04/2011 - 10:28:35 - [0] ----D C:\Users\Admin\AppData\Local\{1C9A2AE5-CD09-4484-8D9E-FFF87B0B8955}
    O43 - CFD: 21/08/2011 - 23:31:28 - [0] ----D C:\Users\Admin\AppData\Local\{1CDA7DDE-F1C4-4C3D-9881-E457F567183C}
    O43 - CFD: 13/08/2011 - 08:11:09 - [0] ----D C:\Users\Admin\AppData\Local\{1CE99167-1D5B-4DCF-A93E-426220CA8196}
    O43 - CFD: 15/12/2011 - 03:13:29 - [0] ----D C:\Users\Admin\AppData\Local\{1DCA1F2E-2925-4FB2-8452-7A3DC032E0CF}
    O43 - CFD: 03/05/2012 - 14:23:54 - [0] ----D C:\Users\Admin\AppData\Local\{1DD97791-D29F-47F9-BE8C-72959FC87861}
    O43 - CFD: 05/02/2011 - 02:48:14 - [0] ----D C:\Users\Admin\AppData\Local\{1E364096-CAB9-403F-8E8A-4B139927A151}
    O43 - CFD: 21/09/2011 - 23:41:58 - [0] ----D C:\Users\Admin\AppData\Local\{1E7DCAF4-75AD-4934-AFD8-D49DEEB3E926}
    O43 - CFD: 25/06/2012 - 11:44:22 - [0] ----D C:\Users\Admin\AppData\Local\{1E9B0DD7-6EA7-43B4-8201-AC9A0E5DB22C}
    O43 - CFD: 07/02/2012 - 01:30:48 - [0] ----D C:\Users\Admin\AppData\Local\{2076A0B8-A821-4231-8989-95D9A6E3D620}
    O43 - CFD: 25/06/2011 - 22:28:52 - [0] ----D C:\Users\Admin\AppData\Local\{2086CF73-894A-4312-B687-4D2C621BB50D}
    O43 - CFD: 17/10/2011 - 14:00:29 - [0] ----D C:\Users\Admin\AppData\Local\{209CB1EB-30FB-43FC-B8C4-AED8809D8129}
    O43 - CFD: 14/09/2011 - 00:23:13 - [0] ----D C:\Users\Admin\AppData\Local\{20AC647E-2B47-49A1-A832-1961A6882DD1}
    O43 - CFD: 03/05/2012 - 02:22:54 - [0] ----D C:\Users\Admin\AppData\Local\{20AE311B-C619-4904-8D56-3E0E567037CA}
    O43 - CFD: 31/08/2011 - 22:39:30 - [0] ----D C:\Users\Admin\AppData\Local\{20DB82F2-BE30-493C-B571-3C8323D9D1C5}
    O43 - CFD: 17/03/2012 - 09:34:47 - [0] ----D C:\Users\Admin\AppData\Local\{20F0E5F2-553C-4C05-8428-C5248D4C20E4}
    O43 - CFD: 15/05/2011 - 21:19:15 - [0] ----D C:\Users\Admin\AppData\Local\{20F245DD-28F9-4E59-A251-5C9EEA10A400}
    O43 - CFD: 26/05/2012 - 05:00:13 - [0] ----D C:\Users\Admin\AppData\Local\{216BD686-6AD2-4F88-A1C0-71C782C89131}
    O43 - CFD: 25/03/2012 - 08:20:44 - [0] ----D C:\Users\Admin\AppData\Local\{21F9BAFE-9A98-4EE2-9AF5-2BE70E9D2527}
    O43 - CFD: 10/03/2011 - 13:45:54 - [0] ----D C:\Users\Admin\AppData\Local\{222E9E9A-D7F0-42CB-A110-1D75EA5E5A52}
    O43 - CFD: 04/02/2012 - 13:38:36 - [0] ----D C:\Users\Admin\AppData\Local\{22D870C6-AE78-4FAB-ACB2-627AFC7D00A1}
    O43 - CFD: 05/02/2011 - 14:48:40 - [0] ----D C:\Users\Admin\AppData\Local\{22F65B98-7304-4482-B378-F0F6C8828097}
    O43 - CFD: 04/04/2012 - 23:47:01 - [0] ----D C:\Users\Admin\AppData\Local\{231B7D03-DB55-4243-8DD6-0B3AEF667BED}
    O43 - CFD: 18/02/2011 - 01:32:10 - [0] ----D C:\Users\Admin\AppData\Local\{23523C83-37C3-4C92-AEFA-C8A6DA2E76C5}
    O43 - CFD: 21/11/2011 - 04:09:21 - [0] ----D C:\Users\Admin\AppData\Local\{235E998C-C904-4DCB-8D33-6BE4B301CF21}
    O43 - CFD: 20/10/2011 - 14:04:59 - [0] ----D C:\Users\Admin\AppData\Local\{2401E413-7204-4708-9B4E-CDE2A9582E03}
    O43 - CFD: 06/02/2012 - 13:28:59 - [0] ----D C:\Users\Admin\AppData\Local\{24211983-A583-4520-9358-11AAAC8118E1}
    O43 - CFD: 11/11/2011 - 03:45:15 - [0] ----D C:\Users\Admin\AppData\Local\{24F93907-60CB-449F-87DF-A5809A66C4DC}
    O43 - CFD: 18/09/2011 - 19:42:52 - [0] ----D C:\Users\Admin\AppData\Local\{25070ED9-ADC6-4637-88C5-947E3FDA25E7}
    O43 - CFD: 12/03/2012 - 19:12:01 - [0] ----D C:\Users\Admin\AppData\Local\{250D3C8C-F841-4B8E-9971-24B2706420E0}
    O43 - CFD: 27/10/2011 - 02:12:31 - [0] ----D C:\Users\Admin\AppData\Local\{2545F640-4AEB-428B-9658-4793710BE5B1}
    O43 - CFD: 30/04/2012 - 10:06:21 - [0] ----D C:\Users\Admin\AppData\Local\{258F9E3A-05A3-4B8E-981C-D8B814B2F62B}
    O43 - CFD: 27/06/2012 - 19:51:02 - [0] ----D C:\Users\Admin\AppData\Local\{259014D4-663B-44B2-802C-994FDDA98040}
    O43 - CFD: 06/03/2011 - 01:41:19 - [0] ----D C:\Users\Admin\AppData\Local\{25E0B2B0-AD91-4C55-AE91-08C474B749F8}
    O43 - CFD: 26/11/2011 - 14:12:51 - [0] ----D C:\Users\Admin\AppData\Local\{26413624-A3E3-47F6-85FB-74B938BD4962}
    O43 - CFD: 12/03/2012 - 19:11:50 - [0] ----D C:\Users\Admin\AppData\Local\{264A5948-9E8C-4EC5-9BAC-2E6BA1BD53AA}
    O43 - CFD: 21/05/2012 - 04:22:15 - [0] ----D C:\Users\Admin\AppData\Local\{26690B76-F7F4-453A-9C94-B1497D7FAF32}
    O43 - CFD: 04/06/2011 - 12:22:24 - [0] ----D C:\Users\Admin\AppData\Local\{27ACFACE-F5B7-4FA9-A762-DDC530C8066B}
    O43 - CFD: 18/01/2012 - 14:28:32 - [0] ----D C:\Users\Admin\AppData\Local\{27F8C1EF-04BB-496B-9840-AFD4B5046259}
    O43 - CFD: 09/07/2011 - 12:27:03 - [0] ----D C:\Users\Admin\AppData\Local\{28290ABD-C605-4E80-AF23-47A3F40C06A7}
    O43 - CFD: 15/04/2011 - 22:44:51 - [0] ----D C:\Users\Admin\AppData\Local\{28B2111B-3FEC-486E-81B1-0929721E4D08}
    O43 - CFD: 23/03/2011 - 02:57:20 - [0] ----D C:\Users\Admin\AppData\Local\{28E7866C-F4FF-4113-B4CD-A8B87DA18D8C}
    O43 - CFD: 11/03/2012 - 19:10:33 - [0] ----D C:\Users\Admin\AppData\Local\{2927D098-E797-422D-A36F-379119EC0FB3}
    O43 - CFD: 25/09/2011 - 16:34:50 - [0] ----D C:\Users\Admin\AppData\Local\{298B8BF4-EFA6-4E06-B1E7-324BCCF4AA95}
    O43 - CFD: 28/05/2011 - 23:59:11 - [0] ----D C:\Users\Admin\AppData\Local\{29CFA83F-949D-43DD-BACE-F61BE83FEDBA}
    O43 - CFD: 24/05/2011 - 23:43:52 - [0] ----D C:\Users\Admin\AppData\Local\{29F7A2A1-A884-448C-87FE-B955B1E6BB9D}
    O43 - CFD: 21/04/2012 - 09:17:23 - [0] ----D C:\Users\Admin\AppData\Local\{2A33F5FD-BA80-42C1-822B-415656155D40}
    O43 - CFD: 17/07/2011 - 23:06:18 - [0] ----D C:\Users\Admin\AppData\Local\{2AC1ED2D-10CF-47DD-A2C0-9B0BAE40577E}
    O43 - CFD: 02/04/2012 - 03:38:02 - [0] ----D C:\Users\Admin\AppData\Local\{2ADAB09C-DB68-40D2-9756-C6B229BD1873}
    O43 - CFD: 13/06/2011 - 21:52:28 - [0] ----D C:\Users\Admin\AppData\Local\{2B33A07A-6A04-4226-AFBC-29D763E5A6C3}
    O43 - CFD: 07/02/2012 - 13:31:23 - [0] ----D C:\Users\Admin\AppData\Local\{2B43CE90-29A7-4067-8124-7207FF6C1A98}
    O43 - CFD: 09/12/2011 - 15:04:49 - [0] ----D C:\Users\Admin\AppData\Local\{2B63B287-662A-4592-854E-7F8D3E352A13}
    O43 - CFD: 03/07/2012 - 07:12:20 - [0] ----D C:\Users\Admin\AppData\Local\{2B6C8397-968D-432A-9207-91639E346EE4}
    O43 - CFD: 16/03/2012 - 09:33:26 - [0] ----D C:\Users\Admin\AppData\Local\{2B75176D-5660-4945-B985-075946236B2B}
    O43 - CFD: 30/10/2011 - 12:42:09 - [0] ----D C:\Users\Admin\AppData\Local\{2BE827E7-65B0-4F8B-9309-02EEB2F232DB}
    O43 - CFD: 07/12/2011 - 13:57:44 - [0] ----D C:\Users\Admin\AppData\Local\{2C1715DA-494B-458C-AEFB-9DDF4DBDA1A8}
    O43 - CFD: 30/11/2011 - 02:22:36 - [0] ----D C:\Users\Admin\AppData\Local\{2C3115D1-3449-478F-8395-BEFAC7713C12}
    O43 - CFD: 31/08/2011 - 10:38:30 - [0] ----D C:\Users\Admin\AppData\Local\{2C8C1943-CDFA-48B1-883C-F644D4F449F6}
    O43 - CFD: 12/12/2011 - 15:08:24 - [0] ----D C:\Users\Admin\AppData\Local\{2CB41D81-3342-49F7-BD2B-B3E922D42E95}
    O43 - CFD: 18/11/2011 - 03:37:43 - [0] ----D C:\Users\Admin\AppData\Local\{2CCB731E-FEE8-43E0-974F-79B7E950AC04}
    O43 - CFD: 02/02/2011 - 16:32:36 - [0] ----D C:\Users\Admin\AppData\Local\{2CE2523B-5EA2-4D57-84C5-522968A836A2}
    O43 - CFD: 16/01/2012 - 21:04:56 - [0] ----D C:\Users\Admin\AppData\Local\{2D239E96-31B0-41F1-BE69-CE90FC55F51C}
    O43 - CFD: 17/03/2011 - 14:54:05 - [0] ----D C:\Users\Admin\AppData\Local\{2D4D0BA8-FA10-4DF7-9AA5-3CBEE7B0A939}
    O43 - CFD: 04/12/2011 - 02:31:05 - [0] ----D C:\Users\Admin\AppData\Local\{2D8712C1-A701-45C2-AC5A-FAA9C8C982F8}
    O43 - CFD: 05/04/2011 - 22:27:29 - [0] ----D C:\Users\Admin\AppData\Local\{2D8E7D6F-ACDB-4493-87D4-5414B39B7CB6}
    O43 - CFD: 23/03/2012 - 09:19:32 - [0] ----D C:\Users\Admin\AppData\Local\{2DEB1303-1FCB-4DF3-8B60-9C7CB4060DE3}
    O43 - CFD: 07/05/2011 - 20:27:27 - [0] ----D C:\Users\Admin\AppData\Local\{2E33F779-1399-431C-874D-6B07B6737336}
    O43 - CFD: 19/12/2011 - 03:18:31 - [0] ----D C:\Users\Admin\AppData\Local\{2E46888E-3CAF-4867-9F66-223ACEF12D23}
    O43 - CFD: 11/12/2011 - 03:06:34 - [0] ----D C:\Users\Admin\AppData\Local\{2E7EC12A-DE75-43BC-A922-99BCE963443A}
    O43 - CFD: 05/12/2011 - 16:07:27 - [0] ----D C:\Users\Admin\AppData\Local\{2E961254-ACFE-413A-AA2D-F278EE8C6B4C}
    O43 - CFD: 07/09/2011 - 02:08:51 - [0] ----D C:\Users\Admin\AppData\Local\{2EAA5E65-CC64-46F5-9944-7C15DD64DDC4}
    O43 - CFD: 08/10/2011 - 03:30:29 - [0] ----D C:\Users\Admin\AppData\Local\{2F01629F-B0F4-4735-ACDA-0A863D67EF99}
    O43 - CFD: 02/07/2012 - 15:57:12 - [0] ----D C:\Users\Admin\AppData\Local\{2F560F55-D153-4B13-8D50-B4054ABF169A}
    O43 - CFD: 11/11/2011 - 17:30:13 - [0] ----D C:\Users\Admin\AppData\Local\{2F6E6B17-3DE9-476D-9311-0E70D98F8C51}
    O43 - CFD: 08/12/2011 - 01:58:15 - [0] ----D C:\Users\Admin\AppData\Local\{2FB12797-9458-4A1F-A614-6242B97212AC}
    O43 - CFD: 07/03/2012 - 03:29:20 - [0] ----D C:\Users\Admin\AppData\Local\{2FBF398C-9A92-4D3D-A060-BE2596ED8A11}
    O43 - CFD: 31/10/2011 - 00:42:37 - [0] ----D C:\Users\Admin\AppData\Local\{30103628-FAFB-45E8-AB56-4DFB4EFF04E1}
    O43 - CFD: 13/05/2012 - 17:20:37 - [0] ----D C:\Users\Admin\AppData\Local\{3069BBE9-743F-4AFE-A017-C15765DD4D60}
    O43 - CFD: 17/08/2011 - 09:57:18 - [0] ----D C:\Users\Admin\AppData\Local\{3076DD44-7BF5-4AF1-98E9-69EEB318E78B}
    O43 - CFD: 29/04/2012 - 03:16:49 - [0] ----D C:\Users\Admin\AppData\Local\{3088BEB7-9FC6-44E3-9503-2A0E1063AD68}
    O43 - CFD: 23/03/2011 - 22:30:05 - [0] ----D C:\Users\Admin\AppData\Local\{30E6CB45-2629-4B70-B5E2-065E81146B52}
    O43 - CFD: 07/09/2011 - 14:09:47 - [0] ----D C:\Users\Admin\AppData\Local\{3107C960-54FC-4B06-BD08-DF6DDF01FCED}
    O43 - CFD: 11/11/2011 - 17:30:29 - [0] ----D C:\Users\Admin\AppData\Local\{311C9A4E-4AB5-4CDB-86B8-9BF5DE7195AF}
    O43 - CFD: 21/07/2011 - 23:39:20 - [0] ----D C:\Users\Admin\AppData\Local\{3120F883-1062-43E4-A827-CC1AEB9C650E}
    O43 - CFD: 18/04/2012 - 02:43:18 - [0] ----D C:\Users\Admin\AppData\Local\{312ABC7E-6082-499A-A216-7A5146B291A5}
    O43 - CFD: 10/04/2011 - 10:30:41 - [0] ----D C:\Users\Admin\AppData\Local\{313C6480-B853-462F-B05E-B02CC4C30D03}
    O43 - CFD: 23/10/2011 - 00:32:01 - [0] ----D C:\Users\Admin\AppData\Local\{31FB5068-9673-43A7-8587-A06D80246174}
    O43 - CFD: 08/08/2011 - 10:37:53 - [0] ----D C:\Users\Admin\AppData\Local\{326C600C-B65C-4E3D-B812-F1983CC2F6C2}
    O43 - CFD: 27/03/2012 - 08:22:26 - [0] ----D C:\Users\Admin\AppData\Local\{32B15DFC-1A41-41CB-B708-0911A28E8BB0}
    O43 - CFD: 23/01/2012 - 08:58:18 - [0] ----D C:\Users\Admin\AppData\Local\{32CA7BFD-14D4-472C-8A51-374CEF8256F3}
    O43 - CFD: 11/09/2011 - 11:52:23 - [0] ----D C:\Users\Admin\AppData\Local\{32D2931E-8E95-4CED-94AF-FAD081A40748}
    O43 - CFD: 01/09/2011 - 22:44:37 - [0] ----D C:\Users\Admin\AppData\Local\{32EFC43F-12D4-4B87-8CED-6037461BCF81}
    O43 - CFD: 17/02/2012 - 19:26:54 - [0] ----D C:\Users\Admin\AppData\Local\{33175E6C-5C8C-4201-92E1-447841AF368B}
    O43 - CFD: 01/05/2012 - 10:42:36 - [0] ----D C:\Users\Admin\AppData\Local\{33214387-9692-4370-BE84-B7BAF39A7517}
    O43 - CFD: 24/04/2012 - 07:08:50 - [0] ----D C:\Users\Admin\AppData\Local\{335AF75E-85D6-4916-9949-67484000A992}
    O43 - CFD: 02/06/2011 - 00:20:22 - [0] ----D C:\Users\Admin\AppData\Local\{3413557D-EF3C-45CD-B4E6-217FDD83CFC8}
    O43 - CFD: 24/09/2011 - 16:33:36 - [0] ----D C:\Users\Admin\AppData\Local\{341DFC29-97CF-431E-845C-18C0ABE351AB}
    O43 - CFD: 16/12/2011 - 03:14:51 - [0] ----D C:\Users\Admin\AppData\Local\{3483F5CD-F94B-4553-BF73-5C45EE919DD6}
    O43 - CFD:
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,
    Tu n'as pas hébergé le rapport, ce n'est pas un problème !
    1/
    Télécharge AdwCleaner (merci à Xplode)
    Lance AdwCleaner
    Clique sur le bouton [ Suppression ]
    Patiente...
    Poste le rapport qui apparait en fin de recherche.
    (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

    2/
    Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

    [MD5.00000000000000000000000000000000] [APT] [{71EDF636-D927-4529-915B-A08020C86104}] (...) -- C:\Users\Admin\Desktop\Ysil-Morna-V2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{874000B8-13D9-4DCE-984C-9B394AD95A7B}] (...) -- C:\ProgramData\Microsoft\XLive\InstallerPath\Extract\cabB96F.tmp\content\VCR\install.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{8B77B1AF-6BDE-4893-99E9-277C06032741}] (...) -- C:\Users\Admin\Desktop\Ysil-Morna-V2.exe (.not file.)

    EmptyCLSID


    Puis Lance ZHPFix depuis le raccourci du bureau .

    * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

    * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

    Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

    Clique sur le bouton GO

    Copie/Colle le rapport à l'écran dans ton prochain message.

    3/
    Quel est ton antivirus (MSE ou Norton Security Scan)? aucun est lancé au démarrage!
    0