Babylon Search
Alicia H.
Messages postés
50
Statut
Membre
-
Alicia H -
Alicia H -
Bonjour,
Je ne sais pas trop ce qui s'est passé mais en installant un logiciel, il y a Babylon Search qui s'est incrusté en page d'accueil (j'utilise firefox) malgré que je l'ai désinstallé et que j'ai déjà fait outils, options, page d'accueil et ok. Je ne sais pas quoi faire et ça m'énerve trop. Merci de votre aide d'avance.
Je ne sais pas trop ce qui s'est passé mais en installant un logiciel, il y a Babylon Search qui s'est incrusté en page d'accueil (j'utilise firefox) malgré que je l'ai désinstallé et que j'ai déjà fait outils, options, page d'accueil et ok. Je ne sais pas quoi faire et ça m'énerve trop. Merci de votre aide d'avance.
A voir également:
- Babylon Search
- Spybot search and destroy - Télécharger - Antivirus & Antimalwares
- Www.google.com search video download - Télécharger - TV & Vidéo
- Search tool - Télécharger - Divers Web & Internet
- Search tool ip camera - Télécharger - Web & Internet
- In search of incredible - Forum Windows
3 réponses
Bonjour,
--> Télécharge et lance AdwCleaner (d'Xplode), choisis l'option "Suppression" et poste le rapport.
--> Télécharge et lance AdwCleaner (d'Xplode), choisis l'option "Suppression" et poste le rapport.
# Mis à jour le 14/08/2012 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : User - PC-DE-USER
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\User\Downloads\adwcleaner.exe
# Option [Suppression]
***** [Services] *****
***** [Fichiers / Dossiers] *****
Dossier Supprimé : C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
Dossier Supprimé : C:\ProgramData\Ask
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\FREEzeFrogSA
Dossier Supprimé : C:\Program Files\Ask.com
Dossier Supprimé : C:\Program Files\freeTVRadio
Dossier Supprimé : C:\Program Files\FREEzeFrog
Dossier Supprimé : C:\Program Files\Nosibay
Dossier Supprimé : C:\Windows\Installer\{5B58EF61-85F2-4977-97A5-84C19F926579}
Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Dossier Supprimé : C:\Users\User\AppData\Local\bearshare
Dossier Supprimé : C:\Users\User\AppData\Local\Software
Dossier Supprimé : C:\Program Files\Software
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur OfferBox.lnk
Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Fichier Supprimé : C:\user.js
Voilà le rapport:
***** [Registre] *****
[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2583879
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\Software\ShopperReports3
Clé Supprimée : HKCU\Software\cacaoweb
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\FissaSearch
Clé Supprimée : HKCU\Software\freeTVRadio
Clé Supprimée : HKCU\Software\FREEzeFrogSA
Clé Supprimée : HKCU\Software\Iminent
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\OfferBox Browser
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\BabylonToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Clé Supprimée : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Freetvradio.SpointerAdProvider
Clé Supprimée : HKLM\SOFTWARE\Classes\Freetvradio.SpointerAdProvider.4
Clé Supprimée : HKLM\SOFTWARE\Classes\Freetvradio.SpointerWebDisp
Clé Supprimée : HKLM\SOFTWARE\Classes\FREEzeFrogAx.Info
Clé Supprimée : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\FissaSearch
Clé Supprimée : HKLM\SOFTWARE\FREEzeFrog
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Clé Supprimée : HKLM\SOFTWARE\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FREEzeFrogSA
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\ShopperReports3
Clé Supprimée : HKLM\SOFTWARE\Software
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform [ShopperReports 3.1.71.0]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Bubble Dock]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [freetvradio@spointer.com]
***** [Registre - GUID] *****
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{7025E484-D4B0-441A-9F0B-69063BD679CE}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{8258B35C-05B8-4C0E-9525-9BCCC70F8F2D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{A89256AD-EC17-4A83-BEF5-4B8BC4F39306}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AF195E5-1978-4F8D-A316-5BCCE06D7F89}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{746B5408-3579-4CED-B76A-BEC915730F45}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{303D092C-7A38-4F1A-BB61-4C5A90BDA313}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0828293-E520-483A-816A-1B547C4AD7E6}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B41306C6-96D0-442A-BCC4-B0F621E82CE9}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{416AE1CB-7257-484A-B912-AEBC7FDAD4CE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4C08-BDD6-DDDB1C48AEDC}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4AF195E5-1978-4F8D-A316-5BCCE06D7F89}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AF195E5-1978-4F8D-A316-5BCCE06D7F89}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v14.0.1 (fr)
-\\ Google Chrome v21.0.1180.83
*************************
AdwCleaner[R1].txt - [10397 octets] - [29/08/2012 17:40:16]
AdwCleaner[S1].txt - [341 octets] - [29/08/2012 17:40:33]
AdwCleaner[S2].txt - [10510 octets] - [29/08/2012 17:42:10]
########## EOF - C:\AdwCleaner[S2].txt - [10639 octets] ##########
--> Télécharge ZHPDiag (de Nicolas Coolman).
--> Double-clique sur le fichier d'installation. Installe ZHPDiag avec les paramètres par défaut (N'oublie pas de cocher "Créer une icône sur le Bureau").
--> Lance ZHPDiag en double-cliquant sur le raccourci présent sur ton Bureau.
(Sous Vista/Win7, il faut cliquer droit sur le raccourci de ZHPDiag et choisir Exécuter en tant qu'administrateur)
--> Clique sur la loupe (Lancer le diagnostic) puis laisse l'outil scanner.
--> Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier (le rapport de l'analyse) sur ton Bureau.
--> Utilise le site http://pjjoint.malekal.com/ pour me transmettre le rapport ZHPDiag car il est plutôt long. Copie-colle le lien donné par le site ici.
Rapport de ZHPDiag v1.31.13 par Nicolas Coolman, Update du 31/07/2012
Run by User at 29/08/2012 17:57:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v
---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : 272DW
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2045 MB (48% free)
System Restore: Inconnu (Unknown)
System drive C: has 162 GB (69%) free of 233 GB
---\\ Logged in mode
~ Computer Name: PC-DE-USER
~ User Name: User
~ All Users Names: User, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\User\AppData\Roaming\
~ %Desktop% : C:\Users\User\Desktop\
~ %Favorites% : C:\Users\User\Favorites\
~ %LocalAppData% : C:\Users\User\AppData\Local\
~ %StartMenu% : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 162 Go of 233 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Free 3 Go of 7 Go)
---\\ Security Center & Tools Informations
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.75A97A2C060E72AB49E071E08C7DD2BA] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/06/2012 - 01:09:01.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 07:32:49.) -- C:\Windows\system32\Drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 07:32:55.) -- C:\Windows\system32\Drivers\volsnap.sys [226280]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/11
~ Mes musiques (My Musics) : 1/78
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/20
~ Mes Documents (My Documents) : 1/108
~ Mon Bureau (My Desktop) : 1/3923
~ Menu demarrer (Programs) : 1/25
~ Scan Hidden Files in 00mn 01s
---\\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.2760]
[MD5.BAD0D303EF0A519409C625738F3E10A3] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4282728] [PID.3344]
[MD5.34086F1DBB4065047EA3671CB70505CC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421776] [PID.3508]
[MD5.6B87742F27B087AF7FD4ADC2DB685DE0] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3600]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3840]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.3972]
[MD5.6912D02CC912B980C8C12F9CDADB8763] - (.Evernote Corp., 333 W Evelyn Ave. Mountain - Evernote Clipper.) -- C:\Program Files\Evernote\Evernote\EvernoteClipper.exe [956416] [PID.1136]
[MD5.11E8D8272FDBE213ADE3DAD91427CE35] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [11322880] [PID.4220]
[MD5.4C08FB7ACB28689B586D986D3F5826CF] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.4364]
[MD5.2337EC951C4AF6E1AF65D10BD9615BEB] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [11314688] [PID.4484]
[MD5.3F677172F23FC17283D9BCE4B42E3F65] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [913888] [PID.1472]
[MD5.A06AB1550658A19E871A6FD7FF1C2CDB] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16864] [PID.3552]
[MD5.3BF801ED38CFD8CDD3EDEDBB47F073AB] - (.Adobe Systems, Inc. - Adobe Flash Player 11.4 r402.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe [1807560] [PID.5352]
[MD5.FCB13D9E3D55075C8FACA9CA3C55B263] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [3763200] [PID.5368]
~ Scan Processes Running in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://search.babylon.com
~ Scan Google Browser in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a896gu14.default\prefs.js
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a896gu14.default\user.js
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [User] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [User - a896gu14.default] https://www.orange.fr/portail
M2 - MFEP: prefs.js [User - a896gu14.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.28 (.http://www.cacaoweb.org/
M2 - MFEP: prefs.js [User - a896gu14.default\ffxtlbr@babylon.com] [] Babylon v1.5.0 (.Babylon.)
M2 - MFEP: prefs.js [User - a896gu14.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [User - a896gu14.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.4.8.20120412011105 (.Yahoo!.)
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\User\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {a65e491f-a436-4952-b49a-b24ed99a0f67} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-21-1146425893-772143609-498279023-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-1146425893-772143609-498279023-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-1146425893-772143609-498279023-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-1146425893-772143609-498279023-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jouer (EasyBits GO).lnk . (.EasyBits Software AS.) -- C:\ProgramData\Easybits GO\EasyBitsGO.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\User\Desktop\avast! Free Antivirus.lnk . (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - Global Startup: C:\Users\User\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\User\Desktop\PhotoFiltre.lnk . (.Antonio Da Cruz.) -- C:\Program Files\PhotoFiltre\photofiltre.exe
O4 - Global Startup: C:\Users\User\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\avast! Free Antivirus.lnk . (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Evernote 4.0 . (.Evernote Corp., 333 W Evelyn Ave. Mountain - Evernote Clipper for Microsoft Internet Explorer.) -- C:\Program Files\Evernote\Evernote\EvernoteIE.dll
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Windows\Web\Wallpaper\img1.jpg
O24 - Desktop General: WallPaper - .(...) - C:\Windows\Web\Wallpaper\img1.jpg
~ Scan Desktop Component in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Ad-Aware Update (Weekly).job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1146425893-772143609-498279023-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1146425893-772143609-498279023-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-1146425893-772143609-498279023-1000Core] (.Facebook Inc..) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-1146425893-772143609-498279023-1000UA] (.Facebook Inc..) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.CBEC06E32D0AC9C3D0A9199EDC1FB959] [APT] [{30E4F489-705C-4BBD-A937-8B86EB3BF6BB}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{6233E0C1-F6A5-4E8C-A833-CEC208F72DA7}] (...) -- C:\Program Files\QuickTime\QTSystem\QuickTime.cpl" -c QuickTime (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{6A1F2BD3-91BB-4505-966D-F4A841ADB167}] (...) -- F:\EP0000186117.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 01s
---\\ Composants installés (ActiveSetup Installed Components) (O40) (None)
---\\ Logiciels installés (O42)
O42 - Logiciel: EasyBits GO - (.EasyBits Media.) [HKCU] -- Game Organizer
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\BearShare]
[HKCU\Software\Bugsplat]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\EasyBits]
[HKCU\Software\Evernote]
[HKCU\Software\Facebook]
[HKCU\Software\Google]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lavasoft]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\Novell]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Policies]
[HKCU\Software\Raptr]
[HKCU\Software\Realtek]
[HKCU\Software\SAMSUNG]
[HKCU\Software\SUPERAntiSpyware.com]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\System Requirements Lab]
[HKCU\Software\Trolltech]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\ej-technologies]
[HKCU\Software\kde.org]
~ Scan Softwares in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/08/2011 - 20:17:46 - [0,000] ----D C:\Program Files\Adobe
O43 - CFD: 27/07/2011 - 19:46:39 - [2,316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 10/03/2011 - 11:25:02 - [13,654] ----D C:\Program Files\ATI
O43 - CFD: 10/03/2011 - 11:26:56 - [83,984] ----D C:\Program Files\ATI Technologies
O43 - CFD: 10/03/2011 - 11:46:49 - [349,983] ----D C:\Program Files\AVAST Software
O43 - CFD: 28/05/2011 - 22:44:30 - [37,160] ----D C:\Program Files\BearShare Applications
O43 - CFD: 18/10/2011 - 19:27:53 - [0,602] ----D C:\Program Files\Bonjour
O43 - CFD: 10/08/2012 - 15:30:33 - [5,511] ----D C:\Program Files\Cisco
O43 - CFD: 29/08/2012 - 16:05:58 - [402,894] ----D C:\Program Files\Common Files
O43 - CFD: 20/04/2011 - 14:35:52 - [244,867] ----D C:\Program Files\Evernote
O43 - CFD: 01/07/2012 - 00:55:27 - [0] ----D C:\Program Files\ewido anti-spyware 4.0
O43 - CFD: 09/03/2011 - 20:19:23 - [0] R---D C:\Program Files\Fichiers communs
O43 - CFD: 30/06/2012 - 22:13:45 - [0,000] ----D C:\Program Files\GameHouse
O43 - CFD: 01/07/2012 - 00:58:43 - [401,974] ----D C:\Program Files\Google
O43 - CFD: 10/03/2011 - 11:22:38 - [4,169] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 10/08/2012 - 15:23:00 - [84,811] ----D C:\Program Files\Intel
O43 - CFD: 16/08/2012 - 03:08:23 - [6,092] ----D C:\Program Files\Internet Explorer
O43 - CFD: 17/06/2012 - 22:15:02 - [2,259] ----D C:\Program Files\iPod
O43 - CFD: 17/06/2012 - 22:16:58 - [150,558] ----D C:\Program Files\iTunes
O43 - CFD: 29/08/2012 - 17:35:29 - [85,477] ----D C:\Program Files\Java
O43 - CFD: 05/06/2011 - 08:54:38 - [38,347] ----D C:\Program Files\Lavasoft
O43 - CFD: 29/08/2012 - 16:37:51 - [0] ----D C:\Program Files\Microsoft
O43 - CFD: 11/03/2011 - 18:12:55 - [0,165] ----D C:\Program Files\Microsoft FrontPage
O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games
O43 - CFD: 11/03/2011 - 18:10:58 - [133,006] ----D C:\Program Files\Microsoft Office
O43 - CFD: 12/05/2012 - 13:28:31 - [36,641] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 11/03/2011 - 21:22:39 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 11/03/2011 - 18:13:51 - [5,624] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 10/03/2011 - 23:15:27 - [0,015] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 11/03/2011 - 19:06:43 - [94,740] ----D C:\Program Files\Movie Maker
O43 - CFD: 28/07/2012 - 13:15:52 - [43,182] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 29/07/2012 - 12:50:52 - [0,195] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 02/11/2006 - 14:37:34 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 06/01/2012 - 00:45:31 - [336,321] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 21/07/2012 - 22:53:46 - [33,207] ----D C:\Program Files\Oracle
O43 - CFD: 02/02/2012 - 16:55:05 - [3,528] ----D C:\Program Files\PhotoFiltre
O43 - CFD: 12/06/2012 - 18:00:31 - [72,431] ----D C:\Program Files\QuickTime
O43 - CFD: 10/07/2011 - 00:16:48 - [0,071] ----D C:\Program Files\Raptr
O43 - CFD: 10/03/2011 - 11:22:38 - [91,512] ----D C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:34 - [36,906] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 15/05/2012 - 21:03:27 - [33,200] R---D C:\Program Files\Skype
O43 - CFD: 09/08/2012 - 14:06:00 - [0,761] ----D C:\Program Files\SystemRequirementsLab
O43 - CFD: 27/07/2011 - 09:44:35 - [40,586] ----D C:\Program Files\TuneUpMedia
O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 08/07/2012 - 23:39:24 - [91,822] ----D C:\Program Files\VideoLAN
O43 - CFD: 11/03/2011 - 19:06:43 - [0,970] ----D C:\Program Files\Windows Calendar
O43 - CFD: 11/03/2011 - 19:06:43 - [2,610] ----D C:\Program Files\Windows Collaboration
O43 - CFD: 11/03/2011 - 19:06:40 - [4,283] ----D C:\Program Files\Windows Defender
O43 - CFD: 12/05/2012 - 04:29:13 - [6,757] ----D C:\Program Files\Windows Journal
O43 - CFD: 01/04/2012 - 10:56:47 - [173,073] ----D C:\Program Files\Windows Live
O43 - CFD: 13/04/2012 - 12:37:31 - [8,694] ----D C:\Program Files\Windows Mail
O43 - CFD: 11/03/2011 - 19:06:43 - [4,290] ----D C:\Program Files\Windows Media Player
O43 - CFD: 09/03/2011 - 20:19:23 - [7,589] ----D C:\Program Files\Windows NT
O43 - CFD: 11/03/2011 - 19:06:43 - [12,902] ----D C:\Program Files\Windows Photo Gallery
O43 - CFD: 11/03/2011 - 19:48:53 - [0,128] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 11/03/2011 - 19:06:43 - [6,409] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 29/08/2012 - 17:57:57 - [12,789] ----D C:\Program Files\ZHPDiag
O43 - CFD: 30/06/2012 - 16:22:08 - [0,306] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 17/06/2012 - 22:15:01 - [110,052] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 11/03/2011 - 18:13:49 - [0,082] ----D C:\Program Files\Common Files\Designer
O43 - CFD: 10/03/2011 - 11:22:28 - [1,943] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 10/08/2012 - 15:30:21 - [8,669] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 21/07/2012 - 22:54:42 - [1,184] ----D C:\Program Files\Common Files\Java
O43 - CFD: 17/09/2011 - 17:50:04 - [223,801] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 15/05/2012 - 21:03:26 - [2,056] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 10/11/2011 - 11:11:09 - [15,601] ----D C:\Program Files\Common Files\System
O43 - CFD: 10/03/2011 - 19:41:33 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 24/08/2012 - 13:51:39 - [0] ----D C:\ProgramData\Adobe
O43 - CFD: 18/10/2011 - 19:31:24 - [207,640] ----D C:\ProgramData\Apple
O43 - CFD: 16/03/2011 - 21:02:51 - [74,778] ----D C:\ProgramData\Apple Computer
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 10/03/2011 - 12:16:03 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 10/03/2011 - 11:46:49 - [41,537] ----D C:\ProgramData\AVAST Software
O43 - CFD: 28/05/2011 - 22:44:31 - [0,087] ----D C:\ProgramData\BearShare
O43 - CFD: 09/03/2011 - 20:19:23 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 29/08/2011 - 19:32:57 - [9,984] ----D C:\ProgramData\Easybits GO
O43 - CFD: 21/01/2012 - 19:40:41 - [0] ----D C:\ProgramData\eMule
O43 - CFD: 09/03/2011 - 20:19:23 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 01/07/2012 - 00:50:53 - [0,014] ----D C:\ProgramData\Google
O43 - CFD: 10/08/2012 - 15:34:35 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 26/06/2012 - 23:13:05 - [321,700] ----D C:\ProgramData\Lavasoft
O43 - CFD: 22/04/2012 - 14:31:58 - [0,020] ----D C:\ProgramData\McAfee
O43 - CFD: 09/03/2011 - 20:19:23 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 29/08/2012 - 16:37:51 - [17,988] -S--D C:\ProgramData\Microsoft
O43 - CFD: 09/03/2011 - 20:19:23 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 25/04/2012 - 13:59:44 - [0,010] ----D C:\ProgramData\Mozilla
O43 - CFD: 23/06/2012 - 17:46:11 - [0,015] ----D C:\ProgramData\Norton
O43 - CFD: 22/06/2012 - 22:01:49 - [58,825] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 08/07/2012 - 18:27:36 - [0] ----D C:\ProgramData\Roaming
O43 - CFD: 31/07/2012 - 22:46:02 - [90,323] ----D C:\ProgramData\Skype
O43 - CFD: 28/08/2011 - 18:50:36 - [4,468] ----D C:\ProgramData\Skype Extras
O43 - CFD: 21/01/2012 - 01:10:04 - [0] ----D C:\ProgramData\Software
O43 - CFD: 29/06/2012 - 00:06:41 - [0,229] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 13/03/2011 - 00:03:34 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 02/11/2006 - 15:02:04 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 25/11/2011 - 19:16:58 - [0,437] ----D C:\ProgramData\TuneUpMedia
O43 - CFD: 02/11/2011 - 12:29:06 - [0,001] ----D C:\ProgramData\Vodafone
O43 - CFD: 12/03/2011 - 02:02:53 - [0,002] ----D C:\ProgramData\Xerox
O43 - CFD: 12/03/2011 - 23:38:26 - [0] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 28/05/2011 - 22:43:17 - [38,344] ----D C:\ProgramData\{FAD336EA-69DD-4F1D-A047-93CC606CC5EC}
O43 - CFD: 26/08/2011 - 20:20:34 - [66,957] ----D C:\Users\User\AppData\Roaming\Adobe
O43 - CFD: 10/08/2011 - 02:27:51 - [116,631] ----D C:\Users\User\AppData\Roaming\Apple Computer
O43 - CFD: 10/03/2011 - 12:16:03 - [0] ----D C:\Users\User\AppData\Roaming\ATI
O43 - CFD: 22/01/2012 - 23:06:34 - [21,628] ----D C:\Users\User\AppData\Roaming\Azureus
O43 - CFD: 28/06/2012 - 22:20:47 - [0,013] ----D C:\Users\User\AppData\Roaming\Babylon
O43 - CFD: 29/08/2012 - 16:32:53 - [1308,806] ----D C:\Users\User\AppData\Roaming\cacaoweb
O43 - CFD: 23/04/2011 - 19:08:21 - [0,024] ----D C:\Users\User\AppData\Roaming\FissaSearch
O43 - CFD: 23/04/2011 - 19:09:39 - [0,001] ----D C:\Users\User\AppData\Roaming\freeTVRadio
O43 - CFD: 08/07/2011 - 22:20:04 - [0] ----D C:\Users\User\AppData\Roaming\FREEzeFrog
O43 - CFD: 28/05/2011 - 22:39:54 - [17,289] ----D C:\Users\User\AppData\Roaming\FrostWire
O43 - CFD: 29/08/2011 - 19:32:56 - [0,019] ----D C:\Users\User\AppData\Roaming\go
O43 - CFD: 09/06/2012 - 02:53:47 - [0] ----D C:\Users\User\AppData\Roaming\Google
O43 - CFD: 09/03/2011 - 20:21:05 - [0] ----D C:\Users\User\AppData\Roaming\Identities
O43 - CFD: 08/07/2012 - 18:27:38 - [0,001] ----D C:\Users\User\AppData\Roaming\Intel
O43 - CFD: 10/03/2011 - 10:55:31 - [0,036] ----D C:\Users\User\AppData\Roaming\Macromedia
O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\User\AppData\Roaming\Media Center Programs
O43 - CFD: 22/02/2012 - 02:19:41 - [5,286] -S--D C:\Users\User\AppData\Roaming\Microsoft
O43 - CFD: 11/03/2011 - 18:10:58 - [0] ----D C:\Users\User\AppData\Roaming\Microsoft Web Folders
O43 - CFD: 27/07/2011 - 19:29:27 - [70,520] ----D C:\Users\User\AppData\Roaming\Mozilla
O43 - CFD: 22/02/2012 - 02:19:41 - [4,818] ----D C:\Users\User\AppData\Roaming\Nosibay
O43 - CFD: 29/06/2012 - 21:06:53 - [0,337] ----D C:\Users\User\AppData\Roaming\OfferBox
O43 - CFD: 06/01/2012 - 01:02:13 - [2,647] ----D C:\Users\User\AppData\Roaming\OpenOffice.org
O43 - CFD: 02/02/2012 - 16:57:34 - [0,000] ----D C:\Users\User\AppData\Roaming\PhotoFiltre
O43 - CFD: 29/08/2012 - 15:37:10 - [30,285] ----D C:\Users\User\AppData\Roaming\Skype
O43 - CFD: 21/06/2011 - 14:09:09 - [0,039] ----D C:\Users\User\AppData\Roaming\skypePM
O43 - CFD: 09/08/2012 - 14:05:53 - [0,392] ----D C:\Users\User\AppData\Roaming\SystemRequirementsLab
O43 - CFD: 29/08/2012 - 16:34:47 - [0] ----D C:\Users\User\AppData\Roaming\Systweak
O43 - CFD: 27/07/2011 - 19:45:14 - [0,057] ----D C:\Users\User\AppData\Roaming\TuneUpMedia
O43 - CFD: 30/07/2012 - 21:39:39 - [23,403] ----D C:\Users\User\AppData\Roaming\vlc
O43 - CFD: 26/08/2011 - 20:20:34 - [14,733] ----D C:\Users\User\AppData\Local\Adobe
O43 - CFD: 12/03/2011 - 23:35:26 - [0] ----D C:\Users\User\AppData\Local\Apple
O43 - CFD: 12/03/2011 - 23:59:44 - [78,104] ----D C:\Users\User\AppData\Local\Apple Computer
O43 - CFD: 09/03/2011 - 20:21:00 - [0] ----D C:\Users\User\AppData\Local\Application Data
O43 - CFD: 10/03/2011 - 12:16:03 - [0,055] ----D C:\Users\User\AppData\Local\ATI
O43 - CFD: 10/07/2011 - 16:09:18 - [0] ----D C:\Users\User\AppData\Local\Conduit
O43 - CFD: 09/07/2012 - 02:34:13 - [28,354] ----D C:\Users\User\AppData\Local\CrashDumps
O43 - CFD: 20/04/2011 - 17:46:50 - [0,001] ----D C:\Users\User\AppData\Local\Evernote
O43 - CFD: 15/11/2011 - 21:29:51 - [7,392] ----D C:\Users\User\AppData\Local\Facebook
O43 - CFD: 23/04/2011 - 19:11:56 - [0,187] ----D C:\Users\User\AppData\Local\freetvradio Air
O43 - CFD: 28/01/2012 - 22:30:50 - [360,085] ----D C:\Users\User\AppData\Local\Google
O43 - CFD: 09/03/2011 - 20:21:00 - [0] ----D C:\Users\User\AppData\Local\Historique
O43 - CFD: 24/04/2012 - 17:26:15 - [0,014] ----D C:\Users\User\AppData\Local\Ilivid Player
O43 - CFD: 17/06/2012 - 22:10:03 - [0] ----D C:\Users\User\AppData\Local\Macromedia
O43 - CFD: 29/08/2012 - 16:37:51 - [542,371] ----D C:\Users\User\AppData\Local\Microsoft
O43 - CFD: 28/05/2011 - 16:32:13 - [1,266] ----D C:\Users\User\AppData\Local\Microsoft Games
O43 - CFD: 10/03/2011 - 18:31:03 - [60,437] ----D C:\Users\User\AppData\Local\Mozilla
O43 - CFD: 28/05/2011 - 22:42:32 - [0] ----D C:\Users\User\AppData\Local\PackageAware
O43 - CFD: 05/06/2011 - 08:55:55 - [0] ----D C:\Users\User\AppData\Local\Sunbelt Software
O43 - CFD: 29/08/2012 - 17:57:31 - [623,024] ----D C:\Users\User\AppData\Local\Temp
O43 - CFD: 09/03/2011 - 20:21:00 - [0] ----D C:\Users\User\AppData\Local\Temporary Internet Files
O43 - CFD: 13/03/2011 - 00:21:30 - [0,308] ----D C:\Users\User\AppData\Local\VirtualStore
O43 - CFD: 14/08/2012 - 16:39:36 - [0,211] ----D C:\Users\User\AppData\Local\Windows Live
O43 - CFD: 30/07/2012 - 13:03:21 - [0] ----D C:\Users\User\AppData\Local\{00565BE5-E35A-485A-A411-8DA655C62649}
O43 - CFD: 31/05/2011 - 07:06:03 - [0] ----D C:\Users\User\AppData\Local\{00890528-593F-496C-A61C-BED4914952A2}
O43 - CFD: 25/05/2011 - 13:53:35 - [0] ----D C:\Users\User\AppData\Local\{0091DE09-D2CA-42DD-B6D6-F28E2C9EF885}
O43 - CFD: 03/10/2011 - 18:11:25 - [0] ----D C:\Users\User\AppData\Local\{00FF5B4D-348F-4526-ACC5-C470B081320A}
O43 - CFD: 05/09/2011 - 13:48:43 - [0] ----D C:\Users\User\AppData\Local\{010E3CCD-685F-4A0F-BE3E-C24CE97292F0}
O43 - CFD: 31/07/2012 - 16:05:10 - [0] ----D C:\Users\User\AppData\Local\{01315121-EF07-4CDC-BFD2-CCA07AE82AFF}
O43 - CFD: 06/05/2012 - 13:25:15 - [0] ----D C:\Users\User\AppData\Local\{01BBEB3F-F93B-4E7B-AC9F-78D8377E4527}
O43 - CFD: 27/07/2012 - 14:49:48 - [0] ----D C:\Users\User\AppData\Local\{01D3EFE8-4714-484A-95B3-61ADCF04D738}
O43 - CFD: 14/07/2011 - 20:08:56 - [0] ----D C:\Users\User\AppData\Local\{020E37D5-3B33-436B-904D-58C3285F72BF}
O43 - CFD: 17/08/2011 - 18:44:48 - [0] ----D C:\Users\User\AppData\Local\{02571711-1851-469C-B229-E148171B5E1C}
O43 - CFD: 12/11/2011 - 12:03:31 - [0] ----D C:\Users\User\AppData\Local\{029D39A5-AF4C-43E4-B9F8-EAA607BB35C2}
O43 - CFD: 19/12/2011 - 01:02:27 - [0] ----D C:\Users\User\AppData\Local\{031C5992-E512-445B-856A-CC645CEC9044}
O43 - CFD: 06/10/2011 - 12:47:24 - [0] ----D C:\Users\User\AppData\Local\{033F5228-DD33-4E65-89CE-2E4F7E9976AC}
O43 - CFD: 18/12/2011 - 00:54:46 - [0] ----D C:\Users\User\AppData\Local\{0389DA26-E306-445F-9D14-37CEBE606B93}
O43 - CFD: 08/09/2011 - 18:01:33 - [0] ----D C:\Users\User\AppData\Local\{03ACF4B4-7829-47E1-A36D-82E016E65DDF}
O43 - CFD: 30/06/2012 - 16:07:33 - [0] ----D C:\Users\User\AppData\Local\{03CBBB7B-84C0-4FEA-AA08-EA1017C3BB69}
O43 - CFD: 12/04/2011 - 18:42:31 - [0] ----D C:\Users\User\AppData\Local\{03E3A879-286E-4249-8EF4-B3D40A6AD867}
O43 - CFD: 20/06/2012 - 12:31:28 - [0] ----D C:\Users\User\AppData\Local\{03EC2CC7-D9B5-45D6-830C-5CA39788A269}
O43 - CFD: 13/05/2012 - 13:55:44 - [0] ----D C:\Users\User\AppData\Local\{04287D4B-2E51-42D8-B625-90B8EF84AA9A}
O43 - CFD: 18/06/2011 - 10:33:32 - [0] ----D C:\Users\User\AppData\Local\{042EA8EE-798C-4877-9ECB-1A2B95C9B941}
O43 - CFD: 01/10/2011 - 23:21:47 - [0] ----D C:\Users\User\AppData\Local\{04467BB2-78A9-4408-B6BE-6414C3C566D5}
O43 - CFD: 22/03/2011 - 22:30:49 - [0] ----D C:\Users\User\AppData\Local\{04592E2B-27BA-4C09-A6CF-E6DBBFE234F9}
O43 - CFD: 17/08/2012 - 00:34:14 - [0] ----D C:\Users\User\AppData\Local\{048C4A1F-F3B6-43CD-8B7F-5B8EF5CA7A2A}
O43 - CFD: 25/04/2012 - 13:15:59 - [0] ----D C:\Users\User\AppData\Local\{04C4D056-D042-4E82-8511-8A699E07812C}
O43 - CFD: 15/05/2012 - 10:05:13 - [0] ----D C:\Users\User\AppData\Local\{04D775A3-10D6-4B8C-A01F-A8CD4EEB6E60}
O43 - CFD: 14/10/2011 - 12:58:17 - [0] ----D C:\Users\User\AppData\Local\{04E36F61-EA19-4892-9E5F-9A45FB0D1E26}
O43 - CFD: 20/05/2012 - 00:33:58 - [0] ----D C:\Users\User\AppData\Local\{055819F8-4EB1-4DB8-9BF6-D346A2677BBA}
O43 - CFD: 14/12/2011 - 03:04:37 - [0] ----D C:\Users\User\AppData\Local\{05E77DF0-5016-47CA-B741-EA45554CFFB1}
O43 - CFD: 29/01/2012 - 03:05:49 - [0] ----D C:\Users\User\AppData\Local\{0601CB5B-D04F-41C3-B032-72629E56F640}
O43 - CFD: 29/01/2012 - 15:06:39 - [0] ----D C:\Users\User\AppData\Local\{063DF7BA-B947-4486-AEEC-829DE6A86AF3}
O43 - CFD: 15/10/2011 - 15:28:26 - [0] ----D C:\Users\User\AppData\Local\{06464FF1-6262-4797-9652-E83387B4AD68}
O43 - CFD: 13/04/2011 - 18:51:24 - [0] ----D C:\Users\User\AppData\Local\{06D9A444-3DB1-4CAF-ADEE-E12FD5EC2B14}
O43 - CFD: 17/09/2011 - 13:37:26 - [0] ----D C:\Users\User\AppData\Local\{06F8D413-6ACE-4AFE-994F-EDD3283B1CEC}
O43 - CFD: 29/02/2012 - 23:38:55 - [0] ----D C:\Users\User\AppData\Local\{0721885B-2A30-46D8-B296-A9D2641E4233}
O43 - CFD: 06/11/2011 - 02:33:41 - [0] ----D C:\Users\User\AppData\Local\{072FB4FA-F6E2-45E1-8206-CD5A4AF582BC}
O43 - CFD: 16/04/2011 - 14:50:46 - [0] ----D C:\Users\User\AppData\Local\{074F4BEC-2D4F-4888-8D25-158F70D7C751}
O43 - CFD: 23/06/2011 - 08:26:25 - [0] ----D C:\Users\User\AppData\Local\{076EDD28-1B0F-49E2-A224-DAB4C03940FA}
O43 - CFD: 31/03/2012 - 14:24:17 - [0] ----D C:\Users\User\AppData\Local\{07707114-B66D-4D6C-9168-5FADB6250F55}
O43 - CFD: 05/05/2012 - 12:09:25 - [0] ----D C:\Users\User\AppData\Local\{07893E45-E33D-461B-9161-8FCF38D70AB9}
O43 - CFD: 02/06/2011 - 11:35:37 - [0] ----D C:\Users\User\AppData\Local\{078D0226-78DB-4A29-A546-5D18ADCFE699}
O43 - CFD: 12/09/2011 - 12:34:39 - [0] ----D C:\Users\User\AppData\Local\{07950F14-A52A-4991-B972-6D42512B176F}
O43 - CFD: 20/12/2011 - 13:05:35 - [0] ----D C:\Users\User\AppData\Local\{07AC0EBC-DE13-4775-AF19-51553409523B}
O43 - CFD: 11/08/2011 - 21:46:03 - [0] ----D C:\Users\User\AppData\Local\{0828FE9F-B949-46A6-A141-301525FCD50D}
O43 - CFD: 09/05/2012 - 15:04:24 - [0] ----D C:\Users\User\AppData\Local\{08983A9D-9C63-4C00-955F-E7A0CC0F62AC}
O43 - CFD: 26/11/2011 - 01:59:49 - [0] ----D C:\Users\User\AppData\Local\{08CDF927-DD72-4DBC-A404-8DF5619178B4}
O43 - CFD: 16/03/2012 - 10:12:44 - [0] ----D C:\Users\User\AppData\Local\{0947D634-899A-456A-B376-153AFFADF20E}
O43 - CFD: 11/10/2011 - 12:31:15 - [0] ----D C:\Users\User\AppData\Local\{09A2BFFA-7D09-4982-A381-EFC502C8489F}
O43 - CFD: 18/10/2011 - 17:54:25 - [0] ----D C:\Users\User\AppData\Local\{0A2CE194-BC3D-42D8-B21B-EF11F7E37BD9}
O43 - CFD: 04/05/2012 - 08:10:38 - [0] ----D C:\Users\User\AppData\Local\{0A582AE5-1CB0-4093-85B8-B7CB29028B76}
O43 - CFD: 12/06/2012 - 09:09:47 - [0] ----D C:\Users\User\AppData\Local\{0A6C9AA4-4917-4552-810F-9518B53E4FA9}
O43 - CFD: 30/03/2011 - 07:55:06 - [0] ----D C:\Users\User\AppData\Local\{0A81D0CC-53FA-479C-8F31-AD2BA78EF7A5}
O43 - CFD: 27/08/2011 - 18:07:21 - [0] ----D C:\Users\User\AppData\Local\{0ADC3A39-322E-4EA0-9B90-9E054B9079A6}
O43 - CFD: 01/12/2011 - 00:14:29 - [0] ----D C:\Users\User\AppData\Local\{0B1AC09B-9D59-4944-87BB-38A5F15CE6D4}
O43 - CFD: 19/06/2012 - 09:10:19 - [0] ----D C:\Users\User\AppData\Local\{0B630E22-4D73-4D74-8118-CA3F102D1D3A}
O43 - CFD: 03/11/2011 - 12:57:55 - [0] ----D C:\Users\User\AppData\Local\{0B6EF4E1-6E6C-435C-8BD5-0DE411B34433}
O43 - CFD: 13/11/2011 - 00:05:30 - [0] ----D C:\Users\User\AppData\Local\{0BB9855E-349D-46FF-9CA1-102BFB272F23}
O43 - CFD: 05/09/2011 - 17:25:50 - [0] ----D C:\Users\User\AppData\Local\{0BE25F56-BFAB-4213-A8A4-FCF6FE11DC91}
O43 - CFD: 04/04/2012 - 07:25:40 - [0] ----D C:\Users\User\AppData\Local\{0C3250C2-286E-49CB-B75D-E545C42298AE}
O43 - CFD: 26/04/2011 - 12:54:43 - [0] ----D C:\Users\User\AppData\Local\{0C8299DF-BDF3-40E7-9979-64944E281B26}
O43 - CFD: 14/05/2011 - 19:28:52 - [0] ----D C:\Users\User\AppData\Local\{0C87AB1C-EA5E-4041-960B-9F3B7E39C338}
O43 - CFD: 02/08/2011 - 12:23:44 - [0] ----D C:\Users\User\AppData\Local\{0C92DC1A-C0CC-415B-AD59-8FBE680D88F8}
O43 - CFD: 10/05/2012 - 13:06:29 - [0] ----D C:\Users\User\AppData\Local\{0D4FFEB0-2C3E-4374-B828-E0D295028F18}
O43 - CFD: 20/03/2012 - 13:36:34 - [0] ----D C:\Users\User\AppData\Local\{0D57853E-318D-4E16-B90D-E5D97B4A472F}
O43 - CFD: 28/01/2012 - 01:36:21 - [0] ----D C:\Users\User\AppData\Local\{0D9FD275-07C8-462F-8DFC-B09104D58BD2}
O43 - CFD: 25/08/2011 - 19:41:25 - [0] ----D C:\Users\User\AppData\Local\{0DC085EF-C79E-4F7A-A83E-1A51C6D4F7F7}
O43 - CFD: 01/08/2011 - 18:26:29 - [0] ----D C:\Users\User\AppData\Local\{0E5F4D41-CFA4-4499-85ED-6F21325FABD4}
O43 - CFD: 07/02/2012 - 12:35:02 - [0] ----D C:\Users\User\AppData\Local\{0E6F5C37-91A8-4B2B-86F6-A8A11DF547F5}
O43 - CFD: 20/11/2011 - 03:08:16 - [0] ----D C:\Users\User\AppData\Local\{0E7BAA36-8015-40DA-9255-4A946C739FF1}
O43 - CFD: 10/01/2012 - 13:52:09 - [0] ----D C:\Users\User\AppData\Local\{0FB46FD7-B003-48E9-92A0-17619DBF94CA}
O43 - CFD: 16/06/2012 - 12:22:19 - [0] ----D C:\Users\User\AppData\Local\{0FC819C4-C27A-43EC-BC1A-9D5DD6F84A7B}
O43 - CFD: 07/06/2012 - 12:45:23 - [0] ----D C:\Users\User\AppData\Local\{106CB634-7485-403E-A9F0-CA21438C87E7}
O43 - CFD: 16/11/2011 - 23:23:41 - [0] ----D C:\Users\User\AppData\Local\{1079A590-62B4-4903-9F4D-95208AE1AF8E}
O43 - CFD: 18/05/2012 - 09:22:02 - [0] ----D C:\Users\User\AppData\Local\{10A25051-F122-46F0-B1F7-A1AF71753DA0}
O43 - CFD: 30/08/2011 - 11:37:23 - [0] ----D C:\Users\User\AppData\Local\{110B0EED-DE93-4A00-BEEF-4D33F8D573DC}
O43 - CFD: 01/05/2012 - 14:03:32 - [0] ----D C:\Users\User\AppData\Local\{1110D846-52A0-44E3-842D-6D8A4A841774}
O43 - CFD: 21/03/2012 - 13:56:05 - [0] ----D C:\Users\User\AppData\Local\{11239386-8D8D-497D-9B1C-85BACA00DA77}
O43 - CFD: 07/05/2012 - 12:32:49 - [0] ----D C:\Users\User\AppData\Local\{1143B6B0-FE6E-46FB-B6EB-4F3082088E5F}
O43 - CFD: 10/04/2012 - 20:05:34 - [0] ----D C:\Users\User\AppData\Local\{115A797B-3518-4FBF-95B5-36F7D2235633}
O43 - CFD: 20/04/2012 - 14:02:07 - [0] ----D C:\Users\User\AppData\Local\{1182F55E-D067-4E98-823F-C81F263896CA}
O43 - CFD: 19/01/2012 - 18:58:25 - [0] ----D C:\Users\User\AppData\Local\{119C5EDD-6AFC-4E7D-985D-57C4B4CA4E1A}
O43 - CFD: 10/07/2011 - 13:10:37 - [0] ----D C:\Users\User\AppData\Local\{11E16093-0066-4010-A380-FE56E18D3D75}
O43 - CFD: 05/08/2011 - 17:11:01 - [0] ----D C:\Users\User\AppData\Local\{11F024C7-FB24-4080-BBD1-C8E1F0FD4F0D}
O43 - CFD: 24/05/2012 - 20:44:25 - [0] ----D C:\Users\User\AppData\Local\{12321725-3ABD-41B1-B6D5-7B3120555AD2}
O43 - CFD: 01/09/2011 - 23:26:59 - [0] ----D C:\Users\User\AppData\Local\{1232EA29-BF7D-4284-9FD2-9A9E68A33C1B}
O43 - CFD: 24/07/2011 - 14:42:16 - [0] ----D C:\Users\User\AppData\Local\{129BE0B6-7CCE-4612-BEB2-06E333D1C11A}
O43 - CFD: 19/10/2011 - 12:25:57 - [0] ----D C:\Users\User\AppData\Local\{12E8E978-CA17-4AF9-8942-9BCE116384AA}
O43 - CFD: 01/10/2011 - 23:21:36 - [0] ----D C:\Users\User\AppData\Local\{13DD281A-35B7-4136-8DA3-544DD08661C4}
O43 - CFD: 11/04/2011 - 09:59:10 - [0] ----D C:\Users\User\AppData\Local\{13E55773-3A08-4252-9AD9-805A4F8B7F61}
O43 - CFD: 20/03/2011 - 11:45:38 - [0] ----D C:\Users\User\AppData\Local\{13F211ED-E916-4CC1-B626-9988212083A4}
O43 - CFD: 31/08/2011 - 10:43:19 - [0] ----D C:\Users\User\AppData\Local\{141476FA-DBA5-4989-8F32-9DE541979CEE}
O43 - CFD: 19/03/2011 - 08:23:51 - [0] ----D C:\Users\User\AppData\Local\{148E6B19-1781-46C0-84FF-195DA2C9A961}
O43 - CFD: 02/01/2012 - 14:51:36 - [0] ----D C:\Users\User\AppData\Local\{14B48365-156F-4FDA-B68B-58558417E525}
O43 - CFD: 11/12/2011 - 21:09:04 - [0] ----D C:\Users\User\AppData\Local\{14DEFD7E-A997-4D2B-86EB-4C91C6F6E4FA}
O43 - CFD: 22/02/2012 - 23:55:56 - [0] ----D C:\Users\User\AppData\Local\{1505E1B2-6AB5-4EAA-8616-70F1A6E82B65}
O43 - CFD: 11/08/2011 - 21:46:18 - [0] ----D C:\Users\User\AppData\Local\{15735335-C2D5-419F-88C1-4DB23C83DB7C}
O43 - CFD: 06/11/2011 - 02:34:21 - [0] ----D C:\Users\User\AppData\Local\{15C75D36-87CA-40E7-A759-557AA741FDE0}
O43 - CFD: 24/09/2011 - 23:01:35 - [0] ----D C:\Users\User\AppData\Local\{15DF3AB4-9413-4EC1-8B1F-E6E701BF5D4C}
O43 - CFD: 01/11/2011 - 13:33:22 - [0] ----D C:\Users\User\AppData\Local\{15E51DA7-8896-4B38-A9F4-E814DAE96FE0}
O43 - CFD: 29/02/2012 - 23:39:01 - [0] ----D C:\Users\User\AppData\Local\{15FE4402-4F84-426E-BD96-E2792094104E}
O43 - CFD: 19/05/2012 - 12:33:19 - [0] ----D C:\Users\User\AppData\Local\{162AEF48-839B-4F43-9A93-1B7F615D25A0}
O43 - CFD: 18/11/2011 - 11:38:35 - [0] ----D C:\Users\User\AppData\Local\{165227F4-1747-48E9-B884-E74C1136E06A}
O43 - CFD: 23/04/2012 - 14:04:41 - [0] ----D C:\Users\User\AppData\Local\{1683620C-0BC9-45DE-9049-C33F41B0246C}
O43 - CFD: 02/08/2011 - 20:35:05 - [0] ----D C:\Users\User\AppData\Local\{169246B8-4B8B-4B5C-8B67-BCD7192E7B73}
O43 - CFD: 30/01/2012 - 19:10:22 - [0] ----D C:\Users\User\AppData\Local\{177AF0CE-DCAC-43E2-BE52-E6B7B1672651}
O43 - CFD: 12/12/2011 - 10:17:08 - [0] ----D C:\Users\User\AppData\Local\{17981C29-9C31-4CB2-97A9-D38E2ECCBFFC}
O43 - CFD: 29/10/2011 - 18:46:38 - [0] ----D C:\Users\User\AppData\Local\{17C6D310-19CF-44CC-A9D3-11C2B8F2C2E6}
O43 - CFD: 24/09/2011 - 10:58:39 - [0] ----D C:\Users\User\AppData\Local\{18DA0532-728F-4A8E-AB24-AC333E452184}
O43 - CFD: 12/12/2011 - 22:18:10 - [0] ----D C:\Users\User\AppData\Local\{19141BC4-94AF-4C6C-8251-2426D0B9A1ED}
O43 - CFD: 04/01/2012 - 13:34:17 - [0] ----D C:\Users\User\AppData\Local\{19437F48-DEDD-4E7B-80A4-6260B02CFC70}
O43 - CFD: 22/01/2012 - 13:57:27 - [0] ----D C:\Users\User\AppData\Local\{198B4E7E-7E7D-403A-9BD7-6C6E5625D321}
O43 - CFD: 07/03/2012 - 13:52:09 - [0] ----D C:\Users\User\AppData\Local\{19A14CD5-D31C-463F-82A2-7F037F5E138A}
O43 - CFD: 10/09/2011 - 10:57:23 - [0] ----D C:\Users\User\AppData\Local\{19AD820E-327D-448D-9E3F-08FBBB0B382A}
O43 - CFD: 31/01/2012 - 09:58:22 - [0] ----D C:\Users\User\AppData\Local\{19C8F874-1727-462A-81F0-A25D80FB27F6}
O43 - CFD: 08/06/2012 - 00:46:14 - [0] ----D C:\Users\User\AppData\Local\{1A1A32C1-993A-4DCB-86A1-A1ED76979CE7}
O43 - CFD: 04/06/2012 - 12:53:17 - [0] ----D C:\Users\User\AppData\Local\{1A1FC25F-5998-4C41-B07B-FBA0903277AB}
O43 - CFD: 24/07/2012 - 11:09:15 - [0] ----D C:\Users\User\AppData\Local\{1A2887FC-3841-44F9-8EDA-8A249AF9591E}
O43 - CFD: 23/07/2011 - 13:03:44 - [0] ----D C:\Users\User\AppData\Local\{1A3A5B10-930F-4C5E-9A9D-2F24FF77D9FD}
O43 - CFD: 08/10/2011 - 21:56:50 - [0] ----D C:\Users\User\AppData\Local\{1A81D86B-FF33-4DF0-9A0F-99539786D26E}
O43 - CFD: 07/01/2012 - 14:43:50 - [0] ----D C:\Users\User\AppData\Local\{1A955813-5EBC-4322-9535-76458A2C37CD}
O43 - CFD: 31/05/2011 - 19:06:28 - [0] ----D C:\Users\User\AppData\Local\{1AA01275-EEC8-4193-A18B-797CC8BB6D87}
O43 - CFD: 14/04/2011 - 22:43:32 - [0] ----D C:\Users\User\AppData\Local\{1AD9EF04-FBF2-42CA-AABB-625689B28386}
O43 - CFD: 06/01/2012 - 13:49:30 - [0] ----D C:\Users\User\AppData\Local\{1AE7196B-E0E6-4185-B964-FF6609CC287F}
O43 - CFD: 16/08/2011 - 13:52:44 - [0] ----D C:\Users\User\AppData\Local\{1AF7675B-0BB8-4C55-96A4-7BD676B13E33}
O43 - CFD: 30/09/2011 - 20:39:54 - [0] ----D C:\Users\User\AppData\Local\{1B2DDB0E-CA31-4521-BE6B-0CE058C00BD2}
O43 - CFD: 10/11/2011 - 11:07:57 - [0] ----D C:\Users\User\AppData\Local\{1B3BC53D-B4ED-4894-A0D6-CCFC08AA5B87}
O43 - CFD: 30/01/2012 - 19:10:09 - [0] ----D C:\Users\User\AppData\Local\{1B413FCA-7C59-439B-B78B-7987EE23E0A3}
O43 - CFD: 09/10/2011 - 23:28:25 - [0] ----D C:\Users\User\AppData\Local\{1B5AEBCF-CD82-4C07-B48A-99B23896BFAC}
O43 - CFD: 04/02/2012 - 14:22:55 - [0] ----D C:\Users\User\AppData\Local\{1B67C813-EF6A-461F-BD97-4F5FD76EF8AC}
O43 - CFD: 12/10/2011 - 00:34:26 - [0] ----D C:\Users\User\AppData\Local\{1B6F7EFF-8BCB-43E9-A7D3-2A72948A38A4}
O43 - CFD: 19/06/2011 - 22:35:05 - [0] ----D C:\Users\User\AppData\Local\{1B7B6462-0072-4C6C-BDF5-F0ECF3D65727}
O43 - CFD: 10/07/2012 - 12:23:11 - [0] ----D C:\Users\User\AppData\Local\{1B7B9734-6433-4663-A09F-BA3BA3C82A9E}
O43 - CFD: 04/12/2011 - 16:58:07 - [0] ----D C:\Users\User\AppData\Local\{1B9CAF9A-CFB1-4339-BCD3-50F7E9B729AF}
O43 - CFD: 04/04/2011 - 16:52:09 - [0] ----D C:\Users\User\AppData\Local\{1C349CF9-C247-44B6-B8FE-9FE4CD8AA2C1}
O43 - CFD: 09/05/2012 - 15:04:11 - [0] ----D C:\Users\User\AppData\Local\{1C608599-8F55-44CD-A3AC-E8A2706EC818}
O43 - CFD: 13/04/2012 - 00:13:40 - [0] ----D C:\Users\User\AppData\Local\{1C6352E8-5349-4810-AFA2-217F1A5485CB}
O43 - CFD: 08/09/2011 - 18:01:54 - [0] ----D C:\Users\User\AppData\Local\{1D1E874E-D7CF-437F-A859-B91DFD7471F7}
O43 - CFD: 30/10/2011 - 13:04:10 - [0] ----D C:\Users\User\AppData\Local\{1D4E7C2A-E381-490A-93B0-D7C18F88694A}
O43 - CFD: 11/02/2012 - 14:32:17 - [0] ----D C:\Users\User\AppData\Local\{1D50DCF1-8B19-488A-BCF9-DD7AD0BDD5E0}
O43 - CFD: 29/05/2012 - 08:54:43 - [0] ----D C:\Users\User\AppData\Local\{1D729ABB-5335-4BA3-876C-69B4386A581E}
O43 - CFD: 17/06/2011 - 22:32:56 - [0] ----D C:\Users\User\AppData\Local\{1D997303-68A2-4FA3-8763-DB6D053F6C9A}
O43 - CFD: 28/06/2011 - 01:00:21 - [0] ----D C:\Users\User\AppData\Local\{1E04E10E-4A7F-4C6C-911C-FFC47F2B0EF5}
O43 - CFD: 04/11/2011 - 19:11:50 - [0] ----D C:\Users\User\AppData\Local\{1E7AFFA8-E78A-4966-852A-33DBC9AC8155}
O43 - CFD: 11/12/2011 - 21:08:54 - [0] ----D C:\Users\User\AppData\Local\{1E903233-A6B3-405E-B43F-333C99566B34}
O43 - CFD: 27/10/2011 - 23:29:54 - [0] ----D C:\Users\User\AppData\Local\{1EAFCA80-EEAA-4BB9-8D93-071E65DEE093}
O43 - CFD: 18/08/2011 - 22:18:03 - [0] ----D C:\Users\User\AppData\Local\{1F140BCD-E895-4F8B-A344-D4D7E0821CE8}
O43 - CFD: 11/03/2011 - 22:09:57 - [0] ----D C:\Users\User\AppData\Local\{1F2B8512-EFE3-4292-9AA5-540749D3491D}
O43 - CFD: 21/12/2011 - 12:06:38 - [0] ----D C:\Users\User\AppData\Local\{1F37AEEF-43A8-4FC6-8810-44D3DA10D591}
O43 - CFD: 28/10/2011 - 23:31:09 - [0] ----D C:\Users\User\AppData\Local\{1F8266C7-62B0-4A1C-8E6C-CB0460A3993D}
O43 - CFD: 12/05/2012 - 13:33:20 - [0] ----D C:\Users\User\AppData\Local\{1F86F634-83A8-4C39-9C3C-47AE7DB2BEA6}
O43 - CFD: 01/01/2012 - 13:44:11 - [0] ----D C:\Users\User\AppData\Local\{1F99B357-C621-4ABA-9C9B-759BE8A90D58}
O43 - CFD: 04/06/2011 - 12:00:13 - [0] ----D C:\Users\User\AppData\Local\{1FB9A2B5-470D-4840-BDF7-0876722BC15A}
O43 - CFD: 28/09/2011 - 13:13:06 - [0] ----D C:\Users\User\AppData\Local\{1FBCEB02-6BC1-400C-A7D2-A675DD38B912}
O43 - CFD: 19/08/2011 - 19:34:03 - [0] ----D C:\Users\User\AppData\Local\{1FEF9CC1-08A1-41F2-A1BF-DFE7C9D783D8}
O43 - CFD: 12/12/2011 - 10:17:19 - [0] ----D C:\Users\User\AppData\Local\{1FFA45FE-4F84-4588-9B5F-1F8C7CADF387}
O43 - CFD: 30/09/2011 - 08:37:28 - [0] ----D C:\Users\User\AppData\Local\{200EFE8B-470F-4545-9921-4B2A3FBE7D95}
O43 - CFD: 12/05/2011 - 18:41:48 - [0] ----D C:\Users\User\AppData\Local\{2097E3F8-5987-4DC5-832C-2E2CDD7F0136}
O43 - CFD: 06/03/2012 - 10:00:58 - [0] ----D C:\Users\User\AppData\Local\{21557D36-5346-4F86-9DDB-4A5C3306656E}
O43 - CFD: 25/10/2011 - 17:29:21 - [0] ----D C:\Users\User\AppData\Local\{2160F5BB-5902-4CF3-B8AE-172BFBF6A94C}
O43 - CFD: 15/04/2011 - 10:43:56 - [0] ----D C:\Users\User\AppData\Local\{21A87938-2D23-471C-8D3D-239EDF9B3882}
O43 - CFD: 03/05/2012 - 16:15:08 - [0] ----D C:\Users\User\AppData\Local\{21B5EC15-2889-4DCE-9200-34DF025F5113}
O43 - CFD: 04/08/2011 - 18:39:22 - [0] ----D C:\Users\User\AppData\Local\{22A9EEE8-A136-49AE-9FFF-EF32067E9188}
O43 - CFD: 20/10/2011 - 00:26:49 - [0] ----D C:\Users\User\AppData\Local\{22AA8F7C-7FD4-4741-8066-10C44637A43A}
O43 - CFD: 13/09/2011 - 22:16:20 - [0] ----D C:\Users\User\AppData\Local\{22C30F41-8831-4BE4-BD24-921CECFA7105}
O43 - CFD: 12/07/2012 - 19:46:36 - [0] ----D C:\Users\User\AppData\Local\{2336D21F-E4FC-44CB-90D5-FF28652B2010}
O43 - CFD: 02/10/2011 - 23:42:23 - [0] ----D C:\Users\User\AppData\Local\{234CDFA7-8595-4B56-A993-C4748A5B09D2}
O43 - CFD: 30/12/2011 - 02:58:59 - [0] ----D C:\Users\User\AppData\Local\{23D508EB-90C8-46A0-9FF1-66D8DBA8AA53}
O43 - CFD: 16/08/2011 - 13:57:30 - [0] ----D C:\Users\User\AppData\Local\{23E0AA8D-73C6-4DC6-B742-C0F86FD116E0}
O43 - CFD: 29/01/2012 - 15:06:29 - [0] ----D C:\Users\User\AppData\Local\{23FD13B4-9ECC-4A65-8B24-2509B5AD4F6D}
O43 - CFD: 27/04/2011 - 14:53:24 - [0] ----D C:\Users\User\AppData\Local\{242E8906-337E-4F41-803E-49C57EA1A3F5}
O43 - CFD: 04/12/2011 - 01:54:46 - [0] ----D C:\Users\User\AppData\Local\{244D0368-1119-474F-9B7C-5047290A8E8F}
O43 - CFD: 21/05/2011 - 20:24:45 - [0] ----D C:\Users\User\AppData\Local\{24869313-7547-4051-8D33-218922C175BE}
O43 - CFD: 17/02/2012 - 17:04:54 - [0] ----D C:\Users\User\AppData\Local\{25264213-E4C8-4AB7-8190-BBEE5B10A079}
O43 - CFD: 03/08/2012 - 19:24:44 - [0] ----D C:\Users\User\AppData\Local\{25474498-34C9-4FBE-A11B-65FA5D39F250}
O43 - CFD: 19/06/2012 - 09:10:38 - [0] ----D C:\Users\User\AppData\Local\{256614C8-9BD7-4FFA-900B-702DDA73EB7C}
O43 - CFD: 21/04/2011 - 13:46:55 - [0] ----D C:\Users\User\AppData\Local\{25954E55-1D8A-44D4-8316-EC0FD0152F4F}
O43 - CFD: 21/07/2012 - 16:52:42 - [0] ----D C:\Users\User\AppData\Local\{25F01641-BFD0-4B0B-B085-9E7C66003F94}
O43 - CFD: 20/02/2012 - 00:53:28 - [0] ----D C:\Users\User\AppData\Local\{266E223A-AD34-4CD8-B219-A9D71242B300}
O43 - CFD: 13/08/2012 - 10:24:30 - [0] ----D C:\Users\User\AppData\Local\{26834D85-662E-4936-9F9A-F4046ED86F3B}
O43 - CFD: 02/11/2011 - 13:35:30 - [0] ----D C:\Users\User\AppData\Local\{2688A151-03BD-4F6F-B8AF-501C2883750F}
O43 - CFD: 07/01/2012 - 01:50:06 - [0] ----D C:\Users\User\AppData\Local\{26B655F6-C657-4892-8CEA-1A0CAE2DD2B4}
O43 - CFD: 17/05/2012 - 00:54:16 - [0] ----D C:\Users\User\AppData\Local\{2729C098-F043-4A22-9C36-5CF5D6F307C5}
O43 - CFD: 14/12/2011 - 15:07:13 - [0] ----D C:\Users\User\AppData\Local\{27819B46-6691-43B2-9D9D-650C44A42B2A}
O43 - CFD: 27/12/2011 - 23:37:00 - [0] ----D C:\Users\User\AppData\Local\{27E7247D-B765-4F22-A74D-977D94868064}
O43 - CFD: 29/03/2011 - 19:41:32 - [0] ----D C:\Users\User\AppData\Local\{281316C9-36CE-46F8-BC84-B9C0CCAD7950}
O43 - CFD: 11/06/2012 - 13:03:11 - [0] ----D C:\Users\User\AppData\Local\{281F60A6-3917-4D03-87F3-47DA1D7C7CA9}
O43 - CFD: 28/02/2012 - 14:54:05 - [0] ----D C:\Users\User\AppData\Local\{287EFBA8-DD7E-4EA8-801B-5A8718512060}
O43 - CFD: 17/05/2012 - 15:33:26 - [0] ----D C:\Users\User\AppData\Local\{28866027-9074-4D51-AC02-37B8054E1DEB}
O43 - CFD: 16/01/2012 - 20:11:05 - [0] ----D C:\Users\User\AppData\Local\{28BEC466-AFD8-4143-A33A-B371E442C40B}
O43 - CFD: 06/08/2011 - 10:58:20 - [0] ----D C:\Users\User\AppData\Local\{2A01211A-F3F3-4597-91B1-F1EC2BBDD14C}
O43 - CFD: 02/11/2011 - 01:34:39 - [0] ----D C:\Users\User\AppData\Local\{2A564B9E-5414-49B8-934B-A2BB1BB8B8A0}
O43 - CFD: 30/12/2011 - 17:11:38 - [0] ----D C:\Users\User\AppData\Local\{2A6F44C6-77D0-4F7A-86B0-F82DAC536303}
O43 - CFD: 27/06/2011 - 12:59:58 - [0] ----D C:\Users\User\AppData\Local\{2A9D4D8D-1616-4975-92D3-659063F28CEA}
O43 - CFD: 27/12/2011 - 11:35:45 - [0] ----D C:\Users\User\AppData\Local\{2ACC0EFA-6B84-48FC-89C1-1CDC68109295}
O43 - CFD: 15/05/2011 - 20:11:53 - [0] ----D C:\Users\User\AppData\Local\{2B3B1160-485B-4B57-AD48-7392E71E7416}
O43 - CFD: 11/04/2011 - 21:59:34 - [0] ----D C:\Users\User\AppData\Local\{2B4CEC43-BECD-4673-B862-9C9588303425}
O43 - CFD: 11/04/2012 - 12:49:27 - [0] ----D C:\Users\User\AppData\Local\{2B66BAEF-ED28-4E01-A828-3A221272EA31}
O43 - CFD: 27/08/2011 - 18:07:39 - [0] ----D C:\Users\User\AppData\Local\{2BB1A609-339A-471E-B79E-03B2125979A2}
O43 - CFD: 08/10/2011 - 21:56:40 - [0] ----D C:\Users\User\AppData\Local\{2BF6205B-02D8-4F86-9694-E603EBB07259}
O43 - CFD: 21/04/2012 - 14:32:07 - [0] ----D C:\Users\User\AppData\Local\{2C05564D-B96A-469E-9A75-88E24A2C6F8E}
O43 - CFD: 30/07/2011 - 12:17:37 - [0] ----D C:\Users\User\AppData\Local\{2C37B17E-0340-41C9-9141-A530B7152AE6}
O43 - CFD: 05/05/2012 - 12:09:15 - [0] ----D C:\Users\User\AppData\Local\{2C899A30-0557-4DB1-A2B9-599590AB8C40}
O43 - CFD: 26/03/2012 - 12:26:58 - [0] ----D C:\Users\User\AppData\Local\{2C8A2117-F51A-4C41-B96F-F312DEDA264D}
O43 - CFD: 22/02/2012 - 23:55:24 - [0] ----D C:\Users\User\AppData\Local\{2C941A6A-3D61-45B7-AC45-586B3E8FFF28}
O43 - CFD: 29/11/2011 - 13:56:26 - [0] ----D C:\Users\User\AppData\Local\{2CA3E0AE-6A88-45D3-AE91-8059BFF17180}
O43 - CFD: 08/11/2011 - 13:58:22 - [0] ----D C:\Users\User\AppData\Local\{2CBDBDFE-CA07-426C-8009-744724892920}
O43 - CFD: 27/10/2011 - 11:28:54 - [0] ----D C:\Users\User\AppData\Local\{2D07229C-7F5A-48D6-A562-B6A0B7341E2F}
O43 - CFD: 12/05/2012 - 13:33:33 - [0] ----D C:\Users\User\AppData\Local\{2D20C28C-9B28-476A-A922-65A7CF50AF8F}
O43 - CFD: 01/03/2012 - 14:15:01 - [0] ----D C:\Users\User\AppData\Local\{2D3A86BE-8969-41EE-BDE3-A8577C2DD90A}
O43 - CFD: 23/05/2012 - 12:38:46 - [0] ----D C:\Users\User\AppData\Local\{2DFB111C-A401-4BF4-801E-F539F310C5B4}
O43 - CFD: 14/11/2011 - 19:28:19 - [0] ----D C:\Users\User\AppData\Local\{2E6B3E36-54E6-4832-A1BF-65992BEFB074}
O43 - CFD: 27/06/2012 - 07:18:29 - [0] ----D C:\Users\User\AppData\Local\{2EB1CC7A-F449-40D1-9A7E-D9DF4A96A461}
O43 - CFD: 18/03/2011 - 08:10:04 - [0] ----D C:\Users\User\AppData\Local\{2EBA7DBE-4324-4741-BF65-0016CE71EB62}
O43 - CFD: 31/08/2011 - 20:23:24 - [0] ----D C:\Users\User\AppData\Local\{2EF912ED-8714-4766-B6A8-B6680C7D9F5B}
O43 - CFD: 16/09/2011 - 11:38:04 - [0] ----D C:\Users\User\AppData\Local\{2F29195C-E251-46F9-9D06-C90461FC0991}
O43 - CFD: 27/07/2011 - 09:27:55 - [0] ----D C:\Users\User\AppData\Local\{2FBCA714-9E30-4AB7-A560-64DE5C8E94AE}
O43 - CFD: 15/08/2011 - 12:29:13 - [0] ----D C:\Users\User\AppData\Local\{2FFC0BDA-0900-4B3C-8939-1E9445BFE9A7}
O43 - CFD: 06/03/2012 - 22:02:03 - [0] ----D C:\Users\User\AppData\Local\{2FFC4468-3F8D-4E36-B445-9C14BCAA885D}
O43 - CFD: 24/04/2012 - 13:43:26 - [0] ----D C:\Users\User\AppData\Local\{3001118D-6C43-4BA7-91C6-097C6156C90B}
O43 - CFD: 16/10/2011 - 14:00:16 - [0] ----D C:\Users\User\AppData\Local\{3012CD90-5EC1-438E-A754-ED1349A66931}
O43 - CFD: 29/08/2011 - 02:08:03 - [0] ----D C:\Users\User\AppData\Local\{30410A37-1989-4527-BF5B-23E3E40527EA}
O43 - CFD: 05/08/2011 - 13:46:50 - [0] ----D C:\Users\User\AppData\Local\{30DC872C-8B9C-4D0A-83B0-B793967C4AB0}
O43 - CFD: 05/01/2012 - 13:48:20 - [0] ----D C:\Users\User\AppData\Local\{30EED144-6494-4ACA-A723-0A518A362E42}
O43 - CFD: 25/07/2012 - 17:55:10 - [0] ----D C:\Users\User\AppData\Local\{31853F60-2069-4F1E-8196-15F5D940B6ED}
O43 - CFD: 22/07/2012 - 12:33:01 - [0] ----D C:\Users\User\AppData\Local\{3194966A-FFD2-446E-B43F-97A38925F511}
O43 - CFD: 03/12/2011 - 13:54:20 - [0] ----D C:\Users\User\AppData\Local\{31B639D6-CFEA-449F-84E2-01EDE8510844}
O43 - CFD: 08/05/2011 - 21:38:42 - [0] ----D C:\Users\User\AppData\Local\{31D36A82-AFEC-4F4C-AFDD-8FBFC0E0D578}
O43 - CFD: 17/12/2011 - 12:54:15 - [0] ----D C:\Users\User\AppData\Local\{322CFC83-FEFC-487C-AA90-3E9972281C7A}
O43 - CFD: 06/05/2011 - 13:01:10 - [0] ----D C:\Users\User\AppData\Local\{329BCDC2-F05C-4059-913B-FF4F0B79F6DC}
O43 - CFD: 10/10/2011 - 18:13:42 - [0] ----D C:\Users\User\AppData\Local\{331AB3C7-244C-4D6D-81AB-10D79523F5A8}
O43 - CFD: 09/10/2011 - 23:28:15 - [0] ----D C:\Users\User\AppData\Local\{33616887-5247-40E8-B00A-B6122EF841FC}
O43 - CFD: 01/09/2011 - 23:16:43 - [0] ----D C:\Users\User\AppData\Local\{3378B519-4A73-441E-BD6A-87370E358C30}
O43 - CFD: 06/05/2012 - 13:2