Virus rundll

tu m'étonnes que ton pc est réinfecté :

C:\Users\YONI\Desktop\Yoni\ipod\iPod2PC 2.12-FUll-CRACKED-Team-El33t.rar
C:\Users\YONI\Desktop\Yoni\Nero.v7.Premium.Multilangages.Incl-Keygen.par.eMule-Paradise.com.rar
C:\Users\YONI\Desktop\Z-douze\Documents and Settings\YONI\Bureau\Xilisoft.Video.Converter.v3.1.7.0630b.Multilangages.Incl.Keygen.rar
C:\Users\YONI\Desktop\Yoni\ipod\iPod2PC 2.12-FUll-CRACKED-Team-El33t.rar C:\Users\YONI\Desktop\Yoni\Nero.v7.Premium.Multilangages.Incl-Keygen.par.eMule-Paradise.com.rar
C:\Users\YONI\Desktop\Z-douze\Documents and Settings\YONI\Bureau\Xilisoft.Video.Converter.v3.1.7.0630b.Multilangages.Incl.Keygen.rar

à peine sorti de la crise, tu t'y es remis !!!!

pour te faire raffraichir la mémoire, voilà ce que je t'avais indiqué, un peu plus haut :

Electricien 69

24 mai 2012 à 08:26

bonjour,

c'est un Kreylogger que tu as surement télécharger vis P2P qui a foutu ton pc en l'air :

FREEzeFrog !!!

je fais fermer ce poste car je en vois pas l'interrêt de nettoyer ton pc vu que tu ne sais pas t'en servire correctement !!!

sur ce, bon suite !

bonsoir ,

voici le lien du rapport ZHPdiag :

https://www.cjoint.com/?BFpskbmIx0G

bonjour,

relance ADWC, clique sur désinstaller,

relance zhpdiag,

clique sur letourne vis, selectionne tous les modules ,

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur Cjoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :

https://www.cjoint.com/ => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

bonsoir,

voici le rapport ADWcleaner mais la restauration avait echouée donc je ne pense pas que c'est ca...

# AdwCleaner v1.609 - Rapport créé le 15/06/2012 à 01:38:58
# Mis à jour le 10/06/2012 par Xplode
# Système d'exploitation : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Nom d'utilisateur : YONI - PC-DE-ISAAC
# Exécuté depuis : C:\Users\YONI\Desktop\adwcleaner.exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

***** [Registre] *****

Clé Supprimée : HKCU\Software\APN
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\SweetIm
Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\I Want This
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]

***** [Registre - GUID] *****

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.19272

[OK] Le registre ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [4922 octets] - [14/06/2012 17:51:11]
AdwCleaner[S1].txt - [2767 octets] - [15/06/2012 01:38:58]

########## EOF - C:\AdwCleaner[S1].txt - [2895 octets] ##########

relance ADWC, clique sur Supprimer, poste sobn rapport

on va nettoyer le pc une dernière fois !

il y a deux possibilités :

ou tu as restauré le pc avec ces infoetions !

ou tu as téléchargé un truc qui t'a refilé les infections !

par contre je ne fais rien sur ZHPfix ?

bonjour,

voici le rapport ADWcleaner :

# AdwCleaner v1.609 - Rapport créé le 14/06/2012 à 17:51:11
# Mis à jour le 10/06/2012 par Xplode
# Système d'exploitation : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Nom d'utilisateur : YONI - PC-DE-ISAAC
# Exécuté depuis : C:\Users\YONI\Desktop\adwcleaner.exe
# Option [Recherche]

***** [Services] *****

***** [Fichiers / Dossiers] *****

***** [Registre] *****

Clé Présente : HKCU\Software\APN
Clé Présente : HKCU\Software\Offerbox
Clé Présente : HKCU\Software\SweetIm
Clé Présente : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Présente : HKCU\Software\AppDataLow\Software\I Want This
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
[x64] Clé Présente : HKCU\Software\APN
[x64] Clé Présente : HKCU\Software\Offerbox
[x64] Clé Présente : HKCU\Software\SweetIm
[x64] Clé Présente : HKCU\Software\AppDataLow\Software\AskToolbar
[x64] Clé Présente : HKCU\Software\AppDataLow\Software\I Want This
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}

***** [Registre - GUID] *****

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{703740C1-0F1A-4CEC-A4DF-D78DB0158477}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
[x64] Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[x64] Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[x64] Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.19272

[OK] Le registre ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [4833 octets] - [14/06/2012 17:51:11]

########## EOF - C:\AdwCleaner[R1].txt - [4961 octets] ##########

? Télécharger et enregistre ADWcleaner sur ton bureau (Merci à Xplode) :

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

Lance le,
clique sur rechercher et poste son rapport.

Bonjour ,

Je ne fais rien de spécial y a 80% d internet et 20 % de logiciels du style Microsoft office etc...

bonjour,

super !!!

ce pc, on l'a nettoyé, je vois encore Ask et Cie (Adwares) là dessus !!!

que fais tu avec ce pc ?

O.o°*??? Membre, Contributeur sécurité CCM o°.Oø¤º°'°º¤ø

O.o°* ??? Réspire à fond, Rédige ton message en bon français et de manière claire.Ca va bien se passer, tu verras, enfin on essaie !!! o°.Oø¤º°'°º¤ø

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.7E2857E07059618C1D85F7F66C8494B3] - 14/06/2012 - 00:38:30 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1869955]
O44 - LFC:[MD5.75A7A06BB55A1400DB0E361A4BD989B5] - 14/06/2012 - 00:28:58 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [67584]
O44 - LFC:[MD5.FF97C78E831477FA5FDFDFEE0A320A27] - 13/06/2012 - 02:48:50 ---A- . (...) -- C:\WINDOWS\PFRO.log [1168796]
O44 - LFC:[MD5.E6EC42A8AC73D4E4F539E6C4600ECBD8] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\PerfStringBackup.INI [1519804]
O44 - LFC:[MD5.A31ABA482DE342703D6F54B324979044] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfc009.dat [104110]
O44 - LFC:[MD5.61838A83577409EC722DDB7F0E0611F7] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfc00C.dat [126658]
O44 - LFC:[MD5.26234902C1C0A1D4D1F377712EB445A4] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfh009.dat [596036]
O44 - LFC:[MD5.607C9BA12869828E11F18A2F8E6AFF40] - 13/06/2012 - 02:40:58 ---A- . (...) -- C:\WINDOWS\SysNative\perfh00C.dat [679042]
O44 - LFC:[MD5.CDB254ACBF89210269C4B0551E88B1B6] - 12/06/2012 - 15:54:31 ---A- . (...) -- C:\DelFix[S1].txt [1382]
O44 - LFC:[MD5.372DC4FA8CF78756A635EE2861CC93A0] - 12/06/2012 - 15:53:36 ---A- . (...) -- C:\DelFix[R1].txt [1288]
O44 - LFC:[MD5.5FC4A8E040F723073C15F217A597EAA6] - 12/06/2012 - 15:49:31 ---A- . (...) -- C:\WINDOWS\DirectX.log [359]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 10/06/2012 - 15:56:39 ---A- . (...) -- C:\WINDOWS\system.ini [215]
O44 - LFC:[MD5.8D8296ECC82030A95C1DBD8A40DB778B] - 05/06/2012 - 22:25:49 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [65842]
O44 - LFC:[MD5.6B79FE61FA8F5E126132190B4D031855] - 01/06/2012 - 01:56:39 . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT []
O44 - LFC:[MD5.6B79FE61FA8F5E126132190B4D031855] - 01/06/2012 - 01:56:39 ---A- . (...) -- C:\WINDOWS\SysNative\FNTCACHE.DAT [319440]
O44 - LFC:[MD5.F173E6DEC12C9849A658E508261B2558] - 29/05/2012 - 18:11:20 ----- . (...) -- C:\{8BE6F825-B05D-4497-A169-81192B081AFE} [2504]
O44 - LFC:[MD5.C7B2659EA9F98C09710253721712A6CE] - 22/05/2012 - 12:44:41 ---A- . (...) -- C:\WINDOWS\ODBC.INI [376]
~ Scan Files in 00mn 02s

---\\ Contrôle du Safe Boot (CSB) (O49) (None)

---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{1c59f55a-5086-11e0-9432-806e6f6e6963}\AutoRun\command. (...) -- E:\Start.exe (.not file.)
~ Scan Keys in 00mn 00s

---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.F14215E37CF124104575073F782111D2] - 21/01/2008 - 03:46:53 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\WINDOWS\System32\Drivers\adp94xx.sys [486456]
~ Scan Drivers in 00mn 00s

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ Scan Keys in 00mn 00s

---\\ Start Menu Internet (O68) (None)

---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
O69 - SBI: SearchScopes [HKCU] {D87682BB-389A-4BE1-9F47-50B5EC54AD1D} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis
~ Scan Keys in 00mn 00s

---\\ Recherche des services démarrés par Svchost (O83) (None)

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.DF1236ED28C3C25A01036325D757B25F] [SPRF][30/01/2012] (...) -- C:\Users\YONI\AppData\Local\d3d9caps.dat [680]
[MD5.1A54E9230C500C5F49FD89AF4B827900] [SPRF][08/06/2012] (.NVIDIA Corporation - NVIDIA Windows Display Driver Installer.) -- C:\Users\YONI\Desktop\301.42-desktop-win7-winvista-64bit-international-whql.exe [211927944]
[MD5.CFBAA5DC7F01D2D2D530BF9C9DDFBB16] [SPRF][01/06/2012] (.Piriform Ltd - CCleaner Installer.) -- C:\Users\YONI\Desktop\ccsetup319.exe [3862112]
[MD5.3FFA88644CA0F4247689E3FC754637D0] [SPRF][12/06/2012] (...) -- C:\Users\YONI\Desktop\delfix.exe [386559]
[MD5.469824312579B17F9B0DA852DD07F4E2] [SPRF][11/04/2012] (.Driver Utilities - This installer database contains the logic and data required t.) -- C:\Users\YONI\Desktop\DriverUtilities.exe [1190040]
[MD5.5AEC5B936DC77EF1B20A5F08AF9F5F2B] [SPRF][25/05/2012] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\YONI\Desktop\JavaSetup7u4.exe [892360]
[MD5.250B9F87DDAF7AFC624BB5E61C4BD6E3] [SPRF][25/05/2012] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\YONI\Desktop\mbam-setup-1.61.0.1400.exe [10063000]
[MD5.A0ACCA7FF2F880EC3502DCAD188FC85A] [SPRF][14/06/2012] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\YONI\Desktop\ZHPDiag2.exe [4678331]
[MD5.FB30D948346F9367A83DFE5BAB2668F8] [SPRF][22/08/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.3 r183.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [3126944]
~ Scan Files in 00mn 03s

---\\ Scan Additionnel (O88)
Database Version : 9170 - (24/05/2012)
Clés trouvées (Keys found) : 18
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{eee6c35b-6118-11dc-9c72-001320c79847}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{eee6c35b-6118-11dc-9c72-001320c79847}] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}] =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}] =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz
[HKCU\Software\APN] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\I Want This] =>PUP.RewardsArcade
[HKCU\Software\OfferBox] =>PUP.OfferBox
[HKCU\Software\SweetIM] =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Toolbar.AskBar
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
~ Scan Additionnel in 00mn 11s

End of the scan (895 lines in 01mn 07s)(0)

bonsoir,

voici le "nouveau" zhpdiag...

Rapport de ZHPDiag v1.31.095 par Nicolas Coolman, Update du 24/05/2012
Run by YONI at 14/06/2012 01:37:56
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.

---\\ Web Browser
MSIE: Internet Explorer v

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 64-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: AMD64 Family 15 Model 107 Stepping 2, AuthenticAMD
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4093 MB (67% free)
System Restore: Inconnu (Unknown)
System drive C: has 545 GB (59%) free of 918 GB

---\\ Logged in mode
~ Computer Name: PC-DE-ISAAC
~ User Name: YONI
~ All Users Names: YONI, ISSAC, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\YONI\AppData\Roaming\
~ %Desktop% : C:\Users\YONI\Desktop\
~ %Favorites% : C:\Users\YONI\Favorites\
~ %LocalAppData% : C:\Users\YONI\AppData\Local\
~ %StartMenu% : C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 545 Go of 918 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 14 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

---\\ Security Center & Tools Informations
~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.6B08E54A451B3F95E4109DBA7E594270] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 08:10:17.) -- C:\WINDOWS\Explorer.exe [3079168]
[MD5.117EA87DF785CA1B9D821F6F213DCE07] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:50:23.) -- C:\WINDOWS\System32\Wininit.exe [123904]
[MD5.96070413E0F9620565BB06A0C4CC976E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/02/2012 - 07:34:19.) -- C:\WINDOWS\System32\wininet.dll [1147392]
[MD5.6D0773A3A65D28B663F334C90441D01A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 08:11:08.) -- C:\WINDOWS\System32\Winlogon.exe [405504]
[MD5.C4F6CE6087760AD70960C9EB130E7943] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.03/01/2012 - 15:25:21.) -- C:\WINDOWS\system32\Drivers\AFD.sys [404992]
[MD5.E68D9B3A3905619732F7FE039466A623] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 08:15:00.) -- C:\WINDOWS\system32\Drivers\atapi.sys [20952]
[MD5.B4D787DB8D30793A4D4DF9FEED18F136] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:50:39.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [90624]
[MD5.C025AA69BE3D0D25C7A2E746EF6F94FC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 06:34:39.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [79872]
[MD5.8B722BA35205C71E7951CDC4CDBADE19] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 16:14:19.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [97792]
[MD5.F942C5820205F2FB453243EDFEC82A3D] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 06:39:41.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [948736]
[MD5.CBB597659A2713CE0C9CC20C88C7591F] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:46:59.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [64000]
[MD5.B7E6212F581EA5F6AB0C3A6CEEEB89BE] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:48:45.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [115712]
[MD5.1485811B320FF8C7EDAD1CAEBB1C6C2B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:39:34.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [135680]
[MD5.FC2C792EBDDC8E28DF939D6A92C83D61] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 06:42:33.) -- C:\WINDOWS\system32\Drivers\netBT.sys [248320]
[MD5.BAC869DFB98E499BA4D9BB1FB43270E1] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 08:15:34.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [1515496]
[MD5.AECD57F94C887F58919F307C35498EA0] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 10:37:57.) -- C:\WINDOWS\system32\Drivers\Parport.sys [96768]
[MD5.AC7BC4D42A7E558718DFDEC599BBFC2C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.11/04/2009 - 06:43:38.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [124928]
[MD5.C045D1FB111C28DF0D1BE8D4BDA22C06] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:46:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [314368]
[MD5.290B6F6A0EC4FCDFC90F5CB6D7020473] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 06:42:19.) -- C:\WINDOWS\system32\Drivers\smb.sys [88064]
[MD5.458919C8C42E398DC4802178D5FFEE27] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 06:43:00.) -- C:\WINDOWS\system32\Drivers\tdx.sys [94720]
[MD5.5280AADA24AB36B01A84A6424C475C8D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 08:15:45.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [269288]
~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/151
~ Mes musiques (My Musics) : 1/668
~ Mes Videos (My Videos) : 1/14
~ Mes Favoris (My Favorites) : 1/20
~ Mes Documents (My Documents) : 1/620
~ Mon Bureau (My Desktop) : 0/1914
~ Menu demarrer (Programs) : 0/28
~ Scan Hidden Files in 00mn 02s

---\\ Processus lancés
[MD5.9A4322EE420D6FACD4D4B1FF6CB856B1] - (.Hewlett-Packard Company - hpsysdrv.) -- C:\hp\support\hpsysdrv.exe [65536] [PID.2612]
[MD5.7088B136BB58A5F95CF0DE8386CA6C0F] - (...) -- C:\hp\KBD\KbdStub.exe [65536] [PID.2620]
[MD5.00A346CE3D3701EA085E87EEF746A74A] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [638240] [PID.2948]
[MD5.CC926B0811C3FA2363C98711410FEF24] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [4540928] [PID.3888]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\SysWOW64\conime.exe [69120] [PID.3148]
~ Scan Processes Running in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Interpréteur de commandes Windows.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
~ Scan Application in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk . (.CyberLink.) -- C:\Program Files (x86)\CyberLink\DVD Suite Deluxe\PowerStarter.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\YONI\Desktop\Fichiers d'installation Norton.lnk . (...) -- C:\Users\Public\Downloads\Norton\{N360621005-SHPD-FSD25037}
O4 - Global Startup: C:\Users\YONI\Desktop\FREEBOX - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\YONI\Desktop\Winamax Poker.lnk . (...) -- C:\Program Files (x86)\Winamax Poker\Winamax Poker.exe
O4 - Global Startup: C:\Users\YONI\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk - Clé orpheline
O4 - Global Startup: C:\Users\YONI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk . (.CyberLink.) -- C:\Program Files (x86)\CyberLink\DVD Suite Deluxe\PowerStarter.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Fichiers d'installation Norton.lnk . (...) -- C:\Users\Public\Downloads\Norton\{NIS1950145-SHPD-FSD25037}
O4 - Global Startup: C:\Users\ISSAC\Desktop\FILMS DE FAMILLE - Raccourci.lnk . (...) -- C:\FILMS DE FAMILLE
O4 - Global Startup: C:\Users\ISSAC\Desktop\Launch Internet Explorer Browser (2).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Microsoft Excel.lnk . (...) -- C:\Windows\Installer\{0002040C-78E1-11D2-B60F-006097C998E7}\xlicons.exe
O4 - Global Startup: C:\Users\ISSAC\Desktop\Microsoft Word.lnk . (...) -- C:\Windows\Installer\{0002040C-78E1-11D2-B60F-006097C998E7}\wordicon.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{6D172D0A-B9F1-4046-AFAB-8599288545BF}\SafariIco.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
O4 - Global Startup: C:\Users\ISSAC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: &Recherche AOL Toolbar . (...) -- C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - (.not file.) - C:\Windows\system32\GPhotos.scr
O8 - Extra context menu item: Search the Web - (.not file.) - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
~ Scan IE Menu Contextuel in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\img24.jpg
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\img24.jpg
~ Scan Desktop Component in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HPCeeScheduleForISSAC.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{A93B2DD3-18B4-42FC-9F50-25951E79521D}.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{ED158AB0-5A8C-48E5-AA26-D69C3E5E08D9}.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{F93003A3-F032-4450-8B43-E4DEB505B211}.job
[MD5.00000000000000000000000000000000] [APT] [Norton Error Analyzer] (...) -- C:\Program Files (x86)\Norton Management\Engine\2.1.2.13\SymErr.exe (.not file.)
~ Scan Scheduled Task in 00mn 01s

---\\ Composants installés (ActiveSetup Installed Components) (O40) (None)

---\\ Logiciels installés (O42)
O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU] -- {79A765E1-C399-405B-85AF-466F52E918B0}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AOL]
[HKCU\Software\APN]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\AppDataLow\Software\I Want This]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Binary Noise]
[HKCU\Software\CanonBJ]
[HKCU\Software\CheckPrixaXPSToPDF]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallCore]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OfferBox]
[HKCU\Software\Perfect Software]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Research In Motion]
[HKCU\Software\SweetIM]
[HKCU\Software\Symantec]
[HKCU\Software\SysInternals]
[HKCU\Software\WinRAR]
[HKCU\Software\WinZip Computing]
[HKCU\Software\Wow6432Node]
[HKCU\Software\muvee Technologies]
[HKCU\Software\videofutur]
~ Scan Softwares in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 02/04/2012 - 13:28:18 - [113,566] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 03/11/2008 - 22:34:17 - [2,821] ----D C:\Program Files (x86)\AOL
O43 - CFD: 21/07/2011 - 16:55:26 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 05/01/2012 - 01:40:01 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 02/04/2012 - 13:33:55 - [0,708] ----D C:\Program Files (x86)\CheckPrixaXPSToPDF
O43 - CFD: 21/04/2011 - 11:10:28 - [47,660] ----D C:\Program Files (x86)\ClickImpots plus SCI 2005
O43 - CFD: 10/06/2012 - 17:36:51 - [800,232] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 03/11/2008 - 22:21:57 - [700,953] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 16/02/2012 - 17:19:21 - [379,021] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/05/2012 - 17:57:34 - [22,539] ----D C:\Program Files (x86)\Grisbi 0.6.0 release
O43 - CFD: 03/11/2008 - 22:33:55 - [117,668] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 03/11/2008 - 22:24:38 - [58,142] ----D C:\Program Files (x86)\HP
O43 - CFD: 03/11/2008 - 22:33:06 - [294,652] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 21/04/2011 - 11:10:19 - [59,325] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 13/04/2012 - 04:06:59 - [5,586] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 10/04/2012 - 18:08:42 - [120,831] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 25/05/2012 - 19:56:40 - [210,684] ----D C:\Program Files (x86)\Java
O43 - CFD: 13/06/2012 - 02:28:54 - [11,563] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 13/06/2012 - 02:28:54 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 06/04/2011 - 17:41:37 - [139,549] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 13/05/2012 - 14:15:53 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 03/04/2011 - 18:29:12 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 23/03/2011 - 01:20:22 - [137,975] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 22/03/2011 - 04:01:42 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 02/11/2006 - 17:07:27 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 03/11/2008 - 22:22:36 - [148,175] ----D C:\Program Files (x86)\muvee Technologies
O43 - CFD: 07/11/2011 - 19:11:55 - [5,972] ----D C:\Program Files (x86)\MyTorrentClient
O43 - CFD: 17/03/2011 - 13:15:36 - [3,183] R--AD C:\Program Files (x86)\Online Services
O43 - CFD: 25/05/2012 - 19:59:04 - [33,186] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 03/11/2008 - 22:28:20 - [90,664] ----D C:\Program Files (x86)\PC-Doctor for Windows
O43 - CFD: 05/01/2012 - 01:43:32 - [72,431] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 03/11/2008 - 22:09:20 - [56,411] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 02/11/2006 - 17:07:27 - [36,902] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 11/04/2012 - 18:35:28 - [99,831] ----D C:\Program Files (x86)\Research In Motion
O43 - CFD: 10/04/2012 - 18:11:34 - [102,601] ----D C:\Program Files (x86)\Safari
O43 - CFD: 05/11/2011 - 21:41:12 - [10,338] ----D C:\Program Files (x86)\Sling Media
O43 - CFD: 02/11/2006 - 17:36:07 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 12/06/2012 - 17:54:36 - [9,019] ----D C:\Program Files (x86)\UniOptimizer
O43 - CFD: 20/11/2011 - 16:53:41 - [88,799] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 13/05/2011 - 20:21:46 - [1,074] ----D C:\Program Files (x86)\Vidéo Futur
O43 - CFD: 20/05/2012 - 16:10:27 - [7,053] ----D C:\Program Files (x86)\Winamax Poker
O43 - CFD: 03/04/2011 - 17:22:46 - [0,970] ----D C:\Program Files (x86)\Windows Calendar
O43 - CFD: 21/01/2008 - 05:09:47 - [0,051] ----D C:\Program Files (x86)\Windows Collaboration
O43 - CFD: 04/11/2008 - 06:10:45 - [0,481] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 13/06/2012 - 03:01:05 - [178,078] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 13/04/2012 - 04:06:59 - [8,522] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 03/04/2011 - 17:22:46 - [2,874] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 02/11/2006 - 17:07:27 - [7,589] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 03/04/2011 - 17:22:45 - [12,902] ----D C:\Program Files (x86)\Windows Photo Gallery
O43 - CFD: 03/04/2011 - 18:08:37 - [0,128] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 03/04/2011 - 17:22:46 - [6,618] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 07/02/2012 - 02:38:30 - [4,008] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 11/11/2011 - 02:47:58 - [35,939] ----D C:\Program Files (x86)\WinZip
O43 - CFD: 14/06/2012 - 01:35:52 - [13,541] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 02/04/2012 - 13:28:22 - [3,652] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 30/03/2012 - 01:02:23 - [38,049] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 10/04/2012 - 18:08:03 - [142,033] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 06/04/2011 - 17:43:33 - [0,082] ----D C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 13/05/2011 - 20:21:46 - [0,086] ----D C:\Program Files (x86)\Common Files\Glowria
O43 - CFD: 03/11/2008 - 22:23:40 - [3,752] ----D C:\Program Files (x86)\Common Files\HP
O43 - CFD: 03/11/2008 - 22:12:23 - [4,903] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 13/06/2012 - 02:28:51 - [33,515] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 03/11/2008 - 22:22:19 - [28,726] ---AD C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 03/11/2008 - 22:22:06 - [0,054] ---AD C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 28/08/2011 - 16:37:07 - [273,943] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 03/11/2008 - 22:22:36 - [48,020] ----D C:\Program Files (x86)\Common Files\muvee Technologies
O43 - CFD: 11/04/2012 - 00:38:21 - [161,162] ----D C:\Program Files (x86)\Common Files\Research In Motion
O43 - CFD: 02/11/2006 - 15:33:53 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 02/11/2006 - 15:33:53 - [39,198] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 13/06/2012 - 03:21:12 - [4,315] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 09/11/2011 - 04:03:38 - [18,740] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 17/03/2011 - 18:17:11 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 05/04/2012 - 14:38:04 - [152,593] ----D C:\ProgramData\Adobe
O43 - CFD: 03/11/2008 - 22:34:17 - [13,001] ----D C:\ProgramData\AOL
O43 - CFD: 21/07/2011 - 16:55:04 - [141,357] ----D C:\ProgramData\Apple
O43 - CFD: 21/07/2011 - 16:58:20 - [145,093] ----D C:\ProgramData\Apple Computer
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Application Data
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Bureau
O43 - CFD: 20/03/2011 - 13:49:20 - [0,152] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 16/02/2012 - 11:01:55 - [0,009] ----D C:\ProgramData\CyberLink
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Documents
O43 - CFD: 23/11/2011 - 22:13:19 - [2,520] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Favoris
O43 - CFD: 25/11/2011 - 15:43:11 - [0,514] ----D C:\ProgramData\Google
O43 - CFD: 17/03/2011 - 13:08:05 - [61,969] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 03/11/2008 - 22:23:40 - [0,051] ----D C:\ProgramData\HP
O43 - CFD: 13/02/2012 - 05:12:18 - [7,875] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Menu Démarrer
O43 - CFD: 12/06/2012 - 18:23:57 - [17,059] -S--D C:\ProgramData\Microsoft
O43 - CFD: 17/03/2011 - 13:12:16 - [0] ----D C:\ProgramData\Modèles
O43 - CFD: 03/11/2008 - 22:22:33 - [0] ----D C:\ProgramData\muvee Technologies
O43 - CFD: 13/06/2012 - 03:48:50 - [29,286] ----D C:\ProgramData\Norton
O43 - CFD: 03/06/2012 - 17:24:00 - [105,983] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 03/04/2011 - 17:42:54 - [0,179] ----D C:\ProgramData\NVIDIA
O43 - CFD: 03/11/2008 - 22:28:19 - [0,001] ----D C:\ProgramData\PC-Doctor
O43 - CFD: 03/11/2008 - 22:28:19 - [1,911] ----D C:\ProgramData\PC-Doctor for Windows
O43 - CFD: 20/02/2012 - 01:56:29 - [0,000] ----D C:\ProgramData\PCSettings
O43 - CFD: 11/04/2012 - 18:35:50 - [0,054] ----D C:\ProgramData\Research In Motion
O43 - CFD: 10/06/2012 - 17:36:51 - [0] ----D C:\ProgramData\SpeedMaxPc
O43 - CFD: 23/03/2011 - 00:56:48 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 20/02/2012 - 02:02:40 - [0] ----D C:\ProgramData\Symantec
O43 - CFD: 07/05/2012 - 22:22:19 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 26/09/2011 - 04:41:06 - [1342,379] ----D C:\ProgramData\WildTangent
O43 - CFD: 31/05/2012 - 17:40:47 - [0] ----D C:\ProgramData\WindowsSearch
O43 - CFD: 11/11/2011 - 02:49:47 - [0,000] ----D C:\ProgramData\WinZip
O43 - CFD: 21/07/2011 - 16:59:00 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 09/04/2012 - 13:43:24 - [22,374] ----D C:\Users\YONI\AppData\Roaming\Adobe
O43 - CFD: 05/01/2012 - 02:44:51 - [1,351] ----D C:\Users\YONI\AppData\Roaming\Apple Computer
O43 - CFD: 11/04/2012 - 19:13:35 - [0] ----D C:\Users\YONI\AppData\Roaming\Blackberry Desktop
O43 - CFD: 22/03/2012 - 23:13:49 - [0] ----D C:\Users\YONI\AppData\Roaming\CyberLink
O43 - CFD: 02/02/2012 - 21:19:28 - [0] ----D C:\Users\YONI\AppData\Roaming\Google
O43 - CFD: 09/05/2012 - 18:46:50 - [0,004] ----D C:\Users\YONI\AppData\Roaming\Grisbi
O43 - CFD: 09/05/2012 - 18:06:54 - [0,000] ----D C:\Users\YONI\AppData\Roaming\gtk-2.0
O43 - CFD: 23/03/2011 - 00:49:33 - [0,415] ----D C:\Users\YONI\AppData\Roaming\Hewlett-Packard
O43 - CFD: 23/03/2011 - 00:47:41 - [0] ----D C:\Users\YONI\AppData\Roaming\Identities
O43 - CFD: 23/03/2011 - 00:55:18 - [0,054] ----D C:\Users\YONI\AppData\Roaming\Macromedia
O43 - CFD: 09/03/2012 - 10:28:10 - [1,070] ----D C:\Users\YONI\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 17:07:25 - [0] ----D C:\Users\YONI\AppData\Roaming\Media Center Programs
O43 - CFD: 12/06/2012 - 18:23:45 - [16,919] -S--D C:\Users\YONI\AppData\Roaming\Microsoft
O43 - CFD: 20/04/2012 - 18:38:38 - [0,005] ----D C:\Users\YONI\AppData\Roaming\muvee Technologies
O43 - CFD: 09/05/2012 - 17:48:22 - [0,000] ----D C:\Users\YONI\AppData\Roaming\PlayerPlug
O43 - CFD: 09/05/2012 - 17:48:22 - [0,011] ----D C:\Users\YONI\AppData\Roaming\PropMgrAsync
O43 - CFD: 11/04/2012 - 18:38:07 - [4,745] ----D C:\Users\YONI\AppData\Roaming\Research In Motion
O43 - CFD: 23/03/2011 - 00:48:34 - [0] ----D C:\Users\YONI\AppData\Roaming\Symantec
O43 - CFD: 13/06/2012 - 02:28:48 - [0,077] ----D C:\Users\YONI\AppData\Roaming\vlc
O43 - CFD: 24/05/2011 - 18:09:07 - [3,581] ----D C:\Users\YONI\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 22/03/2012 - 22:38:21 - [0,001] ----D C:\Users\YONI\AppData\Roaming\WildTangent
O43 - CFD: 07/02/2012 - 02:38:49 - [0,000] ----D C:\Users\YONI\AppData\Roaming\WinRAR
O43 - CFD: 24/05/2011 - 18:08:22 - [15,541] ----D C:\Users\YONI\AppData\Local\Adobe
O43 - CFD: 23/03/2011 - 00:49:08 - [0,014] ----D C:\Users\YONI\AppData\Local\AOL
O43 - CFD: 27/07/2011 - 01:28:44 - [0] ----D C:\Users\YONI\AppData\Local\Apple
O43 - CFD: 15/02/2012 - 02:10:52 - [17,678] ----D C:\Users\YONI\AppData\Local\Apple Computer
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Application Data
O43 - CFD: 11/04/2012 - 18:39:59 - [24,622] ----D C:\Users\YONI\AppData\Local\Downloaded Installations
O43 - CFD: 13/05/2011 - 20:22:07 - [0,001] ----D C:\Users\YONI\AppData\Local\Glowria
O43 - CFD: 20/04/2012 - 18:40:40 - [384,971] ----D C:\Users\YONI\AppData\Local\Google
O43 - CFD: 23/03/2011 - 00:49:36 - [0,001] ----D C:\Users\YONI\AppData\Local\Hewlett-Packard
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Historique
O43 - CFD: 20/04/2012 - 18:40:04 - [0,433] ----D C:\Users\YONI\AppData\Local\HP
O43 - CFD: 12/06/2012 - 18:23:56 - [224,359] ----D C:\Users\YONI\AppData\Local\Microsoft
O43 - CFD: 14/03/2012 - 16:24:51 - [0,159] ----D C:\Users\YONI\AppData\Local\Microsoft Games
O43 - CFD: 11/04/2012 - 18:28:58 - [1,452] ----D C:\Users\YONI\AppData\Local\Research In Motion
O43 - CFD: 14/06/2012 - 01:37:41 - [0,327] ----D C:\Users\YONI\AppData\Local\temp
O43 - CFD: 23/03/2011 - 00:47:12 - [0] ----D C:\Users\YONI\AppData\Local\Temporary Internet Files
O43 - CFD: 20/04/2012 - 18:52:13 - [0,117] ----D C:\Users\YONI\AppData\Local\VirtualStore
O43 - CFD: 12/06/2012 - 18:06:14 - [0,109] ----D C:\Users\YONI\AppData\Local\Windows Live
O43 - CFD: 30/07/2011 - 08:54:26 - [0] ----D C:\Users\YONI\AppData\Local\{002F388D-39A9-42CC-9B8A-7461C6CC7027}
O43 - CFD: 04/10/2011 - 18:06:30 - [0] ----D C:\Users\YONI\AppData\Local\{005C8A22-423F-48D4-BF22-1F477A118EA5}
O43 - CFD: 14/04/2012 - 22:17:41 - [0] ----D C:\Users\YONI\AppData\Local\{0076639F-6215-4BEA-AF3D-A30ACCE08377}
O43 - CFD: 08/12/2011 - 18:23:38 - [0] ----D C:\Users\YONI\AppData\Local\{008493D3-2F3E-479C-A6CB-0CABE762AB3B}
O43 - CFD: 05/01/2012 - 01:17:27 - [0] ----D C:\Users\YONI\AppData\Local\{00E91E28-6B98-4BA0-AE71-67C90440F259}
O43 - CFD: 16/02/2012 - 01:42:32 - [0] ----D C:\Users\YONI\AppData\Local\{0281C663-2C11-422F-A8BF-1DCBBB2870A0}
O43 - CFD: 21/04/2011 - 14:17:30 - [0] ----D C:\Users\YONI\AppData\Local\{0298C48E-14B4-4BCF-84A1-FF9F33AA7C30}
O43 - CFD: 06/09/2011 - 00:22:52 - [0] ----D C:\Users\YONI\AppData\Local\{02D23D1C-DB59-4B25-8C51-D4EE3F6B2FF1}
O43 - CFD: 10/05/2011 - 01:30:19 - [0] ----D C:\Users\YONI\AppData\Local\{037A77ED-F1D4-4DE6-B8CE-051E8ADF6263}
O43 - CFD: 10/05/2012 - 17:28:56 - [0] ----D C:\Users\YONI\AppData\Local\{0399B061-DFCB-49C1-AFF4-AF5EB0527DDF}
O43 - CFD: 30/01/2012 - 02:19:59 - [0] ----D C:\Users\YONI\AppData\Local\{03C6199B-4051-478A-8394-601B52969F3D}
O43 - CFD: 19/09/2011 - 11:19:57 - [0] ----D C:\Users\YONI\AppData\Local\{03DE8561-1723-4809-8FDA-1AD1E77D88CC}
O43 - CFD: 13/09/2011 - 01:06:26 - [0] ----D C:\Users\YONI\AppData\Local\{03EFA421-CA88-4DC7-B562-BF3FC9A51F5F}
O43 - CFD: 24/04/2011 - 20:07:09 - [0] ----D C:\Users\YONI\AppData\Local\{0466C412-2192-49E7-B0C1-2ACB84196CA1}
O43 - CFD: 15/06/2011 - 08:46:59 - [0] ----D C:\Users\YONI\AppData\Local\{04DE7713-9B0A-4931-9134-5F32F530E119}
O43 - CFD: 22/03/2012 - 08:27:14 - [0] ----D C:\Users\YONI\AppData\Local\{05E4E891-9BC3-4ADC-A66D-CCB66DB393D9}
O43 - CFD: 19/07/2011 - 09:42:20 - [0] ----D C:\Users\YONI\AppData\Local\{06773933-4DB1-4CA8-95EB-67885FE35F10}
O43 - CFD: 11/11/2011 - 02:59:25 - [0] ----D C:\Users\YONI\AppData\Local\{06E38B9A-FA36-46D9-99CA-CF6C7CA4588E}
O43 - CFD: 25/08/2011 - 15:50:53 - [0] ----D C:\Users\YONI\AppData\Local\{07F5D4D4-F506-418F-95C3-FD3BDFBC538E}
O43 - CFD: 15/05/2012 - 16:30:11 - [0] ----D C:\Users\YONI\AppData\Local\{08007AB0-0D65-43CF-AB2D-769969215DD5}
O43 - CFD: 20/04/2011 - 23:02:15 - [0] ----D C:\Users\YONI\AppData\Local\{0B0E28DC-6573-49C3-8867-A492F4EB06A1}
O43 - CFD: 06/10/2011 - 09:51:35 - [0] ----D C:\Users\YONI\AppData\Local\{0B1CC075-9EB1-45C1-BE69-DCA2EAC88D53}
O43 - CFD: 18/11/2011 - 02:44:21 - [0] ----D C:\Users\YONI\AppData\Local\{0CED1E75-23F6-464B-A378-CAB1EC889EF0}
O43 - CFD: 28/03/2012 - 23:52:04 - [0] ----D C:\Users\YONI\AppData\Local\{0F3B5192-91FD-4E5F-9ABD-E5FFDA2324C4}
O43 - CFD: 19/04/2012 - 15:40:09 - [0] ----D C:\Users\YONI\AppData\Local\{0FE88635-2641-45BF-AD88-CDF1102A07E3}
O43 - CFD: 13/06/2011 - 17:01:53 - [0] ----D C:\Users\YONI\AppData\Local\{105E33B3-B4DA-4A71-B13E-6F1F6566CEBF}
O43 - CFD: 23/01/2012 - 17:22:48 - [0] ----D C:\Users\YONI\AppData\Local\{112F27F3-8D62-4496-AEB4-765507FFBE96}
O43 - CFD: 03/01/2012 - 01:41:56 - [0] ----D C:\Users\YONI\AppData\Local\{11EDACDB-CB09-4FE0-9F6D-59CC8CC7E6D9}
O43 - CFD: 13/02/2012 - 18:37:27 - [0] ----D C:\Users\YONI\AppData\Local\{12657991-F60F-41C8-BDC9-620836523950}
O43 - CFD: 31/07/2011 - 03:24:38 - [0] ----D C:\Users\YONI\AppData\Local\{126C2C6A-CD07-4800-A60F-1B048BA53594}
O43 - CFD: 07/04/2011 - 17:14:22 - [0] ----D C:\Users\YONI\AppData\Local\{1544AD41-2B81-4D2F-AE75-86ED2A02DACF}
O43 - CFD: 17/11/2011 - 14:44:07 - [0] ----D C:\Users\YONI\AppData\Local\{15B8A955-C974-48F6-8427-42F3E7DF53EC}
O43 - CFD: 27/05/2011 - 19:54:58 - [0] ----D C:\Users\YONI\AppData\Local\{16DCFAE0-CB85-416F-B270-8F58D0D34A13}
O43 - CFD: 21/03/2012 - 17:16:00 - [0] ----D C:\Users\YONI\AppData\Local\{1789BB84-071A-4F23-ABB1-04524DFB481B}
O43 - CFD: 29/05/2011 - 17:14:25 - [0] ----D C:\Users\YONI\AppData\Local\{1A1FC443-706C-4721-8FF9-460D949267DF}
O43 - CFD: 16/01/2012 - 18:00:25 - [0] ----D C:\Users\YONI\AppData\Local\{1A807703-0E44-4F5A-8CC9-F6F0F50DFBCF}
O43 - CFD: 11/01/2012 - 10:17:53 - [0] ----D C:\Users\YONI\AppData\Local\{1AAB919C-7BC6-45A3-B458-F2E1E56F1BD3}
O43 - CFD: 15/01/2012 - 17:09:34 - [0] ----D C:\Users\YONI\AppData\Local\{1C23E195-9532-47D8-9D10-7BD2984B5051}
O43 - CFD: 18/10/2011 - 02:53:07 - [0] ----D C:\Users\YONI\AppData\Local\{1DFDFD46-EE06-49A1-87A6-CC7D5CD49925}
O43 - CFD: 23/11/2011 - 20:21:15 - [0] ----D C:\Users\YONI\AppData\Local\{1F49C9A2-28D5-4AFB-9FFE-D62FD354D315}
O43 - CFD: 15/10/2011 - 21:38:19 - [0] ----D C:\Users\YONI\AppData\Local\{1F711170-265D-4DB7-BE8D-6CB0A696A1D7}
O43 - CFD: 05/01/2012 - 01:17:17 - [0] ----D C:\Users\YONI\AppData\Local\{200B689B-032D-43A2-8AE0-3A208D13A3C4}
O43 - CFD: 09/01/2012 - 02:17:36 - [0] ----D C:\Users\YONI\AppData\Local\{20824267-4191-4A7D-8E14-737154AAC293}
O43 - CFD: 13/09/2011 - 18:00:14 - [0] ----D C:\Users\YONI\AppData\Local\{217DB7CD-9B65-4030-8F43-4223B818E272}
O43 - CFD: 19/12/2011 - 01:57:39 - [0] ----D C:\Users\YONI\AppData\Local\{23988438-8241-4480-8E0D-1C6D1469D394}
O43 - CFD: 28/11/2011 - 01:30:31 - [0] ----D C:\Users\YONI\AppData\Local\{24D99163-C151-40E9-9769-03BC3166FC55}
O43 - CFD: 18/09/2011 - 19:31:39 - [0] ----D C:\Users\YONI\AppData\Local\{24FCAC58-01F3-4774-A1A9-31BE779FD2E8}
O43 - CFD: 19/03/2012 - 18:58:08 - [0] ----D C:\Users\YONI\AppData\Local\{2572881C-4734-45E2-B405-0617D553CC03}
O43 - CFD: 09/06/2011 - 23:38:34 - [0] ----D C:\Users\YONI\AppData\Local\{25BD4377-2D7F-499D-BE11-BBD3EF5C577F}
O43 - CFD: 20/12/2011 - 17:06:21 - [0] ----D C:\Users\YONI\AppData\Local\{266CB74F-A245-4B23-AC54-B08506D6888F}
O43 - CFD: 14/11/2011 - 17:55:09 - [0] ----D C:\Users\YONI\AppData\Local\{26F0A36D-01B0-464D-8615-F86E2ECB011D}
O43 - CFD: 22/06/2011 - 18:00:06 - [0] ----D C:\Users\YONI\AppData\Local\{2741C136-47A1-4C63-8282-D21DACD661D1}
O43 - CFD: 01/05/2011 - 17:19:15 - [0] ----D C:\Users\YONI\AppData\Local\{280FDA4B-950F-498E-90A8-1FD9D88D8CE0}
O43 - CFD: 30/04/2011 - 22:26:18 - [0] ----D C:\Users\YONI\AppData\Local\{287F5096-641F-4B52-987C-A4F2F8A4849F}
O43 - CFD: 05/02/2012 - 19:05:29 - [0] ----D C:\Users\YONI\AppData\Local\{28BCF7D1-0D79-4EC8-8EB8-3EB2B7859184}
O43 - CFD: 10/09/2011 - 21:25:15 - [0] ----D C:\Users\YONI\AppData\Local\{29FB1B1D-45EB-4973-A778-8104D80D351B}
O43 - CFD: 26/06/2011 - 16:18:06 - [0] ----D C:\Users\YONI\AppData\Local\{2B35AC2A-1122-4819-9BB5-2EC105E1E587}
O43 - CFD: 11/01/2012 - 10:17:42 - [0] ----D C:\Users\YONI\AppData\Local\{2C7FFF09-0942-4699-A52C-F9A2631B7435}
O43 - CFD: 10/05/2012 - 17:29:07 - [0] ----D C:\Users\YONI\AppData\Local\{2D9C995B-756F-4C67-BBD5-4CF553E8BF76}
O43 - CFD: 02/12/2011 - 17:23:17 - [0] ----D C:\Users\YONI\AppData\Local\{312E882B-1AB5-487B-AE1B-3D4851A11D8E}
O43 - CFD: 24/04/2012 - 16:31:52 - [0] ----D C:\Users\YONI\AppData\Local\{3174483E-C469-458E-9F8D-C2C3EF259092}
O43 - CFD: 25/11/2011 - 02:19:57 - [0] ----D C:\Users\YONI\AppData\Local\{322CF943-E2B3-4192-BD1D-05A0C52051BE}
O43 - CFD: 03/10/2011 - 01:58:47 - [0] ----D C:\Users\YONI\AppData\Local\{33B5DC5D-BC19-4213-A052-C52324717197}
O43 - CFD: 30/12/2011 - 01:49:27 - [0] ----D C:\Users\YONI\AppData\Local\{341F5019-96EE-453C-AB26-6C49D9CB796D}
O43 - CFD: 03/02/2012 - 18:01:14 - [0] ----D C:\Users\YONI\AppData\Local\{3467AE56-C94F-4D27-AEDE-28E092C71454}
O43 - CFD: 21/07/2011 - 16:38:32 - [0] ----D C:\Users\YONI\AppData\Local\{348A7965-6791-4C11-BEC2-DF3915D42F0D}
O43 - CFD: 25/11/2011 - 02:20:07 - [0] ----D C:\Users\YONI\AppData\Local\{37973C09-AD48-427C-872E-CADC559A539C}
O43 - CFD: 18/11/2011 - 14:43:56 - [0] ----D C:\Users\YONI\AppData\Local\{37C87687-11AF-4305-9406-3554BE7CFDED}
O43 - CFD: 10/07/2011 - 16:12:56 - [0] ----D C:\Users\YONI\AppData\Local\{3A3C3BBB-CC82-426D-8A29-2F2A536E294D}
O43 - CFD: 14/11/2011 - 17:55:19 - [0] ----D C:\Users\YONI\AppData\Local\{3AB5053C-3D24-4022-948F-DE27112F418A}
O43 - CFD: 24/10/2011 - 16:04:53 - [0] ----D C:\Users\YONI\AppData\Local\{3AF40082-F6AF-4CA9-A652-74D088D5B2A4}
O43 - CFD: 13/02/2012 - 18:37:17 - [0] ----D C:\Users\YONI\AppData\Local\{3C906B76-C609-4F54-A5B7-843F3547CF19}
O43 - CFD: 08/11/2011 - 16:52:32 - [0] ----D C:\Users\YONI\AppData\Local\{3CC05162-6CF9-4711-A6FA-7A0F52352B69}
O43 - CFD: 13/07/2011 - 19:20:53 - [0] ----D C:\Users\YONI\AppData\Local\{3DD86559-B226-41E6-8D78-78C472D892C9}
O43 - CFD: 31/01/2012 - 00:34:35 - [0] ----D C:\Users\YONI\AppData\Local\{41335F4A-EB22-46FD-99C9-D6671D396363}
O43 - CFD: 12/02/2012 - 19:12:48 - [0] ----D C:\Users\YONI\AppData\Local\{41405D68-5416-4A3B-96E1-C2401CE5C766}
O43 - CFD: 28/03/2012 - 23:52:14 - [0] ----D C:\Users\YONI\AppData\Local\{41BA2E2C-2FAD-441C-85A7-F0CC8D888DA1}
O43 - CFD: 20/06/2011 - 23:51:11 - [0] ----D C:\Users\YONI\AppData\Local\{41E0E94E-8D15-4ED0-880A-0149F0044373}
O43 - CFD: 02/04/2012 - 01:08:35 - [0] ----D C:\Users\YONI\AppData\Local\{42B5A999-116C-411F-9F05-58CD8D2C3D92}
O43 - CFD: 09/11/2011 - 17:51:23 - [0] ----D C:\Users\YONI\AppData\Local\{42CA7F99-AD1E-46E8-9638-C12BED756524}
O43 - CFD: 12/01/2012 - 01:53:53 - [0] ----D C:\Users\YONI\AppData\Local\{434AFF2E-3FAE-41EA-B0C3-ED1E5CB0A3BB}
O43 - CFD: 12/06/2012 - 16:46:13 - [0] ----D C:\Users\YONI\AppData\Local\{441AEBC6-5768-4DD3-B9B2-6299441E9EB1}
O43 - CFD: 13/05/2012 - 16:57:57 - [0] ----D C:\Users\YONI\AppData\Local\{46BE29F2-F937-4E64-BE2D-E8BECBBBD9F2}
O43 - CFD: 13/12/2011 - 01:27:47 - [0] ----D C:\Users\YONI\AppData\Local\{481B6E35-45D7-4F3D-BAE0-5B828A0C6099}
O43 - CFD: 22/10/2011 - 20:28:02 - [0] ----D C:\Users\YONI\AppData\Local\{49C67A21-D327-47E8-AE07-E29BF55F3D55}
O43 - CFD: 18/10/2011 - 02:52:44 - [0] ----D C:\Users\YONI\AppData\Local\{49DC5BD9-5BC9-4802-92C5-806AB96AE44E}
O43 - CFD: 28/06/2011 - 06:55:54 - [0] ----D C:\Users\YONI\AppData\Local\{4A05DBFC-DC22-445D-BD8E-7666A68EEE6F}
O43 - CFD: 09/04/2012 - 14:09:03 - [0] ----D C:\Users\YONI\AppData\Local\{4B7C15CF-5F39-4B0E-BBE5-0E39FE2EC0B4}
O43 - CFD: 19/02/2012 - 18:10:56 - [0] ----D C:\Users\YONI\AppData\Local\{4BD3E6DD-F982-4A12-A3FE-3F7EDC356C95}
O43 - CFD: 06/02/2012 - 19:01:11 - [0] ----D C:\Users\YONI\AppData\Local\{50665330-F526-4DC2-8FD8-8E0EE8D34522}
O43 - CFD: 17/07/2011 - 00:18:36 - [0] ----D C:\Users\YONI\AppData\Local\{5182B3D3-3600-42C4-B0C3-9B3BA4C65DFF}
O43 - CFD: 26/04/2012 - 16:34:30 - [0] ----D C:\Users\YONI\AppData\Local\{535CD92D-1A76-4675-9A24-3AED26679BE7}
O43 - CFD: 05/10/2011 - 17:27:52 - [0] ----D C:\Users\YONI\AppData\Local\{5395763F-1FD9-41C1-A45C-43CA96BDB657}
O43 - CFD: 15/12/2011 - 17:06:41 - [0] ----D C:\Users\YONI\AppData\Local\{54207258-0FB7-4484-B497-85F3E7FD6CA6}
O43 - CFD: 18/05/2012 - 18:01:53 - [0] ----D C:\Users\YONI\AppData\Local\{54A72F84-CE38-40F4-ACBF-19AFA2C9CCAC}
O43 - CFD: 30/08/2011 - 15:39:47 - [0] ----D C:\Users\YONI\AppData\Local\{54B4FE48-7966-4C00-9ED9-46E10209364D}
O43 - CFD: 05/10/2011 - 17:27:42 - [0] ----D C:\Users\YONI\AppData\Local\{55E8A88A-A89F-45BB-9756-7C0FCE676BF2}
O43 - CFD: 03/12/2011 - 18:57:30 - [0] ----D C:\Users\YONI\AppData\Local\{57CB335B-4CE4-42C8-AFAA-B77735D6BE71}
O43 - CFD: 03/06/2011 - 20:13:07 - [0] ----D C:\Users\YONI\AppData\Local\{58B009A5-A90F-4682-B594-FBF910330DB9}
O43 - CFD: 03/07/2011 - 17:44:43 - [0] ----D C:\Users\YONI\AppData\Local\{58FDEE3E-C79C-4C73-AD33-D364EB3BF1F8}
O43 - CFD: 28/10/2011 - 01:12:24 - [0] ----D C:\Users\YONI\AppData\Local\{591384E0-11A5-4886-BA44-F5024DAA13C3}
O43 - CFD: 17/10/2011 - 04:01:13 - [0] ----D C:\Users\YONI\AppData\Local\{59375CF9-03A4-404D-B43A-292A66B256E6}
O43 - CFD: 10/02/2012 - 01:43:47 - [0] ----D C:\Users\YONI\AppData\Local\{594D69F0-0CBD-4928-B7AB-8D54FEE36544}
O43 - CFD: 03/02/2012 - 02:24:27 - [0] ----D C:\Users\YONI\AppData\Local\{595951D2-2159-4C17-9C64-401152FDAA88}
O43 - CFD: 03/10/2011 - 01:58:35 - [0] ----D C:\Users\YONI\AppData\Local\{5B21C1B2-A51E-4A72-9E5E-C819AC478165}
O43 - CFD: 29/04/2011 - 20:24:03 - [0] ----D C:\Users\YONI\AppData\Local\{5B78CE36-01C3-443B-BBA8-F9C36367AC72}
O43 - CFD: 22/10/2011 - 20:16:22 - [0] ----D C:\Users\YONI\AppData\Local\{5C147FDD-4ECA-4FF5-9602-D42EC5095E57}
O43 - CFD: 30/12/2011 - 01:49:17 - [0] ----D C:\Users\YONI\AppData\Local\{5C206E91-F624-4266-8FD8-EEBFAABFD730}
O43 - CFD: 03/01/2012 - 17:06:22 - [0] ----D C:\Users\YONI\AppData\Local\{5F214CE1-8FF5-4BD6-95CD-B110B9ABA369}
O43 - CFD: 13/05/2011 - 19:55:07 - [0] ----D C:\Users\YONI\AppData\Local\{60183221-692C-4EC7-8993-581C48E207E4}
O43 - CFD: 09/04/2011 - 21:44:49 - [0] ----D C:\Users\YONI\AppData\Local\{601A3F2C-1CFA-409E-8B71-C30CA5BF9D3A}
O43 - CFD: 14/12/2011 - 02:09:01 - [0] ----D C:\Users\YONI\AppData\Local\{615851D5-739E-43B6-BAFF-F24DDCDE2801}
O43 - CFD: 04/09/2011 - 16:50:37 - [0] ----D C:\Users\YONI\AppData\Local\{617D24E5-A0D8-433A-9097-89A12F0D1B52}
O43 - CFD: 04/06/2011 - 23:08:13 - [0] ----D C:\Users\YONI\AppData\Local\{6197A10B-54EF-406A-AC83-25229DCB47D8}
O43 - CFD: 08/05/2012 - 18:01:45 - [0] ----D C:\Users\YONI\AppData\Local\{61A9FCA4-0985-4601-823A-EE9F330E5C6B}
O43 - CFD: 18/04/2011 - 15:54:07 - [0] ----D C:\Users\YONI\AppData\Local\{624646AA-54DE-4A47-A83D-AAB27F9C5AFE}
O43 - CFD: 01/02/2012 - 01:26:36 - [0] ----D C:\Users\YONI\AppData\Local\{62DFAC11-6532-4F4E-8E92-51970C813C98}
O43 - CFD: 08/02/2012 - 19:05:05 - [0] ----D C:\Users\YONI\AppData\Local\{6455EB5D-C0DD-45AB-8ACF-473F513D522E}
O43 - CFD: 22/04/2011 - 13:12:46 - [0] ----D C:\Users\YONI\AppData\Local\{66F592E0-5FAD-4A5E-B3F2-EBA1AAA84CE9}
O43 - CFD: 22/11/2011 - 19:03:57 - [0] ----D C:\Users\YONI\AppData\Local\{67E87D10-746B-4504-9B80-2AA8615DE330}
O43 - CFD: 02/06/2011 - 17:43:41 - [0] ----D C:\Users\YONI\AppData\Local\{6967DBAC-6218-465F-A20C-405C248B4DF6}
O43 - CFD: 14/12/2011 - 02:08:50 - [0] ----D C:\Users\YONI\AppData\Local\{6C7E2786-9977-4506-A0D1-B55E141ECBDE}
O43 - CFD: 12/01/2012 - 19:06:00 - [0] ----D C:\Users\YONI\AppData\Local\{6DF4C0AA-F11C-42C6-A098-DCC58C5DF1F3}
O43 - CFD: 19/06/2011 - 17:58:44 - [0] ----D C:\Users\YONI\AppData\Local\{6E63B8AB-502D-4EF8-B599-27AE00C1E650}
O43 - CFD: 18/09/2011 - 19:31:29 - [0] ----D C:\Users\YONI\AppData\Local\{6EB82166-78AC-4FF7-B5BC-240E53469C65}
O43 - CFD: 12/05/2012 - 22:36:09 - [0] ----D C:\Users\YONI\AppData\Local\{6EDD495E-8D99-49BB-BE3E-64F1D5AC8EC0}
O43 - CFD: 04/02/2012 - 19:50:58 - [0] ----D C:\Users\YONI\AppData\Local\{6EFDBD27-EEAF-44C3-A237-7423BD399EB0}
O43 - CFD: 23/11/2011 - 07:04:43 - [0] ----D C:\Users\YONI\AppData\Local\{6F225745-48C3-46D0-8C14-1A97FA3E8861}
O43 - CFD: 21/11/2011 - 00:38:59 - [0] ----D C:\Users\YONI\AppData\Local\{6FC0FAA0-551D-4F37-9401-BB2E50D32CAF}
O43 - CFD: 28/07/2011 - 01:05:46 - [0] ----D C:\Users\YONI\AppData\Local\{6FCBD553-893F-48B2-A14B-A3ADD44AF7A9}
O43 - CFD: 03/09/2011 - 21:31:05 - [0] ----D C:\Users\YONI\AppData\Local\{6FED07AC-A0F9-47CD-948C-61EE382CBCE2}
O43 - CFD: 20/11/2011 - 12:38:16 - [0] ----D C:\Users\YONI\AppData\Local\{702DE35B-BF3D-4A41-B4AD-D3BEE494AE09}
O43 - CFD: 24/06/2011 - 20:00:52 - [0] ----D C:\Users\YONI\AppData\Local\{7047D3D0-357D-494C-B668-484800AD8D6B}
O43 - CFD: 22/11/2011 - 19:04:07 - [0] ----D C:\Users\YONI\AppData\Local\{7097BD6A-137A-4BCD-85DD-9F072CE7C9E4}
O43 - CFD: 16/05/2011 - 18:07:29 - [0] ----D C:\Users\YONI\AppData\Local\{7103FD1F-E8B2-4992-8A88-3C7E1A3A4742}
O43 - CFD: 02/02/2012 - 15:57:07 - [0] ----D C:\Users\YONI\AppData\Local\{717B9824-D946-4BC5-B21D-B0E6EFD1DCC9}
O43 - CFD: 18/10/2011 - 15:50:08 - [0] ----D C:\Users\YONI\AppData\Local\{7214A942-F0E6-4A51-AAA3-29BFFEAFDAC5}
O43 - CFD: 23/08/2011 - 17:48:31 - [0] ----D C:\Users\YONI\AppData\Local\{72F90F85-F387-420D-835A-37F889B69533}
O43 - CFD: 11/04/2012 - 12:51:47 - [0] ----D C:\Users\YONI\AppData\Local\{7406EFC1-1B44-4FBE-9FF2-0DF1D63C90F6}
O43 - CFD: 12/06/2012 - 16:46:01 - [0] ----D C:\Users\YONI\AppData\Local\{742626E8-3050-463D-AFB6-7A2FA3F1F849}
O43 - CFD: 20/12/2011 - 02:15:02 - [0] ----D C:\Users\YONI\AppData\Local\{74FF935A-2616-4E6A-A5BF-75C2381C7CF3}
O43 - CFD: 11/12/2011 - 17:45:02 - [0] ----D C:\Users\YONI\AppData\Local\{75B51161-C824-4947-907B-BE281B452070}
O43 - CFD: 19/02/2012 - 18:11:05 - [0] ----D C:\Users\YONI\AppData\Local\{76BB2323-896E-4683-A673-1CE85EBCA2A2}
O43 - CFD: 10/10/2011 - 17:07:25 - [0] ----D C:\Users\YONI\AppData\Local\{76BB7973-504B-41AC-9322-7635558E104E}
O43 - CFD: 16/04/2011 - 21:53:04 - [0] ----D C:\Users\YONI\AppData\Local\{76C86B6B-0663-4740-967A-144C0B6A088E}
O43 - CFD: 28/08/2011 - 16:29:09 - [0] ----D C:\Users\YONI\AppData\Local\{7BA3B71E-1EFB-41A7-BE51-EB5651A311B1}
O43 - CFD: 28/11/2011 - 01:30:15 - [0] ----D C:\Users\YONI\AppData\Local\{7CE061BB-2B0F-4BFD-9490-13C643108906}
O43 - CFD: 05/05/2012 - 22:29:19 - [0] ----D C:\Users\YONI\AppData\Local\{7DCDF011-4ADC-4C96-AD72-2D2E01BACA3D}
O43 - CFD: 22/08/2011 - 23:58:09 - [0] ----D C:\Users\YONI\AppData\Local\{7EABBD7C-DB67-4A44-A86E-CDC01A1050E0}
O43 - CFD: 10/09/2011 - 21:25:05 - [0] ----D C:\Users\YONI\AppData\Local\{7EE4B71E-8FC0-4B9D-A2A3-06F96CC5C11C}
O43 - CFD: 13/05/2012 - 16:58:08 - [0] ----D C:\Users\YONI\AppData\Local\{7EF23F27-FEC2-40EE-9B9F-E6BAFF68FE22}
O43 - CFD: 10/01/2012 - 00:53:04 - [0] ----D C:\Users\YONI\AppData\Local\{7F9C2031-322C-43DD-B90D-06D184AD2A73}
O43 - CFD: 09/09/2011 - 19:16:44 - [0] ----D C:\Users\YONI\AppData\Local\{7FADD53E-73D1-4C4B-B389-FF20E20B2242}
O43 - CFD: 06/09/2011 - 18:01:08 - [0] ----D C:\Users\YONI\AppData\Local\{804D3E9D-9C84-428E-951E-FA2494EDC1FA}
O43 - CFD: 06/09/2011 - 18:00:52 - [0] ----D C:\Users\YONI\AppData\Local\{80EDF870-9A09-48D7-AA9E-68209FB1C5EB}
O43 - CFD: 05/05/2012 - 22:29:30 - [0] ----D C:\Users\YONI\AppData\Local\{81A86DAB-C3BF-48AE-BA25-E8BD439C51EA}
O43 - CFD: 28/06/2011 - 23:58:22 - [0] ----D C:\Users\YONI\AppData\Local\{81E16459-1688-4BC0-93AB-6328BF482A75}
O43 - CFD: 24/05/2011 - 16:49:10 - [0] ----D C:\Users\YONI\AppData\Local\{820E5807-8949-4BF4-A50B-B7AE95C2B0E1}
O43 - CFD: 10/04/2011 - 17:20:46 - [0] ----D C:\Users\YONI\AppData\Local\{822074BF-7973-448F-BEB3-A60384000B62}
O43 - CFD: 19/12/2011 - 01:57:29 - [0] ----D C:\Users\YONI\AppData\Local\{84380128-173D-4F03-A5ED-5A0852A95FF6}
O43 - CFD: 15/05/2011 - 16:45:28 - [0] ----D C:\Users\YONI\AppData\Local\{84712B40-5304-40BD-B013-A9D484FE7999}
O43 - CFD: 07/02/2012 - 17:45:06 - [0] ----D C:\Users\YONI\AppData\Local\{861A9F6B-4F3A-427A-95A5-8388C495AB0C}
O43 - CFD: 16/06/2011 - 00:08:31 - [0] ----D C:\Users\YONI\AppData\Local\{867FD9D6-81A7-4BDC-868E-E819E1606928}
O43 - CFD: 27/07/2011 - 01:18:40 - [0] ----D C:\Users\YONI\AppData\Local\{89503BDC-043A-4904-9E04-860A6D0FE969}
O43 - CFD: 30/05/2011 - 23:55:31 - [0] ----D C:\Users\YONI\AppData\Local\{895954E7-B482-43E4-A58C-72DD3CAAC5F9}
O43 - CFD: 03/09/2011 - 21:30:54 - [0] ----D C:\Users\YONI\AppData\Local\{89FFA786-9A09-4E7F-8778-F5008828E10B}
O43 - CFD: 18/05/2012 - 18:01:34 - [0] ----D C:\Users\YONI\AppData\Local\{8AA24C07-7730-44E4-89FB-9958AB161F35}
O43 - CFD: 06/02/2012 - 19:01:01 - [0] ----D C:\Users\YONI\AppData\Local\{8B2CD068-F731-4A35-902A-3C2666B2F542}
O43 - CFD: 03/01/2012 - 01:42:06 - [0] ----D C:\Users\YONI\AppData\Local\{8C5A3428-79A2-45E4-81D9-2889F656EB22}
O43 - CFD: 01/07/2011 - 19:36:13 - [0] ----D C:\Users\YONI\AppData\Local\{8CA78003-60AC-42D0-963E-AE88273A6481}
O43 - CFD: 22/09/2011 - 00:43:08 - [0] ----D C:\Users\YONI\AppData\Local\{8CFA145D-C1F1-4027-9BA7-014523EBAFE6}
O43 - CFD: 24/07/2011 - 13:55:26 - [0] ----D C:\Users\YONI\AppData\Local\{8D73D527-3029-4076-BC4A-C03E1910EC4D}
O43 - CFD: 21/11/2011 - 00:38:49 - [0] ----D C:\Users\YONI\AppData\Local\{90AF2B51-FA66-4A0D-9756-CA683BE2B2BD}
O43 - CFD: 17/11/2011 - 14:44:17 - [0] ----D C:\Users\YONI\AppData\Local\{92DB1B7C-855F-4163-BD63-8D67CC9D909C}
O43 - CFD: 23/11/2011 - 07:04:33 - [0] ----D C:\Users\YONI\AppData\Local\{9401AA8F-20B8-4C23-B725-2DF85BD94D49}
O43 - CFD: 19/04/2012 - 15:40:20 - [0] ----D C:\Users\YONI\AppData\Local\{941A08EF-3FBD-4EF1-97F2-7C6573FF1DB0}
O43 - CFD: 08/07/2011 - 20:09:15 - [0] ----D C:\Users\YONI\AppData\Local\{948246C3-208C-46B6-8F30-50C1DD938710}
O43 - CFD: 27/08/2011 - 21:45:50 - [0] ----D C:\Users\YONI\AppData\Local\{952A45C2-9F99-4A11-B3CA-4E012D9C774F}
O43 - CFD: 12/01/2012 - 01:54:03 - [0] ----D C:\Users\YONI\AppData\Local\{9532E533-9227-4C00-BA09-9089A5AC09B5}
O43 - CFD: 09/12/2011 - 06:24:33 - [0] ----D C:\Users\YONI\AppData\Local\{97215967-267D-49A6-B1DD-9178E511364A}
O43 - CFD: 11/11/2011 - 02:59:15 - [0] ----D C:\Users\YONI\AppData\Local\{974A5235-0C61-421C-9020-105DF5BBE093}
O43 - CFD: 26/04/2012 - 16:34:43 - [0] ----D C:\Users\YONI\AppData\Local\{978F5D67-6697-4EE8-B2A2-C4996DA26A32}
O43 - CFD: 06/02/2012 - 07:00:34 - [0] ----D C:\Users\YONI\AppData\Local\{97B0C3A6-6706-469E-82DE-FEF6CA1CDA37}
O43 - CFD: 07/11/2011 - 17:32:05 - [0] ----D C:\Users\YONI\AppData\Local\{9916D9A8-A61D-4B00-A567-CC999B782567}
O43 - CFD: 23/11/2011 - 20:21:05 - [0] ----D C:\Users\YONI\AppData\Local\{9A1BC184-EA4E-495A-BDAF-36CAC0842144}
O43 - CFD: 19/05/2011 - 16:28:57 - [0] ----D C:\Users\YONI\AppData\Local\{9A38F199-676B-4D66-8406-9F4E6CCA0D9B}
O43 - CFD: 28/05/2011 - 22:54:08 - [0] ----D C:\Users\YONI\AppData\Local\{9A48DB11-B52E-44C7-AA4E-984477E51450}
O43 - CFD: 26/08/2011 - 16:19:14 - [0] ----D C:\Users\YONI\AppData\Local\{9ABC067A-8CD7-49C3-B7DE-0CC305499E50}
O43 - CFD: 19/10/2011 - 11:07:30 - [0] ----D C:\Users\YONI\AppData\Local\{9B364896-7987-44BE-9E8B-047CDF5296C7}
O43 - CFD: 10/11/2011 - 14:58:51 - [0] ----D C:\Users\YONI\AppData\Local\{9D198BEE-794E-43AB-B113-CE8F860B94D0}
O43 - CFD: 20/05/2011 - 20:31:23 - [0] ----D C:\Users\YONI\AppData\Local\{9D56DCD6-4A93-41AE-A571-472D68D801C0}
O43 - CFD: 31/07/2011 - 16:40:17 - [0] ----D C:\Users\YONI\AppData\Local\{9DCF4635-52D6-44AD-9652-BC360B57B13C}
O43 - CFD: 13/11/2011 - 17:47:52 - [0] ----D C:\Users\YONI\AppData\Local\{9E00790B-AC5C-4264-BB79-89F31A4CFC11}
O43 - CFD: 08/05/2012 - 18:01:56 - [0] ----D C:\Users\YONI\AppData\Local\{9E47CE53-A20C-48CE-85A2-BD96CA09562E}
O43 - CFD: 31/10/2011 - 02:03:15 - [0] ----D C:\Users\YONI\AppData\Local\{9ED221C4-B156-426E-847F-082E2BBE0248}
O43 - CFD: 13/12/2011 - 01:27:56 - [0] ----D C:\Users\YONI\AppData\Local\{9F18DBA7-74B3-417E-BC09-752ECE5A04FA}
O43 - CFD: 09/09/2011 - 19:17:14 - [0] ----D C:\Users\YONI\AppData\Local\{9FCF413E-3B6F-4091-AD3A-FC5C57AE4CF4}
O43 - CFD: 25/11/2011 - 15:15:19 - [0] ----D C:\Users\YONI\AppData\Local\{A0145137-98CC-4409-AEA9-A66761C9286B}
O43 - CFD: 13/11/2011 - 17:47:42 - [0] ----D C:\Users\YONI\AppData\Local\{A366BBC3-66B0-432F-AA33-ABC058BE3184}
O43 - CFD: 06/01/2012 - 03:18:24 - [0] ----D C:\Users\YONI\AppData\Local\{A3747C41-0CB7-4205-9E2A-23C84701C791}
O43 - CFD: 20/01/2012 - 02:09:22 - [0] ----D C:\Users\YONI\AppData\Local\{A3C194C6-199C-4541-8C86-529016E6FD03}
O43 - CFD: 15/02/2012 - 01:36:19 - [0] ----D C:\Users\YONI\AppData\Local\{A41D34B8-B0C8-46F9-A303-E2D1691A9F04}
O43 - CFD: 24/04/2012 - 16:32:11 - [0] ----D C:\Users\YONI\AppData\Local\{A58D4067-A921-41F8-90DA-7BE228CBC21E}
O43 - CFD: 01/08/2011 - 21:34:31 - [0] ----D C:\Users\YONI\AppData\Local\{A5BDAF5D-98EC-43A9-9171-D0B6DF001453}
O43 - CFD: 18/11/2011 - 14:44:06 - [0] ----D C:\Users\YONI\AppData\Local\{A6EDA0AF-F012-483A-8102-91236344B3BE}
O43 - CFD: 28/04/2011 - 16:11:21 - [0] ----D C:\Users\YONI\AppData\Local\{A6F651C1-9AE7-4494-A71A-C7AEA0A30ECA}
O43 - CFD: 01/01/2012 - 03:18:44 - [0] ----D C:\Users\YONI\AppData\Local\{A77BC844-9F86-40E5-BB04-708ADE1BFF34}
O43 - CFD: 04/05/2011 - 18:30:13 - [0] ----D C:\Users\YONI\AppData\Local\{A868FFC2-7894-4994-9E5F-4193BC39FA58}
O43 - CFD: 04/10/2011 - 18:06:17 - [0] ----D C:\Users\YONI\AppData\Local\{A8CA346D-5E01-4CB5-BBBF-AC122765529A}
O43 - CFD: 05/11/2011 - 21:33:11 - [0] ----D C:\Users\YONI\AppData\Local\{AB909921-1024-451F-A335-A06E151190DA}
O43 - CFD: 16/02/2012 - 01:42:42 - [0] ----D C:\Users\YONI\AppData\Local\{ABCF681B-2B1B-497D-B7F9-D681651307A0}
O43 - CFD: 07/12/2011 - 01:08:34 - [0] ----D C:\Users\YONI\AppData\Local\{AC7D3B71-DF29-45DA-AAA0-DD2822B708D6}
O43 - CFD: 23/06/2011 - 17:42:37 - [0] ----D C:\Users\YONI\AppData\Local\{AC918DBC-F821-483D-8D23-8C2DBAE07772}
O43 - CFD: 04/09/2011 - 16:50:46 - [0] ----D C:\Users\YONI\AppData\Local\{ACA926EA-9533-47A0-BA98-6DFF34DB2595}
O43 - CFD: 13/04/2011 - 19:20:22 - [0] ----D C:\Users\YONI\AppData\Local\{ACF61056-4CE1-4926-AF5B-F0615A460E79}
O43 - CFD: 28/07/2011 - 16:20:07 - [0] ----D C:\Users\YONI\AppData\Local\{AD90023B-B341-4AD4-905E-695E4D466BE2}
O43 - CFD: 17/10/2011 - 04:01:12 - [0] ----D C:\Users\YONI\AppData\Local\{AEC49BE8-E3C1-4C15-9143-DB86557E72D2}
O43 - CFD: 06/09/2011 - 00:22:36 - [0] ----D C:\Users\YONI\AppData\Local\{AFF8C736-7CBE-4833-8651-89419789B3B0}
O43 - CFD: 20/12/2011 - 17:06:11 - [0] ----D C:\Users\YONI\AppData\Local\{B14E2047-EB4D-4E2E-9363-96A52E45A4F5}
O43 - CFD: 24/08/2011 - 17:30:01 - [0] ----D C:\Users\YONI\AppData\Local\{B24E1A22-6D34-4F47-B3DB-DEEE9B80225D}
O43 - CFD: 13/11/2011 - 04:38:17 - [0] ----D C:\Users\YONI\AppData\Local\{B3822E7F-2359-4C7E-992B-F4AC6FF5E354}
O43 - CFD: 10/11/2011 - 14:59:01 - [0] ----D C:\Users\YONI\AppData\Local\{B441DE96-EEA3-4450-B1CC-3ED1D321939D}
O43 - CFD: 20/12/2011 - 02:14:52 - [0] ----D C:\Users\YONI\AppData\Local\{B6C5F37A-1D7A-4149-801C-071CE7515C3B}
O43 - CFD: 08/02/2012 - 19:04:49 - [0] ----D C:\Users\YONI\AppData\Local\{B6C85545-3047-4070-8030-10A28211C39B}
O43 - CFD: 28/08/2011 - 16:28:55 - [0] ----D C:\Users\YONI\AppData\Local\{B6D491F0-6A37-4AB5-A9C8-F0AA4BDFE6FC}
O43 - CFD: 15/10/2011 - 21:38:06 - [0] ----D C:\Users\YONI\AppData\Local\{B9188186-3E12-4F35-BA16-4E30F1EB60C0}
O43 - CFD: 23/01/2012 - 17:22:58 - [0] ----D C:\Users\YONI\AppData\Local\{B976D14E-7E24-4779-8009-4BFBBD524574}
O43 - CFD: 24/10/2011 - 16:05:12 - [0] ----D C:\Users\YONI\AppData\Local\{BBB17C44-A9C0-4063-9243-8481F68A56E6}
O43 - CFD: 18/07/2011 - 21:42:09 - [0] ----D C:\Users\YONI\AppData\Local\{BC74DCA6-E407-4B0F-823A-25AB9F3CE874}
O43 - CFD: 15/07/2011 - 01:09:53 - [0] ----D C:\Users\YONI\AppData\Local\{BC9D7F43-9ABC-4B9E-BFDB-C1CD0AFE5955}
O43 - CFD: 26/01/2012 - 19:06:31 - [0] ----D C:\Users\YONI\AppData\Local\{BFDBDAE0-9322-4F69-8755-6EBBC4EA4B24}
O43 - CFD: 22/03/2012 - 22:14:18 - [0] ----D C:\Users\YONI\AppData\Local\{C011932F-295C-42C4-B10B-7873BAF4A232}
O43 - CFD: 12/02/2012 - 19:12:37 - [0] ----D C:\Users\YONI\AppData\Local\{C09E8CD7-B310-4577-931A-341B78231BDA}
O43 - CFD: 25/12/2011 - 17:55:36 - [0] ----D C:\Users\YONI\AppData\Local\{C09EC5F3-C526-4E14-92D6-CB4604D285A2}
O43 - CFD: 05/08/2011 - 16:47:39 - [0] ----D C:\Users\YONI\AppData\Local\{C4808907-9210-41DB-ABF0-9C1BC272B450}
O43 - CFD: 13/09/2011 - 01:06:35 - [0] ----D C:\Users\YONI\AppData\Local\{C4D1B672-5888-4DBF-8B12-FDBCC73699BC}
O43 - CFD: 08/12/2011 - 18:23:48 - [0] ----D C:\Users\YONI\AppData\Local\{C528E0C5-0238-4AC6-94D8-B7C6880559F1}
O43 - CFD: 20/11/2011 - 12:38:03 - [0] ----D C:\Users\YONI\AppData\Local\{C7800A5F-7A98-40ED-BD99-779A0683E4CC}
O43 - CFD: 19/03/2012 - 18:58:18 - [0] ----D C:\Users\YONI\AppData\Local\{C7951B0F-14C3-449D-971F-5E5652EE66E2}
O43 - CFD: 15/05/2012 - 16:30:22 - [0] ----D C:\Users\YONI\AppData\Local\{C830E31C-9B55-459D-A3FF-A16C1CE5D18A}
O43 - CFD: 07/06/2011 - 20:08:25 - [0] ----D C:\Users\YONI\AppData\Local\{C8F5B9F4-13AF-4962-BA78-D2C209907EE0}
O43 - CFD: 31/10/2011 - 02:03:28 - [0] ----D C:\Users\YONI\AppData\Local\{C9401205-5B9C-49AD-BF47-2109B70A6EB7}
O43 - CFD: 12/06/2012 - 17:24:12 - [0] ----D C:\Users\YONI\AppData\Local\{C955D77A-D639-4935-8696-BF6ACF9A7082}
O43 - CFD: 18/10/2011 - 15:49:56 - [0] ----D C:\Users\YONI\AppData\Local\{CB9D21B5-DEF5-43B3-9DCD-1500820AB9DA}
O43 - CFD: 07/11/2011 - 17:31:55 - [0] ----D C:\Users\YONI\AppData\Local\{CC6F6919-1784-4DFD-AFD6-FA4AE34268EA}
O43 - CFD: 05/12/2011 - 02:21:26 - [0] ----D C:\Users\YONI\AppData\Local\{CCFC7633-9A0F-4A29-A040-140CF3522F5B}
O43 - CFD: 19/09/2011 - 11:19:47 - [0] ----D C:\Users\YONI\AppData\Local\{CD104032-EE00-4848-A354-891524F83824}
O43 - CFD: 17/02/2012 - 01:20:53 - [0] ----D C:\Users\YONI\AppData\Local\{CE5E2471-61A2-43A3-BEFC-5CC872AF97BE}
O43 - CFD: 01/08/2011 - 09:33:38 - [0] ----D C:\Users\YONI\AppData\Local\{CEE61169-E749-4722-84FF-79E2104861D6}
O43 - CFD: 25/11/2011 - 15:15:09 - [0] ----D C:\Users\YONI\AppData\Local\{D1696B6D-911F-49FE-8FA6-E593E1654EB5}
O43 - CFD: 22/08/2011 - 12:34:35 - [0] ----D C:\Users\YONI\AppData\Local\{D18393E8-1BE6-4F4C-9B9C-A131B1888352}
O43 - CFD: 14/05/2011 - 22:30:19 - [0] ----D C:\Users\YONI\AppData\Local\{D379793C-D721-4EDA-A890-03088362FDAE}
O43 - CFD: 20/07/2011 - 00:42:24 - [0] ----D C:\Users\YONI\AppData\Local\{D4812DAA-6506-4B4F-AEB9-24B98327B9AC}
O43 - CFD: 16/11/2011 - 03:08:20 - [0] ----D C:\Users\YONI\AppData\Local\{D52EF452-224E-43DC-A713-558006E515B2}
O43 - CFD: 27/12/2011 - 17:29:16 - [0] ----D C:\Users\YONI\AppData\Local\{D589508F-0568-454B-B703-48B8C3F3A1F9}
O43 - CFD: 29/03/2012 - 11:52:28 - [0] ----D C:\Users\YONI\AppData\Local\{D7137D1A-ACF8-4C3A-BB6E-28664874EBC5}
O43 - CFD: 20/09/2011 - 23:51:48 - [0] ----D C:\Users\YONI\AppData\Local\{D716AF0E-BCDC-4C97-BCB5-F253C7BDEE1B}
O43 - CFD: 18/07/2011 - 09:41:57 - [0] ----D C:\Users\YONI\AppData\Local\{D7329824-0D92-45C7-85EE-70F388932C2D}
O43 - CFD: 30/01/2012 - 02:20:09 - [0] ----D C:\Users\YONI\AppData\Local\{D81586B4-8A80-4A17-B33E-3A3C6338AF6E}
O43 - CFD: 10/10/2011 - 17:07:13 - [0] ----D C:\Users\YONI\AppData\Local\{D98376EA-7141-488C-B5C3-D36356C196BC}
O43 - CFD: 22/08/2011 - 23:58:20 - [0] ----D C:\Users\YONI\AppData\Local\{D9E0A902-EEF2-4AC4-9842-26051F515DCC}
O43 - CFD: 13/11/2011 - 04:38:28 - [0] ----D C:\Users\YONI\AppData\Local\{DA2B5D71-EAE2-4CD3-BA01-11D95D974C6F}
O43 - CFD: 12/06/2012 - 17:24:23 - [0] ----D C:\Users\YONI\AppData\Local\{DC7F1997-812A-4A88-9FC3-19424C78708B}
O43 - CFD: 23/04/2012 - 15:32:13 - [0] ----D C:\Users\YONI\AppData\Local\{DE8B89A4-6843-49C4-9985-63D343E02BB6}
O43 - CFD: 21/03/2012 - 17:15:51 - [0] ----D C:\Users\YONI\AppData\Local\{DF550B04-F5C0-429E-AA01-F4F2E430A74D}
O43 - CFD: 15/02/2012 - 01:36:29 - [0] ----D C:\Users\YONI\AppData\Local\{E0DF914F-EA11-4A1A-B3A9-42058886F8CF}
O43 - CFD: 24/08/2011 - 17:29:52 - [0] ----D C:\Users\YONI\AppData\Local\{E15EC753-816B-4D2F-8805-6FEF93E15A8F}
O43 - CFD: 09/12/2011 - 06:24:49 - [0] ----D C:\Users\YONI\AppData\Local\{E1A5E936-3427-47E6-ABF4-48C2232C6B7C}
O43 - CFD: 26/01/2012 - 19:06:44 - [0] ----D C:\Users\YONI\AppData\Local\{E30ACBC2-176E-438C-9C46-22B181AE181A}
O43 - CFD: 12/05/2012 - 22:35:58 - [0] ----D C:\Users\YONI\AppData\Local\{E37A8AF5-0F46-45CE-BC91-432D85DE1535}
O43 - CFD: 03/01/2012 - 17:06:33 - [0] ----D C:\Users\YONI\AppData\Local\{E3DDC194-1CBA-4B87-9CC2-2FF2AE6FC447}
O43 - CFD: 27/08/2011 - 21:45:38 - [0] ----D C:\Users\YONI\AppData\Local\{E402924D-53DB-456A-A686-A5DE6134A61A}
O43 - CFD: 22/04/2012 - 16:30:55 - [0] ----D C:\Users\YONI\AppData\Local\{E480ED3B-26F5-4F74-9C2F-169E48E06795}
O43 - CFD: 10/04/2011 - 17:20:48 - [0] ----D C:\Users\YONI\AppData\Local\{E6DE4DE6-3057-419C-84B5-5553E7A71CC7}
O43 - CFD: 18/10/2011 - 00:54:29 - [0] ----D C:\Users\YONI\AppData\Local\{E6E1589F-7973-468D-A4B0-FE5D6960F45A}
O43 - CFD: 25/08/2011 - 15:50:43 - [0] ----D C:\Users\YONI\AppData\Local\{E93F47FC-104C-4754-9475-2A14EE879F6F}
O43 - CFD: 20/09/2011 - 23:51:29 - [0] ----D C:\Users\YONI\AppData\Local\{EA3A8D20-D668-4A3B-9751-

tu as du lire en haut de ce message :
https://forums.commentcamarche.net/forum/affich-25229268-virus-rundll#8

je te l'ai bien expliqué pourtant !

le point retours est très difficiel,

maintenant, il fat voir si ton pc est un pc de marque et éventuellement lancer une répartion de système, ou lancer une répartion avec un DVD de windows !

bonsoir,

desolé de te dire ça mais mon pc a encore une fois les symptomes du nvcpl et plus aucuns logiciels ne fonctionne j'ai meme essayé de faire 2 restauration de systeme a la date ou tu me l avais demandé mais elles ont echouées pourquoi et comment je ne sais pas du tout pourtant j ai juste suivi les directives...

je crois bien que je vais aller m'acheter un disque dur externe pour tout sauvegarder et formater mon disque dur... je crois que c'est la meilleur solution

oupsss !

j'avais pas vu que c'était payant !

en gros, il y a un confli entre deux verrsions de IE sur ton pc !

il faut voir dans la liste des programmes sur ton pc, combien de versions d'internet explorer existe sur ton pc !

quit à les désinstaller, puis les réinstaller depuis le site de Microsoft car tu en auras besoin pour les mises à jour de windows !

pour info, il n'y a que IE qui te donne accès aux mises à jour de windows !

autrement, essaie ceci (je n'ai pas télécharer pour voir si gratuit ou pas ) :

http://www.iobit.com/exedll/ie4uinit-exe.html

c'est surement efficace mais il n'existe pas une solution gratuite... c'est 40 €

bonsoir,

aide toi de cette page pour corriger le truc :

http://www.microsoftsafetyscanner.com/fr-be/reparer-erreurs-gratuit-telecharge/ie4uinit.exe.html

bonjour,

j ai bien effectué le delfix qui m'a supprimé combofix.

j ai lancé la mise a jour norton et lancé un scan aussi tout se passe bien mais le probleme d'ouverture d'une autre session invité est toujours le même. dois je mettre toutes les sessions en tant qu'administrateur ? car il me marque :

ie4uinit.exe - erreur d'application

l'application n'a pas réussi à s'initialisé correctement ( 0xc0000022). cliquer sur ok pour arreter l'application...

bonjour,

ok,

as tu accès à Norton 360 ?

si oui, repassé un coup de Delfix pour désinstaller Combofix !

https://forums.commentcamarche.net/forum/affich-25229268-virus-rundll?full#20

puis passe directement à la mise à jour de norton, puis lance un scan :D

je n arrivais pas a le desinstaller car je n etais pas administrateur mais c bon speedmax est desinstaller et je me suis mis en administrateur

pour info pas de beug au redemarrage je pense sans trop m avancer soit qu on a fini soit qu on est sur la bonne voie lol